last executing test programs:

15.227934537s ago: executing program 3 (id=7707):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x35d}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30, 0x61, 0x5f, 0x50]}}, &(0x7f0000000100)=""/90, 0x39, 0x5a, 0x1, 0x9}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r3 = socket(0x2, 0x2, 0x1)
bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>0x0, 0x2f, 0xe, 0x59, 0x3, 0x6e, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x7880, 0x700, 0x9, 0xc}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xfff, 0x6000, 0xe8, 0x2820, r2, 0x80, '\x00', r4, r0, 0x5, 0x4, 0x3, 0xb}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)

14.396264687s ago: executing program 3 (id=7719):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d00030002044cbf050005001201", 0x2e}], 0x1}, 0x4005)

14.232162833s ago: executing program 3 (id=7723):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3c, &(0x7f0000001680)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x6, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "abf5dd51d434"}}}}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000300000000040000000300000002a6430000000000000000020183da3178493d000000070000000000000b020000000000"], 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)

14.144689128s ago: executing program 3 (id=7725):
r0 = socket$pppoe(0x18, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003}, 0x50)
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={<r2=>0x0, 0x10000}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={<r3=>0x0, @in={{0x2, 0x4e21, @local}}, 0x7, 0x7, 0x1, 0x0, 0x2}, &(0x7f0000000240)=0x98)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x4000, 0x8001, 0x2, 0xfbd2, 0x0, 0x157, 0xe, {r3, @in6={{0xa, 0x4e23, 0x0, @private2, 0x4}}, 0x503, 0x7fffffff, 0x5, 0x4, 0xe3c}}, &(0x7f0000000340)=0xb0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x4a, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

13.163771457s ago: executing program 3 (id=7736):
r0 = socket(0x40000000015, 0x5, 0x0)
syz_emit_ethernet(0x19, &(0x7f0000000080)={@multicast, @broadcast, @val={@val={0x88a8, 0x1}, {0x8100, 0x5}}, {@x25={0x805, {0x2, 0x7, 0xfd}}}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000"], 0x48}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000002060100003d00000000bcda000000000500040044d300000900020073797a30000000000c000780080012400900010005000a00000016000300686173683a6e65742c706f72742c6e65746908b3fd85ab44c1927bf94503766c230785395979d0cbb9b20ac4baba754307634051c32bc00b7fa1bb54c57d80c470f68b0ed94c2656f1376c8a9455f1cde7c41d2830294b92f32f0fde0a23f07218"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

13.064533929s ago: executing program 3 (id=7738):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="150000007f7dbf00d5a62daef32883772b83c5a71a48e538b1fa032d8488a7b95fd41e0230dba1b0acba5bb57bc9c920ac1b4ecf082052003e188ab4c127032000"/84, @ANYRES16=r5, @ANYBLOB="01032abd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0) (async)
r7 = socket(0x8, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000200)={r0})
readv(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000200)
setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRESOCT=r7, @ANYRES8=r0], 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r8, &(0x7f0000000240), 0x0}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0xb4, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0xa0, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x793}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4850}, 0x20040844)

1.626784313s ago: executing program 4 (id=7941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) (async)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) (async)

1.535663126s ago: executing program 4 (id=7944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', <r2=>0x0, 0x1, 0x8, 0xef, 0x9, {{0x37, 0x4, 0x0, 0x2, 0xdc, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x4f, 0x3, 0x3, [{@multicast2, 0x7}, {@remote, 0x9}, {@loopback, 0x2}, {@loopback}, {@loopback, 0xf}, {@broadcast, 0x5}, {@private=0xa010102, 0x5}]}, @lsrr={0x83, 0x1f, 0x45, [@remote, @loopback, @multicast1, @multicast1, @multicast1, @local, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x4, [{@empty, 0x1f}]}, @lsrr={0x83, 0x27, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @broadcast, @broadcast, @multicast2, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @end, @rr={0x7, 0x17, 0x67, [@private=0xa010101, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2]}, @timestamp={0x44, 0x20, 0x2d, 0x0, 0x8, [0x3, 0x4, 0x7, 0x9000, 0xb4a6, 0x0, 0x6]}]}}}}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400002000e0900010073797a30"], 0xf8}}, 0x0) (async, rerun: 64)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async, rerun: 64)
r6 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendto$isdn(r6, &(0x7f0000000100)={0x9, 0x50ee}, 0x8, 0xc044, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x40, 0x7}, 0x6) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0xdf}}, 0x1c}}, 0x0)

1.338931981s ago: executing program 4 (id=7945):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

1.291587284s ago: executing program 4 (id=7948):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, 0x0, 0xfffffffffffffdc5)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f00000001c0)=0x7, 0x4)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf2507000000050005000900000008000200050000000500050008000000080002000400000004000680"], 0x38}, 0x1, 0x0, 0x0, 0x2c00c8c2}, 0x20000085)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1)

1.164111369s ago: executing program 0 (id=7951):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.129796657s ago: executing program 4 (id=7952):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x6422, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0218010202000a0127bd7000ffdbdf25"], 0x10}}, 0x4040000)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1a)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f00000001c0)={r7, 0x40, 0x8}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e23, @multicast2}}, [0x6, 0x3, 0x7, 0xfffffffffffffffd, 0x3, 0x7, 0x7, 0x8, 0xfffffffffffffffd, 0x7, 0x3, 0x8, 0x2, 0xffffffffffffff7f, 0x10]}, &(0x7f00000002c0)=0x100)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='geneve0\x00', 0x10)
unshare(0x20000400)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r8, 0x3a, 0x1, 0x0, 0x300)
sendto$inet6(r5, 0x0, 0xfffffdb3, 0x800, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e)

1.033096439s ago: executing program 2 (id=7954):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002", @ANYRESOCT=r2], 0x44}, 0x1, 0x1000000}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x80)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}}, 0x2004c0a0)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002", @ANYRESOCT=r2], 0x44}, 0x1, 0x1000000}, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x80) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}}, 0x2004c0a0) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async)

961.591562ms ago: executing program 0 (id=7955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000000})
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x4)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)

949.526467ms ago: executing program 0 (id=7956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a7e42a0293006e7cd1f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r3=>0x0})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x4, 0x3c, 0x2, 0x7fff}, {0x0, 0x8b, 0xfe}, {0xf05, 0x4, 0x3, 0x8}]}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r6 = socket(0x2b, 0x80801, 0x1)
bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x80000001, @empty, 0x685eb1dc}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x2c)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0)

936.321227ms ago: executing program 1 (id=7957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000031351de5d805172cb190ef4235ea133479229c037f3b2060bc25665b2763dd7ecf69c2be3e0a6a9dcf7db43cb6274a0c9894716f5204dab008bd28b96dd3e8a7576de35ea95292b9f85c84f87c10de1461630dca75576a9d909123a783170be02b446c0c613d86b1bd232e5a854959a93bc99a"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000031351de5d805172cb190ef4235ea133479229c037f3b2060bc25665b2763dd7ecf69c2be3e0a6a9dcf7db43cb6274a0c9894716f5204dab008bd28b96dd3e8a7576de35ea95292b9f85c84f87c10de1461630dca75576a9d909123a783170be02b446c0c613d86b1bd232e5a854959a93bc99a"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000180)="d0bca478bea902fd8002a95386c04ec1228a2eca5d03aa8c68fd566b84966c46babd7fa7afa0dc125793f4c6613234e54494212d31c57265e4145d4d7a6ed50935bc59f279e93c7a438ff35e66b3c4a1808c43368565bcfb4977c2e674354ab54885caa79f0f7de425b47461b42efef36b0a84ffcd7127a5e8b1cc4f9789a3b0f3a4000b526a6480dbb568c659d11e58bf46d0f9b35d55f6cc230fbc01e8a9cc64334a30547314f0ddcd4e674e609f5e395e28a5d7fd64"}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01eb26bd7000ffdbc72544000000080003005ac783a356a909107e6833bd826f40feba833b630e6b", @ANYRES32=r3, @ANYBLOB="0c0023805fff1b0008400000"], 0x28}, 0x1, 0x0, 0x0, 0x200408c1}, 0x400c0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1c2b442fafd938ad}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x880) (async)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1c2b442fafd938ad}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x880)

852.431864ms ago: executing program 2 (id=7958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff02"], 0xffe)
write$tun(r1, &(0x7f0000000000)={@void, @val={0x2, 0x1, 0x0, 0x1, 0xc52, 0x4}, @x25={0x2, 0x4, 0xf7, "c27fe835767a96a483a7d73860e7aa9589aa461357d6dafe6d80b1f2902e7bf7d2b548fbdd1ea7cb2eb06d09302cd31b343d41795341de660d2074dc30b7db230be6cb037d6d429c25e61725b623bd25e2ede7d9"}}, 0x61)

828.118631ms ago: executing program 1 (id=7959):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x4000000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80009, 0x6, 0x10001, 0x400}, 0xfff4)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x34, 0x20, 0x4, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x14, 0x9, 0xd, 0x0, 0x0, 0x6, 0x8}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x57d8}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x7719fa92}, @FRA_FLOW={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8800)
bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r7 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
accept4$unix(r7, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000040801010004000000000000000000000500e22e0cff33cd3ec702409100000036f2ecc88c109d159c398cf75942d67a71010000003e7bd548057f68b4f424956b425f96c200"], 0x6a}}, 0x0)

723.660875ms ago: executing program 0 (id=7960):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000000c0))
r1 = socket(0x1d, 0x2, 0x6)
r2 = epoll_create(0x9660)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
close(r1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x20000044)

689.32568ms ago: executing program 1 (id=7961):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="6ee7211d55b146838da82d20bdb7148895ba0068a6d89f872dc4049abe74e5fc75f316f8a8da4ce0888c0a63bd7e5f46bd0341dc603755b93683186a8b3c374b", 0x40}], 0x1}, 0x20000005)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x7, @private2, 0xf}}, 0x0, 0x0, 0x31, 0x0, "411d5287b1dde76c222384e8f22f06ab36941eda42aa38794ddcb3793a5a8ee19680ca3a70d848a0befe8aaffdbcb08627556f201a253d041c5e899002e9b4a795201e0409447ca820a036deddf9051f"}, 0xd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00200000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r10, 0x2}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x1, 0x6}, {0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$rxrpc(r5, &(0x7f0000000300)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
recvmsg$can_j1939(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040)

619.715473ms ago: executing program 2 (id=7962):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)

600.442057ms ago: executing program 0 (id=7963):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'})
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

595.615191ms ago: executing program 2 (id=7964):
r0 = socket(0x1, 0x803, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x1, {}, {}, {}, 0x4, @can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "caf8a7653567f445"}}, 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x800)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r6=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r6, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00007d1e356771d42b1e0000000000100000f358af50fad837fb", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x1c}}, 0x8004)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080))
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0))
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYRES64=r6, @ANYRES32=r8], 0x1c}}, 0x8004)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0))

460.153722ms ago: executing program 0 (id=7965):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
socket$kcm(0x2, 0x5, 0x84)
r0 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

457.231138ms ago: executing program 1 (id=7966):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x3fc, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2a}}}}, [@NL80211_ATTR_TID_CONFIG={0x3d4, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x4, 0xffff, 0x4, 0x740, 0x1ff, 0x4]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x6}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x5}, {0x4, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x4, 0xb, 0x36, 0x4, 0x6c, 0xd, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x666, 0x93, 0xf093, 0x81, 0x2, 0x800, 0x8]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xc, 0x3, 0xf, 0x3, 0x7, 0xff7f, 0xd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffa0, 0x5, 0x68, 0x0, 0xec, 0x100, 0x4, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x3}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x3}, {0x5, 0x8}, {0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x4}, {0x1, 0x8}, {0x1}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x6}, {0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x8}, {0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x12, 0xc, 0x5, 0x18, 0x9, 0x24, 0x3, 0x5, 0x6, 0x1, 0x16, 0x60, 0x2e, 0x9, 0x4, 0x0, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0xc, 0x6, 0x9, 0x1, 0x60, 0x16, 0xb, 0x3, 0x26b9b9dc72b84b5f, 0x12, 0x18, 0x16, 0xc, 0x0, 0x3, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x60, 0x1, 0x1, 0x34, 0x30, 0x24, 0x3, 0x23, 0x2, 0x16, 0x24, 0x16, 0x16, 0x6c, 0x5, 0x1b, 0x16, 0x36, 0x9, 0x4, 0x2, 0x30, 0x9, 0x60, 0x48, 0x24, 0x5, 0x36, 0x44, 0x1e]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x8, 0x7, 0x4, 0xfff7, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xfff, 0x7, 0xffff, 0xfad, 0x9, 0x3, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3da}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x16, 0x2, 0x12, 0x6, 0xb, 0x1b, 0x6, 0x79, 0xc, 0x36, 0x2, 0x4, 0xc, 0xb, 0x30, 0x2, 0x3, 0x18, 0x24, 0xc, 0x12, 0x48, 0x2, 0x4, 0x4, 0xc, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x3, 0x30, 0x5, 0x1d, 0x30, 0x60, 0x18, 0x36, 0x48, 0x3, 0x16, 0x6, 0x36, 0x6c, 0x1, 0x2, 0xb, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x6, 0x1, 0x18, 0x48, 0x36, 0x6, 0x5, 0xc, 0x16, 0x2, 0x16, 0xb, 0x1, 0x24, 0x4, 0x3, 0x60, 0xc, 0x1, 0xc, 0x16, 0xc, 0x6c, 0x60, 0x60, 0x36, 0x60, 0x18, 0x24]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x6}, {0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x3}, {0x2, 0x4}, {0x6}, {0x3, 0x6}, {0x5}, {0x0, 0x6}, {}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe5, 0x8000, 0x473, 0x4, 0x6, 0xe8c, 0x2, 0x7f]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x18, 0x60, 0x74, 0x3, 0xc, 0x6c, 0x0, 0x1, 0x0, 0x6f, 0x6, 0x12, 0x1b, 0x48, 0x48, 0x2, 0x6c, 0x36, 0x6c, 0x48, 0x6, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2f16, 0x87, 0x733, 0xc73, 0xb6cf, 0x5, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xb9}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}]}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x1000}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x43, &(0x7f0000000280)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYBLOB="f5909210c429ac1b84d45efa5b0b01d71547eaa226b491f7b0803dd1f6759f9ce342e666a16941d3bb49e741bcd146090cb93acd4b6dedec6fd6e6430f9d8dcd664a4b707c535552b02d8051f5a085acf1780a1345e99465744e54675f1dafc83c0a", @ANYRESDEC=r8], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)

