last executing test programs:

23.554539735s ago: executing program 2 (id=5631):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xb6}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

23.511802636s ago: executing program 2 (id=5632):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
close(r0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="720ac4ff000000007110c4000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x4043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x20000884)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r2], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0xad)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000500)={'sit0\x00', <r9=>r6, 0x40, 0x700, 0x9, 0x0, {{0x1e, 0x4, 0x2, 0x4, 0x78, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @remote, {[@end, @generic={0x44, 0x8, "04cbd334b86c"}, @ssrr={0x89, 0x1b, 0x38, [@empty, @empty, @remote, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp={0x44, 0x8, 0x1e, 0x0, 0x0, [0x3]}, @rr={0x7, 0x13, 0xec, [@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0x8f, 0x3, 0xb, [{@multicast1, 0x1}, {@remote, 0x9}, {@multicast1, 0xfffffffc}, {@remote, 0x1}]}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000880)={&(0x7f0000000100), 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44050}, 0x20000840)
r10 = socket(0x2, 0x80805, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={<r12=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={<r13=>r12, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000300)={r13, 0xf}, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r14, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @netrom={'nr', 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

23.477564421s ago: executing program 2 (id=5634):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x801, &(0x7f0000000100)=0xfffffdb4)

23.403090054s ago: executing program 2 (id=5635):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4)
sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a00", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r6 = socket(0x1e, 0x1, 0x0)
sendto$packet(r6, 0x0, 0xffffffffffffff5a, 0x842, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'veth1_to_batadv\x00', 0x1})
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

19.112967915s ago: executing program 2 (id=5660):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000140)=0xfb78, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = socket(0x10, 0x3, 0x0)
accept4$unix(r4, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x20000450)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r6=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000002580)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000024c0)=[{0x0}, {0x0}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002500)=""/85, 0x55}, 0x100)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28)
sendmsg$inet(r8, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x40)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x762d1000)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x1, 0x0, 0x0, 0x8, 0x30015}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff5876a326cf6f9901e90703a3e0116bf9b3ef"], 0x5c}}, 0x0)
bind$802154_raw(r9, &(0x7f0000000240)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={r6, 0x2, 0x1}, 0x8)
ppoll(&(0x7f0000000000)=[{r4, 0x8463}], 0x1, 0x0, 0x0, 0x0)
close(r3)

18.17020033s ago: executing program 1 (id=5664):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x4}, 0x32, 0x0, 0x3, 0x8, 0xc, 'syz1\x00', "b99856e9fda6e50842472fb9440ce2ba677034784c8aa7ee05224df2ccae2530", "2a905bf4d16bf5089a287694715d2be8b10a5feadc069a301c54b2b3f126b61e", [{0x9, 0x80, {0x0, 0xfac}}, {0x3, 0x8, {0x2, 0x8}}, {0x400, 0xe62, {0x1, 0x9}}, {0x400, 0x7, {0x0, 0x800}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x4, {0x2, 0x5}}, {0x8000, 0xfee, {0x3, 0x6}}, {0x19, 0x4, {0x1, 0x80000000}}, {0x1, 0x1, {0x2, 0x6}}, {0x6, 0x7, {0x1, 0x2}}, {0x7, 0x7, {0x2, 0x10000}}, {0xff9, 0x9, {0x3, 0x7f}}, {0x1, 0x5, {0x1, 0xcaea}}, {0x6, 0x4, {0x6687cce33e6a29f2, 0x8}}, {0xc, 0x9, {0x1, 0x5}}, {0x4, 0x1, {0x1, 0xaf91}}, {0x0, 0xe502, {0x1, 0x2}}, {0x200, 0x9, {0x3, 0x7fff}}, {0xf000, 0x3, {0x2, 0x1}}, {0x12, 0x3, {0x0, 0x10000}}, {0xe9, 0x0, {0x3, 0x4}}, {0x2, 0x8, {0x0, 0xb}}, {0xfff7, 0x2, {0x1, 0x6}}, {0x9, 0x1, {0x2, 0x401}}, {0x7, 0xd, {0x0, 0x5}}, {0x8, 0xffff, {0x2, 0x6}}, {0x5, 0xc92a, {0x2, 0x3}}, {0x8, 0x2, {0x5, 0xfffff2d6}}, {0x9, 0x1, {0x0, 0x4}}, {0x4, 0x2, {0x3, 0xd6}}, {0x5, 0xc, {0x1, 0x2}}, {0x8, 0x1, {0x1, 0x6}}, {0xa, 0xfffa, {0x3, 0x1}}, {0x8, 0x9, {0x2, 0xffffffff}}, {0x401, 0x9, {0x0, 0x7}}, {0x2, 0x3, {0x1, 0x2}}, {0x2, 0x3, {0x0, 0x7}}, {0x9, 0x3, {0x2, 0x2}}, {0xfffa, 0x5, {0x3, 0x5}}, {0x6, 0x6, {0x1, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000880}, 0x8040)

18.161207991s ago: executing program 1 (id=5665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000325bd7000fedbdf25040000080000000000000000270000000500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40081)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r8, @ANYRESHEX=r3], 0x50)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="c72c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250100000005000500fb00000008000400050000000800030008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r9, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r10 = socket(0x3, 0xa, 0x11)
recvmsg$qrtr(r10, &(0x7f0000002440)={&(0x7f0000002480), 0xc, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/94, 0x5e}], 0x2, &(0x7f00000008c0)=[{0xc8, 0x0, 0x0, ""/180}, {0xa0, 0x0, 0x0, ""/141}, {0xf8, 0x0, 0x0, ""/229}, {0x28, 0x0, 0x0, ""/24}, {0xb8, 0x0, 0x0, ""/164}], 0x340}, 0x38, 0x12020)

17.691172134s ago: executing program 1 (id=5666):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) (async)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0x1) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc, r3}, 0x38) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a01030000000000000000030000040c00104000000000ff07000000000000000000020c0010400000000000000001080004400000000408000f400000000708000440000000040900010073797a3100000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

17.279245085s ago: executing program 1 (id=5668):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x90)
bind$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000180))
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000001c0)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f00000004c0)={{r7}, 0x8, &(0x7f0000000440)=[0xfff, 0x101, 0x5, 0x6, 0x7, 0x3, 0x3, 0x1a3f], 0x7, 0x1, 0x1})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r8, 0x6, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x375e}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c810)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc2)
ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000000))

17.275729741s ago: executing program 1 (id=5669):
r0 = socket$caif_stream(0x25, 0x1, 0x2)
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="16add68c0250a4aa782b37d259b46bea6d4d0bccd250725030bf1b4817e80b0864a30a25006808a086275135a23381c143969f88e294ff36c4bd39fe89d28b277bd36f778c5ae8b93aaae3f672ff3c29233a1dc825b29e10a3c3a990c27eba46dc4286768bfcdbe1d21679fd60a2fec9c260560dce3772d17c912cc10a268ec0a94f2ea3751508d1c75572e86f6f330aff7e114807d8a7ee29170f0183c712006052e9fa52", 0xa5}, {&(0x7f00000001c0)="9ee278c90205690100856e9fab9cc692efc0181cabe829be0f9b8c1f4828dda8b9f18830794114aeb5e0e7b5ae7df1b3f71584e02986f5150cd5f76ffb6f35a7d6464f6cd5b03caa2ef8c4cf2064cf3ded0a8336cc893084744c4c361b84ef67b86cfe1deb9e0841c606a404961a06bd14453476820a4541b93900b410aa8b9563e4fa77e3dd971c320a489cc9eb34e455fbfcca5769a08fdae228824d62e3ee9cc6c95f2b550f2fbc2f3db1f62c98e9f085ff2db6d6fc1ff9d39eb0372dd263e59c94b7872909066254e4259775d50e914293057680ea6b99523b69bc2f82c810719452ac2ecdef", 0xe8}], 0x2}, 0x4000881)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="ed71db0aea362430c6c2c4cf4ef2811ea1ccc92360647463c5eb11345e9dd51736afb3c42de52488d69bbe8e73a2707c7ae5217dc7768858c0740e45978739ae3abafd94850d452b9b43dd563b7aeb45c5272fa68e2e6c9dc5e1620de30b45f710cff089cee0417e0084f7c3ac9135529fb5922fc7773d4e971209e399b6ce572399498234cfb7552e5debc188fa26a81fbdd485faadfdbd6feb90bcc55d91342f0358bb5818649323f73cca4bbaa3e83d56", 0xb2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0xb6, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_CHAIN={0x0, 0xb, 0x7ff}, @filter_kind_options=@f_fw={{}, {0x0, 0x2, [@TCA_FW_INDEV={0x0, 0x3, 'macvtap0\x00'}]}}, @TCA_CHAIN={0x0, 0xb, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x20000000)

17.164201716s ago: executing program 0 (id=5671):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x4}, 0x32, 0x0, 0x3, 0x8, 0xc, 'syz1\x00', "b99856e9fda6e50842472fb9440ce2ba677034784c8aa7ee05224df2ccae2530", "2a905bf4d16bf5089a287694715d2be8b10a5feadc069a301c54b2b3f126b61e", [{0x9, 0x80, {0x0, 0xfac}}, {0x3, 0x8, {0x2, 0x8}}, {0x400, 0xe62, {0x1, 0x9}}, {0x400, 0x7, {0x0, 0x800}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x4, {0x2, 0x5}}, {0x8000, 0xfee, {0x3, 0x6}}, {0x19, 0x4, {0x1, 0x80000000}}, {0x1, 0x1, {0x2, 0x6}}, {0x6, 0x7, {0x1, 0x2}}, {0x7, 0x7, {0x2, 0x10000}}, {0xff9, 0x9, {0x3, 0x7f}}, {0x1, 0x5, {0x1, 0xcaea}}, {0x6, 0x4, {0x6687cce33e6a29f2, 0x8}}, {0xc, 0x9, {0x1, 0x5}}, {0x4, 0x1, {0x1, 0xaf91}}, {0x0, 0xe502, {0x1, 0x2}}, {0x200, 0x9, {0x3, 0x7fff}}, {0xf000, 0x3, {0x2, 0x1}}, {0x12, 0x3, {0x0, 0x10000}}, {0xe9, 0x0, {0x3, 0x4}}, {0x2, 0x8, {0x0, 0xb}}, {0xfff7, 0x2, {0x1, 0x6}}, {0x9, 0x1, {0x2, 0x401}}, {0x7, 0xd, {0x0, 0x5}}, {0x8, 0xffff, {0x2, 0x6}}, {0x5, 0xc92a, {0x2, 0x3}}, {0x8, 0x2, {0x5, 0xfffff2d6}}, {0x9, 0x1, {0x0, 0x4}}, {0x4, 0x2, {0x3, 0xd6}}, {0x5, 0xc, {0x1, 0x2}}, {0x8, 0x1, {0x1, 0x6}}, {0xa, 0xfffa, {0x3, 0x1}}, {0x8, 0x9, {0x2, 0xffffffff}}, {0x401, 0x9, {0x0, 0x7}}, {0x2, 0x3, {0x1, 0x2}}, {0x2, 0x3, {0x0, 0x7}}, {0x9, 0x3, {0x2, 0x2}}, {0xfffa, 0x5, {0x3, 0x5}}, {0x6, 0x6, {0x1, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000880}, 0x8040)

17.102861916s ago: executing program 0 (id=5672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r1, 0x1, 0x1, &(0x7f00000003c0)=""/220, &(0x7f0000000100)=0xdc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7c}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

17.098100567s ago: executing program 1 (id=5673):
r0 = socket(0x25, 0x5, 0x3)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000000540)={0x4c, r1, 0x208, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb34}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0xd4}}, 0x44880)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f0000000280)=0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x1000})
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00173a0000000000000000000000030005000000000002000000ffffffff0000000000000000030006000000000002000000e00000010000000000000000"], 0x40}}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x207)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1000}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4890)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)

16.894128656s ago: executing program 0 (id=5674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r1=>r0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@local, @remote, <r2=>0x0}, &(0x7f0000000480)=0xc)
bind$packet(r1, &(0x7f00000004c0)={0x11, 0x19, r2, 0x1, 0xaa, 0x6, @remote}, 0x14) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={<r4=>0x0, 0x4, 0x10}, &(0x7f0000000180)=0xc) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000580)={r7, 0x7}, &(0x7f0000000600)=0x8) (async)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r4, 0x6, 0xa, 0x401, 0xeb10, 0x4, 0x7f, 0x2, {r7, @in6={{0xa, 0x4e24, 0x7, @private0, 0x3}}, 0x0, 0xf, 0x0, 0x7, 0xa}}, &(0x7f0000000380)=0xb0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async, rerun: 64)
openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '>'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

16.76438341s ago: executing program 0 (id=5675):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x4}}}, 0x24}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x40, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}}, 0x4000040)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@local, @remote, 0xffffffffffffffff, "fcd5a74debd9022dcfcd21d4743175e1efb18f7b67f89a2d84a4008ed2fc342c", 0xff, 0x6, 0x7fff, 0xfffffffc}, 0x3c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

16.63418653s ago: executing program 0 (id=5676):
r0 = socket$caif_stream(0x25, 0x1, 0x2)
sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="16add68c0250a4aa782b37d259b46bea6d4d0bccd250725030bf1b4817e80b0864a30a25006808a086275135a23381c143969f88e294ff36c4bd39fe89d28b277bd36f778c5ae8b93aaae3f672ff3c29233a1dc825b29e10a3c3a990c27eba46dc4286768bfcdbe1d21679fd60a2fec9c260560dce3772d17c912cc10a268ec0a94f2ea3751508d1c75572e86f6f330aff7e114807d8a7ee29170f0183c712006052e9fa52", 0x20}, {&(0x7f00000001c0)="9ee278c90205690100856e9fab9cc692efc0181cabe829be0f9b8c1f4828dda8b9f18830794114aeb5e0e7b5ae7df1b3f71584e02986f5150cd5f76ffb6f35a7d6464f6cd5b03caa2ef8c4cf2064cf3ded0a8336cc893084744c4c361b84ef67b86cfe1deb9e0841c606a404961a06bd14453476820a4541b93900b410aa8b9563e4fa77e3dd971c320a489cc9eb34e455fbfcca5769a08fdae228824d62e3ee9cc6c95f2b550f2fbc2f3db1f62c98e9f085ff2db6d6fc1ff9d39eb0372dd263e59c94b7872909066254e4259775d50e914293057680ea6b99523b69bc2f82c810719452ac2ecdef", 0xe8}], 0x2}, 0x891)

16.525660555s ago: executing program 0 (id=5677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000, '\x00', r6, r4, 0x0, 0x3}, 0x50)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb4f8a6aad083527bebe39df00000c0044ef7517000002000000000000000000000900001000"/49], 0x0, 0x26}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004060900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061786c6f6164000c00028008000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

15.500495645s ago: executing program 2 (id=5678):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000010000009500000700000000c60d21213b3a1d60c681a8f8257ab6e9c90d5f023d653f476b21e41394584972b9f1aeb2ce588aa961405bb48c8977c6407b798098b880a17dbcc0665dd9c624dc85bc713faec4294fad037179faf091517c"], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
sendto$inet6(r5, &(0x7f00000007c0)="8b", 0x1, 0x4008810, 0x0, 0x0)
recvfrom$inet(r5, 0x0, 0x0, 0x2003, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={<r6=>r3, 0xfff, 0xb, 0x8})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001a80)={&(0x7f0000000940)="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", &(0x7f0000001940)=""/34, &(0x7f0000001980)="b3b4d1d819ef9c0c49161d1c462bae96c12de3d6f0c2cbebf8573db122647d3b1f65d8cafb658a07e369ca42b4527bb0d4587c5f1644ad333ba7e7674ce74dbbd8f3007c78a9dead1b0af566142fe361ec50eec08433a90968d9e6f9fc8b8ce8d98c90169452982a0c55d42da4e276697793c2fa361bd7cd69829a5bdc97b36a40ac6f", &(0x7f0000001a40), 0xf11, r6}, 0x38)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0xbcd, 0x6, 0x20500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xe}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d800000000000000000028008000240000000170800014000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r11, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001f40)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)

1.905032555s ago: executing program 32 (id=5673):
r0 = socket(0x25, 0x5, 0x3)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000000540)={0x4c, r1, 0x208, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb34}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0xd4}}, 0x44880)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f0000000280)=0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x1000})
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00173a0000000000000000000000030005000000000002000000ffffffff0000000000000000030006000000000002000000e00000010000000000000000"], 0x40}}, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x207)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1000}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4890)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)

999.158784ms ago: executing program 33 (id=5677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000, '\x00', r6, r4, 0x0, 0x3}, 0x50)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb4f8a6aad083527bebe39df00000c0044ef7517000002000000000000000000000900001000"/49], 0x0, 0x26}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004060900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061786c6f6164000c00028008000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

