last executing test programs:

2m47.609803907s ago: executing program 0 (id=630):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000500000000000001000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0) (async)
r5 = accept4$x25(r0, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0)
connect$x25(r5, &(0x7f00000002c0), 0x12)
connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r6, 0x25, 0x0, @void}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@multicast2}, {@multicast1}]}})

2m47.375024102s ago: executing program 0 (id=634):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50005}, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) (async, rerun: 32)
r3 = socket(0x10, 0x807, 0x7) (rerun: 32)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008000f00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$can_raw(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r6}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x4, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "5f885520c668977d43b8bd2b5f39b902b0c20db4b66adb2e85dc4f514782eb811768d5b969cf6bab67db5f7998bb972819eca27236e391986b7b05e455c78bb0"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x240088c0) (async)
clock_gettime(0x0, &(0x7f0000000f00)={<r8=>0x0, <r9=>0x0}) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f00000001c0)={0x0, 'lo\x00'}) (async)
recvmmsg$unix(r3, &(0x7f0000000e40)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1, &(0x7f0000000f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)=""/62, 0x3e}, {&(0x7f0000001240)=""/218, 0xda}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f00000010c0)=""/247, 0xf7}], 0x8, &(0x7f0000000a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000b00)=""/58, 0x3a}, {&(0x7f0000000b40)=""/106, 0x6a}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000c40)=""/156, 0x9c}], 0x5, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x3, 0x10000, &(0x7f0000000f40)={r8, r9+60000000}) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async)
r13 = socket(0x0, 0x3, 0x0)
sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r15=>0xffffffffffffffff}) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000700)={'vcan0\x00', <r16=>0x0})
bind$can_raw(r12, &(0x7f0000000740)={0x1d, r16}, 0x10) (async, rerun: 64)
sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES64], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r15, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r17=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r17, 0x0)
r18 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r18, @ANYRES16=r18, @ANYBLOB="010028bd7000fcdbdf25010000001400020077673000000000000000000000000000060006004e21000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000500000000000401088030000080060005000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696bd000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696ba80004"], 0x160}, 0x1, 0x0, 0x0, 0x20040000}, 0x814)

2m47.058835476s ago: executing program 0 (id=637):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2m46.642651552s ago: executing program 0 (id=644):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010500160002000000040012000500170040"], 0x60}}, 0x0)

2m46.448653037s ago: executing program 0 (id=647):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x8054)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r2, 0x180000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x54, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x61}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @rand_addr=0x64010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0)

2m46.136789211s ago: executing program 0 (id=651):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
sendto$inet6(r2, &(0x7f0000000440)="073e7d26d34da16e81bd2c74aaf6957207b51547f44a7be57b9c52df7db6ee214a7ae1d339951af0d4c2ee8afb262d801cb0aec77ee28eeb03a667944779e280605f1214e4c86b13069263ce6197337fd260f6eed2244532d615e8ce2d343d694f30feffcbf2570c2503ef78693c0cd525e64659563bf4b8b27d6323fd8aba1e1a3e84775ccd9b84929c1db6f64e85059f16e4cc886a13e2ac728fdfa04b23cb0de07fae586119bf1b8d", 0xaa, 0x20000000, &(0x7f0000000180)={0xa, 0x4e23, 0xa7b, @private2, 0x7fffffff}, 0x1c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r6, 0x0, 0xfb3}, 0x18) (async)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r3, 0x3) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "0e12c00473d243a10241f49d2bb83e4de8ad7e04949d7b21424ea0912e181e8d94ed3c8ebdc6038d09122c71b844548cb2ae0422a5a08aa497d58d30d6c50629"}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}}}}}}, 0x0)

2m31.088758579s ago: executing program 32 (id=651):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
sendto$inet6(r2, &(0x7f0000000440)="073e7d26d34da16e81bd2c74aaf6957207b51547f44a7be57b9c52df7db6ee214a7ae1d339951af0d4c2ee8afb262d801cb0aec77ee28eeb03a667944779e280605f1214e4c86b13069263ce6197337fd260f6eed2244532d615e8ce2d343d694f30feffcbf2570c2503ef78693c0cd525e64659563bf4b8b27d6323fd8aba1e1a3e84775ccd9b84929c1db6f64e85059f16e4cc886a13e2ac728fdfa04b23cb0de07fae586119bf1b8d", 0xaa, 0x20000000, &(0x7f0000000180)={0xa, 0x4e23, 0xa7b, @private2, 0x7fffffff}, 0x1c) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r6, 0x0, 0xfb3}, 0x18) (async)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r3, 0x3) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "0e12c00473d243a10241f49d2bb83e4de8ad7e04949d7b21424ea0912e181e8d94ed3c8ebdc6038d09122c71b844548cb2ae0422a5a08aa497d58d30d6c50629"}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}}}}}}, 0x0)