188.493323ms ago: executing program 2 (id=7967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
r4 = socket(0x1f, 0x803, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="8500000088000000a8cd658fbef6905efe958420bc91b060d064c4760494dc956e2b90afee5df901ca7950b6fc8d86625e3014a4cc6f041f69084c59489a61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x288, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d94acf9}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xba04}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42359b9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7951}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x43}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc66}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x60, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d9d}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69b}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1d4, 0x0, 0xa, 0x202, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x3f, 0x6, "858f81667a59f4d60efbc2804fc90c2e8018814dd17650ddee65597be180bdb915587d20e0f22c8e670fbcf4d3afb2db039f5b22ac9e2378d5c201"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x8d, 0x6, "4f97183eb60848c0dc98b66aff48ae7741612b7e80426bba01a24aa7c78e1fecd5c4c3fb783218cea748249dbe7b354f08c9a56c5eff9ce8db752c4d20768865c0572e960e07a7f33a67130ba0d9a8f5513478f88d04fa7760c4ac83e68b7f2232805eab248aa9da7ca039572314083bfbab2930125c5cc10f5ada6f53df81390684c4e0f9712d0a00"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x35, 0x6, "81afc5b231e3b7417fa72311e6d395e95084eb8598f0644529a961548e337d73d62255cd65d86b5ec3b6da92f0ed51d18a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x78, 0x6, "3fbf28c97a78bb4924705444357e29cca095671cc076d5f5505958eae4ffcdab99f254c91b1f9813c6af2e2d8a84db10a05593b7ef85c45c18277b669960047ed2c61caeaebe21ac84c4777579590a1a463823f684d007382bb8f1df50ee2ebff3cb63a6a39abd165b3d9221e1f1f09f53d8b0f3"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4ec}, 0x1, 0x0, 0x0, 0x44040}, 0x4000800)
r8 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r8, &(0x7f0000000180)={0xa, 0x2, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x2, {{0xa, 0x4e20, 0x0, @mcast2, 0xde9a}}, {{0xa, 0x4e22, 0x200, @mcast2, 0x80000000}}}, 0x108)
syz_emit_ethernet(0x66, &(0x7f0000000b40)={@local, @random="8c00defa00", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00048e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "050006", 0x97a, 0x3a, 0xff, @mcast1, @mcast2}}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="e6d31c00", @ANYRES16=r3, @ANYBLOB="110026bd7000ffdbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x164, r11, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x3, 0x0, {0x4, 0xc, 0x0, 0x5}, 0x800, 0x37c2, 0x2}}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_IE={0x109, 0x2a, [@mic={0x8c, 0x18, {0xb7f, "cdd8e43fe9a6", @long="0881ad4ae9fab0343e641351d54f38ba"}}, @perr={0x84, 0xc9, {0x0, 0xd, [{{0x0, 0x1}, @device_a, 0xbb, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @device_a, 0x467f, @value=@broadcast, 0x28}, {{}, @device_b, 0x3, @void, 0x16}, {{0x0, 0x1}, @broadcast, 0xffff, @value=@device_b, 0x2f}, {{}, @device_a, 0xb0, @void, 0x3f}, {{}, @broadcast, 0xe, @void, 0x31}, {{}, @device_b, 0x5, @void, 0x5}, {{}, @device_a, 0x7, @void, 0x2a}, {{}, @device_b, 0xde1d, @void, 0x25}, {{}, @device_b, 0x5, @void, 0xc}, {{}, @device_b, 0x400, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x3d69, @value, 0x3c}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0xe}]}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x3}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x7, 0xc5a7, 0x7, 0x3ff}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c0}, 0x4)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x85a}, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x80)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f0000000940)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000980)=0x28)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}]}, 0x3c}, 0x1, 0x620b}, 0x0)

166.330953ms ago: executing program 1 (id=7968):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x4000000)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = accept(r0, &(0x7f0000000240)=@l2tp={0x2, 0x0, @local}, &(0x7f00000001c0)=0x80)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000002c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10000})
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0xc2, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @device_b}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x50}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r7)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x8000)
sendto$inet(r3, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110880000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
close(r3)

120.078759ms ago: executing program 4 (id=7969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xf4, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xf4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c010)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000011400000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a00000661727463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000078000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xf4, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xf4}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c010) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000011400000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a00000661727463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000078000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)

45.643626ms ago: executing program 2 (id=7970):
epoll_create1(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x6)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=@newchain={0x19a4, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0x2}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x1968, 0x2, [@TCA_MATCHALL_ACT={0x1954, 0x2, [@m_gact={0xac, 0x13, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xcfd, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0xffffffffffffffff, 0x2, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x9, 0x6, 0x4, 0x9273}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x327, 0x4}}]}, {0x37, 0x6, "37127e13ab048b2fdcdc7ac52a4351b27ec2dd951e7c821fc982f09ab4c5d25d1c4aa3947b532d043e1a91c6d8f55dd02ebae0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x5dc, 0xf, 0x0, 0x0, {{0xb}, {0x504, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x6fe, 0x9, 0x7fff, {0x80, 0x1, 0x3b, 0x0, 0x6, 0xf4}, {0x1, 0x1, 0x6, 0x800, 0x57f, 0xffffffff}, 0x2, 0x6, 0x80000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x0, 0xf8, 0x401, 0x9, {0x0, 0x0, 0x2, 0xa, 0x36, 0x2}, {0x8, 0x0, 0x81, 0x8, 0x81, 0x1b}, 0x1000, 0x2, 0xb3f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x631, 0xffffffffffffffff, 0x9, 0xf5, 0x329, {0x3, 0x2, 0x10, 0x1, 0x8001, 0x5}, {0x6, 0x2, 0xfeff, 0x8, 0x81, 0x10000}, 0x200, 0x0, 0x40}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x369, 0x9, 0x1975, 0x5, 0xfff, 0x63, 0x3, 0xfffffff7, 0x1, 0x117be211, 0x80000001, 0x4, 0x2, 0x7, 0xfffffff8, 0x1, 0x0, 0x6dd8, 0xc, 0x4000, 0x5182, 0x6, 0x0, 0xb, 0x7, 0x101, 0x4ba3a02f, 0x1000, 0xffffff81, 0x8000, 0x1c0, 0x200, 0x9, 0x7, 0xfff, 0x400, 0x400, 0x1, 0x8000, 0xfa6, 0x1000, 0xf308, 0x400, 0x80000000, 0x3, 0x5, 0x1, 0x2, 0xfffffff7, 0x80000001, 0x6, 0x100, 0x13, 0x8, 0x614, 0x3, 0x2, 0x3, 0x9, 0x7, 0xb, 0x3, 0xffff, 0x6, 0x7, 0x0, 0x2, 0x6bc, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000000, 0x8, 0x10, 0x1, 0x3, 0xc51, 0xa, 0x9d4b07, 0x6, 0x0, 0x1, 0x5, 0x2, 0x8, 0x81, 0x8, 0x5, 0x8, 0x0, 0x2, 0x5, 0x0, 0x1, 0x6, 0x6, 0x200, 0x0, 0x5271, 0xf, 0x401, 0x7b1, 0x4, 0x6, 0x4, 0x7, 0x6, 0xfffffff6, 0x1, 0x6, 0x3, 0x9, 0x6, 0x5, 0x80000000, 0xfffffffe, 0x9, 0xc268, 0x6, 0x7, 0x2, 0x2, 0x5, 0x6, 0x2, 0x3, 0x5, 0xfb01, 0xffffff80, 0x8af, 0x9, 0x3, 0x1, 0x4, 0x2814, 0xb00, 0x2, 0x2, 0x6, 0x0, 0xe, 0x0, 0x3ff, 0xfff, 0x2, 0xe7a, 0x7, 0x8, 0x4000, 0x80, 0x4, 0x2, 0x2, 0x0, 0xacc6, 0xfffffff7, 0x3, 0x4, 0x0, 0xc4, 0x7, 0x1400000, 0x6, 0xc, 0x4, 0x7, 0x7fff, 0x3, 0x3, 0x3, 0x6, 0x2, 0x7ff, 0x2, 0x9, 0x1ff, 0x5, 0xfffffff0, 0x5, 0x8eee, 0x6, 0x3c, 0x7, 0x7, 0x6, 0x8001, 0x9, 0x4d6, 0x7, 0x101, 0x6, 0x7fffffff, 0xbd03, 0xff, 0x7f, 0x3, 0x1, 0x8f, 0xffff0001, 0x9, 0x9, 0x8000, 0xffffffff, 0x100, 0x5, 0x9, 0x1, 0x7, 0x9, 0x3b77, 0x9, 0x2, 0x10000, 0x5, 0xfffff801, 0xa, 0x5, 0x0, 0xfffff01f, 0x7, 0xc0, 0x7, 0x10, 0xcb, 0x7e8d, 0x7f, 0xfff, 0x400, 0x3, 0x7, 0xffffffff, 0x1, 0x8, 0x8, 0x5, 0x10001, 0x80000000, 0x8, 0x0, 0x7, 0x4, 0x5, 0x6c9, 0x5, 0x204, 0x1ff, 0x4, 0xde, 0x10001, 0x6, 0x4, 0x1, 0x1c0, 0x7]}]]}, {0xaf, 0x6, "f91c3214e30088fbe8e80b07ff678cc55942184857c7cec4ea8aa6885a6569b0a784eeb1bfd6c3f0c8971ccff62b431fd77c516fe8e9756c218a0a731fee7c82235fca7cff3e768b9ab7f0a50f443fe1dc5d8352030e6ec347e32661a7b2fe4d6101105fd0cc72c71972830837d1d1aa795d4a3f12f0847e40134110053d8ef6cdc62f021eb9afefe15ba4c2c8a1c97eca714b9fe503a167ebe413e174f1fca61198c1de4eca2cf4bb93d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x198, 0x15, 0x0, 0x0, {{0x7}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x7, 'security\x00', 0x7, 0x7, "332faf00f4cb053dc1dacc19f6943fadb3baf76a48ec3e749421deeba0de1a7385758a23c27cce54d22ae2e7760120041cc899289e622eddf4905cc476d08f6d4c444afbbeda68f27d2091"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x81, 0x6, "2fd2c491598b6d7f37459a55c4c32eb390673ce1af680e0338351db7e986908f5296b3fec44c63470d358492edca966a128cd00c9def687bb2a364ad99570326d29578ec440145c9c2383d6a13b6ca5de1cc015ab6114a9246fa2f0839535c097febd4f75bc590931f16f52758991cd28e3d55072a79f6bf7be5b065a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x248, 0x0, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x60000, 0x4, 0x1, 0x4}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5b765959, 0x8, 0x4, 0x5, 0x60000}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xf139, 0x6, 0x0, 0x80}, @private=0xa010101, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xffff6dd5, 0x0, 0x2, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x994e, 0x2, 0xfffffffd, 0x8}, @empty, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1000}, @broadcast, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x372, 0xffffffffffffffff, 0x8, 0x4}, @local, @rand_addr=0x64010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x1, 0x8, 0x1000, 0xffffffff}, @multicast2, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x5958, 0x10000000, 0x7, 0x6}, @loopback, @multicast1, 0x0, 0x1}}]}, {0xb6, 0x6, "b4f13fd68b717c9fd9edbbbe58ee7346c7dcfa7057f209dfb132b9739e38dfca7643c5fa7d794d15388eafb81c1ea269934979cde5b2c9823d00fa6fe31ab0dc6eca8cb975cdf64080186e5b4cd4e00a32f84e5d638f123acd3a7e478530a5aee4aedfdbcfb39eee580a1e65352b76cbb4bbd65ff7d193d9820ed44cd92860506bc36a514d67d36d7a7b331a7d70be56c3130f682fbb011184a1b00a77ba5144206eed5677114c83896df49912049466c506"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0xee8, 0xe, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x5, 0x0, 0x7, 0x7ff, 0x8}, 0x2f, 0x80, [{0xfff, 0x27a, 0x4f69e573, 0xc0, 0xc, 0x2}, {0x6, 0x7, 0x5, 0x3, 0x3, 0xfffffff9}]}, [{0x7fff, 0x6, 0xfff000, 0x7, 0xd, 0x542}, {0x4, 0x1, 0x9, 0x5, 0x2, 0x80000001}, {0x6, 0x5, 0x373, 0x2, 0x5, 0x8000}, {0x1, 0x2, 0x8174, 0xe, 0x2, 0x9}, {0x3, 0x100, 0xf7, 0xfffffffc, 0x8001, 0x1}, {0xc2b, 0x5, 0x1000, 0xf, 0xd65, 0x2}, {0x7, 0x2f64, 0xe, 0x101, 0x1ae4ecd8, 0x8bf1}, {0x8, 0x5, 0x4, 0x9, 0x2, 0x400}, {0x80000000, 0x8, 0x80000001, 0x0, 0x5, 0x53}, {0x1, 0x400, 0x80000001, 0x4, 0x1, 0x401}, {0xd, 0x6, 0x1, 0x8, 0x5, 0x8}, {0x0, 0x4, 0x11c, 0x6, 0x1000}, {0x8, 0x5, 0xfffffb5c, 0x4, 0x4, 0xbd}, {0xb, 0x2, 0x1, 0x6, 0x401, 0xffff}, {0x7f, 0x4, 0xdb93, 0x101, 0xff, 0x8}, {0x1549, 0x96b5, 0xb, 0x5, 0xe, 0xfff}, {0x6, 0xff, 0xec, 0x6, 0x101, 0xfffffd57}, {0x80000001, 0x0, 0x2, 0x3, 0x1, 0x5}, {0x101, 0xb, 0x7, 0x6, 0x5, 0x3}, {0x1, 0x7f, 0x5, 0x56, 0x9, 0xe}, {0x3, 0x4, 0x2, 0x10000, 0x3, 0x7}, {0x6e67, 0x3, 0x101, 0x9, 0x8, 0x9}, {0xf7, 0x800, 0x1, 0x99d, 0x34a3eda0, 0xfffffd36}, {0x1, 0x3, 0x1, 0xb585, 0x49, 0x3}, {0x2b42, 0xff, 0x800, 0x0, 0x1, 0xb211}, {0x5, 0x5, 0x40, 0x3, 0x98e, 0x80000000}, {0x80000000, 0x3, 0x3, 0x7ff, 0x8, 0x10000}, {0x2, 0x5, 0x7f, 0x8001, 0x4, 0x40}, {0x1, 0x8001, 0xe, 0x53, 0x4, 0xb}, {0x0, 0x4, 0x92, 0xb6f0000, 0x3, 0x80000001}, {0x0, 0xffffff00, 0x7, 0x2, 0x8, 0x5}, {0x401, 0x80bd, 0x1, 0x8000, 0x80000000, 0x7}, {0x5, 0xffff, 0x1ff, 0xbdfb, 0x3, 0x489e}, {0xfffffff7, 0x80000000, 0x8, 0x627, 0xd1bf, 0x5}, {0xbd93, 0x6, 0x2, 0x5, 0x20, 0x9}, {0x6, 0x0, 0x2, 0x7fff, 0xfffffff2, 0x8}, {0x6f, 0x0, 0x59, 0x1, 0x101, 0x6}, {0x6, 0x8, 0x2, 0x40, 0x4e, 0x7}, {0xec7, 0x8, 0x49, 0x1, 0x3ff}, {0x9, 0x5, 0x8, 0x10, 0x7fc, 0x7fff}, {0x81, 0x2, 0x80, 0x3bc7, 0x8, 0x8b}, {0x600, 0x1ff, 0x800, 0x6, 0x8ef, 0x5}, {0x6, 0x7, 0x6, 0xffff8001, 0x400, 0x6}, {0x1, 0x121, 0x10000, 0x0, 0x9, 0x5}, {0x920e, 0x4, 0x80000001, 0x1, 0xf2, 0x5}, {0x7, 0xa442, 0x3, 0xe, 0xfffffff7, 0x9cf0}, {0x10001, 0x7fffffff, 0xfffffffc, 0x6, 0x9, 0x9}, {0x4857, 0x6, 0x7f, 0x8, 0x80000001, 0x4}, {0xe20, 0x110c, 0x8, 0x9, 0x1, 0x9}, {0x400, 0xf, 0xffff, 0x73b3, 0x8001, 0xd}, {0x6b3, 0x0, 0x4, 0x3, 0x5}, {0x9, 0x7, 0x6, 0xd8d, 0x0, 0x6}, {0x4, 0xb77, 0xadd, 0x3, 0x31d9da1, 0xed3b}, {0x8154, 0xffffff7f, 0x8, 0x9, 0x9, 0x7}, {0x7, 0x7, 0x4, 0x7e, 0x8000, 0x6}, {0x3, 0x0, 0x9, 0x8, 0x9, 0x6}, {0xfffffeff, 0x8, 0x1, 0xfffffffa, 0x4, 0x3}, {0x4, 0x8001, 0x5, 0x4, 0x4, 0x2}, {0x4, 0x8, 0x8000, 0x4, 0x8, 0x7}, {0x0, 0x29, 0x3, 0x9, 0x7fff, 0x200}, {0xd, 0xf, 0x80000000, 0x8b, 0x401, 0x7ff}, {0x5, 0x80, 0x7, 0x5, 0x101, 0x3}, {0x7f, 0x7f, 0x1, 0x0, 0x5a2, 0x2}, {0x8, 0x2, 0x3, 0x2, 0x7, 0x79ea}, {0xfffffffe, 0x0, 0x2, 0x10001, 0xa3e, 0x3}, {0x0, 0xff, 0x216, 0xffffffff, 0x0, 0x6}, {0x7, 0x6, 0x7, 0x81, 0xc, 0x3}, {0xffffffff, 0x9, 0x5, 0x3, 0x7, 0xfac6}, {0x8, 0xfffffff9, 0x4, 0x4, 0x6, 0x3}, {0x7, 0xfffffff7, 0x7, 0x80000001, 0x6, 0x4}, {0xe, 0x7, 0x8, 0xc5e, 0x8, 0x9}, {0x2d30, 0x4, 0x7, 0x8, 0x2, 0x10000}, {0x4, 0x1, 0x9, 0x8, 0xd9, 0x6}, {0x4, 0x7, 0x8, 0x64d, 0x1000, 0x800}, {0xc, 0x8000, 0x401, 0x6, 0x8001, 0x3}, {0x1, 0x1, 0x16, 0xffff8000, 0x8, 0x3}, {0x8, 0x9, 0x1, 0x1, 0x35, 0x6}, {0x5, 0xffff3704, 0xdb2b, 0x6, 0x0, 0x80000001}, {0x3, 0x1ff, 0x6, 0x4, 0x1, 0x4}, {0x80000000, 0x9b, 0xb9, 0x7, 0x8, 0x6}, {0x7, 0x0, 0x80, 0x200, 0x4, 0x3}, {0xe, 0x0, 0x7, 0x2, 0x0, 0x2}, {0xa50, 0x2, 0x3, 0x4a, 0x80, 0xdabc}, {0xb79e, 0x9, 0x10001, 0xfffffff7, 0x7, 0x60}, {0xffff, 0x6, 0x3, 0x5, 0x3, 0x6}, {0x1c96123b, 0x7, 0x2, 0x9, 0x6, 0xa2}, {0x20, 0x4, 0x3, 0xcf, 0x7, 0x9}, {0xfff, 0x4, 0x1, 0x10000, 0x3, 0x1}, {0x57d190b, 0xfffffc00, 0x7, 0x2, 0x1, 0x800}, {0xce, 0x8, 0x100, 0x2, 0x3, 0x8001}, {0x7, 0x0, 0xb, 0x5, 0xd6, 0x5}, {0x9, 0x83, 0x21, 0x5, 0x4, 0x4a}, {0x78a1, 0x0, 0x0, 0x8, 0x1, 0xffffff01}, {0x1, 0x9, 0x0, 0x4, 0x91, 0x7}, {0x6, 0x0, 0x2, 0x0, 0x8, 0xffff}, {0xb, 0x3, 0x9, 0x0, 0x6, 0x5}, {0x0, 0x80000000, 0x4, 0x8, 0x7, 0x9}, {0x3, 0x8d, 0xb, 0x7, 0x8, 0xff}, {0x2, 0x1, 0x2a6a, 0x7, 0x8, 0x5}, {0x1, 0x13, 0x8, 0xe, 0x0, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x0, 0x8}, {0x4f9, 0x80, 0x7fff, 0x8001, 0xd6, 0x1}, {0x231a, 0x3, 0x3ff, 0xffffff01, 0xffffff73, 0x4}, {0x7, 0x800, 0x0, 0x1, 0x800, 0x9a}, {0x3ff, 0x9, 0x0, 0x98a, 0x7, 0x7}, {0xf00, 0x6fc, 0x5, 0x3, 0x3, 0x7}, {0x6, 0x0, 0x4, 0x4, 0x5, 0x3}, {0x3fe0000, 0xa, 0xfffffff9, 0x7568, 0x5659, 0x8}, {0xffff, 0x557, 0xfffffff8, 0x0, 0x2eb, 0xf70d}, {0x9, 0xff, 0x1, 0x80000000, 0xc, 0x7}, {0x2, 0x10001, 0xfffffe56, 0xffffffff, 0xfffffff7, 0xffffffff}, {0x7, 0x6, 0x0, 0x0, 0x0, 0x7}, {0xd64, 0x8001, 0x6, 0x9, 0x59c, 0x9}, {0x9, 0x3, 0x4, 0x8001, 0x6, 0x7fff}, {0x3, 0xc, 0x40000000, 0x1, 0x6a, 0x6}, {0x1, 0xfffffff8, 0x7, 0x800, 0x2, 0x7}, {0x7, 0x0, 0x5, 0x1000, 0x10000, 0x92}, {0xfffffffc, 0x81, 0x7c55, 0xff, 0x9, 0x1}, {0x9, 0xda97, 0x5, 0x5, 0xa, 0x6}, {0xe, 0x14, 0xdb4, 0x33c, 0x7f, 0x8}, {0xc29, 0x2, 0x7, 0x8, 0x10000, 0x7}, {0x100, 0xffffffff, 0x0, 0x0, 0x9a, 0x9}, {0xb, 0x3, 0x81, 0x80000000, 0x9, 0xffffffff}, {0x4, 0xfffffff4, 0x1, 0x4, 0x6, 0xfffffff5}, {0x80, 0xffffff21, 0x446, 0x7ff, 0x6, 0x2}, {0x10, 0x7ff, 0x8, 0x5, 0x4, 0xfffffff7}, {0x8, 0x9, 0x92, 0x1, 0x81, 0x5}, {0x3, 0x6, 0x5, 0x9, 0x2, 0x800}], [{}, {0x4, 0x1}, {0x2}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x91e0e6efd7172221}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0xd68057ff99a375ca}, {}, {0x3, 0x363c09f216ea5bc9}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x6}, {0x3}, {0x3}, {0x2}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7}, {0x2}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1abdd2781b21a27}, {0x5}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0xf677dc7579741452}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x69, 0x6, "2281431537aec2ea14d3f79329973da4bf4a23c56b591b68c0949a89598208d12cb46c3fb893f36c7a90771fe231dd34c9da7a103f378d88440ebc2521358a24d398311468e3b546f4be07d76ddd884d12bc68c0e402b1db3c329b1f2a8aedd06518286e80"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x19a4}}, 0x4000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)