0s ago: executing program 34 (id=5678):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000010000009500000700000000c60d21213b3a1d60c681a8f8257ab6e9c90d5f023d653f476b21e41394584972b9f1aeb2ce588aa961405bb48c8977c6407b798098b880a17dbcc0665dd9c624dc85bc713faec4294fad037179faf091517c"], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
sendto$inet6(r5, &(0x7f00000007c0)="8b", 0x1, 0x4008810, 0x0, 0x0)
recvfrom$inet(r5, 0x0, 0x0, 0x2003, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={<r6=>r3, 0xfff, 0xb, 0x8})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x8}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001a80)={&(0x7f0000000940)="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", &(0x7f0000001940)=""/34, &(0x7f0000001980)="b3b4d1d819ef9c0c49161d1c462bae96c12de3d6f0c2cbebf8573db122647d3b1f65d8cafb658a07e369ca42b4527bb0d4587c5f1644ad333ba7e7674ce74dbbd8f3007c78a9dead1b0af566142fe361ec50eec08433a90968d9e6f9fc8b8ce8d98c90169452982a0c55d42da4e276697793c2fa361bd7cd69829a5bdc97b36a40ac6f", &(0x7f0000001a40), 0xf11, r6}, 0x38)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x1003, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x20002300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0xbcd, 0x6, 0x20500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xe}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d800000000000000000028008000240000000170800014000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r11, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001f40)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)

kernel console output (not intermixed with test programs):