4.117688582s ago: executing program 2 (id=2866):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6803e525}]}, 0x24}}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000e0000000e001000000002300", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4}, 0x4040140)

4.019044029s ago: executing program 2 (id=2867):
r0 = socket$isdn(0x22, 0x2, 0x11)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0xfffd, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @datasec={0x10, 0x2, 0x0, 0xf, 0x2, [{0x4, 0xfffffff7, 0x8}, {0x2, 0x3, 0x9}], "0170"}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1004000, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x66}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000380)=@raw=[@alu={0x4, 0x0, 0x2, 0x8, 0x5, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0xa5, &(0x7f0000000640)=""/165, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x1, 0xfffffff8, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000", @ANYBLOB="f9bf7daf2a5414c573e813b1031ce0348ab33207426a186f28da90bcdb35cc4a907981557912f8a84478caef80de49faa282f80bbe941e6114b586a8909c5ea2c283adedf2f51d59082487af37da12"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r7, r6, 0x5}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, @in6={0xa, 0x4e20, 0x1000, @empty}, @in6={0xa, 0x4e22, 0x10001, @loopback, 0xe}], 0x54)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="280000001c00010428bd7000f9dbdf2507000000", @ANYRES32=r10, @ANYBLOB="020800010a000200aaaaaab4a24ae7"], 0x28}, 0x1, 0x0, 0x0, 0x24000835}, 0x24040040)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r4}, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="003506d09061c3cfe85800128008000100677470004cea322b00028008", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x90)

3.789534842s ago: executing program 2 (id=2869):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r4, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x2, 0xf, 0x6, @empty, @mcast1, 0x700, 0x10, 0x3, 0x8e}})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', <r7=>0x0})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x11e, 0x80, 0x0, 0x1c6)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000080))
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3.437786969s ago: executing program 1 (id=2875):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', <r5=>0x0, 0x4, 0x2, 0x6, 0x1ff, 0x72, @loopback, @loopback, 0x8000, 0x7800, 0x2, 0x10000}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'syztnl2\x00', r5, 0x7800, 0x1, 0x3, 0x9, {{0x3f, 0x4, 0x0, 0x0, 0xfc, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x2b, 0x67, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @local, @remote, @rand_addr=0x64010100, @multicast1, @empty, @loopback, @broadcast]}, @end, @timestamp_addr={0x44, 0x44, 0x37, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x4}, {@multicast2, 0x4}, {@multicast2, 0x10001}, {@remote, 0x7}, {@local, 0x7ff}, {@broadcast, 0x4000c27c}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x9, [{@empty, 0x2}, {@rand_addr=0x64010101, 0x7}, {@multicast1, 0xcec00000}, {@local, 0x6}, {@broadcast, 0x4}, {@loopback, 0x432}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x13, 0x2c, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x12}, @loopback]}, @noop, @lsrr={0x83, 0x23, 0x39, [@rand_addr=0x64010102, @loopback, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r7, &(0x7f0000000080)={0x11, 0x4, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

2.813468087s ago: executing program 2 (id=2880):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000140)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

2.613483075s ago: executing program 5 (id=2882):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x4}, @mpls}, 0xe)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff2c71}]}, 0x40}}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f00000000c0)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x4}, @mpls}, 0xe) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff2c71}]}, 0x40}}, 0x80) (async)

2.613273438s ago: executing program 2 (id=2883):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r3, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10)
listen(r1, 0x7)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000fee000)=0x3f7, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

2.393681038s ago: executing program 1 (id=2885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6f7}]}, 0x30}}, 0x4801)

2.116792307s ago: executing program 2 (id=2886):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x1000, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'cpuset'}]}, 0x8) (async)
syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0)

2.088214776s ago: executing program 5 (id=2887):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="051c00000000000071118300000000008510000002000000850000000000000095000000000000009510a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x8000, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="10000000031408002abd700025000000"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4)

2.037797095s ago: executing program 1 (id=2888):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth0_macvtap\x00', {'team_slave_0\x00'}, 0x7})
sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0)

