last executing test programs:

3.826132032s ago: executing program 2 (id=8807):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r1, 0x80)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000001c0)={0x1ff, 0x40, [0xffffffffffffff80, 0x0, 0xffff, 0x7], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
accept$netrom(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @default, @default, @remote, @null, @rose, @rose]}, &(0x7f0000000080)=0x48)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={<r3=>0x0, 0x200, 0xfffffff9, 0x2}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r3, 0x8001}, 0x8)

3.239351615s ago: executing program 2 (id=8816):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0x1, 0x2}}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20408000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7b8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x89}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x28}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000880)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00'})
ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000440)={&(0x7f0000000380)=0x10, 0x8, &(0x7f00000003c0), &(0x7f0000000400)})
pread64(r4, &(0x7f0000000480)=""/143, 0x8f, 0x100000000)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8041)
ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000dc0)={&(0x7f0000000680)=0xf9e8, 0x6, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d80)})
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000e00))
r7 = accept$phonet_pipe(r4, &(0x7f0000000e40), &(0x7f0000000e80)=0x10)
ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000ec0)={0xfffffffffffffffc, 0xfffffffffffffbff, 0x4, 0x800, 0xa, 0x0, [{0x80000001, 0x0, 0x1000, '\x00', 0xc}, {0x9, 0xfffffffffffffffb, 0x0, '\x00', 0x2000}, {0x2, 0xf711, 0x9, '\x00', 0x20a}, {0x1, 0x2, 0x9, '\x00', 0x1}, {0x5e62, 0x8000000000000000, 0x0, '\x00', 0x480}, {0xc, 0x8, 0x4, '\x00', 0x2}, {0x8, 0x3, 0x2d05, '\x00', 0x4100}, {0x8000000000000001, 0x0, 0x5, '\x00', 0xa}, {0x8000000000000001, 0x10001, 0x38db, '\x00', 0xa00}, {0x2, 0x2, 0x2, '\x00', 0x3004}]})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f00000012c0)={{<r8=>r4, &(0x7f0000001140)='\x00', 0x400000, &(0x7f0000001180)={@_ha_fsid={[0x0, 0x1]}, {0x4, 0x5, 0x9, 0x1}}, 0x1, &(0x7f00000011c0), &(0x7f0000001200)=0x5}, {[0x1, 0x3, 0x9, 0xb]}, 0x3, 0x49, &(0x7f0000001240)=""/73})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r2)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000012}, 0x44800)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001480)=0x1b60)
ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000001580)={<r10=>0x0, 0x6bdf, 0xcfea})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r8, 0x50009417, &(0x7f0000001980)={{r0}, 0x0, 0x10, @inherit={0x98, &(0x7f00000014c0)={0x1, 0xa, 0x9, 0x6, {0xfb209fc91c42796f, 0x43, 0x8001, 0xa, 0xeb}, [0x215a, 0x3, 0x7, 0x6, 0x8, 0x9, 0x8, 0x8, 0x5, 0x3]}}, @devid=r10})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000029c0), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, r11, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x800)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f0000002ac0)={r12, 0x0, 0xf5, 0x97e8, 0x5, 0x2})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002c00)={'erspan0\x00', &(0x7f0000002b40)={'gre0\x00', <r13=>r1, 0x8000, 0x80, 0x8, 0x6, {{0x20, 0x4, 0x3, 0x17, 0x80, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@multicast2, 0x4}, {@multicast2, 0xb8}, {@local, 0x8001}]}, @rr={0x7, 0x23, 0x74, [@rand_addr=0x64010100, @local, @loopback, @empty, @loopback, @remote, @rand_addr=0x64010100, @broadcast]}, @generic={0x94, 0x6, "6f137e09"}, @end, @ssrr={0x89, 0x17, 0xac, [@empty, @private=0xa010102, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route_sched(r4, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)=@deltclass={0x5c, 0x29, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x2, 0x4}, {0xe, 0x6}, {0x0, 0x4}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x96, 0x5}}, @TCA_RATE={0x6, 0x5, {0x53, 0xfe}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10001}, 0x40004)

3.153810598s ago: executing program 2 (id=8818):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

2.980335455s ago: executing program 2 (id=8820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006d6163736563300000000000000049000a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

2.979123576s ago: executing program 2 (id=8821):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000007c80)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r2, 0xa5c59466aaff822d, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x60040)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000dd0c0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000004000384f021e04b1a0d5b6614374b9f960527ad93bab5e01c61c23c57ff0019b15fc887c2d0f3cd991c58ce087256968aa3d67e"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xa, 0xffe0}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

2.936348285s ago: executing program 2 (id=8823):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3f86dd6100272400803aff00000000000000000000ffffac1414bb00000000000000000000ffffac1414aa0208040402500100ff020000000000000000000000000001fe800000000000000000000000000024ff020000000000000000000000000001fe8800000000190000000000000001010102907803000000689dd7e400083aff00000000000000000000ffffac14334edde7d2b9d15714bb00000000000000000000ffff00000000"], 0x0)
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r12 = accept4(r11, 0x0, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100001040000001b000000000000000071977e8cf23c71b1b73a7c3e89b93aa2dc28df26bb0dfb9089de18270040e48d58a48ff50f22081bf19111ce0a9ef97e78f667bfc4d359796a98e6ad0d0c94bb000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400168008000100", @ANYRES8, @ANYRESHEX, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2.771725603s ago: executing program 4 (id=8826):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) (async, rerun: 32)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) (async, rerun: 32)
write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0xff02) (async, rerun: 32)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="6c020000f5ffffff04856b47c12ef405020003000000"], 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = socket(0x25, 0x3, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x426, 0x200, 0x1ff, 0x7, 0x1, 0x6e, 0xa6, <r6=>0x0}, &(0x7f0000000200)=0x20)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r6, 0x1}, 0x8) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x107, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xffe0, 0x1}, {0xffff, 0x4}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044005}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x2}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) (async)
r9 = socket$inet6(0xa, 0x80000, 0x7) (async, rerun: 64)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r12=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000500)={r6, 0x3}, &(0x7f0000000540)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r12, 0x6, 0x3, 0x66}, 0x10)

2.559873938s ago: executing program 1 (id=8830):
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000012c0), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000040000100fcff070004000000010000000800cb80040008802000687517d417e2c9692b9f017fc66e86c901801c00108018000b8014006f00fc0000000000000000000000000000000c0002000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="cc63e78e106f487c1cb38b30e50cabec9d1a20eaff52f250a39463d811c1b57658c04efdca6388a03691f43ed368c9c1c2f48def7550ecffff48c803a44f79d6da8b86b71fe73f4b148fe829b8dda3519980caae7e65f0e9430dde22bc11df964f856ced6f2fb2e2902b197df0a44b29f90e766f18335f825c884f85", 0x7c}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100, 0x80}, 0x4040000)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x5c, &(0x7f00000006c0)=0x200, 0x4)
getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$cgroup_subtree(r8, &(0x7f0000000040), 0xfffffc3f)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94)

2.132003957s ago: executing program 4 (id=8833):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getpeername(r6, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x1, 0x803, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x884)

1.836311564s ago: executing program 4 (id=8837):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r4=>0x0})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x10c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xe0, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x148}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x3c, r2, 0x20, 0x0, 0x8, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x4, 0x700000000000000, 0x0, 0x20000041}, 0x40014)
sendmsg$nl_crypto(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xe8}}, 0x4880)

1.572297174s ago: executing program 1 (id=8840):
r0 = socket$inet6(0xa, 0x5, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500fc000000080012400000000013000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x79, {{0xa, 0x4e22, 0x5, @local, 0x7}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x560, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {{0xa, 0x4e21, 0x7, @mcast2, 0x101}}, {{0xa, 0x4e22, 0x7, @mcast2, 0xfffffeff}}, {{0xa, 0x4e23, 0x6, @remote, 0x4}}]}, 0x390)
ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x6, 0x5, 0x3, 0x5, "249523"}})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB="ecff000000000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
readv(0xffffffffffffffff, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

1.263293154s ago: executing program 1 (id=8843):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bc000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

1.196213324s ago: executing program 1 (id=8844):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="01000000000000000700000000000000d91b737481961f10e8d0add8786aeacca2ce9317cbe0d8b804505915071ef2790dd8097bb0950668afde0de8ac91ea9c60c8c5b68ee8dea062cabfbf6e4f1490b6c21021cee7c4738f33779b202904bd4223caeb6374769d2499846c01194538563b2e6eedf291b981708365a6e2a135b57936e594b6", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000200000003030000ae771958a0cb06cc"], 0x48}}, 0x20000000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x88, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
close(0x3)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='^&\x00\x00', @ANYRES16=r6, @ANYBLOB="000128bd7000fcdbdf258700000008000300", @ANYRES32=r7, @ANYBLOB="0c0099009100000075000000"], 0x28}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r8)
ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00  \x00'})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000500)="4ae18f0501ffc72df172fb69cc5fd04239f31cd5f7e10f2721db726927484b943b87211ff0b7d0090008541abbfeceb8d93b03b8e0add6591f0562633463b0019375c388e0362b4b7118209cf2f0930a39cae09854908d5062764710bac27d4b0805aaa9449e9d5dc916ea03ce06b11d9103380db60d1a73c8f652eb32782f753116877c37c6d52ca3b802e83b9b4cf8680ed2eb8ed382fa8a3471588f7c46de4c27d9a376780eeebc40c51b81d8f0cdb650f0d83bc7d4cd17f53fc34c5e5419e78224e16f8b8f0b69ffbe", &(0x7f0000000600)=""/4096, &(0x7f00000002c0)="9eeddf739f6221ee1c6f598cae06e2c4afc1da1619722d4f6f15c365f937fc089b272366baa8dd963860e17cdff6bec9a88022d7dfecbf0da8b3bfc5c1fb499a21ca3b8187f066cb218e9f3425a079345a549cbafe461aa95f7aa0a4afad1c69dc1e0de0b4385874f0b79b40cdff70ac367cc7", &(0x7f0000000240)="02606a", 0x5, r8, 0x4}, 0x38)

1.008135258s ago: executing program 3 (id=8847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30018}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5cbd0000100039040000000000000000000000005f2607187cc397cd194188660cc5d433fd195b90fae0e781e4dbddd0046fac1effb365ff3f2e39d82a4d3bcd65f9a5a006857eabea7b040ebbc4d266f6556c5de9ab88ba186731b1833a82c8bcd26bf5460fefaeeab739805e77a37706d36b29", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)

999.487678ms ago: executing program 0 (id=8848):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r3, 0x15, 0x0, @void}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, <r4=>0x0}, 0x8)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000000000000000000ab573fe708fe97383eb7948ae687ae3af089f35c7687d4bc73165eb047fa588361bdaad5106cd5009767bd458e7a1d9614cbe7d9978bd30d1fa8f4fb1df59cf1d5187a8e8ab8f36d56e584453ea1e032aeb836cee253d643479476987b636a9b435c6bd0426ed1a3d52fca1bdbb84488e10ba9e5edad1622927ef68a28960c335c7c691ab7523082b6bc74b597754eeb9957aa7e0fbcabb06e9e7d"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000000080)="0ab390107f", &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000640)={<r11=>r0, &(0x7f0000000540)='/+!%/\x00', 0x0, &(0x7f0000000580)={@_ha_fsid, {0x9, 0x38a, 0xd0000000, 0x4}}, 0x5, &(0x7f00000005c0), &(0x7f0000000600)=0x4})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pS    \x00'}, 0x20)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x1, 0x10}, 0xc)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r15, 0xfffff000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r15, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r15, 0x2000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r14, 0xfab16000)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3af, 0x8a, &(0x7f00000002c0)=""/138, 0x41100, 0x2, '\x00', r2, @fallback=0x34, r3, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x6, 0x7}, 0x10, r4, r0, 0x2, &(0x7f0000000780)=[0x1, r5, r6, r7, r10, r11, r12, r13], &(0x7f00000007c0)=[{0x2, 0x2, 0x2, 0xa}, {0x0, 0x3, 0x10}], 0x10, 0x8}, 0x94)

911.815509ms ago: executing program 1 (id=8849):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001800000227bd7000fd0700000010200a0000c80800130000"], 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
close(r2)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="370000006aac44ee04000000", @ANYRES32=0x0, @ANYBLOB="35770a675f512c469ef997447cf07c0be5a9adddbff49b1fb2d6c1a286ae24b28fd83174f4889a51a147fc936a6d2d0201da81ef57ec34d00836bf68f44c234d1cba3563f1b9aad1adc3eaf8", @ANYRES64=0x0], 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
poll(&(0x7f0000000480)=[{r2, 0x6000}, {r3, 0x40}, {r3, 0x2100}, {r2, 0x2}, {0xffffffffffffffff, 0x4}], 0x5, 0x17)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0xff, 0xfffffffd, 0x1, 0x5, 0x5, 0x8}}, {0x14, 0x2, [0x3ff, 0x0, 0x3, 0x9, 0x7, 0x6, 0x400, 0x8]}}, {{0x1c, 0x1, {0x4, 0x80, 0x4, 0x800, 0x0, 0x8, 0xfffffff9, 0x2}}, {0x8, 0x2, [0xb, 0x2]}}, {{0x1c, 0x1, {0xff, 0x8, 0x878, 0xfffff001, 0x3, 0x2, 0xab1, 0x4}}, {0xc, 0x2, [0x9, 0x4, 0x0, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0xb4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24004000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000c03d10790000000000950007000000000000040000002000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000d0a010200000000000000000700000a0000020073797a31000000000900020073797a30000000000900020073797a310000000009006c6f73797a3100000000"], 0xfffffd3b}, 0x1, 0x0, 0x0, 0x20048800}, 0x40)

846.441629ms ago: executing program 4 (id=8850):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "4bc7fb", 0x10, 0x21, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1, "c8fd14", 0x7, "0ebb69"}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}]}, 0x20040000)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={0x0, 0xffff, 0x3}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r6, 0x74, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}, @in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in6={0xa, 0x4e20, 0x5, @private2}]}, &(0x7f0000000140)=0x10)

758.679603ms ago: executing program 3 (id=8851):
r0 = socket$netlink(0x10, 0x3, 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xa}}, 0x8, 0x7, 0x0, 0x3ff, 0x5}, &(0x7f00000002c0)=0x98)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3}, 0x8)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r5, 0x80000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0)
mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x68, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2000}, [@CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x68}}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

640.757305ms ago: executing program 0 (id=8852):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

594.804455ms ago: executing program 3 (id=8853):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000)

519.409905ms ago: executing program 3 (id=8854):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2000}, 0x4)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2000}, 0x4) (async)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)