scuous mode
[  161.327069][T11268] hsr_slave_1: left promiscuous mode
[  161.393960][T11274] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  161.436158][T11276] syzkaller0: entered promiscuous mode
[  161.437845][T11276] syzkaller0: entered allmulticast mode
[  161.822834][T11304] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  161.825707][T11304] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2339'.
[  162.469147][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'.
[  162.656803][T11333] ipip1: entered promiscuous mode
[  162.789174][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2356'.
[  162.792709][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2356'.
[  162.831645][T11346] openvswitch: netlink: Message has 496 unknown bytes.
[  162.833873][T11346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.929923][T11353] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2361'.
[  163.625960][T11380] openvswitch: netlink: Flow actions attr not present in new flow.
[  163.625960][T11379] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  163.790661][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2378'.
[  164.426901][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'.
[  164.582029][T11434] netlink: 'syz.2.2397': attribute type 4 has an invalid length.
[  166.012622][T11560] __nla_validate_parse: 4 callbacks suppressed
[  166.012641][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'.
[  166.169262][T11565] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0
[  166.193658][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'.
[  166.282872][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'.
[  166.356435][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'.
[  166.426538][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'.
[  166.694135][T11613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2475'.
[  166.705415][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'.
[  166.709896][T11614] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  166.713256][T11613] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  167.197556][T11664] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  167.206333][T11664] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  167.209752][T11664] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  167.309979][T11671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2491'.
[  167.331011][T11671] tipc: Enabled bearer <eth:gre0>, priority 11
[  167.561188][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2497'.
[  167.564851][T11694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2497'.
[  167.989670][T11730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  168.314238][T11761] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  168.320866][T11761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.391702][T11772] netlink: 'syz.2.2521': attribute type 1 has an invalid length.
[  168.394384][T11772] netlink: 'syz.2.2521': attribute type 4 has an invalid length.
[  168.406617][T11772] netlink: 'syz.2.2521': attribute type 1 has an invalid length.
[  168.411920][T11772] netlink: 'syz.2.2521': attribute type 4 has an invalid length.
[  168.446935][ T5271] tipc: Node number set to 1940513463
[  168.632394][T11790] unsupported nlmsg_type 40
[  168.661593][T11795] syzkaller0: entered promiscuous mode
[  168.663513][T11795] syzkaller0: entered allmulticast mode
[  168.979489][T11833] syzkaller1: tun_chr_ioctl cmd 1074025677
[  168.981438][T11833] syzkaller1: linktype set to 805
[  168.987221][T11836] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  168.994257][T11833] netlink: 'syz.2.2543': attribute type 1 has an invalid length.
[  169.080959][T11848] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  169.083260][T11848] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  169.708747][T11909] veth0_macvtap: Caught tx_queue_len zero misconfig
[  169.729054][T11909] ip6tnl0: Caught tx_queue_len zero misconfig
[  169.849377][T11924] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  170.125101][T11951] syzkaller0: entered promiscuous mode
[  170.126945][T11951] syzkaller0: entered allmulticast mode
[  170.130155][T11950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.170974][T11950] tipc: Resetting bearer <eth:syzkaller0>
[  170.192087][T11950] tipc: Disabling bearer <eth:syzkaller0>
[  170.204559][T11960] netlink: 'syz.2.2568': attribute type 5 has an invalid length.
[  170.268640][T11965] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  170.271261][T11965] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  170.280071][T11965] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  170.328338][T11969] netlink: 'syz.1.2570': attribute type 3 has an invalid length.
[  170.389984][T11978] xt_CT: No such helper "netbios-ns"
[  170.696170][T11997] pim6reg1: entered promiscuous mode
[  170.698270][T11997] pim6reg1: entered allmulticast mode
[  170.830881][T12006] xt_policy: neither incoming nor outgoing policy selected
[  170.964108][T12023] raw_sendmsg: syz.2.2588 forgot to set AF_INET. Fix it!
[  170.999242][T12025] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  171.001824][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.044077][T12025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.142313][T12033] __nla_validate_parse: 39 callbacks suppressed
[  171.142331][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'.
[  171.282381][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'.
[  171.286809][T12051] tipc: Can't bind to reserved service type 2
[  171.307715][T12049] bond2: entered promiscuous mode
[  171.310469][T12049] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.332768][T12049] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.337295][T12049] bond3: entered promiscuous mode
[  171.339194][T12049] bond2: (slave bond3): Enslaving as an active interface with an up link
[  171.433956][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2602'.
[  171.580512][T12078] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  171.614156][T12080] xt_hashlimit: max too large, truncated to 1048576
[  171.617506][T12080] xt_ecn: cannot match TCP bits for non-tcp packets
[  171.624404][T12080] pim6reg1: entered promiscuous mode
[  171.626353][T12080] pim6reg1: entered allmulticast mode
[  171.719206][T12085] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2610'.
[  171.722269][T12085] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2610'.
[  171.729357][T12088] pim6reg1: entered allmulticast mode
[  171.734209][T12088] netlink: 'syz.2.2609': attribute type 11 has an invalid length.
[  171.738321][T12088] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2609'.
[  171.947977][T12090] openvswitch: netlink: Missing valid actions attribute.
[  171.950108][T12090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.115614][T12106] netlink: 'syz.2.2617': attribute type 13 has an invalid length.
[  172.119380][T12106] netlink: 'syz.2.2617': attribute type 17 has an invalid length.
[  172.123073][T12104] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.125513][T12104] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.229488][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.258663][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.401000][ T5867] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.403644][ T5867] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.410889][T12106] gretap0: left promiscuous mode
[  172.479166][T12106] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.485663][T12106] 8021q: adding VLAN 0 to HW filter on device team0
[  172.492115][T12106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.499457][ T5867] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.502014][ T5867] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.526281][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'.
[  172.757102][T12124] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  172.876247][T12134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  173.498111][T12181] netlink: 'syz.1.2643': attribute type 1 has an invalid length.
[  173.500520][T12181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2643'.
[  173.665280][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2646'.
[  173.668043][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2646'.
[  173.802565][T12196] bond4: (slave bond_slave_1): Device is not our slave
[  173.804877][T12196] bond4: option active_slave: invalid value (bond_slave_1)
[  173.808179][T12196] bond4 (unregistering): Released all slaves
[  173.913711][T12209] 8021q: VLANs not supported on ip6gre0
[  174.008632][T12225] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  174.011727][T12225] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  174.024367][T12225] syzkaller1: entered promiscuous mode
[  174.029918][T12225] syzkaller1: entered allmulticast mode
[  174.706051][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout
[  174.962531][T12304] syzkaller1: entered promiscuous mode
[  174.965653][T12304] syzkaller1: entered allmulticast mode
[  175.213349][T12324] syzkaller1: tun_chr_ioctl cmd 1074025677
[  175.215437][T12324] syzkaller1: Linktype set failed because interface is up
[  175.222010][T12324] syzkaller1: tun_chr_ioctl cmd 2180551740
[  175.245412][   T32] syzkaller1: tun_net_xmit 90
[  175.562899][T12348] 0: renamed from hsr_slave_1
[  175.600789][T12348] 0: entered allmulticast mode
[  175.615845][T12348] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  176.030277][T12392] bond4: option miimon: invalid value (18446744073709551607)
[  176.032690][T12392] bond4: option miimon: allowed values 0 - 2147483647
[  176.038854][T12392] bond4 (unregistering): Released all slaves
[  176.362108][T12425] __nla_validate_parse: 15 callbacks suppressed
[  176.362123][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'.
[  176.454478][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'.
[  176.461706][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'.
[  176.477152][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'.
[  176.729309][T12455] netlink: 'syz.2.2738': attribute type 2 has an invalid length.
[  176.742572][T12455] : entered promiscuous mode
[  179.374031][T12427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.478680][T12461] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2742'.
[  179.583506][T12471] netlink: 'syz.1.2741': attribute type 1 has an invalid length.
[  179.586597][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'.
[  179.881286][T12495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2751'.
[  180.052333][T12506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  180.247087][T12515] xt_policy: neither incoming nor outgoing policy selected
[  180.534416][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2760'.
[  181.140324][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  181.174734][ T5816] Bluetooth: hci1: command 0x0406 tx timeout
[  181.185502][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout
[  181.226999][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'.
[  181.366743][T12552] netlink: 'syz.1.2775': attribute type 3 has an invalid length.
[  181.369121][T12552] __nla_validate_parse: 1 callbacks suppressed
[  181.369128][T12552] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2775'.
[  181.373696][T12552] netlink: 'syz.1.2775': attribute type 3 has an invalid length.
[  181.378871][T12552] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2775'.
[  181.429319][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'.
[  181.588209][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2786'.
[  181.591967][T12573] netlink: 'syz.0.2785': attribute type 3 has an invalid length.
[  181.595975][T12573] netlink: 772 bytes leftover after parsing attributes in process `syz.0.2785'.
[  181.600054][T12573] netlink: 'syz.0.2785': attribute type 3 has an invalid length.
[  181.604281][T12573] netlink: 772 bytes leftover after parsing attributes in process `syz.0.2785'.
[  181.657555][T12577] netlink: 'syz.0.2787': attribute type 29 has an invalid length.
[  181.682940][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2789'.
[  181.790134][T12596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2794'.
[  181.793133][T12596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  181.808265][T12596] Unsupported ieee802154 address type: 0
[  181.900709][T12613] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2800'.
[  181.938307][T12616] syzkaller1: entered promiscuous mode
[  181.940433][T12616] syzkaller1: entered allmulticast mode
[  182.072343][T12624] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  182.076311][T12624] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  182.079617][T12624] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  182.915185][T12639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2809'.
[  183.045433][T12654] netlink: 'syz.2.2815': attribute type 62 has an invalid length.
[  183.265505][T12677] netlink: 'syz.1.2825': attribute type 2 has an invalid length.
[  183.428585][T12696] TCP: TCP_TX_DELAY enabled
[  183.523723][T12706] netlink: 'syz.1.2837': attribute type 1 has an invalid length.
[  183.618885][T12716] netlink: 'syz.1.2841': attribute type 1 has an invalid length.
[  183.642142][T12717] 8021q: adding VLAN 0 to HW filter on device bond4
[  183.668025][T12715] bond4: (slave gretap1): making interface the new active one
[  183.673699][T12715] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  187.336856][T12781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  187.508697][T12802] validate_nla: 1 callbacks suppressed
[  187.508723][T12802] netlink: 'syz.2.2873': attribute type 4 has an invalid length.
[  187.606758][T12817] syzkaller0: entered promiscuous mode
[  187.608886][T12817] syzkaller0: entered allmulticast mode
[  187.716844][T12826] __nla_validate_parse: 8 callbacks suppressed
[  187.716863][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2880'.
[  187.902665][T12839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2884'.
[  187.979176][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'.
[  187.982576][T12845] netlink: 121 bytes leftover after parsing attributes in process `syz.0.2885'.
[  188.153878][T12859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2889'.
[  188.486720][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2902'.
[  188.770038][T12924] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2914'.
[  188.774051][T12924] netlink: 'syz.2.2914': attribute type 1 has an invalid length.
[  188.791382][T12924] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.816452][T12924] bond4: (slave veth7): Enslaving as an active interface with a down link
[  188.823946][T12924] netlink: 57 bytes leftover after parsing attributes in process `syz.2.2914'.
[  188.902829][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2917'.
[  188.980064][T12942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2916'.
[  189.751234][T12985] tipc: Enabled bearer <eth:vlan0>, priority 0
[  190.836487][T13020] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  190.865153][  T885] tipc: Node number set to 16777344
[  191.759954][T13097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.762126][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.910742][T13108] syzkaller0: entered promiscuous mode
[  191.912799][T13108] syzkaller0: entered allmulticast mode
[  192.193166][T13143] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  192.197235][T13143] bond5 (unregistering): Released all slaves
[  192.463570][T13160] openvswitch: netlink: Key type 29 is not supported
[  192.909708][T13184] __nla_validate_parse: 23 callbacks suppressed
[  192.909725][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3007'.
[  192.994216][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3009'.
[  193.316458][T13215] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3017'.
[  193.442676][T13219] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  193.446572][T13219] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  193.927997][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3022'.
[  194.024189][T13238] bridge0: entered promiscuous mode
[  194.056878][T13242] openvswitch: netlink: Unknown key attributes 2
[  194.059454][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3026'.
[  194.432418][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'.
[  194.665536][T13280] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  194.668034][T13280] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  194.671341][T13280] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  194.705830][T13284] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  194.709271][T13284] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3043'.
[  194.824478][T13291] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3046'.
[  194.829800][T13293] netlink: 724 bytes leftover after parsing attributes in process `syz.0.3047'.
[  194.832771][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3047'.
[  194.962446][T13302] x_tables: duplicate underflow at hook 1
[  195.241651][T13309] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.369857][T13320] netlink: 'syz.2.3059': attribute type 1 has an invalid length.
[  195.383783][T13320] 8021q: adding VLAN 0 to HW filter on device bond5
[  195.571959][T13329] bond5: option xmit_hash_policy: invalid value (10)
[  195.577714][T13329] bond5 (unregistering): Released all slaves
[  196.167273][T13378] netlink: 'syz.2.3076': attribute type 1 has an invalid length.
[  196.392463][T13391] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  196.746977][T13419] veth0_macvtap: left promiscuous mode
[  196.849544][T13424] No such timeout policy "syz0"
[  197.579287][T13473] netlink: 'syz.1.3111': attribute type 3 has an invalid length.
[  197.582444][T13473] netlink: 'syz.1.3111': attribute type 3 has an invalid length.
[  197.964060][T13490] netlink: 'syz.0.3118': attribute type 1 has an invalid length.
[  198.347513][T13510] netlink: 'syz.2.3125': attribute type 1 has an invalid length.
[  199.011373][T13527] netlink: 'syz.1.3128': attribute type 1 has an invalid length.
[  199.016338][T13527] __nla_validate_parse: 17 callbacks suppressed
[  199.016352][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'.
[  199.093981][T13532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.177656][T13536] netlink: 'syz.1.3132': attribute type 12 has an invalid length.
[  199.185902][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'.
[  199.222417][T13536] bond5: option broadcast_neighbor: invalid value (30)
[  199.226810][T13536] bond5 (unregistering): Released all slaves
[  199.456868][T13558] netlink: 'syz.2.3140': attribute type 3 has an invalid length.
[  199.459824][T13558] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3140'.
[  199.462422][T13558] netlink: 'syz.2.3140': attribute type 3 has an invalid length.
[  199.467629][T13558] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3140'.
[  199.576984][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  199.579575][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  200.444173][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3147'.
[  202.519500][T13565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.615983][T13598] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3150'.
[  202.664400][T13604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3153'.
[  202.858824][T13611] ip6t_srh: unknown srh match flags  4000
[  202.894873][T13617] netlink: 'syz.2.3159': attribute type 3 has an invalid length.
[  202.897585][T13617] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3159'.
[  202.900721][T13617] netlink: 'syz.2.3159': attribute type 3 has an invalid length.
[  202.910560][T13617] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3159'.
[  203.283983][T13638] netlink: 'syz.1.3166': attribute type 8 has an invalid length.
[  203.289934][T13639] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  203.304037][T13639] bond6: entered promiscuous mode
[  203.306308][T13639] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.388495][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3171'.
[  203.416903][T13648] team0: Port device team_slave_0 removed
[  203.465938][T13648] sock: sock_set_timeout: `syz.2.3171' (pid 13648) tries to set negative timeout
[  203.819767][T13685] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  203.822634][T13685] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.935391][T13699] syzkaller1: tun_chr_ioctl cmd 1074025677
[  203.938786][T13699] syzkaller1: Linktype set failed because interface is up
[  203.941135][T13698] syzkaller1: tun_chr_ioctl cmd 1074025673
[  203.943446][T13700] syzkaller1: tun_chr_ioctl cmd 1074025677
[  203.945585][T13700] syzkaller1: Linktype set failed because interface is up
[  203.947899][T13698] syzkaller1: tun_chr_ioctl cmd 3227019038
[  203.949876][T13699] syzkaller1: tun_chr_ioctl cmd 3227019038
[  203.964821][   T31] syzkaller1: tun_net_xmit 90
[  204.662896][T13711] __nla_validate_parse: 3 callbacks suppressed
[  204.662912][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'.
[  204.833630][T13717] netlink: 'syz.2.3192': attribute type 6 has an invalid length.
[  204.973816][T13726] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.001933][T13730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.365345][T13761] netlink: 820 bytes leftover after parsing attributes in process `syz.2.3212'.
[  205.374842][T13761] netlink: 820 bytes leftover after parsing attributes in process `syz.2.3212'.
[  205.460905][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3218'.
[  205.529547][T13772] netlink: 848 bytes leftover after parsing attributes in process `syz.0.3217'.
[  205.532902][T13772] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3217'.
[  205.536291][T13772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  205.725633][T13790] netlink: 'syz.1.3220': attribute type 62 has an invalid length.
[  208.418143][T13768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  208.568042][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[  208.580349][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3226'.
[  208.653043][T13817] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.3229'.
[  208.767475][T13830] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  208.775430][T13830] bond4 (unregistering): Released all slaves
[  208.908909][T13842] syzkaller1: entered promiscuous mode
[  208.910939][T13842] syzkaller1: entered allmulticast mode
[  208.914254][T13842] tunl0: Caught tx_queue_len zero misconfig
[  208.956281][T13839] netlink: 'syz.2.3236': attribute type 30 has an invalid length.
[  209.471627][T13873] x_tables: duplicate underflow at hook 1
[  209.474085][T13873] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[  209.515240][T13875] netlink: 'syz.0.3249': attribute type 4 has an invalid length.
[  209.572494][T13876] only policy match revision 0 supported
[  209.572516][T13876] unable to load match
[  209.852926][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3254'.
[  210.512071][T13930] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.546890][T13930] tipc: Resetting bearer <eth:syzkaller0>