1.926454559s ago: executing program 1 (id=2890):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467000180c200000200000600090000000000"], 0x48}}, 0x0)

1.924761116s ago: executing program 3 (id=2891):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c", 0x1e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02f5ffffff000000000000000000013a"], 0xffe)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0)

1.429661798s ago: executing program 1 (id=2893):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES8=r2, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4)
r6 = gettid()
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c602de98ce6b1e5630000000240000000000000000000000000bf6d73602db6ec7f7454b63c4ab3a4b479e4708807de76ab0b0d7b39bde1767d087612fbda2ff587faa26ab8100ee031585f988370c72ccf2ba400f67d37d1cafc4cfd199c4449c7d469f2064127065c81bde01da5416fc3665f5a5c000000000000000eecdb9234a0c856c756c9e44b767f618cf2b3976e0e33c36cae56ab54fe8fd2c35bd77c470506d8de8333d8e35a40a69ebb6a6b7987b5f91aa5b6d9ff9edbe561345779be13863abf0ce5aa4069d351df829e5c697f71c1f87f8234d366b78ee285133026c8a57f95", @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES32=r5, @ANYBLOB="cdab18ab8a0dd1cba043e263f4ab87a0c91301a15b29b81fe170986745798f0b11e995b6e055ca6f950bab4601d28d16ac0b0d055a3d7ebf9decc27c15a3e1e8a044d17d5965a824dfeef8e45f6a021c91e9d32c840b2a7dc60c8d53f314f2792fc0f0bce451733f06fdd6812faa6079f902d81960a3d037b6289880aeb0a00796"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/cgroup\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0)
r8 = socket(0x14, 0x2, 0x4)
r9 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, r9, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x61d1, 0x0)
r10 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000080)={0x10000000})
r13 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r10, &(0x7f0000000000)={0xa0000001})
r14 = socket(0xa, 0x2, 0x0)
getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001740)=ANY=[@ANYBLOB="6400000010003904fcffb8045e53acecc6dd000097ec0c65cfdefba443e4ce9fb1d19574e2df924079a6b459a3610dc7fecb61664abaaf7c3b0113a862f312de0d095072f536cacb0ec9494be477dee12f729e1748f511227b8d11d9282a6ae2175cb824d99274dfa6fd95349fa300"/125, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

1.378192174s ago: executing program 4 (id=2894):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) (async)

1.331396749s ago: executing program 5 (id=2895):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESOCT], 0x38}}, 0x0)

1.225816406s ago: executing program 3 (id=2896):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x800)
sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55)

1.225562367s ago: executing program 4 (id=2897):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4)

1.110752002s ago: executing program 5 (id=2898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001000)={'team_slave_1\x00', <r2=>0x0})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@remote, @broadcast, @private=0xa010100}, 0xc)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001040)={@mcast1, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x100, 0x2, 0x100092, r2})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.012977784s ago: executing program 3 (id=2899):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r6, 0x1, 0x7, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
listen(r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
writev(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r6, 0x1, 0x7, 0x1}, 0x50) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x241) (async)

941.759129ms ago: executing program 4 (id=2900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xe, @bearer=@l2={'eth', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x811)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000002060102000000000000f2539879cd5f2a8c078008001240000600080500010006000000050005000a0000020500040000ecff000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}}, 0x20004000)

891.423304ms ago: executing program 5 (id=2901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
accept4(r6, &(0x7f0000000040)=@caif=@rfm, &(0x7f0000000180)=0x80, 0x80000)

621.501671ms ago: executing program 3 (id=2902):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$netlink(0x10, 0x3, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x4000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000007201430000000000950000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8140}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0)

405.750667ms ago: executing program 4 (id=2903):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)