0s ago: executing program 1 (id=7971):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0xfffffffffffffffd}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20048001}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', <r9=>r6, 0x2f, 0x5, 0x2, 0xffffff00, 0x40, @mcast2, @empty, 0x8, 0x8000, 0x80, 0x5}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x414, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c82575}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x72}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1f8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xdd, 0x5, 0x85, 0x200}, {0x5, 0x9c, 0x75, 0x4}, {0x9, 0x6, 0x5, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x80}, 0x40084)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xff48}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

kernel console output (not intermixed with test programs):

Enabling of bearer <udp:syz1> rejected, failed to enable media
[  502.949073][T25995] 8021q: adding VLAN 0 to HW filter on device team0
[  502.966079][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.973263][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.067632][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.074840][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.123872][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5867'.
[  503.151816][T26309] netlink: 'syz.1.5867': attribute type 11 has an invalid length.
[  503.160500][T26309] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5867'.
[  503.187920][T26314] netlink: 'syz.4.5870': attribute type 5 has an invalid length.
[  503.501379][T16397] IPVS: stop unused estimator thread 0...
[  503.508164][T26325] netlink: 'syz.1.5871': attribute type 1 has an invalid length.
[  503.804638][T25995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.962732][T25995] veth0_vlan: entered promiscuous mode
[  504.008427][T25995] veth1_vlan: entered promiscuous mode
[  504.108039][T25995] veth0_macvtap: entered promiscuous mode
[  504.134990][T25995] veth1_macvtap: entered promiscuous mode
[  504.196549][T25995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.246229][T25995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.269748][ T3437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.293138][T26365] pim6reg1: entered promiscuous mode
[  504.307593][T26365] pim6reg1: entered allmulticast mode
[  504.376700][ T3437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.387428][ T3437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.401261][ T3437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.569413][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.584902][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.611211][T26376] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.618587][T26376] bridge0: port 2(bridge_slave_1) entered listening state
[  504.625917][T26376] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.633020][T26376] bridge0: port 1(bridge_slave_0) entered listening state
[  504.650477][T26376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.696593][T26381] syzkaller0: entered promiscuous mode
[  504.702223][T26381] syzkaller0: entered allmulticast mode
[  504.770721][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.804903][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.851930][T26389] netlink: 'syz.4.5893': attribute type 1 has an invalid length.
[  504.913057][T26389] bond11: entered promiscuous mode
[  504.922257][T26389] 8021q: adding VLAN 0 to HW filter on device bond11
[  504.980109][T26392] wireguard0: entered promiscuous mode
[  504.986136][T26392] wireguard0: entered allmulticast mode
[  504.998790][T26392] team0: Device wireguard0 is of different type
[  505.093526][T26389] bond11: (slave bridge11): making interface the new active one
[  505.102295][T26389] bridge11: entered promiscuous mode
[  505.108790][T26389] bond11: (slave bridge11): Enslaving as an active interface with an up link
[  505.469466][T26405] nbd0: detected capacity change from 0 to 63
[  505.542697][T26418] __nla_validate_parse: 8 callbacks suppressed
[  505.542717][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5902'.
[  505.548620][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'.
[  505.605627][ T5835] block nbd0: Receive control failed (result -32)
[  505.771622][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  505.782996][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  505.791268][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  505.799837][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  505.808472][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  505.917942][T26425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5903'.
[  505.985882][T26424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5903'.
[  506.028306][T26433] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  506.087041][T26433] team0: No ports can be present during mode change
[  506.499089][T26455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5911'.
[  506.678903][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  506.681153][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  506.695064][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  506.953506][T26484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5921'.
[  507.003532][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5920'.
[  507.015115][T26479] tunl0: Caught tx_queue_len zero misconfig
[  507.175622][T26421] chnl_net:caif_netlink_parms(): no params data found
[  507.267523][T26498] netlink: 'syz.1.5925': attribute type 1 has an invalid length.
[  507.360397][T26498] netlink: 'syz.1.5925': attribute type 1 has an invalid length.
[  507.373598][T26501] bond6: (slave ip6gretap1): making interface the new active one
[  507.382427][T26501] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.390468][T26501] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  507.399613][T26501] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  507.625239][T26522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.633639][T26421] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.643163][T26421] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.653297][T26421] bridge_slave_0: entered allmulticast mode
[  507.661441][T26421] bridge_slave_0: entered promiscuous mode
[  507.671126][T26527] netlink: 'syz.1.5933': attribute type 7 has an invalid length.
[  507.716250][T26525] syzkaller0: entered promiscuous mode
[  507.721839][T26525] syzkaller0: entered allmulticast mode
[  507.728639][T26525] tipc: Resetting bearer <eth:syzkaller0>
[  507.736625][T26421] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.744074][T26421] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.752559][T26421] bridge_slave_1: entered allmulticast mode
[  507.760927][T26421] bridge_slave_1: entered promiscuous mode
[  507.773372][T26521] tipc: Resetting bearer <eth:syzkaller0>
[  507.888713][   T52] Bluetooth: hci3: command tx timeout
[  508.492812][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5936'.
[  508.512096][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5936'.
[  508.521894][T26537] netlink: 'syz.2.5936': attribute type 12 has an invalid length.
[  508.530020][T26537] netlink: 'syz.2.5936': attribute type 11 has an invalid length.
[  508.755741][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.762995][    C0] bridge0: topology change detected, propagating
[  508.769991][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.777266][    C0] bridge0: topology change detected, propagating
[  509.609632][T26521] tipc: Disabling bearer <eth:syzkaller0>
[  509.633681][T26527] 8021q: VLANs not supported on sit0
[  509.698629][T26421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.738531][T26421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.895498][T26563] netlink: 'syz.1.5942': attribute type 29 has an invalid length.
[  509.905753][T26563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5942'.
[  509.932802][T26421] team0: Port device team_slave_0 added
[  509.955799][   T52] Bluetooth: hci3: command tx timeout
[  509.985358][T26562] netlink: 'syz.1.5942': attribute type 29 has an invalid length.
[  510.006759][T26566] netlink: 'syz.1.5942': attribute type 29 has an invalid length.
[  510.059348][T26421] team0: Port device team_slave_1 added
[  510.170148][T26421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.186683][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.220606][T26421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.234556][T26421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.241693][T26421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.284643][T26421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.439323][T26421] hsr_slave_0: entered promiscuous mode
[  510.456852][T26421] hsr_slave_1: entered promiscuous mode
[  510.471719][T26421] debugfs: 'hsr0' already exists in 'hsr'
[  510.484967][T26421] Cannot create hsr debugfs directory
[  510.837659][T26421] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  510.875685][T26421] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  510.895939][T26421] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  510.909144][T26607] __nla_validate_parse: 2 callbacks suppressed
[  510.909162][T26607] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5953'.
[  510.924729][T26421] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  511.038173][T26421] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.048472][T26421] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  511.059563][T26421] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  511.071482][T26421] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  511.107954][T26626] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5956'.
[  511.149620][T26421] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.164437][T26421] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  511.185089][T26421] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  511.204411][T26421] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  511.285740][T26421] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.298258][T26421] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  511.309783][T26421] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  511.327483][T26421] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  511.374214][T26631] netlink: 'syz.0.5958': attribute type 3 has an invalid length.
[  511.400051][T26631] netlink: 'syz.0.5958': attribute type 3 has an invalid length.
[  511.422985][T26631] netlink: 'syz.0.5958': attribute type 3 has an invalid length.
[  511.533552][T26421] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  511.554669][T26421] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  511.570469][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'.
[  511.572043][T26421] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  511.601393][T26421] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  511.850876][T26421] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.941886][T26421] 8021q: adding VLAN 0 to HW filter on device team0
[  511.968528][T12579] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.975858][T12579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.013080][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.020332][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.045129][   T52] Bluetooth: hci3: command tx timeout
[  512.102764][T26664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5966'.
[  512.167460][T26664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5966'.
[  512.178287][T26665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5966'.
[  512.185450][T26671] netlink: 'syz.2.5967': attribute type 22 has an invalid length.
[  512.214410][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5967'.
[  512.618682][T26421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.034200][T26421] veth0_vlan: entered promiscuous mode
[  513.055637][T26421] veth1_vlan: entered promiscuous mode
[  513.113068][T26700] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode
[  513.124780][T26700] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode
[  513.127721][T26703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5974'.
[  513.158235][T26421] veth0_macvtap: entered promiscuous mode
[  513.172476][T26421] veth1_macvtap: entered promiscuous mode
[  513.211844][T26421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.229952][T26706] sctp: [Deprecated]: syz.3.5975 (pid 26706) Use of int in max_burst socket option.
[  513.229952][T26706] Use struct sctp_assoc_value instead
[  513.230571][T26421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.267210][T12578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.278756][T12578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.309194][T12578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.371455][T12578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.467821][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.484751][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.558309][T26717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5979'.
[  513.564687][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.577909][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.877596][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5983'.
[  513.891605][T26739] netlink: 'syz.4.5899': attribute type 21 has an invalid length.
[  513.912197][T26739] netlink: 'syz.4.5899': attribute type 4 has an invalid length.
[  513.935290][T26739] netlink: 'syz.4.5899': attribute type 5 has an invalid length.
[  513.962664][T26744] netlink: 'syz.4.5899': attribute type 21 has an invalid length.
[  514.005169][T26744] netlink: 'syz.4.5899': attribute type 4 has an invalid length.
[  514.052390][T26744] netlink: 'syz.4.5899': attribute type 5 has an invalid length.
[  514.116672][   T52] Bluetooth: hci3: command tx timeout
[  514.183673][T26749] netlink: 'syz.0.5986': attribute type 1 has an invalid length.
[  514.245223][T26751] syzkaller0: entered promiscuous mode
[  514.256336][T26751] syzkaller0: entered allmulticast mode
[  514.766324][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  514.776982][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  514.785377][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  514.826091][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  514.838331][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  515.595069][T26804] netlink: 'syz.2.6001': attribute type 1 has an invalid length.
[  515.643273][T26804] bond8: entered promiscuous mode
[  515.650961][T26804] 8021q: adding VLAN 0 to HW filter on device bond8
[  515.702706][T26810] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.774211][T26804] bond8: (slave bridge5): making interface the new active one
[  515.803001][T26804] bridge5: entered promiscuous mode
[  515.810325][T26804] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  515.966462][T26825] : entered promiscuous mode
[  516.119038][T26765] chnl_net:caif_netlink_parms(): no params data found
[  516.198020][T26840] __nla_validate_parse: 13 callbacks suppressed
[  516.198039][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6009'.
[  516.220410][T26840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6009'.
[  516.442302][T26765] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.474556][T26765] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.504606][T26765] bridge_slave_0: entered allmulticast mode
[  516.511638][T26860] can: request_module (can-proto-0) failed.
[  516.535013][T26765] bridge_slave_0: entered promiscuous mode
[  516.549124][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6015'.
[  516.556919][T26765] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.586513][T26765] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.604598][T26765] bridge_slave_1: entered allmulticast mode
[  516.622751][T26765] bridge_slave_1: entered promiscuous mode
[  516.690433][T26872] dummy0: Caught tx_queue_len zero misconfig
[  516.746497][T26765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.776544][T26765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.824617][T26878] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6021'.
[  516.898644][T26881] netlink: 'syz.0.6022': attribute type 3 has an invalid length.
[  516.924595][   T52] Bluetooth: hci4: command tx timeout
[  517.005191][T26895] ipt_ECN: cannot use operation on non-tcp rule
[  517.136316][T26765] team0: Port device team_slave_0 added
[  517.158430][T26765] team0: Port device team_slave_1 added
[  517.285456][T26900] nbd3: detected capacity change from 0 to 127
[  517.333537][T26765] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.360104][   T52] block nbd3: Receive control failed (result -32)
[  517.370072][T26765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.403544][T26765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.416899][T26765] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.423947][T26765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.453432][T26765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.641913][T26765] hsr_slave_0: entered promiscuous mode
[  517.665742][T26765] hsr_slave_1: entered promiscuous mode
[  517.672213][T26765] debugfs: 'hsr0' already exists in 'hsr'
[  517.688378][T26765] Cannot create hsr debugfs directory
[  517.890084][T26924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.918671][T26921] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6031'.
[  517.924865][T26918] syzkaller0: mtu less than device minimum
[  517.936761][T26921] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.938850][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6035'.
[  517.944269][T26921] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.953216][T26934] block nbd4: Unsupported socket: should be TCP or UNIX.
[  517.969371][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6034'.
[  518.024842][T26918] netlink: 'syz.1.6032': attribute type 1 has an invalid length.
[  518.191102][T26940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'.
[  518.246753][T26940] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6037'.
[  518.249707][T26944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6040'.
[  518.291682][T26765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.304814][T26765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.315837][T26765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  518.491107][T26765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.505983][T26765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.520245][T26765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  518.627584][T26960] bond9: (slave geneve3): making interface the new active one
[  518.636272][T26960] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  518.646833][ T4598] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  518.659105][ T4598] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  518.716976][T26765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.744495][T26765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.759915][T26765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  518.780623][ T4598] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  518.824118][ T4598] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  518.948959][T26765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.976670][T26765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.997629][   T52] Bluetooth: hci4: command tx timeout