[  210.660395][T13947] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[  210.744513][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'.
[  210.746092][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'.
[  210.895573][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'.
[  211.029145][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'.
[  211.076519][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'.
[  211.150113][T13985] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3285'.
[  211.227312][T13992] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  211.230917][T13992] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  211.234344][T13992] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  211.310172][T13998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3289'.
[  211.399092][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'.
[  211.436515][T14005] netlink: 'syz.2.3291': attribute type 1 has an invalid length.
[  211.438904][T14005] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3291'.
[  212.246770][T14068] macsec0: entered allmulticast mode
[  212.249305][T14068] veth1_macvtap: entered allmulticast mode
[  212.251517][T14068] macsec0: left allmulticast mode
[  212.253931][T14068] veth1_macvtap: left allmulticast mode
[  212.487970][T14086] netlink: 'syz.0.3314': attribute type 4 has an invalid length.
[  212.599620][   T34] audit: type=1107 audit(1778526612.241:4): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  212.717660][T14102] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  212.721141][T14102] pim6reg1: entered promiscuous mode
[  212.722720][T14102] pim6reg1: entered allmulticast mode
[  212.823595][T14107] block nbd0: NBD_DISCONNECT
[  212.825211][T14107] block nbd0: Send disconnect failed -32
[  212.828391][T14107] block nbd0: shutting down sockets
[  213.130642][T14132] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  213.169427][T14138] IPv6: addrconf: prefix option has invalid lifetime
[  213.303723][T14152] netlink: 'syz.1.3339': attribute type 32 has an invalid length.
[  213.322983][T14152] bond5: option coupled_control: invalid value (12)
[  213.329105][T14152] bond5 (unregistering): Released all slaves
[  213.725209][   T34] audit: type=1107 audit(1778526613.371:5): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zALh]'
[  213.849349][T14193] tipc: Enabled bearer <ib:team0>, priority 12
[  213.966375][T14205] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  213.968750][T14205] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  213.971107][T14205] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  214.029440][T14204] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  214.032551][T14204] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  214.041176][T14204] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  214.138678][T14226] : renamed from wg2 (while UP)
[  214.497842][T14241] netlink: 'syz.0.3376': attribute type 3 has an invalid length.
[  214.784466][T14271] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.046819][T14297] __nla_validate_parse: 26 callbacks suppressed
[  215.046836][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'.
[  215.104138][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'.
[  215.116312][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'.
[  215.160438][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'.
[  215.820181][T14345] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3418'.
[  215.823866][T14345] bond0: Caught tx_queue_len zero misconfig
[  216.401132][T14380] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  216.417998][T14380] syzkaller0: entered promiscuous mode
[  216.420098][T14380] syzkaller0: entered allmulticast mode
[  216.698855][T14398] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3435'.
[  216.871945][T14406] netlink: 'syz.1.3441': attribute type 1 has an invalid length.
[  216.875496][T14406] nbd: illegal input index 871591272
[  216.956941][T14406] netlink: 'syz.1.3441': attribute type 10 has an invalid length.
[  216.963984][T14406] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  217.667573][T14441] xt_TPROXY: Can be used only with -p tcp or -p udp
[  217.696987][T14443] netlink: zone id is out of range
[  218.471874][T14417] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  218.546663][T14450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3455'.
[  218.551418][T14452] xt_ecn: cannot match TCP bits for non-tcp packets
[  218.619304][T14454] syzkaller0: entered promiscuous mode
[  218.621001][T14454] syzkaller0: entered allmulticast mode
[  218.645574][T14454] syzkaller0: tun_net_xmit 14
[  218.677526][T14458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3459'.
[  218.685052][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'.
[  218.777040][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'.
[  218.779978][T14468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.825361][T14476] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  219.497826][T14543] sock: sock_set_timeout: `syz.1.3495' (pid 14543) tries to set negative timeout
[  219.810303][T14564] tipc: Invalid UDP bearer configuration
[  219.810343][T14564] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  220.073477][T14584] __nla_validate_parse: 7 callbacks suppressed
[  220.073493][T14584] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3506'.
[  220.080413][T14584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3506'.
[  220.146527][T14592] veth1_to_team: Caught tx_queue_len zero misconfig
[  220.335219][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'.
[  220.477135][T14625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3524'.
[  220.580313][T14634] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  220.600597][T14630] sctp: [Deprecated]: syz.1.3526 (pid 14630) Use of int in maxseg socket option.
[  220.600597][T14630] Use struct sctp_assoc_value instead
[  220.709436][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'.
[  220.784454][T14652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3536'.
[  220.931159][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3536'.
[  220.968136][T14652] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.087243][T14662] lo speed is unknown, defaulting to 1000
[  221.091327][T14662] lo speed is unknown, defaulting to 1000
[  221.094546][T14662] lo speed is unknown, defaulting to 1000
[  221.226009][T14665] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3539'.
[  221.272599][T14669] netlink: 'syz.0.3541': attribute type 3 has an invalid length.
[  221.274299][ T5271] lo speed is unknown, defaulting to 1000
[  221.276524][T14669] netlink: 772 bytes leftover after parsing attributes in process `syz.0.3541'.
[  221.277302][T14662] infiniband sqz0: set active
[  221.279558][T14669] netlink: 'syz.0.3541': attribute type 3 has an invalid length.
[  221.281183][T14662] infiniband sqz0: added lo
[  221.283371][T14669] netlink: 772 bytes leftover after parsing attributes in process `syz.0.3541'.
[  221.333713][T14662] RDS/IB: sqz0: added
[  221.345126][T14662] smc: adding ib device sqz0 with port count 1
[  221.350677][T14662] smc:    ib device sqz0 port 1 has no pnetid
[  221.356335][ T5271] lo speed is unknown, defaulting to 1000
[  221.368595][T14662] lo speed is unknown, defaulting to 1000
[  221.509127][T14662] lo speed is unknown, defaulting to 1000
[  221.656989][T14662] lo speed is unknown, defaulting to 1000
[  221.658607][T14686] tipc: Failed to remove unknown binding: 66,0,0/1940513463:2169588613/2169588615
[  221.661552][T14686] tipc: Failed to remove unknown binding: 66,0,0/1940513463:2169588613/2169588614
[  221.666367][T14686] tipc: Failed to remove unknown binding: 66,0,0/1940513463:2169588613/2169588615
[  221.669190][T14686] tipc: Failed to remove unknown binding: 66,0,0/1940513463:2169588613/2169588614
[  221.717934][T14691] netlink: 'syz.0.3548': attribute type 3 has an invalid length.
[  221.873657][T14714] netlink: 'syz.1.3556': attribute type 2 has an invalid length.
[  222.299670][T14761] IPVS: length: 165 != 8
[  222.307801][T14763] netlink: 'syz.1.3575': attribute type 4 has an invalid length.
[  222.510338][T14783] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  222.638748][T14793] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  222.648706][T14793] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  222.700684][T14799] netlink: 'syz.2.3586': attribute type 4 has an invalid length.
[  222.806931][T14805] netlink: 'syz.2.3587': attribute type 13 has an invalid length.
[  222.814562][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.816095][T14805] netlink: 'syz.2.3587': attribute type 13 has an invalid length.
[  222.819190][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.827441][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.831725][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.838572][T14805] IPVS: set_ctl: invalid protocol: 39 224.0.0.1:20003
[  224.440549][T14895] netlink: 'syz.1.3619': attribute type 4 has an invalid length.
[  224.494929][T14902] netlink: 'syz.1.3621': attribute type 1 has an invalid length.
[  224.539794][T14906] netlink: zone id is out of range
[  224.813668][T14927] syzkaller1: entered promiscuous mode
[  224.815939][T14927] syzkaller1: entered allmulticast mode
[  225.181871][T14951] __nla_validate_parse: 55 callbacks suppressed
[  225.181882][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3639'.
[  227.728895][T14922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  227.849848][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'.
[  227.995504][T14973] can: request_module (can-proto-5) failed.
[  228.067273][T14979] macsec0: entered promiscuous mode
[  228.069817][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'.
[  228.080220][T14979] macsec0 (unregistering): left promiscuous mode
[  228.618794][T15028] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3661'.
[  228.622746][T15028] validate_nla: 1 callbacks suppressed
[  228.622755][T15028] netlink: 'syz.1.3661': attribute type 11 has an invalid length.
[  231.278588][T14994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.516024][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3674'.
[  231.527756][T15067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3671'.
[  231.542403][T15065] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  231.597394][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  231.600916][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'.
[  231.841129][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'.
[  232.329637][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  232.498365][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'.
[  232.503386][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3700'.
[  232.548793][T15130] "syz.1.3701" (15130) uses obsolete ecb(arc4) skcipher
[  232.561015][T15134] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3702'.
[  232.703679][T15146] netlink: 'syz.0.3707': attribute type 1 has an invalid length.
[  232.748070][T15148] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  232.752001][T15148] CPU: 0 UID: 0 PID: 15148 Comm: syz.2.3708 Not tainted syzkaller #0 PREEMPT(full) 
[  232.752012][T15148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.752017][T15148] Call Trace:
[  232.752022][T15148]  <TASK>
[  232.752026][T15148]  dump_stack_lvl+0xe8/0x150
[  232.752045][T15148]  sysfs_warn_dup+0x8e/0xa0
[  232.752057][T15148]  sysfs_do_create_link_sd+0xc0/0x110
[  232.752069][T15148]  device_add_class_symlinks+0x1cf/0x240
[  232.752112][T15148]  device_add+0x475/0xb70
[  232.752132][T15148]  wiphy_register+0x1d73/0x2d50
[  232.752159][T15148]  ? __pfx_wiphy_register+0x10/0x10
[  232.752175][T15148]  ? __pfx_netdev_run_todo+0x10/0x10
[  232.752183][T15148]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  232.752196][T15148]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  232.752212][T15148]  ieee80211_register_hw+0x3571/0x4220
[  232.752228][T15148]  ? ieee80211_register_hw+0x14c1/0x4220
[  232.752239][T15148]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  232.752254][T15148]  ? __hrtimer_setup+0x181/0x200
[  232.752268][T15148]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  232.752279][T15148]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  232.752304][T15148]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  232.752314][T15148]  ? kstrndup+0xbf/0x160
[  232.752329][T15148]  hwsim_new_radio_nl+0xf35/0x1bd0
[  232.752350][T15148]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.752366][T15148]  ? rcu_is_watching+0x15/0xb0
[  232.752378][T15148]  ? trace_kmalloc+0x2a/0x110
[  232.752389][T15148]  ? __nla_parse+0x40/0x60
[  232.752403][T15148]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  232.752423][T15148]  genl_family_rcv_msg_doit+0x22a/0x330
[  232.752455][T15148]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  232.752472][T15148]  ? bpf_lsm_capable+0x9/0x20
[  232.752484][T15148]  ? security_capable+0x7e/0x2c0
[  232.752498][T15148]  genl_rcv_msg+0x61c/0x7a0
[  232.752511][T15148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.752521][T15148]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.752533][T15148]  ? __lock_acquire+0x6b5/0x2cf0
[  232.752550][T15148]  netlink_rcv_skb+0x232/0x4b0
[  232.752559][T15148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.752570][T15148]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.752587][T15148]  ? down_read+0x272/0x2e0
[  232.752595][T15148]  ? genl_rcv+0xd/0x40
[  232.752606][T15148]  genl_rcv+0x28/0x40
[  232.752615][T15148]  netlink_unicast+0x80f/0x9b0
[  232.752627][T15148]  ? __pfx_netlink_unicast+0x10/0x10
[  232.752636][T15148]  ? netlink_sendmsg+0x650/0xb40
[  232.752644][T15148]  ? skb_put+0x11b/0x210
[  232.752657][T15148]  netlink_sendmsg+0x813/0xb40
[  232.752670][T15148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.752679][T15148]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  232.752692][T15148]  ? aa_sock_msg_perm+0xf1/0x1b0
[  232.752703][T15148]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.752714][T15148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.752722][T15148]  ____sys_sendmsg+0xa68/0xad0
[  232.752739][T15148]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.752754][T15148]  ? import_iovec+0x73/0xa0
[  232.752768][T15148]  ___sys_sendmsg+0x2a5/0x360
[  232.752782][T15148]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.752795][T15148]  ? futex_wake+0x4ac/0x580
[  232.752819][T15148]  ? __fget_files+0x2a/0x420
[  232.752831][T15148]  ? __fget_files+0x3a0/0x420
[  232.752845][T15148]  __x64_sys_sendmsg+0x1bd/0x2a0
[  232.752857][T15148]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.752872][T15148]  ? rcu_is_watching+0x15/0xb0
[  232.752887][T15148]  do_syscall_64+0x14d/0xf80
[  232.752899][T15148]  ? trace_irq_disable+0x3b/0x150
[  232.752911][T15148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.752922][T15148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.752930][T15148] RIP: 0033:0x7f06e6f9cdd9
[  232.752938][T15148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.752945][T15148] RSP: 002b:00007f06e7e61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.752954][T15148] RAX: ffffffffffffffda RBX: 00007f06e7215fa0 RCX: 00007f06e6f9cdd9
[  232.752959][T15148] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  232.752964][T15148] RBP: 00007f06e7032d69 R08: 0000000000000000 R09: 0000000000000000
[  232.752969][T15148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.752973][T15148] R13: 00007f06e7216038 R14: 00007f06e7215fa0 R15: 00007ffd8c8ae388
[  232.752986][T15148]  </TASK>
[  233.005687][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'.
[  233.043529][T15168] SET target dimension over the limit!
[  233.225607][T15186] veth1_to_batadv: entered allmulticast mode
[  233.467997][T15219] openvswitch: netlink: Message has 1 unknown bytes.
[  233.469947][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.896855][ T5816] Bluetooth: hci2: command 0x0405 tx timeout
[  234.100353][T15279] lo speed is unknown, defaulting to 1000
[  234.347539][T15286] netlink: 'syz.0.3755': attribute type 2 has an invalid length.
[  235.084532][T15317] netlink: 'syz.1.3766': attribute type 4 has an invalid length.
[  235.088404][T15317] netlink: 'syz.1.3766': attribute type 2 has an invalid length.
[  235.122440][T15319] netlink: 'syz.1.3767': attribute type 6 has an invalid length.
[  235.160303][T15322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.163131][T15322] syzkaller0: entered promiscuous mode
[  235.165962][T15322] syzkaller0: entered allmulticast mode
[  235.182498][T15322] tipc: Resetting bearer <eth:syzkaller0>
[  235.189333][T15321] tipc: Resetting bearer <eth:syzkaller0>
[  235.206279][T15321] tipc: Disabling bearer <eth:syzkaller0>
[  235.593225][T15343] netlink: 'syz.1.3776': attribute type 1 has an invalid length.
[  235.608744][T15343] 8021q: adding VLAN 0 to HW filter on device bond5
[  235.622509][T15343] 8021q: adding VLAN 0 to HW filter on device bond5
[  235.625411][T15343] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  235.628972][T15343] bond5: (slave vcan0): Error -95 calling set_mac_address
[  235.752021][T15353] xt_NFQUEUE: number of total queues is 0
[  235.836972][T15359] xt_TCPMSS: Only works on TCP SYN packets
[  236.120670][T15394] sctp: [Deprecated]: syz.2.3792 (pid 15394) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.120670][T15394] Use struct sctp_sack_info instead
[  236.183688][T15396] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  236.188011][T15396] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  236.394158][T15406] siw: device registration error -23
[  236.400267][T15407] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  236.414098][T15411] syzkaller0: entered promiscuous mode
[  236.414432][T15407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  236.417269][T15411] syzkaller0: entered allmulticast mode
[  236.596365][T15422] lo speed is unknown, defaulting to 1000
[  236.688964][T15429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.896245][T15437] __nla_validate_parse: 15 callbacks suppressed
[  236.896257][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'.
[  236.901420][T15437] netlink: 'syz.1.3806': attribute type 5 has an invalid length.
[  236.903630][T15437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3806'.
[  236.915708][T15437] geneve3: entered promiscuous mode
[  236.917843][T15437] geneve3: entered allmulticast mode
[  236.926567][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  236.929891][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  236.950418][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  236.953688][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  237.344481][T15441] x_tables: duplicate underflow at hook 3
[  237.397065][T15441] xt_nat: multiple ranges no longer supported
[  238.213629][T15445] netlink: 'syz.1.3809': attribute type 1 has an invalid length.
[  238.243554][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'.
[  238.253515][T15445] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  238.258959][T15445] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  238.306985][T15454] bond6: (slave bridge6): Enslaving as an active interface with a down link
[  238.313813][T15454] macvlan3: entered promiscuous mode
[  238.315808][T15454] macvlan3: entered allmulticast mode
[  238.317834][T15454] bond6: entered promiscuous mode
[  238.320032][T15454] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  238.323711][T15454] bond6: left promiscuous mode
[  238.426353][T15465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3817'.
[  238.450770][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'.
[  238.568556][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'.
[  238.900065][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'.
[  238.943125][T15528] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3838'.
[  238.950287][T15528] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3838'.
[  238.953825][T15527] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3838'.
[  239.110421][T15550] syzkaller0: entered promiscuous mode
[  239.112553][T15550] syzkaller0: entered allmulticast mode
[  239.593951][T15584] nft_compat: unsupported protocol 11
[  239.679444][T15586] netlink: 'syz.1.3860': attribute type 62 has an invalid length.
[  239.977994][T15612] syzkaller0: entered promiscuous mode
[  239.980249][T15612] syzkaller0: entered allmulticast mode
[  240.357434][T15638] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  240.359511][T15638] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  240.361658][T15638] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  240.597971][T15663] netlink: 'syz.0.3890': attribute type 4 has an invalid length.
[  240.601570][T15663] netlink: 'syz.0.3890': attribute type 4 has an invalid length.
[  241.123163][T15702] openvswitch: netlink: Flow key attr not present in new flow.
[  241.123163][T15703] openvswitch: netlink: Flow key attr not present in new flow.
[  241.161126][T15707] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  241.163385][T15707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.637063][T15668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  243.788371][T15730] __nla_validate_parse: 88 callbacks suppressed
[  243.788389][T15730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3910'.
[  243.819663][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'.
[  243.936119][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'.
[  243.947737][T15743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  243.964525][T15743] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  244.264386][   T34] audit: type=1800 audit(1778526643.901:6): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3931" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6729 res=0 errno=0
[  244.537480][T15806] ieee802154 phy0 wpan0: encryption failed: -22
[  244.542404][T15806] netlink: 'syz.1.3938': attribute type 83 has an invalid length.
[  244.683902][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3942'.
[  245.270429][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'.
[  245.462793][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3953'.
[  245.495222][T15843] pim6reg99999991: entered allmulticast mode
[  245.502641][T15843] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3954'.
[  245.637209][T15856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.641305][T15856] mac80211_hwsim hwsim4 d: renamed from syzkaller0
[  245.648506][T15856] tipc: Disabling bearer <eth:syzkaller0>
[  245.689049][T15859] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  245.701340][T15859] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  245.703808][T15859] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  245.717070][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3961'.
[  245.777495][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3963'.
[  246.017748][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3972'.