401.390563ms ago: executing program 0 (id=8855):
r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000240)="206304db9465db13e27f78cd4926592303821576d324757fc6f5e30f22b2f73e4d453bb00decb59ae3d1", 0x2a}, {&(0x7f00000002c0)="49f6ae199c9d7c55fe7d8d7d8d1f94db6bfdd97a39054b08", 0x18}, {&(0x7f0000000300)="eb191b9eb3520e1b56420437fb11a43d8446054c26c878a4b93073bf5d14a386c5ddf1c8453ef7207fefc3771c9248378ee0b4ccd919265c73f394b0cea3e32b7f58c3ceb110888dff7cf9f609f5853441302f52d90e18fc6372e11776e7578677dcf1605a265df7eff41d46fb5cb03ddc4faae26efd422e", 0x78}, {&(0x7f0000000380)="8d7fff5ea9d6fbe91196305a7220b99d5a769132e527690d0cfe5b4c8d0d1da400021943f0ea6b056f2844d189ada850f432efba7e099ddde6b7fdc2885c0dc80b3509bfe72e1f3bee6ab899d87356235f63", 0x52}, {&(0x7f0000001740)="f3f830e8c48f730f34dfe12539ffb4a752f97822484d4036c5e97cf66ab968acd6d0f8eb8fe5f0f2d39117ffa61d7abc53250edae6fa08ad735ac9e251a68f273009e329da6326fcb046be000254a2df7be01038719b5490a32b8db95a330923597a156c5924ae4b50d91a35869ea6c4b0733ae84bf1d2efa3fea905717ee8ff6d05961af7cbc44b724735354e06228f3b752e14a65682e84e3688f8b0d6143b913e9d9f6419296d943302b88f91245e5ffe43eb4ccac4eb36b49c3546524b4003c06693a1fb52f243c3dbf7ad0845c48e5a05f327f1670b2de33da868060d53ead186c4e89e14f5361ccc1717574e6c3e334365698f45d7a350c314d2693e4853f2fc043e1ce6ba38a51feccd4eb4be4f43739fc4308ff3e51da20edf0ee9aacbb1c324c8adcb4b84c0fefba628b72f01153962bf9c41b9282633fb35022eed062623083e6c24281177355d482db972a7a8d62c503386297fc6bc912478d369d45ef033ea68d9a2d6dedb9ba610ceedf565362db64fd3c8e8ed557034042c2352cf08165349ca4d28a84ab21f82f7d41888a3496c06e71a8d767f3047f244a7d641c255dc1ffb3b19c2f6e50c545cda188206e2de5c3aa85d57aa1e4ad7c8b23f14cb1c05732637deca656bd82a7dcb99c78f18a32a89526e3cbae4ed333d86f4bdadde0140eeca7e0ffbb390c08c8430db31e1eb459504ea5362c874c7942abce916b262abbe5522f5dd4313301315443d049335988e0674d5ff957dff34db285d4f72fa11be9d108a1da42723ffd316d021eb699a3778f3d4b430ea60a6c0cddefbf06081259ec6f0326905f5e95c0c42148dc0d744987f35d798c1d6b7ac6ad8919bbcc343bb0960ebf691d91f26624d8139802b9e9f8c53d546540ebda4beed50c513a642a65a00edfb8dafc0804961aaee105cf63ea7f28b9b58afa928ddfcb27dac930397604c778284ead2bf88e77a34f031b09e67a67b50191677b5542eef5f078da78a82788d31bdf19c79267afc160ed862c93688d0d7eac129ebd02fe286e36875fb99a37209eb10c379fc23d1533584283c000707ac89a5fb1dc2cd7b96fa14b32938ec0bf15a9826f428ffd5637c2696f40abf2b24955e7116d5abd0a58f888ad2ca4fcdad9ec3c3c2362d507764611cec804d3286aa3476e9a49c9509897e906d94c0eccc8738cce5f41043647fa658c8ee8a0504d2443e3d4f094753aaa7917d3d9f21a4e7769506efde7755cc4cb729d8ab6fcb057a84ebd826714ae74b7623608a4e7b6e0b3ebeb9f7500f62555f6bcd8dfb23fdbc9cc7a66c69e85a348508b5dc50d3c8122150d0b42902b133bc825e1dde9cfb5753a71e781a649dcad4867d42412160e7036c1a8b5ca5afda559078d7e8c136e915ef492e905060d8258b72803bef59e196427474794f8dcb82037219d4b9fb30b799babf78ae7330bf42fef6ec1400e67f14a0c8b05af235bd1181e20b56c9234b6508f31cdad6a25d75bf6f2b034e12290ade64c374cf18daf90e8534bbe0dc49b880e40b52b7522c9afb7b01c34637b9a6c4d67e804f1f837bc1f78860941c6289ce0bc2a5103efb7bbdcccd1835e559827a539c7deb39ad06533d349fa31b52bd633f5071668ae9c7b3f65096ee044d9abcf911dbe51ec469f715bb39db15cc0b9cb5e7b19087f3265cfff60118e719a80abbfa29bf9fcd043d8d7512a980be8c286150e5c6f4efc5e34a146f751b7eb6f4a0b29b8f3c6960d9528996301d8cc15a6b516f4cf281af9065d37670f6695e50f31ca0ac5616cc7dfd1c949f0309743e26f225e29163e350ea9b59a3cdef3f8034f368e023ce27e87a47062a779cd4438f28b8e79abf3f890f14c848659c71df050a2ab3386c93fe8f4715c578fefa39c1eba7dc4514749d818e1fcca45546db523841d6e08f2ca103288b6842547b74406d79950349bb67cde9e2f9ba108b89a36e3ecba732053be8f06276a6fc2f2e4bf82b05760b785521ead36267de89eab4b7b5d383766915e67cfbcb65edf23751029b5a758c5929e4e14271a8fac11bdf196758e84fe1b06104c845562468b1510ea4d0511c0aa35e315c883f86ae6aa0b71c317d1dc871531519e9f90656dd66ea99e6065fc9eb27cef7a16edc46b8ab7ab3c4ac5d4e3c8c88d1330cbe0fcbb9db77d5325fcca9ced0e5a6c054da296729a3599e14c1012e8697b0f7740eb89b999133b4a94c692a9ca8ee2ee3b75f9f35d8933c2a371772d04ab25d55e59f6f566a03d8c3de14397fa1f75bba726eb31079735f48878d723a8a4f843d10055300ab7196238e238e172871e857f544249a60ae5314cb9e7324b3054520197fa57e44e1291cf27566ec3e75a0b0db93f1c0c843e0701afd8adccbafac205e6df6066f08ff1e71e517a9c332840bb2c9b5d252bbddf04d50b245755ed432c9ccde8429a553640dad7e7939ae9fd99fbb4dcefadd7e577048d8fdd578dbfceaedbb121ea71a45d0bec1ea031d3794c24fee41cfb8ab6f56dfa660aa0d6e7a78fba05c0b3ab7d2b94d338da1b84cb4c8cbc6e39a16a2369c591fe07a65644d7d3c794def974864f70b159dfcb22fae68ae6a3629cd9c15829ff3c0ccc57bf03e22b10e81ca14ecbb9deae941411bbca5d8bc1002c11aa541dc31ce1ea400d0f99860d8f20ad643987129cbde573fc4be45f9bce1ce40bd0b086b95429f0ebc9a856cdc81fa6e929edbb23b6c18a2b6ff1f89d0317d4dbd1b81bc7cb1b6749aea9c7f999c0d58540e9b8baaa96f05f2fbb0a537dc4f972cc0750da21205870080f2362e68550599581b3a953e2f6f5fbb6c3a1c50d1d8599ff69ee1f0e0aace07eab478d470e9f6ad9133ac5f3c5664e79ea470e6a21d845bb73bbcb5690a29cb14528a9b454504993bc0e9d253082f96571407b5f48a99831a51fcd3f7dcb56619d96bb4ec33addafa8b7c69b9ec12b81df4967e6db510d54b202e87f6b8858bce99041d2f2c6600aa6dea623ba1c1a8e99d64d32d2763294726bb1d4dff2b875fb333e53420e64f0fac1674dff9dbf961c10331911e9844c7f8c07cd6cc4d7c5adf8bef96778c2736a413847083c51c39ba456fbe25a5a911abfdedc96e87566f75f4d409412cd155005e730d71e6099dacf80cfc56dfe280d615f92dad16f84fb150a8727225504f8c3614fb5d7c45a58c96dcbb6ad037cb3fed9a834f89de61ea7ffe79edcacf06e3dd5790908662f9aa7cbcb4e103f4376efe5c0c5db4d2dda51479e5c08f697260ffef3a75bcf280e6a546793593554c803548a685d1fb74dc3ead0858974701938baa72d17b70b3e8d3493243a3f5b2f860f444b6d700742f123e98b286ce9735244cbe8a7bd57a1068bdc89f8345a70b18f8d0b51abc4946a89f8b00e1b05cd4c7736902c7f64e424e4a876bbd406ef0277cd82c761773aeb19b7af516a35a65f473ab8435fce79008588cabfa2c1af770d8ff61c2e8ce483c0f84aae14394fbec3e09851360127f78b6eeaf820803231f0274dd6a7f6a769e03e340ef510c4bb56d39f16c5bf20c921fe9307e2ebbe4cfd522b8f701b2820e914a4d09abea07ab063d3a4fa868321cfc4c36094c8b839494cb2b7b22e193478a1408ef9f80e1176e61fe5965771481631012800477157305763bf5af29ae4ffa4b128eae8fe1be65b706413d36912d0f8562f88ee5e3846b5540d866252bbc443229f135285e589d4aa99d75a5e515b45b1d0e3d0a53eb8d57e855902804acad02cd39be0690de6b00ff4b72d150fb9c292483fb0258a7bf501f68e1d0b9f73b7d3545b7cbea59e169ebe5930c0a2c1e508acb61c489eceb2b310f0495ebae3884f3aca59a0559ac7ac009ac86321b6a37e7d428694f183a3d340d73144665acd6d5fe92b51a97fefb50d7cc416ea82f217b84b649cdc78b3a876dc63a7dfc28977557b5d2ce683f59e8d530bcf7f2ccb6f0f71a57e7f57474c490bf1d5d06253e78085e4de9f6a205b13519cedaa044e0f4eb6f7596db451b78f7a916c8bdf4d63663d091ad296f62f2809a3bbf8b0a651c4959ed7d7c42b540e4a228b58fa6fd5031fe71c23a15fcdba2d111a2e87025361d28a427ba64faff7b7a1ab95efb75eb87809e0942250214dbd676cd4b25e39522853e3bd884f1d1fbbf4e10fe04f5c16b858f8e031990cc8f1bc9a3022a7f212af8b02bde9d9740ec59c31e48c5d1d7596296e9d5ab75a7068915fea976d7083953b1b2fd2a61957c53f22ed1a66a189830fc31c3823d052b5bb66390ed1893156c82dc96702a72684a7af2092225381fde1b3e40730f7083555743d589d492a271ac43a768a01cd1a378f807767797348b164426fefa8825a33e9513f5d5c0800c816cec6b8070309f906dde8384cf46f7ba2a03143688d3e9b5a8e7a62455651eb560834c2759f3321c4a50d6586ec834619983b97c05e94dd444b2dbdd079cbd810656054078fd8464582cfd7914d59d0abb951c625364f28f9c1d6f0ef6f0fe96120eb961f8c30485c6c796377143b266fda18f8a320f31507b208367ed50506813f9585a6833b54786e735537057535708c9294634b5913ed9d3a4e2df1464b681772c94cb372e8ec1abab4311c63fe38f1efd2aac074ea4eecbfbcaee149b89a4f014a1a5e7fb15ad9e0e225d4be157dbbeff5c10067454a6115aacf099e36807296ca41e741841057b5a7c81373c7606ef2228aac857d594623e5e4bc09ddb2e7f633307fb39eaa442eacad3533626196ae8bc573c720d389d00fe088590c482b53e9ca44e0e67b2d17f1c7b0a37ed1ea0dd35fc8ab0290e1707c64f89201b560df87d0dc406aada6af054e665eaa778a95cb77691cc5f059c0cf264834a33e500b1945afc7abb4c91f4a572c681acc08171abe192ffc410d02db281cb312fe24056d06fd538e7e0221dd498ecc113a328f634fd3a445730f70d6b7199fb7a126cc329c1afd04b9cd5488f695fb36df9a77a406fa2aefbd9e68f416696057bbb140fcf256c555ea2f3c1bd3673a3298cbe80e031c1b09f18d71d304c56fc0d3679553f4869c9929d6be231065230cd3db39f13aaa88916ea7b5263b5d4e8ee743051b7a5feba86a73acd57f67cbdcf9eb1bc695e63b29c7a915a7ee040d513bc89955a24a2b664175ac2381ee7a0cf04f5c5ae1ff9a5513d3ba611beedb77b958641f9079f02a830858e9ffadb9f6441540880a3b0039cbdd03fb1d5f2e75693e429cde815213a3d8820dc385c3e7437fa37396844b223a3f3b5490a907be1300da8ca9f14af4915e7289c7bb52ccab29cbd5cbabdaa7d99bcff2571556ec86aa9696e31819f9c832d7121400fa3b6102ecf178db43e6d680be43e7f68f6c57cb2087204742774c36f1e018518fd031c4b9f42df57bdd17e265aaf0d87dcb723e518e914e60937874d2a8d87a0ad04d660bf8af5d9a7a366414ec1466a08b1446a476b4ad9364bc295bf632af5b8780c725afebef4a2a952a305bb6b910661bfb25261505a785f3b89b3b8c9c297b1d1bce5a56198f75d757107b2d1014fa8f9709ae323383aaacc98b82749fa63bd6bb7aeebc15e75960b6fe3da5f98b6cee4a588107cdc9aa7dea79a13040b1800c07ca081095a235ad73d872961c920c12a7697db8877ab64f522103154427e99810d42a4544f3dbd601dad78259bd182d8aa19ca20c06784e88a10e68a5bfde771c661df00fee1a439901fd5a58b4389b7c1c3291408708bfe5cb156050014b646ed5dea0503393844f0229fccb647e044731c0e18173f", 0x1000}, {&(0x7f0000000400)="faf29ccf9a7fe019191524583d392e94b99c27831bbf7199898139c6254478aed0b721f9d80159beabb60df9d5103152d725fa2f70748c1c41806a1452449c14603c2f0fbb92204093832301f9913658ba000ec6cfcd2a26fc2e0f2a2a94c957a30d0502cf8d5b9884448cac4f24261ffb6efc32e9d7edbc6f54e97ce51dd1d9c6d9571c67557fa00ee7732e79153839257b53da1ed58a56d7c423c0", 0x9c}, {&(0x7f0000000580)="9976a511029825b7ef24b6d42dc8e9a09c34ce1e0bbe1320c207494457f86e42efbca853c50012d7e02bbd7b245d2555283be5d872b190cb9b9349f522381e2d5a6c5831e4007b84eefb2c6ec62c137fb3a6bce780e245c3eeb8fdfeb44d4e1f6d8c9e55f881fa7c01cfd6cbc294d959f3c16c480a9704294a884b97c3f5c1669fb6faabca392bee41b1173678338d505ced501f17be54b46231b02b356d987f50535c3df7338dc02b5f20d828e5d16af6c36dc30b", 0xb5}], 0x8, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x38}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xcd}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0x2}}}, 0x24}}, 0x40004)

400.26915ms ago: executing program 4 (id=8856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
getsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})

337.520263ms ago: executing program 3 (id=8857):
r0 = socket$inet6(0xa, 0x3, 0x89)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x4, 0x40000000007, 0x6811221d, 0x100000000, 0x6, 0x200000003, 0xb}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000280)=0x9, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000020601030000000000000000050000000c0007800800124000060000050001000700000000000000030000005400078008000640000005a5060005404e220000060004404e230000180043022f018e56e05a03b309003a511abb02801400024000000000000000000000ffffac1414bb05001500030000001800018014000240fc0200000000000000000000000000000900020073797a300000000011000300"], 0xa4}}, 0x4030)

206.003893ms ago: executing program 0 (id=8858):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2d6600000000000000ff2052000009001f0070687930000000000900ed89fdfffc2e8b80d61d"], 0x2c}}, 0x0)

135.928454ms ago: executing program 4 (id=8859):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x3}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x114, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x8, 0x1}, {0xb, 0xb}, {0x10, 0xb}}, [@TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf2, 0x3, 0x8, 0x0, 0x7, 0x3, 0x6}}, {0x10, 0x2, [0x4, 0x7, 0x0, 0x9, 0x7, 0xfff9]}}, {{0x1c, 0x1, {0xfa, 0x4, 0x3b08, 0x8, 0x1, 0x7, 0x2ddb}}, {0x4}}, {{0x1c, 0x1, {0x10, 0x8, 0xfff, 0x462, 0x0, 0x80000001, 0x3cea000, 0x5}}, {0xe, 0x2, [0x71df, 0x101, 0x17d, 0x9, 0xc5d]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0x80000000, 0x1, 0x40, 0x1, 0x3}}, {0xa, 0x2, [0x80, 0x5bc, 0x2]}}, {{0x1c, 0x1, {0x94, 0xd4, 0x808, 0x7, 0x1, 0x0, 0x2, 0x3}}, {0xa, 0x2, [0x74, 0xe71, 0x3]}}, {{0x1c, 0x1, {0x3, 0x54, 0x4, 0x7fff, 0x0, 0x5, 0xe44, 0x2}}, {0x8, 0x2, [0x7, 0x7]}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r1], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r10, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r9], 0x38}}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)

131.03832ms ago: executing program 0 (id=8860):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) (async)
r1 = socket(0xa, 0x3, 0x4)
sendmmsg$unix(r1, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x10, 0x1, 0x41}}], 0x10}}], 0x1, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x56b6e000) (async)
r3 = socket(0x15, 0x5, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) (async)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2)
recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
sendmsg$inet(r0, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x4, "dadd"}, {0x2, 0x11, "90261cf17d180c5deb1100b4cd8cc3"}]}]}}}], 0x30}, 0x40) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async)
getsockopt$inet_buf(r7, 0x118, 0x4, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000000767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0)

51.400497ms ago: executing program 3 (id=8861):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
socket(0x23, 0x2, 0x7e3)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000a0)

325.983µs ago: executing program 1 (id=8862):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x1, @bcast, @bpq0, 0x10, 'syz0\x00', @bcast, 0x1, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
r2 = socket(0x25, 0x5, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@delqdisc={0x1bc, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xc, 0xb}, {0xd, 0xfff1}, {0x1, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x4, 0x6, 0x2, 0x1, 0xa, 0x7f, 0x6}}, {0x10, 0x2, [0xcb6c, 0x1, 0x7, 0x1, 0x4, 0x7]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x34, 0xe27, 0x2, 0x1000, 0x7d1, 0x6}}, {0x10, 0x2, [0x5, 0x1, 0xcb69, 0x2, 0x80, 0x10]}}, {{0x1c, 0x1, {0xf9, 0xb, 0x9, 0xff, 0x1, 0x200, 0x1e, 0x5}}, {0xe, 0x2, [0x80, 0x2, 0x4, 0x1f5c, 0x6]}}, {{0x1c, 0x1, {0x6, 0x1, 0xd, 0xf, 0x2, 0x1, 0x1, 0x3}}, {0xa, 0x2, [0x7fff, 0xfffa, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x1, 0x6, 0x0, 0x81, 0x9, 0x6}}, {0x10, 0x2, [0x6, 0x1, 0x9, 0x2, 0x5, 0x2]}}, {{0x1c, 0x1, {0x22, 0x2, 0x7f, 0x9, 0x0, 0xffff25f0, 0xc8, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x0, 0x4, 0x7, 0x0, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0xb, 0x1, 0xfff, 0x6, 0x1, 0xffff1d03, 0x1, 0x1}}, {0x6, 0x2, [0x7f]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040084)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x8000, 0x6, 0xce4, 0x5, 0x400}, 0x14)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8808}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="1199af63e7c6", @broadcast}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000540)=0x6, 0x4)
shutdown(r0, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x50)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000680)={r5, 0x0, 0x7, 0x0, 0xff, 0x2, [0x8000000000000000, 0x60, 0x3, 0x3, 0x1, 0x101]})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x4004041)
sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0x4}, {0x1, 0xfff3}, {0xffe2, 0x8}}, [{0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8}, {0x8}, {0x8, 0xb, 0x3221e9df}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'team0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000009c0))
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xc4, r3, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x9, 0x6}, {0x1, 0x2}, {0xc0, 0x1}, {0xc, 0x2}, {0x5, 0x6}, {0x8, 0x7}, {0x8, 0x6}], "0103fd5aa4b058e5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xc, 0x3}, {0x75, 0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x8, 0x3}, {0x8, 0x7}, {0xf7, 0x1}, {0x7, 0x6}, {0x43, 0x5}, {0x3, 0x1}, {0xf8, 0x1}, {0xff, 0x7}, {0xb1, 0x4}, {0x8, 0x5}, {0x3, 0x4}, {0x9, 0x5}, {0x2}, {0x7, 0x3}, {0x9, 0x6}, {0x6, 0x2}, {0xd6, 0x7}], "992b5a5056665cc4"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7, 0x6}, {0x10, 0x4}], "fcbc3b020dd034b2"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4}, {0x81, 0x2}, {0xd1}, {0x21, 0x3}, {0x0, 0x3}, {0xb}, {0x2, 0x4}, {0x1b, 0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0x2}], "2fb8b622d3823dc8"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x9}, {0x7, 0x2}, {0x9, 0x7}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x4}, {0x5, 0x1}, {0x8}, {0x0, 0x3}, {0xfc, 0x1}, {0x5, 0x2}, {0x9, 0x5}, {0xc, 0x5}], "97e6e1a1332124b9"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2}, 0x4000081)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000bc0))
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
sendmsg$SOCK_DESTROY(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd4, 0x15, 0x28a, 0x70bd26, 0x25dfdbff, {0x2c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "ebdc64967fd33759fa79dcb5624a3b58631e2b26b22afa8c7cc91246aafcc97b15288800de75580a021d92d17781a42c94ee2a1dcdd701b3bf77499ed68806294c66f3592c1670a57c815385321d5b1eecc38ca55cfea13de8a53b76438fb5948d456e40c8a69912130bed6ff5c5bbb1bee6ff296798aef84dd244296b9ae3588a0261227787f47c9a54b218b1ac73c218f7b33ff5be4f3d5d35dfd5843f751d6be76d12147abc3ef0881901d0830fa79211e7379ae23d8bd6b9ee3c"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x95}, 0x8040)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000001040)=0xe8)
sendmsg$nl_generic(r2, &(0x7f0000001200)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x11c, 0x40, 0x400, 0x70bd28, 0x25dfdbff, {0x11}, [@generic="e6f958f7edeb0ab34fad765a56186125b7fd88a17a127f92acc6969ffc1cbc3c9a022e8072df3ce442d443e986127ce92074575d87e71afa9938b8efccb3", @generic="3b7dbe36da7fb99b161e76251a07d9ecf56b6555853d71a785307b13ced1e609c9de7eef42e0dbe4fd838b5982554d0006009e5f05a01928a70e371189dc3cfc4bd4d5b4d8fcbed95924c757547430aa8b7c0d9d5dfc685305bd3fa575064870fe9356185bc8c35cfca7fd26203e27f9d229acc3fa55a6e0709f15b6956557d73413cb8e1c53560d2e16cc51654a65f86a0b3ff1f0918b090f4cdafee70233d9d51da14653c05b137cef3e02b33fa37637946a3adf75d74881ce4d552429ef62", @typed={0x8, 0x42, 0x0, 0x0, @uid=r7}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000001240)=0x2, 0x4)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x98, r3, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9a}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

0s ago: executing program 0 (id=8863):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
splice(r3, &(0x7f0000000000)=0x380000, r4, &(0x7f0000000040)=0xfbde, 0x2, 0x1) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r7) (async)
sendmsg$alg(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991", 0x2}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x1, 0x5, 0x1], 0x3}, {0x1, [0x1, 0x1, 0x7, 0x1, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8)

kernel console output (not intermixed with test programs):

ered promiscuous mode
[  612.239174][T28976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6420'.
[  612.505947][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6427'.
[  612.531857][T29003] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  612.544756][ T5820] Bluetooth: hci2: command tx timeout
[  612.598162][T29012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6430'.
[  612.658091][T29004] bridge3: port 1(veth7) entered blocking state
[  612.709813][T29004] bridge3: port 1(veth7) entered disabled state
[  612.729464][T29004] veth7: entered allmulticast mode
[  612.737667][T29004] veth7: entered promiscuous mode
[  612.756461][T29019] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6432'.
[  612.764825][T29010] bridge3: port 2(veth0_to_bond) entered blocking state
[  612.786778][T29010] bridge3: port 2(veth0_to_bond) entered disabled state
[  612.814401][T29010] veth0_to_bond: entered allmulticast mode
[  612.823484][T29010] veth0_to_bond: entered promiscuous mode
[  613.018661][T29032] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  613.018925][T29036] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6438'.
[  613.031155][T29032] netlink: 'syz.1.6436': attribute type 1 has an invalid length.
[  613.086439][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4c0800: rx timeout, send abort
[  613.260846][T29053] bond0: Error: Cannot enslave bond to itself.
[  613.482155][T29072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6448'.
[  613.586690][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4c3400: rx timeout, send abort
[  613.595242][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4c0800: abort rx timeout. Force session deactivation
[  613.781764][T29096] syzkaller0: entered promiscuous mode
[  613.798921][T29096] syzkaller0: entered allmulticast mode
[  614.094958][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4c3400: abort rx timeout. Force session deactivation
[  614.584934][T29143] netlink: 'syz.2.6466': attribute type 32 has an invalid length.
[  614.675738][T29153] netlink: 'syz.4.6468': attribute type 3 has an invalid length.
[  614.691380][T29153] netlink: 'syz.4.6468': attribute type 1 has an invalid length.
[  614.703517][T29153] NCSI netlink: No device for ifindex 830110067
[  614.816837][T29162] netlink: 'syz.0.6472': attribute type 16 has an invalid length.
[  614.824947][T29162] netlink: 'syz.0.6472': attribute type 3 has an invalid length.
[  615.593567][T29203] syzkaller0: entered promiscuous mode
[  615.604190][T29203] syzkaller0: entered allmulticast mode
[  615.939012][T29223] __nla_validate_parse: 12 callbacks suppressed
[  615.939030][T29223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6496'.
[  615.989759][T29228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.008615][T29228] syzkaller0: entered promiscuous mode
[  616.015927][T29228] syzkaller0: entered allmulticast mode
[  616.016658][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6494'.
[  616.090983][T29227] veth0_to_team: entered promiscuous mode
[  616.099700][T29227] veth0_to_team: left promiscuous mode
[  616.115356][T29225] tipc: Resetting bearer <eth:syzkaller0>
[  616.126264][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6499'.
[  616.151781][T29224] tipc: Resetting bearer <eth:syzkaller0>
[  616.191511][T29224] tipc: Disabling bearer <eth:syzkaller0>
[  616.245463][T29240] tipc: Started in network mode
[  616.254909][T29240] tipc: Node identity 0667e96a5ee1, cluster identity 4711
[  616.262243][T29240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.275052][T29240] syzkaller0: entered promiscuous mode
[  616.280532][T29240] syzkaller0: entered allmulticast mode
[  616.327761][T29240] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  616.353524][T29245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6503'.
[  616.411627][T29240] tipc: Resetting bearer <eth:syzkaller0>
[  616.425811][T29237] tipc: Resetting bearer <eth:syzkaller0>
[  616.437531][T29258] sctp: [Deprecated]: syz.0.6505 (pid 29258) Use of struct sctp_assoc_value in delayed_ack socket option.
[  616.437531][T29258] Use struct sctp_sack_info instead
[  616.478713][T29237] tipc: Disabling bearer <eth:syzkaller0>
[  616.509368][T29255] bridge4: the hash_elasticity option has been deprecated and is always 16
[  616.597001][T29263] netlink: 'syz.3.6508': attribute type 12 has an invalid length.
[  616.618347][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.630395][T29263] netlink: 'syz.3.6508': attribute type 12 has an invalid length.
[  616.645774][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.659937][T29263] netlink: 'syz.3.6508': attribute type 12 has an invalid length.
[  616.660897][T29265] syzkaller0: entered promiscuous mode
[  616.668230][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.673269][T29265] syzkaller0: entered allmulticast mode
[  616.679163][T29265] 0: reclassify loop, rule prio 0, protocol 800
[  616.699343][T29263] netlink: 'syz.3.6508': attribute type 12 has an invalid length.
[  616.718507][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.730236][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.755631][T29263] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.6508'.
[  616.952409][T29284] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  617.053148][T29299] ip6t_rpfilter: unknown options
[  618.889636][T29324] bond1: option mode: invalid value (133)
[  618.896812][T29324] bond1 (unregistering): Released all slaves
[  619.084417][T29341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.257715][T29358] lo: Caught tx_queue_len zero misconfig
[  619.397072][T29364] syzkaller1: entered promiscuous mode
[  619.427600][T29364] syzkaller1: entered allmulticast mode
[  619.489162][T29373] validate_nla: 30 callbacks suppressed
[  619.489183][T29373] netlink: 'syz.1.6542': attribute type 11 has an invalid length.
[  619.607729][T29370] netlink: 'syz.2.6540': attribute type 29 has an invalid length.
[  619.692882][T29370] netlink: 'syz.2.6540': attribute type 29 has an invalid length.
[  619.892198][T29394] block nbd0: not configured, cannot reconfigure
[  619.935536][T29397] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.948282][T29397] bridge_slave_0 (unregistering): left allmulticast mode
[  620.005249][T29397] bridge_slave_0 (unregistering): left promiscuous mode
[  620.037608][T29397] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.078233][T29409] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  620.106578][T29407] Bluetooth: MGMT ver 1.23
[  620.177798][T29414] netlink: 'syz.2.6549': attribute type 1 has an invalid length.
[  620.306586][T29414] 8021q: adding VLAN 0 to HW filter on device bond2
[  620.362697][T29417] bond2: (slave ip6erspan1): making interface the new active one
[  620.375244][T29417] bond2: (slave ip6erspan1): Enslaving as an active interface with an up link
[  620.511201][T29436] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  620.549656][T29436] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.557358][T29436] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.571295][T29436] bridge0: entered allmulticast mode
[  620.714878][T29447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.747403][T29447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  620.829881][T29453] netlink: 'syz.4.6558': attribute type 21 has an invalid length.
[  620.917089][T29452] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  621.116710][T29455] bond1: option all_slaves_active: invalid value (222)
[  621.143098][T29455] bond1 (unregistering): Released all slaves
[  621.850378][T29496] __nla_validate_parse: 44 callbacks suppressed
[  621.850399][T29496] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6570'.
[  621.930063][T29498] netlink: 'syz.2.6571': attribute type 18 has an invalid length.
[  621.946789][T21079] IPVS: starting estimator thread 0...
[  621.998008][  T160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  622.022069][  T160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  622.054546][T29499] IPVS: using max 36 ests per chain, 86400 per kthread
[  622.084767][  T160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  622.093512][  T160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  622.219404][T29501] netlink: 'syz.0.6572': attribute type 1 has an invalid length.
[  622.252128][T29501] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6572'.
[  622.295806][T29501] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6572'.
[  622.325991][T29501] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6572'.
[  622.360647][T29511] batadv_slave_0: Caught tx_queue_len zero misconfig
[  622.482623][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6578'.
[  622.536686][T29520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6580'.
[  622.639034][T29522] netlink: 'syz.3.6581': attribute type 1 has an invalid length.
[  622.738325][T29522] 8021q: adding VLAN 0 to HW filter on device bond1
[  622.788844][T29527] vlan2: entered promiscuous mode
[  622.793921][T29527] bond1: entered promiscuous mode
[  622.802483][T29527] vlan2: entered allmulticast mode
[  622.811792][T29527] bond1: entered allmulticast mode
[  622.889211][T29522] bond1: (slave bridge2): making interface the new active one
[  622.914176][T29522] bridge2: entered promiscuous mode
[  622.964258][T29522] bridge2: entered allmulticast mode
[  623.003187][T29522] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  623.258374][T29562] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6588'.
[  623.307500][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6588'.
[  623.355059][T29564] netlink: 'syz.1.6590': attribute type 32 has an invalid length.
[  623.362912][T29564] netlink: 776 bytes leftover after parsing attributes in process `syz.1.6590'.
[  623.451228][T29565] netlink: 'syz.1.6590': attribute type 32 has an invalid length.
[  623.513180][T29565] netlink: 776 bytes leftover after parsing attributes in process `syz.1.6590'.
[  623.929708][T29589] macvlan2: entered promiscuous mode
[  623.968381][T29589] macvlan2: entered allmulticast mode
[  623.977050][T29589] bond2: entered promiscuous mode
[  623.998325][T29589] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  624.018037][T29589] bond2: left promiscuous mode
[  624.051595][T29597] : entered promiscuous mode
[  624.148216][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  624.160784][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  624.284950][T29601] netlink: zone id is out of range
[  624.311824][T29601] netlink: del zone limit has 4 unknown bytes
[  625.181538][T29657] validate_nla: 3 callbacks suppressed
[  625.181557][T29657] netlink: 'syz.3.6618': attribute type 1 has an invalid length.
[  625.239143][T29618] IPVS: fo: FWM 3 0x00000003 - no destination available
[  625.264971][T21079] IPVS: starting estimator thread 0...
[  625.281574][T29657] 8021q: adding VLAN 0 to HW filter on device bond2
[  625.352947][T29666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  625.374504][T29670] IPVS: using max 29 ests per chain, 69600 per kthread
[  625.580094][T29688] netlink: 'syz.2.6624': attribute type 12 has an invalid length.
[  625.690707][T29695] sit0: entered promiscuous mode
[  625.712063][T29703] netlink: 'syz.4.6632': attribute type 10 has an invalid length.
[  625.726225][T29695] netlink: 'syz.3.6629': attribute type 1 has an invalid length.
[  625.735784][T29704] netlink: 'syz.4.6632': attribute type 10 has an invalid length.
[  625.747001][T29704] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.754663][T29704] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.811930][T29704] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.819170][T29704] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.826702][T29704] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.833847][T29704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.855688][T29710] netlink: 'syz.1.6634': attribute type 1 has an invalid length.
[  625.870117][T29709] Cannot find add_set index 2 as target
[  625.881833][T29704] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  625.891551][T29703] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.898892][T29703] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.922530][T29710] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  625.925939][T29721] openvswitch: netlink: IPv4 tun info is not correct
[  626.248528][T29750] netlink: 'syz.2.6645': attribute type 1 has an invalid length.
[  626.260439][T29750] netlink: 'syz.2.6645': attribute type 1 has an invalid length.
[  626.273505][T29750] netlink: 'syz.2.6645': attribute type 8 has an invalid length.
[  626.301629][T29753] ieee802154 phy1 wpan1: encryption failed: -22
[  626.338015][T29758] geneve2: entered promiscuous mode
[  626.343369][T29758] geneve2: entered allmulticast mode
[  626.556658][T29778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.748397][T29797] IPv6: sit1: Disabled Multicast RS
[  626.821279][T29804] netlink: 'syz.3.6661': attribute type 30 has an invalid length.
[  626.881427][ T9918] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  626.915430][ T9918] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  626.941185][ T9918] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  626.970025][ T9918] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  627.042638][T29819] __nla_validate_parse: 15 callbacks suppressed
[  627.042658][T29819] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6667'.
[  627.112349][T29823] IPv6: NLM_F_CREATE should be specified when creating new route
[  627.194642][T29823] bond3: entered promiscuous mode
[  627.202817][T29823] bond3: entered allmulticast mode
[  627.224867][T29823] 8021q: adding VLAN 0 to HW filter on device bond3
[  627.251469][T29837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6666'.
[  627.402531][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6673'.
[  627.476305][T29850] mac80211_hwsim hwsim72 wlan1: Caught tx_queue_len zero misconfig
[  627.586212][T29863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6679'.
[  627.603535][T29849] bond0: entered allmulticast mode
[  627.609982][T29849] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode
[  627.677337][T29870] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6678'.
[  627.872464][T29886] IPv6: sit1: Disabled Multicast RS
[  627.879620][T29886] sit1: entered allmulticast mode
[  627.989008][T29889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6686'.
[  627.998386][T29889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6686'.
[  628.121075][T29891] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  630.321386][T29840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  630.333786][T29860] validate_nla: 3 callbacks suppressed
[  630.333804][T29860] netlink: 'syz.4.6678': attribute type 1 has an invalid length.
[  630.355464][T29877] netlink: 'syz.0.6682': attribute type 1 has an invalid length.
[  630.375375][T29881] netlink: 'syz.3.6684': attribute type 1 has an invalid length.
[  630.383124][T29881] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6684'.
[  630.778151][T29919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6694'.
[  630.816881][T29919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6694'.
[  630.931284][T29928] xt_connbytes: Forcing CT accounting to be enabled
[  631.386844][T29961] nbd: illegal input index 2958377
[  631.713952][T29982] syzkaller1: entered promiscuous mode
[  631.734436][T29982] syzkaller1: entered allmulticast mode
[  631.797333][T29985] bridge_slave_0: invalid flags given to default FDB implementation
[  631.900297][T29997] IPv6: NLM_F_CREATE should be specified when creating new route
[  632.686811][T30048] __nla_validate_parse: 7 callbacks suppressed
[  632.686828][T30048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6732'.
[  632.687670][T30043] ip6gre2: entered promiscuous mode
[  632.724439][T30043] netlink: 'syz.2.6735': attribute type 5 has an invalid length.
[  632.959926][T30068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6739'.
[  633.067791][T30077] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6742'.
[  633.086854][T30077] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6742'.
[  633.338514][T30100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6747'.
[  633.648847][T30121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6752'.
[  633.715854][T30134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6754'.
[  633.733621][T30121] 8021q: adding VLAN 0 to HW filter on device bond4
[  633.859024][T30143] netlink: 'syz.1.6756': attribute type 1 has an invalid length.
[  633.867285][T30143] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6756'.
[  633.922742][T30142] netlink: 'syz.1.6756': attribute type 1 has an invalid length.
[  633.941207][T30142] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6756'.
[  633.948427][T30151] bridge1: entered promiscuous mode
[  633.961656][T30151] bridge1: entered allmulticast mode
[  634.045688][T30142] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6756'.
[  634.243336][T30167] netlink: 'syz.1.6764': attribute type 1 has an invalid length.
[  634.803111][T30167] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  634.821362][T30167] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  634.851418][T30167] bond3: (slave ip6gre1): making interface the new active one
[  634.862297][T30167] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  634.875785][T30185] netlink: 'syz.4.6767': attribute type 12 has an invalid length.
[  634.885272][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.899301][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.909502][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.921496][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  634.950682][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  634.974567][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  635.035002][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  635.052309][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  635.192653][T30221] IPVS: Error connecting to the multicast addr
[  635.369203][T30237] x_tables: duplicate underflow at hook 3
[  635.651230][T30258] syzkaller0: entered promiscuous mode
[  635.666670][T30258] syzkaller0: entered allmulticast mode
[  635.942907][T30279] netlink: 'syz.0.6798': attribute type 16 has an invalid length.
[  635.962737][T30279] netlink: 'syz.0.6798': attribute type 17 has an invalid length.
[  636.119008][T30279] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.342009][T30279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.371404][T30279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.477069][T30279] bridge1: left promiscuous mode
[  636.482063][T30279] bridge1: left allmulticast mode
[  636.518546][T27637] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.530920][ T9918] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.542739][ T9918] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.556063][ T9918] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  636.792571][T30325] bond4 (unregistering): Released all slaves
[  636.900099][T30332] IPv6: Can't replace route, no match found
[  636.904295][T30333] netlink: 'syz.2.6812': attribute type 9 has an invalid length.
[  636.906508][T30332] IPv6: Can't replace route, no match found
[  637.099758][T30346] block nbd0: not configured, cannot reconfigure
[  637.147754][T30337] vcan1: entered promiscuous mode
[  637.162044][T30337] vcan1: entered allmulticast mode
[  637.275189][T30351] bond1: option miimon: invalid value (18446744073709551585)
[  637.319256][T30351] bond1: option miimon: allowed values 0 - 2147483647
[  637.328230][T30351] bond1 (unregistering): Released all slaves
[  637.359488][T30349] syzkaller0: entered promiscuous mode
[  637.365753][T30349] syzkaller0: entered allmulticast mode
[  637.440001][T30351] netlink: 'syz.4.6818': attribute type 4 has an invalid length.
[  637.640948][T30372] netlink: 'syz.3.6824': attribute type 1 has an invalid length.
[  637.678311][T30372] netlink: 'syz.3.6824': attribute type 2 has an invalid length.
[  637.872539][T30392] xt_TCPMSS: Only works on TCP SYN packets
[  638.424378][T30439] xt_TCPMSS: Only works on TCP SYN packets
[  638.431218][T30433] __nla_validate_parse: 16 callbacks suppressed
[  638.431245][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6844'.
[  638.465885][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6843'.
[  638.678820][T30448] bond1: ARP target 1.0.0.0 is already present
[  638.718544][T30455] xt_ecn: cannot match TCP bits for non-tcp packets
[  638.720803][T30448] bond1: option arp_ip_target: invalid value (1)
[  638.746181][T30448] bond1 (unregistering): Released all slaves
[  638.767852][T30462] netlink: 'syz.1.6852': attribute type 4 has an invalid length.
[  638.817501][T30457] syzkaller0: entered promiscuous mode
[  638.823010][T30457] syzkaller0: entered allmulticast mode
[  638.867071][T30462] netlink: 'syz.1.6852': attribute type 4 has an invalid length.
[  639.041197][T30483] netlink: 'syz.0.6858': attribute type 2 has an invalid length.
[  639.062796][T30483] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6858'.
[  639.090852][T30483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6858'.
[  639.121021][T30489] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6861'.
[  639.160182][T30492] netlink: 'syz.1.6862': attribute type 11 has an invalid length.
[  639.169896][T30492] netlink: 'syz.1.6862': attribute type 11 has an invalid length.
[  639.183738][T30492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6862'.
[  639.280212][T30500] bond4: invalid ARP target 0.0.0.0 specified for addition
[  639.289715][T30500] bond4: option arp_ip_target: invalid value (0)
[  639.314776][T30500] bond4 (unregistering): Released all slaves
[  639.505392][ T5820] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  639.522583][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6867'.
[  639.861938][T30537] netlink: 'syz.1.6873': attribute type 1 has an invalid length.
[  639.900242][T30537] netlink: 476 bytes leftover after parsing attributes in process `syz.1.6873'.
[  639.975195][T30537] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6873'.
[  640.011049][T30542] netlink: 476 bytes leftover after parsing attributes in process `syz.1.6873'.
[  640.466587][T30590] team0 (unregistering): Port device team_slave_0 removed
[  640.513742][T30590] team0 (unregistering): Port device team_slave_1 removed
[  640.918311][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  640.927526][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  640.936657][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  640.945759][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  641.032025][T30629] syzkaller0: entered promiscuous mode
[  641.038841][T30629] syzkaller0: entered allmulticast mode
[  643.782527][T30616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  643.857964][T30651] __nla_validate_parse: 8 callbacks suppressed
[  643.857984][T30651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6898'.
[  644.009374][T30654] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  644.135128][T30672] syzkaller0: entered promiscuous mode
[  644.150734][T30672] syzkaller0: entered allmulticast mode
[  644.266898][T30680] validate_nla: 4 callbacks suppressed
[  644.266915][T30680] netlink: 'syz.4.6906': attribute type 2 has an invalid length.
[  644.277746][T30683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6908'.
[  644.308804][T30680] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6906'.
[  644.336860][T30686] netlink: 'syz.3.6909': attribute type 1 has an invalid length.
[  644.353861][T30686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6909'.
[  644.442014][T30694] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  644.653273][T30714] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6915'.
[  644.752448][T30716] xt_HMARK: proto mask must be zero with L3 mode
[  645.131318][T30752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6930'.
[  645.179706][T30752] syzkaller0: entered promiscuous mode
[  645.196214][T30752] syzkaller0: entered allmulticast mode
[  645.663507][T30785] netlink: 'syz.1.6941': attribute type 32 has an invalid length.
[  646.477273][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'.
[  646.493150][T30822] xt_nat_checkentry_v0: 1 callbacks suppressed
[  646.493171][T30822] xt_nat: multiple ranges no longer supported
[  646.511996][T30822] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6950'.
[  646.535785][T30822] ieee802154 phy1 wpan1: encryption failed: -22
[  646.603771][T30826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6953'.
[  646.850286][T30838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.015442][T30838] syzkaller0: entered promiscuous mode
[  647.021117][T30838] syzkaller0: entered allmulticast mode
[  647.035082][T30838] tipc: Resetting bearer <eth:syzkaller0>
[  647.049703][T30853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6961'.
[  647.064513][T30854] !
: renamed from dummy0
[  647.077803][T30859] delete_channel: no stack
[  647.097337][T30837] tipc: Resetting bearer <eth:syzkaller0>
[  648.632338][T30837] tipc: Disabling bearer <eth:syzkaller0>
[  648.647504][T11059] tipc: Node number set to 3520840803
[  648.971233][T30911] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  648.998325][T30917] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  649.242926][T30927] __nla_validate_parse: 8 callbacks suppressed
[  649.242939][T30927] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.6979'.
[  649.260497][T30927] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  649.269691][T30927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6979'.
[  649.275929][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6979'.
[  649.852039][T30971] netlink: 'syz.2.6991': attribute type 1 has an invalid length.
[  649.888385][T30971] 8021q: adding VLAN 0 to HW filter on device bond5
[  650.059614][T30982] bridge_slave_0: left allmulticast mode
[  650.066151][T30982] bridge_slave_0: left promiscuous mode
[  650.075531][T30982] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.095472][T30982] bridge_slave_1: left allmulticast mode
[  650.101285][T30982] bridge_slave_1: left promiscuous mode
[  650.108130][T30982] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.136083][T30982] bond0: (slave bond_slave_0): Releasing backup interface
[  650.197696][T30982] bond0: (slave bond_slave_1): Releasing backup interface
[  650.252918][T30982] team0: Port device team_slave_0 removed
[  650.283247][T30982] team0: Port device team_slave_1 removed
[  650.313561][T30982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  650.341127][T30982] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.352410][T30982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.361552][T30982] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.403852][T30982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  650.566662][T31013] openvswitch: netlink: Message has 1 unknown bytes.
[  650.573407][T31013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.661140][T31024] netlink: 'syz.4.7008': attribute type 5 has an invalid length.
[  650.735180][T31026] netlink: 'syz.1.7010': attribute type 1 has an invalid length.
[  650.746492][T31026] netlink: 'syz.1.7010': attribute type 2 has an invalid length.
[  650.755995][T31026] netlink: 'syz.1.7010': attribute type 1 has an invalid length.
[  650.765470][T31026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7010'.
[  651.008334][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7017'.
[  651.065547][T31046] netlink: 'syz.4.7017': attribute type 1 has an invalid length.
[  651.158459][T31053] x_tables: unsorted underflow at hook 4
[  651.170654][T31055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7021'.
[  651.267620][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'.
[  651.278068][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'.
[  651.415035][T31070] syzkaller0: entered promiscuous mode
[  651.417871][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7029'.
[  651.430393][T31076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7029'.
[  651.433447][T31070] syzkaller0: entered allmulticast mode
[  651.491210][T31070] 0: reclassify loop, rule prio 0, protocol 800
[  651.512596][T31084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.717683][T31098] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  652.235135][T31126] Cannot find add_set index 2 as target
[  652.307161][T31129] netlink: 'syz.4.7045': attribute type 1 has an invalid length.
[  652.671609][T31161] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  652.715728][T31161] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  653.645947][T31215] bond0: Caught tx_queue_len zero misconfig
[  653.814640][T31223] netlink: 'syz.0.7071': attribute type 1 has an invalid length.
[  654.371278][T31267] __nla_validate_parse: 7 callbacks suppressed
[  654.371297][T31267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7082'.
[  654.409955][T31261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7080'.
[  654.652019][T31274] tc_dump_action: action bad kind
[  654.658788][T31284] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20000
[  655.087511][T31311] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7094'.
[  655.103032][T31311] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7094'.
[  655.118871][T31311] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  655.149263][T31311] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7094'.
[  655.164778][T31311] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7094'.
[  655.176319][T31311] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7094'.
[  655.280274][T31326] netlink: 'syz.2.7097': attribute type 11 has an invalid length.
[  655.952754][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7111'.
[  656.377876][T31403] netlink: 'syz.1.7119': attribute type 1 has an invalid length.
[  656.388651][T31403] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7119'.
[  656.414851][T31405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7120'.
[  656.499174][T31414] netlink: 'syz.4.7123': attribute type 1 has an invalid length.
[  656.536703][T31414] bond1: entered promiscuous mode
[  656.550987][T31414] bond1: entered allmulticast mode
[  656.571418][T31414] 8021q: adding VLAN 0 to HW filter on device bond1
[  656.628489][T31414] bridge1: entered promiscuous mode
[  656.639035][T31414] bridge1: entered allmulticast mode
[  656.645802][T27637] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  656.659165][T31414] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  656.697260][T31427] bridge2: entered promiscuous mode
[  656.702646][T31427] bridge2: entered allmulticast mode
[  656.772478][T31427] bond1: (slave bridge2): Enslaving as a backup interface with a down link
[  656.791143][ T9918] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  657.162961][T31462] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004
[  657.209600][T31466] sctp: [Deprecated]: syz.1.7138 (pid 31466) Use of int in maxseg socket option.
[  657.209600][T31466] Use struct sctp_assoc_value instead
[  658.223801][T31534] netlink: 'syz.2.7156': attribute type 2 has an invalid length.
[  658.245881][T31538] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  658.291908][T31534] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  658.318188][T31534] bond6: (slave lo): Enslaving as an active interface with an up link
[  658.343619][T31534] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  658.458838][T31552] syzkaller0: entered promiscuous mode
[  658.465831][T31552] syzkaller0: entered allmulticast mode
[  658.687906][T31566] netlink: 'syz.4.7165': attribute type 10 has an invalid length.
[  658.700622][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.719955][T31566] veth0_macvtap: left promiscuous mode
[  658.756454][T31568] team0: Caught tx_queue_len zero misconfig
[  658.783831][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.941111][T31576] erspan1: entered allmulticast mode
[  659.303416][T31607] bond7: entered promiscuous mode
[  659.318225][T31607] bond7: entered allmulticast mode
[  659.322936][T31615] netlink: 'syz.0.7181': attribute type 1 has an invalid length.
[  659.337519][T31607] 8021q: adding VLAN 0 to HW filter on device bond7
[  659.340880][T31615] x_tables: duplicate underflow at hook 2
[  659.468561][T31623] __nla_validate_parse: 15 callbacks suppressed
[  659.468581][T31623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7184'.
[  659.532415][T31628] 8021q: adding VLAN 0 to HW filter on device team0
[  659.549420][T31625] openvswitch: netlink: Flow actions attr not present in new flow.
[  659.732744][T31640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7188'.
[  659.796833][T31643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7189'.
[  659.827174][T31643] netlink: 'syz.3.7189': attribute type 7 has an invalid length.
[  659.839943][T31643] netlink: 'syz.3.7189': attribute type 8 has an invalid length.
[  659.848713][T31643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7189'.
[  660.039017][T31663] netlink: 404 bytes leftover after parsing attributes in process `syz.2.7197'.
[  660.061099][T31665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7198'.
[  660.070204][T31663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7197'.
[  660.081938][T31663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7197'.
[  660.092262][T31663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7197'.
[  660.093386][T31668] sctp: [Deprecated]: syz.4.7199 (pid 31668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.093386][T31668] Use struct sctp_sack_info instead
[  660.121956][T31665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7198'.
[  660.205063][T31672] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.212722][T31672] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.347806][T31685] block nbd0: Unsupported socket: should be TCP or UNIX.
[  660.400310][T31685] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  660.526970][T31697] netlink: 'syz.1.7208': attribute type 10 has an invalid length.
[  660.617847][T31699] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  661.035680][T31738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  661.462320][T31767] bond0: (slave wlan1): Releasing backup interface
[  661.470920][T31767] mac80211_hwsim hwsim65 wlan1 (unregistering): left allmulticast mode
[  661.653567][T31785] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  661.723690][T31785] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  662.073113][T31817] pimreg: entered allmulticast mode
[  662.400937][T31843] bond8: option all_slaves_active: invalid value (222)
[  662.410185][T31843] bond8 (unregistering): Released all slaves
[  662.437683][T31846] syzkaller0: entered promiscuous mode
[  662.443294][T31846] syzkaller0: entered allmulticast mode
[  662.753967][T31868] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  662.836228][T31873] netlink: 'syz.0.7265': attribute type 1 has an invalid length.
[  663.020056][T31890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.112756][T31896] x_tables: duplicate underflow at hook 1
[  663.295189][T31910] netlink: 'syz.1.7276': attribute type 1 has an invalid length.
[  663.562678][T31925] can: request_module (can-proto-4) failed.
[  663.575303][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.606943][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.645961][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.660710][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.703194][T31937] sctp: [Deprecated]: syz.0.7285 (pid 31937) Use of int in maxseg socket option.
[  663.703194][T31937] Use struct sctp_assoc_value instead
[  664.312274][T31987] macsec1: entered promiscuous mode
[  664.342435][T31987] bridge0: entered promiscuous mode
[  664.361323][T31987] macsec1: entered allmulticast mode
[  664.367972][T31987] bridge0: entered allmulticast mode
[  664.383836][T31987] bridge0: port 1(macsec1) entered blocking state
[  664.398397][T31987] bridge0: port 1(macsec1) entered disabled state
[  664.425563][T31987] bridge0: left allmulticast mode
[  664.431315][T31987] bridge0: left promiscuous mode
[  664.437112][T32009] netlink: 'syz.3.7301': attribute type 10 has an invalid length.
[  664.593196][T32009] bond0: (slave wlan1): Opening slave failed
[  664.709948][T32011] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  664.729804][T32011] bond2 (unregistering): Released all slaves
[  664.828978][T32030] __nla_validate_parse: 23 callbacks suppressed
[  664.828999][T32030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7305'.
[  665.007820][T32033] bridge7: port 1(veth9) entered blocking state
[  665.038127][T32043] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7306'.
[  665.046397][T32033] bridge7: port 1(veth9) entered disabled state
[  665.053792][T32033] veth9: entered allmulticast mode
[  665.061935][T32033] veth9: entered promiscuous mode
[  665.070491][T32030] veth0_to_bond: left allmulticast mode
[  665.078507][T32030] veth0_to_bond: left promiscuous mode
[  665.085526][T32030] bridge3: port 2(veth0_to_bond) entered disabled state
[  665.103121][T32030] bridge7: port 2(veth0_to_bond) entered blocking state
[  665.113843][T32030] bridge7: port 2(veth0_to_bond) entered disabled state
[  665.122691][T32030] veth0_to_bond: entered allmulticast mode
[  665.132516][T32030] veth0_to_bond: entered promiscuous mode
[  665.157581][T32041] syzkaller0: entered promiscuous mode
[  665.164652][T32041] syzkaller0: entered allmulticast mode
[  665.286979][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7313'.
[  665.561109][T32085] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  665.625031][T32086] netlink: 'syz.1.7321': attribute type 10 has an invalid length.
[  665.637216][T32086] bridge_slave_1: left allmulticast mode
[  665.642966][T32086] bridge_slave_1: left promiscuous mode
[  665.651391][T32086] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.666920][T32086] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  665.715765][T32098] syzkaller0: entered promiscuous mode
[  665.721279][T32098] syzkaller0: entered allmulticast mode
[  667.911138][T32035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  668.022173][T32106] netlink: 'syz.4.7327': attribute type 21 has an invalid length.
[  668.031684][T32106] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7327'.
[  668.115149][T32111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7330'.
[  668.296749][T32130] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7337'.
[  668.331990][T32134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7338'.
[  668.445184][T32146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7340'.
[  668.483408][T32147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7340'.
[  668.496551][T32146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7340'.
[  669.523859][T32212] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  669.544815][T32212] bridge0: entered allmulticast mode
[  669.687626][T32231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.737792][T32235] netlink: 'syz.3.7372': attribute type 2 has an invalid length.
[  669.744376][T32236] netlink: 'syz.2.7371': attribute type 1 has an invalid length.
[  670.027393][T32246] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  670.077152][T32249] syzkaller0: entered promiscuous mode
[  670.082720][T32249] syzkaller0: entered allmulticast mode
[  670.208153][T32252] netlink: 'syz.3.7376': attribute type 1 has an invalid length.
[  670.278782][T32252] 8021q: adding VLAN 0 to HW filter on device bond4
[  670.344515][T32263] bond4: (slave ip6erspan0): making interface the new active one
[  670.353683][T32263] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  670.814449][T32290] __nla_validate_parse: 5 callbacks suppressed
[  670.814467][T32290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7387'.
[  670.869859][T32293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7388'.
[  670.894145][T32290] openvswitch: netlink: Flow actions attr not present in new flow.
[  682.547253][T32300] Bluetooth: hci5: command 0x0406 tx timeout
[  682.547652][T32299] Bluetooth: hci4: command 0x0406 tx timeout
[  685.589569][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  687.666732][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  692.756464][T32307] tipc: Failed to remove unknown binding: 66,1,1/0:1094557688/1094557690
[  692.808235][T32313] bridge0: port 1(gretap0) entered blocking state
[  692.815607][T32313] bridge0: port 1(gretap0) entered disabled state
[  692.822238][T32313] gretap0: entered allmulticast mode
[  692.853926][T32313] gretap0: entered promiscuous mode
[  692.892499][T32321] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7393'.
[  693.015178][T32327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7396'.
[  693.140727][T32340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7399'.
[  693.155240][T32340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7399'.
[  693.163475][T32342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7400'.
[  693.164767][T32340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7399'.
