last executing test programs:

1.570034114s ago: executing program 0 (id=1615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000c3d6ca0f4dae990461362703f887c2e65bcca3a27a2feaf998be723e545815de1490dbe255d3a1ebdf7f4900fdb96e3a6c465af5843c8645168d926705e35de021215fbcf1fc3f91cabafa7f548e1fee838913ab1c007ccd9a906c391ef6bd90a588eab687fb23d3cf7b2283d3f72cf349f2d7257b1e46f9dd8c39f04852ee81b0124043b63e2900e9cf95851671968bb625c18d719d", @ANYRES16=r1, @ANYBLOB="00022abd7000fcdbdf257c0000000c00990026e19e5b430000000a00060008021100000000000a00060008021100000000000a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x74}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r6 = accept$alg(r5, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f99", 0xcc}], 0x2, 0x0, 0x0, 0x44000}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000400)=0x498, 0x4)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}], @chandef_params]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20001004)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

959.573785ms ago: executing program 2 (id=1616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

934.783847ms ago: executing program 0 (id=1617):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x405}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2)

883.051006ms ago: executing program 1 (id=1618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00')
unshare(0x6a040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x4000011)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f00000000c0), 0x10)
sendto$l2tp(r4, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000440)=0x20003, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x20004800}, 0x342f11efd8a11e66)
accept4$bt_l2cap(r5, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000080)=0xfffffff9, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfff1}, {0x4, 0x5}, {0xa, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffd}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)

880.85255ms ago: executing program 2 (id=1619):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x9)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0)

831.895151ms ago: executing program 2 (id=1620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="d9cd36c3c5c2be27d70bad02757d9fd6", 0x10)
close(0x3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62040200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x8, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x69, 0x0, 0x1, [@typed={0x4, 0x4a}]}, @typed={0x6, 0x3, 0x0, 0x0, @str='%\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10048156}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f0000000300)={0x28, 0x0, 0x2711, @my=0x0}, 0x10)

811.513886ms ago: executing program 0 (id=1621):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getaddr={0x14, 0x16, 0x301, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000200390400"/20, @ANYRES32=r5, @ANYBLOB="8106010000000200140012800b000100627269646765000004000280"], 0x34}}, 0x20044002)
r6 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r2, @ANYBLOB="14000200fe5b66"], 0x2c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40090)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r9, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

731.795544ms ago: executing program 0 (id=1622):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000030a03000000a58df06a48d6712000090900010073797a300000000008000540fffffffe0900010073797a310000000030000480080002403193f8c50800024036311c7608000140000000021400030067656e65766531000000000000000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0)

613.386337ms ago: executing program 0 (id=1623):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a0800"], 0x80}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005a1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04001c00128009010100766c616e004000000c0002800600010004000000080005004df27bfee68859eadb29e236a46824491fe9f163ffcc4e5bacc663a5b932e3af9f44182b3fa8b93f3b54646cb20ef80ef534f6e5076a91130627bbe00df6620445b708bb075c90c5ecb65d624b", @ANYRES32=r6, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

464.811411ms ago: executing program 1 (id=1624):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000480)={<r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRES16=r2], 0x50)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4003, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004c84d)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="d1b6ea9bc9b81e5552bce6bb4ef827438992db6789a987465bd6c1bf03e8b2b677ad34a31f9287162b02988a20d339fe2dba29ec9cd92ac4e4bb014ffe7736f317a8e65ce0ae2b81f90f6374469837049681741887505e906347aa86a728e43a9964878b983a4defd795bde7421f75eba1257f79074039b50b0c19986f845466d24e72ad373bfa97b568d0dc03e82ebe6a60b804ad7d37a270d9e50a1662294dd908a2c55ea23478dfff470b9e31893e6fb44b2d6fe4c849af9b921fa4"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x803, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

463.78869ms ago: executing program 1 (id=1625):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

463.31132ms ago: executing program 2 (id=1626):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b5705000000200b6eb712800b00010062726964876500000c0002800500180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc0) (rerun: 64)

337.418629ms ago: executing program 1 (id=1627):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="54000000130010002dbd7000ffdbdf2500000000a6cf47f1cfa4d65f3c7e51f141e64fb89d32ddd05a48bbc93dbb02ad4aadc19b0a5ebb92837e28166322895a0ac63c7bac9a75ecf3a92150167022e899979e438d3ccfd645ea7ce179b8c4147fb5166f070959ed10c51333a04c21320461917ca37782a0dfcd3e290ddc51d28e346509cd51fac2dc25ed95201d9a307e307b34dfcbe94133ebd1b9a25b3b040f0daaa19764356ff44f22924f89f1e1805f212bf8b5d11f79", @ANYRES32=0x0, @ANYBLOB="040800007108000034001a802c000a801400070000000000000000000000ffff0a01010014000700fe88000000000000000000000000010104000700"], 0x54}, 0x1, 0x0, 0x0, 0x24040060}, 0x20040804)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
setsockopt$inet6_buf(r3, 0x29, 0x2f, 0x0, 0x49)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffffffffffcdb)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000808", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRESDEC=r5, @ANYRES64=r1, @ANYRES32=r5], 0x3c}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000000801080000000000000000010001063c1004800800054080000001080006400000100011000340000000000800054000000001080009400000000d08004dc0ca56a1bcfda9798f02400000"], 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x81)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r7, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000380)={0x8}, 0x4)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r8, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r5, 0x25, 0x0, @val=@perf_event={0x7}}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

297.967272ms ago: executing program 2 (id=1628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="370000002820000004000000", @ANYRES32=0x0, @ANYBLOB="e61615214389b3b9028907bd7101a798e92c73e6fd79b0bf59edf066c8d77b449678c192ac0f876cb34c52150e589c342616ac631d8395c49e34588659f5e2038fabc67d47de90de7ca1d8ed9292e2d7e6cb652e52f826ee410c376483ce1931f57d94b71e45aaf4b0b644303e9afd55aa3f5ba81a424bcfb84ce99d9bdac0eac5bc57a4fd510d730fbf8671f46b3e0c5dfa939870bb8a7a5745dc05755efb581aa68236f11267b2bb70bc740a300f84f8947d555e7eaf75d40c15873c8d07cbacd1c06c", @ANYRES64=0x0], 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xcc8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x6, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc9c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_MASK={0x8, 0x5, 0xe5}, @TCA_FW_MASK={0x8, 0x5, 0xb74}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x5}}, @TCA_FW_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x800, 0x3, 0x9c, 0x400, 0x7, 0x6, 0x31b6, 0x64b, 0xfffffffc, 0xfa, 0x8000, 0x8, 0x4, 0x1, 0x6, 0x4, 0x2, 0x7f, 0x9, 0x4, 0xffffff1c, 0x3d, 0x1000, 0x8000, 0x7, 0xffffffff, 0x2, 0x101, 0x2, 0xff, 0x0, 0x6, 0xfffffffe, 0x3, 0x0, 0x1, 0x5, 0x9, 0x7, 0x7ff, 0x1, 0x8000, 0x5, 0x70, 0x5, 0xffff, 0x800, 0xb, 0x7, 0x80, 0x2, 0x400000, 0xffffffff, 0xd, 0x2fcc, 0x7, 0x0, 0x6, 0x8, 0x7fffffff, 0xffff, 0xe31, 0x7f, 0xffffffc0, 0x1, 0x8, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x800, 0x8, 0x8, 0xf, 0x2e, 0x4, 0x40, 0x9, 0x8000, 0x2, 0x0, 0x101, 0x2ca9f94b, 0x6, 0x80000001, 0xa4a, 0x7994, 0x1, 0x3, 0x1, 0x4, 0x4, 0x5, 0xc, 0xae20, 0x0, 0x7, 0x3, 0xd, 0x7, 0x0, 0xc, 0x3, 0x0, 0x0, 0xa, 0x4, 0xad2, 0x3ff, 0x6, 0x29f, 0xb, 0xfffffffa, 0x8, 0x92e, 0x10, 0x5, 0x5, 0x2, 0xfffffffc, 0x10001, 0x80000000, 0x3, 0x3, 0x400, 0x195, 0x6, 0x7, 0x5, 0xffffff4c, 0xfffffffb, 0x6, 0x3, 0x400, 0x6, 0x55e3, 0xa, 0xcb, 0x1000, 0x3, 0xfffffffc, 0x1, 0x8, 0x8, 0x8001, 0x9, 0x8, 0xf, 0x7ff, 0x81, 0x81, 0x8, 0x3, 0x7ff, 0x9, 0x200, 0x3, 0xff, 0x3, 0x0, 0x12a6, 0x4f0908b, 0x8001, 0x9, 0x3, 0x6, 0x14e88bff, 0x1, 0xdb, 0x5, 0x6, 0x2, 0x4000, 0x1000, 0x5, 0x6, 0x2, 0x200, 0x4, 0x2, 0x75cf, 0x8, 0x3, 0x9, 0x1, 0x8, 0x8, 0x2, 0x0, 0x1, 0x21, 0x1000, 0x5, 0xd7f1, 0x9, 0x914, 0x9, 0x81, 0x9, 0x0, 0xcf, 0x9, 0x1, 0x9, 0x5, 0x5, 0x75d8, 0x1, 0x81, 0x10, 0x9, 0x5, 0x9, 0x2, 0x6, 0xe, 0x9393, 0x40, 0x8, 0x0, 0x5, 0x80000001, 0x5, 0x9, 0x8000, 0x9, 0xb58, 0x971, 0x7, 0xc7, 0x3, 0xfd9, 0x7fffffff, 0x9, 0xfffffffe, 0xb2, 0x5, 0x1196, 0xf5, 0xfffff8de, 0xfffffff7, 0xa772, 0x0, 0xff, 0x1d59d208, 0x80, 0x3, 0x0, 0x7, 0xfffffffb, 0x2, 0x8, 0x3]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xffe0}}, @TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x200, 0x3, 0x0, 0x4, 0xb1, 0x5, 0xec5d, 0x6f2, 0x6, 0x5, 0x3, 0x8, 0x773, 0x8, 0x5, 0xc, 0xde5, 0x3, 0x5, 0x6, 0x1, 0x6, 0x6, 0x3, 0x60, 0xffffffff, 0x10000, 0xfffffff8, 0xbc1, 0x8, 0x6, 0x6fb, 0x9, 0x3, 0xece, 0xd, 0x9, 0x2, 0x4, 0x9, 0xa, 0x7fffffff, 0x1, 0x75, 0x8, 0x3, 0x1115f6ef, 0x7ff, 0x1, 0xcc, 0x5, 0x4, 0x41, 0x8, 0x2c4a, 0x1000, 0x0, 0x1, 0xb58, 0xfffffffc, 0xe, 0x7, 0x80000001, 0x8, 0x6, 0xe, 0x2, 0x4, 0x6, 0x0, 0x39, 0x6459, 0x8, 0x750d, 0x101, 0x4, 0x3578, 0x1, 0x80000001, 0x3ff, 0x10001, 0x0, 0x182, 0x99f, 0x40, 0x2, 0x9da, 0x7f, 0x5, 0x5, 0x80, 0x3, 0x40, 0x2, 0x3, 0xda, 0xd, 0x6, 0x9, 0x9, 0x7fffffff, 0x9, 0x6c84, 0xe, 0x3515, 0x5, 0x7f, 0xdb, 0x8, 0xe, 0x1, 0x7, 0xc, 0x4, 0x3cb1, 0x688f, 0x6, 0x2, 0xfffffffa, 0x10000, 0x6, 0x6, 0x6, 0x3, 0x0, 0x17f, 0xd2, 0x8, 0x8, 0x7, 0x0, 0x6, 0x4, 0x400, 0xe, 0x6, 0x3, 0xc, 0x1fe, 0x5, 0x3, 0x2, 0x7f, 0xffff, 0x8, 0x7, 0x5, 0x0, 0x2, 0x4, 0xfffffffb, 0xd37, 0x8000, 0xfffffff7, 0x7, 0xab9, 0xde, 0x9, 0x0, 0x1, 0x4, 0x9, 0x2, 0xff, 0x5, 0xb, 0xfffffff8, 0x5, 0x1, 0x5, 0x9, 0x9, 0x7a56, 0x3, 0x7fff, 0xfffffd40, 0x971, 0x6, 0x2, 0x2, 0x9, 0x7fff, 0x2fd1d439, 0xb, 0x3, 0x2cd7253d, 0x10000, 0x8, 0x3, 0x400, 0x5e91, 0x7, 0x1, 0x3, 0x5, 0xb, 0x5, 0x1000, 0x9, 0xb3b, 0x3df, 0x982, 0x4, 0x6, 0x6, 0x2, 0x8, 0xfffff288, 0x2b, 0x1, 0x2, 0x2, 0x3, 0x7f, 0x2, 0x8, 0x1, 0xffffff01, 0x9, 0x3, 0x9, 0x0, 0x8, 0x4, 0x4, 0x2, 0x3, 0x6, 0x4, 0x101, 0x80, 0x5, 0x3, 0x2, 0x6, 0x3, 0xa7, 0x4, 0x2, 0x1, 0x3f3, 0x7, 0x7fffffff, 0x3c1, 0x101, 0xdb03, 0x7, 0x10000, 0x3, 0x0, 0xfffffff5, 0x1, 0xb9d5, 0xe]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xf, 0x4, 0x0, 0x401, 0x7, 0x6, 0x10001, 0x8, 0x80000001, 0x40, 0x1, 0xe9c, 0xf7bf, 0x6, 0x9af, 0xfffffff8, 0x0, 0x0, 0x101, 0x6, 0x7, 0x10000, 0x40, 0x7, 0x5, 0xd, 0xc0000, 0x0, 0xa7, 0x9, 0x45, 0x2, 0xff, 0x1, 0xffff, 0x7, 0x1ff, 0x0, 0x7, 0x3, 0x8, 0x6, 0x1, 0x1, 0x8, 0x3, 0xffffcbbd, 0x1, 0x1, 0x101, 0x1, 0xc, 0x2, 0x5, 0x0, 0x5, 0x0, 0x3, 0x3, 0x4, 0x1, 0x9, 0x1, 0x1, 0x7, 0x2, 0x80000001, 0xf4e, 0x0, 0x7, 0x1, 0x2, 0x5558f89c, 0x4a, 0x6, 0xb, 0x2, 0x5, 0x5, 0x3, 0x6, 0x0, 0x11, 0x5f5131bb, 0x4, 0x9, 0x8, 0xd4d, 0x9, 0xa3, 0xf19, 0x7, 0x1, 0x88, 0x1, 0x3556, 0x2, 0x9, 0x19c8aa27, 0x10001, 0x80000000, 0x5dd, 0x8000, 0x6, 0xffffffff, 0x1, 0x4, 0x2f610d18, 0xf27, 0x1, 0x2, 0x2, 0x1, 0x2, 0x1097, 0x5, 0x2, 0x80000001, 0x9, 0x101, 0x8, 0x7be, 0x0, 0x1, 0x3, 0x7, 0x1, 0x1ff, 0x9, 0x4, 0x8, 0x3, 0x6, 0x80000000, 0xffffffff, 0x8, 0x800, 0x3, 0x8, 0x2, 0x401, 0x8, 0xa247, 0x2, 0x2, 0xd, 0x6e6, 0x10, 0xffff1de2, 0x5, 0xfc3f, 0xfff, 0x66b, 0x8, 0x5, 0x8, 0x4, 0x7, 0x9, 0x7, 0x3, 0x1, 0xfffffffa, 0x1, 0x1, 0x9, 0xcba, 0x9, 0x5, 0x45, 0x8, 0x7ff, 0x100, 0x800, 0xac, 0x8, 0x3, 0x8, 0x5, 0x3, 0x6, 0x7, 0x8, 0x1, 0x0, 0x9, 0x2, 0xf317, 0x4, 0xfffffffa, 0x800, 0x3, 0x0, 0x2, 0x1, 0x12, 0x3682, 0x6000, 0x4, 0x3ff, 0xdf615b4, 0x8001, 0xa39, 0x401, 0x8, 0x8, 0x9, 0x7, 0x1, 0x7, 0x9, 0x5, 0xf1, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x5, 0x6, 0xaa32, 0x6, 0x36a, 0x5, 0x1000, 0x3, 0x4f7f, 0x7, 0xe, 0x5, 0xfffffff7, 0xfffffff8, 0xfff, 0x6, 0x8, 0x10000, 0x7, 0xd943, 0x0, 0x5, 0x7fff, 0x401, 0x48c, 0x5, 0x0, 0x7, 0x5, 0x7ff, 0x7, 0x6e, 0x3ff, 0x3240, 0x2, 0x3, 0x3a2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x1, 0x3ff, 0xc00000, {0x7c, 0x2, 0x0, 0x83, 0x14, 0x4}, {0xb, 0x2, 0x6, 0x6, 0x0, 0x200}, 0x7, 0x7fff, 0x8}}]}]}}]}, 0xcc8}, 0x1, 0x0, 0x0, 0x40}, 0x11) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00a833e77110db0000070601080200000000000000000000000500010006000000"], 0x1c}}, 0x0)
recvmmsg(r12, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
r13 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'erspan0\x00', 0x0, 0x7, 0x7, 0xfcb6, 0x1f09, {{0x6, 0x4, 0x1, 0xf, 0x18, 0x65, 0x0, 0xa0, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)
socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