[  246.702097][T15881] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  246.704399][T15881] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  247.975134][ T5808] Bluetooth: hci1: command 0x0406 tx timeout
[  249.085579][T15881] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  249.101063][T15881] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  249.126977][T15911] syzkaller0: entered promiscuous mode
[  249.128996][T15911] syzkaller0: entered allmulticast mode
[  249.249899][T15918] __nla_validate_parse: 6 callbacks suppressed
[  249.249916][T15918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3976'.
[  249.467929][T15937] openvswitch: netlink: IP tunnel dst address not specified
[  249.476546][T15937] openvswitch: netlink: IPv6 tunnel dst address is zero
[  249.550315][T15934] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  249.553027][T15934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.632453][T15950] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  249.637541][T15950] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  249.646249][T15950] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  249.752240][T15959] netlink: 'syz.0.3985': attribute type 21 has an invalid length.
[  249.756578][T15959] netlink: 'syz.0.3985': attribute type 22 has an invalid length.
[  249.759154][T15959] netlink: 'syz.0.3985': attribute type 23 has an invalid length.
[  249.761476][T15959] netlink: 'syz.0.3985': attribute type 25 has an invalid length.
[  249.764457][T15959] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3985'.
[  249.812329][T15964] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  249.862054][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3987'.
[  249.872510][T15968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3987'.
[  250.053744][T15980] netlink: 'syz.0.3991': attribute type 21 has an invalid length.
[  250.059233][T15980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3991'.
[  250.063134][T15980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3991'.
[  250.397087][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3996'.
[  250.674941][T16001] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3998'.
[  250.862589][T16008] netlink: 195256 bytes leftover after parsing attributes in process `syz.1.4001'.
[  250.942661][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'.
[  251.019969][T16017] wlan1: mtu less than device minimum
[  251.234115][T16030] bridge0: port 3(wlan0) entered blocking state
[  251.236238][T16030] bridge0: port 3(wlan0) entered disabled state
[  251.744469][T16064] sctp: [Deprecated]: syz.0.4021 (pid 16064) Use of int in maxseg socket option.
[  251.744469][T16064] Use struct sctp_assoc_value instead
[  252.405835][T16109] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  252.410268][T16109] bond7 (unregistering): Released all slaves
[  252.596522][T16129] syzkaller1: entered allmulticast mode
[  252.763889][T16150] netlink: zone id is out of range
[  252.766044][T16150] netlink: zone id is out of range
[  252.880516][T16162] lo speed is unknown, defaulting to 1000
[  252.928897][T16171] IPv6: sit1: Disabled Multicast RS
[  253.030257][T16179] netlink: 'syz.2.4053': attribute type 1 has an invalid length.
[  253.512312][T16202] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  254.456250][T16236] xt_TPROXY: Can be used only with -p tcp or -p udp
[  254.500254][T16238] __nla_validate_parse: 11 callbacks suppressed
[  254.500268][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'.
[  255.180209][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'.
[  255.756273][T16297] veth0_to_bond: Caught tx_queue_len zero misconfig
[  255.884161][T16305] netlink: 496 bytes leftover after parsing attributes in process `syz.0.4098'.
[  255.891914][T16292] xt_hashlimit: overflow, rate too high: 0
[  255.901182][T16292] netlink: 'syz.2.4094': attribute type 62 has an invalid length.
[  256.081006][T16320] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  256.100610][T16323] SET target dimension over the limit!
[  256.128427][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'.
[  256.227818][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'.
[  256.233004][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4109'.
[  256.397702][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'.
[  256.481755][T16356] syzkaller0: entered promiscuous mode
[  256.483924][T16356] syzkaller0: entered allmulticast mode
[  256.580062][T16359] netlink: 49 bytes leftover after parsing attributes in process `syz.0.4118'.
[  256.613972][T16362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4119'.
[  256.698711][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4122'.
[  257.970189][   T31] lo speed is unknown, defaulting to 1000
[  257.970428][ T5867] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.976603][   T31] sqz0: Port: 1 Link DOWN
[  257.983986][ T5867] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  257.988915][ T5867] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.992163][ T5867] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  257.995467][   T31] lo speed is unknown, defaulting to 1000
[  257.997576][ T5867] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.000990][ T5867] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  258.004395][ T5867] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.008050][ T5867] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  258.284141][T16448] macsec1: entered promiscuous mode
[  258.938292][T16483] netlink: 'syz.0.4163': attribute type 10 has an invalid length.
[  258.962408][T16483] team0: Port device geneve0 added
[  259.201539][T16491] vti0: entered promiscuous mode
[  259.203685][T16491] vti0: entered allmulticast mode
[  259.320297][T16503] tc_dump_action: action bad kind
[  259.340177][T16503] syzkaller0: entered promiscuous mode
[  259.341822][T16503] syzkaller0: entered allmulticast mode
[  259.412939][T16511] syzkaller0: entered promiscuous mode
[  259.419322][T16511] syzkaller0: entered allmulticast mode
[  259.570035][T16519] __nla_validate_parse: 10 callbacks suppressed
[  259.570046][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4177'.
[  259.711644][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'.
[  259.879411][T16552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4190'.
[  259.882238][T16552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4190'.
[  260.004712][T16568] syzkaller0: entered promiscuous mode
[  260.006552][T16568] syzkaller0: entered allmulticast mode
[  260.039307][T16573] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  260.079715][T16577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4200'.
[  260.137810][T16586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4203'.
[  260.170513][T16588] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  260.175292][T16588] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  260.177817][T16588] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  260.235926][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'.
[  260.238831][T16594] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  260.990973][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4207'.
[  261.025166][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  261.319829][T16629] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4219'.
[  261.326066][T16629] .70X: renamed from hsr0
[  261.339509][T16629] .70X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.346429][T16629] .70X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.351917][T16629] .70X: entered allmulticast mode
[  261.353495][T16629] hsr_slave_0: entered allmulticast mode
[  261.358099][T16629] hsr_slave_1: entered allmulticast mode
[  261.361123][T16629] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  261.477794][T16646] netlink: 'syz.1.4226': attribute type 4 has an invalid length.
[  261.480195][T16646] netlink: 'syz.1.4226': attribute type 2 has an invalid length.
[  261.511083][T16648] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4228'.
[  261.514365][T16648] .70X: renamed from hsr0
[  261.526248][T16648] .70X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.529616][T16648] .70X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.533365][T16648] .70X: entered allmulticast mode
[  261.535813][T16648] hsr_slave_0: entered allmulticast mode
[  261.537910][T16648] hsr_slave_1: entered allmulticast mode
[  261.541419][T16648] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  261.744131][T16670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.373098][T16754] netlink: 'syz.0.4266': attribute type 1 has an invalid length.
[  263.397523][T16754] bond4: entered promiscuous mode
[  263.401932][T16754] 8021q: adding VLAN 0 to HW filter on device bond4
[  263.432102][T16754] bond4: (slave bridge5): making interface the new active one
[  263.434418][T16754] bridge5: entered promiscuous mode
[  263.437674][T16754] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  263.678598][T16779] netlink: 'syz.1.4276': attribute type 11 has an invalid length.
[  263.787602][T16790] bridge0: port 3(batadv5) entered blocking state
[  263.791179][T16790] bridge0: port 3(batadv5) entered disabled state
[  263.793934][T16790] batadv5: entered allmulticast mode
[  263.801542][T16790] batadv5: entered promiscuous mode
[  263.958216][T16807] syzkaller1: entered promiscuous mode
[  263.960241][T16807] syzkaller1: entered allmulticast mode
[  263.982634][T16794] netlink: 'syz.0.4281': attribute type 4 has an invalid length.
[  263.985869][T16794] netlink: 'syz.0.4281': attribute type 2 has an invalid length.
[  264.086543][T16814] openvswitch: netlink: IPv4 tun info is not correct
[  264.090055][T16814] netlink: 'syz.1.4285': attribute type 1 has an invalid length.
[  264.285443][ T5867] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  264.289204][ T5867] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  264.491769][T16825] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  264.998594][T16849] __nla_validate_parse: 14 callbacks suppressed
[  264.998604][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4299'.
[  265.417806][T16864] netlink: 'syz.1.4304': attribute type 21 has an invalid length.
[  265.420596][T16864] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4304'.
[  265.423958][T16864] netlink: 'syz.1.4304': attribute type 4 has an invalid length.
[  265.428173][T16864] netlink: 'syz.1.4304': attribute type 3 has an invalid length.
[  265.431027][T16864] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4304'.
[  265.490809][T16870] netlink: 'syz.0.4307': attribute type 1 has an invalid length.
[  265.501819][T16870] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4307'.
[  265.505562][T16870] NCSI netlink: No device for ifindex 0
[  265.552710][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4309'.
[  265.568984][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'.
[  265.620349][T16880] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4312'.
[  265.665172][T16882] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4313'.
[  265.703373][T16882] lo speed is unknown, defaulting to 1000
[  266.019746][T16895] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  266.022821][T16895] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  266.032452][T16895] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  266.905394][T16933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4329'.
[  266.958162][T16937] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  266.988133][T16939] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20000
[  267.113462][T16939] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4331'.
[  267.394300][T16969] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  267.399075][T16969] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  267.401841][T16969] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  268.634655][T17020] pimreg: entered allmulticast mode
[  268.637703][T17020] pimreg: left allmulticast mode
[  268.763821][T17028] xt_nat: multiple ranges no longer supported
[  268.934536][T17037] netlink: 'syz.1.4365': attribute type 1 has an invalid length.
[  268.960627][T17037] 8021q: adding VLAN 0 to HW filter on device bond7
[  268.981479][T17037] bond7: (slave veth13): Enslaving as an active interface with a down link
[  268.989848][T17037] bond7: (slave dummy0): Enslaving as an active interface with a down link
[  268.996915][T17037] bond7: (slave dummy0): Releasing active interface
[  269.066799][T17037] syzkaller0: entered promiscuous mode
[  269.068714][T17037] syzkaller0: entered allmulticast mode
[  270.238894][T17057] __nla_validate_parse: 6 callbacks suppressed
[  270.238908][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4372'.
[  270.396420][T17063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.646935][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'.
[  270.815880][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'.
[  270.826650][T17080] netlink: 'syz.2.4379': attribute type 1 has an invalid length.
[  270.862173][T17080] 8021q: adding VLAN 0 to HW filter on device bond7
[  270.881466][T17080] bond7: (slave gretap2): making interface the new active one
[  270.888321][T17080] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  270.997531][T17106] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4387'.
[  271.183786][T17117] bond5 (unregistering): Released all slaves
[  271.339368][T17132] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4397'.
[  271.375716][T17133] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  274.247137][T17139] netlink: 'syz.1.4400': attribute type 3 has an invalid length.
[  274.250034][T17139] netlink: 'syz.1.4400': attribute type 1 has an invalid length.
[  274.252911][T17139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4400'.
[  274.284496][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'.
[  274.300510][T17143] netlink: 'syz.0.4402': attribute type 8 has an invalid length.
[  274.415835][T17154] bond8 (unregistering): Released all slaves
[  274.428341][T17159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4406'.
[  274.435953][T17159] ipvlan0: entered promiscuous mode
[  274.440463][T17159] ipvlan0: left promiscuous mode
[  274.450352][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'.
[  277.427158][T17167] vlan4: entered promiscuous mode
[  277.429196][T17167] bridge0: entered promiscuous mode
[  277.549452][T17182] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  277.705699][T17194] sctp: [Deprecated]: syz.0.4420 (pid 17194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.705699][T17194] Use struct sctp_sack_info instead
[  277.727428][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'.
[  277.743706][T17198] syzkaller1: entered promiscuous mode
[  277.746136][T17198] syzkaller1: entered allmulticast mode
[  277.981098][T17217] vlan2: entered promiscuous mode
[  277.982997][T17217] bridge0: entered promiscuous mode
[  278.139854][T17226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4431'.
[  278.312782][T17254] netlink: 'syz.0.4439': attribute type 1 has an invalid length.
[  278.332181][T17254] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  278.354806][T17254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4439'.
[  278.359255][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4439'.
[  278.466450][T17262] netlink: 'syz.0.4440': attribute type 1 has an invalid length.
[  278.522385][T17266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4442'.
[  278.567739][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4444'.
[  278.572597][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4444'.
[  278.597624][T17274] syzkaller0: entered promiscuous mode
[  278.599956][T17274] syzkaller0: entered allmulticast mode
[  278.754629][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4447'.
[  278.771402][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4448'.
[  278.797380][T17286] netlink: 'syz.2.4449': attribute type 13 has an invalid length.
[  278.801011][T17286] gretap0: refused to change device tx_queue_len
[  278.803030][T17286] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  278.849633][T17291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4451'.
[  279.288746][T17322] netlink: 'syz.2.4462': attribute type 1 has an invalid length.
[  282.200914][T17465] netlink: 'syz.1.4513': attribute type 11 has an invalid length.
[  282.203994][T17465] netlink: 'syz.1.4513': attribute type 5 has an invalid length.
[  282.867794][T17520] __nla_validate_parse: 19 callbacks suppressed
[  282.867807][T17520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4535'.
[  282.977232][T17528] syzkaller0: entered promiscuous mode
[  282.979828][T17528] syzkaller0: entered allmulticast mode
[  282.983794][T17530] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4538'.
[  283.244445][T17548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  283.317378][T17550] lo speed is unknown, defaulting to 1000
[  283.756896][T17585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4555'.
[  283.760830][T17585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4555'.
[  283.824390][T17595] netlink: 'syz.0.4557': attribute type 2 has an invalid length.
[  283.828102][T17595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4557'.
[  284.005200][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'.
[  284.095776][T17615] x_tables: ip_tables: icmp match: only valid for protocol 1
[  284.658736][T17642] lo speed is unknown, defaulting to 1000
[  284.885457][T17649] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4577'.
[  285.200228][T17677] syzkaller0: entered promiscuous mode
[  285.202249][T17677] syzkaller0: entered allmulticast mode
[  285.255307][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'.
[  285.432131][T17700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.435789][T17700] syzkaller0: entered promiscuous mode
[  285.437546][T17700] syzkaller0: entered allmulticast mode
[  285.453763][T17700] tipc: Resetting bearer <eth:syzkaller0>
[  285.461792][T17699] tipc: Resetting bearer <eth:syzkaller0>
[  285.471656][T17699] tipc: Disabling bearer <eth:syzkaller0>
[  285.499025][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  285.676937][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4598'.
[  285.708824][T17716] x_tables: unsorted underflow at hook 1
[  285.730377][T17714] bond8: entered promiscuous mode
[  285.732198][T17714] bond8: entered allmulticast mode
[  286.272864][T17734] syzkaller0: entered promiscuous mode
[  286.274665][T17734] syzkaller0: entered allmulticast mode
[  286.583738][T17742] syzkaller0: entered promiscuous mode
[  286.595535][T17742] syzkaller0: entered allmulticast mode
[  286.632221][T17742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.678905][T17741] tipc: Resetting bearer <eth:syzkaller0>
[  286.698459][T17741] tipc: Disabling bearer <eth:syzkaller0>
[  286.875649][T17759] syzkaller0: entered promiscuous mode
[  286.878036][T17759] syzkaller0: entered allmulticast mode
[  286.992562][T17762] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  286.996218][T17762] CPU: 0 UID: 0 PID: 17762 Comm: syz.1.4617 Not tainted syzkaller #0 PREEMPT(full) 
[  286.996238][T17762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.996250][T17762] Call Trace:
[  286.996256][T17762]  <TASK>
[  286.996264][T17762]  dump_stack_lvl+0xe8/0x150
[  286.996293][T17762]  sysfs_warn_dup+0x8e/0xa0
[  286.996316][T17762]  sysfs_do_create_link_sd+0xc0/0x110
[  286.996339][T17762]  device_add_class_symlinks+0x1cf/0x240
[  286.996365][T17762]  device_add+0x475/0xb70
[  286.996390][T17762]  wiphy_register+0x1d73/0x2d50
[  286.996421][T17762]  ? __pfx_wiphy_register+0x10/0x10
[  286.996440][T17762]  ? __pfx_netdev_run_todo+0x10/0x10
[  286.996455][T17762]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  286.996478][T17762]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  286.996504][T17762]  ieee80211_register_hw+0x3571/0x4220
[  286.996526][T17762]  ? ieee80211_register_hw+0x14c1/0x4220
[  286.996545][T17762]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  286.996573][T17762]  ? __hrtimer_setup+0x181/0x200
[  286.996594][T17762]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  286.996614][T17762]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  286.996652][T17762]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  286.996668][T17762]  ? kstrndup+0xbf/0x160
[  286.996690][T17762]  hwsim_new_radio_nl+0xf35/0x1bd0
[  286.996725][T17762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.996749][T17762]  ? rcu_is_watching+0x15/0xb0
[  286.996766][T17762]  ? trace_kmalloc+0x2a/0x110
[  286.996783][T17762]  ? __nla_parse+0x40/0x60
[  286.996804][T17762]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  286.996858][T17762]  genl_family_rcv_msg_doit+0x22a/0x330
[  286.996886][T17762]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  286.996916][T17762]  ? bpf_lsm_capable+0x9/0x20
[  286.996932][T17762]  ? security_capable+0x7e/0x2c0
[  286.996952][T17762]  genl_rcv_msg+0x61c/0x7a0
[  286.996975][T17762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.996994][T17762]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.997015][T17762]  ? __lock_acquire+0x6b5/0x2cf0
[  286.997039][T17762]  netlink_rcv_skb+0x232/0x4b0
[  286.997086][T17762]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.997108][T17762]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.997137][T17762]  ? down_read+0x272/0x2e0
[  286.997152][T17762]  ? genl_rcv+0xd/0x40
[  286.997173][T17762]  genl_rcv+0x28/0x40
[  286.997192][T17762]  netlink_unicast+0x80f/0x9b0
[  286.997211][T17762]  ? __pfx_netlink_unicast+0x10/0x10
[  286.997230][T17762]  ? netlink_sendmsg+0x650/0xb40
[  286.997247][T17762]  ? skb_put+0x11b/0x210
[  286.997270][T17762]  netlink_sendmsg+0x813/0xb40
[  286.997294][T17762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.997313][T17762]  ? aa_sock_msg_perm+0xf1/0x1b0
[  286.997331][T17762]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.997351][T17762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.997366][T17762]  ____sys_sendmsg+0xa68/0xad0
[  286.997394][T17762]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.997423][T17762]  ? import_iovec+0x73/0xa0
[  286.997448][T17762]  ___sys_sendmsg+0x2a5/0x360
[  286.997473][T17762]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.997497][T17762]  ? futex_wake+0x4ac/0x580
[  286.997542][T17762]  ? __fget_files+0x2a/0x420
[  286.997563][T17762]  ? __fget_files+0x3a0/0x420
[  286.997589][T17762]  __x64_sys_sendmsg+0x1bd/0x2a0
[  286.997609][T17762]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.997634][T17762]  ? rcu_is_watching+0x15/0xb0
[  286.997661][T17762]  do_syscall_64+0x14d/0xf80
[  286.997683][T17762]  ? trace_irq_disable+0x3b/0x150
[  286.997704][T17762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.997724][T17762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.997740][T17762] RIP: 0033:0x7f6df8b9cdd9
[  286.997756][T17762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.997772][T17762] RSP: 002b:00007f6df9b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.997791][T17762] RAX: ffffffffffffffda RBX: 00007f6df8e15fa0 RCX: 00007f6df8b9cdd9