[  693.426913][T32365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7405'.
[  693.444983][T32365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7405'.
[  693.471407][T32363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7406'.
[  693.490720][T32363] veth0_virt_wifi: entered promiscuous mode
[  693.571787][T32375] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  693.581124][T32375] team0: Device macvlan2 is already an upper device of the team interface
[  693.791353][T32387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7412'.
[  693.852536][T32398] syzkaller0: entered promiscuous mode
[  693.858986][T32398] syzkaller0: entered allmulticast mode
[  693.867332][T32389] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  694.158509][T32415] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  694.249116][T32423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  694.340791][T32434] netlink: 'syz.3.7424': attribute type 1 has an invalid length.
[  694.437282][T32444] netlink: 'syz.4.7428': attribute type 1 has an invalid length.
[  694.468161][T32432] netlink: 'syz.2.7426': attribute type 1 has an invalid length.
[  694.480593][T32444] netlink: 'syz.4.7428': attribute type 1 has an invalid length.
[  694.513208][T32444] netlink: 'syz.4.7428': attribute type 1 has an invalid length.
[  694.542235][T32454] netlink: 'syz.3.7424': attribute type 1 has an invalid length.
[  694.581710][T32444] netlink: 'syz.4.7428': attribute type 2 has an invalid length.
[  694.693380][T32434] bond5: (slave gretap1): making interface the new active one
[  694.741102][T32434] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  695.251954][T32488] vlan2: entered allmulticast mode
[  695.262228][T32488] bridge8: entered allmulticast mode
[  695.560063][T32503] netlink: 'syz.2.7444': attribute type 16 has an invalid length.
[  695.601508][T32503] netlink: 'syz.2.7444': attribute type 17 has an invalid length.
[  695.676043][T32503] bridge0: port 1(gretap0) entered blocking state
[  695.682630][T32503] bridge0: port 1(gretap0) entered forwarding state
[  695.692569][T32503] bond0: left allmulticast mode
[  695.698254][T32503] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.719197][T32503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  695.918760][T32537] xt_hashlimit: max too large, truncated to 1048576
[  696.391160][T32563] netlink: 'syz.0.7459': attribute type 7 has an invalid length.
[  696.450725][T32563] tipc: Cannot configure node identity twice
[  696.478991][T32563] tipc: Cannot configure node identity twice
[  696.507693][T32564] tipc: Cannot configure node identity twice
[  696.525924][T32564] tipc: Cannot configure node identity twice
[  696.926943][T32594] syzkaller1: entered promiscuous mode
[  696.944833][T32594] syzkaller1: entered allmulticast mode
[  697.407394][T32629] tc_dump_action: action bad kind
[  697.511728][T27048] block nbd0: Receive control failed (result -32)
[  697.723307][T32651] bond9 (unregistering): Released all slaves
[  698.091385][T32679] __nla_validate_parse: 23 callbacks suppressed
[  698.091405][T32679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'.
[  698.121088][T32679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7494'.
[  698.396254][T32703] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7499'.
[  698.418333][T32703] NCSI netlink: No device for ifindex 131092
[  698.428025][T32700] veth7: entered allmulticast mode
[  698.446594][T32709] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7499'.
[  698.466099][T32709] NCSI netlink: No device for ifindex 131092
[  698.605578][T32720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.921892][T32713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  699.047936][T32745] syzkaller1: entered promiscuous mode
[  699.053558][T32745] syzkaller1: entered allmulticast mode
[  699.505314][T32764] syzkaller1: entered promiscuous mode
[  699.510892][T32764] syzkaller1: entered allmulticast mode
[  699.778113][  T308] IPv6: Can't replace route, no match found
[  701.562754][T32719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  701.720122][  T316] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000
[  701.799351][  T316] 8021q: adding VLAN 0 to HW filter on device bond2
[  701.859283][  T327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7522'.
[  702.013704][  T337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7526'.
[  702.182277][  T344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7526'.
[  702.280073][  T355] openvswitch: netlink: IP tunnel dst address not specified
[  702.588416][  T373] IPv6: addrconf: prefix option has invalid lifetime
[  702.595213][  T373] IPv6: addrconf: prefix option has invalid lifetime
[  702.705061][  T380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7541'.
[  702.718047][  T382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7542'.
[  702.972263][  T394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7545'.
[  703.068441][  T396] can: request_module (can-proto-5) failed.
[  703.120503][  T396] can: request_module (can-proto-5) failed.
[  703.192913][  T408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7550'.
[  703.257646][  T414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7552'.
[  703.407959][  T420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7553'.
[  703.449406][  T424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7554'.
[  703.843470][  T454] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7566'.
[  703.857311][  T460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7566'.
[  704.066870][  T471] validate_nla: 8 callbacks suppressed
[  704.066890][  T471] netlink: 'syz.0.7569': attribute type 39 has an invalid length.
[  704.158261][  T482] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7572'.
[  704.167910][  T482] openvswitch: netlink: Flow key attr not present in new flow.
[  704.189304][  T477] netlink: get zone limit has 4 unknown bytes
[  704.485426][  T494] netlink: 'syz.3.7573': attribute type 1 has an invalid length.
[  704.493359][  T494] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7573'.
[  704.688795][  T515] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7581'.
[  704.733954][  T514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7579'.
[  704.819213][  T515] netlink: 'syz.3.7581': attribute type 83 has an invalid length.
[  705.217021][  T549] SET target dimension over the limit!
[  705.856187][  T592] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  705.897466][  T592] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  705.939631][  T600] x_tables: ip6_tables: mh match: only valid for protocol 135
[  705.959383][  T602] x_tables: ip6_tables: mh match: only valid for protocol 135
[  705.972661][  T601] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  705.981479][  T598] sctp: [Deprecated]: syz.1.7600 (pid 598) Use of struct sctp_assoc_value in delayed_ack socket option.
[  705.981479][  T598] Use struct sctp_sack_info instead
[  706.011686][  T601] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  706.031690][  T597] sctp: [Deprecated]: syz.1.7600 (pid 597) Use of struct sctp_assoc_value in delayed_ack socket option.
[  706.031690][  T597] Use struct sctp_sack_info instead
[  706.090923][  T601] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  706.121658][  T601] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  706.135736][  T601] netlink: 'syz.0.7599': attribute type 29 has an invalid length.
[  707.020921][  T674] bond3: entered promiscuous mode
[  707.027968][  T674] 8021q: adding VLAN 0 to HW filter on device bond3
[  707.063990][  T674] 8021q: adding VLAN 0 to HW filter on device bond3
[  707.072317][  T674] bond3: (slave vcan2): The slave device specified does not support setting the MAC address
[  707.083837][  T674] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  707.101229][  T674] bond3: (slave vcan2): making interface the new active one
[  707.113190][  T674] vcan2: entered promiscuous mode
[  707.119878][  T674] bond3: (slave vcan2): Enslaving as an active interface with an up link
[  707.213689][  T686] syzkaller1: entered promiscuous mode
[  707.221761][  T686] syzkaller1: entered allmulticast mode
[  707.332241][  T692] syzkaller0: entered promiscuous mode
[  707.340368][  T692] syzkaller0: entered allmulticast mode
[  707.455189][  T700] syzkaller0: entered promiscuous mode
[  707.460815][  T700] syzkaller0: entered allmulticast mode
[  707.566662][  T704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.688248][  T654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  709.718028][  T704] __nla_validate_parse: 16 callbacks suppressed
[  709.718049][  T704] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7625'.
[  709.814949][  T707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7628'.
[  710.005401][  T728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7627'.
[  710.006344][  T721] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  710.027362][  T721] bond9 (unregistering): Released all slaves
[  710.039376][  T728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7627'.
[  710.062324][  T726] validate_nla: 66 callbacks suppressed
[  710.062342][  T726] netlink: 'syz.3.7631': attribute type 10 has an invalid length.
[  710.168450][  T726] team0: Port device vxcan1 added
[  710.393372][  T743] netlink: 'syz.1.7637': attribute type 9 has an invalid length.
[  710.401278][  T743] netlink: 'syz.1.7637': attribute type 11 has an invalid length.
[  710.409952][  T743] netlink: 'syz.1.7637': attribute type 12 has an invalid length.
[  710.467858][  T743] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.7637'.
[  710.479919][  T746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7639'.
[  710.497399][  T748] netlink: 'syz.3.7638': attribute type 1 has an invalid length.
[  710.499858][  T743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7637'.
[  710.523108][  T746] bridge_slave_0 (unregistering): left allmulticast mode
[  710.564849][  T746] bridge_slave_0 (unregistering): left promiscuous mode
[  710.582220][  T746] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.672830][  T748] syzkaller0: entered promiscuous mode
[  710.680333][  T748] syzkaller0: entered allmulticast mode
[  710.700120][  T769] syzkaller0: entered promiscuous mode
[  710.712563][  T769] syzkaller0: entered allmulticast mode
[  710.729323][  T767] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7644'.
[  710.978523][  T786] netlink: 'syz.1.7646': attribute type 21 has an invalid length.
[  710.986478][  T786] IPv6: NLM_F_CREATE should be specified when creating new route
[  711.013176][  T786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  711.020457][  T786] IPv6: NLM_F_CREATE should be set when creating new route
[  711.027750][  T786] IPv6: NLM_F_CREATE should be set when creating new route
[  711.035011][  T786] IPv6: NLM_F_CREATE should be set when creating new route
[  711.086030][  T792] netlink: 'syz.1.7646': attribute type 21 has an invalid length.
[  711.093942][  T792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  711.206900][  T802] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  711.234798][  T802] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  711.262410][  T810] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7654'.
[  711.315637][  T813] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7654'.
[  711.769731][  T855] netlink: 'syz.2.7667': attribute type 4 has an invalid length.
[  711.941547][  T864] syzkaller0: entered promiscuous mode
[  711.947143][  T864] syzkaller0: entered allmulticast mode
[  711.956964][  T864] netlink: 'syz.1.7669': attribute type 1 has an invalid length.
[  712.006387][  T864] 8021q: adding VLAN 0 to HW filter on device bond4
[  712.396320][  T914] IPVS: length: 111 != 24
[  712.409627][  T917] IPVS: length: 111 != 24
[  712.689453][  T937] sctp: [Deprecated]: syz.2.7687 (pid 937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  712.689453][  T937] Use struct sctp_sack_info instead
[  713.225890][  T975] openvswitch: netlink: Invalid VLAN frame
[  713.236839][  T975] openvswitch: netlink: Invalid VLAN frame
[  713.277216][  T978] netlink: 'syz.1.7698': attribute type 7 has an invalid length.
[  713.352407][  T986] xt_CT: You must specify a L4 protocol and not use inversions on it
[  713.372233][  T984] �����9o��+���4�: renamed from lo
[  713.412657][  T989] "syz.3.7701" (989) uses obsolete ecb(arc4) skcipher
[  713.657055][ T1011] xt_hashlimit: size too large, truncated to 1048576
[  713.920398][ T1030] netem: change failed
[  714.634998][ T1072] 8021q: adding VLAN 0 to HW filter on device bond6
[  714.870281][ T1092] __nla_validate_parse: 18 callbacks suppressed
[  714.870299][ T1092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7728'.
[  714.897364][ T1092] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7728'.
[  714.932067][ T1102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7731'.
[  714.995210][ T1102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7731'.
[  715.230361][ T1122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7739'.
[  715.249880][ T1122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7739'.
[  715.280730][ T1122] validate_nla: 8 callbacks suppressed
[  715.280747][ T1122] netlink: 'syz.3.7739': attribute type 14 has an invalid length.
[  715.302490][ T1130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7739'.
[  715.322009][ T1122] netlink: 'syz.3.7739': attribute type 13 has an invalid length.
[  715.469637][ T1136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7743'.
[  715.538339][ T1139] syzkaller1: entered promiscuous mode
[  715.545364][ T1139] syzkaller1: entered allmulticast mode
[  715.556149][ T1136] netlink: 'syz.3.7743': attribute type 4 has an invalid length.
[  715.566404][ T1136] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7743'.
[  715.801879][ T1165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7751'.
[  716.211160][ T1193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.264977][ T1193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.376405][ T1199] sit0: entered promiscuous mode
[  716.446115][ T1204] pim6reg: entered allmulticast mode
[  716.458271][ T1205] pim6reg: left allmulticast mode
[  716.620014][ T1220] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  716.700285][ T1226] syzkaller0: entered promiscuous mode
[  716.742088][ T1226] syzkaller0: entered allmulticast mode
[  716.762261][ T1224] syzkaller0: entered promiscuous mode
[  716.780531][ T1224] syzkaller0: entered allmulticast mode
[  717.070357][ T1250] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  717.180890][ T1258] openvswitch: netlink: Key 6 has unexpected len 34 expected 2
[  717.223431][ T1263] geneve2: entered promiscuous mode
[  717.246257][ T1259] netlink: set zone limit has 4 unknown bytes
[  717.538632][ T1279] bridge0: port 1(gretap0) entered blocking state
[  717.547388][ T1279] bridge0: port 1(gretap0) entered disabled state
[  717.561755][ T1279] gretap0: entered allmulticast mode
[  717.569492][ T1279] gretap0: entered promiscuous mode
[  717.814689][ T1309] macvtap1: entered promiscuous mode
[  717.827030][ T1309] macvtap1: entered allmulticast mode
[  717.832444][ T1309] veth1_vlan: entered allmulticast mode
[  718.044942][ T1333] netlink: 'syz.0.7791': attribute type 1 has an invalid length.
[  718.216746][ T1338] veth0: entered promiscuous mode
[  718.328085][ T1352] syzkaller0: entered promiscuous mode
[  718.346890][ T1352] syzkaller0: entered allmulticast mode
[  718.468681][ T1338] veth0: left promiscuous mode
[  718.978024][ T1400] netlink: 'syz.3.7807': attribute type 1 has an invalid length.
[  719.261197][ T1425] bond0: entered promiscuous mode
[  719.272084][ T1425] bond_slave_0: entered promiscuous mode
[  719.281043][ T1425] bond_slave_1: entered promiscuous mode
[  719.287954][ T1429] netlink: 'syz.2.7818': attribute type 1 has an invalid length.
[  719.288069][ T1425] bridge0: entered promiscuous mode
[  719.304173][ T1429] NCSI netlink: No device for ifindex 0
[  719.309868][ T1425] bond0: left promiscuous mode
[  719.316028][ T1425] bond_slave_0: left promiscuous mode
[  719.321730][ T1425] bond_slave_1: left promiscuous mode
[  719.329319][ T1425] bridge0: left promiscuous mode
[  719.335795][ T1432] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  719.608562][ T1453] netlink: 'syz.0.7824': attribute type 8 has an invalid length.
[  719.634806][ T1455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  719.876262][ T1473] __nla_validate_parse: 17 callbacks suppressed
[  719.876282][ T1473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7831'.
[  719.919246][ T1476] netlink: 'syz.3.7832': attribute type 1 has an invalid length.
[  719.982490][ T1476] bond7: entered promiscuous mode
[  719.991883][ T1476] bond7: entered allmulticast mode
[  719.998478][ T1476] 8021q: adding VLAN 0 to HW filter on device bond7
[  720.077028][ T1476] bridge7: entered promiscuous mode
[  720.082406][ T1476] bridge7: entered allmulticast mode
[  720.089430][T24501] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  720.115314][ T1476] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  720.136094][ T1484] netlink: 'syz.2.7834': attribute type 2 has an invalid length.
[  720.145179][ T1486] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.7835'.
[  720.155949][ T1485] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7835'.
[  720.168004][ T1481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7833'.
[  720.183591][ T1481] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  720.195729][ T1481] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  720.203450][ T1481] gretap1: entered promiscuous mode
[  720.213124][ T1481] gretap1: entered allmulticast mode
[  720.236565][T24501] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  720.269305][ T1476] bridge8: entered promiscuous mode
[  720.275698][ T1476] bridge8: entered allmulticast mode
[  720.281829][ T1476] bond7: (slave bridge8): Enslaving as a backup interface with a down link
[  720.385926][ T1498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7838'.
[  720.633634][ T1520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7844'.
[  720.687394][ T1527] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7844'.
[  720.883026][ T1538] netlink: 'syz.1.7847': attribute type 20 has an invalid length.
[  720.894950][ T1538] IPv6: NLM_F_CREATE should be specified when creating new route
[  720.907649][ T1534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7848'.
[  720.922119][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7850'.
[  720.959404][ T1542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7848'.
[  721.053665][ T1542] netlink: 'syz.3.7848': attribute type 2 has an invalid length.
[  721.075069][ T1542] �9: entered promiscuous mode
[  721.883188][ T1589] xt_HMARK: proto mask must be zero with L3 mode
[  722.041946][  T160] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  722.096041][  T160] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  722.107745][  T160] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  722.117021][  T160] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  722.133852][ T5901] IPVS: starting estimator thread 0...
[  722.166626][ T1611] netlink: 'syz.3.7872': attribute type 2 has an invalid length.
[  722.179172][ T1612] openvswitch: netlink: IP tunnel dst address not specified
[  722.238405][ T1605] IPVS: using max 35 ests per chain, 84000 per kthread
[  722.259438][ T1617] openvswitch: netlink: IP tunnel dst address not specified
[  722.279227][ T1619] netlink: 'syz.0.7875': attribute type 1 has an invalid length.
[  722.326999][ T1619] bond4: (slave bridge4): making interface the new active one
[  722.338868][ T1619] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  722.410158][ T1628] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  722.417948][ T1626] netlink: 'syz.3.7878': attribute type 4 has an invalid length.
[  722.559182][   T29] audit: type=1107 audit(1772442732.882:6): pid=1635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='���!9y��f�bzv����/�:��~rԽmf/,��G
w!:�O9��
���
[  722.559182][   T29] o���)�k�};R�-��.������ҽ�W�$*��)�;z¯����^�v��(	�
EE{�'���;9xZEӻ�)��y��
[  722.559182][   T29] 6�X����,�W�s'
[  722.701869][ T1647] netlink: 'syz.4.7886': attribute type 1 has an invalid length.
[  722.732760][ T1647] netlink: 'syz.4.7886': attribute type 2 has an invalid length.
[  722.911053][ T1657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.958048][ T1657] netlink: 'syz.3.7890': attribute type 29 has an invalid length.
[  723.087765][ T1671] syzkaller1: entered allmulticast mode
[  723.106051][ T1676] netlink: 'syz.1.7894': attribute type 17 has an invalid length.
[  723.117444][ T1675] nbd: illegal input index -8454144
[  723.202052][ T1671] syzkaller0: entered promiscuous mode
[  723.234066][ T1671] syzkaller0: entered allmulticast mode
[  723.450132][ T1707] xt_nat: multiple ranges no longer supported
[  724.874693][ T1715] netlink: 'syz.2.7903': attribute type 29 has an invalid length.
[  724.953631][ T1719] __nla_validate_parse: 11 callbacks suppressed
[  724.953652][ T1719] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.7904'.
[  725.093870][ T1726] syzkaller0: entered promiscuous mode
[  725.120238][ T1726] syzkaller0: entered allmulticast mode
[  725.142674][ T1726] 0: reclassify loop, rule prio 0, protocol 800
[  725.161942][ T1728] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7907'.
[  725.175751][ T1726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7908'.
[  725.366283][ T1744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7913'.
[  725.730129][ T1764] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7918'.
[  725.905894][ T1775] sit0: left promiscuous mode
[  725.930566][ T1779] validate_nla: 6 callbacks suppressed
[  725.930583][ T1779] netlink: 'syz.4.7922': attribute type 1 has an invalid length.
[  725.964224][ T1779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7922'.
[  725.973445][ T1779] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7922'.
[  726.004188][ T1779] netlink: 658 bytes leftover after parsing attributes in process `syz.4.7922'.
[  726.032038][ T1775] bridge0: port 1(gretap0) entered blocking state
[  726.038606][ T1775] bridge0: port 1(gretap0) entered forwarding state
[  726.046257][ T1775] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.053356][ T1775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.062064][ T1775] bridge0: left allmulticast mode
[  726.078997][ T1775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  726.620474][ T1819] netlink: 'syz.2.7934': attribute type 1 has an invalid length.
[  726.635985][ T1820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7933'.
[  726.646419][ T1819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7934'.
[  726.822613][ T1822] macvlan4: entered promiscuous mode
[  726.868212][ T1822] macvlan4: entered allmulticast mode
[  726.897574][ T1822] bond4: (slave macvlan4): Opening slave failed
[  726.911989][ T1836] netlink: 'syz.0.7937': attribute type 1 has an invalid length.
[  727.089560][ T1852] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003
[  727.117805][ T1841] udevd[1841]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  727.140581][ T1825] syzkaller1: entered promiscuous mode
[  727.154722][ T1825] syzkaller1: entered allmulticast mode
[  727.207245][ T1840] udevd[1840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  727.859859][ T1892] sctp: [Deprecated]: syz.3.7952 (pid 1892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  727.859859][ T1892] Use struct sctp_sack_info instead
[  728.117229][ T1909] geneve3: entered promiscuous mode
[  728.129177][ T1909] geneve3: entered allmulticast mode
[  728.151404][T27635] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  728.179812][T27635] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  728.200476][T27635] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  728.212176][T27635] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  728.308388][ T1926] bond5: Invalid ad_actor_system MAC address.
[  728.315514][ T1926] bond5: option ad_actor_system: invalid value (1)
[  728.323925][ T1926] bond5 (unregistering): Released all slaves
[  728.355972][ T1932] netlink: 'syz.1.7964': attribute type 1 has an invalid length.
[  728.390962][ T1932] netlink: 'syz.1.7964': attribute type 2 has an invalid length.
[  729.016761][ T1977] netlink: 'syz.2.7973': attribute type 1 has an invalid length.
[  729.038936][ T1977] 8021q: adding VLAN 0 to HW filter on device bond10
[  729.048408][ T1977] bond10: entered allmulticast mode
[  729.063315][ T1978] bond10: (slave ip6gretap1): making interface the new active one
[  729.071341][ T1978] ip6gretap1: entered allmulticast mode
[  729.078871][ T1978] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  729.479214][ T2001] sctp: [Deprecated]: syz.2.7980 (pid 2001) Use of int in max_burst socket option.
[  729.479214][ T2001] Use struct sctp_assoc_value instead
[  731.165525][ T1915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  731.208650][ T1999] __nla_validate_parse: 11 callbacks suppressed
[  731.208670][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7980'.
[  731.408951][ T2011] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20002
[  732.050732][ T2037] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7988'.
[  732.207021][ T2015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  732.243272][ T2015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  732.697239][ T2015] veth1_vlan: left allmulticast mode
[  732.803504][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  732.820035][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.829872][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  732.840005][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  732.849425][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.860271][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  732.885235][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  732.907970][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.926462][ T2052] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7992'.
[  732.934236][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  732.987697][ T2052] vlan2: entered allmulticast mode
[  732.996776][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  733.010919][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  733.035255][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  733.280917][ T2074] netlink: 'syz.4.7996': attribute type 1 has an invalid length.
[  733.289360][ T2074] netlink: 'syz.4.7996': attribute type 4 has an invalid length.
[  733.297813][ T2074] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7996'.
[  733.517348][ T2090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8001'.
[  733.527528][ T2089] delete_channel: no stack
[  734.419892][ T2017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  734.623359][ T2107] syzkaller1: entered promiscuous mode
[  734.629219][ T2107] syzkaller1: entered allmulticast mode
[  734.637091][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8006'.
[  734.651399][ T2107] netlink: 'syz.2.8006': attribute type 32 has an invalid length.
[  734.667970][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8006'.
[  734.721329][ T2107] bond11: option coupled_control: invalid value (73)
[  734.746799][ T2107] bond11 (unregistering): Released all slaves
[  734.780621][ T2119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8010'.
[  734.792697][ T2120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8012'.
[  734.855114][ T2124] netlink: 'syz.3.8011': attribute type 1 has an invalid length.
[  734.871895][ T2124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8011'.
[  735.025391][ T2132] nbd1: detected capacity change from 0 to 127
[  735.108899][T27048] block nbd1: Receive control failed (result -104)
[  735.373673][ T2163] veth0_to_bond: entered allmulticast mode
[  735.396780][ T2163] syzkaller0: entered allmulticast mode
[  735.772338][ T2195] netlink: 'syz.3.8034': attribute type 1 has an invalid length.
[  735.792760][ T2195] netlink: 'syz.3.8034': attribute type 3 has an invalid length.
[  735.807644][ T2195] NCSI netlink: No device for ifindex 813332851
[  735.978795][ T2196] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  736.000667][ T2196] bond8: (slave lo): Enslaving as an active interface with an up link
[  736.012928][ T2196] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  736.052495][ T2195] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  736.693777][ T2257] pim6reg1: entered promiscuous mode
[  736.702523][ T2257] pim6reg1: entered allmulticast mode
[  736.730679][ T2242] __nla_validate_parse: 4 callbacks suppressed
[  736.730695][ T2242] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8044'.
[  736.813936][ T2265] : entered promiscuous mode
[  736.868367][ T2269] netlink: 'syz.0.8049': attribute type 1 has an invalid length.
[  736.880303][ T2269] netlink: 'syz.0.8049': attribute type 1 has an invalid length.
[  737.038105][ T2278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8053'.
[  737.428832][ T2312] netlink: 'syz.2.8062': attribute type 2 has an invalid length.
[  737.438688][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8062'.
[  737.451866][ T2310] netlink: 'syz.1.8063': attribute type 16 has an invalid length.
[  737.535554][   T29] audit: type=1107 audit(1772442747.852:7): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';x�W����c5S�^�Ac�I>O2
[  737.535554][   T29] ΐ���O6�&����^8qf�����\�},UC=my��ј�Qf��_�~0K���Z`�[Uq��"OFA��Ԭ�L�K����"4Mg������:u�4�w�SqH#��Y;���}�հ���sũ aྼt�K��Q�a*@������֎�'
[  737.568781][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8064'.
[  737.593124][ T2310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  737.760138][ T2333] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8068'.
[  737.801546][ T2335] bond8: (slave lo): Releasing backup interface
[  737.828103][ T2335] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  737.845722][ T2335] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  737.903044][ T2335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  738.041812][ T2339] syzkaller0: entered promiscuous mode
[  738.068575][ T2339] syzkaller0: entered allmulticast mode
[  740.094754][ T2406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8090'.
[  740.143842][ T2404] ifb1: left promiscuous mode
[  740.170679][ T2404] ifb1: left allmulticast mode
[  740.219149][ T2419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8090'.
[  740.219333][ T2415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8091'.
[  740.416508][ T2432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8096'.
[  740.733123][ T2479] delete_channel: no stack
[  741.072931][ T2515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8111'.
[  741.126914][ T2517] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  741.332250][ T5831] block nbd3: Receive control failed (result -107)
[  741.347262][ T2530] nbd3: detected capacity change from 0 to 127
[  741.366135][ T2329] block nbd3: Dead connection, failed to find a fallback
[  741.373444][ T2329] block nbd3: shutting down sockets
[  741.407788][ T2329] blk_print_req_error: 138 callbacks suppressed
[  741.407806][ T2329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.479467][ T2329] buffer_io_error: 138 callbacks suppressed
[  741.479484][ T2329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  741.521824][ T2329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.532852][ T2329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  741.541403][ T2329] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.567199][ T2329] Buffer I/O error on dev nbd3, logical block 2, async page read
[  741.593145][ T2329] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.635171][ T2329] Buffer I/O error on dev nbd3, logical block 3, async page read
[  741.649205][ T2329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.677321][ T2329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  741.691079][ T2329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.702337][ T2329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  741.713169][ T2329] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.745203][ T2329] Buffer I/O error on dev nbd3, logical block 2, async page read
[  741.753179][ T2329] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.786799][ T2329] Buffer I/O error on dev nbd3, logical block 3, async page read
[  741.804744][ T2329] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.822959][ T2329] Buffer I/O error on dev nbd3, logical block 0, async page read
[  741.861444][ T2329] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  741.875892][ T2579] Bluetooth: MGMT ver 1.23
[  741.911232][ T2329] Buffer I/O error on dev nbd3, logical block 1, async page read
[  741.938233][ T2329] ldm_validate_partition_table(): Disk read failed.
[  741.953062][ T2329] Dev nbd3: unable to read RDB block 0
[  741.961094][ T2329]  nbd3: unable to read partition table
[  741.986205][ T2329] ldm_validate_partition_table(): Disk read failed.
[  742.001072][ T2329] Dev nbd3: unable to read RDB block 0
[  742.047630][ T2329]  nbd3: unable to read partition table
[  742.095469][ T2598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  742.203484][ T2603] __nla_validate_parse: 3 callbacks suppressed
[  742.203504][ T2603] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8129'.
[  742.233857][ T2612] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8131'.
[  742.276898][ T2608] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8131'.
[  742.392763][ T2625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8133'.
[  742.495061][ T2634] sctp: [Deprecated]: syz.3.8136 (pid 2634) Use of int in maxseg socket option.
[  742.495061][ T2634] Use struct sctp_assoc_value instead
[  742.836012][ T2662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8141'.
[  742.860694][ T2662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8141'.
[  742.920506][ T2664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8143'.
[  743.170300][ T2688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8148'.
[  743.196214][ T2692] validate_nla: 2 callbacks suppressed
[  743.196232][ T2692] netlink: 'syz.2.8149': attribute type 8 has an invalid length.
[  743.215106][ T2688] netlink: 'syz.3.8148': attribute type 4 has an invalid length.
[  743.418056][ T2705] syzkaller0: entered promiscuous mode
[  743.434106][ T2705] syzkaller0: entered allmulticast mode
[  743.488502][ T2709] bond5: option mode: invalid value (133)
[  743.497726][ T2709] bond5 (unregistering): Released all slaves
[  744.001566][ T2756] xfrm0: entered allmulticast mode
[  744.007338][ T2758] netlink: 'syz.3.8162': attribute type 3 has an invalid length.
[  744.030971][ T2758] netlink: 'syz.3.8162': attribute type 3 has an invalid length.
[  744.137085][ T2773] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  744.150824][ T2773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8165'.
[  744.160464][ T2773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8165'.
[  744.914987][ T2841] tipc: New replicast peer: 255.255.255.255
[  744.929635][ T2841] tipc: Enabled bearer <udp:syz2>, priority 10
[  745.178643][ T2878] netlink: 'syz.1.8182': attribute type 4 has an invalid length.
[  745.993448][T19339] tipc: Node number set to 112767097
[  746.056119][ T2899] netlink: 'syz.3.8189': attribute type 1 has an invalid length.
[  746.143518][ T2901] bond9 (unregistering): Released all slaves
[  746.227859][ T2899] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  746.608254][ T2946] vcan0: tx drop: invalid sa for name 0x0000080000000000
[  746.697326][ T2954] netlink: 'syz.0.8202': attribute type 16 has an invalid length.
[  746.709665][ T2947] veth13: entered allmulticast mode
[  746.751262][ T2954] netlink: 'syz.0.8202': attribute type 17 has an invalid length.
[  747.028002][ T1300] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  747.243546][ T2954] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.253425][ T2954] 8021q: adding VLAN 0 to HW filter on device team0
[  747.266428][ T2954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  747.600646][ T2994] xt_hashlimit: max too large, truncated to 1048576
[  747.600863][ T2995] __nla_validate_parse: 14 callbacks suppressed
[  747.600879][ T2995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8210'.
[  747.668490][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8210'.
[  747.680131][ T2995] chnl_net:caif_netlink_parms(): no params data found
[  747.923493][ T3017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8218'.
[  748.273045][ T3041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8225'.
[  748.293123][ T3043] netlink: 'syz.3.8224': attribute type 2 has an invalid length.
[  748.364131][ T3041] netlink: 'syz.1.8225': attribute type 8 has an invalid length.
[  748.786939][ T3067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8232'.
[  748.817659][ T3074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8233'.
[  749.227735][ T3103] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  749.286706][ T3103] bond0: entered promiscuous mode
[  749.291768][ T3103] bond_slave_0: entered promiscuous mode
[  749.298286][ T3103] bond_slave_1: entered promiscuous mode
[  749.310781][ T3103] batadv0: entered promiscuous mode
[  749.317910][ T3103] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  749.335208][ T3103] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  749.366986][ T3103] hsr1: entered promiscuous mode
[  749.370887][ T3109] netlink: get zone limit has 4 unknown bytes
[  749.392312][ T3103] hsr1: entered allmulticast mode
[  749.409659][ T3103] bond0: entered allmulticast mode
[  749.415237][ T3103] bond_slave_0: entered allmulticast mode
[  749.421073][ T3103] bond_slave_1: entered allmulticast mode
[  749.428366][ T3103] batadv0: entered allmulticast mode
[  749.435189][ T3103] 8021q: adding VLAN 0 to HW filter on device hsr1
[  749.443738][ T3103] bond0: left promiscuous mode
[  749.449023][ T3103] bond_slave_0: left promiscuous mode
[  749.454891][ T3103] bond_slave_1: left promiscuous mode
[  749.461123][ T3103] batadv0: left promiscuous mode
[  749.517238][ T3113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  749.606206][ T3113] syzkaller0: entered promiscuous mode
[  749.611719][ T3113] syzkaller0: entered allmulticast mode
[  749.618908][ T3113] tipc: Resetting bearer <eth:syzkaller0>
[  749.628327][ T3122] netlink: 'syz.4.8246': attribute type 29 has an invalid length.
[  749.642848][ T3112] tipc: Resetting bearer <eth:syzkaller0>
[  749.942627][ T3149] netlink: 'syz.4.8252': attribute type 1 has an invalid length.
[  751.319344][ T3112] tipc: Disabling bearer <eth:syzkaller0>
[  751.338960][ T3142] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  751.353694][ T3147] syzkaller0: entered promiscuous mode
[  751.360603][ T3147] syzkaller0: entered allmulticast mode
[  751.435361][ T3159] netlink: 'syz.0.8254': attribute type 1 has an invalid length.
[  751.443143][ T3159] netlink: 'syz.0.8254': attribute type 2 has an invalid length.
[  751.451941][ T3159] netlink: 'syz.0.8254': attribute type 1 has an invalid length.
[  751.459936][ T3159] netlink: 'syz.0.8254': attribute type 3 has an invalid length.
[  751.468759][ T3159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8254'.
[  751.539771][ T3168] netlink: 'syz.3.8253': attribute type 178 has an invalid length.
[  751.570848][ T3157] xt_bpf: check failed: parse error
[  751.669499][ T3175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8259'.
[  751.705859][ T3175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8259'.
[  751.847295][ T3190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8263'.
[  751.872455][ T3190] geneve2: entered promiscuous mode
[  752.787897][ T3251] netlink: 'syz.2.8282': attribute type 1 has an invalid length.
[  752.796471][ T3254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8283'.
[  752.835486][ T3251] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8282'.
[  753.226063][ T3272] tipc: Started in network mode
[  753.230973][ T3272] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711
[  753.248565][ T3272] tipc: Enabled bearer <udp:syz1>, priority 10
[  753.413328][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8289'.
[  753.895151][ T3324] validate_nla: 1 callbacks suppressed
[  753.895169][ T3324] netlink: 'syz.2.8300': attribute type 21 has an invalid length.
[  753.944176][ T3324] IPv6: NLM_F_CREATE should be specified when creating new route
[  753.962326][ T3324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  753.969631][ T3324] IPv6: NLM_F_CREATE should be set when creating new route
[  753.976948][ T3324] IPv6: NLM_F_CREATE should be set when creating new route
[  753.984200][ T3324] IPv6: NLM_F_CREATE should be set when creating new route
[  754.244511][ T5900] tipc: Node number set to 4269801492
[  754.355855][ T3357] netlink: 'syz.4.8309': attribute type 1 has an invalid length.
[  754.368348][ T3355] geneve4: entered promiscuous mode
[  754.373570][ T3355] geneve4: entered allmulticast mode
[  754.381185][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.429044][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.438758][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.455893][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.597235][ T3366] netlink: 'syz.2.8312': attribute type 29 has an invalid length.
[  754.605774][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8312'.
[  754.615713][ T3369] netlink: 'syz.2.8312': attribute type 29 has an invalid length.
[  754.634129][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8312'.
[  754.699177][ T3369] netlink: 'syz.2.8312': attribute type 29 has an invalid length.
[  754.708914][ T3369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8312'.
[  754.842444][ T3380] netlink: 'syz.4.8314': attribute type 13 has an invalid length.
[  754.856145][ T3380] netlink: 'syz.4.8314': attribute type 17 has an invalid length.
[  754.878075][ T3382] x_tables: duplicate underflow at hook 2
[  754.913541][ T3380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  755.066905][ T3404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8320'.
[  755.078106][ T3404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8320'.
[  755.087842][ T3404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8320'.
[  755.097641][ T3404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8320'.
[  755.173126][T19339] IPVS: starting estimator thread 0...
[  755.276046][ T3415] IPVS: using max 31 ests per chain, 74400 per kthread
[  756.091349][ T3472] netlink: 'syz.4.8340': attribute type 4 has an invalid length.
[  756.206825][ T3478] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  756.252085][ T3478] bridge5: the hash_elasticity option has been deprecated and is always 16
[  756.280774][ T3476] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  756.494956][ T3494] netlink: 'syz.3.8348': attribute type 1 has an invalid length.
[  756.502717][ T3494] netlink: 'syz.3.8348': attribute type 1 has an invalid length.
[  756.583877][ T3494] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  756.626906][ T3502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  756.709358][ T3508] xt_cgroup: xt_cgroup: no path or classid specified
[  757.026357][ T3535] syzkaller0: entered promiscuous mode
[  757.031870][ T3535] syzkaller0: entered allmulticast mode
[  757.040787][ T3535] 0: reclassify loop, rule prio 0, protocol 800
[  757.487503][ T3550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  758.030283][ T3580] 8021q: adding VLAN 0 to HW filter on device bond5
[  758.049001][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb19400: rx timeout, send abort
[  758.357126][ T3590] __nla_validate_parse: 39 callbacks suppressed
[  758.357139][ T3590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8376'.
[  758.557267][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb19400: abort rx timeout. Force session deactivation
[  760.559941][ T3553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  760.764380][ T3629] sctp: [Deprecated]: syz.0.8387 (pid 3629) Use of struct sctp_assoc_value in delayed_ack socket option.
[  760.764380][ T3629] Use struct sctp_sack_info instead
[  760.821236][ T3629] sctp: [Deprecated]: syz.0.8387 (pid 3629) Use of struct sctp_assoc_value in delayed_ack socket option.
[  760.821236][ T3629] Use struct sctp_sack_info instead
[  760.884716][T24507] bond1: (slave bridge1): link status up again after 0 ms
[  760.895639][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  760.917884][ T3625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8386'.
[  761.102036][ T3648] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  761.158465][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  761.285533][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  761.330809][ T3661] validate_nla: 1 callbacks suppressed
[  761.330826][ T3661] netlink: 'syz.3.8397': attribute type 1 has an invalid length.
[  761.369041][ T3661] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8397'.
[  761.394834][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  761.507200][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  761.543537][ T3680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8400'.
[  761.642025][ T3682] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8402'.
[  761.718716][ T3682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8402'.
[  761.731260][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  761.741140][ T3690] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8404'.
[  761.741915][ T3682] syzkaller0: entered promiscuous mode
[  761.784681][ T3682] syzkaller0: entered allmulticast mode
[  761.944117][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  762.074731][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  762.188325][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  762.350240][ T3723] netlink: 'syz.0.8413': attribute type 1 has an invalid length.
[  762.611492][ T3739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8417'.
[  762.677922][ T3743] atomic_op ffff88805ca28198 conn xmit_atomic 0000000000000000
[  762.887849][ T3754] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  762.927129][ T3757] netlink: 'syz.3.8422': attribute type 1 has an invalid length.
[  762.975810][ T3757] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  763.736144][ T3816] netlink: 'syz.2.8434': attribute type 1 has an invalid length.
[  764.105020][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8436'.
[  764.191304][ T3832] netlink: 'syz.4.8438': attribute type 39 has an invalid length.
[  764.551740][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8440'.
[  764.578169][ T3841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8440'.
[  764.733594][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8443'.
[  764.743806][ T3851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8443'.
[  764.888768][ T3853] nbd: nbd3 already in use
[  764.893522][ T3853] block nbd3: NBD_DISCONNECT
[  764.900019][ T3853] block nbd3: Send disconnect failed -32
[  765.080451][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8449'.
[  765.174294][ T3873] netlink: 'syz.0.8450': attribute type 9 has an invalid length.
[  765.523516][ T3887] syzkaller0: entered promiscuous mode
[  765.535213][ T3887] syzkaller0: entered allmulticast mode
[  765.596229][ T2295] block nbd1: Possible stuck request ffff8880267f0000: control (read@0,4096B). Runtime 30 seconds
[  765.603489][ T3883] netlink: 'syz.2.8454': attribute type 33 has an invalid length.
[  765.894523][T27635] net_ratelimit: 23 callbacks suppressed
[  765.894543][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  766.038438][ T3893] tipc: Started in network mode
[  766.043484][ T3893] tipc: Node identity 00004000000000000000000000000001, cluster identity 4711
[  766.062988][ T3893] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  766.094197][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  766.206031][ T3906] delete_channel: no stack
[  766.214165][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  766.266015][ T3908] netlink: 'syz.2.8462': attribute type 3 has an invalid length.
[  766.295403][ T3908] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8462'.
[  766.344516][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  766.413813][ T3925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  766.441744][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'.
[  766.453528][ T3921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8465'.
[  766.484879][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  766.502447][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'.
[  766.570774][ T3938] netlink: 'syz.3.8470': attribute type 2 has an invalid length.
[  766.604741][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  766.635776][ T3944] netlink: 'syz.3.8470': attribute type 16 has an invalid length.
[  766.643637][ T3944] netlink: 'syz.3.8470': attribute type 3 has an invalid length.
[  766.715052][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  766.825143][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  766.846283][ T3958] tipc: Cannot configure node identity twice
[  766.852296][ T3958] tipc: Cannot configure node identity twice
[  766.915861][ T3961] bridge0: entered allmulticast mode
[  766.954705][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  767.229043][ T3997] macsec0: entered promiscuous mode
[  767.235029][ T3997] macsec0: entered allmulticast mode
[  767.241366][ T3997] veth1_macvtap: entered allmulticast mode
[  767.252136][ T3997] macsec0: left promiscuous mode
[  767.268375][ T3997] macsec0: left allmulticast mode
[  767.273535][ T3997] veth1_macvtap: left allmulticast mode
[  767.379634][ T4002] netlink: 'syz.3.8488': attribute type 1 has an invalid length.
[  767.453551][ T4008] xt_ipcomp: unknown flags 1D
[  767.459050][ T4008] sch_tbf: burst 0 is lower than device lo mtu (32783) !
[  767.498488][ T4016] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  770.579175][ T4021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  770.590066][ T4043] __nla_validate_parse: 13 callbacks suppressed
[  770.590082][ T4043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8497'.
[  770.778112][ T4104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8511'.
[  770.905801][  T160] net_ratelimit: 32 callbacks suppressed
[  770.905820][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  770.978984][ T4121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8517'.
[  771.030666][ T4122] netlink: 'syz.2.8516': attribute type 2 has an invalid length.
[  771.035469][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  771.040240][ T4122] SET target dimension over the limit!
[  771.175205][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  771.203045][ T4134] netlink: 'syz.4.8522': attribute type 5 has an invalid length.
[  771.216073][ T4137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8520'.
[  771.222173][ T4134] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8522'.
[  771.239847][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8520'.
[  771.376668][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  771.463329][ T4143] syzkaller0: entered promiscuous mode
[  771.484120][ T4143] syzkaller0: entered allmulticast mode
[  771.514653][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  771.885087][   T12] bond1: (slave bridge1): failed to get link speed/duplex
[  772.010490][ T4187] IPVS: Unknown mcast interface: pim6reg0
[  772.044226][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  772.133564][ T4194] sctp: [Deprecated]: syz.2.8535 (pid 4194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  772.133564][ T4194] Use struct sctp_sack_info instead
[  772.138099][ T4196] netlink: 'syz.1.8536': attribute type 1 has an invalid length.
[  772.164136][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  772.175683][ T4198] sctp: [Deprecated]: syz.2.8535 (pid 4198) Use of struct sctp_assoc_value in delayed_ack socket option.
[  772.175683][ T4198] Use struct sctp_sack_info instead
[  772.198081][ T4200] sctp: [Deprecated]: syz.4.8538 (pid 4200) Use of int in max_burst socket option.
[  772.198081][ T4200] Use struct sctp_assoc_value instead
[  772.220092][ T4197] block nbd0: reconnected socket
[  772.220778][ T5831] block nbd0: Receive control failed (result -107)
[  772.276929][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  772.277017][ T4200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8538'.
[  772.357005][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8541'.
[  772.364029][ T4200] syzkaller1: entered promiscuous mode
[  772.371835][ T4200] syzkaller1: entered allmulticast mode
[  772.398986][ T4207] dvmrp1: entered allmulticast mode
[  772.545306][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  772.706212][ T4226] 8021q: VLANs not supported on ipvlan0
[  772.723165][ T4233] netlink: 'syz.4.8549': attribute type 4 has an invalid length.
[  772.809578][ T4238] pim6reg527: entered allmulticast mode
[  773.036921][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8553'.
[  773.198687][ T4256] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8555'.
[  774.051833][ T4320] netlink: 'syz.0.8574': attribute type 1 has an invalid length.
[  774.162622][ T4334] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  774.260642][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806b403800: rx timeout, send abort
[  774.269713][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806b403800: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  774.536069][ T4360] IPVS: Error connecting to the multicast addr
[  774.556000][ T4360] block nbd3: Unsupported socket: should be TCP or UNIX.
[  774.726524][ T4374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.818254][ T4376] syzkaller0: entered promiscuous mode
[  774.823763][ T4376] syzkaller0: entered allmulticast mode
[  774.840278][ T4376] tipc: Resetting bearer <eth:syzkaller0>
[  774.893568][ T4386] netlink: 'syz.2.8590': attribute type 5 has an invalid length.
[  775.009794][ T4376] tipc: Resetting bearer <eth:syzkaller0>
[  776.563977][ T4376] tipc: Disabling bearer <eth:syzkaller0>
[  776.572848][ T4398] __nla_validate_parse: 10 callbacks suppressed
[  776.572866][ T4398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8593'.
[  776.612944][ T4404] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  776.614350][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8596'.
[  776.619496][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  776.638656][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8596'.
[  776.666625][ T4404] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  776.682040][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  776.701899][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  776.714331][  T160] net_ratelimit: 20 callbacks suppressed
[  776.714349][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  776.742377][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  776.774793][ T4404] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  776.784413][ T4404] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  776.801318][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8599'.
[  776.817782][ T4414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8599'.
[  776.818810][ T4404] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  776.839732][ T4404] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  776.854693][   T12] bond1: (slave bridge1): failed to get link speed/duplex
[  776.872929][ T4404] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  776.879116][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8601'.
[  776.899057][ T4404] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  776.976606][   T12] bond1: (slave bridge1): failed to get link speed/duplex
[  777.094218][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  777.204763][T24518] bond1: (slave bridge1): failed to get link speed/duplex
[  777.345691][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  777.465461][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  777.495318][  T160] bond0: (slave bond_slave_0): interface is now down
[  777.504578][  T160] bond0: (slave bond_slave_1): interface is now down
[  777.511275][  T160] bond0: (slave bridge_slave_1): interface is now down
[  777.547431][  T160] bond0: now running without any active interface!
[  777.566706][ T4462] syzkaller1: entered promiscuous mode
[  777.572515][ T4462] syzkaller1: entered allmulticast mode
[  777.735386][T24505] bond1: (slave bridge1): failed to get link speed/duplex
[  777.838594][ T4496] netlink: 'syz.1.8625': attribute type 1 has an invalid length.
[  777.854741][ T4488] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8623'.
[  777.876606][ T4494] netlink: 'syz.1.8625': attribute type 1 has an invalid length.
[  777.885188][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  777.885212][ T4488] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8623'.
[  778.051765][ T4496] bond5: (slave veth11): Enslaving as an active interface with a down link
[  778.155389][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  778.296775][ T4521] delete_channel: no stack
[  778.397380][ T4528] netlink: 'syz.2.8633': attribute type 7 has an invalid length.
[  778.490985][ T4529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8634'.
[  778.511361][ T4525] netlink: 'syz.2.8633': attribute type 7 has an invalid length.
[  778.652692][ T4538] netlink: 'syz.0.8637': attribute type 3 has an invalid length.
[  778.679259][ T4538] netlink: 'syz.0.8637': attribute type 1 has an invalid length.
[  778.689779][ T4541] x_tables: duplicate underflow at hook 1
[  778.841501][ T4542] netlink: 'syz.3.8638': attribute type 4 has an invalid length.
[  779.101365][ T4568] nbd: socks must be embedded in a SOCK_ITEM attr
[  779.162239][ T4568] netlink: 'syz.4.8646': attribute type 2 has an invalid length.
[  779.188206][ T4557] xt_connbytes: Forcing CT accounting to be enabled
[  779.293730][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8648'.
[  779.338937][ T4575] bridge0: port 1(gretap0) entered disabled state
[  779.409760][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  779.426941][ T4588] IPv6: sit1: Disabled Multicast RS
[  779.435189][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  779.451076][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  779.585492][ T4598] netlink: 'syz.3.8653': attribute type 10 has an invalid length.
[  779.674652][ T4577] infiniband syz2: set down
[  779.679525][ T4577] infiniband syz2: added ip6_vti0
[  779.685829][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  779.754146][ T4577] RDS/IB: syz2: added
[  779.759119][ T4577] smc: adding ib device syz2 with port count 1
[  779.771389][ T4577] smc:    ib device syz2 port 1 has pnetid SYZ1 (user defined)
[  779.840929][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  779.857384][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  779.905988][ T4615] netlink: 'syz.4.8657': attribute type 10 has an invalid length.
[  780.106293][ T4615] team0: Device vxcan1 is of different type
[  780.121255][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  780.161081][ T4625] syzkaller1: entered promiscuous mode
[  780.168615][ T4625] syzkaller1: entered allmulticast mode
[  780.395660][ T4634] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  780.407092][ T4634] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  780.500924][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  780.513491][ T4634] bond6: (slave gretap2): making interface the new active one
[  780.527511][ T4634] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  780.560209][ T4648] SET target dimension over the limit!
[  780.571120][ T4643] macvlan2: entered promiscuous mode
[  780.576882][ T4643] macvlan2: entered allmulticast mode
[  780.582814][ T4643] bond6: entered promiscuous mode
[  780.594184][ T4643] gretap2: entered promiscuous mode
[  780.600114][ T4643] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  780.627792][ T4643] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  780.655099][ T4643] bond6: left promiscuous mode
[  780.659889][ T4643] gretap2: left promiscuous mode
[  780.879364][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  780.914920][ T4662] netlink: 'syz.0.8667': attribute type 11 has an invalid length.
[  781.461805][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  781.529882][ T4687] syzkaller0: entered promiscuous mode
[  781.544098][ T4687] syzkaller0: entered allmulticast mode
[  781.758273][T24507] net_ratelimit: 24 callbacks suppressed
[  781.758293][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  781.875334][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  781.919621][ T4721] syzkaller0: entered promiscuous mode
[  781.928940][ T4721] syzkaller0: entered allmulticast mode
[  781.960689][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  782.010594][ T4723] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20000
[  782.064728][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  782.175290][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  782.295242][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  782.317415][ T4743] __nla_validate_parse: 9 callbacks suppressed
[  782.317432][ T4743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8689'.
[  782.415348][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  782.476621][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  782.525079][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  782.608887][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8695'.
[  782.623941][ T4759] xfrm1: entered promiscuous mode
[  782.634298][ T4759] xfrm1: entered allmulticast mode
[  782.656011][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8695'.
[  782.656478][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  782.676923][ T4763] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8696'.
[  782.805706][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  782.870752][ T4774] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  782.937659][ T4577] ip6_vti0 speed is unknown, defaulting to 1000
[  783.049185][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8702'.
[  783.059862][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8702'.
[  783.192450][ T4765] ip6_vti0 speed is unknown, defaulting to 1000
[  783.472808][ T4806] tunl0: Caught tx_queue_len zero misconfig
[  783.647176][ T4815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  783.687087][ T4816] validate_nla: 3 callbacks suppressed
[  783.687106][ T4816] netlink: 'syz.1.8708': attribute type 9 has an invalid length.
[  783.885468][ T4819] netlink: 'syz.3.8711': attribute type 3 has an invalid length.
[  784.299785][ T4852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8719'.
[  784.318480][ T4838] syzkaller0: entered promiscuous mode
[  784.337732][ T4838] syzkaller0: entered allmulticast mode
[  784.515332][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8720'.
[  785.961840][ T4860] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  786.048799][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8723'.
[  786.183849][ T4879] delete_channel: no stack
[  786.360169][   T29] audit: type=1107 audit(1772442796.682:8): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  786.366443][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8731'.
[  786.549416][ T4910] Bluetooth: MGMT ver 1.23
[  786.557947][ T4910] Bluetooth: hci1: too big key_count value 32778
[  786.686518][ T4917] Bluetooth: hci1: expected 478 bytes, got 2 bytes
[  786.801267][T27635] net_ratelimit: 18 callbacks suppressed
[  786.801287][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  786.953276][ T4874] delete_channel: no stack
[  786.994649][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  787.105180][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  787.346710][ T4957] bond7: entered promiscuous mode
[  787.351993][ T4957] 8021q: adding VLAN 0 to HW filter on device bond7
[  787.363061][T24518] bond1: (slave bridge1): failed to get link speed/duplex
[  787.435058][ T4970] delete_channel: no stack
[  787.463949][ T4972] __nla_validate_parse: 1 callbacks suppressed
[  787.463969][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8750'.
[  787.480622][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8750'.
[  787.485604][T27635] bond1: (slave bridge1): failed to get link speed/duplex
[  787.624992][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  787.747206][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  787.818817][ T4996] 8021q: VLANs not supported on ip6tnl0
[  787.874376][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  787.890589][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8755'.
[  787.987335][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  788.005725][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8755'.
[  788.041612][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8755'.
[  788.105608][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  788.165560][ T5020] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  788.268305][ T5024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8763'.
[  788.278810][ T5024] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8763'.
[  788.288764][ T5024] netlink: 'syz.2.8763': attribute type 6 has an invalid length.
[  788.297468][ T5024] netlink: 'syz.2.8763': attribute type 5 has an invalid length.
[  788.305743][ T5024] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8763'.
[  788.321850][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8763'.
[  788.672497][ T5040] syzkaller1: entered promiscuous mode
[  788.698598][ T5040] syzkaller1: entered allmulticast mode
[  788.802799][ T5059] netlink: 'syz.1.8771': attribute type 1 has an invalid length.
[  788.838030][ T5070] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8775'.
[  789.234763][ T5098] gretap0: left allmulticast mode
[  789.255182][ T5098] gretap0: left promiscuous mode
[  789.260422][ T5098] bridge0: port 1(gretap0) entered disabled state
[  789.293320][ T5109] netlink: 'syz.3.8788': attribute type 10 has an invalid length.
[  789.307095][ T5098] bridge_slave_1: left allmulticast mode
[  789.312764][ T5098] bridge_slave_1: left promiscuous mode
[  789.320340][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.336851][ T5098] bond0: (slave bridge0): Releasing backup interface
[  789.429678][ T5115] netlink: 'syz.1.8789': attribute type 1 has an invalid length.
[  789.439876][ T5115] netlink: 'syz.1.8789': attribute type 32 has an invalid length.
[  789.531533][ T5120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  789.868328][ T5114] tipc: Disabling bearer <eth:syzkaller0>
[  789.885521][ T5146] netlink: 'syz.4.8795': attribute type 1 has an invalid length.
[  789.966320][ T5151] x_tables: duplicate underflow at hook 3
[  790.211069][ T5169] x_tables: duplicate underflow at hook 2
[  790.577287][  T160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0
[  790.594648][  T160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0
[  790.603460][  T160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0
[  790.640600][  T160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0
[  790.759335][ T5207] netlink: 'syz.1.8810': attribute type 10 has an invalid length.
[  790.852474][ T5215] netlink: 'syz.0.8814': attribute type 1 has an invalid length.
[  790.874862][ T5213] xt_bpf: check failed: parse error
[  790.882223][ T5219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.903318][ T5215] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  790.915761][ T5215] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  790.963339][ T5222] bond6: (slave bridge5): Enslaving as an active interface with a down link
[  790.987947][ T5222] bond6: (slave gretap1): making interface the new active one
[  790.998382][ T5222] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  791.061355][ T5226] geneve2: entered promiscuous mode
[  791.539338][ T5253] bond10: option lp_interval: invalid value (0)
[  791.590664][ T5253] bond10: option lp_interval: allowed values 1 - 2147483647
[  791.681966][ T5253] bond10 (unregistering): Released all slaves
[  791.787137][T32299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  791.810301][T32299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  791.820744][T32299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  791.855250][T32299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  791.871944][T32299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  791.894409][T24501] net_ratelimit: 25 callbacks suppressed
[  791.894426][T24501] bond1: (slave bridge1): failed to get link speed/duplex
[  791.946198][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  791.971886][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  791.988459][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  792.005219][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  792.019593][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  792.050569][ T5281] netlink: 'syz.4.8833': attribute type 1 has an invalid length.
[  792.161793][ T5293] netlink: 'syz.0.8835': attribute type 1 has an invalid length.
[  792.183556][ T5281] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  792.290444][ T5298] bond7: (slave bridge6): Enslaving as a backup interface with an up link
[  792.314373][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  792.369284][ T5293] bond7: (slave bridge7): Enslaving as a backup interface with a down link
[  792.404705][ T5272] ip6_vti0 speed is unknown, defaulting to 1000
[  792.424624][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  792.452055][ T5293] 8021q: adding VLAN 0 to HW filter on device bond7
[  792.463615][T24507] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  792.556606][T24507] bond1: (slave bridge1): failed to get link speed/duplex
[  792.614715][T24505] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  792.675070][   T12] bond1: (slave bridge1): failed to get link speed/duplex
[  792.806381][ T5324] syzkaller1: entered promiscuous mode
[  792.811901][ T5324] syzkaller1: entered allmulticast mode
[  792.847113][ T5326] netlink: 'syz.1.8843': attribute type 10 has an invalid length.
[  792.895325][T24518] bond1: (slave bridge1): failed to get link speed/duplex
[  793.064423][T24518] bond1: (slave bridge1): failed to get link speed/duplex
[  793.240683][ T5344] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  793.262804][ T5344] team0: Device macvlan4 is already an upper device of the team interface
[  793.279468][ T5354] xt_l2tp: missing protocol rule (udp|l2tpip)
[  793.314680][  T160] bond1: (slave bridge1): failed to get link speed/duplex
[  793.438957][ T5361] __nla_validate_parse: 27 callbacks suppressed
[  793.438976][ T5361] netlink: 401 bytes leftover after parsing attributes in process `syz.3.8851'.
[  793.518264][ T5272] chnl_net:caif_netlink_parms(): no params data found
[  793.679046][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state
[  793.686647][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.696019][ T5272] bridge_slave_0: entered allmulticast mode
[  793.705074][ T5272] bridge_slave_0: entered promiscuous mode
[  793.715002][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state
[  793.722248][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state
[  793.729926][ T5272] bridge_slave_1: entered allmulticast mode
[  793.738022][ T5272] bridge_slave_1: entered promiscuous mode
[  793.789604][ T5272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.808567][ T5272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.892492][ T5382] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8857'.
[  793.959808][ T5272] team0: Port device team_slave_0 added
[  793.969040][ T5272] team0: Port device team_slave_1 added
[  794.028329][ T5388] syzkaller0: entered promiscuous mode
[  794.033838][ T5388] syzkaller0: entered allmulticast mode
[  794.065568][ T5831] Bluetooth: hci3: command tx timeout
[  794.079202][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  794.087428][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.118248][ T5272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  794.167521][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8863'.
[  794.179931][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  794.188466][ T5409] 
[  794.189079][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  794.190796][ T5409] ======================================================
[  794.218841][ T5272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.223636][ T5409] WARNING: possible circular locking dependency detected
[  794.241128][ T5409] syzkaller #0 Not tainted
[  794.245538][ T5409] ------------------------------------------------------
[  794.250277][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8863'.
[  794.252545][ T5409] syz.1.8862/5409 is trying to acquire lock:
[  794.267326][ T5409] ffffffff8fd48c18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0
[  794.276565][ T5409] 
[  794.276565][ T5409] but task is already holding lock:
[  794.283919][ T5409] ffff888047e9b970 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0
[  794.293131][ T5409] 
[  794.293131][ T5409] which lock already depends on the new lock.
[  794.293131][ T5409] 
[  794.303514][ T5409] 
[  794.303514][ T5409] the existing dependency chain (in reverse order) is:
[  794.312512][ T5409] 
[  794.312512][ T5409] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  794.320494][ T5409]        _raw_spin_lock_bh+0x36/0x50
[  794.325780][ T5409]        nr_rt_ioctl+0x215/0xf90
[  794.330704][ T5409]        sock_do_ioctl+0x101/0x320
[  794.335893][ T5409]        sock_ioctl+0x5c6/0x7f0
[  794.340733][ T5409]        __se_sys_ioctl+0xfc/0x170
[  794.345861][ T5409]        do_syscall_64+0x14d/0xf80
[  794.350957][ T5409]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.357357][ T5409] 
[  794.357357][ T5409] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  794.365165][ T5409]        _raw_spin_lock_bh+0x36/0x50
[  794.370449][ T5409]        nr_rt_device_down+0xbe/0x860
[  794.375882][ T5409]        nr_device_event+0x137/0x150
[  794.381164][ T5409]        notifier_call_chain+0x1be/0x400
[  794.386806][ T5409]        __dev_notify_flags+0x16d/0x310
[  794.392387][ T5409]        netif_change_flags+0xe8/0x1a0
[  794.397844][ T5409]        dev_change_flags+0x130/0x260
[  794.403247][ T5409]        dev_ioctl+0x7b4/0x1150
[  794.408117][ T5409]        sock_do_ioctl+0x23e/0x320
[  794.413225][ T5409]        sock_ioctl+0x5c6/0x7f0
[  794.418060][ T5409]        __se_sys_ioctl+0xfc/0x170
[  794.423157][ T5409]        do_syscall_64+0x14d/0xf80
[  794.428252][ T5409]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.434653][ T5409] 
[  794.434653][ T5409] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  794.442545][ T5409]        __lock_acquire+0x15a5/0x2cf0
[  794.447913][ T5409]        lock_acquire+0xf0/0x2e0
[  794.452843][ T5409]        _raw_spin_lock_bh+0x36/0x50
[  794.458120][ T5409]        nr_del_node+0x57d/0xbb0
[  794.463045][ T5409]        nr_rt_ioctl+0xb34/0xf90
[  794.467969][ T5409]        sock_do_ioctl+0x101/0x320
[  794.473067][ T5409]        sock_ioctl+0x5c6/0x7f0
[  794.477902][ T5409]        __se_sys_ioctl+0xfc/0x170
[  794.482996][ T5409]        do_syscall_64+0x14d/0xf80
[  794.488089][ T5409]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.494494][ T5409] 
[  794.494494][ T5409] other info that might help us debug this:
[  794.494494][ T5409] 
[  794.504712][ T5409] Chain exists of:
[  794.504712][ T5409]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  794.504712][ T5409] 
[  794.518519][ T5409]  Possible unsafe locking scenario:
[  794.518519][ T5409] 
[  794.525955][ T5409]        CPU0                    CPU1
[  794.531300][ T5409]        ----                    ----
[  794.536647][ T5409]   lock(&nr_node->node_lock);
[  794.541398][ T5409]                                lock(nr_node_list_lock);
[  794.548490][ T5409]                                lock(&nr_node->node_lock);
[  794.555760][ T5409]   lock(nr_neigh_list_lock);
[  794.560431][ T5409] 
[  794.560431][ T5409]  *** DEADLOCK ***
[  794.560431][ T5409] 
[  794.568553][ T5409] 2 locks held by syz.1.8862/5409:
[  794.573651][ T5409]  #0: ffffffff8fd48c78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0
[  794.583127][ T5409]  #1: ffff888047e9b970 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0
[  794.592781][ T5409] 
[  794.592781][ T5409] stack backtrace:
[  794.598664][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.1.8862 Not tainted syzkaller #0 PREEMPT(full) 
[  794.598686][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  794.598697][ T5409] Call Trace:
[  794.598704][ T5409]  <TASK>
[  794.598710][ T5409]  dump_stack_lvl+0xe8/0x150
[  794.598738][ T5409]  print_circular_bug+0x2e1/0x300
[  794.598764][ T5409]  check_noncircular+0x12e/0x150
[  794.598790][ T5409]  __lock_acquire+0x15a5/0x2cf0
[  794.598815][ T5409]  ? ref_tracker_alloc+0x35c/0x4c0
[  794.598907][ T5409]  lock_acquire+0xf0/0x2e0
[  794.598926][ T5409]  ? nr_del_node+0x57d/0xbb0
[  794.598941][ T5409]  ? nr_del_node+0x247/0xbb0
[  794.598956][ T5409]  ? nr_del_node+0x57d/0xbb0
[  794.598970][ T5409]  _raw_spin_lock_bh+0x36/0x50
[  794.598992][ T5409]  ? nr_del_node+0x57d/0xbb0
[  794.599005][ T5409]  nr_del_node+0x57d/0xbb0
[  794.599028][ T5409]  nr_rt_ioctl+0xb34/0xf90
[  794.599046][ T5409]  ? kasan_quarantine_put+0xbb/0x1f0
[  794.599062][ T5409]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  794.599080][ T5409]  ? apparmor_capable+0x126/0x170
[  794.599135][ T5409]  ? capable+0x88/0xe0
[  794.599155][ T5409]  ? nr_ioctl+0x1b1/0x3b0
[  794.599177][ T5409]  sock_do_ioctl+0x101/0x320
[  794.599196][ T5409]  ? __pfx_sock_do_ioctl+0x10/0x10
[  794.599210][ T5409]  ? freezing_slow_path+0x115/0x160
[  794.599241][ T5409]  sock_ioctl+0x5c6/0x7f0
[  794.599257][ T5409]  ? __pfx_sock_ioctl+0x10/0x10
[  794.599272][ T5409]  ? __fget_files+0x2a/0x420
[  794.599294][ T5409]  ? __fget_files+0x3a0/0x420
[  794.599314][ T5409]  ? __fget_files+0x2a/0x420
[  794.599336][ T5409]  ? bpf_lsm_file_ioctl+0x9/0x20
[  794.599356][ T5409]  ? __pfx_sock_ioctl+0x10/0x10
[  794.599370][ T5409]  __se_sys_ioctl+0xfc/0x170
[  794.599388][ T5409]  do_syscall_64+0x14d/0xf80
[  794.599402][ T5409]  ? trace_irq_disable+0x3b/0x150
[  794.599425][ T5409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.599440][ T5409]  ? clear_bhb_loop+0x40/0x90
[  794.599457][ T5409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.599473][ T5409] RIP: 0033:0x7fae2319c799
[  794.599488][ T5409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.599503][ T5409] RSP: 002b:00007fae213d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  794.599521][ T5409] RAX: ffffffffffffffda RBX: 00007fae23416090 RCX: 00007fae2319c799
[  794.599534][ T5409] RDX: 0000200000000040 RSI: 000000000000890c RDI: 0000000000000004
[  794.599544][ T5409] RBP: 00007fae23232bd9 R08: 0000000000000000 R09: 0000000000000000
[  794.599554][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  794.599564][ T5409] R13: 00007fae23416128 R14: 00007fae23416090 R15: 00007ffccf3bc3f8
[  794.599582][ T5409]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  794.992823][ T5272] hsr_slave_0: entered promiscuous mode
[  795.015441][ T5272] hsr_slave_1: entered promiscuous mode
[  795.021588][ T5272] debugfs: 'hsr0' already exists in 'hsr'
[  795.035400][ T5272] Cannot create hsr debugfs directory
[  795.562616][T24501] bridge_slave_1: left allmulticast mode
[  795.569128][T24501] bridge_slave_1: left promiscuous mode
[  795.578287][T24501] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.587846][T24501] bridge_slave_0: left allmulticast mode
[  795.593473][T24501] bridge_slave_0: left promiscuous mode
[  795.599184][T24501] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.640877][T24501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  795.651150][T24501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  795.661275][T24501] bond0 (unregistering): Released all slaves
[  795.669810][ T2295] block nbd1: Possible stuck request ffff8880267f0000: control (read@0,4096B). Runtime 60 seconds
[  795.777386][T24501] hsr_slave_0: left promiscuous mode
[  795.783140][T24501] hsr_slave_1: left promiscuous mode
[  795.788952][T24501] batman_adv: batadv0: Removing interface: batadv_slave_0
[  795.796447][T24501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  795.849525][T24501] team0 (unregistering): Port device team_slave_1 removed
[  795.859933][T24501] team0 (unregistering): Port device team_slave_0 removed
[  796.168918][T24501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.208600][T24501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.267745][T24501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.308174][T24501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.377933][T24505] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.390117][T24505] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.408463][T24505] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  796.418035][T24505] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  796.499916][T24501] bond1 (unregistering): (slave bridge1): Removing an active aggregator
[  796.508801][T24501] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  796.517337][T24501] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - e6:13:d4:53:72:e7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  796.536742][T24501] bridge1 (unregistering): left promiscuous mode
[  796.543199][T24501] bridge1 (unregistering): left allmulticast mode
[  796.585863][T24501] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  796.594377][T24501] bridge2 (unregistering): left promiscuous mode
[  796.600712][T24501] bridge2 (unregistering): left allmulticast mode
[  796.776964][T24501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  796.786917][T24501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  796.796350][T24501] bond0 (unregistering): Released all slaves
[  796.803877][T24501] bond1 (unregistering): Released all slaves
[  796.812585][T24501] bond2 (unregistering): Released all slaves
[  796.822601][T24501] bond3 (unregistering): (slave vcan2): Releasing backup interface
[  796.830914][T24501] vcan2: left promiscuous mode
[  796.837080][T24501] bond3 (unregistering): Released all slaves
[  796.845971][T24501] bond4 (unregistering): Released all slaves
[  796.855342][T24501] bond5 (unregistering): Released all slaves
[  796.895783][T24501] tipc: Disabling bearer <udp:syz1>
[  796.901300][T24501] tipc: Left network mode
[  797.240031][T24501] hsr_slave_0: left promiscuous mode
[  797.274820][T24501] hsr_slave_1: left promiscuous mode
[  797.293499][T24501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  797.301035][T24501] batman_adv: batadv0: Removing interface: batadv_slave_1
[  797.317547][T24501] veth1_macvtap: left promiscuous mode
[  797.323096][T24501] veth1_vlan: left promiscuous mode
[  797.328590][T24501] veth0_vlan: left promiscuous mode
[  797.420189][T24501] pimreg (unregistering): left allmulticast mode
[  797.502447][T24501] team0 (unregistering): Port device team_slave_1 removed
[  797.528732][T24501] team0 (unregistering): Port device team_slave_0 removed
[  797.766765][T24501] IPVS: stop unused estimator thread 0...
[  800.783975][ T5191] udevd[5191]: worker [1840] /devices/virtual/block/nbd1 is taking a long time