218.047452ms ago: executing program 1 (id=1629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400004000050b0a5a80648c63940d032c3e9a7abfaf6d4c08db04bac032fc60040035400c00f378faeb342e0002000104400037153e37", 0x38}, {&(0x7f00000002c0)="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", 0x3fd}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x4000, 0x0, 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000073"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r8, 0x25, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000c00)="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", &(0x7f0000000100)=""/6, &(0x7f00000006c0)="0fffa4003aa7caffb10200339aafa8f4f40ed1ce9ef2fab5620b300fb996fdec9bfe02c1bc46fe01656840f3c7d578939295540fd2ba20ce9e240a94b700adba5b20d7", &(0x7f0000000740)="9c2d6783427cc584b31f181a50e7a10b60af9bd0cfc22afa84d156a2be5adb89ccc009ab1045fdb06f5ef27740d62b1e008f53356fb2c408ec7ab73a07c757f4757720ee247122591400ef7929fcd5949cae4b2e5440848bbdcdaee312dd9d72f3374b606b527384d38a7421e9d035d5f1fea44f952eb239d29f491b34fcf41a4b2a187ed0fd583c58541da85c8336ae8b050792532b21b8b3674572f9dd7adea9215fb0b0d486657e025f60b6bb98e7de2f62100a4f4fd894500922cd23e26970ed997e2b80251958d898571940515ab0a9acbe374a54164d5cb6165be0d3aceb", 0x3, r5}, 0x38)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x15c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x55}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x86a}]}}}, {0x5c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x3b}]}}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_USERDATA={0x87, 0x7, 0x1, 0x0, "08776093666ca63d4bc2bc8792cd0355f22d91c74df645bdf4995f9e6d3791386e93c793ff199bc93b8b9c446c70b0b14b20f3ec9f458408c03008d8938f81c3f92abc72a52fcb7fe74c1b0a0931fb30f47e54efe338f736f60aabb9807ad2e9dbc61d0ae7a016abcfadd48cc1f028c9cd2eb4ee3bff4110ac7483f92ca1bcf2033cbe"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc0100001100010025bd7000fddbdf2507000000", @ANYRES32=r12], 0x1bc}, 0x1, 0x0, 0x0, 0x8101}, 0x4800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r14, &(0x7f0000000180)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x8, 0x7e, 0x0, 0x0, 0x2, 0x1}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0)
sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="980000005500200025bd7000fddbdf2507000000", @ANYRES32=r15, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="010301691c8c00e00000020000000000000000f9e800000000000000", @ANYRES32=r9, @ANYBLOB="01020400ac1e00010000000000000000000000008edd000020000100", @ANYRES32=r12, @ANYBLOB="00010000fc0100000000000000000000000000008edd000020000100", @ANYRES32=r12, @ANYBLOB="01020200ac1414aa00000000000000000000000005ba0000"], 0x98}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r16 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r16, &(0x7f0000000080)='s', 0x10426, 0x800, 0x0, 0x4c5cb5939c8605d)

137.618985ms ago: executing program 0 (id=1630):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c0002800800014000000004"], 0xc0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x51c4d962bfbbc415}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe8, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_OURS={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "d45ea541c4aad3d25cd306c7b0fc75a967b2e4c65c9f72dad910453ec6bbd171ec33fa84301c000c426df3cb044fea155976272d51ec613ff98d84438d56680ceeec3084c9f7bb3c19db00ade51c61feeccf513ad9b4a93e017b89e797a913f80ea7b143cdaceb40504e695ff65f58c1f14a33132b3b8f10a471698df0eae0d5d9a0d42776be7b446debf159465611a51e8a0d8cb89a10af4ebcfb348f899ddb90b6f4df6b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48004}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060600010008000200ac14142a08000b00060000000500160089000000080001000000000070fa8e62605cd25da7a545487f9fb1952456036aa04cbbe0a1331400a154df850748ec970b3b8dc344abee1908e34b97b6c4d5685405afb66c5e268a5284da0cd8177235f6751afc9fca74b202bf66a1fe7332802ee54668460ad708cb47078f8171e32319d32e0ba6b62c91f4cd820a295699f1f6aba8f77f1ba58f7ff531da46a47c1103f2367e26e11dca5d0e39cbe117a0a01e75eac7b83cd1fbf00b9c304d2ce92308bb784d5ed0c15751f7dc92c9aac5729e38fe4d53532d32bafe1fd5c818863aaf43ce570885d5156466611e6be70c5798835d074e89974b0051"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r7, 0x1, 0x70bd2b, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x200003}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f00000000c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

119.747996ms ago: executing program 1 (id=1631):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x110, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xffffffffffffffb9, &(0x7f0000000080)}}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000100010000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000f7ffffffffffffff000000000000000200000000000000000000000000000000000103020000000008001f0003000000"], 0xc0}}, 0x2c000010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffde6, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xe}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f01000000fddbdf25fe8800000000000101fe8000000000000000000000000000bb4e2000004e23fffc0a0010000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000001000000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0400000000000000030000000000000004000000b56b6e000001030200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)

0s ago: executing program 2 (id=1632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040))
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

kernel console output (not intermixed with test programs):