357.01973ms ago: executing program 4 (id=2904):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=[{0x4, 0x5, 0x9, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x3, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000780)={r1, @in6={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0xfffffffa, 0x5, 0x5, 0x5, 0x8, 0x409, 0x9}, &(0x7f0000000380)=0x9c) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x2c060000) (async)
unshare(0x24020400) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (async, rerun: 32)
openat$cgroup_int(r5, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000680)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}, {&(0x7f0000000100)="28a828ef30664b109714a1e0a05de013de2df8709bb9078191322e838bcfaec620b49caaa84080c9d1ffc17bf5026641169ff74b3270ad6130088d2d289d10433694d0221093", 0x46}, {&(0x7f0000000380)}, {&(0x7f0000000540)="eb32d1d7df6ca5abd45238ca3931a87c4d400f571e8b17f0ea49bce037f56af55bdb90c3f7c20ee282b6a9acd25c980e3ef3690b54d677d666c6b6ca928fa7811d57f9a4e1040b54e22173982e048490ed8369b6e193fe0a88721d0dac684bf9ca4217d1a982330e", 0x68}, {&(0x7f00000005c0)="372828a4def1a9da365227b80882d7bb2e26063a5a9f6b11f7d50c2ece0c5ee8df43a727f4bcf2f125dd13c1fcabf266652ef80c1570552020c56c30c74431303d9768453554ab8ba42c048ea77fc9eab62281ca7263a6913cb0a5a44ced80f5983c79455faa24f50aed742013295ebdf9bf15d2dcbbd8c1945e50eede65ad56d1ef030f1e0905fb844895a3774227045fd6d9b597d7d5fdd2c87913d3638c0371da0b79f3cc75cb4d", 0xa9}], 0x5)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) (rerun: 64)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="e5e7149dad4923c125dcc174db36ffafaabbf4a360f44e0e24e368527a744f39a0229236bbef2989ba511c376bb278d9567dd246430731b5556e482ddb5a9adbe6b9e7734a0cfcd68e5bb47a5c8e91dcb7aeb523faa05b56b6fffd4bf921a91fbe8b09218ab20e681cd18230d73f6dab9c4cb5bf44b9cf9780fe6dc6a62f2d87911bb7a9dd751c24ef36d7b0ced0b1d096ee0dd7804282ebfca597f8fb80fb927559e2", @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000240001800c0002800700020003000000110001006574683a70696d367265673100000000"], 0x38}}, 0x0)

238.90111ms ago: executing program 3 (id=2905):
bind$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast, 0x4}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x800, 0x3, 0x6, 0x400}}], 0x18, 0x4014}, 0x2c0408d0)

97.63808ms ago: executing program 4 (id=2906):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c", 0x1e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd", 0x3f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000400000000000000000013a"], 0xffe)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0)

52.164475ms ago: executing program 1 (id=2907):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x8}, 0x200480c0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff6e9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x89}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0xc800) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @fwd={0x3, 0x2}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="8d05a6df8d9d0000000000000007e2226e6cd080f8375070a548afb26ca371c9527e5ce3874dd86b99daf6daacd3ff19b489a0cd0103409f5385c1c6c039c829c1fd2cdfaaee6ca8567c2a36bdadf47fcef7cfe3ffc427b755dbd53a2cef70d134b7ceb6d8e586340e14128a8693cc41556f11c4f58b434986c234b760958cb0765b65cea824173a91ebd24dc6590731"], 0x8) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r5, 0x8b32, &(0x7f0000000040))
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={<r6=>r0})
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xb0036320}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040004}, 0x20000811)

1.272593ms ago: executing program 5 (id=2908):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
listen(r2, 0xfffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rxrpc_resend\x00', r2, 0x0, 0x7fffffff}, 0x18)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)

0s ago: executing program 3 (id=2909):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x401)
syz_emit_ethernet(0x8d, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x57, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}, "d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198c7a24f3ec2185138fe030170dda008bd7d42867c177d4e3"}}}}}}}, 0x0)
close(0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080))
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e)
ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000200)="941abbb6f577935a879e895e4c074b3fe7e7f48b38c594c25a1c200e79c9752920055616f398ba382a8898b740bd77487a9cfdfda95985fd25375467a6e8cd1a2ef4f0fa960bf23bfc0cc0")
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffe91, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x52f, 0x6, 0x6, 0x0, 0x10001, 0x210010, r4})

kernel console output (not intermixed with test programs):