[  286.997803][T17762] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  286.997813][T17762] RBP: 00007f6df8c32d69 R08: 0000000000000000 R09: 0000000000000000
[  286.997824][T17762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.997834][T17762] R13: 00007f6df8e16038 R14: 00007f6df8e15fa0 R15: 00007ffce87d67d8
[  286.997861][T17762]  </TASK>
[  287.423919][T17792] netlink: 'syz.0.4627': attribute type 4 has an invalid length.
[  287.609061][T17807] netlink: 'syz.1.4631': attribute type 1 has an invalid length.
[  288.046383][T17829] __nla_validate_parse: 12 callbacks suppressed
[  288.046393][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'.
[  288.352192][T17857] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.4652'.
[  288.373335][T17859] netlink: 'syz.2.4651': attribute type 1 has an invalid length.
[  288.407714][T17859] 8021q: adding VLAN 0 to HW filter on device bond8
[  288.446568][   T57] block nbd0: Receive control failed (result -32)
[  288.511388][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'.
[  288.671075][T17878] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  288.691417][T17879] netlink: 'syz.0.4658': attribute type 13 has an invalid length.
[  288.697177][T17879] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4658'.
[  288.793982][T17879] syz_tun: refused to change device tx_queue_len
[  288.805306][T17879] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  288.817820][T17881] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  288.821469][T17881] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  289.015553][T17890] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.021514][T17890] 8021q: adding VLAN 0 to HW filter on device team0
[  289.024357][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4658'.
[  289.033512][T17890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.059149][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4663'.
[  289.190461][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4671'.
[  289.259612][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4672'.
[  289.290065][T17919] netlink: 'syz.2.4674': attribute type 1 has an invalid length.
[  289.292377][T17919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4674'.
[  289.372057][T17925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4676'.
[  289.558984][T17945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.891730][T17984] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  290.020668][T17996] netlink: 'syz.0.4702': attribute type 3 has an invalid length.
[  290.323764][T18030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.379853][T18034] netlink: 'syz.1.4714': attribute type 3 has an invalid length.
[  290.447638][T18039] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  290.450052][T18039] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  290.452423][T18039] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  291.509183][T18088] Cannot find del_set index 49151 as target
[  292.317109][T18122] x_tables: unsorted underflow at hook 1
[  292.413869][T18136] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  292.416808][T18136] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  292.419360][T18136] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  292.918682][T18150] lo speed is unknown, defaulting to 1000
[  293.103336][T18155] __nla_validate_parse: 20 callbacks suppressed
[  293.103347][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4752'.
[  293.391417][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'.
[  293.398652][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'.
[  293.521630][T18176] syzkaller1: tun_chr_ioctl cmd 1074025677
[  293.523377][T18176] syzkaller1: linktype set to 805
[  293.701026][T18204] xt_hashlimit: max too large, truncated to 1048576
[  293.723062][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4772'.
[  293.732978][T18206] netlink: 'syz.0.4771': attribute type 1 has an invalid length.
[  293.736250][T18206] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4771'.
[  293.826072][T18214] netlink: 'syz.2.4776': attribute type 1 has an invalid length.
[  293.828332][T18214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.832197][T18214] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4776'.
[  293.913361][T18224] dummy0: Caught tx_queue_len zero misconfig
[  293.919380][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'.
[  293.922683][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4777'.
[  293.923262][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4781'.
[  293.943349][T18225] syzkaller0: entered promiscuous mode
[  293.945248][T18225] syzkaller0: entered allmulticast mode
[  293.949611][T18225] tc action pedit offset must be on 32 bit boundaries
[  294.046127][T18233] netlink: 'syz.0.4784': attribute type 15 has an invalid length.
[  294.048575][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'.
[  294.056764][T18233] netlink: 'syz.0.4784': attribute type 15 has an invalid length.
[  294.057355][ T6779] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  294.063915][ T6779] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  294.067703][ T6779] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  294.070033][ T6779] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  294.239480][T18250] netem: incorrect ge model size
[  294.241631][T18250] netem: change failed
[  294.399325][T18260] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  294.401869][T18260] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  294.405490][T18261] sctp: [Deprecated]: syz.2.4793 (pid 18261) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.405490][T18261] Use struct sctp_sack_info instead
[  294.410946][T18260] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  294.531274][T18273] netlink: 'syz.0.4796': attribute type 21 has an invalid length.
[  294.534267][T18273] netlink: 'syz.0.4796': attribute type 22 has an invalid length.
[  294.539122][T18273] netlink: 'syz.0.4796': attribute type 23 has an invalid length.
[  294.542121][T18273] netlink: 'syz.0.4796': attribute type 25 has an invalid length.
[  294.546369][T18273] netlink: 'syz.0.4796': attribute type 26 has an invalid length.
[  294.594143][T18273] netlink: 'syz.0.4796': attribute type 4 has an invalid length.
[  294.641653][T18277] ieee802154 phy0 wpan0: encryption failed: -22
[  294.690175][T18279] syzkaller0: entered promiscuous mode
[  294.692240][T18279] syzkaller0: entered allmulticast mode
[  295.068065][T18294] xt_TCPMSS: Only works on TCP SYN packets
[  295.292346][T18307] syzkaller0: entered promiscuous mode
[  295.294105][T18307] syzkaller0: entered allmulticast mode
[  296.484291][T18328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.533887][T18328] syzkaller0: entered promiscuous mode
[  296.536786][T18328] syzkaller0: entered allmulticast mode
[  296.541031][T18328] tipc: Resetting bearer <eth:syzkaller0>
[  296.581022][T18327] tipc: Resetting bearer <eth:syzkaller0>
[  297.658773][T18327] tipc: Disabling bearer <eth:syzkaller0>
[  297.663605][T18347] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  297.740904][   T32] tipc: Node number set to 1349794251
[  297.819415][T18365] pim6reg: entered allmulticast mode
[  297.825374][T18365] pim6reg: left allmulticast mode
[  298.120079][T18403] Unsupported ieee802154 address type: 0
[  298.337120][T18425] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  298.340491][T18425] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  298.344332][T18425] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  298.689364][T18444] __nla_validate_parse: 16 callbacks suppressed
[  298.689376][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4852'.
[  298.693825][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4852'.
[  298.768025][T18448] validate_nla: 11 callbacks suppressed
[  298.768036][T18448] netlink: 'syz.0.4854': attribute type 1 has an invalid length.
[  298.790130][T18448] 8021q: adding VLAN 0 to HW filter on device bond6
[  298.799762][T18448] 8021q: adding VLAN 0 to HW filter on device bond6
[  298.802141][T18448] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  298.806616][T18448] bond6: (slave vcan1): Error -95 calling set_mac_address
[  299.143950][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4858'.
[  299.201487][T18467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4859'.
[  299.316056][T18480] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  299.499670][T18493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4870'.
[  299.537655][T18496] netlink: 'syz.1.4871': attribute type 2 has an invalid length.
[  299.540460][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'.
[  299.545501][T18496] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  299.548483][T18496] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  299.551543][T18496] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  299.964523][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4876'.
[  299.968309][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4876'.
[  300.006984][T18511] Cannot find del_set index 49151 as target
[  300.009599][T18511] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4877'.
[  300.217228][T18521] netlink: 'syz.0.4881': attribute type 13 has an invalid length.
[  300.219524][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4881'.
[  300.684095][T18543] : entered promiscuous mode
[  301.124242][T18559] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  301.174955][T18556] netlink: 'syz.2.4895': attribute type 1 has an invalid length.
[  301.220194][T18556] 8021q: adding VLAN 0 to HW filter on device bond9
[  301.236327][T18565] vlan4: entered promiscuous mode
[  301.240372][T18565] bond9: entered promiscuous mode
[  301.242397][T18565] vlan4: entered allmulticast mode
[  301.246352][T18565] bond9: entered allmulticast mode
[  301.262914][T18556] bond9: (slave bridge8): making interface the new active one
[  301.265575][T18556] bridge8: entered promiscuous mode
[  301.267505][T18556] bridge8: entered allmulticast mode
[  301.270161][T18556] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  301.895534][T18589] netdevsim netdevsim1 : renamed from netdevsim0
[  302.443386][T18624] netlink: 'syz.2.4921': attribute type 3 has an invalid length.
[  302.447603][T18624] netlink: 'syz.2.4921': attribute type 3 has an invalid length.
[  302.596933][T18633] syzkaller1: entered promiscuous mode
[  302.598829][T18633] syzkaller1: entered allmulticast mode
[  302.722487][T18638] netlink: 'syz.0.4926': attribute type 1 has an invalid length.
[  302.796533][T18641] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  303.013827][T18651] netlink: 'syz.1.4927': attribute type 3 has an invalid length.
[  303.019827][T18651] netlink: 'syz.1.4927': attribute type 3 has an invalid length.
[  304.138019][T18695] __nla_validate_parse: 17 callbacks suppressed
[  304.138031][T18695] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4933'.
[  304.194176][T18699] Cannot find del_set index 49151 as target
[  304.197556][T18699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4937'.
[  304.377810][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.380563][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.383320][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.386714][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.389179][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.391718][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.394494][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.398353][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.445660][T18706] batman_adv: batadv0: Adding interface: ipvlan2
[  304.447709][T18706] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.456931][T18706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.460306][T18706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.463521][T18706] batman_adv: batadv0: Interface activated: ipvlan2
[  304.760010][T18726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4944'.
[  304.926993][T18739] syzkaller0: entered promiscuous mode
[  304.929217][T18739] syzkaller0: entered allmulticast mode
[  305.164168][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4954'.
[  305.333949][T18758] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  305.337643][T18758] CPU: 0 UID: 0 PID: 18758 Comm: syz.0.4957 Not tainted syzkaller #0 PREEMPT(full) 
[  305.337655][T18758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.337661][T18758] Call Trace:
[  305.337665][T18758]  <TASK>
[  305.337670][T18758]  dump_stack_lvl+0xe8/0x150
[  305.337710][T18758]  sysfs_warn_dup+0x8e/0xa0
[  305.337725][T18758]  sysfs_do_create_link_sd+0xc0/0x110
[  305.337736][T18758]  device_add_class_symlinks+0x1cf/0x240
[  305.337752][T18758]  device_add+0x475/0xb70
[  305.337766][T18758]  wiphy_register+0x1d73/0x2d50
[  305.337792][T18758]  ? __pfx_wiphy_register+0x10/0x10
[  305.337802][T18758]  ? __pfx_netdev_run_todo+0x10/0x10
[  305.337811][T18758]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  305.337824][T18758]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  305.337840][T18758]  ieee80211_register_hw+0x3571/0x4220
[  305.337856][T18758]  ? ieee80211_register_hw+0x14c1/0x4220
[  305.337868][T18758]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  305.337883][T18758]  ? __hrtimer_setup+0x181/0x200
[  305.337897][T18758]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  305.337908][T18758]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  305.337935][T18758]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  305.337945][T18758]  ? kstrndup+0xbf/0x160
[  305.337961][T18758]  hwsim_new_radio_nl+0xf35/0x1bd0
[  305.337982][T18758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  305.337998][T18758]  ? rcu_is_watching+0x15/0xb0
[  305.338010][T18758]  ? trace_kmalloc+0x2a/0x110
[  305.338022][T18758]  ? __nla_parse+0x40/0x60
[  305.338037][T18758]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  305.338054][T18758]  genl_family_rcv_msg_doit+0x22a/0x330
[  305.338068][T18758]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  305.338085][T18758]  ? bpf_lsm_capable+0x9/0x20
[  305.338097][T18758]  ? security_capable+0x7e/0x2c0
[  305.338111][T18758]  genl_rcv_msg+0x61c/0x7a0
[  305.338125][T18758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  305.338135][T18758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  305.338147][T18758]  ? __lock_acquire+0x6b5/0x2cf0
[  305.338164][T18758]  netlink_rcv_skb+0x232/0x4b0
[  305.338173][T18758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  305.338185][T18758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.338202][T18758]  ? down_read+0x272/0x2e0
[  305.338210][T18758]  ? genl_rcv+0xd/0x40
[  305.338221][T18758]  genl_rcv+0x28/0x40
[  305.338231][T18758]  netlink_unicast+0x80f/0x9b0
[  305.338243][T18758]  ? __pfx_netlink_unicast+0x10/0x10
[  305.338252][T18758]  ? netlink_sendmsg+0x650/0xb40
[  305.338261][T18758]  ? skb_put+0x11b/0x210
[  305.338274][T18758]  netlink_sendmsg+0x813/0xb40
[  305.338287][T18758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.338298][T18758]  ? aa_sock_msg_perm+0xf1/0x1b0
[  305.338309][T18758]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  305.338320][T18758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.338328][T18758]  ____sys_sendmsg+0xa68/0xad0
[  305.338346][T18758]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.338361][T18758]  ? import_iovec+0x73/0xa0
[  305.338376][T18758]  ___sys_sendmsg+0x2a5/0x360
[  305.338389][T18758]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.338403][T18758]  ? futex_wake+0x4ac/0x580
[  305.338427][T18758]  ? __fget_files+0x2a/0x420
[  305.338439][T18758]  ? __fget_files+0x3a0/0x420
[  305.338454][T18758]  __x64_sys_sendmsg+0x1bd/0x2a0
[  305.338466][T18758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  305.338482][T18758]  ? rcu_is_watching+0x15/0xb0
[  305.338497][T18758]  do_syscall_64+0x14d/0xf80
[  305.338509][T18758]  ? trace_irq_disable+0x3b/0x150
[  305.338521][T18758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.338532][T18758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.338540][T18758] RIP: 0033:0x7f9a16f9cdd9
[  305.338549][T18758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.338556][T18758] RSP: 002b:00007f9a151f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.338566][T18758] RAX: ffffffffffffffda RBX: 00007f9a17215fa0 RCX: 00007f9a16f9cdd9
[  305.338572][T18758] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  305.338577][T18758] RBP: 00007f9a17032d69 R08: 0000000000000000 R09: 0000000000000000
[  305.338581][T18758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.338586][T18758] R13: 00007f9a17216038 R14: 00007f9a17215fa0 R15: 00007ffed9150378
[  305.338600][T18758]  </TASK>
[  305.582761][T18766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4959'.
[  305.745166][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4963'.
[  305.806312][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4964'.
[  306.749353][T18801] batadv_slave_1: entered promiscuous mode
[  306.872634][T18800] batadv_slave_1: left promiscuous mode
[  307.081278][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4976'.
[  307.093384][T18817] batadv_slave_0: entered promiscuous mode
[  307.098124][T18817] batadv_slave_0: left promiscuous mode
[  307.125243][T18815] syzkaller0: entered promiscuous mode
[  307.127027][T18815] syzkaller0: entered allmulticast mode
[  307.130235][T18815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.143304][T18814] tipc: Resetting bearer <eth:syzkaller0>
[  307.175203][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4977'.
[  307.179886][T18814] tipc: Disabling bearer <eth:syzkaller0>
[  307.302063][T18832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4982'.
[  307.377753][T18839] sctp: [Deprecated]: syz.0.4985 (pid 18839) Use of int in max_burst socket option.
[  307.377753][T18839] Use struct sctp_assoc_value instead
[  308.417111][T18868] .71X: renamed from .70X (while UP)
[  308.420563][T18868] net_ratelimit: 25 callbacks suppressed
[  308.420578][T18868] A link change request failed with some changes committed already. Interface .71X may have been left with an inconsistent configuration, please check.
[  308.449422][T18870] Cannot find del_set index 49151 as target
[  308.586620][T18877] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  308.729156][T18888] syz.2.5002 uses old SIOCAX25GETINFO
[  308.886025][T18896] ipt_ECN: cannot use operation on non-tcp rule
[  309.209988][T18907] lo speed is unknown, defaulting to 1000
[  309.233812][T18909] Cannot find del_set index 49151 as target
[  309.253946][T18911] __nla_validate_parse: 6 callbacks suppressed
[  309.253961][T18911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5008'.
[  309.785058][T18918] tc_dump_action: action bad kind
[  309.832245][T18923] netlink: 'syz.0.5012': attribute type 10 has an invalid length.
[  309.998508][T18928] bond10: option downdelay: invalid value (18446744073709547521)
[  310.001463][T18928] bond10: option downdelay: allowed values 0 - 2147483647
[  310.140208][T18937] netlink: 'syz.1.5016': attribute type 10 has an invalid length.
[  310.143031][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5016'.
[  310.157810][T18928] bond10 (unregistering): Released all slaves
[  310.199013][T18932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5016'.
[  310.568170][T18954] tipc: Enabled bearer <eth:ipvlan0>, priority 31
[  310.571972][T18951] tipc: Enabling of bearer <eth:ipvlan0> rejected, already enabled
[  310.708014][T18959] netlink: 'syz.0.5024': attribute type 28 has an invalid length.
[  310.957779][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5028'.
[  311.297849][T18991] netlink: 'syz.2.5034': attribute type 2 has an invalid length.
[  311.304382][T18991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5034'.
[  311.431190][T18992] netlink: 'syz.1.5035': attribute type 1 has an invalid length.
[  311.434173][T18992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5035'.
[  311.601638][T19000] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5038'.
[  311.605200][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5039'.
[  311.609537][T19000] xt_hashlimit: size too large, truncated to 1048576
[  312.730362][T19023] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  313.186267][T19034] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  313.565000][T19055] netlink: 'syz.0.5055': attribute type 8 has an invalid length.
[  313.771617][T19070] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5062'.
[  313.829041][T19073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5063'.
[  314.085970][T19090] netlink: 'syz.1.5069': attribute type 4 has an invalid length.
[  314.089843][T19090] netlink: 'syz.1.5069': attribute type 2 has an invalid length.
[  314.273545][T19097] __nla_validate_parse: 1 callbacks suppressed
[  314.273564][T19097] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5073'.
[  315.270467][T19108] syzkaller1: entered promiscuous mode
[  315.277834][T19108] syzkaller1: entered allmulticast mode
[  316.138211][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5086'.
[  316.166389][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5084'.
[  316.579204][T19147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5089'.
[  316.674151][T19149] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5090'.
[  316.816075][T19152] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  316.856229][T19152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.913872][T19157] IPVS: sh: FWM 3 0x00000003 - no destination available
[  316.919360][T19154] lo speed is unknown, defaulting to 1000
[  316.923684][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  317.450729][T19164] syzkaller0: entered promiscuous mode
[  317.453089][T19164] syzkaller0: entered allmulticast mode
[  317.459194][ T5867] tipc: Subscription rejected, illegal request
[  317.642752][T19174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5097'.
[  317.909978][T19183] netlink: 496 bytes leftover after parsing attributes in process `syz.2.5100'.
[  318.202978][T19192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5104'.
[  318.328984][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'.
[  318.708277][T19214] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5111'.
[  318.723470][T19214] syzkaller1: entered promiscuous mode
[  318.727992][T19214] syzkaller1: entered allmulticast mode
[  319.145767][T19228] netlink: 'syz.1.5115': attribute type 3 has an invalid length.
[  319.501354][T19240] __nla_validate_parse: 3 callbacks suppressed
[  319.501373][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5118'.
[  319.754044][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5120'.
[  319.843263][T19250] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5123'.
[  319.854065][T19250] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5123'.
[  319.860674][T19250] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  319.867852][T19253] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5122'.
[  320.055881][T19262] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  320.572544][T19284] veth0_virt_wifi: mtu greater than device maximum
[  320.612952][T19289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.620181][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5135'.
[  320.623454][T19289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.634539][T19289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.191327][T19316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5145'.
[  322.195269][T19316] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5145'.
[  322.219108][T19316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5145'.
[  322.247415][T19316] netlink: 296 bytes leftover after parsing attributes in process `syz.0.5145'.
[  322.307238][T19319] : renamed from veth0_to_bond
[  322.447514][T19331] netlink: 'syz.2.5150': attribute type 1 has an invalid length.
[  322.461093][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  322.511562][T19333] syzkaller1: entered promiscuous mode
[  322.513285][T19333] syzkaller1: entered allmulticast mode
[  324.359050][T19370] netlink: 'syz.0.5161': attribute type 4 has an invalid length.
[  324.361439][T19370] netlink: 'syz.0.5161': attribute type 2 has an invalid length.
[  325.119916][T19415] : entered promiscuous mode
[  325.170914][T19419] __nla_validate_parse: 6 callbacks suppressed
[  325.170927][T19419] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5176'.
[  325.234299][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5176'.
[  325.698941][T19429] syzkaller0: entered promiscuous mode
[  325.706540][T19429] syzkaller0: entered allmulticast mode
[  326.069687][T19434] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5181'.
[  326.072366][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5181'.
[  326.078289][T19434] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5181'.
[  326.085694][T19434] netlink: 'syz.1.5181': attribute type 62 has an invalid length.
[  326.387574][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'.
[  326.619701][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5191'.
[  326.626750][T19469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5194'.
[  326.830468][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5200'.
[  327.225471][T19500] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  327.247216][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5210'.
[  327.291568][T19496] syzkaller0: entered promiscuous mode
[  327.293477][T19496] syzkaller0: entered allmulticast mode
[  329.030289][T19581] tun0: tun_chr_ioctl cmd 2147767507
[  331.169488][T19606] __nla_validate_parse: 4 callbacks suppressed
[  331.169501][T19606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5244'.
[  331.300065][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5246'.
[  331.302696][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5246'.
[  331.443321][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5246'.
[  331.551454][T19619] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.5247'.
[  332.302669][T19651] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5258'.
[  332.682506][T19671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5263'.
[  332.686432][T19671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5263'.
[  333.150351][T19687] syzkaller0: entered promiscuous mode
[  333.152575][T19687] syzkaller0: entered allmulticast mode
[  333.895122][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5270'.
[  335.028970][T19692] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  337.341172][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'.
[  337.399222][T19744] syzkaller1: entered promiscuous mode
[  337.401764][T19744] syzkaller1: entered allmulticast mode
[  338.247928][T19753] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  338.359990][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5293'.
[  338.369298][T19757] tipc: Resetting bearer <ib:team0>
[  338.394453][T19757] tipc: Resetting bearer <ib:team0>
[  338.460187][T19759] netlink: 'syz.2.5294': attribute type 3 has an invalid length.
[  338.464518][T19759] netlink: 772 bytes leftover after parsing attributes in process `syz.2.5294'.
[  338.468405][T19759] netlink: 'syz.2.5294': attribute type 3 has an invalid length.
[  338.472552][T19759] netlink: 772 bytes leftover after parsing attributes in process `syz.2.5294'.
[  338.516931][T19761] netlink: 'syz.2.5295': attribute type 7 has an invalid length.
[  338.520729][T19761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'.
[  338.566981][T19763] netlink: 'syz.2.5296': attribute type 5 has an invalid length.
[  340.021414][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'.
[  340.026242][T19779] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5302'.
[  340.174170][T19789] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  340.477692][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5308'.
[  341.062755][T19818] xt_hashlimit: size too large, truncated to 1048576
[  341.952537][T19835] netlink: 'syz.2.5318': attribute type 4 has an invalid length.
[  341.958471][T19835] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5318'.
[  342.356834][T19838] netlink: 'syz.2.5319': attribute type 4 has an invalid length.
[  342.362527][T19838] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  342.663668][T19844] syzkaller0: entered promiscuous mode
[  342.666432][T19844] syzkaller0: entered allmulticast mode
[  342.671693][T19844] syzkaller0: tun_net_xmit 14
[  342.690287][T19844] syzkaller1: entered promiscuous mode
[  342.692398][T19844] syzkaller1: entered allmulticast mode
[  342.697480][T19844] netlink: 18 bytes leftover after parsing attributes in process `syz.1.5322'.
[  342.776088][T19858] netlink: 'syz.0.5326': attribute type 1 has an invalid length.
[  342.821886][T19858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5326'.
[  342.829305][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5326'.
[  343.008344][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'.
[  343.437016][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.439759][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.442580][T19897] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.447694][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.450820][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.454033][T19897] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5341'.
[  343.551293][T19906] netlink: 'syz.1.5344': attribute type 29 has an invalid length.
[  343.554170][T19906] netlink: 'syz.1.5344': attribute type 29 has an invalid length.
[  344.134291][T19944] Cannot find del_set index 49151 as target
[  344.277528][T19948] openvswitch: netlink: Flow key attr not present in new flow.
[  344.396246][T19952] openvswitch: netlink: Message has 4 unknown bytes.
[  344.594554][T19964] netlink: 'syz.1.5368': attribute type 1 has an invalid length.
[  344.598201][T19963] netlink: 'syz.1.5368': attribute type 1 has an invalid length.
[  345.524052][T20031] macsec2: entered promiscuous mode
[  345.528277][T20031] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  345.776309][T20052] block nbd1: Unsupported socket: should be TCP or UNIX.
[  346.274421][T20087] dvmrp0: entered allmulticast mode
[  346.713810][T20094] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  347.525127][T20151] xt_hashlimit: size too large, truncated to 1048576
[  347.552065][T20155] xt_CONNSECMARK: invalid mode: 0
[  347.726798][T20164] __nla_validate_parse: 13 callbacks suppressed
[  347.726814][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5436'.
[  347.785070][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5441'.
[  347.836971][T20183] syzkaller0: entered promiscuous mode
[  347.840871][T20183] syzkaller0: entered allmulticast mode
[  347.916221][T20191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5445'.
[  348.188380][T20215] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  348.259444][T20223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5458'.
[  348.430865][T20231] xt_l2tp: missing protocol rule (udp|l2tpip)
[  348.902551][T20251] Bluetooth: MGMT ver 1.23
[  349.021135][T20255] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5473'.
[  349.038784][T20261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5474'.
[  349.092402][T20267] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5477'.
[  349.097928][T20267] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5477'.
[  349.120031][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5478'.
[  349.127749][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5478'.
[  349.137302][T20270] xt_HMARK: proto mask must be zero with L3 mode
[  349.334138][T20287] xt_hashlimit: size too large, truncated to 1048576
[  349.339291][T20291] netlink: 'syz.2.5485': attribute type 1 has an invalid length.
[  352.914302][T20345] syzkaller0: entered promiscuous mode
[  352.923598][T20345] syzkaller0: entered allmulticast mode
[  352.965797][T20349] netlink: 'syz.2.5507': attribute type 4 has an invalid length.
[  352.968071][T20349] netlink: 'syz.2.5507': attribute type 2 has an invalid length.
[  352.972987][T20350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  352.976693][T20350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.018610][T20354] tipc: Resetting bearer <eth:gre0>
[  353.040964][T20354] tipc: Resetting bearer <ib:team0>
[  353.042712][T20354] tipc: Resetting bearer <ib:team0>
[  353.091404][T20354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.108012][T20354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.111302][T20354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  353.117053][T20354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.120388][T20365] ieee802154 phy0 wpan0: encryption failed: -22
[  353.149929][T20354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.153041][T20354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.181516][T20365] syzkaller0: entered promiscuous mode
[  353.183240][T20365] syzkaller0: entered allmulticast mode
[  353.341942][T20376] __nla_validate_parse: 74 callbacks suppressed
[  353.341954][T20376] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5516'.
[  353.591511][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5522'.
[  353.665900][T20406] netlink: 'syz.1.5525': attribute type 1 has an invalid length.
[  353.668032][T20406] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5525'.
[  353.670784][T20406] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5525'.
[  353.673661][T20406] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5525'.
[  353.868181][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5531'.
[  353.937990][T20425] netlink: 'syz.0.5532': attribute type 1 has an invalid length.
[  353.941056][T20425] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5532'.
[  353.943914][T20425] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5532'.
[  353.948928][T20425] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5532'.
[  354.088855][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5536'.
[  354.138849][T20447] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  354.285426][T20457] syzkaller0: entered promiscuous mode
[  354.287121][T20457] syzkaller0: entered allmulticast mode
[  354.424665][T20472] syzkaller0: entered promiscuous mode
[  354.426436][T20472] syzkaller0: entered allmulticast mode
[  354.486096][T20476] netlink: 'syz.2.5550': attribute type 1 has an invalid length.
[  354.983142][T20513] netlink: 'syz.2.5564': attribute type 5 has an invalid length.
[  355.016422][T20516] netlink: 'syz.2.5565': attribute type 1 has an invalid length.
[  355.547606][T20531] xt_hashlimit: size too large, truncated to 1048576
[  355.694273][T20538] netlink: 'syz.0.5572': attribute type 1 has an invalid length.
[  357.346418][T20580] netlink: 'syz.2.5584': attribute type 3 has an invalid length.
[  357.638137][T20614] netlink: 'syz.2.5598': attribute type 15 has an invalid length.
[  357.887656][T20626] ieee802154 phy0 wpan0: encryption failed: -22
[  357.893999][T20626] 0X: renamed from caif0
[  357.897885][T20626] 0X: entered allmulticast mode
[  357.899525][T20626] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  358.190007][T20632] ip6t_srh: unknown srh invflags 4000
[  358.439199][T20657] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  358.504812][T20655] block nbd1: server does not support multiple connections per device.
[  358.510498][T20655] block nbd1: shutting down sockets
[  358.520192][T20658] bridge0: port 4(vlan5) entered blocking state
[  358.522600][T20658] bridge0: port 4(vlan5) entered disabled state
[  358.546043][T20658] vlan5: entered allmulticast mode
[  358.547996][T20658] geneve0: entered allmulticast mode
[  358.561618][T20658] vlan5: entered promiscuous mode
[  358.563428][T20658] geneve0: entered promiscuous mode
[  358.678624][T20672] __nla_validate_parse: 24 callbacks suppressed
[  358.678636][T20672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5618'.
[  359.437014][T20692] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  359.635789][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5626'.
[  359.854917][T20715] netlink: 'syz.2.5631': attribute type 1 has an invalid length.
[  360.014070][T20723] syzkaller0: entered promiscuous mode
[  360.016999][T20723] syzkaller0: entered allmulticast mode
[  361.361909][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5640'.
[  363.345166][T20751] Cannot find del_set index 49151 as target
[  363.348023][T20751] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5642'.
[  363.499033][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5646'.
[  363.515891][T20765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5645'.
[  363.553758][T20762] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  363.666197][T20772] netlink: 'syz.0.5647': attribute type 1 has an invalid length.
[  363.686206][T20772] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5647'.
[  363.697265][T20772] netlink: 'syz.0.5647': attribute type 1 has an invalid length.
[  363.701861][T20776] netlink: 'syz.1.5650': attribute type 4 has an invalid length.
[  363.706412][T20776] netlink: 'syz.1.5650': attribute type 4 has an invalid length.
[  363.709266][T20772] netlink: 'syz.0.5647': attribute type 8 has an invalid length.
[  363.717027][   T31] lo speed is unknown, defaulting to 1000
[  363.718833][   T31] sqz0: Port: 1 Link ACTIVE
[  363.720477][   T31] lo speed is unknown, defaulting to 1000
[  363.724071][T20772] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5647'.
[  363.786574][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5652'.
[  363.896092][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'.
[  363.916171][T20784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5651'.
[  363.945497][T20790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5655'.
[  364.127803][T20796] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  364.131228][T20796] openvswitch: netlink: Flow key attr not present in new flow.
[  364.142177][T20796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  364.309722][T20802] netlink: 492 bytes leftover after parsing attributes in process `syz.1.5659'.
[  364.355664][T20806] netlink: 'syz.2.5660': attribute type 2 has an invalid length.
[  364.417871][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5661'.
[  364.421230][T20808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5661'.
[  364.424394][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5661'.
[  381.606762][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.611667][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.615800][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.619979][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.623902][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.632231][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.639615][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.642429][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.645866][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.649684][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.540048][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.545769][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.549045][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.552572][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.556273][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.512036][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.516031][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.519811][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.522753][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.526484][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.734983][ T5816] Bluetooth: hci3: command tx timeout
[  383.955395][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  384.614912][ T5816] Bluetooth: hci4: command tx timeout
[  385.575804][ T5816] Bluetooth: hci5: command tx timeout
[  385.815007][ T5816] Bluetooth: hci3: command tx timeout
[  386.694931][ T5816] Bluetooth: hci4: command tx timeout
[  387.655501][ T5816] Bluetooth: hci5: command tx timeout
[  387.894923][ T5816] Bluetooth: hci3: command tx timeout
[  388.774859][ T5816] Bluetooth: hci4: command tx timeout
[  389.734741][ T5816] Bluetooth: hci5: command tx timeout
[  389.975106][ T5816] Bluetooth: hci3: command tx timeout
[  390.854869][ T5816] Bluetooth: hci4: command tx timeout
[  391.815243][ T5816] Bluetooth: hci5: command tx timeout
[  423.654594][    C1] sched: DL replenish lagged too much
[  442.549081][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  442.555097][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  442.558423][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  442.561905][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  442.565335][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  443.579549][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  443.582877][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  443.585961][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  443.588947][ T5808] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  443.591868][ T5808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  443.624695][ T5816] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  443.629358][ T5816] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  443.632062][ T5816] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  443.635669][ T5816] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  443.638860][ T5816] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  444.614984][ T5816] Bluetooth: hci6: command tx timeout
[  445.340439][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  445.655276][ T5808] Bluetooth: hci7: command tx timeout
[  445.660412][ T5816] Bluetooth: hci8: command tx timeout
[  446.695348][ T5816] Bluetooth: hci6: command tx timeout
[  447.735171][ T5816] Bluetooth: hci8: command tx timeout
[  447.737382][ T5816] Bluetooth: hci7: command tx timeout
[  448.774868][ T5808] Bluetooth: hci6: command tx timeout
[  449.814884][ T5808] Bluetooth: hci7: command tx timeout
[  449.816618][ T5808] Bluetooth: hci8: command tx timeout
[  450.854807][ T5816] Bluetooth: hci6: command tx timeout
[  451.895082][ T5816] Bluetooth: hci8: command tx timeout
[  451.896681][ T5816] Bluetooth: hci7: command tx timeout
[  502.608094][T20896] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  502.612740][T20896] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  502.617829][T20896] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  502.621165][T20896] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  502.624234][T20896] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  503.550269][T20896] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  503.553990][T20896] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  503.557076][T20896] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  503.559597][T20896] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  503.562160][T20896] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  504.578646][ T5808] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  504.583233][ T5808] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  504.587897][ T5808] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  504.593287][ T5808] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  504.597461][ T5808] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  504.694784][T20896] Bluetooth: hci9: command tx timeout
[  505.575270][T20896] Bluetooth: hci10: command tx timeout
[  506.615547][T20896] Bluetooth: hci11: command tx timeout
[  506.780515][ T5808] Bluetooth: hci9: command tx timeout
[  506.786006][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  507.654737][T20904] Bluetooth: hci10: command tx timeout
[  508.695525][T20904] Bluetooth: hci11: command tx timeout
[  508.861758][T20904] Bluetooth: hci5: command 0x0406 tx timeout
[  508.864008][T20904] Bluetooth: hci3: command 0x0406 tx timeout
[  508.867120][T20905] Bluetooth: hci4: command 0x0406 tx timeout
[  508.869325][T20905] Bluetooth: hci9: command tx timeout
[  509.734919][ T5808] Bluetooth: hci10: command tx timeout
[  510.775149][ T5808] Bluetooth: hci11: command tx timeout
[  510.935253][ T5808] Bluetooth: hci9: command tx timeout
[  511.814796][ T5808] Bluetooth: hci10: command tx timeout
[  512.855200][ T5808] Bluetooth: hci11: command tx timeout
[  521.495561][   T35] INFO: task syz.1.5673:20838 blocked for more than 143 seconds.
[  521.498549][   T35]       Not tainted syzkaller #0
[  521.504916][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  521.508144][   T35] task:syz.1.5673      state:D stack:25600 pid:20838 tgid:20838 ppid:5805   task_flags:0x400040 flags:0x00080002
[  521.512599][   T35] Call Trace:
[  521.513896][   T35]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  521.535382][   T35]  __schedule+0x1585/0x5340
[  521.537655][   T35]  ? __pfx___schedule+0x10/0x10
[  521.539713][   T35]  ? schedule+0x90/0x360
[  521.541283][   T35]  schedule+0x164/0x360
[  521.542815][   T35]  schedule_preempt_disabled+0x13/0x30
[  521.572766][   T35]  __mutex_lock+0x7fe/0x1300
[  521.574367][   T35]  ? __mutex_lock+0x5ac/0x1300
[  521.593862][   T35]  ? tun_chr_close+0x3e/0x1c0
[  521.595430][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  521.596993][   T35]  ? __pfx_tun_chr_close+0x10/0x10
[  521.598896][   T35]  tun_chr_close+0x3e/0x1c0
[  521.600575][   T35]  __fput+0x44f/0xa70
[  521.602037][   T35]  task_work_run+0x1d9/0x270
[  521.603729][   T35]  ? __pfx_task_work_run+0x10/0x10
[  521.609238][   T35]  exit_to_user_mode_loop+0xed/0x480
[  521.610763][   T35]  ? rcu_is_watching+0x15/0xb0
[  521.612214][   T35]  do_syscall_64+0x32d/0xf80
[  521.613675][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.615894][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.617546][   T35] RIP: 0033:0x7f6df8b9cdd9
[  521.618814][   T35] RSP: 002b:00007ffce87d6938 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  521.621224][   T35] RAX: 0000000000000000 RBX: 00007f6df8e17da0 RCX: 00007f6df8b9cdd9
[  521.623571][   T35] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  521.626788][   T35] RBP: 00007f6df8e17da0 R08: 0000000000000006 R09: 0000000000000000
[  521.629169][   T35] R10: 00007f6df8e17cb0 R11: 0000000000000246 R12: 00000000000599d4
[  521.631540][   T35] R13: 00007f6df8e15fac R14: 000000000005974e R15: 00007f6df8e15fa0
[  521.634010][   T35]  </TASK>
[  521.635706][   T35] INFO: task syz.2.5678:20862 blocked for more than 143 seconds.
[  521.637931][   T35]       Not tainted syzkaller #0
[  521.639399][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  521.642005][   T35] task:syz.2.5678      state:D stack:25928 pid:20862 tgid:20861 ppid:5813   task_flags:0x400140 flags:0x00080002
[  521.646639][   T35] Call Trace:
[  521.647681][   T35]  <TASK>
[  521.648560][   T35]  __schedule+0x1585/0x5340
[  521.649918][   T35]  ? __nla_validate_parse+0x2480/0x2dc0
[  521.651474][   T35]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  521.653094][   T35]  ? __pfx___schedule+0x10/0x10
[  521.655908][   T35]  ? schedule+0x90/0x360
[  521.657412][   T35]  schedule+0x164/0x360
[  521.658914][   T35]  schedule_preempt_disabled+0x13/0x30
[  521.660906][   T35]  __mutex_lock+0x7fe/0x1300
[  521.662518][   T35]  ? __mutex_lock+0x5ac/0x1300
[  521.664171][   T35]  ? inet_rtm_newroute+0x12b/0x250
[  521.666247][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  521.667855][   T35]  ? rtm_to_fib_config+0x1086/0x13c0
[  521.669396][   T35]  inet_rtm_newroute+0x12b/0x250
[  521.670892][   T35]  ? __local_bh_enable_ip+0xd0/0x130
[  521.672464][   T35]  ? __dev_queue_xmit+0x274/0x38a0
[  521.674147][   T35]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  521.676352][   T35]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  521.678028][   T35]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  521.679503][   T35]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  521.681064][   T35]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  521.682773][   T35]  ? ref_tracker_free+0x693/0x840
[  521.684447][   T35]  ? __copy_skb_header+0xa3/0x4a0
[  521.686542][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  521.688205][   T35]  netlink_rcv_skb+0x232/0x4b0
[  521.689658][   T35]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  521.691307][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.692874][   T35]  ? netlink_deliver_tap+0x2e/0x1b0
[  521.694504][   T35]  netlink_unicast+0x80f/0x9b0
[  521.697048][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  521.698633][   T35]  ? netlink_sendmsg+0x650/0xb40
[  521.700074][   T35]  ? skb_put+0x11b/0x210
[  521.701307][   T35]  netlink_sendmsg+0x813/0xb40
[  521.702746][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.704304][   T35]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  521.706925][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.708362][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.709927][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.711452][   T35]  ____sys_sendmsg+0xa68/0xad0
[  521.712969][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.716380][   T35]  ? import_iovec+0x73/0xa0
[  521.717768][   T35]  ___sys_sendmsg+0x2a5/0x360
[  521.719362][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.721025][   T35]  ? futex_wake+0x4ac/0x580
[  521.722409][   T35]  ? __fget_files+0x2a/0x420
[  521.724056][   T35]  ? __fget_files+0x3a0/0x420
[  521.726716][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  521.728212][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.729848][   T35]  ? rcu_is_watching+0x15/0xb0
[  521.731309][   T35]  do_syscall_64+0x14d/0xf80
[  521.732714][   T35]  ? trace_irq_disable+0x3b/0x150
[  521.734491][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.737280][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.739082][   T35] RIP: 0033:0x7f06e6f9cdd9
[  521.740456][   T35] RSP: 002b:00007f06e7e61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.742952][   T35] RAX: ffffffffffffffda RBX: 00007f06e7215fa0 RCX: 00007f06e6f9cdd9
[  521.745897][   T35] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  521.748301][   T35] RBP: 00007f06e7032d69 R08: 0000000000000000 R09: 0000000000000000
[  521.750687][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.753064][   T35] R13: 00007f06e7216038 R14: 00007f06e7215fa0 R15: 00007ffd8c8ae388
[  521.756105][   T35]  </TASK>
[  521.757179][   T35] INFO: task syz.2.5678:20866 blocked for more than 143 seconds.
[  521.759519][   T35]       Not tainted syzkaller #0
[  521.761056][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  521.763638][   T35] task:syz.2.5678      state:D stack:27080 pid:20866 tgid:20861 ppid:5813   task_flags:0x400040 flags:0x00080002
[  521.768790][   T35] Call Trace:
[  521.769820][   T35]  <TASK>
[  521.770689][   T35]  __schedule+0x1585/0x5340
[  521.772093][   T35]  ? kasan_save_track+0x4f/0x80
[  521.773574][   T35]  ? __pfx___schedule+0x10/0x10
[  521.775727][   T35]  ? schedule+0x90/0x360
[  521.777022][   T35]  schedule+0x164/0x360
[  521.778275][   T35]  schedule_preempt_disabled+0x13/0x30
[  521.779885][   T35]  __mutex_lock+0x7fe/0x1300
[  521.781296][   T35]  ? __mutex_lock+0x5ac/0x1300
[  521.782843][   T35]  ? rtnl_dumpit+0x92/0x200
[  521.784382][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  521.786434][   T35]  ? rcu_is_watching+0x15/0xb0
[  521.788118][   T35]  ? trace_kmalloc+0x2a/0x110
[  521.789479][   T35]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[  521.791460][   T35]  ? __pfx_tc_dump_tfilter+0x10/0x10
[  521.793039][   T35]  rtnl_dumpit+0x92/0x200
[  521.794520][   T35]  netlink_dump+0x722/0xe80
[  521.796555][   T35]  ? __pfx_netlink_dump+0x10/0x10
[  521.798195][   T35]  ? __netlink_lookup+0x7e4/0x8b0
[  521.799701][   T35]  ? netlink_lookup+0x30/0x200
[  521.801152][   T35]  ? netlink_lookup+0x30/0x200
[  521.802606][   T35]  ? netlink_lookup+0x30/0x200
[  521.804078][   T35]  __netlink_dump_start+0x5cb/0x7e0
[  521.806195][   T35]  rtnetlink_rcv_msg+0xa3a/0xbe0
[  521.807963][   T35]  ? __pfx_tc_dump_tfilter+0x10/0x10
[  521.809527][   T35]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  521.811031][   T35]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  521.812651][   T35]  ? ref_tracker_free+0x693/0x840
[  521.814201][   T35]  ? __pfx_rtnl_dumpit+0x10/0x10
[  521.816665][   T35]  ? __pfx_tc_dump_tfilter+0x10/0x10
[  521.818255][   T35]  netlink_rcv_skb+0x232/0x4b0
[  521.819727][   T35]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  521.821320][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.822861][   T35]  ? netlink_deliver_tap+0x2e/0x1b0
[  521.825960][   T35]  netlink_unicast+0x80f/0x9b0
[  521.827500][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  521.829138][   T35]  ? netlink_sendmsg+0x650/0xb40
[  521.830630][   T35]  ? skb_put+0x11b/0x210
[  521.831904][   T35]  netlink_sendmsg+0x813/0xb40
[  521.833432][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.835977][   T35]  ? __se_sys_ioctl+0x47/0x170
[  521.837412][   T35]  ? do_syscall_64+0x14d/0xf80
[  521.838815][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.840306][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.841859][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.843508][   T35]  ____sys_sendmsg+0xa68/0xad0
[  521.846056][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.847711][   T35]  ? import_iovec+0x73/0xa0
[  521.849287][   T35]  ___sys_sendmsg+0x2a5/0x360
[  521.850762][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.852335][   T35]  ? tomoyo_path_number_perm+0x219/0x630
[  521.854135][   T35]  ? __fget_files+0x2a/0x420
[  521.856061][   T35]  ? __fget_files+0x3a0/0x420
[  521.857470][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  521.859006][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.860630][   T35]  ? rcu_is_watching+0x15/0xb0
[  521.862079][   T35]  ? __pfx_kcov_ioctl+0x10/0x10
[  521.863620][   T35]  do_syscall_64+0x14d/0xf80
[  521.871909][   T35]  ? trace_irq_disable+0x3b/0x150
[  521.873446][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.876143][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.877939][   T35] RIP: 0033:0x7f06e6f9cdd9
[  521.879237][   T35] RSP: 002b:00007f06e7e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.881667][   T35] RAX: ffffffffffffffda RBX: 00007f06e7216180 RCX: 00007f06e6f9cdd9
[  521.884006][   T35] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000007
[  521.886958][   T35] RBP: 00007f06e7032d69 R08: 0000000000000000 R09: 0000000000000000
[  521.889714][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  521.891974][   T35] R13: 00007f06e7216218 R14: 00007f06e7216180 R15: 00007ffd8c8ae388
[  521.894249][   T35]  </TASK>
[  521.895636][   T35] 
[  521.895636][   T35] Showing all locks held in the system:
[  521.897941][   T35] 2 locks held by kworker/1:0/24:
[  521.899510][   T35] 8 locks held by kworker/1:2/32:
[  521.901215][   T35] 1 lock held by khungtaskd/35:
[  521.903033][   T35]  #0: ffffffff8e760320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  521.907527][   T35] 1 lock held by dhcpcd/5551:
[  521.908939][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30
[  521.912215][   T35] 2 locks held by getty/5631:
[  521.913637][   T35]  #0: ffff8881110cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  521.917020][   T35]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  521.920168][   T35] 3 locks held by kworker/u8:2/5635:
[  521.921882][   T35]  #0: ffff8881108a3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  521.925742][   T35]  #1: ffffc90005aafc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  521.929870][   T35]  #2: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  521.932788][   T35] 1 lock held by syz.1.5673/20838:
[  521.934372][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  521.938472][   T35] 2 locks held by syz.0.5677/20856:
[  521.940116][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  521.942929][   T35]  #1: ffffffff8fc6d6a8 (flowtable_lock){+.+.}-{4:4}, at: nf_flow_table_cleanup+0x21/0xb0
[  521.946939][   T35] 1 lock held by syz.2.5678/20862:
[  521.948486][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250
[  521.951270][   T35] 2 locks held by syz.2.5678/20866:
[  521.952781][   T35]  #0: ffff8881144236f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  521.956891][   T35]  #1: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  521.959533][   T35] 1 lock held by syz-executor/20869:
[  521.961244][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.964027][   T35] 1 lock held by syz-executor/20876:
[  521.966031][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.968798][   T35] 1 lock held by syz-executor/20879:
[  521.970309][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.973020][   T35] 1 lock held by syz-executor/20882:
[  521.975779][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.978689][   T35] 1 lock held by syz-executor/20888:
[  521.980146][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.982899][   T35] 1 lock held by syz-executor/20890:
[  521.984434][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.988745][   T35] 1 lock held by syz-executor/20893:
[  521.990320][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.993044][   T35] 1 lock held by syz-executor/20899:
[  521.994911][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  521.997653][   T35] 1 lock held by syz-executor/20902:
[  521.999171][   T35]  #0: ffffffff8fbcc388 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  522.002254][   T35] 
[  522.003160][   T35] =============================================
[  522.003160][   T35] 
[  522.007141][   T35] NMI backtrace for cpu 0
[  522.007152][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  522.007161][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.007167][   T35] Call Trace:
[  522.007171][   T35]  <TASK>
[  522.007174][   T35]  dump_stack_lvl+0xe8/0x150
[  522.007189][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  522.007201][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  522.007213][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  522.007224][   T35]  sys_info+0x135/0x170
[  522.007232][   T35]  watchdog+0xfd9/0x1030
[  522.007247][   T35]  ? watchdog+0x21a/0x1030
[  522.007261][   T35]  kthread+0x388/0x470
[  522.007269][   T35]  ? __pfx_watchdog+0x10/0x10
[  522.007279][   T35]  ? __pfx_kthread+0x10/0x10
[  522.007287][   T35]  ret_from_fork+0x51e/0xb90
[  522.007300][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  522.007308][   T35]  ? __switch_to+0xc7d/0x1450
[  522.007320][   T35]  ? __pfx_kthread+0x10/0x10
[  522.007327][   T35]  ret_from_fork_asm+0x1a/0x30
[  522.007344][   T35]  </TASK>
[  522.007347][   T35] Sending NMI from CPU 0 to CPUs 1:
[  522.041656][    C1] NMI backtrace for cpu 1
[  522.041669][    C1] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  522.041679][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.041686][    C1] Workqueue: events send_dm_alert
[  522.041704][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  522.041716][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 56 48 76 03 66 0f 1f 44 00
[  522.041724][    C1] RSP: 0018:ffffc90000a07e40 EFLAGS: 00000046
[  522.041731][    C1] RAX: 00000000000004ff RBX: ffff88823c623e40 RCX: 0000000000000838
[  522.041736][    C1] RDX: 0000000000000000 RSI: 00000000000004ff RDI: 0000000000000838
[  522.041741][    C1] RBP: 0000000000000000 R08: ffffffff81b2bde5 R09: ffffffff9a2b3508
[  522.041746][    C1] R10: 0000000000000003 R11: ffffffff8173c750 R12: 0000000010005087
[  522.041751][    C1] R13: dffffc0000000000 R14: 00000000000004ff R15: 0000000000000020
[  522.041756][    C1] FS:  0000000000000000(0000) GS:ffff8882a9467000(0000) knlGS:0000000000000000
[  522.041762][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.041767][    C1] CR2: 00007f6df99456b8 CR3: 000000000e54c000 CR4: 00000000000006f0
[  522.041791][    C1] Call Trace:
[  522.041795][    C1]  <IRQ>
[  522.041799][    C1]  lapic_next_event+0x11/0x20
[  522.041811][    C1]  clockevents_program_event+0x1c9/0x350
[  522.041825][    C1]  hrtimer_interrupt+0xb08/0x1010
[  522.041843][    C1]  __sysvec_apic_timer_interrupt+0x102/0x460
[  522.041853][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  522.041866][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.041875][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  522.041887][    C1] Code: f7 e8 1d 62 f2 f5 f7 c3 00 02 00 00 74 05 e8 40 b1 1d f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 64 28 e4 f5 65 8b 05 8d cf 6b 07 85 c0 74 18 5b 41 5e c3 cc cc
[  522.041893][    C1] RSP: 0018:ffffc90000a080b8 EFLAGS: 00000206
[  522.041899][    C1] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000000000102
[  522.041904][    C1] RDX: 0000000000000003 RSI: ffffffff8def236f RDI: 0000000000000001
[  522.041909][    C1] RBP: ffffc90000a08170 R08: ffffffff90117eb7 R09: 1ffffffff2022fd6
[  522.041914][    C1] R10: dffffc0000000000 R11: fffffbfff2022fd7 R12: ffff8881956bad80
[  522.041919][    C1] R13: ffffea000655ae90 R14: ffff888160416b40 R15: 0000000000000202
[  522.041929][    C1]  get_from_partial_node+0x47a/0x500
[  522.041941][    C1]  ? NF_HOOK+0x336/0x3c0
[  522.041948][    C1]  ? process_backlog+0xaa0/0x1950
[  522.041960][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  522.041969][    C1]  ___slab_alloc+0xae/0x6b0
[  522.041978][    C1]  ? __pcs_replace_empty_main+0x239/0x620
[  522.041989][    C1]  kmem_cache_alloc_node_noprof+0x1f6/0x690
[  522.042001][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  522.042010][    C1]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  522.042021][    C1]  __alloc_skb+0x1d0/0x7d0
[  522.042030][    C1]  synproxy_send_client_synack+0x172/0xe30
[  522.042044][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  522.042053][    C1]  ? nft_socket_eval+0x520/0xa10
[  522.042063][    C1]  ? synproxy_pernet+0x45/0x270
[  522.042074][    C1]  nft_synproxy_eval_v4+0x34a/0x4e0
[  522.042085][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  522.042095][    C1]  ? nf_ip_checksum+0x13c/0x510
[  522.042108][    C1]  nft_synproxy_do_eval+0x305/0x580
[  522.042118][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  522.042127][    C1]  ? ip_vs_service_find+0xa6b/0xf10
[  522.042139][    C1]  nft_do_chain+0x45e/0x1990
[  522.042149][    C1]  ? __pfx_tcp_conn_schedule+0x10/0x10
[  522.042160][    C1]  ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10
[  522.042173][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  522.042189][    C1]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  522.042196][    C1]  nft_do_chain_inet+0x29d/0x380
[  522.042206][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  522.042216][    C1]  ? nf_nat_ipv4_local_in+0x223/0x720
[  522.042225][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  522.042234][    C1]  nf_hook_slow+0xc5/0x220
[  522.042243][    C1]  NF_HOOK+0x21f/0x3c0
[  522.042251][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  522.042258][    C1]  ? NF_HOOK+0x9e/0x3c0
[  522.042264][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  522.042270][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  522.042278][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  522.042285][    C1]  ? skb_dst+0x4f/0xd0
[  522.042292][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  522.042300][    C1]  NF_HOOK+0x336/0x3c0
[  522.042307][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  522.042313][    C1]  ? NF_HOOK+0x9e/0x3c0
[  522.042319][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  522.042326][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  522.042334][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  522.042340][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  522.042347][    C1]  ? process_backlog+0x3eb/0x1950
[  522.042354][    C1]  process_backlog+0xaa3/0x1950
[  522.042367][    C1]  __napi_poll+0xae/0x340
[  522.042374][    C1]  ? skb_defer_free_flush+0x233/0x260
[  522.042382][    C1]  net_rx_action+0x627/0xf70
[  522.042393][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  522.042401][    C1]  ? xfrm_dev_backlog+0x24b/0x3c0
[  522.042415][    C1]  ? net_tx_action+0xc42/0xc80
[  522.042424][    C1]  handle_softirqs+0x22a/0x870
[  522.042434][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  522.042444][    C1]  __irq_exit_rcu+0x5f/0x150
[  522.042452][    C1]  irq_exit_rcu+0x9/0x30
[  522.042460][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  522.042469][    C1]  </IRQ>
[  522.042471][    C1]  <TASK>
[  522.042474][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.042481][    C1] RIP: 0010:__schedule+0x158d/0x5340
[  522.042492][    C1] Code: d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 b9 a2 81 f6 4c 89 2b 4c 89 e7 4c 89 ee e8 3b 42 85 f5 48 89 c7 e8 43 e0 e6 f5 <31> ff 4d 39 ec 40 0f 95 c7 e8 65 e9 e6 f5 48 8b 84 24 d8 00 00 00
[  522.042498][    C1] RSP: 0018:ffffc90000a875a0 EFLAGS: 00000206
[  522.042504][    C1] RAX: 000000000053ff35 RBX: ffff88823c63adc8 RCX: 0000000080000001
[  522.042512][    C1] RDX: 0000000000000007 RSI: ffffffff8def236f RDI: ffffffff8c27a880
[  522.042517][    C1] RBP: ffffc90000a87790 R08: ffffffff90117eb7 R09: 1ffffffff2022fd6
[  522.042522][    C1] R10: dffffc0000000000 R11: fffffbfff2022fd7 R12: ffff888161a85700
[  522.042527][    C1] R13: ffff888161a85700 R14: dffffc0000000000 R15: 1ffff110478c75b3
[  522.042542][    C1]  ? trace_irq_disable+0x3b/0x150
[  522.042554][    C1]  ? __pfx___schedule+0x10/0x10
[  522.042596][    C1]  preempt_schedule_irq+0x4d/0xa0
[  522.042606][    C1]  irqentry_exit+0x599/0x620
[  522.042616][    C1]  ? trace_irq_disable+0x3b/0x150
[  522.042627][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  522.042634][    C1] RIP: 0010:__slab_free+0x105/0x2b0
[  522.042641][    C1] Code: fa 41 f7 c5 00 02 00 00 75 42 4c 89 f7 48 8d 74 24 40 48 8d 54 24 30 e8 79 7a 00 00 89 c3 eb 4a 48 8b 5c 24 30 48 8b 4c 24 38 <48> 8b 44 24 40 48 8b 54 24 48 f0 49 0f c7 4e 20 0f 84 86 00 00 00
[  522.042647][    C1] RSP: 0018:ffffc90000a878c0 EFLAGS: 00000202
[  522.042653][    C1] RAX: 000000000000000e RBX: ffff888021399200 RCX: 000000000015000e
[  522.042658][    C1] RDX: ffff888021399200 RSI: ffff888021399200 RDI: 0000000000000000
[  522.042663][    C1] RBP: ffffc90000a87948 R08: 0000000000000001 R09: ffffffff822fc49c
[  522.042667][    C1] R10: dffffc0000000000 R11: fffffbfff2022fd7 R12: 0000000000000000
[  522.042672][    C1] R13: ffff888160419dc0 R14: ffffea000084e600 R15: ffff888021399080
[  522.042679][    C1]  ? qlist_free_all+0x8c/0x100
[  522.042691][    C1]  qlist_free_all+0x97/0x100
[  522.042698][    C1]  kasan_quarantine_reduce+0x148/0x160
[  522.042705][    C1]  __kasan_slab_alloc+0x22/0x80
[  522.042713][    C1]  kmem_cache_alloc_node_noprof+0x384/0x690
[  522.042724][    C1]  ? __alloc_skb+0x1d0/0x7d0
[  522.042732][    C1]  ? kmem_cache_alloc_node_noprof+0x23e/0x690
[  522.042743][    C1]  __alloc_skb+0x1d0/0x7d0
[  522.042753][    C1]  reset_per_cpu_data+0x31/0x1e0
[  522.042762][    C1]  send_dm_alert+0x1f/0xf0
[  522.042770][    C1]  ? process_scheduled_works+0xa25/0x1830
[  522.042779][    C1]  process_scheduled_works+0xb02/0x1830
[  522.042793][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  522.042803][    C1]  ? assign_work+0x3d5/0x5e0
[  522.042812][    C1]  worker_thread+0xa50/0xfc0
[  522.042827][    C1]  kthread+0x388/0x470
[  522.042834][    C1]  ? __pfx_worker_thread+0x10/0x10
[  522.042842][    C1]  ? __pfx_kthread+0x10/0x10
[  522.042849][    C1]  ret_from_fork+0x51e/0xb90
[  522.042860][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  522.042868][    C1]  ? __switch_to+0xc7d/0x1450
[  522.042878][    C1]  ? __pfx_kthread+0x10/0x10
[  522.042884][    C1]  ret_from_fork_asm+0x1a/0x30
[  522.042899][    C1]  </TASK>
[  522.317701][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  522.320234][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  522.323353][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  522.326527][   T35] Call Trace:
[  522.327512][   T35]  <TASK>
[  522.328371][   T35]  vpanic+0x56c/0xa60
[  522.329535][   T35]  ? __pfx___schedule+0x10/0x10
[  522.330955][   T35]  ? __pfx_vpanic+0x10/0x10
[  522.332254][   T35]  ? __pfx_console_unlock+0x10/0x10
[  522.333754][   T35]  panic+0xc5/0xd0
[  522.334834][   T35]  ? __pfx_panic+0x10/0x10
[  522.336087][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  522.337614][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  522.339342][   T35]  watchdog+0x1023/0x1030
[  522.340681][   T35]  ? watchdog+0x21a/0x1030
[  522.341991][   T35]  kthread+0x388/0x470
[  522.343140][   T35]  ? __pfx_watchdog+0x10/0x10
[  522.344480][   T35]  ? __pfx_kthread+0x10/0x10
[  522.345817][   T35]  ret_from_fork+0x51e/0xb90
[  522.347202][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  522.349067][   T35]  ? __switch_to+0xc7d/0x1450
[  522.350829][   T35]  ? __pfx_kthread+0x10/0x10
[  522.352448][   T35]  ret_from_fork_asm+0x1a/0x30
[  522.353869][   T35]  </TASK>
[  522.355289][   T35] Kernel Offset: disabled
[  522.356559][   T35] Rebooting in 86400 seconds..