[  519.024616][T26765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  519.208410][T26973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.236968][T26973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.260223][T26973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  519.295119][T26973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  519.488860][T26973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.515873][T26973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.545699][T26973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  519.557205][T26973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  519.699689][T26973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.713566][T26973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.726864][T26973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  519.738633][T26973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  519.826142][T26973] batman_adv: batadv0: Interface deactivated: netdevsim0
[  519.887769][T26973] batman_adv: batadv0: Removing interface: netdevsim0
[  519.897918][T26973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.910448][T26973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.922479][T26973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  519.935224][T26973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  520.047613][T26765] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  520.072436][T26765] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  520.095199][T26765] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  520.154547][T26765] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  520.212898][T17019] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  520.222254][T17019] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  520.231275][T17019] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  520.240875][T17019] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  520.257667][T27020] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.265473][T27020] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.285092][T27020] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  520.379123][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  520.394639][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  520.402959][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  520.420978][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  520.461790][T27033] validate_nla: 2 callbacks suppressed
[  520.461809][T27033] netlink: 'syz.1.6061': attribute type 1 has an invalid length.
[  520.489133][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  520.498773][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  520.513189][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  520.523732][   T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  520.591715][T27034] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  520.640545][T27034] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  520.654613][T27033] nftables ruleset with unbound set
[  520.688866][T27034] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  520.735970][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  520.744787][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  520.756828][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  520.765248][   T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  520.993141][T26765] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.032643][T26765] 8021q: adding VLAN 0 to HW filter on device team0
[  521.040636][T27059] IPVS: length: 239 != 24
[  521.063853][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.071074][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.079419][   T52] Bluetooth: hci4: command tx timeout
[  521.163191][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.170457][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.276241][T27074] __nla_validate_parse: 13 callbacks suppressed
[  521.276261][T27074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6073'.
[  521.297532][T27074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6073'.
[  521.325404][T27079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6074'.
[  521.565482][T27085] bond10: entered promiscuous mode
[  521.570676][T27085] bond10: entered allmulticast mode
[  521.584271][T27085] 8021q: adding VLAN 0 to HW filter on device bond10
[  521.657620][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6076'.
[  521.823434][T26765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.896001][T26765] veth0_vlan: entered promiscuous mode
[  521.933707][T26765] veth1_vlan: entered promiscuous mode
[  521.989956][T27103] netlink: 'syz.4.6079': attribute type 10 has an invalid length.
[  522.013200][T27105] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  522.032749][T27103] veth0_virt_wifi: entered allmulticast mode
[  522.071905][T27103] team0: Port device veth0_virt_wifi added
[  522.081494][T26765] veth0_macvtap: entered promiscuous mode
[  522.103886][T26765] veth1_macvtap: entered promiscuous mode
[  522.180224][T26765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.238512][T26765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.301775][T16397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.326907][T16397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.346849][T27119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6085'.
[  522.352851][T16397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.394039][T16397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.791403][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.819020][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.872010][T27142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6089'.
[  522.929572][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.943545][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.968469][T27142] netlink: 'syz.1.6089': attribute type 21 has an invalid length.
[  522.977021][T27142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6089'.
[  523.160045][T27154] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5985'.
[  523.168579][   T52] Bluetooth: hci4: command tx timeout
[  523.779270][T27184] C: renamed from team_slave_0
[  523.818526][T27184] netlink: 'syz.1.6099': attribute type 1 has an invalid length.
[  523.853316][T27184] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  524.143418][T27201] netlink: 'syz.0.6102': attribute type 1 has an invalid length.
[  524.176015][T27201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6102'.
[  524.228544][T27201] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.334114][T27209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6104'.
[  524.369677][T27205] sctp: [Deprecated]: syz.3.6103 (pid 27205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.369677][T27205] Use struct sctp_sack_info instead
[  524.775811][T27236] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  525.197766][T27267] xt_CONNSECMARK: invalid mode: 0
[  525.221634][T27271] tipc: Started in network mode
[  525.226724][T27271] tipc: Node identity , cluster identity 4711
[  525.232819][T27271] tipc: Failed to set node id, please configure manually
[  525.256677][T27271] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  525.272199][T27271] netlink: 'syz.0.6122': attribute type 83 has an invalid length.
[  525.370448][T27282] --map-set only usable from mangle table
[  525.400771][T27282] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[  525.539001][T27290] netlink: 'syz.2.6128': attribute type 1 has an invalid length.
[  525.619000][T27290] netlink: 'syz.2.6128': attribute type 64 has an invalid length.
[  525.640109][T27290] netlink: 'syz.2.6128': attribute type 64 has an invalid length.
[  526.067514][T27315] netlink: 'syz.3.6132': attribute type 10 has an invalid length.
[  526.153570][T27315] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.168976][T27315] bridge_slave_1: left allmulticast mode
[  526.175642][T27315] bridge_slave_1: left promiscuous mode
[  526.201220][T27315] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.217599][T27323] netlink: 'syz.4.6135': attribute type 11 has an invalid length.
[  526.226977][T27315] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  526.480152][T27338] __nla_validate_parse: 12 callbacks suppressed
[  526.480180][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'.
[  526.540762][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6136'.
[  526.833634][T27355] netlink: 'syz.4.6146': attribute type 12 has an invalid length.
[  526.882822][T27355] netlink: 'syz.4.6146': attribute type 29 has an invalid length.
[  526.905465][T27355] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6146'.
[  526.938031][T27355] netlink: 'syz.4.6146': attribute type 2 has an invalid length.
[  526.947236][T27355] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6146'.
[  526.993265][T27360] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003
[  527.532073][T27389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6156'.
[  527.532954][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6157'.
[  527.670983][T27394] netlink: 'syz.4.6158': attribute type 13 has an invalid length.
[  527.690198][T27399] netlink: 'syz.0.6160': attribute type 29 has an invalid length.
[  528.116343][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6165'.
[  528.218839][T27418] 8021q: adding VLAN 0 to HW filter on device bond1
[  528.237378][T27418] bond1: (slave veth0_to_bond): making interface the new active one
[  528.250620][T27418] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  528.500360][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'.
[  528.536639][T27441] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  528.556007][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'.
[  529.635793][   T52] Bluetooth: hci4: command tx timeout
[  529.686677][  T915] IPVS: starting estimator thread 0...
[  529.786791][T27495] IPVS: using max 25 ests per chain, 60000 per kthread
[  529.893076][T27503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6188'.
[  531.497840][T27560] __nla_validate_parse: 3 callbacks suppressed
[  531.497861][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6206'.
[  531.521087][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6205'.
[  531.629898][T27573] x_tables: duplicate underflow at hook 3
[  531.635781][T27575] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode
[  531.635809][T27575] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode
[  531.664189][T27572] x_tables: duplicate underflow at hook 3
[  531.709356][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6209'.
[  531.745360][T27577] macvlan0: entered promiscuous mode
[  531.752761][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6209'.
[  531.800054][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6213'.
[  531.810360][T27582] validate_nla: 3 callbacks suppressed
[  531.810379][T27582] netlink: 'syz.1.6213': attribute type 1 has an invalid length.
[  531.826392][T27582] netlink: 'syz.1.6213': attribute type 2 has an invalid length.
[  531.909433][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6213'.
[  531.932902][T27582] netlink: 'syz.1.6213': attribute type 1 has an invalid length.
[  531.942156][T27593] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6214'.
[  531.959233][T27582] netlink: 'syz.1.6213': attribute type 2 has an invalid length.
[  532.320144][T27614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.399285][T27610] netlink: 'syz.2.6221': attribute type 29 has an invalid length.
[  532.518757][T27614] syzkaller0: entered promiscuous mode
[  532.524698][T27614] syzkaller0: entered allmulticast mode
[  532.531970][T27614] tipc: Resetting bearer <eth:syzkaller0>
[  532.576393][T27609] tipc: Resetting bearer <eth:syzkaller0>
[  532.828556][T27644] netlink: 'syz.3.6229': attribute type 24 has an invalid length.
[  533.454020][   T52] block nbd4: Receive control failed (result -32)
[  534.114100][T27609] tipc: Disabling bearer <eth:syzkaller0>
[  535.076982][T27701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6243'.
[  535.125052][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6244'.
[  535.219561][T27703] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.232189][T27703] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.239442][T27703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.557861][T27763] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  536.601600][T27763] bond8: (slave lo): Enslaving as a backup interface with an up link
[  536.620239][T27763] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  536.941989][T27786] x_tables: duplicate underflow at hook 4
[  536.962708][T27788] netem: unknown loss type 0
[  536.970036][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6270'.
[  536.974806][T27788] netem: change failed
[  537.042301][T27795] netlink: 'syz.4.6270': attribute type 1 has an invalid length.
[  537.090038][T27799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6272'.
[  537.135445][T27797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6272'.
[  537.159542][T27805] Bluetooth: MGMT ver 1.23
[  537.241072][T27807] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  537.793243][T27827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6282'.
[  538.032423][T27831] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  538.189150][T27843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.546494][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6295'.
[  538.820284][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6300'.
[  538.832959][T27885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6299'.
[  539.010540][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6299'.
[  539.098668][T27900] sctp: [Deprecated]: syz.1.6304 (pid 27900) Use of int in max_burst socket option deprecated.
[  539.098668][T27900] Use struct sctp_assoc_value instead
[  540.337627][T27956] syzkaller1: entered promiscuous mode
[  540.357813][T27956] syzkaller1: entered allmulticast mode
[  540.405070][T27956] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  540.461325][T27962] sctp: [Deprecated]: syz.1.6320 (pid 27962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  540.461325][T27962] Use struct sctp_sack_info instead
[  540.518276][T27967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6323'.
[  540.574582][T27970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6322'.
[  540.721494][T27977] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.782295][T27986] sctp: [Deprecated]: syz.1.6328 (pid 27986) Use of int in max_burst socket option.
[  540.782295][T27986] Use struct sctp_assoc_value instead
[  541.012433][T27997] netlink: 'syz.4.6329': attribute type 32 has an invalid length.
[  541.584002][T27983] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_cmd_wq": -EINTR
[  541.694042][T28083] sctp: [Deprecated]: syz.3.6339 (pid 28083) Use of int in max_burst socket option.
[  541.694042][T28083] Use struct sctp_assoc_value instead
[  542.077465][T28106] __nla_validate_parse: 6 callbacks suppressed
[  542.077485][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6344'.
[  542.177425][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6342'.
[  542.663383][T28128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6349'.
[  542.719210][T28130] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3
[  542.889691][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  542.900829][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  542.908783][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  542.939422][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  542.953343][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  543.231941][T28126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.247954][T28126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.300898][T28126] macvlan0: left promiscuous mode
[  543.444663][T28143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6353'.
[  543.465056][   T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.504559][   T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.525408][   T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.592221][   T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.612090][T28145] xt_CT: You must specify a L4 protocol and not use inversions on it
[  543.743740][T28155] netlink: 'syz.0.6357': attribute type 10 has an invalid length.
[  543.789063][T28155] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  543.816468][T28159] ip6gre1: entered allmulticast mode
[  544.069129][T28175] netlink: 'syz.2.6362': attribute type 8 has an invalid length.
[  544.159177][T28177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'.
[  544.174511][T28177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'.
[  544.183955][T28177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6363'.
[  544.409185][T28132] chnl_net:caif_netlink_parms(): no params data found
[  544.628488][T28132] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.636359][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6370'.
[  544.648867][T28132] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.671735][T28132] bridge_slave_0: entered allmulticast mode
[  544.688682][T28132] bridge_slave_0: entered promiscuous mode
[  544.708401][T28132] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.737153][T28132] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.776158][T28132] bridge_slave_1: entered allmulticast mode
[  544.783966][T28132] bridge_slave_1: entered promiscuous mode
[  544.942799][T28132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.975230][T28132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.995590][   T52] Bluetooth: hci0: command tx timeout
[  545.073723][T28132] team0: Port device team_slave_0 added
[  545.133890][T28132] team0: Port device team_slave_1 added
[  545.220268][T28132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.241917][T28132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.278811][T28132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.299113][T28132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.306655][T28132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.338468][T28132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.562385][T28132] hsr_slave_0: entered promiscuous mode
[  545.573484][T28132] hsr_slave_1: entered promiscuous mode
[  545.580860][T28132] debugfs: 'hsr0' already exists in 'hsr'
[  545.594358][T28132] Cannot create hsr debugfs directory
[  545.619024][T28246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  545.644009][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6385'.
[  545.716288][T28249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6385'.
[  546.030756][T28132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.055486][T28132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.066066][T28132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  546.222896][T28132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.244572][T28132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.274758][T28132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  546.391503][T28132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.402567][T28132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.427289][T28132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  546.512793][T28280] nbd: nbd2 already in use
[  546.519060][T28280] block nbd2: NBD_DISCONNECT
[  546.523731][T28280] block nbd2: Send disconnect failed -32
[  546.532866][T28280] block nbd2: shutting down sockets
[  546.613814][T28132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  546.636701][T28132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.655719][T28132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  546.991110][T16400] bond5 (unregistering): (slave ip6gretap1): Releasing active interface
[  547.075480][   T52] Bluetooth: hci0: command tx timeout
[  547.187280][T16400] dvmrp0 (unregistering): left allmulticast mode
[  547.220099][T16400] bond13 (unregistering): (slave geneve5): Releasing active interface
[  547.242850][T16400] bond8 (unregistering): (slave geneve4): Releasing backup interface
[  547.784953][T16400] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  547.795578][T16400] bond0 (unregistering): Released all slaves
[  547.809962][T16400] bond1 (unregistering): Released all slaves
[  547.913948][T16400] bond2 (unregistering): Released all slaves
[  547.929210][T16400] bond3 (unregistering): Released all slaves
[  547.943089][T16400] bond4 (unregistering): Released all slaves
[  547.959052][T16400] bond5 (unregistering): Released all slaves
[  547.981710][T16400] bond6 (unregistering): (slave bond7): Releasing backup interface
[  547.991830][T16400] bond6 (unregistering): Released all slaves
[  548.101513][T16400] bond7 (unregistering): Released all slaves
[  548.209899][T16400] bond8 (unregistering): Released all slaves
[  548.317373][T16400] bond9 (unregistering): Released all slaves
[  548.421330][T16400] bond10 (unregistering): Released all slaves
[  548.436043][T16400] bond11 (unregistering): Released all slaves
[  548.541325][T16400] bond12 (unregistering): Released all slaves
[  548.641998][T16400] bond13 (unregistering): Released all slaves
[  548.656403][T16400] bond14 (unregistering): Released all slaves
[  548.801000][T28309] __nla_validate_parse: 4 callbacks suppressed
[  548.801017][T28309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6404'.
[  548.867277][T28309] openvswitch: netlink: Flow actions attr not present in new flow.
[  548.884902][T28311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6405'.
[  548.937130][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6405'.
[  548.991424][T16400] tipc: Disabling bearer <udp:s>
[  549.018343][T16400] tipc: Left network mode
[  549.030820][T28320] openvswitch: netlink: Tunnel attr 117 out of range max 16
[  549.062765][T28132] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  549.148435][T28132] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  549.153747][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6408'.
[  549.166633][   T52] Bluetooth: hci0: command tx timeout
[  549.263344][T28132] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  549.276438][T28329] netlink: 'syz.0.6411': attribute type 11 has an invalid length.
[  549.284602][T28329] netlink: 'syz.0.6411': attribute type 11 has an invalid length.
[  549.292431][T28329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6411'.
[  549.310253][T28330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6410'.
[  549.320145][T28323] netlink: 'syz.2.6409': attribute type 11 has an invalid length.
[  549.336665][T28330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6410'.
[  549.351602][T28132] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  549.391652][T28330] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.398912][T28330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  549.406522][T28330] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.413710][T28330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.678975][T28347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6415'.
[  549.701935][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6415'.
[  549.710660][T28349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6416'.
[  549.974251][T28358] tap0: tun_chr_ioctl cmd 1074025676
[  549.981568][T28358] tap0: owner set to 0
[  550.010125][T28360] tipc: Started in network mode
[  550.015546][T28360] tipc: Node identity 5ef0f179f0f, cluster identity 4711
[  550.023006][T28360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.088366][T28366] syzkaller0: entered allmulticast mode
[  550.239239][T28360] tipc: Resetting bearer <eth:syzkaller0>
[  550.248735][T28371] netlink: 'syz.4.6425': attribute type 1 has an invalid length.
[  550.281098][T28132] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.473438][T28371] bond3: entered promiscuous mode
[  550.501878][T28371] 8021q: adding VLAN 0 to HW filter on device bond3
[  550.528426][T28359] tipc: Resetting bearer <eth:syzkaller0>
[  550.565522][T28359] tipc: Disabling bearer <eth:syzkaller0>
[  550.621469][T28385] bond3: (slave bridge2): making interface the new active one
[  550.630095][T28385] bridge2: entered promiscuous mode
[  550.637019][T28385] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  550.759062][T16400] veth1_vlan: left promiscuous mode
[  550.775383][T16400] veth0_vlan: left promiscuous mode
[  550.940868][T12579] smc: removing ib device syz1
[  551.237732][   T52] Bluetooth: hci0: command tx timeout
[  551.633341][T28132] 8021q: adding VLAN 0 to HW filter on device team0
[  551.647984][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.655233][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.658583][T28408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  551.702692][T16396] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.709971][T16396] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.789495][T28408] netlink: 'syz.3.6431': attribute type 3 has an invalid length.
[  552.165347][T28434] netlink: 'syz.2.6438': attribute type 1 has an invalid length.
[  552.277988][T28132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  552.391437][T28438] syzkaller0: entered promiscuous mode
[  552.397433][T28438] syzkaller0: entered allmulticast mode
[  552.432335][T28132] veth0_vlan: entered promiscuous mode
[  552.469298][T28132] veth1_vlan: entered promiscuous mode
[  552.595707][T28132] veth0_macvtap: entered promiscuous mode
[  552.614172][T28132] veth1_macvtap: entered promiscuous mode
[  552.644144][T28132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.661708][T28132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.682836][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.702721][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.722215][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.737497][   T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.605065][T28476] bond5 (unregistering): Released all slaves
[  554.632326][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.653579][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.777220][T12578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.794695][T12578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.825643][T28502] __nla_validate_parse: 5 callbacks suppressed
[  554.825662][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6458'.
[  554.937433][T28507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6460'.
[  555.066865][T28515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6343'.
[  555.380524][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6467'.
[  555.405988][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6467'.
[  555.431038][T28521] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.451427][T28521] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.531758][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'.
[  555.580338][T28538] netlink: 'syz.1.6471': attribute type 3 has an invalid length.
[  555.771771][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  555.790542][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  555.803958][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  555.818447][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  555.827477][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  555.976212][T28552] tipc: Started in network mode
[  555.985993][T28552] tipc: Node identity 4e6bcdbc4ab4, cluster identity 4711
[  555.993308][T28552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.012810][T28552] syzkaller0: entered promiscuous mode
[  556.023232][T28552] syzkaller0: entered allmulticast mode
[  556.043461][T28552] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  556.065186][T28552] tipc: Resetting bearer <eth:syzkaller0>
[  556.209327][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'.
[  556.258026][T28566] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6478'.
[  556.305961][T28568] tipc: Started in network mode
[  556.324700][T28568] tipc: Node identity 920b8b0961cc, cluster identity 4711
[  556.332137][T28568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.387957][T28551] tipc: Resetting bearer <eth:syzkaller0>
[  556.410055][T28551] tipc: Disabling bearer <eth:syzkaller0>
[  556.430417][T28547] chnl_net:caif_netlink_parms(): no params data found
[  556.445633][T28568] syzkaller0: entered promiscuous mode
[  556.461365][T28568] syzkaller0: entered allmulticast mode
[  556.549403][T28567] tipc: Resetting bearer <eth:syzkaller0>
[  556.575979][T28567] tipc: Disabling bearer <eth:syzkaller0>
[  556.742222][T28586] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  556.807374][T28547] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.825428][T28547] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.853591][T28547] bridge_slave_0: entered allmulticast mode
[  556.876315][T28547] bridge_slave_0: entered promiscuous mode
[  556.944161][T28595] netdevsim netdevsim3 ������: renamed from netdevsim0
[  556.964938][T28547] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.972254][T28547] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.981001][T28547] bridge_slave_1: entered allmulticast mode
[  556.990408][T28547] bridge_slave_1: entered promiscuous mode
[  557.018284][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'.
[  557.084078][T28547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  557.099874][T28547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  557.171773][T28547] team0: Port device team_slave_0 added
[  557.187662][T28547] team0: Port device team_slave_1 added
[  557.246570][T28547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.253588][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.280945][T28547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.295902][T28547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.310877][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.348395][T28547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.442182][T28547] hsr_slave_0: entered promiscuous mode
[  557.449838][T28547] hsr_slave_1: entered promiscuous mode
[  557.458598][T28547] debugfs: 'hsr0' already exists in 'hsr'
[  557.464812][T28547] Cannot create hsr debugfs directory
[  557.472959][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'.
[  557.507040][T28616] : entered promiscuous mode
[  557.768801][T28624] bond2 (unregistering): Released all slaves
[  557.878349][ T5840] Bluetooth: hci1: command tx timeout
[  558.009156][T28637] xfrm1: entered promiscuous mode
[  558.031872][T28637] xfrm1: entered allmulticast mode
[  558.165804][T28547] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  558.200586][T28547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  558.234013][T28547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  558.286082][T28547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  558.402547][T28547] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  558.426475][T28547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  558.451089][T28547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  558.461386][T28547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  558.501183][T28663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  558.521796][T28668] tipc: Started in network mode
[  558.526817][T28668] tipc: Node identity ac14140f, cluster identity 4711
[  558.534766][T28668] tipc: New replicast peer: 255.255.255.255
[  558.542567][T28668] tipc: Enabled bearer <udp:syz2>, priority 10
[  558.644959][T28679] xt_ecn: cannot match TCP bits for non-tcp packets
[  558.723271][T28671] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  558.760397][T28547] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  558.804823][T28547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  558.846885][T28547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  558.885933][T28547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  559.029464][T28547] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  559.055379][T28547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  559.069389][T28547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  559.083550][T28547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  559.204620][T28707] tipc: Invalid UDP bearer configuration
[  559.204679][T28707] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  559.558685][T28547] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  559.633690][T28547] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  559.690891][  T915] tipc: Node number set to 2886997007
[  559.711493][T28547] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  559.752380][T28547] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  559.958687][ T5840] Bluetooth: hci1: command tx timeout
[  560.033039][T28754] Bluetooth: MGMT ver 1.23
[  560.072591][T28547] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.160890][T28547] 8021q: adding VLAN 0 to HW filter on device team0
[  560.185692][T16396] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.192914][T16396] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.237294][T28761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.256946][T28760] netlink: zone id is out of range
[  560.259588][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.262108][T28760] netlink: zone id is out of range
[  560.262121][T28760] netlink: zone id is out of range
[  560.262133][T28760] netlink: get zone limit has 4 unknown bytes
[  560.269308][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.532399][ T6004] IPVS: starting estimator thread 0...
[  560.576013][T28777] netlink: 'syz.3.6537': attribute type 1 has an invalid length.
[  560.586998][T28777] nbd: error processing sock list
[  560.602804][T28777] block nbd2: shutting down sockets
[  560.645371][T28776] IPVS: using max 27 ests per chain, 64800 per kthread
[  560.879138][T28547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.964967][T28547] veth0_vlan: entered promiscuous mode
[  560.998718][T28547] veth1_vlan: entered promiscuous mode
[  561.091958][T28547] veth0_macvtap: entered promiscuous mode
[  561.104680][T16681] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  561.145814][T28807] IPv6: sit1: Disabled Multicast RS
[  561.152276][T28807] sit1: entered allmulticast mode
[  561.389726][T28547] veth1_macvtap: entered promiscuous mode
[  561.448736][T28547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.519762][T28547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.759148][ T3437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.780917][ T3437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.815727][ T6258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.837869][ T6258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.883878][T28824] __nla_validate_parse: 11 callbacks suppressed
[  561.883900][T28824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6546'.
[  561.946415][T28824] geneve2: entered promiscuous mode
[  562.035494][ T5840] Bluetooth: hci1: command tx timeout
[  562.111831][T28830] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6549'.
[  562.158300][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.184748][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.258015][T28839] veth0: entered promiscuous mode
[  562.289745][T28839] veth0: left promiscuous mode
[  562.301902][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.325689][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.420318][T28851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6556'.
[  562.471720][T28854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6556'.
[  562.562629][T28854] x_tables: duplicate underflow at hook 2
[  562.850163][T28880] netlink: 'syz.2.6563': attribute type 1 has an invalid length.
[  562.878153][T28880] netlink: 'syz.2.6563': attribute type 2 has an invalid length.
[  562.966425][T28889] xt_l2tp: v2 doesn't support IP mode
[  563.101231][T28898] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6569'.
[  563.189416][T28899] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6569'.
[  563.366588][T28911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6575'.
[  563.383803][T28911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6575'.
[  563.418508][T28913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6574'.
[  563.427833][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6574'.
[  564.114517][ T5840] Bluetooth: hci1: command tx timeout
[  564.159604][T28958] xt_policy: too many policy elements
[  564.309766][T17020] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  564.331341][T17020] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  564.349854][T17020] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  564.471606][T17020] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  564.581135][T28980] bond6: option miimon: invalid value (18446744073709543393)
[  564.593166][T28980] bond6: option miimon: allowed values 0 - 2147483647
[  564.604064][T28980] bond6 (unregistering): Released all slaves
[  565.031640][    T9] IPVS: starting estimator thread 0...
[  565.087374][T29016] netlink: 'syz.2.6610': attribute type 8 has an invalid length.
[  565.134903][T29014] IPVS: using max 25 ests per chain, 60000 per kthread
[  565.964095][T29059] netlink: 'syz.1.6621': attribute type 1 has an invalid length.
[  566.416274][T29039] bridge_slave_0: left allmulticast mode
[  566.421955][T29039] bridge_slave_0: left promiscuous mode
[  566.440704][T29039] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.458119][T29039] bridge_slave_1: left allmulticast mode
[  566.481249][T29039] bridge_slave_1: left promiscuous mode
[  566.488251][T29039] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.522251][T29039] bond0: (slave bond_slave_0): Releasing backup interface
[  566.561166][T29039] bond0: (slave bond_slave_1): Releasing backup interface
[  566.612679][T29039] team0: Port device team_slave_0 removed
[  566.656761][T29039] team0: Port device team_slave_1 removed
[  566.671811][T29039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.703505][T29039] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.734064][T29039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.765263][T29039] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.845694][T29039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  566.878814][T29059] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  567.042278][T29081] __nla_validate_parse: 20 callbacks suppressed
[  567.042301][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6630'.
[  567.075053][T29084] IPv4: Oversized IP packet from 127.202.26.0
[  567.485121][T29112] syzkaller0: entered promiscuous mode
[  567.490659][T29112] syzkaller0: entered allmulticast mode
[  567.593173][T29116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'.
[  567.690447][T29131] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6642'.
[  567.793017][T29140] netlink: 'syz.2.6645': attribute type 1 has an invalid length.
[  567.815876][T29140] netlink: 'syz.2.6645': attribute type 2 has an invalid length.
[  567.864887][T29144] bond0: (slave caif0): Error: Device type is different from other slaves
[  568.206414][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  568.678209][T29177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6655'.
[  569.061335][T29202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6663'.
[  569.308988][T29214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6667'.
[  569.599691][T29230] vlan2: entered promiscuous mode
[  569.605552][T29230] bridge0: entered promiscuous mode
[  569.696712][T29233] syzkaller0: entered promiscuous mode
[  569.703074][T29233] syzkaller0: entered allmulticast mode
[  569.758967][T29238] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6677'.
[  569.838031][T29244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.263467][T29254] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6681'.
[  570.973246][T29268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6686'.
[  571.867819][T29284] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.6691'.
[  572.563599][T29327] __nla_validate_parse: 1 callbacks suppressed
[  572.563621][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6703'.
[  572.952174][T29350] openvswitch: netlink: IP tunnel dst address not specified
[  572.972599][T29349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6711'.
[  573.062154][T29356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6713'.
[  573.069966][T29360] netlink: 'syz.1.6715': attribute type 2 has an invalid length.
[  573.075001][T29357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6713'.
[  573.092721][T29352] Bluetooth: MGMT ver 1.23
[  573.310012][T29373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6718'.
[  573.485568][T29377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6719'.
[  573.531061][T29379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6720'.
[  573.549246][T29385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6719'.
[  573.579841][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6719'.
[  573.619877][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6720'.
[  573.909478][T29410] netlink: 'syz.3.6730': attribute type 1 has an invalid length.
[  573.980005][T29410] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  573.994208][T29410] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  574.006719][T29410] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  574.172223][T29423] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4.
[  574.197934][T29427] team0: No ports can be present during mode change
[  574.216073][T29423] : entered promiscuous mode
[  574.243416][T29423] vxcan2: entered allmulticast mode
[  574.406722][T29442] IPVS: set_ctl: invalid protocol: 135 172.20.20.15:20004
[  574.629132][T29455] xt_l2tp: v2 doesn't support IP mode
[  575.186221][T29459] scsi_nl_rcv_msg: discarding partial skb
[  575.552038][T29496] netlink: 'syz.0.6761': attribute type 1 has an invalid length.
[  575.783333][T29513] ip6tnl3: entered promiscuous mode
[  575.820579][T29504] bond0: entered promiscuous mode
[  575.845683][T29504] bond_slave_0: entered promiscuous mode
[  575.851876][T29504] bond_slave_1: entered promiscuous mode
[  575.858288][T29504] bridge_slave_1: entered promiscuous mode
[  575.864649][T29504] bond0: entered allmulticast mode
[  575.871558][T29504] bond_slave_0: entered allmulticast mode
[  575.881052][T29522] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20004
[  575.892621][T29504] bond_slave_1: entered allmulticast mode
[  575.898660][T29504] bridge_slave_1: entered allmulticast mode
[  575.908264][T29504] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.378736][T29542] xt_hashlimit: size too large, truncated to 1048576
[  577.136798][T29581] team0 (unregistering): Port device team_slave_0 removed
[  577.157276][T29581] team0 (unregistering): Port device team_slave_1 removed
[  577.604477][T29619] __nla_validate_parse: 20 callbacks suppressed
[  577.604506][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6797'.
[  577.653689][T29619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6797'.
[  577.790483][T29619] geneve2: entered promiscuous mode
[  577.801605][T29619] geneve2: entered allmulticast mode
[  577.949795][T29636] bridge: RTM_NEWNEIGH with invalid state 0x8
[  577.958841][T29636] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6802'.
[  578.130226][T29647] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  578.151020][T29647] bond1: (slave lo): Enslaving as a backup interface with an up link
[  578.167391][T29647] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  578.340147][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6807'.
[  578.350211][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'.
[  578.375373][T16396] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  578.375470][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6807'.
[  578.403715][T16396] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  578.427472][T16396] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  578.442641][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'.
[  578.462267][T16396] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  578.813704][T29682] sctp: [Deprecated]: syz.0.6812 (pid 29682) Use of int in max_burst socket option deprecated.
[  578.813704][T29682] Use struct sctp_assoc_value instead
[  579.087410][T29697] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  579.108670][T29697] bond3 (unregistering): Released all slaves
[  579.138490][T29700] sch_fq: defrate 0 ignored.
[  579.147210][T29700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6819'.
[  579.251689][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'.
[  579.262848][T29702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'.
[  579.304835][T29702] netlink: 'syz.4.6820': attribute type 1 has an invalid length.
[  580.102610][T29746] netlink: 'syz.1.6832': attribute type 4 has an invalid length.
[  580.115911][T29738] bridge3: port 1(veth3) entered blocking state
[  580.122383][T29738] bridge3: port 1(veth3) entered disabled state
[  580.151224][T29738] veth3: entered allmulticast mode
[  580.159799][T29738] veth3: entered promiscuous mode
[  580.217558][T29748] bond6: option lp_interval: invalid value (0)
[  580.223992][T29748] bond6: option lp_interval: allowed values 1 - 2147483647
[  580.329549][T29748] bond6 (unregistering): Released all slaves
[  580.364760][T29749] bridge3: port 2(veth0_to_bond) entered blocking state
[  580.371976][T29749] bridge3: port 2(veth0_to_bond) entered disabled state
[  580.385178][T29749] veth0_to_bond: entered allmulticast mode
[  580.393497][T29749] veth0_to_bond: entered promiscuous mode
[  580.487640][T29757] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.509386][T29757] 8021q: adding VLAN 0 to HW filter on device team0
[  580.548216][T29757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  580.683305][T29772] netlink: 'syz.4.6841': attribute type 12 has an invalid length.
[  580.737942][T29772] bond6 (unregistering): Released all slaves
[  580.784832][T29781] nbd: must specify at least one socket
[  580.839775][T29776] bond6 (unregistering): Released all slaves
[  580.869743][T29755] syzkaller1: entered promiscuous mode
[  580.886596][T29755] syzkaller1: entered allmulticast mode
[  580.917497][T29778] block nbd0: NBD_DISCONNECT
[  580.922824][T29778] block nbd0: Send disconnect failed -32
[  580.929616][T29778] block nbd0: shutting down sockets
[  581.135324][T29796] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  581.192255][T29796] netlink: 'syz.1.6845': attribute type 1 has an invalid length.
[  581.585361][T29828] Bluetooth: MGMT ver 1.23
[  581.595999][T29828] Bluetooth: hci1: too big key_count value 32778
[  581.677444][T29834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  581.764182][T29835] syz_tun: entered allmulticast mode
[  581.809629][T29841] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:32775
[  581.871409][T29829] syz_tun: left allmulticast mode
[  582.073135][T29855] netlink: 'syz.4.6860': attribute type 1 has an invalid length.
[  582.286687][T29868] bond6: (slave gretap1): making interface the new active one
[  582.295681][T29868] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  582.511668][T29880] Bluetooth: MGMT ver 1.23
[  582.660674][T29890] xt_connbytes: Forcing CT accounting to be enabled
[  583.167038][T29923] netlink: 'syz.4.6878': attribute type 1 has an invalid length.
[  583.240023][T29928] netlink: 'syz.2.6882': attribute type 1 has an invalid length.
[  583.252547][T29928] __nla_validate_parse: 30 callbacks suppressed
[  583.252566][T29928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6882'.
[  583.368415][T29926] 8021q: adding VLAN 0 to HW filter on device bond8
[  583.384247][T29926] bond7: (slave bond8): making interface the new active one
[  583.396527][T29926] bond7: (slave bond8): Enslaving as an active interface with an up link
[  583.443888][ T5903] IPVS: starting estimator thread 0...
[  583.556851][T29939] IPVS: using max 25 ests per chain, 60000 per kthread
[  584.019498][T29972] rdma_op ffff88805476f1f0 conn xmit_rdma 0000000000000000
[  584.200667][T29985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6900'.
[  584.211483][T29988] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6901'.
[  584.248110][T29990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6902'.
[  584.258672][T29985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6900'.
[  584.400448][T30000] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6905'.
[  584.595541][   T52] Bluetooth: hci2: command 0x0405 tx timeout
[  584.601786][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  584.738884][T30031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6911'.
[  584.759996][T30031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6911'.
[  584.831634][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6913'.
[  584.859137][T30036] lo: MTU too low for tipc bearer
[  584.865205][T30036] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  584.892587][T30036] lo: MTU too low for tipc bearer
[  584.900571][T30036] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  585.159698][T30060] xt_TPROXY: Can be used only with -p tcp or -p udp
[  585.182669][T30056] netlink: 'syz.0.6918': attribute type 9 has an invalid length.
[  585.205724][T30062] netlink: 'syz.2.6921': attribute type 1 has an invalid length.
[  585.339514][T30062] 8021q: adding VLAN 0 to HW filter on device bond2
[  585.424191][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6921'.
[  585.719242][T30100] x_tables: ip_tables: sctp match: only valid for protocol 132
[  585.748996][T30098] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  585.827895][T30105] netlink: 'syz.2.6933': attribute type 10 has an invalid length.
[  585.849118][T30105] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  586.027667][T30119] tipc: MTU too low for tipc bearer
[  586.273854][T30136] x_tables: duplicate underflow at hook 1
[  586.295581][T30138] netlink: 'syz.0.6942': attribute type 21 has an invalid length.
[  586.712050][T30152] netdevsim netdevsim0 ������: renamed from netdevsim0
[  588.614354][T30173] syzkaller1: entered promiscuous mode
[  588.620003][T30173] syzkaller1: entered allmulticast mode
[  588.627510][T30183] caif0: mtu less than device minimum
[  588.836968][T30192] netlink: 'syz.3.6959': attribute type 21 has an invalid length.
[  588.854996][T30192] __nla_validate_parse: 10 callbacks suppressed
[  588.855019][T30192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6959'.
[  588.911372][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'.
[  588.919429][T30199] netlink: 'syz.4.6964': attribute type 1 has an invalid length.
[  588.941337][T30199] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6964'.
[  588.945182][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6961'.
[  589.023671][T30200] bridge0: entered promiscuous mode
[  589.037872][T30200] macsec2: entered promiscuous mode
[  589.056868][T30200] macsec2: entered allmulticast mode
[  589.062283][T30200] bridge0: entered allmulticast mode
[  589.346316][T30213] netlink: 'syz.4.6967': attribute type 1 has an invalid length.
[  589.374523][T30213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6967'.
[  589.530623][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6968'.
[  589.545952][T30219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6969'.
[  589.625439][T30224] nbd0: detected capacity change from 0 to 1407374883553407
[  589.648964][ T5840] block nbd0: Receive control failed (result -32)
[  589.736553][T30235] netlink: 'syz.4.6973': attribute type 8 has an invalid length.
[  589.743093][T30231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6972'.
[  589.748930][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[  589.932022][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6975'.
[  589.971836][T30245] netlink: 'syz.3.6975': attribute type 30 has an invalid length.
[  590.637384][T30280] netlink: 'syz.0.6986': attribute type 1 has an invalid length.
[  590.657748][T30277] syzkaller1: entered promiscuous mode
[  590.663243][T30277] syzkaller1: entered allmulticast mode
[  590.721254][T30280] 8021q: adding VLAN 0 to HW filter on device bond3
[  590.788274][T30282] bond4: Unable to set up delay as MII monitoring is disabled
[  590.811704][T30282] bond4 (unregistering): Released all slaves
[  591.187405][T30297] netlink: 'syz.0.6991': attribute type 8 has an invalid length.
[  591.328839][T30310] delete_channel: no stack
[  591.513427][T30326] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  592.209616][T30343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.252317][T30343] syzkaller0: entered promiscuous mode
[  592.274951][T30343] syzkaller0: entered allmulticast mode
[  592.361264][T30361] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  592.457115][T30343] tipc: Resetting bearer <eth:syzkaller0>
[  592.484453][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.512958][T30343] tipc: Resetting bearer <eth:syzkaller0>
[  592.562366][T30343] tipc: Disabling bearer <eth:syzkaller0>
[  592.772373][T30386] netlink: 'syz.4.7018': attribute type 6 has an invalid length.
[  593.205063][T30422] netlink: 'syz.4.7026': attribute type 2 has an invalid length.
[  593.469529][T30430] bond1: option mode: invalid value (133)
[  593.483973][T30430] bond1 (unregistering): Released all slaves
[  593.506631][T30435] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.513994][T30435] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.545193][T30436] syzkaller0: entered promiscuous mode
[  593.561572][T30436] syzkaller0: entered allmulticast mode
[  593.570137][T30437] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.577368][T30437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.584916][T30437] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.592103][T30437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.653164][T30437] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.660483][T30437] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.285372][T30469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.326518][T30469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.577255][T30488] netlink: 'syz.3.7046': attribute type 1 has an invalid length.
[  594.586615][T30488] netlink: 'syz.3.7046': attribute type 2 has an invalid length.
[  594.595223][T30488] netlink: 'syz.3.7046': attribute type 1 has an invalid length.
[  594.740018][T30490] __nla_validate_parse: 13 callbacks suppressed
[  594.740048][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7047'.
[  594.757954][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7047'.
[  594.829036][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7049'.
[  594.849943][T30492] macsec1: entered promiscuous mode
[  594.856534][T30492] macsec1: entered allmulticast mode
[  594.861898][T30492] bridge0: entered allmulticast mode
[  594.868135][T30495] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7048'.
[  594.875144][T30492] bridge0: port 2(macsec1) entered blocking state
[  594.888509][T30492] bridge0: port 2(macsec1) entered disabled state
[  594.900657][T30492] bridge0: left allmulticast mode
[  595.044071][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'.
[  596.211135][T30513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.260962][T30513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.388888][T30513] veth0_virt_wifi: left allmulticast mode
[  596.702321][T30513] ip6gre1: left allmulticast mode
[  596.719326][T30513] bond3: left promiscuous mode
[  596.724624][T30513] bridge2: left promiscuous mode
[  596.746038][T30513] xfrm1: left promiscuous mode
[  596.750999][T30513] xfrm1: left allmulticast mode
[  596.823854][T30531] syzkaller1: entered promiscuous mode
[  596.854428][T30531] syzkaller1: entered allmulticast mode
[  596.887597][T16681] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  596.930117][T16681] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.046554][T16681] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.097512][T30553] bond0: Error: Cannot enslave bond to itself.
[  597.109766][T16681] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.300498][T30566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7065'.
[  597.361502][T30571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7065'.
[  597.591431][T30581] openvswitch: netlink: Message has 1 unknown bytes.
[  597.598936][T30581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.311226][T30600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.324200][T30599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.517673][T30622] netlink: 'syz.1.7077': attribute type 33 has an invalid length.
[  599.527120][T30622] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7077'.
[  599.575344][T30623] netlink: 'syz.3.7078': attribute type 1 has an invalid length.
[  599.595379][T30623] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.7078'.
[  599.607572][T30629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7079'.
[  599.671736][T30636] netlink: 'syz.0.7080': attribute type 11 has an invalid length.
[  599.751306][T30640] netlink: 'syz.1.7077': attribute type 1 has an invalid length.
[  599.799469][T30640] netlink: 'syz.1.7077': attribute type 2 has an invalid length.
[  599.846837][T30643] __nla_validate_parse: 1 callbacks suppressed
[  599.846857][T30643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7081'.
[  600.217637][T30674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'.
[  600.332748][T30685] bond1: (slave lo): Releasing backup interface
[  600.346509][T30685] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  600.429745][T30685] bond0: (slave dummy0): Releasing backup interface
[  600.481584][T30685] bridge_slave_0: left allmulticast mode
[  600.491360][T30685] bridge_slave_0: left promiscuous mode
[  600.520196][T30685] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.550680][T30685] bridge_slave_1: left allmulticast mode
[  600.563548][T30685] bridge_slave_1: left promiscuous mode
[  600.570461][T30685] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.591470][T30685] bond0: (slave bond_slave_0): Releasing backup interface
[  600.604110][T30685] bond0: (slave bond_slave_1): Releasing backup interface
[  600.638900][T30685] team0: Port device team_slave_0 removed
[  600.668386][T30685] team0: Port device team_slave_1 removed
[  600.689452][T30685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.709142][T30685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  600.733431][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7098'.
[  600.743638][T30685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  600.752003][T30685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  600.777020][T30685] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  600.821945][T30684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  600.891830][T30710] hsr_slave_0: left promiscuous mode
[  600.899435][T30710] hsr_slave_1: left promiscuous mode
[  601.084003][T30720] netlink: 'syz.1.7102': attribute type 1 has an invalid length.
[  601.180472][T30718] netlink: 27832 bytes leftover after parsing attributes in process `syz.2.7101'.
[  601.222163][T30728] bond1: (slave ip6gretap1): making interface the new active one
[  601.264521][T30728] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  601.272383][T30728] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  601.308313][T30728] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  601.402061][T30743] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7108'.
[  601.608474][T30755] netlink: 'syz.0.7112': attribute type 1 has an invalid length.
[  601.627765][T30755] netlink: 'syz.0.7112': attribute type 2 has an invalid length.
[  601.856302][T30768] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7117'.
[  601.891774][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7116'.
[  601.944567][T30780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7114'.
[  601.991552][T30760] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.999409][T30760] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.016503][T30777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7117'.
[  602.062289][T30786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7118'.
[  602.106050][T30760] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  602.932368][T30827] xt_ecn: cannot match TCP bits for non-tcp packets
[  603.001154][T30829] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  603.349827][T30848] syzkaller1: entered promiscuous mode
[  603.358059][T30848] syzkaller1: entered allmulticast mode
[  603.549416][T30860] xt_TCPMSS: Only works on TCP SYN packets
[  603.846175][T30878] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  604.287454][T30888] netlink: 'syz.3.7152': attribute type 12 has an invalid length.
[  604.933763][T30932] tipc: Enabled bearer <udp:s>, priority 10
[  604.948056][T30930] __nla_validate_parse: 10 callbacks suppressed
[  604.948078][T30930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7164'.
[  604.971171][T30930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7164'.
[  605.219831][T30944] xt_hashlimit: max too large, truncated to 1048576
[  605.577981][T30969] netlink: 'syz.1.7175': attribute type 10 has an invalid length.
[  605.593069][T30974] openvswitch: netlink: IP tunnel dst address not specified
[  605.617186][T30975] Cannot find add_set index 2 as target
[  605.813418][T30993] syzkaller0: entered promiscuous mode
[  605.821850][T30993] syzkaller0: entered allmulticast mode
[  605.921244][T31004] netlink: 'syz.2.7182': attribute type 1 has an invalid length.
[  605.935044][T31004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7182'.
[  605.944872][T31004] NCSI netlink: No device for ifindex 0
[  605.957371][T31004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  606.079787][  T915] tipc: Node number set to 4089940745
[  606.136072][T31016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'.
[  606.162348][T31016] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7185'.
[  606.191149][T31016] erspan1: entered allmulticast mode
[  606.269343][T31020] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7186'.
[  606.302217][T31022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7187'.
[  606.701857][T31048] netlink: 'syz.1.7193': attribute type 21 has an invalid length.
[  606.715893][T31048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7193'.
[  606.872734][T31062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.148059][T31074] x_tables: duplicate underflow at hook 1
[  607.197365][T31077] netlink: 'syz.2.7202': attribute type 1 has an invalid length.
[  607.216507][T31077] netlink: 'syz.2.7202': attribute type 2 has an invalid length.
[  607.245959][T31051] infiniband !yz!: set down
[  607.254415][T31051] infiniband !yz!: added team_slave_0
[  607.309140][T31079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  607.421578][T31051] RDS/IB: !yz!: added
[  607.442457][T31051] smc: adding ib device !yz! with port count 1
[  607.477627][T31051] smc:    ib device !yz! port 1 has no pnetid
[  607.537967][T31095] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  607.642091][T31105] openvswitch: netlink: Unknown key attributes 2
[  607.672505][T31102] 8021q: adding VLAN 0 to HW filter on device bond4
[  607.680823][T31105] rdma_op ffff8880799c11f0 conn xmit_rdma 0000000000000000
[  607.715991][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  607.999537][T31120] netlink: 'syz.0.7215': attribute type 21 has an invalid length.
[  608.028368][T31120] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7215'.
[  608.056087][T31120] netlink: 'syz.0.7215': attribute type 5 has an invalid length.
[  608.082940][T31120] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7215'.
[  608.142727][T31124] syzkaller0: entered promiscuous mode
[  608.162064][T31124] syzkaller0: entered allmulticast mode
[  608.203710][T31126] 0: reclassify loop, rule prio 0, protocol 800
[  608.307155][T31124] netlink: 'syz.1.7216': attribute type 2 has an invalid length.
[  609.942029][T31190] netlink: 'syz.1.7235': attribute type 2 has an invalid length.
[  609.965919][T31190] �9: entered promiscuous mode
[  610.025937][T31195] syzkaller0: entered promiscuous mode
[  610.057114][T31195] syzkaller0: entered allmulticast mode
[  610.079651][T31197] bridge6: entered promiscuous mode
[  610.108575][T31197] bridge6: entered allmulticast mode
[  610.134872][T31197] team0: Port device bridge6 added
[  610.166262][T31202] bridge0: port 3(team0) entered blocking state
[  610.176492][T31202] bridge0: port 3(team0) entered disabled state
[  610.186177][T31202] team0: entered allmulticast mode
[  610.193660][T31202] team_slave_0: entered allmulticast mode
[  610.199937][T31202] team_slave_1: entered allmulticast mode
[  610.215501][T31202] veth0_virt_wifi: entered allmulticast mode
[  610.227562][T31202] team0: entered promiscuous mode
[  610.232702][T31202] team_slave_0: entered promiscuous mode
[  610.239146][T31202] team_slave_1: entered promiscuous mode
[  610.245847][T31202] veth0_virt_wifi: entered promiscuous mode
[  610.638810][T31223] __nla_validate_parse: 1 callbacks suppressed
[  610.638831][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7245'.
[  610.647594][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7245'.
[  610.662249][T31224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7244'.
[  610.864725][T31236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7249'.
[  611.119988][T31248] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000
[  611.133075][T31250] sctp: [Deprecated]: syz.1.7254 (pid 31250) Use of int in maxseg socket option.
[  611.133075][T31250] Use struct sctp_assoc_value instead
[  611.137225][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7253'.
[  611.219400][T31247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7253'.
[  611.228763][T31247] netlink: 'syz.2.7253': attribute type 7 has an invalid length.
[  611.238604][T31247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7253'.
[  611.420017][T31259] netlink: 'syz.1.7256': attribute type 2 has an invalid length.
[  611.438400][T31259] netlink: 'syz.1.7256': attribute type 8 has an invalid length.
[  611.446779][T31261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7257'.
[  611.464467][T31259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7256'.
[  611.728070][T31277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7261'.
[  611.996722][T31289] netlink: 'syz.4.7267': attribute type 21 has an invalid length.
[  612.536745][T31312] bond3: Invalid ad_actor_system MAC address.
[  612.544156][T31312] bond3: option ad_actor_system: invalid value (1)
[  612.558951][T31312] bond3 (unregistering): Released all slaves
[  612.629271][T31315] netlink: 'syz.4.7276': attribute type 5 has an invalid length.
[  612.637593][T31315] netlink: 'syz.4.7276': attribute type 5 has an invalid length.
[  612.657526][T31315] netlink: 'syz.4.7276': attribute type 5 has an invalid length.
[  612.684541][T31315] netlink: 'syz.4.7276': attribute type 5 has an invalid length.
[  612.692319][T31315] netlink: 'syz.4.7276': attribute type 5 has an invalid length.
[  612.958367][ T3069] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  613.179631][T31352] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.403890][T31362] nbd: socks must be embedded in a SOCK_ITEM attr
[  613.458774][T31362] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  613.459162][T31367] netlink: 'syz.2.7290': attribute type 5 has an invalid length.
[  614.404231][T31416] smc: net device team0 applied user defined pnetid SYZ2
[  614.421961][T31416] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  615.649204][T31470] __nla_validate_parse: 26 callbacks suppressed
[  615.649228][T31470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7317'.
[  616.200294][T31495] 8021q: adding VLAN 0 to HW filter on device bond2
[  616.207882][T31499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7327'.
[  616.414634][T31509] xt_bpf: check failed: parse error
[  616.441943][T31509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7330'.
[  616.454108][T31515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7331'.
[  616.458155][T31509] validate_nla: 3 callbacks suppressed
[  616.458174][T31509] netlink: 'syz.1.7330': attribute type 5 has an invalid length.
[  616.477348][T31509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7330'.
[  616.506610][T31516] netlink: 'syz.0.7333': attribute type 1 has an invalid length.
[  616.573962][T31518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7333'.
[  616.655246][T31526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  616.745316][T31535] bridge7: entered promiscuous mode
[  616.750630][T31535] bridge7: entered allmulticast mode
[  616.887804][T31544] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  617.020469][T31558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7341'.
[  617.040099][T31556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7344'.
[  617.040868][T31558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'.
[  617.178129][T31561] pimreg: entered allmulticast mode
[  617.199656][T31551] pimreg: left allmulticast mode
[  617.269003][T31567] tc_dump_action: action bad kind
[  617.281012][T31569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7347'.
[  617.437602][T31579] netlink: 'syz.3.7351': attribute type 4 has an invalid length.
[  617.456127][T31579] netlink: 'syz.3.7351': attribute type 1 has an invalid length.
[  617.633205][T31591] netlink: 'syz.4.7354': attribute type 16 has an invalid length.
[  617.713033][T31598] Cannot find del_set index 0 as target
[  618.146544][T31631] can: request_module (can-proto-0) failed.
[  618.205689][T31634] dvmrp0: entered allmulticast mode
[  618.211140][T31625] dvmrp0: left allmulticast mode
[  618.398631][T31649] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  618.502126][T31655] netlink: 'syz.1.7372': attribute type 6 has an invalid length.
[  618.516526][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.522724][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.531359][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.573333][T31657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  618.591739][T31658] netlink: 'syz.4.7374': attribute type 10 has an invalid length.
[  618.629878][T31658] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  618.639237][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.647659][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.680639][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.692212][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.715738][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.723191][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.747230][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.773036][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.787245][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.795650][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.832873][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.842727][T31657] wlan0 speed is unknown, defaulting to 1000
[  618.898359][T31678] syzkaller1: entered promiscuous mode
[  618.923191][T31678] syzkaller1: entered allmulticast mode
[  619.647349][T31712] kthread_run failed with err -4
[  619.891660][T31737] netlink: 'syz.0.7394': attribute type 1 has an invalid length.
[  620.100906][T31748] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  620.149318][T31754] x_tables: duplicate underflow at hook 2
[  620.846357][T31795] bond4: option miimon: invalid value (18446744073709551585)
[  620.853796][T31795] bond4: option miimon: allowed values 0 - 2147483647
[  620.862270][T31795] bond4 (unregistering): Released all slaves
[  620.902445][T31790] __nla_validate_parse: 13 callbacks suppressed
[  620.902461][T31790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7412'.
[  620.919079][T31790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7412'.
[  620.928456][T31790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7412'.
[  620.943305][T31790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7412'.
[  621.130406][T31772] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  621.182840][T31807] netlink: 'syz.2.7418': attribute type 1 has an invalid length.
[  621.199964][T31804] netlink: 'syz.0.7416': attribute type 12 has an invalid length.
[  621.220352][T31807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7418'.
[  621.366610][T31819] bond10: (slave veth5): Enslaving as an active interface with a down link
[  621.520472][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7423'.
[  621.539052][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7423'.
[  621.555472][T31830] validate_nla: 1 callbacks suppressed
[  621.555510][T31830] netlink: 'syz.0.7423': attribute type 3 has an invalid length.
[  621.572519][T31833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'.
[  622.163442][T31841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7425'.
[  622.340885][T31859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7431'.
[  622.703078][T31874] openvswitch: netlink: Key type 278 is out of range max 32
[  622.883303][T31891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  622.973566][T31891] team0: Mode changed to "loadbalance"
[  623.479232][T31924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  623.526283][T31924] syzkaller0: entered promiscuous mode
[  623.531821][T31924] syzkaller0: entered allmulticast mode
[  623.559181][T31924] tipc: Resetting bearer <eth:syzkaller0>
[  623.653895][T31937] tipc: Resetting bearer <eth:syzkaller0>
[  623.696324][T31937] tipc: Disabling bearer <eth:syzkaller0>
[  624.149692][T31969] 8021q: VLANs not supported on ip_vti0
[  624.325642][T31978] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  624.433513][T31985] netlink: 'syz.2.7466': attribute type 7 has an invalid length.
[  624.451654][T31985] netlink: 'syz.2.7466': attribute type 8 has an invalid length.
[  624.502994][T31990] xt_hashlimit: overflow, try lower: 3/0
[  625.276752][T32027] tap0: tun_chr_ioctl cmd 2148553947
[  625.890299][T32058] netlink: 'syz.1.7484': attribute type 13 has an invalid length.
[  626.097342][T32068] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.155983][T32074] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  626.266438][T32079] __nla_validate_parse: 11 callbacks suppressed
[  626.266461][T32079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7494'.
[  626.330611][T32086] x_tables: duplicate underflow at hook 1
[  626.426823][T32091] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  626.514858][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  626.610681][T32100] netlink: 'syz.0.7499': attribute type 21 has an invalid length.
[  627.149779][T32138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7509'.
[  627.183005][T32139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7509'.
[  627.209169][T32137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7510'.
[  627.275131][T32137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7510'.
[  627.284183][T32137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7510'.
[  627.285387][T32146] netlink: 'syz.1.7512': attribute type 23 has an invalid length.
[  627.407591][T32150] netlink: 'syz.4.7515': attribute type 83 has an invalid length.
[  627.416350][T32151] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7515'.
[  627.428817][T32150] xt_time: invalid argument - start or stop time greater than 23:59:59
[  627.504083][T32151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  627.728318][T32174] netlink: 'syz.4.7521': attribute type 3 has an invalid length.
[  627.852602][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7522'.
[  627.888946][T32188] netlink: 'syz.2.7526': attribute type 14 has an invalid length.
[  628.215029][T32210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7531'.
[  628.439802][T32219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7536'.
[  628.441075][T32220] netlink: 'syz.1.7536': attribute type 26 has an invalid length.
[  628.872711][T32251] netlink: 'syz.0.7543': attribute type 2 has an invalid length.
[  629.056032][T32261] netlink: 'syz.3.7547': attribute type 5 has an invalid length.
[  629.281138][T32277] netlink: 'syz.3.7551': attribute type 1 has an invalid length.
[  629.350187][T32277] bond4: entered promiscuous mode
[  629.356478][T32277] 8021q: adding VLAN 0 to HW filter on device bond4
[  629.427902][T32277] bond4: entered allmulticast mode
[  629.511804][T32282] syzkaller0: entered promiscuous mode
[  629.521877][T32282] syzkaller0: entered allmulticast mode
[  629.562590][T32277] bond4: (slave bridge3): making interface the new active one
[  629.564114][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  629.581012][T32277] bridge3: entered promiscuous mode
[  629.614759][T32277] bridge3: entered allmulticast mode
[  629.629085][T32277] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  629.792304][T32304] netlink: 'syz.1.7555': attribute type 4 has an invalid length.
[  629.929190][T32313] IPv6: NLM_F_CREATE should be specified when creating new route
[  629.937525][T32313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  629.944903][T32313] IPv6: NLM_F_CREATE should be set when creating new route
[  631.634891][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  631.652185][T32329] netlink: 'syz.4.7560': attribute type 18 has an invalid length.
[  631.769078][T32339] __nla_validate_parse: 5 callbacks suppressed
[  631.769100][T32339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7563'.
[  632.053851][T32360] netlink: 'syz.2.7568': attribute type 33 has an invalid length.
[  632.088912][T32360] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7568'.
[  632.345150][T32377] netlink: 'syz.4.7574': attribute type 2 has an invalid length.
[  632.401114][T32377] syzkaller0: entered promiscuous mode
[  632.427517][T32377] syzkaller0: entered allmulticast mode
[  632.779622][T32408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7580'.
[  632.900330][T32413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.911453][T32413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7582'.
[  632.957830][T32413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7582'.
[  632.993978][T32420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7585'.
[  633.007702][T32416] xt_CT: No such helper "pptp"
[  633.208403][T32435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7589'.
[  633.240577][T32431] netlink: 'syz.4.7589': attribute type 1 has an invalid length.
[  633.265308][T32431] netlink: 340 bytes leftover after parsing attributes in process `syz.4.7589'.
[  633.385715][T32444] netlink: 'syz.1.7591': attribute type 21 has an invalid length.
[  633.477202][T32454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7596'.
[  633.499804][T32454] bridge_slave_1: left allmulticast mode
[  633.513467][T32457] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7595'.
[  633.525526][T32454] bridge_slave_1: left promiscuous mode
[  633.536300][T32457] unsupported nlmsg_type 40
[  633.551879][T32454] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.570427][T32454] bridge_slave_0: left allmulticast mode
[  633.579249][T32454] bridge_slave_0: left promiscuous mode
[  633.586755][T32454] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.519544][T32503] bond5: entered allmulticast mode
[  634.665681][T32512] ip6gretap1: entered allmulticast mode
[  634.671747][T32512] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  634.732899][T32519] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  634.787048][T32519] bond1: (slave lo): Enslaving as a backup interface with an up link
[  634.796633][T32519] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  634.936542][T32525] xt_l2tp: v2 sid > 0xffff: 1114112
[  634.997542][T32536] netlink: 'syz.0.7619': attribute type 20 has an invalid length.
[  635.013621][T32536] netlink: 'syz.0.7619': attribute type 20 has an invalid length.
[  635.187409][T32556] netlink: 'syz.0.7624': attribute type 1 has an invalid length.
[  635.199057][T32556] xt_l2tp: v2 doesn't support IP mode
[  635.209300][T32556] netlink: 'syz.0.7624': attribute type 1 has an invalid length.
[  635.281316][T32557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.293556][T32565] x_tables: duplicate underflow at hook 2
[  635.717844][T32588] netlink: 'syz.0.7634': attribute type 12 has an invalid length.
[  636.062837][T32601] syzkaller0: entered promiscuous mode
[  636.090000][T32601] syzkaller0: entered allmulticast mode
[  637.032161][T32665] xt_l2tp: wrong L2TP version: 0
[  637.043522][T32669] vxlan0: entered promiscuous mode
[  637.080047][T32669] vxlan0: entered allmulticast mode
[  637.098348][   T36] netdevsim netdevsim3 ������: set [0, 0] type 1 family 0 port 8472 - 0
[  637.139394][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  637.181111][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  637.221460][   T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.753027][T32718] __nla_validate_parse: 16 callbacks suppressed
[  637.753049][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7665'.
[  637.825245][T32718] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7665'.
[  637.921750][T32724] x_tables: unsorted entry at hook 1
[  638.042972][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7669'.
[  638.346055][T32743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.626567][T32757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.684072][T32763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  638.739749][T32766] pimreg: entered allmulticast mode
[  638.872265][  T306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7685'.
[  638.886493][  T306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7685'.
[  638.926681][  T306] bridge0: port 1(vlan2) entered blocking state
[  638.936925][  T306] bridge0: port 1(vlan2) entered disabled state
[  638.943545][  T306] vlan2: entered allmulticast mode
[  638.961767][  T318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7686'.
[  638.972532][  T306] vlan2: left allmulticast mode
[  639.201689][  T329] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7690'.
[  639.212337][  T329] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7690'.
[  639.320656][  T329] bond11: Unable to set up delay as MII monitoring is disabled
[  639.355706][  T329] bond11 (unregistering): Released all slaves
[  639.406012][  T345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7692'.
[  639.449019][  T345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7692'.
[  639.597710][  T354] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  639.882432][  T369] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  639.940749][  T376] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode
[  639.961537][  T376] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode
[  640.070784][  T381] netlink: 'syz.0.7703': attribute type 1 has an invalid length.
[  640.347279][  T402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.787736][  T430] delete_channel: no stack
[  641.742818][  T470] xt_hashlimit: max too large, truncated to 1048576
[  642.248732][  T496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.767628][  T529] syzkaller1: entered promiscuous mode
[  642.773151][  T529] syzkaller1: entered allmulticast mode
[  642.865778][  T534] bridge: RTM_NEWNEIGH with invalid ether address
[  642.930537][  T532] syzkaller1: entered promiscuous mode
[  642.945031][  T532] syzkaller1: entered allmulticast mode
[  643.036579][  T543] __nla_validate_parse: 12 callbacks suppressed
[  643.036601][  T543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7750'.
[  643.058242][  T544] Cannot find set identified by id 1 to match
[  643.165733][  T505] wlan0 speed is unknown, defaulting to 1000
[  643.189041][  T548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7753'.
[  644.069283][  T508] wlan0 speed is unknown, defaulting to 1000
[  644.182277][  T611] netlink: 'syz.1.7770': attribute type 83 has an invalid length.
[  644.214706][  T611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7770'.
[  644.264553][  T616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7772'.
[  644.304166][  T620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7773'.
[  644.305277][  T611] netlink: 'syz.1.7770': attribute type 5 has an invalid length.
[  644.334803][  T611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7770'.
[  644.513040][  T633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7777'.
[  644.581757][  T633] syzkaller0: entered promiscuous mode
[  644.594781][  T633] syzkaller0: entered allmulticast mode
[  644.731369][  T649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7782'.
[  644.893412][  T656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7783'.
[  644.919136][  T660] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  644.940069][  T666] syzkaller1: entered promiscuous mode
[  644.982026][  T666] syzkaller1: entered allmulticast mode
[  645.220565][  T682] netlink: 'syz.4.7790': attribute type 22 has an invalid length.
[  645.220984][  T681] netlink: 'syz.0.7791': attribute type 1 has an invalid length.
[  645.239023][  T682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7790'.
[  645.284837][  T682] netlink: 'syz.4.7790': attribute type 22 has an invalid length.
[  645.295314][  T681] 8021q: adding VLAN 0 to HW filter on device bond6
[  645.302614][T16396] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  645.314185][T16396] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  645.324933][ T4598] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  645.333662][ T4598] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  645.459537][  T695] sctp: [Deprecated]: syz.4.7795 (pid 695) Use of struct sctp_assoc_value in delayed_ack socket option.
[  645.459537][  T695] Use struct sctp_sack_info instead
[  645.658329][  T710] netlink: 'syz.2.7801': attribute type 1 has an invalid length.
[  645.658333][  T711] netlink: 'syz.2.7801': attribute type 1 has an invalid length.
[  646.491593][  T767] syzkaller0: entered promiscuous mode
[  646.506533][  T767] syzkaller0: entered allmulticast mode
[  647.088521][  T793] bond3: Unable to set up delay as MII monitoring is disabled
[  647.128110][  T793] bond3 (unregistering): Released all slaves
[  647.396637][  T817] sctp: [Deprecated]: syz.1.7830 (pid 817) Use of struct sctp_assoc_value in delayed_ack socket option.
[  647.396637][  T817] Use struct sctp_sack_info instead
[  647.417243][  T817] netlink: 'syz.1.7830': attribute type 23 has an invalid length.
[  647.997006][  T855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.543588][  T893] __nla_validate_parse: 11 callbacks suppressed
[  648.543611][  T893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7856'.
[  648.929746][  T917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7864'.
[  649.013102][  T923] netlink: 'syz.1.7865': attribute type 1 has an invalid length.
[  649.110874][  T923] bond3: entered promiscuous mode
[  649.118474][  T923] 8021q: adding VLAN 0 to HW filter on device bond3
[  649.125731][  T932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7867'.
[  649.139186][  T929] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  649.147894][  T933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  649.163579][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  649.184115][  T923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7865'.
[  649.221539][  T923] bond3: (slave bridge5): making interface the new active one
[  649.230504][  T923] bridge5: entered promiscuous mode
[  649.238383][  T923] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  649.339064][  T944] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7869'.
[  649.366258][  T950] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  649.388520][  T950] bond12 (unregistering): Released all slaves
[  649.606253][  T967] bond0: entered promiscuous mode
[  649.615329][  T967] batadv0: entered promiscuous mode
[  649.647259][  T967] debugfs: 'hsr1' already exists in 'hsr'
[  649.656338][  T967] Cannot create hsr debugfs directory
[  649.662049][  T967] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  649.673848][  T967] 8021q: adding VLAN 0 to HW filter on device hsr1
[  649.723224][  T975] sch_fq: defrate 0 ignored.
[  649.724030][  T976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7876'.
[  649.739118][  T976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7876'.
[  649.748344][  T976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7876'.
[  649.767255][  T976] lo: entered promiscuous mode
[  649.774593][  T976] tunl0: entered promiscuous mode
[  649.780535][  T976] gre0: entered promiscuous mode
[  649.796067][  T976] gretap0: entered promiscuous mode
[  649.812120][  T976] erspan0: entered promiscuous mode
[  649.822216][  T976] ip_vti0: entered promiscuous mode
[  649.830054][  T978] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000
[  650.272551][ T1010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7888'.
[  650.636478][ T1033] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7893'.
[  650.850407][ T1049] tipc: Enabling <eth:lo> not permitted
[  650.859650][ T1049] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  650.960882][ T1060] syzkaller0: entered promiscuous mode
[  650.966903][ T1060] syzkaller0: entered allmulticast mode
[  651.122372][ T1067] netlink: 'syz.2.7899': attribute type 10 has an invalid length.
[  651.431756][ T1086] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  651.543529][ T1093] pimreg: left allmulticast mode
[  651.800988][ T1111] netlink: 'syz.1.7912': attribute type 8 has an invalid length.
[  652.373484][ T1150] syzkaller0: entered promiscuous mode
[  652.379250][ T1150] syzkaller0: entered allmulticast mode
[  653.463978][ T1196] netlink: 'syz.1.7935': attribute type 1 has an invalid length.
[  653.474923][   T52] Bluetooth: hci1: link tx timeout
[  653.481239][   T52] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  653.492241][   T52] Bluetooth: hci1: link tx timeout
[  653.499120][   T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  653.842605][ T1220] __nla_validate_parse: 7 callbacks suppressed
[  653.842626][ T1220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7942'.
[  653.864675][ T1220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7942'.
[  653.893209][ T1220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7942'.
[  653.903710][ T1220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7942'.
[  653.916009][ T1226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7944'.
[  654.066287][ T1236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7946'.
[  654.388970][ T1258] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7954'.
[  654.479729][ T1265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7956'.
[  654.502622][ T1267] netlink: 'syz.1.7957': attribute type 1 has an invalid length.
[  654.622607][ T1272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7959'.
[  655.005844][ T1300] netlink: 'syz.1.7966': attribute type 9 has an invalid length.
[  655.101637][ T1305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.116515][ T1305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.151140][ T1311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7966'.
[  655.290273][ T1305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.306159][ T1305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.318727][ T1318] netlink: 'syz.4.7969': attribute type 1 has an invalid length.
[  655.420394][ T1305] Oops: general protection fault, probably for non-canonical address 0xe07f9e1900000004: 0000 [#1] SMP KASAN PTI
[  655.424028][ T1326] netlink: 'syz.1.7971': attribute type 32 has an invalid length.
[  655.432368][ T1305] KASAN: maybe wild-memory-access in range [0x03fd10c800000020-0x03fd10c800000027]
[  655.432406][ T1305] CPU: 1 UID: 0 PID: 1305 Comm: syz.0.7965 Not tainted syzkaller #0 PREEMPT(full) 
[  655.432444][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  655.432458][ T1305] RIP: 0010:mini_qdisc_pair_swap+0x165/0x190
[  655.432488][ T1305] Code: 74 08 4c 89 f7 e8 7b 0a dc f8 4d 89 26 48 85 db 74 9d e8 6e 25 76 f8 e8 59 59 5c f8 49 89 c6 48 83 c3 20 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 4c 0a dc f8 4c 89 33 48 83 c4 08
[  655.432508][ T1305] RSP: 0018:ffffc9000b8b6c88 EFLAGS: 00010202
[  655.432530][ T1305] RAX: 007fa21900000004 RBX: 03fd10c800000020 RCX: 0000000000000000
[  655.432546][ T1305] RDX: 0000000000000006 RSI: ffffffff8d76be8f RDI: 00000000ffffffff
[  655.432561][ T1305] RBP: ffff8880544e8378 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e
[  655.432578][ T1305] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: 1ffff110088fa000
[  655.432594][ T1305] R13: ffff8880544e8328 R14: 000000000002cdec R15: dffffc0000000000
[  655.432611][ T1305] FS:  00007fc980fd66c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000
[  655.432631][ T1305] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  655.432646][ T1305] CR2: 00007fe7b53156c0 CR3: 000000007617a000 CR4: 00000000003526f0
[  655.432665][ T1305] Call Trace:
[  655.432680][ T1305]  <TASK>
[  655.432692][ T1305]  ? __pfx_clsact_chain_head_change+0x10/0x10
[  655.432739][ T1305]  tcf_chain0_head_change_cb_del+0x24c/0x380
[  655.432774][ T1305]  tcf_block_put_ext+0x129/0x390
[  655.432827][ T1305]  clsact_destroy+0x25e/0x820
[  655.432862][ T1305]  ? __pfx_clsact_destroy+0x10/0x10
[  655.432893][ T1305]  __qdisc_destroy+0x153/0x400
[  655.432927][ T1305]  dev_shutdown+0x233/0x440
[  655.432948][ T1305]  unregister_netdevice_many_notify+0x117c/0x2310
[  655.432984][ T1305]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  655.433013][ T1305]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  655.433041][ T1305]  ? nsim_destroy+0xed/0x680
[  655.630614][ T1305]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  655.636530][ T1305]  unregister_netdevice_queue+0x317/0x350
[  655.642259][ T1305]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  655.648523][ T1305]  nsim_destroy+0x1e5/0x680
[  655.653036][ T1305]  __nsim_dev_port_del+0x14d/0x1b0
[  655.658172][ T1305]  nsim_dev_reload_destroy+0x288/0x490
[  655.663696][ T1305]  nsim_dev_reload_down+0x8a/0xc0
[  655.668750][ T1305]  devlink_reload+0x1b6/0x8d0
[  655.673452][ T1305]  ? __pfx_devlink_reload+0x10/0x10
[  655.678664][ T1305]  ? apparmor_capable+0x137/0x1a0
[  655.683711][ T1305]  ? bpf_lsm_capable+0x9/0x20
[  655.688399][ T1305]  ? security_capable+0x7e/0x2e0
[  655.693360][ T1305]  devlink_nl_reload_doit+0x9b7/0xc60
[  655.698753][ T1305]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  655.704655][ T1305]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  655.711040][ T1305]  genl_family_rcv_msg_doit+0x215/0x300
[  655.716600][ T1305]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  655.722692][ T1305]  ? bpf_lsm_capable+0x9/0x20
[  655.727379][ T1305]  ? security_capable+0x7e/0x2e0
[  655.732352][ T1305]  genl_rcv_msg+0x60e/0x790
[  655.736876][ T1305]  ? __pfx_genl_rcv_msg+0x10/0x10
[  655.741914][ T1305]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  655.748340][ T1305]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  655.754251][ T1305]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  655.760788][ T1305]  netlink_rcv_skb+0x208/0x470
[  655.765560][ T1305]  ? __pfx_genl_rcv_msg+0x10/0x10
[  655.770599][ T1305]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  655.775895][ T1305]  ? down_read+0x274/0x2e0
[  655.780324][ T1305]  ? genl_rcv+0xd/0x40
[  655.784402][ T1305]  genl_rcv+0x28/0x40
[  655.788400][ T1305]  netlink_unicast+0x82f/0x9e0
[  655.793191][ T1305]  ? __pfx_netlink_unicast+0x10/0x10
[  655.798493][ T1305]  ? netlink_sendmsg+0x642/0xb30
[  655.803454][ T1305]  ? skb_put+0x11b/0x210
[  655.807717][ T1305]  netlink_sendmsg+0x805/0xb30
[  655.812496][ T1305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  655.817791][ T1305]  ? aa_sock_msg_perm+0xf1/0x1b0
[  655.822742][ T1305]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  655.828081][ T1305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  655.833380][ T1305]  __sock_sendmsg+0x21c/0x270
[  655.838072][ T1305]  ____sys_sendmsg+0x505/0x820
[  655.842852][ T1305]  ? __pfx_____sys_sendmsg+0x10/0x10
[  655.848155][ T1305]  ? import_iovec+0x74/0xa0
[  655.852686][ T1305]  ___sys_sendmsg+0x21f/0x2a0
[  655.857389][ T1305]  ? __pfx____sys_sendmsg+0x10/0x10
[  655.862611][ T1305]  ? futex_wake+0x4b2/0x560
[  655.867144][ T1305]  ? __fget_files+0x2a/0x420
[  655.871744][ T1305]  ? __fget_files+0x3a0/0x420
[  655.876437][ T1305]  __x64_sys_sendmsg+0x19b/0x260
[  655.881397][ T1305]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  655.886897][ T1305]  ? do_syscall_64+0xbe/0xf80
[  655.891592][ T1305]  do_syscall_64+0xfa/0xf80
[  655.896110][ T1305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.902190][ T1305]  ? clear_bhb_loop+0x60/0xb0
[  655.906871][ T1305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.912857][ T1305] RIP: 0033:0x7fc98018f749
[  655.917284][ T1305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  655.936897][ T1305] RSP: 002b:00007fc980fd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  655.945325][ T1305] RAX: ffffffffffffffda RBX: 00007fc9803e5fa0 RCX: 00007fc98018f749
[  655.953394][ T1305] RDX: 0000000000000030 RSI: 0000200000000000 RDI: 0000000000000006
[  655.961371][ T1305] RBP: 00007fc980213f91 R08: 0000000000000000 R09: 0000000000000000
[  655.969342][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  655.977316][ T1305] R13: 00007fc9803e6038 R14: 00007fc9803e5fa0 R15: 00007ffff9a13248
[  655.985304][ T1305]  </TASK>
[  655.988336][ T1305] Modules linked in:
[  655.995411][ T1305] ---[ end trace 0000000000000000 ]---
[  656.005164][ T1305] RIP: 0010:mini_qdisc_pair_swap+0x165/0x190
[  656.011194][ T1305] Code: 74 08 4c 89 f7 e8 7b 0a dc f8 4d 89 26 48 85 db 74 9d e8 6e 25 76 f8 e8 59 59 5c f8 49 89 c6 48 83 c3 20 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 4c 0a dc f8 4c 89 33 48 83 c4 08
[  656.015972][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  656.050656][ T1305] RSP: 0018:ffffc9000b8b6c88 EFLAGS: 00010202
[  656.057067][ T1305] RAX: 007fa21900000004 RBX: 03fd10c800000020 RCX: 0000000000000000
[  656.070221][ T1305] RDX: 0000000000000006 RSI: ffffffff8d76be8f RDI: 00000000ffffffff
[  656.079178][ T1305] RBP: ffff8880544e8378 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e
[  656.087539][ T1305] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: 1ffff110088fa000
[  656.096488][ T1305] R13: ffff8880544e8328 R14: 000000000002cdec R15: dffffc0000000000
[  656.107599][ T1305] FS:  00007fc980fd66c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000
[  656.119044][ T1305] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  656.126245][ T1305] CR2: 000000110c26600d CR3: 000000007617a000 CR4: 00000000003526f0
[  656.153085][ T1305] Kernel panic - not syncing: Fatal exception
[  656.159527][ T1305] Kernel Offset: disabled
[  656.163871][ T1305] Rebooting in 86400 seconds..