ntered promiscuous mode
[  147.742660][ T8135] gtp0: entered allmulticast mode
[  147.878585][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802c36e000: rx timeout, send abort
[  147.890601][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c36e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  148.613215][ T8158] __nla_validate_parse: 6 callbacks suppressed
[  148.613235][ T8158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'.
[  148.639146][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'.
[  148.696668][ T8161] syzkaller0: entered allmulticast mode
[  149.292645][ T8186] netlink: 44 bytes leftover after parsing attributes in process `syz.1.623'.
[  149.402137][ T8192] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  149.404721][ T8194] netlink: 1 bytes leftover after parsing attributes in process `syz.0.624'.
[  149.458550][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[  149.718616][ T8211] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  149.806227][ T8215] nbd: must specify a size in bytes for the device
[  149.916351][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  150.288709][ T8241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.636'.
[  150.366887][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'.
[  150.396982][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'.
[  150.421717][ T8253] netlink: 'syz.0.637': attribute type 10 has an invalid length.
[  150.450483][ T8228] ip6gretap0: entered promiscuous mode
[  150.459915][ T8228] syz_tun: entered promiscuous mode
[  150.465782][ T8253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.637'.
[  150.536282][ T8253] dummy0: entered promiscuous mode
[  150.558378][ T8253] bridge0: port 4(dummy0) entered blocking state
[  150.567621][ T8253] bridge0: port 4(dummy0) entered disabled state
[  150.574824][ T8253] dummy0: entered allmulticast mode
[  150.740744][ T8267] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:21
[  150.862958][ T8273] netlink: 'syz.0.644': attribute type 5 has an invalid length.
[  151.136524][ T8282] netlink: 'syz.3.648': attribute type 1 has an invalid length.
[  151.150754][ T8285] netlink: 'syz.3.648': attribute type 1 has an invalid length.
[  151.648033][ T8309] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  151.681996][ T8309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.708772][ T8313] netlink: 'syz.4.656': attribute type 3 has an invalid length.
[  152.198183][ T8334] netlink: 'syz.2.664': attribute type 1 has an invalid length.
[  152.408226][ T8334] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  152.424990][ T8334] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  152.450901][ T8334] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  152.519157][ T8348] netlink: 'syz.3.668': attribute type 1 has an invalid length.
[  152.784407][ T8362] ieee802154 phy0 wpan0: encryption failed: -22
[  153.386138][ T8385] netlink: 'syz.4.679': attribute type 2 has an invalid length.
[  153.431119][ T8393] netlink: 'syz.1.682': attribute type 2 has an invalid length.
[  153.628248][ T8399] __nla_validate_parse: 18 callbacks suppressed
[  153.628268][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'.
[  153.895079][ T8422] netlink: 'syz.3.689': attribute type 10 has an invalid length.
[  153.986185][ T8422] team0: Port device dummy0 added
[  154.050940][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'.
[  154.084316][ T8429] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  154.107118][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'.
[  154.324028][ T8442] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  154.457203][ T8442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  154.674522][ T8459] netlink: 'syz.4.699': attribute type 10 has an invalid length.
[  154.696181][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.699'.
[  154.711486][ T8459] dummy0: entered promiscuous mode
[  154.732627][ T8459] bridge0: port 3(dummy0) entered blocking state
[  154.746982][ T8459] bridge0: port 3(dummy0) entered disabled state
[  154.754979][ T8459] dummy0: entered allmulticast mode
[  154.768542][ T8461] netlink: 'syz.2.700': attribute type 39 has an invalid length.
[  154.781657][ T8459] bridge0: port 3(dummy0) entered blocking state
[  154.788438][ T8459] bridge0: port 3(dummy0) entered forwarding state
[  154.888287][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'.
[  154.952373][ T8469] team0: Port device dummy0 removed
[  154.980774][ T8473] bond3: option min_links: invalid value (18446744073709551614)
[  154.990495][ T8473] bond3: option min_links: allowed values 0 - 2147483647
[  155.004224][ T8473] bond3 (unregistering): Released all slaves
[  155.170410][ T8476] syzkaller1: entered promiscuous mode
[  155.186223][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  155.188966][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout
[  155.193277][ T8476] syzkaller1: entered allmulticast mode
[  155.450605][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[  155.579931][ T8496] netlink: 'syz.3.710': attribute type 1 has an invalid length.
[  155.696633][ T8496] bond3: entered promiscuous mode
[  155.708197][ T8496] 8021q: adding VLAN 0 to HW filter on device bond3
[  155.825661][ T8500] 8021q: adding VLAN 0 to HW filter on device bond3
[  155.860506][ T8500] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[  155.902962][ T8500] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  155.933620][ T8500] bond3: (slave wireguard1): making interface the new active one
[  155.979267][ T8500] wireguard1: entered promiscuous mode
[  156.001694][ T8500] bond3: (slave wireguard1): Enslaving as an active interface with an up link
[  156.363390][ T8516] raw_sendmsg: syz.2.715 forgot to set AF_INET. