last executing test programs:

4.586497407s ago: executing program 4 (id=9425):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x802, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x11c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

4.249696714s ago: executing program 4 (id=9430):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x10022}}, 0x20}}, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000001200)={0x60000010})
r6 = epoll_create1(0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000000d})
close(0x4)

3.743259781s ago: executing program 4 (id=9433):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="4c440064076955000039dd66c14000000000000000"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x4, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x41}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x80}}, 0x4004)

3.23461029s ago: executing program 4 (id=9438):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x9, [@enum={0x7, 0x3, 0x0, 0x6, 0x4, [{0xc, 0xffffff5e}, {0x6}, {0xb, 0x6}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @fwd={0x2}, @enum64={0x6, 0x5, 0x0, 0x13, 0x0, 0x1, [{0xf, 0x8, 0x4}, {0xc, 0xa38b, 0x80}, {0x5, 0x9, 0x7}, {0x10, 0x1, 0x7ff}, {0x4, 0x8, 0x4bc}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x2}, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x9, [{0xe, 0x4, 0x81}, {0xd, 0x0, 0x52}, {0xa, 0x0, 0x3}, {0xd, 0x2, 0x4}, {0x5, 0x1, 0x2}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x1}, @volatile, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f, 0x0, 0x30, 0x30, 0x30, 0x2e]}}, &(0x7f00000003c0)=""/233, 0x125, 0xe9, 0x1, 0x5c9, 0xadc845ee59e19e94}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff, 0x28020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x11, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.035971813s ago: executing program 4 (id=9443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040090) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (rerun: 32)

2.474527741s ago: executing program 1 (id=9446):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3ab17b1fdf94fcb9070e10002000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001e00ff010000a40034801400350076657468305f746f5f7465616d000000140035006970365f76746930000000000000000014003500626f6e645f736c6176655f31000000001400350076657468315f746f5f627269646765001400350069703665727370616e300000000000001400350076657468315f746f5f626174616476001400350070696d72656730000000000000000000140035006d6163766c616e300000000000000000"], 0xcc}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

2.222023061s ago: executing program 1 (id=9448):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)
sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r4, 0x1, {0x2, 0x0, 0x4}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="d16f2c7145d43d730d5e412cb578aa00d3e888043ce88d701bddab9d3ecaedb21c83af92cfc344902b02519e8bd232e2d0cfa23ee4ae83e2b5bb73b0519a9e3ea5e602e346c0e66d9177212fdd5a", 0x4e}, 0x1, 0x0, 0x0, 0x48000}, 0x4040)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000080)="27000000140007fdffffffffffffff0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

2.01768284s ago: executing program 4 (id=9449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
ioctl$FICLONE(r4, 0x40049409, r1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0xf8611000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x21, &(0x7f0000000580)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x0, 0x6, 0x7, 0x4, 0x8, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.014346129s ago: executing program 2 (id=9451):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.89848338s ago: executing program 3 (id=9452):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x2, 0x6, 0x2, 0x2, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x2b, 0x80, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}}, 0x40c0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023010000340200400600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e0038"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4)

1.897991228s ago: executing program 1 (id=9453):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000023c0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
listen(r2, 0xfffffffd)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
r3 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@remote, @bcast, @default, @default, @bcast, @default, @remote, @rose]}, &(0x7f0000000040)=0x48)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0xcc1}], 0x1}}], 0x2, 0x4000)
recvmsg(r4, &(0x7f0000000640)={&(0x7f0000000180)=@caif=@rfm, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/218, 0xda}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000500)=""/186, 0xba}], 0x3, &(0x7f0000000600)=""/3, 0x3}, 0x40000100)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "3d834e2035e6f40c94aa748f243c56d7"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000014c0)={0x1c8, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x87, 0x1, "1c464b6a2bc902728bda3873829c9dd2140840a58bc36ebd75cc0400703e67aae1dc16e450793f99f2c29769c28163d3a88b022078175bbed01c2fa30b764b22890c3505d9d836de220c9050b4130d048e41c96d9e91faf25880d07e6881bc08e801a7aa7f6533688796d92d67a99d747c725a781e9e2c82948e6cfbcb1b79c40b1ea3"}]}, @NL80211_ATTR_IE={0x113, 0x2a, [@dsss={0x3, 0x1, 0xb1}, @perr={0x84, 0x9c, {0x4, 0xa, [{{}, @broadcast, 0x6, @void, 0x17}, {{0x0, 0x1}, @broadcast, 0xffff, @value=@broadcast, 0x6}, {{}, @broadcast, 0x32, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x28}, {{}, @broadcast, 0x8, @void, 0x29}, {{}, @broadcast, 0x1, @void, 0x9}, {{0x0, 0x1}, @device_a, 0xb3a, @value=@broadcast, 0x1a}, {{}, @broadcast, 0x5, @void, 0x11}, {{}, @broadcast, 0x8, @void, 0x35}, {{0x0, 0x1}, @device_b, 0x34a1c120, @value, 0x2c}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x3e4}}, @rann={0x7e, 0x15, {{0x1, 0x26}, 0x0, 0xf6, @device_b, 0x2, 0x81, 0x2}}, @link_id={0x65, 0x12, {@random="34543ba2ff3f", @device_a, @device_b}}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x61}}, @channel_switch={0x25, 0x3, {0x1, 0x34, 0x34}}, @rann={0x7e, 0x15, {{0x1, 0xe}, 0x7, 0x40, @device_a, 0x8, 0x5342a20a, 0xf}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0x200, 0x9, 0x0, 0x1a, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x7, 0xa}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x3ff}]}]}, 0x1c8}}, 0x8010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000008b703000000000000850000001b000000b700000000000000950a000000000000"], &(0x7f0000000140)='GPL\x00', 0x6}, 0x94)

1.847607519s ago: executing program 0 (id=9454):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002007665746830"], 0x2c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)

1.681534181s ago: executing program 2 (id=9456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c030000020303000000000000000000000000100800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0)

1.53052163s ago: executing program 2 (id=9457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0x3, [{0x6, 0x40, 0x3, 0xffffe43e}, {0x48c, 0x9, 0x6, 0x2}, {0x7, 0xfe4, 0x2e, 0x1000}, {0x8001, 0xd0, 0x3, 0x3f}, {0x3, 0x4, 0x2, 0x3}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf250200000000000000060007000b0000000c000880050004000100000008000600f200000008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x2f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x72}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x24008895)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x6, 0x2, 0x81, 0x5})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1.530015353s ago: executing program 0 (id=9458):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0}) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xe}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000002, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0)

1.518630088s ago: executing program 3 (id=9459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xb4, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x1aa8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1868, 0x3, 0x0, 0x1, [{0x1854, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "210b029e64d48234a9eb05bd444e7150b645fda07e3a5bd1297babb1500f176262cdbb30821305c55df7260a58c306cf2efce81ab82419a8e872ffac7204affb9930ad08fb0ddd47020a317140c57f0d4668ddbe2a61e9823585bf9b96888a4dc81d7000d0550df64a5a3515d9cfee24620388af3be3fdd5b18902f0563527b46561c1552e254f2d9423cb6a2ad99d1d3dd1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x98, 0x1, "5f22360260c211e2ea130850d1ba45792d7a2f5e081b4cdf18654033e666835b821ab1d3e1128b381e345058a6bc8bb5a9dae40c847319263e367f1c442693717bad85773d6e5e54ebb0efc207658d9829f1fafb8506347f261e3ed5b863641e8c7e835e325f6c3bcb003bc237f61451300f4f5ae4a3c67ec377aa547e593fada78f858fd5a55e0c964b913852914217c8576366"}]}, @NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0xa0}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xe}]}}}, @NFTA_SET_ELEM_DATA={0x1274, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x54, 0x1, "044a066fa4c7472d377371a2cf634064c268d96e67bdf1520592db4b71f80f4fac13ed3b12f2ae4aaa2b0d1f71301387c2b6e127fadd2aa38a54339d8417ee0f9807818e2b32807b7c0e6b3859a33c22"}, @NFTA_DATA_VALUE={0x47, 0x1, "671a4f6756a47b5da782c281c8123cf3ddc753f2e2f9ccfd340e8136020a2eb481ec23c31a2bffe2b74c134c218a0a0c6c27e3509b84d81b916efba6da9509ced0dfd8"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3b, 0x1, "9f55361dc78db0aebe5676faca459717d786915b6d9a2631203f6f5cc817f0173b118de22c7fd4a71e09dcf7c03f89e07846362b991f9c"}, @NFTA_DATA_VALUE={0xfa, 0x1, "136cd4f9f7b2b8cb64b399dac53c913f47be974cc58847b87ec355dff6d8cf7db0207bfdf3463246757c178943f465d8957ab4105aafc2f8677c193e8869309d7a5bf5dfd16a933757a3195beb03c4ecf4dee55a86ff19e8e4caeefbac9a7c08dd3d8e4ecd85be1bdf0d5749aaff52f36868787a27c8858aa9d6fa8ba7f9a2d92117fced35d4c37f6a0e64cde490a728a829d44c00ec6e8673fa1ee7c20ea3e7cf81a7f1427c78e540d0dadea219676ada1f9ec20163ce314c1c736b4b10e919928b6d55643923c12a9ae9f62e2c3ae3c375f2050a2bbb7802e16854c075f0bc4db8eb8434495e35ba0ff6b9c6b51d49fcbe9cc7e279"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "f73e6350f7a3db2c7da13527ea84cfda6aaacca4cb7ac0187cff45093c7f8bed4053e129754fa00dbd828431333dc8290ec49eacf6f59203922cf70c2d75e7bc9db64605bcf5a427d2ed19cb6f565748868eecda6e25aea937cc6c405552b21e3dea33de566fd943af842aafc0cea398deaa3ebaf89a805237d8474604cf402a97c175a3e0f5f7baf95715d166881bd24912"}, @NFTA_SET_ELEM_KEY={0x2b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "7a1811599079dcdfd8d76003f4e9c5efd3d1d60e342761bcc6525dfa73cc0b753a5a5236a9091a594d069590aeda6ebaf475a356fb54dcbd086632ffd25d14d71163be75f64af1f0f36c658b2c789e822b07ce202cb26ef4ea27902288d5b81a2dd80ef0df08b18d05ff818e1587675668f825581dc4f00aab3749ef5593f7e254ce02b0c0"}, @NFTA_DATA_VALUE={0xf5, 0x1, "900307d0fbc39ae833585b6bf0735d266996d35332ff9bba77312d02a43f53bc51a555fcfaa9104bb6de185a17113ce48e60375e299133265b5a1c357a6cd235f424c7921c975a3c01ed2f271b28c12c23f5975e8e9282f96bcdf58b4612b6351f6205dce0af41d1acc8e304b8d9729115caba3a6466799e4b18c3fbf13b44b2bbb86c42ad7f9800d3673361ac6080c8a3806ccf06c0adb078289b923bdc64145f5d42fd5791aec59e479323ace5bb5cf9cad29c9854de6cd28336389f33fa6c3c2b8ed617b87ab77eebe6073fa8dff199d58aae599221c095d549fb6ab387ee729cd79158ce14fa14470dc0d569769241"}, @NFTA_DATA_VALUE={0x88, 0x1, "bf3092f2e71e9d55d38a3c9ff4ace2744e52d76abd6d3f6dff0ec2eb0ca6a9a4573dd834557a4584581af4302c8523e59ecc6880a921ad8731191edc20b779185c76b0d557be6709e0bfbaded893517cb7f635c4c7011f374cf50da1c7d725d4dac7ef2d8208449d11cd31b31ae2bfc6bfc194dcb92af309acc723f532d4eddcb7b96965"}, @NFTA_DATA_VALUE={0x39, 0x1, "3d9ca85330d6d0f6939f51e7ccaa696064f039aeeed4ebb3f1a51e948bb7f0a1e62ff1f9b5807c53100645d0f6d4fe94b1951a459e"}, @NFTA_DATA_VALUE={0x58, 0x1, "994fc5b053b4c32ab16abb6687a4cc48a705edc76af865135030c9d347f7c8c6e01609e2e5839b7a822a6830f4bc3706c1bc1081623fa84dcbb3204ba31e61670edbff07401ca56e28191adaba856eb0ef84cf55"}, @NFTA_DATA_VALUE={0x13, 0x1, "a0e9449dc85bb1daa4f92b87616e37"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e4, 0x3, 0x0, 0x1, [{0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "7e7a3df1ef9680f87db05a511d1fefdce5389295d1c47dab87a224c86d9bc6398756322a13c819beb9029f8e28f70dd0092ad6d8e318c04656b8dae53945be837baeeb49499c4d58862bf4619a8e75ca876f4346e9cd962d0be0db7b0eee28902a09067f4aa0be84ecb8a97fd73b1392e9319d3b7b59752661deac635252a13a30dbe158904f72e225d16fdfa53dff"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "f00b8034bf682e80c71ed52ba5070390cb3ecfb635ba00596f0d9acdebb1dcc78f4843b88106196e58461d8b95ef7726b3714dfbd52aaa0d6fcf036c22bf7c58c93b35d5475da2a1b1a603e214bcb59c651e8b3b0984462fc94cdf6778d4647abe84fbd8cd0a09ff1c46a67199b82e80afc9792e3dd769f541ae426b2882e4b56762dea6452f18b53e4c68eedbca39f606f8ac2ff0ce33a4e3f2c606662104e367850c9853287e493b6f802602c6406133f31856cd6262a63e29adac831754c374151818b6425867faff991e9c888a2f55190d7011ea0167d4e58fe199ed00de51809393434c56bbac2f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7ff}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @NFT_MSG_NEWCHAIN={0x10c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_USERDATA={0x27, 0xc, "04a6f6788ead2da694ab8500afea8a090db93d695507b8e73eeef69a9cbcce95b185ed"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_DELCHAIN={0x178, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xd8, 0xc, "9f88497c3f24f30ee4065ac6e2c8e3f6a608fb0214ee2c715048847c1332d3b186d71d04b42ec9a5c3ab3ec5d00d01cf110374271d7b55ed8fd987c3dccd124d30473766e9ed6c5c7c5b54060e51de153590b11f0bf4ba73eea7e688a2442bfb42cdaf2471235d14f6397c4d694660612695ef3c42c938ad6df6a57e9c57488a5abdb281bcbe82eb51e9901c9345b2daac73d74470557695d2ae905d14edf38772214278ff126ef04ec8125acf78948c1323069660eed4465ac9f70b515c4268764ebce67217557c6c9b825dd65b3f6dd2bc222a"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1e5c}, 0x1, 0x0, 0x0, 0x44040}, 0x4014)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x98aa2000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r0)

1.306315323s ago: executing program 0 (id=9460):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r1, 0x0, 0x0, 0x800) (async)
r2 = accept4(r1, 0x0, 0x0, 0x800)
accept$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94)

1.226499619s ago: executing program 3 (id=9461):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000004e2200000200000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000ac1414aa00e79783f728fb4a000000000000000000000000000000010000000400000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000040))

1.113489279s ago: executing program 3 (id=9462):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18000000, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.078034381s ago: executing program 0 (id=9463):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) (async)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

942.61551ms ago: executing program 2 (id=9464):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r1=>0x0, @rand_addr, @dev}, &(0x7f0000000140)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', r1, r0, 0xffffffff, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0xfffffffffffffffd)
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty=0xeaffffff}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x847}, {0xe, 0x9}, {0x2, 0x5ce4}, {0x1, 0x6}, {0xe, 0x2}, {0x6, 0x4}, {0x1, 0x1064}]}]}}, 0x0, 0x5e, 0x0, 0x1, 0x8}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)

942.165253ms ago: executing program 1 (id=9465):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockname(r0, 0x0, &(0x7f0000000ac0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
connect$ax25(r2, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000080))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="221b00006dfc4663b8f66891b53e051f739b339f99da9ca2f285e62d9d1e09487cf351f16d2cbd79be18b0a0c17d59919da30ab461589e0100282c969670960000000079ca25e0f21898a9bfee85825ed9d5a32e03a6a9d53a676f105e7da108bb183e2931a6c786c149bfe2b38ebe67083366f09a49f1b3998d3a14746c7d450000000000", @ANYRES16=r10, @ANYBLOB="010025bd7000000000003f00000008000300", @ANYRES32=r9, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x4048c00}, 0x0)

861.391567ms ago: executing program 3 (id=9466):
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)={r3}, &(0x7f00000004c0)=0x8) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000007c0))
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8084)

791.897858ms ago: executing program 0 (id=9467):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401)
listen(r0, 0xfffffffc)
r1 = gettid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1)
shutdown(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
accept4(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000001c0)=0x80, 0x80800)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005", @ANYRES32=r5, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="44f56e001000090600000000fedbdf2512897c3a", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x814)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008014)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x1)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket(0x2a, 0x2, 0x0)
r12 = socket(0x28, 0x5, 0x0)
accept4$unix(r12, 0x0, 0x0, 0x0)
getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480))
r14 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r15=>0x0})
bind$can_j1939(r14, &(0x7f0000000040)={0x1d, r15, 0x8000000000000002, {0x2, 0xff}, 0x1}, 0x18)
bind$can_j1939(r14, &(0x7f0000000140)={0x1d, r15, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

725.104906ms ago: executing program 2 (id=9468):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x5, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb6, 0x3, 0xa, [0x9, 0x1]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x1, @default, @netrom={'nr', 0x0}, 0xea, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x9, 0x1, 0x40, 0x6}, {0xd053, 0x6, 0x3, 0x800}, {0x7fff, 0x40, 0x2c, 0x3}, {0x1e, 0x1, 0x9, 0x5}, {0xf, 0x2, 0x2, 0x2957}, {0x3, 0xc, 0x1, 0x9}, {0x4, 0x4, 0x4c, 0x4}]}, 0x10)

550.502548ms ago: executing program 1 (id=9469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x1, 0x6)
getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000880))
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r5, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/26, 0x1a, 0x0, &(0x7f00000001c0)=""/223, 0xdf}}, 0x10)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000001540)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x1, 0x6, "2515ae", 0x9e07, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], "a789a85bce59f4ac"}}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000100000000000000000000000000000000050003000bff0400af010000080007000200000040003c66bfae01006c625f686173685f7374617473000000000000000000000000000000abd8eff420b9d4de772900000000050003000b00000008000400adff"], 0xa0}}, 0x884)

334.108504ms ago: executing program 0 (id=9470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x4, 0x3)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ddffffffffffffff"], 0x8)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x4000010)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000012f"], 0xfce)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0xfed3)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x1a, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x24004014)

258.336511ms ago: executing program 2 (id=9471):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
connect$inet6(r1, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4) (async)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000080fedbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00000008021100cf144d27feb0b9de5fbb3e70"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000080fedbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00000008021100cf144d27feb0b9de5fbb3e70"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0xfffa, 0x9}, {0xffff, 0xffe0}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xac6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.503872ms ago: executing program 3 (id=9472):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x8000)

0s ago: executing program 1 (id=9473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200d8200800450000140000000000899078ac141400ac1414aa"], 0x0)

kernel console output (not intermixed with test programs):

cks suppressed
[  818.548858][T31796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7300'.
[  818.583547][T31796] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7300'.
[  818.623292][T31796] netlink: 'syz.0.7300': attribute type 5 has an invalid length.
[  818.672950][T31796] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7300'.
[  818.858565][T31805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  819.099613][T31816] netlink: 'syz.0.7308': attribute type 1 has an invalid length.
[  819.127793][T31816] netlink: 'syz.0.7308': attribute type 2 has an invalid length.
[  819.147716][T31816] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.7308'.
[  819.238273][T31826] netlink: 'syz.0.7308': attribute type 1 has an invalid length.
[  819.263317][T31826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7308'.
[  819.368543][T31835] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7314'.
[  819.440808][T31835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7314'.
[  819.483692][T31839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  819.652071][T31851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7320'.
[  819.820845][T31857] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7319'.
[  820.049736][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7323'.
[  820.168209][T31866] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  820.216857][T31869] netlink: 'syz.1.7325': attribute type 1 has an invalid length.
[  820.284235][T31869] netlink: 'syz.1.7325': attribute type 3 has an invalid length.
[  820.292833][T31869] netlink: 'syz.1.7325': attribute type 235 has an invalid length.
[  820.397956][T31879] netlink: 'syz.2.7327': attribute type 1 has an invalid length.
[  820.414129][T31879] netlink: 'syz.2.7327': attribute type 3 has an invalid length.
[  820.612969][T31890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  820.786016][T31900] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  820.945809][T31905] digital: digital_start_poll: Unknown protocol
[  821.201153][T31921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  821.211716][T31921] tipc: Resetting bearer <eth:syzkaller0>
[  821.222100][T31918] tipc: Disabling bearer <eth:syzkaller0>
[  821.582164][T31937] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  822.231891][T31977] validate_nla: 5 callbacks suppressed
[  822.231911][T31977] netlink: 'syz.0.7360': attribute type 1 has an invalid length.
[  823.171842][T32020] bond10: entered promiscuous mode
[  823.180384][T32020] bond10: entered allmulticast mode
[  823.188579][T32020] 8021q: adding VLAN 0 to HW filter on device bond10
[  823.694934][T32020] bond10 (unregistering): Released all slaves
[  823.729996][T32022] bridge: RTM_NEWNEIGH with invalid state 0x8
[  823.758428][T32051] netlink: 'syz.3.7382': attribute type 1 has an invalid length.
[  823.828360][T32051] 8021q: adding VLAN 0 to HW filter on device bond6
[  823.860159][T32047] macvtap1: entered promiscuous mode
[  823.868001][T32047] bond6: entered promiscuous mode
[  823.894756][T32047] macvtap1: entered allmulticast mode
[  823.900212][T32047] bond6: entered allmulticast mode
[  823.951630][T32060] netlink: 'syz.1.7387': attribute type 10 has an invalid length.
[  823.958020][T32047] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  824.584367][T32083] wg1: entered promiscuous mode
[  824.787035][T32102] netlink: 'syz.2.7397': attribute type 4 has an invalid length.
[  824.815035][T32107] __nla_validate_parse: 13 callbacks suppressed
[  824.815058][T32107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'.
[  824.815703][T32102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'.
[  824.821371][T32107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7400'.
[  824.909237][T32110] wg2: entered promiscuous mode
[  824.919881][T32110] wg2: entered allmulticast mode
[  824.997175][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'.
[  825.055544][T32115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7400'.
[  825.121350][T32117] veth0_to_team: entered promiscuous mode
[  825.127686][T32117] veth0_to_team: entered allmulticast mode
[  825.301436][T32134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7402'.
[  825.816740][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7412'.
[  825.841155][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7412'.
[  826.349285][T32176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7413'.
[  826.376158][T32173] netlink: 'syz.0.7416': attribute type 4 has an invalid length.
[  826.479371][T32177] netlink: 'syz.2.7417': attribute type 1 has an invalid length.
[  826.603071][T32186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7417'.
[  826.747778][T32184] bond2: (slave gretap1): making interface the new active one
[  826.775199][T32184] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  826.845072][T32186] 8021q: adding VLAN 0 to HW filter on device bond2
[  827.115142][T32209] tipc: New replicast peer: 255.255.255.255
[  827.141807][T32209] tipc: Enabled bearer <udp:syz2>, priority 10
[  828.145685][T32253] bond0: (slave dummy0): Releasing backup interface
[  828.177429][T32253] bond2: (slave gretap1): Releasing active interface
[  828.257568][T31000] tipc: Node number set to 1969133616
[  828.511294][T32263] netlink: 'syz.0.7438': attribute type 10 has an invalid length.
[  828.572622][T32263] team0: Port device geneve0 added
[  828.593165][T16985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.613025][T16985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.635057][T16985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.678737][T16985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.947760][T32285] 8021q: adding VLAN 0 to HW filter on device bond7
[  829.571106][T32317] team0: Device gtp0 is up. Set it down before adding it as a team port
[  829.668377][T32321] ipvlan0: entered promiscuous mode
[  829.680818][T32321] ipvlan0: entered allmulticast mode
[  829.693583][T32321] veth0_vlan: entered allmulticast mode
[  829.704438][T32326] sctp: [Deprecated]: syz.3.7457 (pid 32326) Use of int in maxseg socket option.
[  829.704438][T32326] Use struct sctp_assoc_value instead
[  829.996078][T32338] __nla_validate_parse: 7 callbacks suppressed
[  829.996099][T32338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7462'.
[  830.032326][T32338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7462'.
[  830.053404][T32338] netlink: 50 bytes leftover after parsing attributes in process `syz.0.7462'.
[  830.129680][T32343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7463'.
[  830.153856][T32345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7464'.
[  830.294044][T32349] openvswitch: netlink: Key type 16144 is out of range max 32
[  830.410332][T32359] netlink: 'syz.4.7468': attribute type 10 has an invalid length.
[  830.581359][T32359] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  830.671118][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7470'.
[  830.852697][T32380] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  830.928717][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7475'.
[  830.958663][T32384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7476'.
[  831.051579][T32390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7478'.
[  831.183226][T32396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7480'.
[  831.209098][T32398] netlink: 'syz.3.7479': attribute type 23 has an invalid length.
[  831.355922][T28222] Bluetooth: hci2: command 0x0406 tx timeout
[  831.376347][T32397] netlink: 'syz.3.7479': attribute type 23 has an invalid length.
[  831.860692][T32422] sctp: [Deprecated]: syz.3.7486 (pid 32422) Use of int in max_burst socket option.
[  831.860692][T32422] Use struct sctp_assoc_value instead
[  832.517248][T32446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.621787][T32442] syzkaller0: entered promiscuous mode
[  832.627459][T32442] syzkaller0: entered allmulticast mode
[  832.634168][T32442] tipc: Resetting bearer <eth:syzkaller0>
[  832.639351][T32458] netlink: 'syz.2.7500': attribute type 1 has an invalid length.
[  832.871137][T32464] team0: Device vti0 is up. Set it down before adding it as a team port
[  833.201415][T32467] 8021q: adding VLAN 0 to HW filter on device bond8
[  833.325278][T16978] tipc: Resetting bearer <eth:syzkaller0>
[  833.432346][T32436] tipc: Resetting bearer <eth:syzkaller0>
[  833.532352][T32494] netlink: 'syz.1.7510': attribute type 2 has an invalid length.
[  833.541564][T32494] netlink: 'syz.1.7510': attribute type 8 has an invalid length.
[  834.400543][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  835.637720][T32436] tipc: Disabling bearer <eth:syzkaller0>
[  835.674529][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 660 seconds
[  835.686096][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 660 seconds
[  835.697767][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 660 seconds
[  835.709623][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 660 seconds
[  835.829251][T32499] __nla_validate_parse: 8 callbacks suppressed
[  835.829276][T32499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7512'.
[  835.856137][T32499] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.7512'.
[  835.988063][T32503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7513'.
[  836.004885][T32505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  836.014762][T32503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7513'.
[  836.034693][T32505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  836.050007][T32510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7517'.
[  836.073482][T32505] gretap1: entered promiscuous mode
[  836.108285][T32505] gretap1: entered allmulticast mode
[  836.368701][T32525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7520'.
[  836.779503][T32538] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7524'.
[  836.804915][T32543] netlink: 'syz.4.7525': attribute type 5 has an invalid length.
[  836.820203][T32540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7526'.
[  836.899538][T32540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7526'.
[  837.315472][T32549] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7529'.
[  837.436420][T32553] veth5: entered promiscuous mode
[  837.441732][T32553] veth5: entered allmulticast mode
[  837.744646][T32561] syzkaller1: entered promiscuous mode
[  837.750433][T32561] syzkaller1: entered allmulticast mode
[  837.927574][T32568] veth7: entered allmulticast mode
[  838.854574][T32620] syzkaller1: entered promiscuous mode
[  838.863873][T32620] syzkaller1: entered allmulticast mode
[  838.891690][T30998] IPVS: starting estimator thread 0...
[  838.994322][T32627] IPVS: using max 24 ests per chain, 57600 per kthread
[  839.042334][T32638] pim6reg: left allmulticast mode
[  839.372169][T32651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.548101][T32653] netlink: 'syz.0.7559': attribute type 5 has an invalid length.
[  839.556905][T32658] netlink: 'syz.4.7560': attribute type 21 has an invalid length.
[  839.877052][T32679] gtp0: entered promiscuous mode
[  839.883762][T32679] gtp0: entered allmulticast mode
[  840.720374][T32724] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  840.988238][T32735] __nla_validate_parse: 11 callbacks suppressed
[  840.988273][T32735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7583'.
[  841.042398][T32735] netlink: 'syz.3.7583': attribute type 1 has an invalid length.
[  841.213621][T32751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7587'.
[  841.288534][T32753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7587'.
[  841.314209][T32754] netlink: 'syz.3.7588': attribute type 6 has an invalid length.
[  841.352010][T32757] netlink: 'syz.0.7589': attribute type 1 has an invalid length.
[  841.370365][T32757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7589'.
[  841.384287][T32757] nbd: illegal input index 1048576
[  841.521530][T32759] tipc: Started in network mode
[  841.526819][T32759] tipc: Node identity 06c6b6253d38, cluster identity 4711
[  841.541280][T32759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  841.562851][T32759] syzkaller0: entered promiscuous mode
[  841.574945][T32759] syzkaller0: entered allmulticast mode
[  841.586310][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7591'.
[  841.609788][T32761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7591'.
[  841.645892][T32766] tap0: tun_chr_ioctl cmd 1074025672
[  841.651693][T32766] tap0: ignored: set checksum disabled
[  841.664660][T32759] netlink: 'syz.1.7590': attribute type 8 has an invalid length.
[  841.698468][T32759] tipc: Resetting bearer <eth:syzkaller0>
[  841.799415][  T301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7595'.
[  841.809369][T32758] tipc: Resetting bearer <eth:syzkaller0>
[  841.816669][  T303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7594'.
[  841.826851][  T303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7594'.
[  841.851578][  T304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'.
[  841.892971][T32758] tipc: Disabling bearer <eth:syzkaller0>
[  841.940704][  T309] netlink: 'syz.3.7597': attribute type 4 has an invalid length.
[  843.455100][  T371] nbd: must specify a size in bytes for the device
[  843.471983][  T373] netlink: 'syz.0.7617': attribute type 1 has an invalid length.
[  843.686491][  T385] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  845.438223][  T377] macvtap2: entered allmulticast mode
[  845.883128][  T410] syzkaller1: entered promiscuous mode
[  845.895760][  T410] syzkaller1: entered allmulticast mode
[  845.972607][  T416] netlink: 'syz.2.7629': attribute type 3 has an invalid length.
[  846.005218][  T411] netlink: 'syz.2.7629': attribute type 3 has an invalid length.
[  846.192990][  T424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.283829][  T424] tipc: Disabling bearer <eth:syzkaller0>
[  846.441856][  T440] __nla_validate_parse: 12 callbacks suppressed
[  846.441878][  T440] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7639'.
[  846.489275][  T443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7640'.
[  846.498333][  T440] netlink: 'syz.4.7639': attribute type 3 has an invalid length.
[  846.498360][  T440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7639'.
[  846.524151][  T442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7640'.
[  846.860641][  T456] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.7644'.
[  846.883768][  T456] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.7644'.
[  846.979251][  T465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7649'.
[  847.154197][  T490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7653'.
[  847.386942][  T503] netlink: 'syz.1.7657': attribute type 10 has an invalid length.
[  847.393309][  T502] netlink: 'syz.1.7657': attribute type 10 has an invalid length.
[  847.410539][  T505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7656'.
[  847.422822][  T505] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7656'.
[  847.609208][  T494] ksmbd: Unknown IPC event: 3, ignore.
[  848.289847][  T538] netlink: 'syz.3.7665': attribute type 5 has an invalid length.
[  848.350728][  T536] netlink: 'syz.2.7667': attribute type 5 has an invalid length.
[  848.350727][  T539] netlink: 'syz.2.7667': attribute type 5 has an invalid length.
[  848.370772][  T536] geneve3: entered promiscuous mode
[  848.390962][  T536] geneve3: entered allmulticast mode
[  848.412692][T16977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  848.426914][T16977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  848.464925][T16977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  848.475701][T16984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  848.483952][T16977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  848.514082][  T534] lo speed is unknown, defaulting to 1000
[  848.897191][  T554] netlink: 'syz.2.7674': attribute type 1 has an invalid length.
[  849.006864][  T561] netlink: 'syz.1.7676': attribute type 4 has an invalid length.
[  849.212073][  T554] 8021q: adding VLAN 0 to HW filter on device bond3
[  849.292066][  T534] vxcan1 speed is unknown, defaulting to 1000
[  850.183548][  T590] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  850.216496][  T590] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  850.333494][  T603] openvswitch: netlink: Flow key attr not present in new flow.
[  851.051751][  T616] validate_nla: 1 callbacks suppressed
[  851.051774][  T616] netlink: 'syz.3.7693': attribute type 1 has an invalid length.
[  851.503146][  T644] __nla_validate_parse: 16 callbacks suppressed
[  851.503169][  T644] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7701'.
[  851.875284][  T662] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7707'.
[  851.884590][  T662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  851.906604][  T664] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7707'.
[  851.918804][  T664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  852.682241][  T701] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7719'.
[  852.895161][  T696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.916911][  T696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.028512][  T705] team0: Device vti0 is up. Set it down before adding it as a team port
[  853.171689][  T696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  853.182787][  T696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.209728][  T716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7725'.
[  853.216628][  T705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7720'.
[  853.345080][  T719] Bluetooth: MGMT ver 1.23
[  853.507018][  T696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  853.525908][  T696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.601088][  T725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7729'.
[  853.703671][  T696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  853.748426][  T696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.012491][ T3493] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  854.052473][ T3493] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.149440][ T3493] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  854.183652][ T3493] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.253580][ T3473] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  854.267862][ T3473] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.371274][ T3524] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  854.390740][ T3524] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  854.581076][  T755] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7737'.
[  854.808665][  T767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7741'.
[  855.023693][  T779] netlink: 'syz.1.7745': attribute type 4 has an invalid length.
[  855.024830][  T787] netlink: 'syz.4.7747': attribute type 13 has an invalid length.
[  855.061606][  T787] veth0_macvtap: left promiscuous mode
[  855.099111][  T787] macvtap0: entered allmulticast mode
[  855.166282][  T787] macvtap0: refused to change device tx_queue_len
[  855.286136][  T802] netlink: 'syz.3.7751': attribute type 7 has an invalid length.
[  855.322984][  T802] : entered promiscuous mode
[  855.408362][  T810] netlink: 'syz.4.7752': attribute type 1 has an invalid length.
[  855.682973][  T812] bond1 (unregistering): Released all slaves
[  855.716312][  T819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7754'.
[  855.737813][  T813] ip6tnl1: entered promiscuous mode
[  855.769746][  T813] ip6tnl1: entered allmulticast mode
[  856.356109][  T844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.528763][  T840] tipc: Disabling bearer <eth:syzkaller0>
[  856.751634][  T877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.779236][  T876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  856.799558][  T877] syzkaller0: entered promiscuous mode
[  856.824685][  T877] syzkaller0: entered allmulticast mode
[  856.886035][    C1] syzkaller0: tun_net_xmit 90
[  856.923540][  T877] tipc: Resetting bearer <eth:syzkaller0>
[  856.994957][  T877] tipc: Disabling bearer <eth:syzkaller0>
[  857.916370][  T948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7783'.
[  858.315215][  T966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7787'.
[  858.364502][  T966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7787'.
[  858.846564][  T985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7794'.
[  859.031794][  T992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7797'.
[  859.632640][ T1022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7806'.
[  859.718738][ T1022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7806'.
[  859.776344][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7806'.
[  859.922099][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7810'.
[  860.083563][ T1035] veth3: entered promiscuous mode
[  860.507692][ T1071] mac80211_hwsim hwsim64 wlan1: left allmulticast mode
[  860.536514][ T1071] netlink: 'syz.2.7817': attribute type 10 has an invalid length.
[  860.584675][ T1079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7818'.
[  860.668488][ T1071] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  860.896589][ T1096] netlink: 'syz.4.7824': attribute type 1 has an invalid length.
[  860.956862][ T1096] bond1: entered promiscuous mode
[  860.962411][ T1096] 8021q: adding VLAN 0 to HW filter on device bond1
[  860.995693][   T30] audit: type=1800 audit(1754244009.259:11): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7827" name="memory.events" dev="tmpfs" ino=1909 res=0 errno=0
[  861.003072][ T1102] netlink: 'syz.0.7827': attribute type 1 has an invalid length.
[  861.019282][   T30] audit: type=1804 audit(1754244009.259:12): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7827" name="/newroot/372/memory.events" dev="tmpfs" ino=1909 res=1 errno=0
[  861.062230][ T1097] 8021q: adding VLAN 0 to HW filter on device bond1
[  861.084851][ T1097] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  861.099806][ T1097] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  861.127202][ T1097] bond1: (slave wireguard0): making interface the new active one
[  861.147472][ T1097] wireguard0: entered promiscuous mode
[  861.168009][ T1097] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  861.178551][ T1115] netlink: 'syz.0.7827': attribute type 23 has an invalid length.
[  861.188894][ T1104] netlink: 'syz.3.7826': attribute type 1 has an invalid length.
[  861.318956][ T1108] bond4 (unregistering): Released all slaves
[  861.406737][ T1102] bond4: entered promiscuous mode
[  861.447231][ T1102] 8021q: adding VLAN 0 to HW filter on device bond4
[  861.468393][ T1132] netlink: 'syz.3.7833': attribute type 21 has an invalid length.
[  861.476944][ T1132] IPv6: NLM_F_CREATE should be specified when creating new route
[  861.933250][ T1150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  862.018069][ T1148] tipc: Disabling bearer <eth:syzkaller0>
[  862.376440][ T1163] openvswitch: netlink: IPv4 frag type 108 is out of range max 2
[  862.912562][ T1177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  862.972780][ T1181] netlink: 'syz.4.7852': attribute type 1 has an invalid length.
[  863.044140][ T1181] __nla_validate_parse: 7 callbacks suppressed
[  863.044163][ T1181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7852'.
[  864.376456][ T1242] macvlan3: entered promiscuous mode
[  864.406044][ T1242] macvlan3: entered allmulticast mode
[  864.412150][ T1242] syz_tun: entered allmulticast mode
[  864.442730][ T1242] syz_tun: entered promiscuous mode
[  864.494194][ T1242] team0: Port device macvlan3 added
[  864.810803][ T1264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7877'.
[  865.448357][ T1307] netlink: 'syz.4.7889': attribute type 33 has an invalid length.
[  865.457027][ T1307] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  865.573194][ T1309] smc: net device bond0 applied user defined pnetid SYZ0
[  865.592527][ T1309] smc: net device bond0 erased user defined pnetid SYZ0
[  865.660060][ T1313] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7891'.
[  865.774047][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 690 seconds
[  865.785200][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 690 seconds
[  865.796568][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 690 seconds
[  865.810558][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 690 seconds
[  865.950905][ T1320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7894'.
[  865.987701][ T1320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7894'.
[  866.418914][ T1337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7898'.
[  866.446039][ T1339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  866.467199][ T1337] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  866.487079][ T1342] netlink: 'syz.1.7900': attribute type 1 has an invalid length.
[  866.641007][ T1342] bond10 (unregistering): Released all slaves
[  866.722151][ T1348] ip6tnl3: entered promiscuous mode
[  866.729585][ T1348] ip6tnl3: entered allmulticast mode
[  866.940474][ T1372] netlink: 'syz.1.7907': attribute type 1 has an invalid length.
[  866.978783][ T1372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7907'.
[  866.991048][ T1372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7907'.
[  867.003518][ T1372] 8021q: adding VLAN 0 to HW filter on device bond10
[  867.589018][ T1391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7912'.
[  867.628871][ T1391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7912'.
[  867.832879][ T1408] netlink: 'syz.4.7917': attribute type 1 has an invalid length.
[  867.860067][ T1408] netlink: 'syz.4.7917': attribute type 2 has an invalid length.
[  867.915895][ T1399] macvtap1: entered promiscuous mode
[  867.921420][ T1399] vlan0: entered promiscuous mode
[  867.927665][ T1399] macvtap1: entered allmulticast mode
[  867.933223][ T1399] vlan0: entered allmulticast mode
[  867.938802][ T1399] veth0_vlan: entered allmulticast mode
[  868.212577][ T1419] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  868.222368][ T1418] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  868.259878][ T1423] __nla_validate_parse: 1 callbacks suppressed
[  868.259899][ T1423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7922'.
[  868.308527][ T1423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7922'.
[  868.509101][ T1429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7926'.
[  868.742304][ T1443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7929'.
[  868.782190][ T1443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7929'.
[  868.846923][ T1443] geneve2: entered promiscuous mode
[  868.859160][ T1443] geneve2: entered allmulticast mode
[  869.196695][ T1469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7934'.
[  869.242772][ T1461] netlink: 632 bytes leftover after parsing attributes in process `syz.4.7934'.
[  869.788826][ T1483] tunl0: entered promiscuous mode
[  869.798415][ T1483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7939'.
[  869.878436][ T1501] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7943'.
[  870.106031][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7945'.
[  870.127517][ T1516] netlink: 'syz.2.7948': attribute type 10 has an invalid length.
[  870.752334][ T1546] sctp: [Deprecated]: syz.2.7955 (pid 1546) Use of struct sctp_assoc_value in delayed_ack socket option.
[  870.752334][ T1546] Use struct sctp_sack_info instead
[  870.786927][ T1523] syzkaller0: entered promiscuous mode
[  870.792597][ T1523] syzkaller0: entered allmulticast mode
[  870.933565][ T1559] tipc: Failed to remove unknown binding: 66,1,1/1:1724313270/1724313272
[  871.639218][ T1567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  872.270901][ T1618] bond0: Error: Cannot enslave bond to itself.
[  872.370355][ T1624] netlink: 'syz.4.7975': attribute type 10 has an invalid length.
[  872.438078][ T1630] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  872.936581][ T1653] bond0: (slave wlan1): Releasing backup interface
[  873.609565][ T1687] netlink: 'syz.0.7997': attribute type 11 has an invalid length.
[  873.627542][ T1687] netlink: 'syz.0.7997': attribute type 11 has an invalid length.
[  873.648367][ T1687] __nla_validate_parse: 9 callbacks suppressed
[  873.648391][ T1687] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7997'.
[  873.743385][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7998'.
[  873.897128][ T1693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8001'.
[  874.161623][ T1708] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  874.178368][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8006'.
[  874.215314][ T1707] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8006'.
[  874.483540][ T5857] Bluetooth: hci0: command tx timeout
[  874.515626][ T1723] netlink: 'syz.3.8013': attribute type 1 has an invalid length.
[  874.524298][ T1723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8013'.
[  874.735610][ T1738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8014'.
[  874.800946][ T1738] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8014'.
[  874.870163][ T1738] netlink: 21 bytes leftover after parsing attributes in process `syz.0.8014'.
[  875.142553][ T1751] netlink: 160 bytes leftover after parsing attributes in process `syz.3.8019'.
[  876.020228][ T1801] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  876.034222][ T1801] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  876.192104][ T1805] netlink: 'syz.1.8033': attribute type 1 has an invalid length.
[  876.249387][ T1806] netlink: 'syz.4.8034': attribute type 10 has an invalid length.
[  876.255795][ T1805] bond11: entered promiscuous mode
[  876.263206][ T1805] 8021q: adding VLAN 0 to HW filter on device bond11
[  876.303628][ T1814] netlink: 'syz.4.8034': attribute type 10 has an invalid length.
[  876.380585][ T1810] 8021q: adding VLAN 0 to HW filter on device bond11
[  876.417529][ T1810] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  876.440083][ T1810] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  876.470909][ T1824] netlink: 'syz.3.8039': attribute type 1 has an invalid length.
[  876.473537][ T1810] bond11: (slave wireguard0): making interface the new active one
[  876.489442][ T1824] netlink: 'syz.3.8039': attribute type 2 has an invalid length.
[  876.500670][ T1810] wireguard0: entered promiscuous mode
[  876.520396][ T1810] bond11: (slave wireguard0): Enslaving as an active interface with an up link
[  876.537442][ T1825] netlink: 'syz.3.8039': attribute type 1 has an invalid length.
[  876.557473][ T1825] netlink: 'syz.3.8039': attribute type 2 has an invalid length.
[  876.569174][ T1806] team0: Port device dummy0 added
[  876.608776][ T1814] team0: Port device dummy0 removed
[  876.632731][ T1814] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  877.069717][ T1853] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  877.602083][ T1882] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  878.343436][ T1928] netlink: 'syz.4.8070': attribute type 4 has an invalid length.
[  878.372974][ T1928] netlink: 'syz.4.8070': attribute type 4 has an invalid length.
[  878.480615][ T1936] netlink: 'syz.3.8073': attribute type 29 has an invalid length.
[  878.520384][ T1936] netlink: 'syz.3.8073': attribute type 29 has an invalid length.
[  878.742443][ T1949] lo speed is unknown, defaulting to 1000
[  878.829486][ T1953] bridge0: port 1(batadv1) entered blocking state
[  878.845233][ T1953] bridge0: port 1(batadv1) entered disabled state
[  878.861645][ T1958] netlink: 'syz.1.8081': attribute type 10 has an invalid length.
[  878.897004][ T1953] batadv1: entered allmulticast mode
[  878.932669][ T1953] batadv1: entered promiscuous mode
[  879.171657][ T1971] __nla_validate_parse: 11 callbacks suppressed
[  879.171679][ T1971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8086'.
[  879.219628][ T1977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8087'.
[  879.244974][ T1971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8086'.
[  879.326143][T16985] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  879.336356][T16985] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  879.617803][ T1991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8090'.
[  879.804456][ T1994] netlink: 'syz.1.8091': attribute type 21 has an invalid length.
[  879.831011][ T1994] IPv6: NLM_F_CREATE should be specified when creating new route
[  879.860345][ T1994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  879.867697][ T1994] IPv6: NLM_F_CREATE should be set when creating new route
[  879.875066][ T1994] IPv6: NLM_F_CREATE should be set when creating new route
[  879.882312][ T1994] IPv6: NLM_F_CREATE should be set when creating new route
[  879.898123][ T1997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8092'.
[  880.129657][ T2005] netlink: 'syz.1.8095': attribute type 1 has an invalid length.
[  880.201917][ T2005] bond12: entered promiscuous mode
[  880.210305][ T2005] 8021q: adding VLAN 0 to HW filter on device bond12
[  880.308716][ T2009] 8021q: adding VLAN 0 to HW filter on device bond13
[  880.345071][ T2009] bond12: (slave bond13): making interface the new active one
[  880.390616][ T2009] bond13: entered promiscuous mode
[  880.417748][ T2009] bond12: (slave bond13): Enslaving as an active interface with an up link
[  880.529417][ T2015] erspan0: entered promiscuous mode
[  880.564249][ T2015] vlan3: entered promiscuous mode
[  880.839434][ T2025] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 1, id = 0
[  881.044541][ T2033] netlink: 'syz.1.8104': attribute type 58 has an invalid length.
[  881.083055][ T2033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8104'.
[  881.119047][T16978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  881.265875][ T2038] IPVS: persistence engine module ip_vs_pe_… not found
[  881.397550][ T2050] netlink: 'syz.1.8108': attribute type 10 has an invalid length.
[  881.457531][ T2052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8109'.
[  881.492725][ T2052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8109'.
[  881.916118][ T2071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8116'.
[  882.106516][ T2076] vlan0 (unregistering): left allmulticast mode
[  882.113199][ T2076] veth0_vlan (unregistering): left allmulticast mode
[  882.120187][ T2076] vlan0 (unregistering): left promiscuous mode
[  883.030254][ T2101] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8121'.
[  883.298668][ T2114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  883.312648][ T2114] syzkaller0: entered promiscuous mode
[  883.330339][ T2114] syzkaller0: entered allmulticast mode
[  883.367563][ T2116] gretap4: entered promiscuous mode
[  883.401665][ T2114] tipc: Resetting bearer <eth:syzkaller0>
[  883.474522][ T2113] tipc: Resetting bearer <eth:syzkaller0>
[  883.560718][ T2113] tipc: Disabling bearer <eth:syzkaller0>
[  884.049283][ T2143] chnl_net:caif_netlink_parms(): no params data found
[  884.312573][ T2157] __nla_validate_parse: 5 callbacks suppressed
[  884.312595][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'.
[  884.338700][ T2157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8143'.
[  884.372943][ T2157] netlink: 'syz.3.8143': attribute type 7 has an invalid length.
[  884.393543][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8143'.
[  884.409941][ T2157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8143'.
[  884.428843][ T2157] netlink: 'syz.3.8143': attribute type 7 has an invalid length.
[  884.462824][ T2165] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8144'.
[  884.476221][ T2165] 8021q: VLANs not supported on ip_vti0
[  884.760891][ T2186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8152'.
[  884.777919][ T2186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8152'.
[  884.802885][ T2189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8152'.
[  884.836204][ T2189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8152'.
[  884.915162][ T2192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8151'.
[  885.405064][ T2213] syzkaller0: entered allmulticast mode
[  887.446756][ T2285] netlink: 'syz.0.8182': attribute type 1 has an invalid length.
[  887.474463][ T2286] netlink: 'syz.0.8182': attribute type 1 has an invalid length.
[  887.649659][ T2291] netlink: 'syz.0.8185': attribute type 1 has an invalid length.
[  887.650020][ T2292] sctp: [Deprecated]: syz.2.8184 (pid 2292) Use of int in maxseg socket option.
[  887.650020][ T2292] Use struct sctp_assoc_value instead
[  888.457826][ T2326] tipc: Can't bind to reserved service type 0
[  888.872550][ T2353] netlink: 'syz.0.8204': attribute type 3 has an invalid length.
[  889.062044][ T2357] netlink: 'syz.1.8206': attribute type 5 has an invalid length.
[  889.150252][ T2368] netlink: 'syz.4.8210': attribute type 1 has an invalid length.
[  889.155902][ T2366] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  889.270445][ T2368] bond2: entered promiscuous mode
[  889.313511][ T2368] 8021q: adding VLAN 0 to HW filter on device bond2
[  889.364776][ T2384] __nla_validate_parse: 20 callbacks suppressed
[  889.364797][ T2384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8211'.
[  889.425449][ T2373] 8021q: adding VLAN 0 to HW filter on device bond2
[  889.431735][ T2384] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8211'.
[  889.449532][ T2373] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[  889.461212][ T2373] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  889.487530][ T2373] bond2: (slave wireguard1): making interface the new active one
[  889.495633][ T2373] wireguard1: entered promiscuous mode
[  889.503002][ T2373] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[  889.513638][ T2372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8209'.
[  889.549655][ T2383] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  889.643812][ T2399] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8212'.
[  890.159633][ T2425] netlink: 'syz.4.8221': attribute type 1 has an invalid length.
[  890.247216][ T2424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8219'.
[  890.283613][ T2424] netlink: 'syz.0.8219': attribute type 10 has an invalid length.
[  890.286816][ T2425] 8021q: adding VLAN 0 to HW filter on device bond3
[  890.295222][ T2435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8221'.
[  890.311789][ T2424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8219'.
[  890.336709][ T2424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8219'.
[  890.373677][ T2425] macvlan4: entered promiscuous mode
[  890.379999][ T2425] macvlan4: entered allmulticast mode
[  890.387129][ T2425] bond3: entered promiscuous mode
[  890.393486][ T2425] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  890.501793][ T2425] bond3: left promiscuous mode
[  890.699485][ T2454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8228'.
[  890.744829][ T2454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8228'.
[  890.902780][ T2464] netlink: 'syz.0.8230': attribute type 5 has an invalid length.