 out of range
[  104.534107][ T6361] netlink: zone id is out of range
[  104.536063][ T6361] netlink: zone id is out of range
[  104.538152][ T6361] netlink: zone id is out of range
[  104.543452][ T6361] netlink: zone id is out of range
[  104.781432][ T6390] bond3: (slave bond_slave_1): Device is not our slave
[  104.783646][ T6390] bond3: option active_slave: invalid value (bond_slave_1)
[  104.787243][ T6390] bond3 (unregistering): Released all slaves
[  104.805762][ T6394] netlink: 'syz.1.143': attribute type 9 has an invalid length.
[  105.438812][ T6449] syzkaller1: entered promiscuous mode
[  105.440671][ T6449] syzkaller1: entered allmulticast mode
[  105.444523][ T6449] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  105.536709][ T6462] net_ratelimit: 1306 callbacks suppressed
[  105.536731][ T6462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.604037][ T6467] netlink: 'syz.2.160': attribute type 5 has an invalid length.
[  106.160202][ T6484] xt_hashlimit: size too large, truncated to 1048576
[  106.162807][ T6484] xt_hashlimit: invalid interval
[  106.357488][ T6494] syzkaller1: entered promiscuous mode
[  106.360891][ T6494] syzkaller1: entered allmulticast mode
[  106.465686][ T6509] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  107.559468][ T6537] syzkaller1: entered promiscuous mode
[  107.561372][ T6537] syzkaller1: entered allmulticast mode
[  107.611710][ T6541] sctp: [Deprecated]: syz.0.179 (pid 6541) Use of int in maxseg socket option.
[  107.611710][ T6541] Use struct sctp_assoc_value instead
[  107.716864][ T6551] xt_hashlimit: size too large, truncated to 1048576
[  107.767470][ T6553] team0: Device gtp0 is of different type
[  107.810219][ T6558] SET target dimension over the limit!
[  107.848690][ T6560] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.971107][ T6568] Bluetooth: MGMT ver 1.23
[  108.136988][ T6579] netlink: 'syz.1.191': attribute type 11 has an invalid length.
[  108.166571][ T6564] openvswitch: netlink: Key type 243 is out of range max 32
[  108.215112][ T6581] netlink: 'syz.1.191': attribute type 10 has an invalid length.
[  108.435702][   T10] IPVS: starting estimator thread 0...
[  108.539769][ T6592] IPVS: using max 66 ests per chain, 158400 per kthread
[  108.678455][ T6602] openvswitch: netlink: Key 11 has unexpected len 4104 expected 2
[  108.785125][ T6607] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[  109.123941][ T6624] __nla_validate_parse: 39 callbacks suppressed
[  109.123959][ T6624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.202'.
[  109.153578][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.159338][ T6626] macvtap0: entered promiscuous mode
[  109.170718][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.179116][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.182194][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.184899][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.187694][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.192690][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.196844][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.201430][ T6628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'.
[  109.245271][ T6636] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  109.245811][ T6630] macsec1: entered allmulticast mode
[  109.252699][ T6630] macsec0: entered allmulticast mode
[  109.255261][ T6630] veth1_macvtap: entered allmulticast mode
[  109.272331][ T6636] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  109.416618][ T6653] netlink: 'syz.0.211': attribute type 8 has an invalid length.
[  109.710926][ T6677] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  109.768167][ T6685] : renamed from bond_slave_0 (while UP)
[  109.778344][ T6686] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[  109.784362][ T6686] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[  109.793694][ T6686] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  110.161569][ T6696] netlink: 'syz.1.222': attribute type 1 has an invalid length.
[  110.344197][ T6701] syzkaller0: entered promiscuous mode
[  110.346038][ T6701] syzkaller0: entered allmulticast mode
[  110.454584][ T6698] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  111.397507][ T6715] netlink: 'syz.0.227': attribute type 33 has an invalid length.
[  111.525137][ T6720] syzkaller0: entered promiscuous mode
[  111.526824][ T6720] syzkaller0: entered allmulticast mode
[  111.533398][ T6720] TC_ACT_REPEAT abuse ?
[  111.584246][ T6723] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  111.645022][ T6731] ip6gre2: entered promiscuous mode
[  111.647147][ T6731] ip6gre2: entered allmulticast mode
[  111.696249][ T6735] syzkaller0: entered promiscuous mode
[  111.697978][ T6735] syzkaller0: entered allmulticast mode
[  111.729784][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.731946][ T6735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.740446][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.743518][ T6735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.761510][ T6738] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.764488][ T6738] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.830771][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.849979][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.033470][ T6748] pim6reg1: entered promiscuous mode
[  112.035214][ T6748] pim6reg1: entered allmulticast mode
[  112.459444][ T6775] veth0_macvtap: left promiscuous mode
[  112.524657][ T6778] : renamed from bond_slave_0 (while UP)
[  112.535307][ T6780] netlink: 'syz.0.247': attribute type 4 has an invalid length.
[  112.542654][ T6780] netlink: 'syz.0.247': attribute type 4 has an invalid length.
[  112.653003][ T6784] xt_limit: Overflow, try lower: 271964/0
[  113.156504][ T6815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  113.279418][ T6826] netlink: 'syz.0.259': attribute type 2 has an invalid length.
[  113.407758][ T6833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.442550][ T6833] syzkaller0: entered promiscuous mode
[  113.444369][ T6833] syzkaller0: entered allmulticast mode
[  113.446545][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[  113.455616][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[  114.333761][ T6830] tipc: Disabling bearer <eth:syzkaller0>
[  114.505445][ T6852] __nla_validate_parse: 72 callbacks suppressed
[  114.505457][ T6852] netlink: 596 bytes leftover after parsing attributes in process `syz.2.266'.
[  114.613091][ T6861] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[  114.737122][ T6874] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[  114.786000][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[  114.796179][ T6874] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[  114.798694][ T6874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.271'.
[  114.809983][ T6868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.814960][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'.
[  114.970775][ T6891] netlink: 'syz.2.275': attribute type 11 has an invalid length.
[  115.013866][ T6894] netlink: 'syz.2.276': attribute type 2 has an invalid length.
[  115.016243][ T6894] netlink: 'syz.2.276': attribute type 8 has an invalid length.
[  115.018599][ T6894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.276'.
[  115.222352][ T6904] netlink: 'syz.2.279': attribute type 16 has an invalid length.
[  115.224819][ T6904] netlink: 'syz.2.279': attribute type 17 has an invalid length.
[  115.269518][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.362009][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.381820][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.484610][ T6930] netlink: 44 bytes leftover after parsing attributes in process `syz.0.281'.
[  115.541828][   T34] audit: type=1107 audit(1772528925.506:2): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='D1gp'`Vn"-sA1rD:BMe4S[
[  115.541828][   T34] ^M9ZcjE(D7ܿ
[  115.541828][   T34] $)/fc9Y{PS
[  115.541828][   T34] ,o_>9М?@L{1{CڐZ,͋^>_V#Њ'
[  115.561360][ T5677] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.564302][ T5677] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.566968][ T5677] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.579434][ T5677] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.608051][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'.
[  115.612949][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.283'.
[  115.626675][ T6936] vlan3: entered promiscuous mode
[  115.629071][ T6936] geneve1: entered promiscuous mode
[  115.634690][ T6936] vlan3: entered allmulticast mode
[  115.639280][ T6936] geneve1: entered allmulticast mode
[  115.685349][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.0.283'.
[  115.808497][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[  115.889370][ T6952] netlink: 'syz.0.290': attribute type 11 has an invalid length.
[  115.897358][ T6952] syzkaller0: entered promiscuous mode
[  115.900006][ T6952] syzkaller0: entered allmulticast mode
[  116.104939][ T6969] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.113488][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.117855][ T6970] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  116.124139][ T6972] bond1 (unregistering): (slave batadv0): Releasing backup interface
[  116.127949][ T6972] bond1 (unregistering): Released all slaves
[  117.156514][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.164100][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.292021][ T6997] xt_socket: unknown flags 0x50
[  118.016305][ T7012] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  118.275870][ T7030] netlink: 'syz.2.312': attribute type 1 has an invalid length.
[  118.398778][ T7030] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  118.477081][ T7037] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  118.545884][ T7038] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  118.548191][ T7037] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  118.548215][ T7002] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  120.470621][ T6926] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  121.281218][ T6926] e1000 0000:00:03.0 eth0: Reset adapter
[  123.430742][ T6926] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  132.566604][ T7109] syzkaller0: entered promiscuous mode
[  132.568561][ T7109] syzkaller0: entered allmulticast mode
[  132.851950][ T7126] __nla_validate_parse: 11 callbacks suppressed
[  132.851965][ T7126] netlink: 92 bytes leftover after parsing attributes in process `syz.1.325'.
[  132.889241][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'.
[  133.112202][ T7133] syzkaller0: entered promiscuous mode
[  133.116541][ T7133] syzkaller0: entered allmulticast mode
[  133.132790][ T7136] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[  133.245102][ T7145] macvtap0: left promiscuous mode
[  133.246993][ T7145] vlan2: left promiscuous mode
[  133.248524][ T7145] bond2: left promiscuous mode
[  133.250762][ T7145] batadv2: left promiscuous mode
[  133.252948][ T7145] vlan3: left promiscuous mode
[  133.262792][ T7145] geneve1: left promiscuous mode
[  133.384519][ T7149] netlink: 228 bytes leftover after parsing attributes in process `syz.2.331'.
[  133.405943][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[  133.412204][ T7151] IPv6: Can't replace route, no match found
[  133.444355][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[  133.679831][ T7172] netlink: 68 bytes leftover after parsing attributes in process `syz.0.335'.
[  133.687129][ T7168] netlink: 68 bytes leftover after parsing attributes in process `syz.0.335'.
[  134.401906][ T7191] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[  134.404746][ T7191] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  134.417187][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.339'.
[  134.531445][ T7203] netlink: 'syz.2.342': attribute type 4 has an invalid length.
[  134.538661][ T7203] netlink: 'syz.2.342': attribute type 4 has an invalid length.
[  134.546692][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[  134.556719][ T7203] hsr_slave_1 (unregistering): left promiscuous mode
[  137.406558][ T7193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  137.600158][ T7232] syzkaller0: entered promiscuous mode
[  137.602055][ T7232] syzkaller0: entered allmulticast mode
[  137.617206][ T7229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.347'.
[  137.739461][ T7230] syzkaller0: entered promiscuous mode
[  137.741679][ T7230] syzkaller0: entered allmulticast mode
[  138.084228][ T7244] bond3 (unregistering): Released all slaves
[  138.102749][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[  138.233307][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  138.236644][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  138.536965][ T7253] netlink: 'syz.0.355': attribute type 8 has an invalid length.
[  139.019897][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  139.023104][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  139.026165][ T7275] netlink: 'syz.0.360': attribute type 4 has an invalid length.
[  139.038926][ T7275] netlink: 'syz.0.360': attribute type 4 has an invalid length.
[  139.089308][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'.
[  139.121033][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  139.299240][ T7283] bond1: option mode: unable to set because the bond device has slaves
[  139.540296][ T7297] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.367'.
[  139.736848][ T7308] netlink: 732 bytes leftover after parsing attributes in process `syz.1.371'.
[  139.740572][ T7308] netlink: 732 bytes leftover after parsing attributes in process `syz.1.371'.
[  139.810982][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'.
[  139.880877][ T7314] netlink: 228 bytes leftover after parsing attributes in process `syz.1.373'.
[  139.884088][ T7314] openvswitch: netlink: Flow key attr not present in new flow.
[  140.003725][ T7316] netlink: 'syz.1.373': attribute type 33 has an invalid length.
[  140.032883][ T7319] syzkaller1: entered promiscuous mode
[  140.034593][ T7319] syzkaller1: entered allmulticast mode
[  140.440900][ T7327] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  140.808509][ T7342] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  140.865786][ T7346] netlink: 'syz.2.383': attribute type 11 has an invalid length.
[  140.906443][ T7348] syzkaller1: entered promiscuous mode
[  140.908152][ T7348] syzkaller1: entered allmulticast mode
[  141.067908][ T7365] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[  141.087351][ T7365] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.100735][ T7365] macvlan3: entered promiscuous mode
[  141.102840][ T7365] macvlan3: entered allmulticast mode
[  141.105907][ T7365] bond1: entered promiscuous mode
[  141.109772][ T7365] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  141.115226][ T7365] bond1: left promiscuous mode
[  141.134261][ T7369] hsr0: entered promiscuous mode
[  142.040767][ T7396] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[  142.043982][ T7397] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[  142.232029][ T7405] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  142.294409][ T7405] netlink: 'syz.0.400': attribute type 3 has an invalid length.
[  142.644249][ T7444] netlink: 'syz.1.411': attribute type 1 has an invalid length.
[  142.666487][ T7445] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.696968][ T7444] bond2: (slave gretap2): making interface the new active one
[  142.700865][ T7444] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  142.711231][ T7444] bond2 (unregistering): (slave gretap2): Releasing active interface
[  142.717952][ T7444] bond2 (unregistering): Released all slaves
[  143.024563][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.032670][ T7465] syzkaller0: entered promiscuous mode
[  143.034605][ T7465] syzkaller0: entered allmulticast mode
[  143.266781][ T7485] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  143.271239][ T7487] __nla_validate_parse: 9 callbacks suppressed
[  143.271252][ T7487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.423'.
[  143.324832][ T7490] block nbd0: not configured, cannot reconfigure
[  143.933260][   T34] audit: type=1800 audit(1772528953.896:3): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="memory.events" dev="tmpfs" ino=786 res=0 errno=0
[  143.967633][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  143.971034][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  143.989839][ T6926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  144.160079][ T7532] netlink: 260 bytes leftover after parsing attributes in process `syz.1.434'.
[  144.209768][ T5861] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  144.216807][ T7537] validate_nla: 3 callbacks suppressed
[  144.216828][ T7537] netlink: 'syz.1.436': attribute type 1 has an invalid length.
[  144.221804][ T7537] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  144.268686][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'.
[  144.289958][ T5861] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  144.340920][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.
[  144.345054][ T7553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.367993][ T7553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.677814][ T7578] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[  144.680514][ T7578] netlink: 256 bytes leftover after parsing attributes in process `syz.0.445'.
[  144.787349][ T7583] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[  144.833999][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'.
[  144.839827][ T7583] 8021q: adding VLAN 0 to HW filter on device bond9
[  144.844805][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  144.892058][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  144.895090][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  144.903318][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  145.310626][ T7615] syzkaller1: entered promiscuous mode
[  145.312889][ T7615] syzkaller1: entered allmulticast mode
[  145.379056][ T7619] netlink: 'syz.0.457': attribute type 1 has an invalid length.
[  145.389906][ T7623] netlink: 'syz.2.456': attribute type 1 has an invalid length.
[  145.392347][ T7623] netlink: 'syz.2.456': attribute type 1 has an invalid length.
[  145.443991][ T7625] tipc: Invalid UDP bearer configuration
[  145.444023][ T7625] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.694759][ T7633] syzkaller0: entered promiscuous mode
[  145.697016][ T7633] syzkaller0: entered allmulticast mode
[  145.737724][ T7637] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[  145.826764][ T6926] IPVS: starting estimator thread 0...
[  145.831534][ T7640] netlink: 'syz.0.465': attribute type 1 has an invalid length.
[  145.869194][ T7644] syzkaller0: entered promiscuous mode
[  145.873389][ T7644] syzkaller0: entered allmulticast mode
[  145.880449][ T7640] vlan3: entered allmulticast mode
[  145.882046][ T7640] bond10: entered allmulticast mode
[  145.919725][ T7641] IPVS: using max 66 ests per chain, 158400 per kthread
[  146.073382][ T7660] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  146.103887][ T7660] bond11 (unregistering): Released all slaves
[  146.295317][ T7669] netlink: 'syz.2.471': attribute type 1 has an invalid length.
[  146.481236][ T7674] netlink: 'syz.1.472': attribute type 1 has an invalid length.
[  146.578246][ T7675] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.583081][ T7675] bond2: (slave bond3): making interface the new active one
[  146.585897][ T7675] bond2: (slave bond3): Enslaving as an active interface with an up link
[  146.598298][ T7674] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.606161][ T7674] vlan2: entered promiscuous mode
[  146.607844][ T7674] bond2: entered promiscuous mode
[  146.609407][ T7674] bond3: entered promiscuous mode
[  146.873163][ T7683] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  147.759741][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.191407][ T7760] bond11: entered promiscuous mode
[  148.193208][ T7760] 8021q: adding VLAN 0 to HW filter on device bond11
[  148.361049][ T7771] __nla_validate_parse: 39 callbacks suppressed
[  148.361061][ T7771] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'.
[  148.375458][ T7771] batadv0: entered promiscuous mode
[  148.377046][ T7771] batadv0: entered allmulticast mode
[  148.383075][ T7771] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.386256][ T7771] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.455131][ T7780] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.798292][ T7794] bond1: option mode: unable to set because the bond device has slaves
[  148.810854][ T7794] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  148.820797][ T7794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.846014][ T7795] syzkaller0: entered allmulticast mode
[  148.850444][ T7795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.503'.
[  148.853381][ T7795] netlink: 56 bytes leftover after parsing attributes in process `syz.1.503'.
[  148.861143][ T7795] syzkaller0: entered promiscuous mode
[  148.872427][ T7795] syzkaller0 (unregistering): left promiscuous mode
[  148.874761][ T7795] syzkaller0 (unregistering): left allmulticast mode
[  148.978690][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[  149.051172][ T7801] hmac(sha224: entered promiscuous mode
[  150.212471][ T7839] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.515'.
[  150.443921][ T7845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.516258][ T7845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.589958][ T7845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.634496][ T7845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.708381][ T5860] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.717285][ T5860] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.750029][ T5860] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.779719][ T5860] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.783148][ T7856] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  150.931741][ T7865] validate_nla: 4 callbacks suppressed
[  150.931753][ T7865] netlink: 'syz.2.525': attribute type 1 has an invalid length.
[  150.947236][ T7865] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.956500][ T7865] vlan4: entered promiscuous mode
[  150.958107][ T7865] bond5: entered promiscuous mode
[  150.960002][ T7865] vlan4: entered allmulticast mode
[  150.969773][ T7865] bond5: entered allmulticast mode
[  150.981514][ T7865] bond5: (slave bridge6): making interface the new active one
[  150.987907][ T7865] bridge6: entered promiscuous mode
[  150.990031][ T7865] bridge6: entered allmulticast mode
[  150.992508][ T7865] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  151.120451][ T7880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.355525][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.358151][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.442943][ T7894] : left promiscuous mode
[  151.447705][ T7894] bond_slave_1: left promiscuous mode
[  151.680003][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.053669][ T7898] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  152.061929][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.106884][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.115455][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.119034][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.146444][ T7905] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  152.149416][ T7905] netlink: 'syz.0.532': attribute type 2 has an invalid length.
[  152.165343][ T7907] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  152.434902][ T7928] netem: incorrect gi model size
[  152.441483][ T7928] netem: change failed
[  152.480869][ T7930] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  152.485770][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'.
[  152.553481][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[  152.564636][ T7932] netlink: 'syz.2.540': attribute type 1 has an invalid length.
[  152.992049][ T7953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.548'.
[  153.070855][ T7955] 8021q: VLANs not supported on ip6tnl0
[  153.083309][ T7960] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  153.156364][ T7960] bond12: (slave geneve2): making interface the new active one
[  153.163932][ T7960] bond12: (slave geneve2): Enslaving as an active interface with an up link
[  153.169825][ T5677] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  153.172386][ T5677] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  153.176701][ T5677] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  153.188186][ T5677] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  153.200558][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'.
[  153.234252][ T7960] 8021q: adding VLAN 0 to HW filter on device bond12
[  153.258153][ T7960] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  153.342618][ T7979] netlink: 'syz.0.555': attribute type 11 has an invalid length.
[  153.355762][ T7979] netlink: 'syz.0.555': attribute type 1 has an invalid length.
[  153.358799][ T7979] netlink: 'syz.0.555': attribute type 1 has an invalid length.
[  153.458569][ T7986] bond13: option all_slaves_active: invalid value (13)
[  153.462430][ T7986] bond13 (unregistering): Released all slaves
[  153.483055][ T7981] netlink: 'syz.1.556': attribute type 11 has an invalid length.
[  153.540333][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'.
[  153.548358][ T7992] ip6gre1: entered promiscuous mode
[  153.551336][ T7992] ip6gre1: entered allmulticast mode
[  153.766856][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'.
[  153.852694][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[  153.881446][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[  153.896082][ T8013] ip6tnl2: entered allmulticast mode
[  153.915469][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'.
[  153.927209][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.929986][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.565'.
[  153.930707][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'.
[  153.933291][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[  153.935912][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.939286][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'.
[  153.943743][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  153.947163][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.955059][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.228380][ T8026] ieee802154 phy0 wpan0: encryption failed: -22
[  154.277142][ T8026] ieee802154 phy0 wpan0: encryption failed: -22
[  154.371874][ T8036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.590361][ T8046] SET target dimension over the limit!
[  154.685945][ T8050] syzkaller0: entered promiscuous mode
[  154.690656][ T8050] syzkaller0: entered allmulticast mode
[  154.955768][ T8067] pimreg: entered allmulticast mode
[  155.693438][ T8077] openvswitch: netlink: Multiple metadata blocks provided
[  155.922724][ T8087] atomic_op ffff8880119ff198 conn xmit_atomic 0000000000000000
[  156.159761][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  156.837341][ T8109] syzkaller0: entered promiscuous mode
[  156.839213][ T8109] syzkaller0: entered allmulticast mode
[  157.079337][ T8113] ieee802154 phy0 wpan0: encryption failed: -22
[  157.234941][ T8133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.239256][ T8133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.084369][ T8147] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  158.235927][ T8133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.239432][ T8133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.301944][ T8133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.305377][ T8133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.413015][ T8133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.418710][ T8151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  158.423838][ T8133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.428969][ T8151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  158.444988][ T8151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  158.448099][ T8151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  158.453096][ T8151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  158.456570][ T8154] unsupported nlmsg_type 40
[  158.461133][ T8155] vlan3: entered promiscuous mode
[  158.463099][ T8155] bridge0: entered promiscuous mode
[  158.548992][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.555087][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.598239][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.609649][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.632769][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.636447][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.653811][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.656926][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.755460][ T8169] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  158.849214][ T8172] atomic_op ffff8881b8d99198 conn xmit_atomic 0000000000000000
[  158.897134][ T8176] __nla_validate_parse: 7 callbacks suppressed
[  158.897144][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'.
[  158.908150][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  158.950661][ T8176] validate_nla: 4 callbacks suppressed
[  158.950678][ T8176] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[  158.987394][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  159.035525][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'.
[  159.266666][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  159.311094][ T8210] netlink: 'syz.1.617': attribute type 2 has an invalid length.
[  159.313800][ T8210] netlink: 'syz.1.617': attribute type 11 has an invalid length.
[  159.316147][ T8210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.617'.
[  159.481995][ T8224] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  159.570911][ T8228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.621'.
[  159.574481][ T8228] netlink: 43 bytes leftover after parsing attributes in process `syz.1.621'.
[  159.577373][ T8228] netlink: 'syz.1.621': attribute type 5 has an invalid length.
[  159.580246][ T8228] netlink: 43 bytes leftover after parsing attributes in process `syz.1.621'.
[  159.740553][ T8229] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  160.142048][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'.
[  160.354321][ T8237] netlink: 'syz.0.624': attribute type 12 has an invalid length.
[  160.548859][ T8254] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  161.044267][ T8286] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  161.092251][ T8288] syzkaller0: entered promiscuous mode
[  161.094337][ T8288] syzkaller0: entered allmulticast mode
[  161.100498][ T8289] TC_ACT_REPEAT abuse ?
[  161.108038][ T8291] openvswitch: netlink: Flow key attr not present in new flow.
[  161.134153][ T8291] openvswitch: netlink: Flow key attr not present in new flow.
[  161.136705][ T8291] openvswitch: netlink: Flow key attr not present in new flow.
[  161.152583][ T8291] openvswitch: netlink: Flow key attr not present in new flow.
[  161.385752][ T8302] syzkaller0: entered promiscuous mode
[  161.387564][ T8302] syzkaller0: entered allmulticast mode
[  161.416601][ T8302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.436817][ T8301] tipc: Resetting bearer <eth:syzkaller0>
[  161.457052][ T8301] tipc: Disabling bearer <eth:syzkaller0>
[  161.498116][ T8306] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  161.591669][ T8311] syzkaller1: entered promiscuous mode
[  161.594742][ T8311] syzkaller1: entered allmulticast mode
[  161.677666][ T8314] netlink: 'syz.2.648': attribute type 1 has an invalid length.
[  161.693467][ T8314] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.878519][ T8322] netlink: 'syz.2.650': attribute type 21 has an invalid length.
[  161.966955][ T8329] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  161.991171][ T8331] veth0_to_team: entered promiscuous mode
[  162.010964][ T8333] netlink: 'syz.0.654': attribute type 8 has an invalid length.
[  162.014894][ T8331] veth0_to_team: left promiscuous mode
[  162.024235][ T8333] bridge8: entered promiscuous mode
[  162.027414][ T8333] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  162.032519][ T8334] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  162.096227][ T5677] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.101972][ T5677] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.107316][ T5677] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.120023][ T5677] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.374550][ T8353] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  162.433693][ T8356] netlink: 'syz.2.661': attribute type 3 has an invalid length.
[  162.436110][ T8356] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[  162.438355][ T8356] NCSI netlink: No device for ifindex 813332851
[  162.460201][ T8356] atomic_op ffff8881bacce998 conn xmit_atomic 0000000000000000
[  162.555269][ T8363] openvswitch: netlink: IP tunnel TTL not specified.
[  162.606441][ T8364] macvtap0: entered promiscuous mode
[  162.608554][ T8364] macvtap0: entered allmulticast mode
[  162.612418][ T8364] veth0_macvtap: entered allmulticast mode
[  162.865735][ T8383] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  163.737898][ T8395] ip6gre2: entered promiscuous mode
[  163.739855][ T8395] ip6gre2: entered allmulticast mode
[  163.816266][ T8401] bond0 (unregistering): (slave 30): Releasing backup interface
[  163.822088][ T8401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.826703][ T8401] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  163.840299][ T8401] bond0 (unregistering): Released all slaves
[  163.855657][ T8407] dvmrp12: entered allmulticast mode
[  163.859475][ T8406] dvmrp12: left allmulticast mode
[  163.968188][ T8409] __nla_validate_parse: 35 callbacks suppressed
[  163.968200][ T8409] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.676'.
[  163.977114][ T8409] validate_nla: 2 callbacks suppressed
[  163.977124][ T8409] netlink: 'syz.2.676': attribute type 15 has an invalid length.
[  164.178525][ T8416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.215867][ T8419] netlink: 48 bytes leftover after parsing attributes in process `syz.1.681'.
[  164.300429][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'.
[  164.464663][ T8435] bond0: entered promiscuous mode
[  164.466255][ T8435] : entered promiscuous mode
[  164.467838][ T8435] bond_slave_1: entered promiscuous mode
[  164.474538][ T8435] bond0: left promiscuous mode
[  164.476093][ T8435] : left promiscuous mode
[  164.477565][ T8435] bond_slave_1: left promiscuous mode
[  164.688300][ T8441] netlink: 3 bytes leftover after parsing attributes in process `syz.1.688'.
[  164.703785][ T8441] 0X: renamed from caif0
[  164.734329][ T8441] 0X: entered allmulticast mode
[  164.737131][ T8441] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  164.996381][ T8460] netlink: 2 bytes leftover after parsing attributes in process `syz.2.692'.
[  165.135065][ T8464] syzkaller0: entered promiscuous mode
[  165.137266][ T8464] syzkaller0: entered allmulticast mode
[  165.145632][ T8462] pimreg: entered promiscuous mode
[  165.148596][ T5677] syzkaller0: tun_net_xmit 48
[  165.154164][ T8464] syzkaller0: create flow: hash 3346356351 index 1
[  165.157058][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'.
[  165.169789][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[  165.192428][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'.
[  165.193402][ T8468] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  165.196666][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'.
[  165.213656][ T8464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.694'.
[  165.235651][ T8464] veth0_macvtap: left allmulticast mode
[  165.385988][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.388854][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  165.410705][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.413606][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  165.416409][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.419267][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  165.425756][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.429273][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  165.441619][ T8463] syzkaller0: delete flow: hash 3346356351 index 1
[  167.865151][ T8481] hsr0: entered promiscuous mode
[  167.994991][ T8500] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  168.234149][ T8514] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ..btf_total_size: 26
[  168.234149][ T8514] Invalid ma
[  168.377896][ T8528] syzkaller1: entered promiscuous mode
[  168.380410][ T8528] syzkaller1: entered allmulticast mode
[  168.439181][ T8519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.553041][ T8541] netlink: 'syz.0.713': attribute type 3 has an invalid length.
[  168.794930][ T8555] sctp: [Deprecated]: syz.2.717 (pid 8555) Use of int in maxseg socket option.
[  168.794930][ T8555] Use struct sctp_assoc_value instead
[  169.001019][ T8570] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  169.034217][ T8572] __nla_validate_parse: 230 callbacks suppressed
[  169.034230][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  169.047716][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'.
[  169.107605][ T8576] bond1: option mode: unable to set because the bond device has slaves
[  169.195496][ T8576] bond1: (slave veth7): Enslaving as an active interface with a down link
[  169.244699][ T8587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.729'.
[  169.260555][ T8587] netlink: 'syz.1.729': attribute type 10 has an invalid length.
[  169.294711][ T8585] bond1: (slave veth9): Enslaving as an active interface with a down link
[  169.295490][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'.
[  169.390965][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'.
[  169.625813][ T8608] bridge0: entered promiscuous mode
[  169.628430][ T8608] macsec2: entered promiscuous mode
[  169.638480][ T8608] netlink: 'syz.1.736': attribute type 2 has an invalid length.
[  169.654044][ T8608] !: entered promiscuous mode
[  169.661563][ T8608] netlink: 'syz.1.736': attribute type 2 has an invalid length.
[  169.684985][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'.
[  169.711303][ T8608] netlink: 644 bytes leftover after parsing attributes in process `syz.1.736'.
[  169.722081][ T8609] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  169.767437][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'.
[  170.043522][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'.
[  170.305749][ T8632] xt_SECMARK: invalid mode: 3
[  170.559312][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'.
[  170.664543][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.669107][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.682945][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.689277][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.694187][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.698030][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.702136][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.705979][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.709347][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.714626][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.719030][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.727731][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.747842][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.757014][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.761356][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.765314][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.769448][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.773841][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.777652][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.782064][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.786005][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.790537][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.794611][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.798158][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.802317][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.808158][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.821176][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.833075][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.850575][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.854991][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.859273][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.872298][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.877070][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.882145][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.887277][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.906510][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.917498][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.923804][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.927867][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.934946][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.950415][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.954878][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.959394][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.964359][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.980833][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.985418][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.990222][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.000300][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.005156][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.009502][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.014523][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.018971][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.023135][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.027069][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.031934][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.039689][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.043504][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.047088][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.050966][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.054538][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.057933][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.062075][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.065511][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.068801][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.080255][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.089986][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.578317][ T8680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.157854][ T8713] tipc: Enabling of bearer <udp:s > rejected, already enabled
[  172.213091][ T8717] rdma_op ffff88810c1d99f0 conn xmit_rdma 0000000000000000
[  172.408623][ T8728] netlink: 'syz.2.770': attribute type 5 has an invalid length.
[  172.790327][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.142782][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.145258][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.696107][ T8768] netlink: 'syz.2.783': attribute type 12 has an invalid length.
[  173.710079][ T8768] netlink: 'syz.2.783': attribute type 29 has an invalid length.
[  173.748107][ T8772] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  173.777717][ T8772] 8021q: adding VLAN 0 to HW filter on device bond13
[  173.822492][ T8772] bond13 (unregistering): Released all slaves
[  174.119507][ T8780] __nla_validate_parse: 18 callbacks suppressed
[  174.119529][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.787'.
[  174.126450][ T8780] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  174.129454][ T8780] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  174.133361][ T8780] netlink: 11 bytes leftover after parsing attributes in process `syz.0.787'.
[  174.140898][ T8780] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  174.143863][ T8780] netlink: 502 bytes leftover after parsing attributes in process `syz.0.787'.
[  174.149374][ T8780] netlink: 556 bytes leftover after parsing attributes in process `syz.0.787'.
[  174.254678][ T8782] netlink: 228 bytes leftover after parsing attributes in process `syz.0.788'.
[  174.573832][ T8792] validate_nla: 2 callbacks suppressed
[  174.573845][ T8792] netlink: 'syz.0.789': attribute type 27 has an invalid length.
[  174.743545][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  174.806927][ T8797] trusted_key: syz.2.791 sent an empty control message without MSG_MORE.
[  174.852665][ T8803] netlink: 168 bytes leftover after parsing attributes in process `syz.0.792'.
[  175.115387][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'.
[  175.118269][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'.
[  175.139524][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'.
[  175.259160][ T8828] gtp0: entered promiscuous mode
[  175.264257][ T8828] gtp0: entered allmulticast mode
[  175.356096][ T8832] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[  175.358537][ T8832] netlink: 'syz.2.799': attribute type 2 has an invalid length.
[  175.603139][ T8839] Driver unsupported XDP return value 0 on prog  (id 235) dev N/A, expect packet loss!
[  175.912814][ T8849] bond6 (unregistering): Released all slaves
[  176.688837][ T8884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.692443][ T8884] syzkaller0: entered promiscuous mode
[  176.694421][ T8884] syzkaller0: entered allmulticast mode
[  176.723340][ T8884] tipc: Resetting bearer <eth:syzkaller0>
[  176.731877][ T8883] tipc: Resetting bearer <eth:syzkaller0>
[  176.813033][ T8883] tipc: Disabling bearer <eth:syzkaller0>
[  177.016204][ T8897] IPVS: sed: FWM 3 0x00000003 - no destination available
[  177.114726][ T8904] syzkaller0: entered promiscuous mode
[  177.116440][ T8904] syzkaller0: entered allmulticast mode
[  178.578316][ T8925] pimreg: entered allmulticast mode
[  179.322101][ T8940] lo speed is unknown, defaulting to 1000
[  179.324898][ T8940] lo speed is unknown, defaulting to 1000
[  179.328255][ T8940] lo speed is unknown, defaulting to 1000
[  179.367796][ T8940] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  179.378198][ T8944] __nla_validate_parse: 5 callbacks suppressed
[  179.378208][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'.
[  179.383729][ T8940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  179.390111][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'.
[  179.393185][ T8945] netlink: 'syz.1.832': attribute type 8 has an invalid length.
[  179.397967][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'.
[  179.414357][ T8940] lo speed is unknown, defaulting to 1000
[  179.422187][ T8945] geneve2: entered promiscuous mode
[  179.424405][ T8945] geneve2: entered allmulticast mode
[  179.429750][ T8940] lo speed is unknown, defaulting to 1000
[  179.440858][ T8940] lo speed is unknown, defaulting to 1000
[  179.443707][ T8940] lo speed is unknown, defaulting to 1000
[  179.508079][ T8948] netlink: 'syz.1.833': attribute type 4 has an invalid length.
[  179.527166][ T8948] netlink: 'syz.1.833': attribute type 4 has an invalid length.
[  179.679094][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'.
[  179.797520][ T8961] bridge0: port 3(batadv0) entered blocking state
[  179.809366][ T8961] bridge0: port 3(batadv0) entered disabled state
[  179.812255][ T8961] batadv0: entered allmulticast mode
[  179.814696][ T8961] batadv0: entered promiscuous mode
[  179.897711][ T8961] bridge0: port 4(batadv1) entered blocking state
[  179.900640][ T8961] bridge0: port 4(batadv1) entered disabled state
[  179.903381][ T8961] batadv1: entered allmulticast mode
[  179.907358][ T8961] batadv1: entered promiscuous mode
[  179.920101][ T8961] bridge0: port 5(batadv2) entered blocking state
[  179.923029][ T8961] bridge0: port 5(batadv2) entered disabled state
[  179.925710][ T8961] batadv2: entered allmulticast mode
[  179.930867][ T8961] batadv2: entered promiscuous mode
[  179.962773][ T8961] bridge0: port 6(batadv3) entered blocking state
[  179.965623][ T8961] bridge0: port 6(batadv3) entered disabled state
[  179.968380][ T8961] batadv3: entered allmulticast mode
[  179.973120][ T8961] batadv3: entered promiscuous mode
[  179.981929][ T8961] bridge0: port 7(batadv4) entered blocking state
[  179.984639][ T8961] bridge0: port 7(batadv4) entered disabled state
[  179.987209][ T8961] batadv4: entered allmulticast mode
[  179.992249][ T8961] batadv4: entered promiscuous mode
[  180.016843][ T8961] bridge0: port 8(batadv5) entered blocking state
[  180.034691][ T8961] bridge0: port 8(batadv5) entered disabled state
[  180.038583][ T8961] batadv5: entered allmulticast mode
[  180.042843][ T8961] batadv5: entered promiscuous mode
[  180.050320][ T8961] bridge0: port 9(batadv6) entered blocking state
[  180.052403][ T8961] bridge0: port 9(batadv6) entered disabled state
[  180.054645][ T8961] batadv6: entered allmulticast mode
[  180.060837][ T8961] batadv6: entered promiscuous mode
[  180.069169][ T8961] bridge0: port 10(batadv7) entered blocking state
[  180.072814][ T8961] bridge0: port 10(batadv7) entered disabled state
[  180.074922][ T8961] batadv7: entered allmulticast mode
[  180.078172][ T8961] batadv7: entered promiscuous mode
[  180.127523][ T8961] bridge0: port 11(batadv8) entered blocking state
[  180.129514][ T8961] bridge0: port 11(batadv8) entered disabled state
[  180.131919][ T8961] batadv8: entered allmulticast mode
[  180.134245][ T8961] batadv8: entered promiscuous mode
[  180.158622][ T8961] bridge0: port 12(batadv9) entered blocking state
[  180.161337][ T8961] bridge0: port 12(batadv9) entered disabled state
[  180.163555][ T8961] batadv9: entered allmulticast mode
[  180.166146][ T8961] batadv9: entered promiscuous mode
[  180.179209][ T8961] bridge0: port 13(batadv10) entered blocking state
[  180.181739][ T8961] bridge0: port 13(batadv10) entered disabled state
[  180.183984][ T8961] batadv10: entered allmulticast mode
[  180.186595][ T8961] batadv10: entered promiscuous mode
[  180.200756][ T8961] bridge0: port 14(batadv11) entered blocking state
[  180.202768][ T8961] bridge0: port 14(batadv11) entered disabled state
[  180.204748][ T8961] batadv11: entered allmulticast mode
[  180.207360][ T8961] batadv11: entered promiscuous mode
[  180.215007][ T8961] bridge0: port 15(batadv12) entered blocking state
[  180.220194][ T8961] bridge0: port 15(batadv12) entered disabled state
[  180.222859][ T8961] batadv12: entered allmulticast mode
[  180.225893][ T8961] batadv12: entered promiscuous mode
[  180.237515][ T8961] bridge0: port 16(batadv13) entered blocking state
[  180.249930][ T8961] bridge0: port 16(batadv13) entered disabled state
[  180.257317][ T8961] batadv13: entered allmulticast mode
[  180.261248][ T8961] batadv13: entered promiscuous mode
[  180.268218][ T8961] bridge0: port 17(batadv14) entered blocking state
[  180.270823][ T8961] bridge0: port 17(batadv14) entered disabled state
[  180.273368][ T8961] batadv14: entered allmulticast mode
[  180.276388][ T8961] batadv14: entered promiscuous mode
[  180.285210][ T8961] bridge0: port 18(batadv15) entered blocking state
[  180.287622][ T8961] bridge0: port 18(batadv15) entered disabled state
[  180.290180][ T8961] batadv15: entered allmulticast mode
[  180.292677][ T8961] batadv15: entered promiscuous mode
[  180.295771][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  180.299928][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  180.303649][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  180.342775][ T8961] bridge0: port 19(batadv16) entered blocking state
[  180.352341][ T8961] bridge0: port 19(batadv16) entered disabled state
[  180.356538][ T8961] batadv16: entered allmulticast mode
[  180.359109][ T8961] batadv16: entered promiscuous mode
[  180.367472][ T8977] m1Ie5n: entered promiscuous mode
[  180.382908][ T8961] bridge0: port 20(batadv17) entered blocking state
[  180.399944][ T5860] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  180.402687][ T5860] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  180.410237][ T8961] bridge0: port 20(batadv17) entered disabled state
[  180.425682][ T8961] batadv17: entered allmulticast mode
[  180.436291][   T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  180.439763][   T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  180.442712][ T8961] batadv17: entered promiscuous mode
[  180.460628][   T13] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  180.464089][   T13] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  180.471078][ T8961] bridge0: port 21(batadv18) entered blocking state
[  180.473491][ T8961] bridge0: port 21(batadv18) entered disabled state
[  180.475747][ T8961] batadv18: entered allmulticast mode
[  180.478181][ T8961] batadv18: entered promiscuous mode
[  180.484303][ T8961] bridge0: port 22(batadv19) entered blocking state
[  180.492002][ T5860] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  180.494925][ T5860] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  180.498765][ T8961] bridge0: port 22(batadv19) entered disabled state
[  180.501737][ T8961] batadv19: entered allmulticast mode
[  180.504638][ T8961] batadv19: entered promiscuous mode
[  180.519866][ T5860] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  180.523407][ T5860] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  180.545565][ T8961] bridge0: port 23(batadv20) entered blocking state
[  180.548110][ T8961] bridge0: port 23(batadv20) entered disabled state
[  180.552674][ T8961] batadv20: entered allmulticast mode
[  180.555813][ T8961] batadv20: entered promiscuous mode
[  180.560275][ T5860] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[  180.563881][ T5860] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[  180.569889][ T5860] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[  180.573046][ T5860] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[  180.587314][ T8961] bridge0: port 24(batadv21) entered blocking state
[  180.589518][ T8961] bridge0: port 24(batadv21) entered disabled state
[  180.592320][ T8961] batadv21: entered allmulticast mode
[  180.595094][ T8961] batadv21: entered promiscuous mode
[  180.630556][   T13] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled
[  180.633330][   T13] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled
[  180.639057][ T8988] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  180.649751][ T5860] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled
[  180.652684][ T5860] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled
[  180.674860][ T8990] pim6reg: entered allmulticast mode
[  180.680313][ T5860] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled
[  180.683431][ T8990] pim6reg: left allmulticast mode
[  180.683820][ T5860] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled
[  180.711142][ T5860] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled
[  180.714534][ T5860] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled
[  180.724897][ T5860] batman_adv: batadv12: No IGMP Querier present - multicast optimizations disabled
[  180.728900][ T5860] batman_adv: batadv12: No MLD Querier present - multicast optimizations disabled
[  180.745569][ T5860] batman_adv: batadv13: No IGMP Querier present - multicast optimizations disabled
[  180.749013][ T5860] batman_adv: batadv13: No MLD Querier present - multicast optimizations disabled
[  180.770207][ T5860] batman_adv: batadv14: No IGMP Querier present - multicast optimizations disabled
[  180.773710][ T5860] batman_adv: batadv14: No MLD Querier present - multicast optimizations disabled
[  180.799846][ T5860] batman_adv: batadv15: No IGMP Querier present - multicast optimizations disabled
[  180.803239][ T5860] batman_adv: batadv15: No MLD Querier present - multicast optimizations disabled
[  180.849773][ T5860] batman_adv: batadv16: No IGMP Querier present - multicast optimizations disabled
[  180.852668][ T5860] batman_adv: batadv16: No MLD Querier present - multicast optimizations disabled
[  180.889731][ T5860] batman_adv: batadv17: No IGMP Querier present - multicast optimizations disabled
[  180.892981][ T5860] batman_adv: batadv17: No MLD Querier present - multicast optimizations disabled
[  180.970191][ T5860] batman_adv: batadv18: No IGMP Querier present - multicast optimizations disabled
[  180.973483][ T5860] batman_adv: batadv18: No MLD Querier present - multicast optimizations disabled
[  180.992206][ T5860] batman_adv: batadv19: No IGMP Querier present - multicast optimizations disabled
[  180.995900][ T5860] batman_adv: batadv19: No MLD Querier present - multicast optimizations disabled
[  181.049797][ T5860] batman_adv: batadv20: No IGMP Querier present - multicast optimizations disabled
[  181.053294][ T5860] batman_adv: batadv20: No MLD Querier present - multicast optimizations disabled
[  181.089741][   T13] batman_adv: batadv21: No IGMP Querier present - multicast optimizations disabled
[  181.092648][   T13] batman_adv: batadv21: No MLD Querier present - multicast optimizations disabled
[  181.271621][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'.
[  181.274401][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.853'.
[  181.277591][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'.
[  181.282820][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.853'.
[  181.317066][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'.
[  181.565416][ T9074] netlink: 'syz.1.855': attribute type 3 has an invalid length.
[  181.640983][ T9074] block nbd1: NBD_DISCONNECT
[  181.661642][ T9074] pimreg: left allmulticast mode
[  181.854949][ T9090] netlink: 'syz.2.857': attribute type 16 has an invalid length.
[  181.859952][ T9091] netlink: 'syz.2.857': attribute type 16 has an invalid length.
[  181.871889][ T9090] netlink: 'syz.2.857': attribute type 17 has an invalid length.
[  181.874342][ T9091] netlink: 'syz.2.857': attribute type 17 has an invalid length.
[  182.008984][ T9102] netlink: 'syz.1.859': attribute type 2 has an invalid length.
[  182.046933][ T9104] netlink: 'syz.2.860': attribute type 1 has an invalid length.
[  182.066044][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.257663][ T9120] netlink: 'syz.2.862': attribute type 89 has an invalid length.
[  182.363649][ T9126] netlink: 'syz.1.866': attribute type 33 has an invalid length.
[  182.366322][ T9126] `: renamed from veth0_macvtap (while UP)
[  182.385033][ T9126] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  182.514134][ T9132] 8021q: adding VLAN 0 to HW filter on device bond6
[  182.538674][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.544075][ T9132] bond6: (slave bond0): making interface the new active one
[  182.548211][ T9132] bond6: (slave bond0): Enslaving as an active interface with an up link
[  182.555550][ T9132] netlink: 'syz.1.868': attribute type 4 has an invalid length.
[  182.564503][ T9132] .`: renamed from bond0 (while UP)
[  182.640363][ T5860] bond6: (slave .`): link status definitely down, disabling slave
[  182.661788][ T5860] bond6: now running without any active interface!
[  182.824391][ T9145] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  183.102070][ T9161] syzkaller0: entered promiscuous mode
[  183.104273][ T9161] syzkaller0: entered allmulticast mode
[  183.164355][ T9162] bond7: option xmit_hash_policy: invalid value (10)
[  183.188109][ T9162] bond7 (unregistering): Released all slaves
[  183.244773][ T9161] bond7: option xmit_hash_policy: invalid value (10)
[  183.250000][ T9161] bond7 (unregistering): Released all slaves
[  183.503974][ T9166] bond7: entered promiscuous mode
[  183.505784][ T9166] bond7: entered allmulticast mode
[  183.508021][ T9166] 8021q: adding VLAN 0 to HW filter on device bond7
[  183.526787][ T9166] erspan2: entered allmulticast mode
[  183.535905][ T9166] bond7: (slave erspan2): making interface the new active one
[  183.541660][ T9166] erspan2: entered promiscuous mode
[  183.548757][ T9166] bond7: (slave erspan2): Enslaving as an active interface with an up link
[  183.655592][ T9174] bond0: entered promiscuous mode
[  183.665859][ T9174] gretap0: entered promiscuous mode
[  183.673642][ T9174] bridge0: entered promiscuous mode
[  183.676475][ T9174] hsr1: entered promiscuous mode
[  183.983522][ T9189] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  184.108401][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.137602][ T9199] 8021q: adding VLAN 0 to HW filter on device bond7
[  184.369294][ T9205] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.738067][ T9232] __nla_validate_parse: 20 callbacks suppressed
[  184.738082][ T9232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.892'.
[  184.835423][ T9240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.896'.
[  184.876003][ T9246] netlink: 157448 bytes leftover after parsing attributes in process `syz.1.894'.
[  184.888456][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'.
[  184.975488][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'.
[  184.978799][ T9253] netlink: 4872 bytes leftover after parsing attributes in process `syz.2.898'.
[  184.982929][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.898'.
[  184.999342][ T9253] x_tables: duplicate underflow at hook 2
[  185.075276][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'.
[  185.340277][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  185.532386][ T9286] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.907'.
[  186.124776][ T9290] TCP: TCP_TX_DELAY enabled
[  186.132346][ T9290] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  186.313073][ T9305] syzkaller0: entered promiscuous mode
[  186.314820][ T9305] syzkaller0: entered allmulticast mode
[  186.318506][ T9305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.326167][ T9305] tipc: Resetting bearer <eth:syzkaller0>
[  186.364944][ T9305] tipc: Disabling bearer <eth:syzkaller0>
[  186.546754][ T9319] batadv0: left promiscuous mode
[  186.553658][ T9319] batadv0: left allmulticast mode
[  186.582535][ T9319] vlan2: left allmulticast mode
[  186.584561][ T9319] bond2: left allmulticast mode
[  186.586505][ T9319] batadv2: left allmulticast mode
[  186.589242][ T9319] vlan3: left allmulticast mode
[  186.591756][ T9319] geneve1: left allmulticast mode
[  186.638962][ T9319] vlan4: left promiscuous mode
[  186.646389][ T9319] bond5: left promiscuous mode
[  186.647931][ T9319] bridge6: left promiscuous mode
[  186.650651][ T9319] vlan4: left allmulticast mode
[  186.652517][ T9319] bond5: left allmulticast mode
[  186.654321][ T9319] bridge6: left allmulticast mode
[  186.672597][ T9319] ip6gre2: left promiscuous mode
[  186.674111][ T9319] ip6gre2: left allmulticast mode
[  186.682460][ T9319] gtp0: left promiscuous mode
[  186.683932][ T9319] gtp0: left allmulticast mode
[  186.702417][ T9319] bond7: left promiscuous mode
[  186.708438][ T9319] erspan2: left promiscuous mode
[  186.711099][ T9319] bond7: left allmulticast mode
[  186.718387][ T9319] erspan2: left allmulticast mode
[  186.728306][ T9319] hsr1: left promiscuous mode
[  186.806429][ T9324] syzkaller1: entered promiscuous mode
[  186.808604][ T9324] syzkaller1: entered allmulticast mode
[  186.951413][ T9330] validate_nla: 12 callbacks suppressed
[  186.951427][ T9330] netlink: 'syz.1.919': attribute type 8 has an invalid length.
[  186.955998][ T9330] sch_fq: defrate 0 ignored.
[  187.063838][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.066881][ T9328] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address
[  187.071616][ T9328] bond0: (slave xfrm1): Error -95 calling set_mac_address
[  188.244276][ T9334] netlink: 'syz.0.920': attribute type 21 has an invalid length.
[  188.244882][ T9336] netlink: 'syz.0.920': attribute type 21 has an invalid length.
[  188.290745][ T9340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.293932][ T9340] syzkaller0: entered promiscuous mode
[  188.296089][ T9340] syzkaller0: entered allmulticast mode
[  188.303691][ T9340] tipc: Resetting bearer <eth:syzkaller0>
[  188.386077][ T9345] x_tables: ip_tables: ah match: only valid for protocol 51
[  188.459154][ T5812] Bluetooth: hci2: link tx timeout
[  188.464196][ T5812] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  188.938873][ T9360] bond0: up delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  188.943414][ T9360] bond0: option tlb_dynamic_lb: invalid value (8)
[  189.126797][ T9339] tipc: Resetting bearer <eth:syzkaller0>
[  189.151723][ T9339] tipc: Disabling bearer <eth:syzkaller0>
[  189.610524][ T9392] netlink: 'syz.2.935': attribute type 1 has an invalid length.
[  189.649266][ T9392] bond8 (unregistering): Released all slaves
[  190.015591][ T9396] __nla_validate_parse: 11 callbacks suppressed
[  190.015606][ T9396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.936'.
[  190.022683][ T9397] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.936'.
[  190.172407][   T34] audit: type=1800 audit(1772529000.136:4): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.937" name="memory.events" dev="tmpfs" ino=1476 res=0 errno=0
[  190.188888][ T9399] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.937'.
[  190.288587][ T9405] netlink: 'syz.1.939': attribute type 1 has an invalid length.
[  190.298198][ T9405] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.939'.
[  190.551211][ T5817] Bluetooth: hci2: command 0x0406 tx timeout
[  190.616952][ T9414] x_tables: ip6_tables: mh match: only valid for protocol 135
[  190.634311][ T9413] bond8: invalid ARP target 0.0.0.0 specified for addition
[  190.639357][ T9413] bond8: option arp_ip_target: invalid value (0)
[  190.691877][ T9413] bond8 (unregistering): Released all slaves
[  191.014284][ T9433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.945'.
[  191.017173][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'.
[  191.260353][ T9448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.950'.
[  191.263459][ T9448] netlink: 43 bytes leftover after parsing attributes in process `syz.2.950'.
[  191.266802][ T9448] netlink: 'syz.2.950': attribute type 5 has an invalid length.
[  191.270324][ T9448] netlink: 43 bytes leftover after parsing attributes in process `syz.2.950'.
[  191.432678][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.953'.
[  191.510379][ T5817] Bluetooth: hci1: command 0x0406 tx timeout
[  191.516808][ T9461] netlink: 'syz.1.954': attribute type 5 has an invalid length.
[  191.568559][ T9463] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  191.665052][ T9465] netlink: 'syz.1.956': attribute type 3 has an invalid length.
[  194.826058][ T9467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.040029][ T9497] pim6reg: entered allmulticast mode
[  195.043169][ T9497] pim6reg: left allmulticast mode
[  195.072054][ T9501] 8021q: VLANs not supported on vcan0
[  195.103280][ T9493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.145895][ T9507] __nla_validate_parse: 4 callbacks suppressed
[  195.145908][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'.
[  195.297927][ T9521] bond8: (slave veth9): Enslaving as an active interface with a down link
[  195.324768][ T9521] bond8: (slave veth11): Enslaving as an active interface with a down link
[  195.486860][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  195.593425][ T9533] netlink: 212088 bytes leftover after parsing attributes in process `syz.0.972'.
[  195.616109][ T9532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.973'.
[  195.621039][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'.
[  195.936976][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.978'.
[  195.966440][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.978'.
[  196.198298][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'.
[  196.236659][ T9579] pim6reg1: entered promiscuous mode
[  196.241806][ T9579] pim6reg1: entered allmulticast mode
[  196.292729][ T9583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.986'.
[  196.639422][ T9592] pimreg: tun_chr_ioctl cmd 1074025677
[  196.641677][ T9592] pimreg: linktype set to 774
[  198.311558][ T6916] page_pool_release_retry() stalled pool shutdown: id 20, 1 inflight 60 sec
[  198.877801][ T9552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.984020][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[  199.276055][ T9613] syzkaller1: entered promiscuous mode
[  199.277751][ T9613] syzkaller1: entered allmulticast mode
[  199.675979][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  199.935790][ T9640] bond8: option mode: unable to set because the bond device has slaves
[  199.957642][ T9640] bond8: (slave veth17): Enslaving as an active interface with a down link
[  199.980255][ T9640] bond8: (slave veth19): Enslaving as an active interface with a down link
[  200.305446][ T9654] syzkaller0: entered promiscuous mode
[  200.307935][ T9654] syzkaller0: entered allmulticast mode
[  200.538223][ T9676] team0 (unregistering): Failed to send options change via netlink (err -105)
[  200.542865][ T9676] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  200.548615][ T9679] __nla_validate_parse: 2 callbacks suppressed
[  200.548624][ T9679] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1011'.
[  200.554127][ T9680] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1011'.
[  200.556742][ T9676] team0 (unregistering): Port device team_slave_0 removed
[  200.562222][ T9676] team0 (unregistering): Failed to send options change via netlink (err -105)
[  200.565818][ T9676] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  200.569261][ T9676] team0 (unregistering): Port device team_slave_1 removed
[  200.582527][ T9681] wg2: entered promiscuous mode
[  200.584436][ T9681] wg2: entered allmulticast mode
[  200.629491][ T9683] syzkaller0: entered promiscuous mode
[  200.631697][ T9683] syzkaller0: entered allmulticast mode
[  200.637100][ T9683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.643670][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  200.764313][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'.
[  200.766055][ T9682] tipc: Disabling bearer <eth:syzkaller0>
[  200.774833][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'.
[  200.838832][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'.
[  200.853602][ T9689] bond0: invalid ARP target 0.0.0.0 specified for addition
[  200.855974][ T9689] bond0: option arp_ip_target: invalid value (0)
[  200.974161][ T9698] IPVS: sed: FWM 3 0x00000003 - no destination available
[  201.333106][ T9707] netlink: 'syz.1.1020': attribute type 1 has an invalid length.
[  201.365622][ T9707] gretap4: entered allmulticast mode
[  201.374272][ T9707] bond8: (slave gretap4): making interface the new active one
[  201.380100][ T9707] bond8: (slave gretap4): Enslaving as an active interface with an up link
[  201.387835][ T9709] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  201.412006][ T9709] bond9: entered promiscuous mode
[  201.413757][ T9709] 8021q: adding VLAN 0 to HW filter on device bond9
[  201.549205][ T9719] netlink: 'syz.1.1022': attribute type 4 has an invalid length.
[  201.565425][ T9709] 8021q: adding VLAN 0 to HW filter on device bond9
[  201.568470][ T9709] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[  201.574005][ T9709] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  201.582361][ T9709] bond9: (slave vcan0): making interface the new active one
[  201.585242][ T9709] vcan0: entered promiscuous mode
[  201.587735][ T9709] bond9: (slave vcan0): Enslaving as an active interface with an up link
[  201.600555][ T9718] netlink: 'syz.1.1022': attribute type 4 has an invalid length.
[  201.777784][ T9732] tc_dump_action: action bad kind
[  202.136169][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'.
[  202.141365][ T9741] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.144826][ T9741] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  202.611836][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'.
[  202.691261][ T9748] : entered promiscuous mode
[  203.145467][ T9751] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1031'.
[  203.462333][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'.
[  203.544761][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  204.013526][ T9798] bond6: (slave .`): Releasing active interface
[  204.028025][ T9798] bridge_slave_0: left allmulticast mode
[  204.030801][ T9798] bridge_slave_0: left promiscuous mode
[  204.032729][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.038911][ T9798] bridge_slave_1: left allmulticast mode
[  204.043807][ T9798] bridge_slave_1: left promiscuous mode
[  204.046099][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.057737][ T9798] .`: (slave bond_slave_0): Releasing backup interface
[  204.065535][ T9798] .`: (slave bond_slave_1): Releasing backup interface
[  204.076862][ T9798] team0: Port device team_slave_0 removed
[  204.085496][ T9798] team0: Port device team_slave_1 removed
[  204.101639][ T9798] bond2: (slave bond3): Releasing backup interface
[  204.104109][ T9798] bond3: left promiscuous mode
[  204.119403][ T9798] bond8: (slave gretap4): Releasing active interface
[  204.130250][ T5861] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  204.372162][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.423454][ T6926] IPVS: starting estimator thread 0...
[  204.519956][ T9817] IPVS: using max 67 ests per chain, 160800 per kthread
[  204.699851][ T5861] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  205.336987][ T9833] unsupported nla_type 142
[  205.338122][ T9835] netlink: 'syz.1.1054': attribute type 3 has an invalid length.
[  205.632639][ T9850] __nla_validate_parse: 2 callbacks suppressed
[  205.632658][ T9850] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1056'.
[  205.685795][ T9846] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.689477][ T9846] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.771674][ T9846] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.775511][ T9846] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.861244][ T9846] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.864168][ T9846] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.887956][ T9856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1060'.
[  205.898305][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'.
[  205.911054][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  205.927148][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.927190][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  205.931708][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.933853][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  205.936353][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.942464][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.982838][ T9846] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.986717][ T9846] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.071327][ T5839] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.074458][ T5839] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.095933][ T5677] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.098824][ T5677] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.109024][ T5677] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.112842][ T5677] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.122393][ T5677] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.129956][ T5677] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.215473][ T9866] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[  206.238244][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'.
[  206.325127][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'.
[  206.360871][ T9877] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  206.363274][ T9876] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  206.373724][ T9883] bridge0: entered allmulticast mode
[  206.709884][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  233.481297][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'.
[  233.916866][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'.
[  233.938460][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'.
[  233.956396][ T9920] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1076'.
[  234.095667][ T9926] netlink: 'syz.2.1078': attribute type 6 has an invalid length.
[  234.102261][ T9927] netlink: 'syz.2.1078': attribute type 6 has an invalid length.
[  234.170828][ T9936] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  234.306807][ T9947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1084'.
[  234.323481][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'.
[  234.338791][ T9949] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1085'.
[  235.084745][ T9955] openvswitch: netlink: Tunnel attr 10416 out of range max 16
[  235.155175][ T9959] x_tables: duplicate underflow at hook 3
[  235.586943][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'.
[  235.591005][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'.
[  235.705169][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'.
[  236.105154][ T9989] bond10 (unregistering): Released all slaves
[  236.506056][T10007] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  237.135567][T10021] netlink: 'syz.2.1106': attribute type 1 has an invalid length.
[  237.155712][T10021] 8021q: adding VLAN 0 to HW filter on device bond10
[  237.166180][T10021] bond10: (slave geneve0): making interface the new active one
[  237.171918][T10021] bond10: (slave geneve0): Enslaving as an active interface with an up link
[  237.177006][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  237.185878][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  237.199354][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  237.220953][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  237.243453][T10024] syzkaller0: entered promiscuous mode
[  237.245088][T10024] syzkaller0: entered allmulticast mode
[  237.781266][T10056] netlink: 'syz.1.1115': attribute type 10 has an invalid length.
[  237.814104][T10055] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  237.832110][T10055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.018396][T10059] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  239.054772][T10059] bond13 (unregistering): Released all slaves
[  239.089390][T10061] __nla_validate_parse: 7 callbacks suppressed
[  239.089404][T10061] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1120'.
[  239.094959][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1120'.
[  239.139791][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'.
[  239.151006][T10061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'.
[  239.691226][T10080] pim6reg: entered allmulticast mode
[  239.698414][T10080] pim6reg: left allmulticast mode
[  240.100399][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.139510][T10086] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  240.144045][T10086] bond11 (unregistering): Released all slaves
[  240.248218][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'.
[  240.386902][T10093] 8021q: VLANs not supported on ip6_vti0
[  240.672110][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'.
[  240.797471][T10122] openvswitch: netlink: Key type 33 is out of range max 32
[  240.802107][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[  240.813822][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'.
[  240.813845][T10114] netlink: 'syz.2.1135': attribute type 2 has an invalid length.
[  240.974192][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'.
[  241.185002][T10146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1143'.
[  241.375770][T10152] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  241.815271][T10169] lo speed is unknown, defaulting to 1000
[  241.824106][T10169] lo speed is unknown, defaulting to 1000
[  241.850591][T10169] lo speed is unknown, defaulting to 1000
[  241.858641][T10169] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  241.870439][T10171] netlink: 'syz.0.1151': attribute type 21 has an invalid length.
[  241.889004][T10169] lo speed is unknown, defaulting to 1000
[  241.893079][T10169] lo speed is unknown, defaulting to 1000
[  241.896041][T10169] lo speed is unknown, defaulting to 1000
[  241.898811][T10169] lo speed is unknown, defaulting to 1000
[  242.630085][T10203] netlink: 'syz.0.1159': attribute type 11 has an invalid length.
[  242.747461][T10209] netlink: 'syz.1.1161': attribute type 7 has an invalid length.
[  242.759645][T10209] netlink: 'syz.1.1161': attribute type 8 has an invalid length.
[  242.792615][T10212] netlink: 'syz.0.1163': attribute type 6 has an invalid length.
[  243.003557][T10222] syzkaller1: entered promiscuous mode
[  243.005232][T10222] syzkaller1: entered allmulticast mode
[  243.063611][T10224] bond9: option resend_igmp: invalid value (2878)
[  243.065805][T10224] bond9: option resend_igmp: allowed values 0 - 255
[  243.069760][T10224] bond9 (unregistering): Released all slaves
[  243.085348][T10226] sctp: [Deprecated]: syz.0.1168 (pid 10226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.085348][T10226] Use struct sctp_sack_info instead
[  243.304177][T10248] bridge12: entered promiscuous mode
[  243.305908][T10248] bridge12: entered allmulticast mode
[  243.326050][T10243] can: request_module (can-proto-0) failed.
[  243.412158][T10262] openvswitch: netlink: Duplicate or invalid key (type 0).
[  243.419785][T10262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.193342][T10268] syzkaller0: entered promiscuous mode
[  244.195082][T10268] syzkaller0: entered allmulticast mode
[  244.198634][T10269] __nla_validate_parse: 8 callbacks suppressed
[  244.198642][T10269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.205004][T10269] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.208315][T10269] netlink: 'syz.1.1175': attribute type 5 has an invalid length.
[  244.211134][T10269] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.214018][T10268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.217194][T10268] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.220294][T10268] netlink: 'syz.1.1175': attribute type 5 has an invalid length.
[  244.223032][T10268] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1175'.
[  244.328757][T10272] xt_policy: too many policy elements
[  244.482528][T10278] vlan3: entered allmulticast mode
[  244.484669][T10278] bridge_slave_0: entered allmulticast mode
[  244.487119][T10278] bridge0: port 1(vlan3) entered blocking state
[  244.490746][T10278] bridge0: port 1(vlan3) entered disabled state
[  244.495059][T10278] vlan3: entered promiscuous mode
[  244.496968][T10278] bridge_slave_0: entered promiscuous mode
[  246.349376][T10252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.441625][T10282] bridge9: entered promiscuous mode
[  246.446211][T10282] bridge9: entered allmulticast mode
[  246.459393][T10284] netlink: 'syz.2.1179': attribute type 59 has an invalid length.
[  246.482362][T10284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'.
[  246.495759][T10287] syzkaller0: entered promiscuous mode
[  246.497943][T10287] syzkaller0: entered allmulticast mode
[  246.674817][T10300] lo speed is unknown, defaulting to 1000
[  246.687542][T10284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  246.690935][T10284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.760594][T10305] bond9: Removing last ns target with arp_interval on
[  246.788690][T10300] dvmrp0: entered allmulticast mode
[  246.942105][ T5860] dvmrp0 (unregistering): left allmulticast mode
[  246.989681][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'.
[  247.800702][T10338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1191'.
[  247.806088][T10338] netlink: 'syz.1.1191': attribute type 1 has an invalid length.
[  247.833848][T10344] netlink: 'syz.0.1187': attribute type 25 has an invalid length.
[  247.836228][T10344] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  247.876745][T10346] ieee802154 phy0 wpan0: encryption failed: -22
[  248.806169][T10359] team_slave_0: entered allmulticast mode
[  248.849315][T10362] netlink: 'syz.0.1199': attribute type 7 has an invalid length.
[  248.868131][T10362] vlan0: entered promiscuous mode
[  248.879940][T10362] geneve1: entered promiscuous mode
[  248.882459][T10362] vlan0: entered allmulticast mode
[  248.884457][T10362] geneve1: entered allmulticast mode
[  248.964621][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  249.009192][T10376] tipc: Can't bind to reserved service type 0
[  249.242151][T10401] __nla_validate_parse: 2 callbacks suppressed
[  249.242165][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'.
[  249.249750][T10401] netlink: 'syz.2.1211': attribute type 6 has an invalid length.
[  249.299180][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  249.331294][T10394] syzkaller1: entered promiscuous mode
[  249.333851][T10394] syzkaller1: entered allmulticast mode
[  249.400758][T10408] pimreg: entered allmulticast mode
[  249.725077][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1216'.
[  249.769957][T10425] pim6reg: entered allmulticast mode
[  249.772261][T10426] pim6reg: left allmulticast mode
[  249.861706][T10430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'.
[  250.176081][T10441] delete_channel: no stack
[  250.234297][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'.
[  250.364839][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1226'.
[  250.434317][T10457] netlink: 'syz.2.1227': attribute type 1 has an invalid length.
[  250.636006][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'.
[  251.174441][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1238'.
[  251.178367][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1238'.
[  251.182954][T10488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.267637][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  251.278344][T10491] bond1: option mode: unable to set because the bond device has slaves
[  251.287900][T10491] syzkaller0: entered promiscuous mode
[  251.290612][T10491] syzkaller0: entered allmulticast mode
[  251.294508][T10491] netlink: 'syz.0.1240': attribute type 4 has an invalid length.
[  251.299367][T10491] .`: renamed from bond0
[  251.495596][T10503] 8021q: VLANs not supported on ip_vti0
[  251.552769][T10508] bridge: RTM_NEWNEIGH with invalid state 0x0
[  251.554959][T10507] bridge: RTM_NEWNEIGH with invalid state 0x0
[  251.703653][T10514] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  251.707708][T10514] bond9: left promiscuous mode
[  251.710077][T10514] vcan0: left promiscuous mode
[  251.712924][T10514] bridge12: left promiscuous mode
[  251.975450][T10529] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  251.979652][T10529] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  252.037968][T10531] netlink: 'syz.2.1252': attribute type 21 has an invalid length.
[  252.046554][T10531] netlink: 'syz.2.1252': attribute type 3 has an invalid length.
[  252.520433][   T34] audit: type=1800 audit(1772529062.486:5): pid=10546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1255" name="memory.events" dev="tmpfs" ino=1998 res=0 errno=0
[  252.638903][T10546] can: request_module (can-proto-0) failed.
[  252.688109][T10556] bond0 (unregistering): Released all slaves
[  252.791184][T10570] netlink: zone id is out of range
[  252.792198][T10569] netlink: zone id is out of range
[  252.792809][T10570] netlink: zone id is out of range
[  252.792816][T10570] netlink: zone id is out of range
[  252.794577][T10569] netlink: zone id is out of range
[  252.795956][T10570] netlink: zone id is out of range
[  252.795962][T10570] netlink: zone id is out of range
[  252.795965][T10570] netlink: zone id is out of range
[  252.795968][T10570] netlink: zone id is out of range
[  253.057447][T10575] sch_tbf: burst 88 is lower than device veth21 mtu (1514) !
[  253.229785][T10587] netlink: 'syz.1.1265': attribute type 4 has an invalid length.
[  253.279984][T10581] netlink: 'syz.1.1265': attribute type 4 has an invalid length.
[  253.289969][ T5677] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.294767][ T5677] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  253.311230][ T5677] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.329609][ T5677] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  253.332288][ T5677] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.346981][ T5677] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  253.352641][ T5677] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.356810][ T5677] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  253.649150][T10621] block nbd0: not configured, cannot reconfigure
[  254.122671][T10675] gretap5: entered promiscuous mode
[  254.270335][T10699] __nla_validate_parse: 87 callbacks suppressed
[  254.270348][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'.
[  254.276424][T10699] netlink: 'syz.0.1284': attribute type 11 has an invalid length.
[  254.279253][T10699] netlink: 'syz.0.1284': attribute type 4 has an invalid length.
[  254.282103][T10699] netlink: 'syz.0.1284': attribute type 5 has an invalid length.
[  254.284632][T10699] netlink: 'syz.0.1284': attribute type 6 has an invalid length.
[  254.287056][T10699] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1284'.
[  254.511709][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  254.526812][T10716] ip6erspan0: entered promiscuous mode
[  254.529263][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  254.659808][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  254.750267][T10727] veth0_to_bridge: entered promiscuous mode
[  254.752973][T10727] macvtap0: entered promiscuous mode
[  254.754787][T10727] macvtap0: entered allmulticast mode
[  254.756498][T10727] veth0_to_bridge: entered allmulticast mode
[  254.761536][T10727] veth0_to_bridge: left allmulticast mode
[  254.763824][T10727] veth0_to_bridge: left promiscuous mode
[  254.786751][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'.
[  255.009326][T10737] !9: entered promiscuous mode
[  255.080421][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'.
[  255.349167][T10769] syzkaller0: entered promiscuous mode
[  255.361907][T10769] syzkaller0: entered allmulticast mode
[  255.588395][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'.
[  255.632036][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1301'.
[  255.997161][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  256.064864][T10788] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  256.171872][T10790] lo speed is unknown, defaulting to 1000
[  256.815473][T10832] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20003
[  256.927486][T10838] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  257.102113][T10849] syzkaller0: entered promiscuous mode
[  257.106596][T10849] syzkaller0: entered allmulticast mode
[  257.492172][T10874] net_ratelimit: 1541 callbacks suppressed
[  257.492182][T10874] netlink: Conntrack attr has 4 unknown bytes
[  257.507369][T10874] 0X: left allmulticast mode
[  257.509104][T10874] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  257.572713][T10881] validate_nla: 4 callbacks suppressed
[  257.572727][T10881] netlink: 'syz.2.1329': attribute type 8 has an invalid length.
[  257.581327][T10881] sch_fq: defrate 0 ignored.
[  257.593130][T10881] netlink: 'syz.2.1329': attribute type 3 has an invalid length.
[  257.667635][T10892] netlink: 'syz.0.1332': attribute type 1 has an invalid length.
[  258.098625][T10908] netlink: 'syz.2.1337': attribute type 5 has an invalid length.
[  258.436985][   T34] audit: type=1800 audit(1772529068.396:6): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1343" name="memory.events" dev="tmpfs" ino=2170 res=0 errno=0
[  259.131709][T10966] syzkaller0: entered promiscuous mode
[  259.134906][T10966] syzkaller0: entered allmulticast mode
[  259.223567][T10970] netlink: del zone limit has 4 unknown bytes
[  259.328060][T10979] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  259.331291][T10978] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  259.332723][T10979] netlink: 'syz.2.1358': attribute type 6 has an invalid length.
[  259.334816][T10978] netlink: 'syz.2.1358': attribute type 6 has an invalid length.
[  259.336939][T10979] __nla_validate_parse: 81 callbacks suppressed
[  259.336947][T10979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1358'.
[  259.341831][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1358'.
[  259.397720][T10976] lo speed is unknown, defaulting to 1000
[  259.409038][T10982] gretap0: refused to change device tx_queue_len
[  259.411903][T10982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  259.493648][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'.
[  259.535112][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1361'.
[  259.857503][T11000] lo speed is unknown, defaulting to 1000
[  260.246455][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  260.265513][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  260.281057][ T5677] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.283732][ T5677] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.286649][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  260.289368][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  260.294014][ T5677] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  260.298339][ T5677] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.768250][T11034] netlink: 'syz.2.1370': attribute type 1 has an invalid length.
[  260.775720][T11034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1370'.
[  260.884500][T11044] syzkaller0: entered promiscuous mode
[  260.886333][T11044] syzkaller0: entered allmulticast mode
[  261.113845][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  261.125619][T11052] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.129446][T11052] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.164326][T11052] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.167391][T11052] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.216250][T11059] syzkaller0: entered promiscuous mode
[  261.218171][T11059] syzkaller0: entered allmulticast mode
[  261.227986][T11052] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.231732][T11052] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.243888][T11052] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.247081][T11052] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.326687][ T5677] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  261.330196][ T5677] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.337531][ T5677] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  261.341010][ T5677] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.348943][ T5677] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.352700][ T5677] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.362394][ T5677] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.365085][ T5677] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.434963][T11062] lo speed is unknown, defaulting to 1000
[  261.595503][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  261.645171][T11071] xt_bpf: check failed: parse error
[  261.652440][T11071] siw: device registration error -23
[  261.712783][T11075] vlan6: entered promiscuous mode
[  261.716425][T11075] erspan0: entered promiscuous mode
[  261.722470][T11075] vlan6: entered allmulticast mode
[  261.729013][T11075] erspan0: entered allmulticast mode
[  261.932032][T11094] openvswitch: netlink: Message has 171 unknown bytes.
[  262.011850][T11100] netlink: 'syz.1.1388': attribute type 3 has an invalid length.
[  262.120649][T11108] geneve3: entered promiscuous mode
[  262.129638][T11108] geneve3: entered allmulticast mode
[  262.142551][ T5839] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  262.151284][ T5839] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  262.170510][ T5839] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  262.172939][ T5839] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  262.317595][T11121] .`: (slave wlan1): Opening slave failed
[  262.411781][T11124] openvswitch: netlink: Tunnel attr 10416 out of range max 16
[  262.444792][T11110] sctp: [Deprecated]: syz.2.1391 (pid 11110) Use of int in maxseg socket option.
[  262.444792][T11110] Use struct sctp_assoc_value instead
[  262.573939][T11131] macsec1: entered promiscuous mode
[  262.575570][T11131] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  263.042067][T11139] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  263.067967][T11139] bond10 (unregistering): Released all slaves
[  263.336364][T11155] pim6reg1: entered allmulticast mode
[  263.472370][T11156] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  263.475000][T11157] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  264.344076][T11166] __nla_validate_parse: 17 callbacks suppressed
[  264.344090][T11166] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1409'.
[  264.391666][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1411'.
[  265.017901][T11181] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1414'.
[  265.022095][T11181] netlink: ct family unspecified
[  265.051108][T11183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1415'.
[  265.096881][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  265.152273][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'.
[  265.261156][T11190] lo speed is unknown, defaulting to 1000
[  266.077234][T11209] validate_nla: 2 callbacks suppressed
[  266.077251][T11209] netlink: 'syz.0.1420': attribute type 1 has an invalid length.
[  266.124728][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'.
[  266.128080][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1420'.
[  266.333163][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'.
[  266.439432][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[  266.595031][T11228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.158489][T11254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.166029][T11247] lo speed is unknown, defaulting to 1000
[  267.585546][T11299] netlink: 'syz.2.1439': attribute type 3 has an invalid length.
[  268.066475][T11304] openvswitch: netlink: Message has 8 unknown bytes.
[  268.076122][T11302] can: request_module (can-proto-5) failed.
[  268.633748][T11330] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  268.652408][T11335] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  268.723658][T11337] syzkaller1: entered promiscuous mode
[  268.729808][T11337] syzkaller1: entered allmulticast mode
[  268.796021][T11340] netlink: 'syz.2.1451': attribute type 1 has an invalid length.
[  268.847487][T11340] bond12: entered promiscuous mode
[  268.850017][T11340] 8021q: adding VLAN 0 to HW filter on device bond12
[  268.877650][T11337] bond12: (slave bridge14): making interface the new active one
[  268.880689][T11337] bridge14: entered promiscuous mode
[  268.884557][T11337] bridge14: left promiscuous mode
[  269.226578][T11357] lo speed is unknown, defaulting to 1000
[  269.246589][T11359] siw: device registration error -23
[  269.321980][T11363] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  269.324308][T11363] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  269.543836][T11388] __nla_validate_parse: 17 callbacks suppressed
[  269.543856][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  269.584971][T11390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'.
[  269.654279][   T34] audit: type=1800 audit(1772529079.616:7): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1468" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2359 res=0 errno=0
[  269.661581][   T34] audit: type=1800 audit(1772529079.616:8): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1468" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2359 res=0 errno=0
[  269.834604][T11398] lo speed is unknown, defaulting to 1000
[  269.835533][T11403] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1471'.
[  269.853070][T11397] lo speed is unknown, defaulting to 1000
[  269.882166][T11404] lo speed is unknown, defaulting to 1000
[  269.995545][T11412] lo speed is unknown, defaulting to 1000
[  270.004749][T11415] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1472'.
[  270.008195][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'.
[  270.265431][T11433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1474'.
[  270.391585][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'.
[  270.448576][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[  270.592422][T11457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1483'.
[  270.606632][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[  270.747246][T11463] netlink: 'syz.1.1485': attribute type 2 has an invalid length.
[  270.750762][T11463] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  270.753705][T11463] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  271.036218][T11474] Cannot find add_set index 2 as target
[  271.193289][T11482] tipc: Trying to set illegal importance in message
[  271.233730][T11484] xt_hashlimit: overflow, rate too high: 0
[  271.236027][T11484] netlink: 'syz.1.1493': attribute type 1 has an invalid length.
[  271.267303][T11486] netlink: 'syz.1.1494': attribute type 1 has an invalid length.
[  271.273657][T11486] wg1: entered promiscuous mode
[  271.275211][T11486] wg1: entered allmulticast mode
[  271.349952][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  271.739299][T11527] bridge14: port 1(veth23) entered blocking state
[  271.743109][T11527] bridge14: port 1(veth23) entered disabled state
[  271.747871][T11527] veth23: entered allmulticast mode
[  271.753761][T11527] veth23: entered promiscuous mode
[  271.757085][T11527] bridge14: port 1(veth23) entered blocking state
[  271.760277][T11527] bridge14: port 1(veth23) entered forwarding state
[  272.010804][T11551] netlink: 'syz.2.1505': attribute type 29 has an invalid length.
[  272.016609][T11551] netlink: 'syz.2.1505': attribute type 29 has an invalid length.
[  272.043564][T11551] syzkaller0: entered promiscuous mode
[  272.049910][T11551] syzkaller0: entered allmulticast mode
[  272.230927][   T69] bridge14: port 1(veth23) entered disabled state
[  272.497989][T11562] netlink: 'syz.2.1509': attribute type 14 has an invalid length.
[  272.560669][T11564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.636992][T11570] netlink: 'syz.2.1512': attribute type 1 has an invalid length.
[  272.651756][T11570] bond13: entered promiscuous mode
[  272.655299][T11570] 8021q: adding VLAN 0 to HW filter on device bond13
[  272.925612][T11591] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004
[  273.088813][T11609] syz.0.1522 (11609) used obsolete PPPIOCDETACH ioctl
[  273.678209][T11584] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  273.774496][T11614] netlink: 'syz.2.1523': attribute type 1 has an invalid length.
[  275.969737][T11599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  276.227801][T11636] netlink: 'syz.1.1530': attribute type 3 has an invalid length.
[  276.244445][T11637] netlink: 'syz.2.1531': attribute type 1 has an invalid length.
[  276.280637][T11636] siw: device registration error -23
[  276.285808][T11634] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  276.314750][T11640] __nla_validate_parse: 9 callbacks suppressed
[  276.314765][T11640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1532'.
[  276.374895][T11648] xfrm0: entered promiscuous mode
[  276.377313][T11648] xfrm0: entered allmulticast mode
[  276.616921][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'.
[  276.685464][T11677] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1544'.
[  276.689508][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1544'.
[  276.723291][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'.
[  276.733090][ T5839] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.735727][ T5839] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.738403][ T5839] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.744301][ T5839] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.819133][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'.
[  279.638507][T11670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.645728][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'.
[  279.739224][T11705] bridge14: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  279.751191][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'.
[  280.016829][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1554'.
[  280.030712][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'.
[  280.432524][T11738] netlink: 'syz.1.1563': attribute type 11 has an invalid length.
[  280.676367][T11744] bridge0: left allmulticast mode
[  280.681953][T11744] 8021q: adding VLAN 0 to HW filter on device .`
[  280.687522][T11744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.763083][T11751] netlink: 'syz.0.1566': attribute type 11 has an invalid length.
[  281.570784][T11751] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  281.813321][T11785] __nla_validate_parse: 4 callbacks suppressed
[  281.813333][T11785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1575'.
[  281.939028][T11788] xt_cgroup: invalid path, errno=-2
[  282.050396][T11778] wg1: left promiscuous mode
[  282.052016][T11778] wg1: left allmulticast mode
[  282.256982][T11778] veth1_macvtap: left allmulticast mode
[  282.335871][T11778] macvlan2: left promiscuous mode
[  282.337842][T11778] macvlan2: left allmulticast mode
[  282.342731][T11778] macsec0: left allmulticast mode
[  282.344545][T11778] macsec1: left allmulticast mode
[  282.387289][T11778] vlan2: left promiscuous mode
[  282.389236][T11778] bond2: left promiscuous mode
[  282.400557][T11778] ip6gre1: left promiscuous mode
[  282.402467][T11778] ip6gre1: left allmulticast mode
[  282.410516][T11778] ip6tnl2: left allmulticast mode
[  282.490113][T11778] macsec2: left promiscuous mode
[  282.505767][T11778] geneve2: left promiscuous mode
[  282.507491][T11778] geneve2: left allmulticast mode
[  282.540658][T11778] gretap4: left allmulticast mode
[  282.546143][T11778] ip6erspan0: left promiscuous mode
[  282.550274][T11778] geneve3: left promiscuous mode
[  282.553141][T11778] geneve3: left allmulticast mode
[  282.560511][T11778] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  282.568850][T11778] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  282.610140][ T5677] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.613328][ T5677] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.631124][ T5677] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  282.659470][ T5677] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.673315][ T5677] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.687217][ T5677] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  282.691389][ T5677] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.694141][ T5677] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.696678][ T5677] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  282.756984][ T5677] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.760758][ T5677] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.763911][ T5677] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  282.952329][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'.
[  282.975597][T11811] bond15: Removing last ns target with arp_interval on
[  283.013512][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'.
[  283.066275][T11820] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  283.098510][T11820] syzkaller0: entered promiscuous mode
[  283.109147][T11820] syzkaller0: entered allmulticast mode
[  283.859007][T11859] netlink: 'syz.0.1595': attribute type 29 has an invalid length.
[  284.051277][T11872] netlink: 'syz.1.1599': attribute type 10 has an invalid length.
[  284.159743][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1602'.
[  284.238273][T11886] netlink: 'syz.2.1604': attribute type 10 has an invalid length.
[  284.251836][T11886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1604'.
[  284.267638][T11886] dummy0: entered promiscuous mode
[  284.274478][T11886] bridge0: port 2(dummy0) entered blocking state
[  284.278764][T11873] netlink: 131 bytes leftover after parsing attributes in process `syz.0.1598'.
[  284.280444][T11886] bridge0: port 2(dummy0) entered disabled state
[  284.286090][T11886] dummy0: entered allmulticast mode
[  284.295585][T11888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1605'.
[  284.861931][T11902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1610'.
[  284.923972][T11910] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  284.926405][T11910] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  284.962688][T11917] netlink: 'syz.0.1613': attribute type 29 has an invalid length.
[  284.965510][T11917] netlink: 'syz.0.1613': attribute type 29 has an invalid length.
[  284.998671][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  285.003791][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  285.008689][T11916] delete_channel: no stack
[  285.072988][T11921] openvswitch: netlink: Flow actions attr not present in new flow.
[  285.173501][T11923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.913184][T11939] lo speed is unknown, defaulting to 1000
[  285.923132][T11936] lo speed is unknown, defaulting to 1000
[  286.068282][T11942] netlink: 'syz.2.1620': attribute type 3 has an invalid length.
[  286.094056][T11946] netlink: 'syz.0.1623': attribute type 9 has an invalid length.
[  286.370342][T11946] bond1: (slave macvlan2): Releasing active interface
[  286.397365][T11946] .` (unregistering): (slave c5): Releasing backup interface
[  286.412173][T11946] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  286.416439][T11946] .` (unregistering): Released all slaves
[  286.872044][T11986] lo speed is unknown, defaulting to 1000
[  286.923719][T11993] __nla_validate_parse: 75 callbacks suppressed
[  286.923734][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1635'.
[  291.830224][    C0] ------------[ cut here ]------------
[  291.832874][    C0] ODEBUG: free active (active state 0) object: ffff888101be4890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  291.837392][    C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0
[  291.841453][    C0] Modules linked in:
[  291.843522][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  291.847179][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.851349][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  291.853993][    C0] Code: 89 44 24 20 e8 37 6f 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 b0 27 8c 48 c7 c2 c0 b5 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  291.861827][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  291.864451][    C0] RAX: ffffffff8a956630 RBX: ffffffff9a4b47d8 RCX: 0000000000000000
[  291.867785][    C0] RDX: ffffffff8c27b5c0 RSI: ffffffff8c27b040 RDI: ffffffff901c4580
[  291.871147][    C0] RBP: ffffffff8bcf3c40 R08: ffff888101be4890 R09: ffffffff8bcf4f60
[  291.874334][    C0] R10: dffffc0000000000 R11: ffffffff81b1d860 R12: ffff888101be4a00
[  291.877508][    C0] R13: ffffffff901c4580 R14: ffff888101be4000 R15: ffff888101be4890
[  291.880779][    C0] FS:  0000000000000000(0000) GS:ffff88818de64000(0000) knlGS:0000000000000000
[  291.884473][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.887246][    C0] CR2: 00007f1477be6158 CR3: 000000010cb86000 CR4: 00000000000006f0
[  291.890701][    C0] Call Trace:
[  291.892174][    C0]  <IRQ>
[  291.893405][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  291.895795][    C0]  kfree+0x13a/0x630
[  291.897500][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  291.899752][    C0]  rose_timer_expiry+0x4cb/0x600
[  291.901877][    C0]  ? call_timer_fn+0x178/0x640
[  291.903960][    C0]  call_timer_fn+0x192/0x640
[  291.905910][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  291.908300][    C0]  ? call_timer_fn+0xd4/0x640
[  291.910385][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  291.912543][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.914794][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  291.917088][    C0]  __run_timer_base+0x652/0x8b0
[  291.919135][    C0]  ? ktime_get+0x45/0x200
[  291.921064][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  291.923316][    C0]  ? sched_clock_cpu+0x74/0x440
[  291.925420][    C0]  run_timer_softirq+0xb7/0x170
[  291.927455][    C0]  handle_softirqs+0x22a/0x870
[  291.929510][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  291.931651][    C0]  __irq_exit_rcu+0x5f/0x150
[  291.933655][    C0]  irq_exit_rcu+0x9/0x30
[  291.935548][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  291.937964][    C0]  </IRQ>
[  291.939232][    C0]  <TASK>
[  291.940567][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  291.942808][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  291.944877][    C0] Code: 5e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 fd 1b 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  291.952535][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000206
[  291.955122][    C0] RAX: 00000000001c970f RBX: ffffffff819a80dd RCX: 0000000080000001
[  291.958439][    C0] RDX: 0000000000000001 RSI: ffffffff8def2f90 RDI: ffffffff8c27aa00
[  291.961657][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[  291.964581][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff901186b0
[  291.967236][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  291.969946][    C0]  ? do_idle+0x1bd/0x500
[  291.971415][    C0]  default_idle+0x9/0x20
[  291.972842][    C0]  default_idle_call+0x72/0xb0
[  291.974665][    C0]  do_idle+0x1bd/0x500
[  291.976207][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  291.978394][    C0]  ? __pfx_do_idle+0x10/0x10
[  291.980365][    C0]  cpu_startup_entry+0x43/0x60
[  291.982347][    C0]  rest_init+0x2de/0x300
[  291.984125][    C0]  start_kernel+0x385/0x3d0
[  291.986068][    C0]  x86_64_start_reservations+0x24/0x30
[  291.988081][    C0]  x86_64_start_kernel+0x143/0x1c0
[  291.989775][    C0]  common_startup_64+0x13e/0x147
[  291.991448][    C0]  </TASK>
[  291.992513][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  291.995275][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  291.998243][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.001784][    C0] Call Trace:
[  292.002999][    C0]  <IRQ>
[  292.004025][    C0]  vpanic+0x56c/0xa60
[  292.005457][    C0]  ? __pfx__printk+0x10/0x10
[  292.007033][    C0]  ? __pfx_vpanic+0x10/0x10
[  292.008553][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  292.010381][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  292.012131][    C0]  panic+0xc5/0xd0
[  292.013538][    C0]  ? __pfx_panic+0x10/0x10
[  292.015145][    C0]  ? common_startup_64+0x13e/0x147
[  292.016877][    C0]  __warn+0x315/0x4f0
[  292.018396][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  292.020589][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  292.022422][    C0]  __report_bug+0x29a/0x540
[  292.023841][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  292.025716][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  292.027535][    C0]  ? __pfx___report_bug+0x10/0x10
[  292.029115][    C0]  ? run_timer_softirq+0xb7/0x170
[  292.030807][    C0]  ? handle_softirqs+0x22a/0x870
[  292.032513][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  292.034212][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.036116][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.038119][    C0]  ? pv_native_safe_halt+0xf/0x20
[  292.039754][    C0]  ? default_idle+0x9/0x20
[  292.041181][    C0]  ? default_idle_call+0x72/0xb0
[  292.042746][    C0]  report_bug_entry+0x19a/0x290
[  292.044412][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  292.046417][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  292.048568][    C0]  handle_bug+0xca/0x200
[  292.050110][    C0]  exc_invalid_op+0x1a/0x50
[  292.051662][    C0]  asm_exc_invalid_op+0x1a/0x20
[  292.053373][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  292.055431][    C0] Code: 89 44 24 20 e8 37 6f 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 b0 27 8c 48 c7 c2 c0 b5 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  292.061837][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  292.063835][    C0] RAX: ffffffff8a956630 RBX: ffffffff9a4b47d8 RCX: 0000000000000000
[  292.066344][    C0] RDX: ffffffff8c27b5c0 RSI: ffffffff8c27b040 RDI: ffffffff901c4580
[  292.068759][    C0] RBP: ffffffff8bcf3c40 R08: ffff888101be4890 R09: ffffffff8bcf4f60
[  292.071393][    C0] R10: dffffc0000000000 R11: ffffffff81b1d860 R12: ffff888101be4a00
[  292.073873][    C0] R13: ffffffff901c4580 R14: ffff888101be4000 R15: ffff888101be4890
[  292.076568][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  292.078387][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  292.080221][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  292.082189][    C0]  kfree+0x13a/0x630
[  292.083561][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  292.085396][    C0]  rose_timer_expiry+0x4cb/0x600
[  292.087136][    C0]  ? call_timer_fn+0x178/0x640
[  292.088846][    C0]  call_timer_fn+0x192/0x640
[  292.090457][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.092479][    C0]  ? call_timer_fn+0xd4/0x640
[  292.094044][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  292.095679][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.097332][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  292.099091][    C0]  __run_timer_base+0x652/0x8b0
[  292.100660][    C0]  ? ktime_get+0x45/0x200
[  292.102079][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  292.103800][    C0]  ? sched_clock_cpu+0x74/0x440
[  292.105388][    C0]  run_timer_softirq+0xb7/0x170
[  292.106970][    C0]  handle_softirqs+0x22a/0x870
[  292.108518][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  292.110067][    C0]  __irq_exit_rcu+0x5f/0x150
[  292.111540][    C0]  irq_exit_rcu+0x9/0x30
[  292.112890][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  292.114681][    C0]  </IRQ>
[  292.115630][    C0]  <TASK>
[  292.116578][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  292.118482][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  292.120273][    C0] Code: 5e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 fd 1b 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  292.126338][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000206
[  292.128409][    C0] RAX: 00000000001c970f RBX: ffffffff819a80dd RCX: 0000000080000001
[  292.131210][    C0] RDX: 0000000000000001 RSI: ffffffff8def2f90 RDI: ffffffff8c27aa00
[  292.133767][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[  292.136318][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff901186b0
[  292.138960][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  292.142171][    C0]  ? do_idle+0x1bd/0x500
[  292.143819][    C0]  default_idle+0x9/0x20
[  292.145476][    C0]  default_idle_call+0x72/0xb0
[  292.147423][    C0]  do_idle+0x1bd/0x500
[  292.149181][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  292.151400][    C0]  ? __pfx_do_idle+0x10/0x10
[  292.153390][    C0]  cpu_startup_entry+0x43/0x60
[  292.155433][    C0]  rest_init+0x2de/0x300
[  292.157248][    C0]  start_kernel+0x385/0x3d0
[  292.159189][    C0]  x86_64_start_reservations+0x24/0x30
[  292.161499][    C0]  x86_64_start_kernel+0x143/0x1c0
[  292.163647][    C0]  common_startup_64+0x13e/0x147
[  292.165713][    C0]  </TASK>
[  292.167587][    C0] Kernel Offset: disabled
[  292.169451][    C0] Rebooting in 86400 seconds..