[  890.925848][ T2468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.030252][ T3524] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  893.240115][ T2585] netlink: 'syz.4.8258': attribute type 1 has an invalid length.
[  893.634614][ T2612] bridge: RTM_NEWNEIGH with invalid ether address
[  893.789468][ T2621] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  893.946308][ T2633] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  894.018931][ T2621] lo speed is unknown, defaulting to 1000
[  894.836815][ T2685] __nla_validate_parse: 31 callbacks suppressed
[  894.836847][ T2685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8285'.
[  895.347658][ T2621] vxcan1 speed is unknown, defaulting to 1000
[  895.516403][ T2713] netlink: 576 bytes leftover after parsing attributes in process `syz.2.8291'.
[  895.615012][ T2723] netlink: 'syz.0.8293': attribute type 29 has an invalid length.
[  895.819343][ T2733] netlink: 'syz.4.8297': attribute type 1 has an invalid length.
[  895.835548][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 720 seconds
[  895.847425][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 720 seconds
[  895.858608][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 720 seconds
[  895.864362][ T2733] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8297'.
[  895.870219][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 720 seconds
[  895.987821][ T2733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8297'.
[  896.153835][ T2744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  896.288321][ T2751] netlink: 816 bytes leftover after parsing attributes in process `syz.4.8301'.
[  896.337379][ T2751] netlink: 'syz.4.8301': attribute type 1 has an invalid length.
[  896.342115][ T2738] syzkaller0: entered promiscuous mode
[  896.358050][ T2751] netlink: 'syz.4.8301': attribute type 11 has an invalid length.
[  896.363293][ T2738] syzkaller0: entered allmulticast mode
[  896.372961][ T2751] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8301'.
[  896.380047][ T2738] tipc: Resetting bearer <eth:syzkaller0>
[  896.407779][ T2758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8302'.
[  896.417455][ T2752] netlink: 'syz.2.8298': attribute type 1 has an invalid length.
[  896.618342][   T49] tipc: Resetting bearer <eth:syzkaller0>
[  896.789749][ T2737] tipc: Resetting bearer <eth:syzkaller0>
[  897.224734][T31000] tipc: Node number set to 855911643
[  899.181112][ T2737] tipc: Disabling bearer <eth:syzkaller0>
[  899.190950][ T2770] netlink: 'syz.0.8305': attribute type 5 has an invalid length.
[  899.486032][ T2785] syzkaller0: entered promiscuous mode
[  899.512221][ T2785] syzkaller0: entered allmulticast mode
[  899.797595][ T2800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8313'.
[  899.825509][ T2800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8313'.
[  899.973536][ T2802] tap0: tun_chr_ioctl cmd 1074025677
[  899.981657][ T2802] tap0: linktype set to 65534
[  900.018914][ T2805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  900.029695][ T2802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8314'.
[  900.040730][ T2805] syzkaller0: entered promiscuous mode
[  900.050133][ T2805] syzkaller0: entered allmulticast mode
[  900.085904][ T2802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8314'.
[  900.110291][ T2818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8318'.
[  900.130541][ T2805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  900.203664][ T2805] tipc: Resetting bearer <eth:syzkaller0>
[  900.242301][ T2804] tipc: Resetting bearer <eth:syzkaller0>
[  900.336148][ T2804] tipc: Disabling bearer <eth:syzkaller0>
[  900.397623][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8323'.
[  900.434133][ T2833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8323'.
[  900.454519][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8323'.
[  900.463796][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8323'.
[  900.473379][ T2832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8323'.
[  900.549086][ T2841] ip6gre1: entered allmulticast mode
[  900.589651][ T2851] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8326'.
[  900.601176][ T2851] hsr_slave_0: left promiscuous mode
[  900.611188][ T2851] hsr_slave_1: left promiscuous mode
[  900.712243][ T2858] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8325'.
[  901.063183][ T2889] pim6reg: entered allmulticast mode
[  901.069799][ T2889] pim6reg: left allmulticast mode
[  901.130720][ T2890] pim6reg: entered allmulticast mode
[  901.813422][ T2928] team0: Device ip6gre2 is of different type
[  901.906647][ T2931] bond0: entered allmulticast mode
[  901.955608][ T2931] Bluetooth: MGMT ver 1.23
[  902.249229][ T2945] pim6reg1: entered allmulticast mode
[  902.461267][ T2966] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  902.509688][ T2964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  902.521011][ T2966] syzkaller0: entered promiscuous mode
[  902.526659][ T2966] syzkaller0: entered allmulticast mode
[  902.613467][ T2964] tipc: Resetting bearer <eth:syzkaller0>
[  902.680638][ T2964] tipc: Disabling bearer <eth:syzkaller0>
[  902.723275][ T2972] vlan2: entered allmulticast mode
[  902.738624][ T2972] bond0: entered allmulticast mode
[  902.752286][ T2972] bond_slave_0: entered allmulticast mode
[  902.765188][ T2972] bond_slave_1: entered allmulticast mode
[  902.777681][ T2972] bridge_slave_1: entered allmulticast mode
[  903.510973][ T3015] netlink: 'syz.4.8366': attribute type 14 has an invalid length.
[  903.633151][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.642499][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.650750][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.662166][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.698341][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.726940][ T3031] netlink: 'syz.0.8371': attribute type 3 has an invalid length.
[  903.809412][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  903.825034][ T3031] netlink: 'syz.0.8371': attribute type 3 has an invalid length.
[  903.833279][ T3029] netlink: 'syz.4.8370': attribute type 6 has an invalid length.
[  904.072425][ T3049] gtp0: entered promiscuous mode
[  904.101380][ T3049] gtp0: entered allmulticast mode
[  904.131245][ T3052] gtp1: entered promiscuous mode
[  904.142938][ T3052] gtp1: entered allmulticast mode
[  904.189170][ T3046] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  904.198462][ T3046] CPU: 1 UID: 0 PID: 3046 Comm: syz.2.8376 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  904.198494][ T3046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  904.198506][ T3046] Call Trace:
[  904.198515][ T3046]  <TASK>
[  904.198525][ T3046]  dump_stack_lvl+0x189/0x250
[  904.198558][ T3046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.198581][ T3046]  ? __pfx__printk+0x10/0x10
[  904.198607][ T3046]  ? kernfs_path_from_node+0x2c/0x260
[  904.198632][ T3046]  ? kernfs_path_from_node+0x2c/0x260
[  904.198654][ T3046]  ? kernfs_path_from_node+0x2c/0x260
[  904.198680][ T3046]  ? kernfs_path_from_node+0x22c/0x260
[  904.198701][ T3046]  ? kernfs_path_from_node+0x2c/0x260
[  904.198738][ T3046]  sysfs_warn_dup+0x8e/0xa0
[  904.198762][ T3046]  sysfs_do_create_link_sd+0xc0/0x110
[  904.198790][ T3046]  device_add_class_symlinks+0x1cf/0x240
[  904.198822][ T3046]  device_add+0x475/0xb50
[  904.198852][ T3046]  wiphy_register+0x1ba6/0x28d0
[  904.198906][ T3046]  ? __pfx_wiphy_register+0x10/0x10
[  904.198933][ T3046]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  904.198966][ T3046]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  904.198996][ T3046]  ieee80211_register_hw+0x3425/0x4080
[  904.199055][ T3046]  ? ieee80211_register_hw+0x1411/0x4080
[  904.199090][ T3046]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  904.199119][ T3046]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  904.199157][ T3046]  ? __hrtimer_setup+0x187/0x210
[  904.199186][ T3046]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  904.199221][ T3046]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  904.199292][ T3046]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  904.199317][ T3046]  ? trace_kmalloc+0x1f/0xd0
[  904.199343][ T3046]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  904.199373][ T3046]  ? kstrndup+0xbf/0x160
[  904.199410][ T3046]  hwsim_new_radio_nl+0xea4/0x1b10
[  904.199442][ T3046]  ? __pfx___nla_validate_parse+0x10/0x10
[  904.199486][ T3046]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.199533][ T3046]  ? __nla_parse+0x40/0x60
[  904.199561][ T3046]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  904.199598][ T3046]  genl_family_rcv_msg_doit+0x215/0x300
[  904.199640][ T3046]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  904.199682][ T3046]  ? bpf_lsm_capable+0x9/0x20
[  904.199735][ T3046]  ? security_capable+0x7e/0x2e0
[  904.199772][ T3046]  genl_rcv_msg+0x60e/0x790
[  904.199807][ T3046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.199830][ T3046]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.199879][ T3046]  netlink_rcv_skb+0x205/0x470
[  904.199905][ T3046]  ? __lock_acquire+0xab9/0xd20
[  904.199934][ T3046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.199960][ T3046]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  904.200017][ T3046]  ? down_read+0x1ad/0x2e0
[  904.200041][ T3046]  genl_rcv+0x28/0x40
[  904.200062][ T3046]  netlink_unicast+0x82c/0x9e0
[  904.200102][ T3046]  ? __pfx_netlink_unicast+0x10/0x10
[  904.200132][ T3046]  ? netlink_sendmsg+0x642/0xb30
[  904.200159][ T3046]  ? skb_put+0x11b/0x210
[  904.200185][ T3046]  netlink_sendmsg+0x805/0xb30
[  904.200230][ T3046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.200265][ T3046]  ? aa_sock_msg_perm+0x94/0x160
[  904.200295][ T3046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  904.200317][ T3046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.200349][ T3046]  __sock_sendmsg+0x21c/0x270
[  904.200381][ T3046]  ____sys_sendmsg+0x505/0x830
[  904.200413][ T3046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  904.200448][ T3046]  ? import_iovec+0x74/0xa0
[  904.200483][ T3046]  ___sys_sendmsg+0x21f/0x2a0
[  904.200509][ T3046]  ? __pfx____sys_sendmsg+0x10/0x10
[  904.200585][ T3046]  ? __fget_files+0x2a/0x420
[  904.200605][ T3046]  ? __fget_files+0x3a0/0x420
[  904.200648][ T3046]  __x64_sys_sendmsg+0x19b/0x260
[  904.200674][ T3046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  904.200719][ T3046]  ? rcu_is_watching+0x15/0xb0
[  904.200758][ T3046]  ? do_syscall_64+0xbe/0x3b0
[  904.200794][ T3046]  do_syscall_64+0xfa/0x3b0
[  904.200820][ T3046]  ? lockdep_hardirqs_on+0x9c/0x150
[  904.200848][ T3046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.200869][ T3046]  ? clear_bhb_loop+0x60/0xb0
[  904.200896][ T3046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.200916][ T3046] RIP: 0033:0x7f4baf38eb69
[  904.200936][ T3046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.200954][ T3046] RSP: 002b:00007f4bb01ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.200977][ T3046] RAX: ffffffffffffffda RBX: 00007f4baf5b5fa0 RCX: 00007f4baf38eb69
[  904.200993][ T3046] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  904.201006][ T3046] RBP: 00007f4baf411df1 R08: 0000000000000000 R09: 0000000000000000
[  904.201020][ T3046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.201033][ T3046] R13: 0000000000000000 R14: 00007f4baf5b5fa0 R15: 00007fff8bf4dcc8
[  904.201072][ T3046]  </TASK>
[  905.085377][ T3083] __nla_validate_parse: 6 callbacks suppressed
[  905.085399][ T3083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8386'.
[  905.236610][ T3096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8391'.
[  905.298058][ T3096] 8021q: adding VLAN 0 to HW filter on device bond10
[  905.457504][ T3106] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8394'.
[  905.640678][ T3096] vlan3: entered allmulticast mode
[  905.646159][ T3096] bond10: entered allmulticast mode
[  905.858154][ T3113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  905.990676][ T3113] tipc: Disabling bearer <eth:syzkaller0>
[  906.018189][ T3126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8401'.
[  906.080996][ T3126] sctp: [Deprecated]: syz.3.8401 (pid 3126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  906.080996][ T3126] Use struct sctp_sack_info instead
[  906.376078][ T3135] IPVS: persistence engine module ip_vs_pe_À
 not found
[  906.470014][ T3142] bond11: entered promiscuous mode
[  906.504346][ T3142] bond11: entered allmulticast mode
[  906.525308][ T3142] 8021q: adding VLAN 0 to HW filter on device bond11
[  906.744522][ T3167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8412'.
[  907.035492][ T3194] sctp: [Deprecated]: syz.1.8420 (pid 3194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  907.035492][ T3194] Use struct sctp_sack_info instead
[  907.053241][ T3195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8416'.
[  907.865048][ T3231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8428'.
[  907.894066][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8428'.
[  908.446587][ T3247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8432'.
[  908.595317][ T3258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  908.614475][ T3259] syzkaller0: entered promiscuous mode
[  908.620733][ T3262] tipc: Failed to remove unknown binding: 66,1,1/0:4245300146/4245300148
[  908.627502][ T3259] syzkaller0: entered allmulticast mode
[  908.649230][ T3262] tipc: Failed to remove unknown binding: 66,1,1/0:4245300146/4245300148
[  908.696952][ T3266] validate_nla: 67 callbacks suppressed
[  908.696975][ T3266] netlink: 'syz.2.8438': attribute type 8 has an invalid length.
[  908.715680][ T5857] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  908.842542][ T3270] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  908.844007][ T3268] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8439'.
[  908.949155][ T3258] tipc: Resetting bearer <eth:syzkaller0>
[  909.015877][ T3258] tipc: Disabling bearer <eth:syzkaller0>
[  909.606312][ T3320] ip6gre2: entered allmulticast mode
[  910.149867][ T3345] __nla_validate_parse: 9 callbacks suppressed
[  910.149890][ T3345] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8461'.
[  910.186917][ T3345] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8461'.
[  910.365634][ T3356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8464'.
[  910.441974][ T3356] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  910.665944][ T3367] sctp: [Deprecated]: syz.0.8469 (pid 3367) Use of struct sctp_assoc_value in delayed_ack socket option.
[  910.665944][ T3367] Use struct sctp_sack_info instead
[  910.739858][ T3370] tipc: New replicast peer: 255.255.255.255
[  910.746147][ T3368] sctp: [Deprecated]: syz.0.8469 (pid 3368) Use of struct sctp_assoc_value in delayed_ack socket option.
[  910.746147][ T3368] Use struct sctp_sack_info instead
[  910.771159][ T3370] tipc: Enabled bearer <udp:syz2>, priority 10
[  910.788713][ T3370] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  910.823782][ T3374] tipc: Failed to remove unknown binding: 66,1,1/0:420947858/420947881
[  910.847537][ T3377] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8472'.
[  910.929156][ T3377] hsr_slave_0: left promiscuous mode
[  911.208008][ T3405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8479'.
[  911.286188][ T3412] netlink: 'syz.0.8480': attribute type 11 has an invalid length.
[  911.444849][ T3416] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8481'.
[  911.558379][ T3422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  911.614152][ T3422] syzkaller0: entered promiscuous mode
[  911.619861][ T3422] syzkaller0: entered allmulticast mode
[  911.650600][ T3428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8485'.
[  911.720219][ T3422] tipc: Resetting bearer <eth:syzkaller0>
[  911.819008][ T3420] tipc: Resetting bearer <eth:syzkaller0>
[  911.982708][ T3420] tipc: Disabling bearer <eth:syzkaller0>
[  913.167296][ T3507] netlink: 'syz.1.8512': attribute type 13 has an invalid length.
[  913.197485][ T3507] netlink: 'syz.1.8512': attribute type 5 has an invalid length.
[  913.318807][ T3514] Unsupported ieee802154 address type: 0
[  913.397924][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8516'.
[  913.837232][ T3539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8524'.
[  913.855063][ T3539] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8524'.
[  913.878759][ T3546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  913.887038][ T3546] syzkaller0: entered promiscuous mode
[  913.892929][ T3546] syzkaller0: entered allmulticast mode
[  913.937531][ T3539] openvswitch: netlink: IP tunnel dst address not specified
[  913.989690][ T3546] tipc: Resetting bearer <eth:syzkaller0>
[  914.001698][ T3548] ipvlan0: entered promiscuous mode
[  914.017500][ T3548] ipvlan0: entered allmulticast mode
[  914.034922][ T3545] tipc: Resetting bearer <eth:syzkaller0>
[  914.078703][ T3545] tipc: Disabling bearer <eth:syzkaller0>
[  914.397471][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  917.102310][ T3587] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  917.201828][ T3595] __nla_validate_parse: 3 callbacks suppressed
[  917.201851][ T3595] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8537'.
[  917.361675][ T3600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8539'.
[  917.639743][ T3617] openvswitch: netlink: Message has 24 unknown bytes.
[  917.673443][ T3617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  917.765889][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8549'.
[  917.835116][ T3634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8550'.
[  918.059582][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8553'.
[  918.192523][ T3652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8556'.
[  918.486544][ T3667] netlink: 'syz.4.8561': attribute type 29 has an invalid length.
[  918.503027][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8561'.
[  918.513551][ T3667] netlink: 'syz.4.8561': attribute type 29 has an invalid length.
[  918.532905][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8561'.
[  919.184095][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8574'.
[  919.199144][ T3701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8574'.
[  919.330317][ T3714] netlink: 'syz.4.8577': attribute type 10 has an invalid length.
[  919.523586][ T3714] veth0_vlan: left promiscuous mode
[  919.530016][ T3720] netlink: 'syz.1.8579': attribute type 10 has an invalid length.
[  919.548992][ T3714] veth0_vlan: entered promiscuous mode
[  919.573713][ T3714] team0: Device veth0_vlan failed to register rx_handler
[  919.601836][ T3722] netlink: 'syz.1.8579': attribute type 6 has an invalid length.
[  919.606153][ T3714] netlink: 'syz.4.8577': attribute type 10 has an invalid length.
[  919.628560][ T3721] netlink: 'syz.2.8580': attribute type 1 has an invalid length.
[  919.637156][ T3721] netlink: 'syz.2.8580': attribute type 2 has an invalid length.
[  919.657437][ T3721] netlink: 'syz.2.8580': attribute type 1 has an invalid length.
[  919.660130][ T3714] veth0_vlan: left promiscuous mode
[  919.676055][ T3721] netlink: 'syz.2.8580': attribute type 2 has an invalid length.
[  919.692070][ T3714] veth0_vlan: entered promiscuous mode
[  919.727487][ T3714] team0: Device veth0_vlan failed to register rx_handler
[  919.771833][ T3714] veth0_vlan: left promiscuous mode
[  919.822913][ T3714] veth0_vlan: entered promiscuous mode
[  919.849139][ T3714] team0: Device veth0_vlan failed to register rx_handler
[  919.909202][ T3714] veth0_vlan: left promiscuous mode
[  919.937013][ T3714] veth0_vlan: entered promiscuous mode
[  919.969138][ T3714] team0: Device veth0_vlan failed to register rx_handler
[  920.057473][ T3714] veth0_vlan: left promiscuous mode
[  920.066307][ T3714] veth0_vlan: entered promiscuous mode
[  920.088490][ T3714] team0: Device veth0_vlan failed to register rx_handler
[  920.551552][ T3763] pim6reg1: entered promiscuous mode
[  920.568255][ T3763] pim6reg1: entered allmulticast mode
[  920.861045][ T3776] xt_socket: unknown flags 0xd0
[  921.356174][ T3799] siw: device registration error -23
[  921.680911][ T3823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  921.805482][T31000] vxcan1 speed is unknown, defaulting to 1000
[  922.002995][ T3844] sctp: [Deprecated]: syz.3.8609 (pid 3844) Use of int in maxseg socket option.
[  922.002995][ T3844] Use struct sctp_assoc_value instead
[  922.211488][ T3840] syzkaller1: entered promiscuous mode
[  922.219615][ T3840] syzkaller1: entered allmulticast mode
[  922.421982][ T3862] team_slave_0: entered allmulticast mode
[  922.645065][ T3869] __nla_validate_parse: 10 callbacks suppressed
[  922.645088][ T3869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8619'.
[  922.820094][ T3878] netlink: 'syz.2.8621': attribute type 11 has an invalid length.
[  922.837987][ T3878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8621'.
[  922.950924][ T3882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8623'.
[  923.000744][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'.
[  923.233437][ T3905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8630'.
[  923.539478][ T3927] lo: entered allmulticast mode
[  923.546327][ T3927] lo: left allmulticast mode
[  923.555427][ T3916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  923.578390][ T3915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  923.597504][ T3927] validate_nla: 3 callbacks suppressed
[  923.597525][ T3927] netlink: 'syz.0.8635': attribute type 2 has an invalid length.
[  923.644090][ T3927] netlink: 'syz.0.8635': attribute type 8 has an invalid length.
[  923.658828][ T3927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8635'.
[  923.757236][ T3927] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8635'.
[  923.792552][ T3933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8638'.
[  923.820348][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8637'.
[  923.830296][ T3937] netlink: 'syz.2.8637': attribute type 18 has an invalid length.
[  923.884655][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8637'.
[  923.893730][ T3937] netlink: 'syz.2.8637': attribute type 18 has an invalid length.
[  923.912400][T10644] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  924.029538][ T3946] openvswitch: netlink: Flow key attr not present in new flow.
[  924.038904][T10644] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  924.064342][T10644] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  924.079421][ T3948] netlink: 'syz.3.8641': attribute type 1 has an invalid length.
[  924.094412][T10644] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  924.112304][ T3948] netlink: 'syz.3.8641': attribute type 4 has an invalid length.
[  924.194785][ T3951] netlink: 'syz.2.8643': attribute type 1 has an invalid length.
[  924.508978][ T3951] bond0 (unregistering): Released all slaves
[  924.972681][ T3990] veth0: entered promiscuous mode
[  925.033517][ T3990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  925.040983][ T3990] IPv6: NLM_F_CREATE should be set when creating new route
[  925.048287][ T3990] IPv6: NLM_F_CREATE should be set when creating new route
[  925.068367][ T3990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  925.411746][ T4017] netlink: 'syz.3.8659': attribute type 21 has an invalid length.
[  925.458526][ T4015] veth1_to_team: entered promiscuous mode
[  925.470821][ T4015] erspan0: entered promiscuous mode
[  925.491839][ T4015] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  925.522621][ T4015] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  925.539882][ T3989] veth0: left promiscuous mode
[  925.655956][ T4024] netlink: 'syz.3.8661': attribute type 7 has an invalid length.
[  925.915365][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 750 seconds
[  925.926733][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 750 seconds
[  925.937852][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 750 seconds
[  925.949845][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 750 seconds
[  926.180715][ T4056] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  926.210204][ T4063] netlink: 'syz.1.8673': attribute type 10 has an invalid length.
[  926.417853][ T4073] mac80211_hwsim hwsim60 wlan1: entered allmulticast mode
[  926.456396][ T4073] bond0: (slave dummy0): Releasing backup interface
[  926.585570][ T4073] bond0: (slave wlan1): Releasing backup interface
[  926.622992][ T4073] bond1: (slave wireguard0): Releasing backup interface
[  926.654343][ T4073] wireguard0: left promiscuous mode
[  926.675853][ T4073] bond2: (slave wireguard1): Releasing backup interface
[  926.690671][ T4073] wireguard1: left promiscuous mode
[  926.730185][ T4075] mac80211_hwsim hwsim60 wlan1: left allmulticast mode
[  926.763551][ T4075] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.777703][ T4075] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  926.825793][ T4080] bond0: (slave wlan1): Releasing backup interface
[  926.864283][ T4085] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  927.338992][ T4076] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  927.469793][ T4123] lo speed is unknown, defaulting to 1000
[  927.756631][ T4136] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  928.032799][ T4139] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  928.071224][ T4147] pim6reg: left allmulticast mode
[  928.079619][ T4149] __nla_validate_parse: 13 callbacks suppressed
[  928.079639][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8699'.
[  928.240664][ T4123] vxcan1 speed is unknown, defaulting to 1000
[  928.364343][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8702'.
[  928.364630][ T4157] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8701'.
[  928.394496][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8702'.
[  928.432709][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8701'.
[  928.490356][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8701'.
[  928.709801][ T4176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8706'.
[  929.667322][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8716'.
[  929.714444][ T4216] nbd: nbd0 already in use
[  930.581515][ T4239] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8722'.
[  930.963233][ T4252] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  930.976195][ T4250] validate_nla: 3 callbacks suppressed
[  930.976215][ T4250] netlink: 'syz.3.8725': attribute type 1 has an invalid length.
[  931.019916][ T4250] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8725'.
[  931.863072][ T4291] lo speed is unknown, defaulting to 1000
[  931.999794][ T4306] netlink: 'syz.0.8742': attribute type 8 has an invalid length.
[  932.050495][ T4309] netlink: 'syz.4.8744': attribute type 21 has an invalid length.
[  932.073766][ T4309] netlink: 'syz.4.8744': attribute type 1 has an invalid length.
[  932.409474][ T4323] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  932.570003][ T4326] vlan2: entered promiscuous mode
[  932.630923][ T4326] bridge0: entered promiscuous mode
[  932.710740][ T4335] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  933.209742][ T4291] vxcan1 speed is unknown, defaulting to 1000
[  933.546668][ T4368] __nla_validate_parse: 4 callbacks suppressed
[  933.546689][ T4368] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8756'.
[  933.565729][ T4370] netlink: 'syz.0.8755': attribute type 5 has an invalid length.
[  933.585318][ T4370] netlink: 'syz.0.8755': attribute type 5 has an invalid length.
[  933.614875][ T4370] netlink: 'syz.0.8755': attribute type 5 has an invalid length.
[  933.658130][ T4370] netlink: 'syz.0.8755': attribute type 5 has an invalid length.
[  933.689945][ T4371] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8755'.
[  933.732755][ T4373] tipc: Failed to remove unknown binding: 66,1,1/0:1681271562/1681271564
[  933.830795][ T4376] tipc: Failed to remove unknown binding: 66,1,1/0:1681271562/1681271564
[  933.882541][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8760'.
[  933.891958][ T4376] tipc: Failed to remove unknown binding: 66,1,1/0:1681271562/1681271564
[  933.933547][ T4382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8759'.
[  933.934812][ T4381] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8760'.
[  934.304408][ T4391] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8764'.
[  934.643121][ T4397] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8765'.
[  934.652489][ T4397] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8765'.
[  934.670055][ T4397] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8765'.
[  934.680130][ T4397] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8765'.
[  934.851566][ T4401] veth0: entered promiscuous mode
[  934.877702][ T4401] veth0: left promiscuous mode
[  935.104620][ T4416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  935.158556][ T4417] netlink: 'syz.4.8772': attribute type 8 has an invalid length.
[  935.236332][ T4423] netlink: 'syz.1.8774': attribute type 1 has an invalid length.
[  935.336424][ T4423] bond16: entered promiscuous mode
[  935.344519][ T4423] 8021q: adding VLAN 0 to HW filter on device bond16
[  935.389733][ T4429] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  935.435173][T28222] Bluetooth: hci5: command 0x0406 tx timeout
[  935.503783][ T4425] 8021q: adding VLAN 0 to HW filter on device bond17
[  935.514918][ T4425] bond16: (slave bond17): making interface the new active one
[  935.522609][ T4425] bond17: entered promiscuous mode
[  935.530148][ T4425] bond16: (slave bond17): Enslaving as an active interface with an up link
[  935.617760][ T4435] "syz.2.8778" (4435) uses obsolete ecb(arc4) skcipher
[  935.892366][ T4443] veth7: entered allmulticast mode
[  936.083771][ T4460] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  936.129246][ T4464] validate_nla: 1 callbacks suppressed
[  936.129269][ T4464] netlink: 'syz.4.8787': attribute type 4 has an invalid length.
[  936.144265][ T4462] netlink: 'syz.4.8787': attribute type 4 has an invalid length.
[  936.273710][ T4464] netlink: 'syz.4.8787': attribute type 2 has an invalid length.
[  937.447744][ T4523] xt_socket: unknown flags 0xd0
[  937.571309][ T4532] openvswitch: netlink: IP tunnel TTL not specified.
[  937.743602][ T4535] netlink: 'syz.4.8805': attribute type 10 has an invalid length.
[  937.788262][ T4535] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  937.840980][ T4541] 
: renamed from bridge_slave_0
[  938.488994][ T4582] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  938.667534][ T4552] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  938.919493][ T4611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  939.103520][ T4601] bond0 (unregistering): Released all slaves
[  939.267742][ T4624] tipc: Enabled bearer <eth:team0>, priority 0
[  939.296335][ T4626] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  939.608388][ T4643] __nla_validate_parse: 12 callbacks suppressed
[  939.608411][ T4643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8830'.
[  939.735692][ T4649] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  939.767602][ T4649] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  939.779861][ T4649] gretap1: entered promiscuous mode
[  939.787453][ T4649] gretap1: entered allmulticast mode
[  939.811872][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8831'.
[  939.994947][T28222] Bluetooth: hci2: command 0x0406 tx timeout
[  940.216099][ T4676] netlink: 'syz.1.8836': attribute type 1 has an invalid length.
[  940.242744][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8837'.
[  940.333812][ T4676] 8021q: adding VLAN 0 to HW filter on device bond18
[  940.381051][ T4683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8839'.
[  940.394865][T31007] tipc: Node number set to 1006548517
[  940.858599][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8847'.
[  940.870411][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0
[  940.881787][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8848'.
[  940.901597][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8848'.
[  940.980677][ T4711] netlink: 'syz.3.8849': attribute type 1 has an invalid length.
[  941.006317][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8849'.
[  941.122371][ T4718] netlink: 'syz.3.8852': attribute type 6 has an invalid length.
[  941.132299][ T4718] netlink: 196880 bytes leftover after parsing attributes in process `syz.3.8852'.
[  941.975949][ T4739] syzkaller1: entered promiscuous mode
[  941.994999][ T4739] syzkaller1: entered allmulticast mode
[  942.253401][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  942.268503][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  942.278365][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  942.325899][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  942.334447][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  942.401340][ T4746] lo speed is unknown, defaulting to 1000
[  942.924312][ T4746] vxcan1 speed is unknown, defaulting to 1000
[  943.143219][ T4771] bond5: entered promiscuous mode
[  943.184078][ T4771] bond5: entered allmulticast mode
[  943.220437][ T4771] 8021q: adding VLAN 0 to HW filter on device bond5
[  943.450124][ T4790] netlink: 'syz.4.8874': attribute type 1 has an invalid length.
[  943.531086][ T4771] bond5 (unregistering): Released all slaves
[  943.595538][ T4779] 8021q: adding VLAN 0 to HW filter on device bond19
[  943.741175][ T4791] bond5 (unregistering): Released all slaves
[  943.795855][ T4793] ip6tnl2: entered promiscuous mode
[  943.803056][ T4793] ip6tnl2: entered allmulticast mode
[  944.189448][ T4817] net veth1_virt_wifi .: renamed from virt_wifi0
[  944.396390][ T5857] Bluetooth: hci3: command tx timeout
[  944.421638][ T4746] chnl_net:caif_netlink_parms(): no params data found
[  944.714921][ T4844] netlink: 83 bytes leftover after parsing attributes in process `syz.0.8891'.
[  944.994777][ T4746] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.029087][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.045455][ T4746] bridge_slave_0: entered allmulticast mode
[  945.075551][ T4746] bridge_slave_0: entered promiscuous mode
[  945.118543][ T4746] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.127979][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.147429][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8895'.
[  945.156755][ T4746] bridge_slave_1: entered allmulticast mode
[  945.176346][ T4866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8895'.
[  945.178509][ T4746] bridge_slave_1: entered promiscuous mode
[  945.237638][ T4866] netlink: 'syz.1.8895': attribute type 1 has an invalid length.
[  945.299354][ T4875] netlink: 'syz.1.8895': attribute type 4 has an invalid length.
[  945.431480][ T4746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  945.517371][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8900'.
[  945.530004][ T4887] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  945.552378][ T4746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  945.780834][ T4746] team0: Port device team_slave_0 added
[  945.826927][ T4746] team0: Port device team_slave_1 added
[  946.057522][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  946.071503][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  946.194009][ T4746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  946.249124][ T4746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  946.284455][ T4746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  946.329094][ T4746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  946.474239][ T5857] Bluetooth: hci3: command tx timeout
[  946.493286][ T4918] syzkaller0: entered promiscuous mode
[  946.499999][ T4918] syzkaller0: entered allmulticast mode
[  947.055112][ T3524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  948.554261][ T5857] Bluetooth: hci3: command tx timeout
[  949.562604][ T4746] hsr_slave_0: entered promiscuous mode
[  949.578794][ T4746] hsr_slave_1: entered promiscuous mode
[  949.593758][ T4746] debugfs: 'hsr0' already exists in 'hsr'
[  949.625028][ T4746] Cannot create hsr debugfs directory
[  949.784748][ T4964] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  949.796990][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8918'.
[  949.808886][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8921'.
[  949.845061][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8921'.
[  950.341855][ T4746] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.515928][ T4746] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.635406][ T5857] Bluetooth: hci3: command tx timeout
[  950.691034][ T4746] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.790965][ T4746] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  950.976582][ T5012] sctp: [Deprecated]: syz.2.8933 (pid 5012) Use of int in max_burst socket option deprecated.
[  950.976582][ T5012] Use struct sctp_assoc_value instead
[  951.004330][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8934'.
[  951.159081][ T4746] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  951.188814][ T4746] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  951.238836][ T4746] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  951.279308][ T4746] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  951.525503][ T5035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  951.565099][ T5036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8937'.
[  951.688004][ T4746] 8021q: adding VLAN 0 to HW filter on device bond0
[  951.771612][ T4746] 8021q: adding VLAN 0 to HW filter on device team0
[  951.851170][T16979] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.858440][T16979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  951.912718][T16974] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.920011][T16974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  952.066214][ T5055] netlink: 'syz.2.8942': attribute type 5 has an invalid length.
[  952.451919][ T4746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  952.522737][ T4746] veth0_vlan: entered promiscuous mode
[  952.539313][ T4746] veth1_vlan: entered promiscuous mode
[  952.601825][ T4746] veth0_macvtap: entered promiscuous mode
[  952.675172][ T4746] veth1_macvtap: entered promiscuous mode
[  952.730040][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  952.772042][ T4746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  952.803510][ T5060] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  952.860245][T16974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  952.900219][T16974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  952.940017][ T5080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  952.993273][T16974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.013297][T16974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.128400][ T5091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  953.183188][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  953.218707][ T5091] hsr0: entered promiscuous mode
[  953.240451][ T5091] hsr0: entered allmulticast mode
[  953.248914][ T5091] hsr_slave_0: entered allmulticast mode
[  953.264313][ T5091] hsr_slave_1: entered allmulticast mode
[  953.475160][ T2051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.496673][ T2051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.515619][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8956'.
[  953.687150][T16985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.727108][T16985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.987903][ T5130] team0: Device xfrm1 is of different type
[  954.026842][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8962'.
[  954.120241][ T5140] veth0_virt_wifi: renamed from vlan0 (while UP)
[  954.511749][ T5155] netlink: 'syz.4.8968': attribute type 4 has an invalid length.
[  954.575975][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8971'.
[  954.896099][ T5167] 8021q: adding VLAN 0 to HW filter on device bond20
[  955.293963][T28222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  955.305158][T28222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  955.322830][T28222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  955.339611][T28222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  955.351475][T28222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  955.531536][ T5180] lo speed is unknown, defaulting to 1000
[  955.615599][ T5196] netlink: 'syz.3.8980': attribute type 2 has an invalid length.
[  955.701434][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8979'.
[  955.875020][T26788] syz_tun (unregistering): left allmulticast mode
[  955.891232][T26788] syz_tun (unregistering): left promiscuous mode
[  955.939844][ T5204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8982'.
[  955.974788][T26788] team0: Port device macvlan3 removed
[  955.995436][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 780 seconds
[  956.006481][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 780 seconds
[  956.018071][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 780 seconds
[  956.030053][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 780 seconds
[  956.236443][ T5217] nbd: must specify a size in bytes for the device
[  956.290317][ T5180] vxcan1 speed is unknown, defaulting to 1000
[  956.917689][ T5251] sit0: left promiscuous mode
[  956.926604][ T5251] veth0_to_team: left promiscuous mode
[  956.932127][ T5251] veth0_to_team: left allmulticast mode
[  956.974059][ T5251] hsr0: left promiscuous mode
[  956.981730][ T5251] hsr0: left allmulticast mode
[  957.012064][ T5251] hsr_slave_0: left allmulticast mode
[  957.039098][ T5251] hsr_slave_1: left allmulticast mode
[  957.050822][ T5186] siw: device registration error -23
[  957.070569][ T5251] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  957.084512][ T5251] bond1: left promiscuous mode
[  957.116136][ T5251] veth5: left promiscuous mode
[  957.123075][ T5251] veth5: left allmulticast mode
[  957.150241][ T5251] gtp0: left promiscuous mode
[  957.179464][ T5251] gtp0: left allmulticast mode
[  957.225407][ T5251] geneve3: left promiscuous mode
[  957.231235][ T5251] geneve3: left allmulticast mode
[  957.297258][ T5267] netlink: 'syz.3.8997': attribute type 1 has an invalid length.
[  957.411570][ T5251] veth7: left allmulticast mode
[  957.436498][T28222] Bluetooth: hci4: command tx timeout
[  957.470677][T16974] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  957.481176][T16974] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  957.491714][T16974] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  957.506557][T16974] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  957.520501][T16974] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  957.529802][T16974] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  957.540684][T16974] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  957.549817][T16974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  957.559049][T16974] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  957.600566][ T5268] bond1 (unregistering): Released all slaves
[  957.642152][T16974] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  957.642563][ T5274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8999'.
[  957.651824][T16974] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  957.685109][T16974] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  957.831466][ T5257] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  958.319394][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9005'.
[  958.519198][ T5180] chnl_net:caif_netlink_parms(): no params data found
[  959.090615][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.113243][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.145729][ T5180] bridge_slave_0: entered allmulticast mode
[  959.166153][ T5180] bridge_slave_0: entered promiscuous mode
[  959.183298][ T5340] veth0: entered promiscuous mode
[  959.192352][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.209279][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.239737][ T5180] bridge_slave_1: entered allmulticast mode
[  959.257593][ T5180] bridge_slave_1: entered promiscuous mode
[  959.279523][ T5339] veth0: left promiscuous mode
[  959.516011][T28222] Bluetooth: hci4: command tx timeout
[  959.519357][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9019'.
[  959.539783][ T5180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  959.559029][ T5180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  959.589572][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9019'.
[  959.728126][ T5180] team0: Port device team_slave_0 added
[  959.789066][ T5180] team0: Port device team_slave_1 added
[  959.961648][ T5377] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9027'.
[  959.978669][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  960.004688][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.033350][ T5180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  960.065652][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.077933][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9027'.
[  960.107231][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.150932][ T5377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9027'.
[  960.163188][ T5180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.364275][ T5180] hsr_slave_0: entered promiscuous mode
[  960.371850][ T5180] hsr_slave_1: entered promiscuous mode
[  960.407700][ T5180] debugfs: 'hsr0' already exists in 'hsr'
[  960.413517][ T5180] Cannot create hsr debugfs directory
[  960.506145][ T5410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9034'.
[  960.572989][ T5401] syzkaller0: entered promiscuous mode
[  960.579134][ T5401] syzkaller0: entered allmulticast mode
[  960.596583][ T5407] netlink: 'syz.4.9033': attribute type 10 has an invalid length.
[  960.605064][ T5416] netlink: 'syz.4.9033': attribute type 10 has an invalid length.
[  960.711708][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.760005][ T5423] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  960.876066][ T5426] netlink: 'syz.3.9036': attribute type 1 has an invalid length.
[  960.901747][ T5426] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9036'.
[  960.919529][ T5426] netlink: 'syz.3.9036': attribute type 1 has an invalid length.
[  961.109734][ T5435] netlink: 'syz.4.9039': attribute type 39 has an invalid length.
[  961.188423][ T5442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9041'.
[  961.198714][ T5433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9038'.
[  961.199241][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9041'.
[  961.222256][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9041'.
[  961.273193][ T5445] openvswitch: netlink: IPv4 tun info is not correct
[  961.397246][ T5448] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9042'.
[  961.544505][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9045'.
[  961.553695][ T5454] netlink: 'syz.1.9045': attribute type 7 has an invalid length.
[  961.565897][ T5180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.594142][ T5180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.596832][T28222] Bluetooth: hci4: command tx timeout
[  961.620043][ T5454] netlink: 'syz.1.9045': attribute type 8 has an invalid length.
[  961.643313][ T5459] netlink: 'syz.4.9046': attribute type 4 has an invalid length.
[  961.661507][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9045'.
[  961.709219][ T5459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  961.809053][ T5180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.834491][ T5180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.882358][ T5473] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9051'.
[  962.013266][ T5478] sctp: [Deprecated]: syz.3.9052 (pid 5478) Use of int in maxseg socket option.
[  962.013266][ T5478] Use struct sctp_assoc_value instead
[  962.013624][ T5180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.041313][ T5180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.096053][ T5480] sctp: [Deprecated]: syz.3.9052 (pid 5480) Use of int in maxseg socket option.
[  962.096053][ T5480] Use struct sctp_assoc_value instead
[  962.193281][ T5180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.205340][ T5180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.365516][ T5499] netlink: 'syz.3.9057': attribute type 30 has an invalid length.
[  962.485343][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9059'.
[  962.692250][ T5180] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  962.732934][ T5180] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  962.803514][ T5180] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  962.841185][ T5180] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  963.512942][ T5542] netlink: 'syz.2.9066': attribute type 1 has an invalid length.
[  963.539242][ T5541] netlink: 'syz.2.9066': attribute type 1 has an invalid length.
[  963.603162][ T5180] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.666598][ T5547] siw: device registration error -23
[  963.681635][T28222] Bluetooth: hci4: command tx timeout
[  963.749363][ T5180] 8021q: adding VLAN 0 to HW filter on device team0
[  963.819341][T16979] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.826894][T16979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.921384][T16985] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.928758][T16985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.043057][ T5610] netlink: 'syz.2.9083': attribute type 29 has an invalid length.
[  965.270232][ T5180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.292893][ T5627] netlink: 'syz.3.9086': attribute type 11 has an invalid length.
[  965.770682][ T5635] 8021q: adding VLAN 0 to HW filter on device bond5
[  965.955520][ T5180] veth0_vlan: entered promiscuous mode
[  965.972972][ T5674] __nla_validate_parse: 11 callbacks suppressed
[  965.972992][ T5674] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9095'.
[  966.203435][ T5180] veth1_vlan: entered promiscuous mode
[  966.228965][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9097'.
[  966.283647][ T5680] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  966.665947][ T5180] veth0_macvtap: entered promiscuous mode
[  966.716334][ T5180] veth1_macvtap: entered promiscuous mode
[  966.806121][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.830669][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  966.909762][T16985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  966.934967][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.977745][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  967.007993][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.024649][ T5719] sctp: [Deprecated]: syz.1.9107 (pid 5719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  967.024649][ T5719] Use struct sctp_sack_info instead
[  967.139442][ T5717] syzkaller1: entered promiscuous mode
[  967.155823][ T5717] syzkaller1: entered allmulticast mode
[  967.185102][ T5717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9108'.
[  967.508170][ T2051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.541896][ T2051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.595853][ T5857] Bluetooth: hci4: command 0x0405 tx timeout
[  967.638437][ T2051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.649275][ T2051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.718282][ T5741] netlink: 'syz.2.9116': attribute type 1 has an invalid length.
[  967.828711][ T5741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9116'.
[  967.856163][ T5751] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8969'.
[  967.870311][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9119'.
[  967.881838][ T5751] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.8969'.
[  967.896979][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9116'.
[  967.918954][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0
[  967.945813][ T5751] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8969'.
[  968.064330][ T5753] nbd6: detected capacity change from 0 to 127
[  968.073818][T28222] block nbd6: Receive control failed (result -32)
[  968.255421][ T5763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9122'.
[  968.863658][ T5796] atomic_op ffff8880571ee998 conn xmit_atomic 0000000000000000
[  969.540569][ T5822] xfrm1: entered allmulticast mode
[  969.796590][ T5832] A link change request failed with some changes committed already. Interface veth4 may have been left with an inconsistent configuration, please check.
[  970.525147][ T5873] gtp2: entered promiscuous mode
[  970.549367][ T5873] gtp2: entered allmulticast mode
[  970.769025][ T5898] openvswitch: netlink: IP tunnel TTL not specified.
[  971.126067][ T5907] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  971.134253][ T5910] netlink: 'syz.1.9158': attribute type 23 has an invalid length.
[  971.276373][ T5929] __nla_validate_parse: 6 callbacks suppressed
[  971.276397][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9160'.
[  971.312335][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9160'.
[  971.430550][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9161'.
[  971.604668][ T5952] netlink: 236 bytes leftover after parsing attributes in process `syz.4.9163'.
[  971.777920][   T10] hid-generic 0005:0C45:1012.0005: item fetching failed at offset 0/1
[  971.814964][   T10] hid-generic 0005:0C45:1012.0005: probe with driver hid-generic failed with error -22
[  971.857577][ T5961] IPv4: Oversized IP packet from 172.20.20.24
[  971.866509][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  971.873450][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  971.903375][ T5962] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  972.093680][ T5968] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9172'.
[  972.253499][ T5970] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.9173'.
[  972.305429][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9173'.
[  972.466852][ T5980] team0: Device vti0 is of different type
[  972.600506][ T5982] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.9176'.
[  973.408671][ T6022] netlink: 'syz.2.9185': attribute type 1 has an invalid length.
[  973.450869][ T6022] netlink: 'syz.2.9185': attribute type 4 has an invalid length.
[  973.477435][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9186'.
[  973.487033][ T6022] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9185'.
[  973.533792][T16979] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  973.564590][T16979] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  973.586872][T16979] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  973.616583][T16979] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  974.100487][ T6053] sctp: [Deprecated]: syz.1.9193 (pid 6053) Use of int in maxseg socket option.
[  974.100487][ T6053] Use struct sctp_assoc_value instead
[  974.273626][T16985] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  974.296358][T16985] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  974.328342][T16985] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  974.337702][T16985] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  974.885994][ T6097] netlink: 'syz.4.9208': attribute type 39 has an invalid length.
[  975.001991][ T6102] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  975.008535][ T6102] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  976.319384][ T6139] openvswitch: netlink: Duplicate or invalid key (type 0).
[  976.329766][ T6139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  976.392836][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  976.410093][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  976.419361][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  976.429477][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  976.438563][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  976.716336][ T6147] lo speed is unknown, defaulting to 1000
[  976.876249][ T6163] bond0: Error: Cannot enslave bond to itself.
[  976.937218][ T6167] __nla_validate_parse: 7 callbacks suppressed
[  976.937242][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9229'.
[  977.001119][ T6167] tc_dump_action: action bad kind
[  977.287599][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9232'.
[  977.397300][ T6147] vxcan1 speed is unknown, defaulting to 1000
[  977.603787][ T6180] veth0: entered promiscuous mode
[  977.735540][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9235'.
[  977.791017][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9235'.
[  977.879951][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9236'.
[  978.429799][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9239'.
[  978.440019][ T6179] veth0: left promiscuous mode
[  978.474163][ T5857] Bluetooth: hci0: command tx timeout
[  978.901691][ T6147] chnl_net:caif_netlink_parms(): no params data found
[  979.151605][ T6234] netlink: 'syz.2.9249': attribute type 4 has an invalid length.
[  979.209149][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9250'.
[  979.220718][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9249'.
[  979.233636][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.247270][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.255551][ T6147] bridge_slave_0: entered allmulticast mode
[  979.264836][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9248'.
[  979.265252][ T6147] bridge_slave_0: entered promiscuous mode
[  979.286915][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state
[  979.294410][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9248'.
[  979.305499][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.313131][ T6147] bridge_slave_1: entered allmulticast mode
[  979.322850][ T6147] bridge_slave_1: entered promiscuous mode
[  979.458747][ T6243] !€ÿ: renamed from bond_slave_0
[  979.479658][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  979.511699][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  979.737002][ T6147] team0: Port device team_slave_0 added
[  979.776408][ T6147] team0: Port device team_slave_1 added
[  979.825759][ T6260] netlink: 'syz.3.9255': attribute type 10 has an invalid length.
[  979.971457][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.985147][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.031548][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.045761][ T6260] bridge0: port 3(team0) entered blocking state
[  980.052183][ T6260] bridge0: port 3(team0) entered disabled state
[  980.060246][ T6260] team0: entered allmulticast mode
[  980.067229][ T6260] team_slave_0: entered allmulticast mode
[  980.073293][ T6260] team_slave_1: entered allmulticast mode
[  980.081809][ T6260] team0: entered promiscuous mode
[  980.087375][ T6260] team_slave_0: entered promiscuous mode
[  980.095300][ T6260] team_slave_1: entered promiscuous mode
[  980.103285][ T6260] bridge0: port 3(team0) entered blocking state
[  980.109835][ T6260] bridge0: port 3(team0) entered forwarding state
[  980.159925][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.176246][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.218029][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.318872][ T2053] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  980.460877][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.467961][ T6147] hsr_slave_0: entered promiscuous mode
[  980.479271][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.482397][ T6147] hsr_slave_1: entered promiscuous mode
[  980.498871][ T6147] debugfs: 'hsr0' already exists in 'hsr'
[  980.506693][ T6147] Cannot create hsr debugfs directory
[  980.556194][ T5857] Bluetooth: hci0: command tx timeout
[  981.475009][ T6147] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  981.529736][ T6147] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.636161][ T6333] Bluetooth: MGMT ver 1.23
[  981.775239][ T6147] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  981.834319][ T6147] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.948150][ T6147] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  981.969017][ T6340] netlink: 'syz.0.9278': attribute type 4 has an invalid length.
[  981.997177][ T6147] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.056617][ T6338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  982.063696][ T6342] syzkaller0: entered promiscuous mode
[  982.069665][ T6342] syzkaller0: entered allmulticast mode
[  982.085144][ T6344] netlink: 'syz.2.9279': attribute type 1 has an invalid length.
[  982.092957][ T6344] __nla_validate_parse: 11 callbacks suppressed
[  982.092978][ T6344] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9279'.
[  982.114178][ T6334] tipc: Resetting bearer <eth:syzkaller0>
[  982.171061][ T6334] tipc: Disabling bearer <eth:syzkaller0>
[  982.270758][ T6147] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  982.311485][ T6147] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  982.385765][ T6354] netlink: 62 bytes leftover after parsing attributes in process `syz.2.9282'.
[  982.633524][ T6364] openvswitch: netlink: Duplicate or invalid key (type 0).
[  982.641305][ T5857] Bluetooth: hci0: command tx timeout
[  982.658524][ T6364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  982.859697][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9288'.
[  982.947716][ T6147] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  982.964125][ T6147] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  982.979552][ T6147] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  982.993347][ T6147] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  983.106540][ T6385] netlink: 'syz.2.9290': attribute type 10 has an invalid length.
[  983.126718][ T6384] policy can only be matched on NF_INET_PRE_ROUTING
[  983.126742][ T6384] unable to load match
[  983.189857][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9291'.
[  983.357541][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0
[  983.416366][ T6147] 8021q: adding VLAN 0 to HW filter on device team0
[  983.420238][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9293'.
[  983.627672][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.635062][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  983.680647][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.687980][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  983.733309][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9295'.
[  983.773401][ T6403] netlink: 'syz.4.9294': attribute type 1 has an invalid length.
[  983.785538][ T6403] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9294'.
[  983.829711][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9292'.
[  984.014591][ T6417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9298'.
[  984.091926][ T6416] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9298'.
[  984.339788][ T6431] tipc: Started in network mode
[  984.371937][ T6431] tipc: Node identity e21f32e5479, cluster identity 4711
[  984.407490][ T6439] netlink: 'syz.4.9302': attribute type 10 has an invalid length.
[  984.416286][ T6431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  984.424474][ T6440] syzkaller0: entered promiscuous mode
[  984.432880][ T6440] syzkaller0: entered allmulticast mode
[  984.491922][ T6436] 8021q: adding VLAN 0 to HW filter on device bond4
[  984.539245][ T6439] batadv0: entered promiscuous mode
[  984.548520][ T6439] batadv0: entered allmulticast mode
[  984.580184][ T6439] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  984.662089][ T6449] tipc: Resetting bearer <eth:syzkaller0>
[  984.714148][ T5857] Bluetooth: hci0: command tx timeout
[  984.744557][ T6430] tipc: Resetting bearer <eth:syzkaller0>
[  984.835408][ T6430] tipc: Disabling bearer <eth:syzkaller0>
[  984.933289][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  985.124734][ T6147] veth0_vlan: entered promiscuous mode
[  985.143054][ T6147] veth1_vlan: entered promiscuous mode
[  985.164568][ T6469] geneve3: entered promiscuous mode
[  985.192572][ T6474] netlink: 'syz.3.9314': attribute type 11 has an invalid length.
[  985.461152][ T6488] netlink: 'syz.4.9318': attribute type 4 has an invalid length.
[  985.515714][ T6488] : renamed from bond0
[  985.596039][ T6147] veth0_macvtap: entered promiscuous mode
[  985.667436][ T6147] veth1_macvtap: entered promiscuous mode
[  985.713804][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  985.739418][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  985.785867][ T6500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  985.863295][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.904158][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.935716][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  985.991704][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  986.080331][   T55] block nbd0: Possible stuck request ffff8880254d0000: control (read@0,1024B). Runtime 810 seconds
[  986.092623][ T6513] netlink: 'syz.3.9327': attribute type 5 has an invalid length.
[  986.092650][   T55] block nbd0: Possible stuck request ffff8880254d01c0: control (read@1024,1024B). Runtime 810 seconds
[  986.112181][   T55] block nbd0: Possible stuck request ffff8880254d0380: control (read@2048,1024B). Runtime 810 seconds
[  986.123541][   T55] block nbd0: Possible stuck request ffff8880254d0540: control (read@3072,1024B). Runtime 810 seconds
[  986.189767][ T6517] netlink: 'syz.0.9328': attribute type 39 has an invalid length.
[  986.397749][T16979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  986.423963][T16979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  986.664122][ T6534] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  986.751025][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  986.759093][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  987.117375][ T2053] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  987.121476][ T6557] netlink: 'syz.3.9338': attribute type 10 has an invalid length.
[  987.208611][ T6560] team0: left allmulticast mode
[  987.239211][ T6560] team_slave_0: left allmulticast mode
[  987.275115][ T6560] team_slave_1: left allmulticast mode
[  987.294105][ T6560] team0: left promiscuous mode
[  987.324141][ T6560] team_slave_0: left promiscuous mode
[  987.352021][ T6560] team_slave_1: left promiscuous mode
[  987.389139][ T6560] bridge0: port 3(team0) entered disabled state
[  987.415612][ T6560] bridge_slave_0: left allmulticast mode
[  987.423192][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.439269][ T6560] bridge_slave_1: left allmulticast mode
[  987.447693][ T6560] bridge_slave_1: left promiscuous mode
[  987.456889][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.473062][ T6560] bond0: (slave bond_slave_0): Releasing backup interface
[  987.493591][ T6560] bond0: (slave bond_slave_1): Releasing backup interface
[  987.532271][ T6560] team0: Port device team_slave_0 removed
[  987.557914][ T6560] team0: Port device team_slave_1 removed
[  987.576032][ T6560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  987.583471][ T6560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  987.600856][ T6560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  987.610042][ T6560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.677240][ T6557] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  987.965811][ T6590] __nla_validate_parse: 15 callbacks suppressed
[  987.965834][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9343'.
[  988.253476][T30998] IPVS: starting estimator thread 0...
[  988.307923][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9349'.
[  988.356661][ T6608] IPVS: using max 27 ests per chain, 64800 per kthread
[  988.514658][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.533177][ T6621] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode
[  988.567808][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.577789][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.589050][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.644317][ T6624] ip6erspan0: entered promiscuous mode
[  988.666150][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.717060][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.742222][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9352'.
[  988.755021][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9355'.
[  988.882717][ T6628] lo speed is unknown, defaulting to 1000
[  989.465984][ T6653] lo speed is unknown, defaulting to 1000
[  989.473970][ T6628] vxcan1 speed is unknown, defaulting to 1000
[  990.341699][ T6653] vxcan1 speed is unknown, defaulting to 1000
[  990.694418][ T6690] netlink: 'syz.4.9374': attribute type 1 has an invalid length.
[  991.178804][ T6713] netlink: 'syz.4.9378': attribute type 2 has an invalid length.
[  991.254969][ T6715] netlink: 'syz.0.9381': attribute type 4 has an invalid length.
[  993.062438][ T6768] __nla_validate_parse: 65 callbacks suppressed
[  993.062462][ T6768] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9395'.
[  993.098928][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9394'.
[  993.187765][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9394'.
[  993.402809][ T6780] lo: left allmulticast mode
[  993.452239][ T6780] 8021q: adding VLAN 0 to HW filter on device 
[  993.473152][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  993.509874][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9401'.
[  993.511175][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9400'.
[  993.621328][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  993.663054][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0
[  993.731271][T31006] hid-generic 0005:10CF:0009.0006: unknown main item tag 0x0
[  993.774848][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  993.789605][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1
[  993.802038][T31006] hid-generic 0005:10CF:0009.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[  994.123519][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9408'.
[  994.231637][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9407'.
[  994.258675][ T6825] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  994.285614][ T6824] netlink: 'syz.4.9410': attribute type 1 has an invalid length.
[  994.300109][ T6825] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  994.388949][ T6825] bond5: entered promiscuous mode
[  994.400618][ T6825] bond5: entered allmulticast mode
[  994.407448][ T6825] 8021q: adding VLAN 0 to HW filter on device bond5
[  994.457335][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9410'.
[  994.481132][ T6828] bond6 (unregistering): Released all slaves
[  994.586507][ T6824] ip6tnl3: entered promiscuous mode
[  994.591912][ T6824] ip6tnl3: entered allmulticast mode
[  995.162312][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9423'.
[  995.176669][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9423'.
[  995.332692][ T6867] veth3: entered allmulticast mode
[  995.374087][ T6881] netlink: 'syz.3.9428': attribute type 1 has an invalid length.
[  995.588791][ T6881] 8021q: adding VLAN 0 to HW filter on device bond2
[  995.624674][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.701220][ T6867] bridge_slave_1 (unregistering): left allmulticast mode
[  995.709316][ T6867] bridge_slave_1 (unregistering): left promiscuous mode
[  995.718743][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.803131][ T6888] 8021q: adding VLAN 0 to HW filter on device bond2
[  995.820038][ T6888] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  995.836222][ T6888] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  996.135495][ T6893] veth3: entered promiscuous mode
[  996.145520][ T6893] bond2: (slave veth3): Enslaving as an active interface with a down link
[  996.405460][ T6914] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  997.065903][ T6940] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  997.074552][T31006] IPVS: starting estimator thread 0...
[  997.140874][ T6930] pim6reg: entered allmulticast mode
[  997.196955][ T6951] IPVS: using max 27 ests per chain, 64800 per kthread
[  998.073602][ T6987] __nla_validate_parse: 5 callbacks suppressed
[  998.073625][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9454'.
[  998.281833][ T6992] netlink: 'syz.2.9457': attribute type 12 has an invalid length.
[  999.011332][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9466'.
[  999.032231][ T7018] netlink: 'syz.3.9466': attribute type 30 has an invalid length.
[  999.165744][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9466'.
[  999.203982][ T7018] netlink: 'syz.3.9466': attribute type 30 has an invalid length.
[  999.215860][T28222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  999.230466][T28222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  999.242322][T28222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  999.255795][T28222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  999.265599][T28222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  999.359168][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9469'.
[  999.378287][ T7034] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9469'.
[  999.517553][T16985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.549107][T16985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  999.615455][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9469'.
[  999.797901][ T7045] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  999.809848][ T7045] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  999.819596][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: modprobe Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) 
[  999.831182][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  999.841272][ T7045] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[  999.847105][ T7045] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62
[  999.866969][ T7045] RSP: 0018:ffffc9000b1d76f8 EFLAGS: 00010206
[  999.873224][ T7045] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 145e4fd3d449e600
[  999.881197][ T7045] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0
[  999.889178][ T7045] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619
[  999.897158][ T7045] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000
[  999.905143][ T7045] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000
[  999.913386][ T7045] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  999.922486][ T7045] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  999.929097][ T7045] CR2: 00007feab0b7a6b0 CR3: 0000000054960000 CR4: 00000000003526f0
[  999.937111][ T7045] Call Trace:
[  999.940389][ T7045]  <TASK>
[  999.943334][ T7045]  refill_obj_stock+0x254/0x850
[  999.948193][ T7045]  ? refill_obj_stock+0x116/0x850
[  999.953396][ T7045]  __memcg_slab_free_hook+0x127/0x3d0
[  999.958873][ T7045]  ? unlink_anon_vmas+0x614/0x670
[  999.963956][ T7045]  kmem_cache_free+0x223/0x400
[  999.968847][ T7045]  unlink_anon_vmas+0x614/0x670
[  999.973795][ T7045]  free_pgtables+0x7bf/0xaf0
[  999.978490][ T7045]  ? __pfx_free_pgtables+0x10/0x10
[  999.983605][ T7045]  ? __pfx_down_write+0x10/0x10
[  999.989411][ T7045]  ? __mas_set_range+0x12f/0x3c0
[  999.994355][ T7045]  exit_mmap+0x444/0xb50
[  999.998633][ T7045]  ? uprobe_clear_state+0x20f/0x290
[ 1000.003925][ T7045]  ? __pfx_exit_mmap+0x10/0x10
[ 1000.008718][ T7045]  ? __mutex_unlock_slowpath+0x1a1/0x760
[ 1000.014360][ T7045]  ? __pfx_exit_aio+0x10/0x10
[ 1000.019137][ T7045]  ? uprobe_clear_state+0x274/0x290
[ 1000.024343][ T7045]  __mmput+0x118/0x420
[ 1000.028445][ T7045]  exit_mm+0x1da/0x2c0
[ 1000.032523][ T7045]  ? __pfx_exit_mm+0x10/0x10
[ 1000.037113][ T7045]  ? hrtimer_try_to_cancel+0x3d9/0x420
[ 1000.042583][ T7045]  ? rcu_is_watching+0x15/0xb0
[ 1000.047357][ T7045]  do_exit+0x648/0x22e0
[ 1000.051528][ T7045]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1000.056992][ T7045]  ? __pfx_do_exit+0x10/0x10
[ 1000.061588][ T7045]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1000.066824][ T7045]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1000.072208][ T7045]  do_group_exit+0x21c/0x2d0
[ 1000.076823][ T7045]  __x64_sys_exit_group+0x3f/0x40
[ 1000.081850][ T7045]  x64_sys_call+0x21f7/0x2200
[ 1000.086618][ T7045]  do_syscall_64+0xfa/0x3b0
[ 1000.091475][ T7045]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1000.096677][ T7045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.102743][ T7045]  ? clear_bhb_loop+0x60/0xb0
[ 1000.107511][ T7045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.113426][ T7045] RIP: 0033:0x7f6883e656c5
[ 1000.117842][ T7045] Code: Unable to access opcode bytes at 0x7f6883e6569b.
[ 1000.124853][ T7045] RSP: 002b:00007ffde796d028 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 1000.133296][ T7045] RAX: ffffffffffffffda RBX: 00007f6883f66fe8 RCX: 00007f6883e656c5
[ 1000.141278][ T7045] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001
[ 1000.149272][ T7045] RBP: 0000000000000001 R08: 00007ffde796cfb8 R09: 0000000000000000
[ 1000.157424][ T7045] R10: 00007ffde796ce50 R11: 0000000000000202 R12: 0000000000000000
[ 1000.165403][ T7045] R13: 0000000000000001 R14: 00007f6883f65680 R15: 00007f6883f67000
[ 1000.173395][ T7045]  </TASK>
[ 1000.176428][ T7045] Modules linked in:
[ 1000.185214][ T7045] ---[ end trace 0000000000000000 ]---
[ 1000.190730][ T7045] RIP: 0010:percpu_ref_get_many+0x8d/0x140
[ 1000.197477][ T7045] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62
[ 1000.218807][ T7045] RSP: 0018:ffffc9000b1d76f8 EFLAGS: 00010206
[ 1000.225383][ T7045] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 145e4fd3d449e600
[ 1000.233395][ T7045] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0
[ 1000.241916][ T7045] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619
[ 1000.251379][ T7045] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000
[ 1000.259994][ T7045] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000
[ 1000.268516][ T7045] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[ 1000.277847][ T7045] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1000.285781][ T7045] CR2: 00007feab0b7a6b0 CR3: 0000000054960000 CR4: 00000000003526f0
[ 1000.294077][ T7045] Kernel panic - not syncing: Fatal exception
[ 1000.300565][ T7045] Kernel Offset: disabled
[ 1000.304900][ T7045] Rebooting in 86400 seconds..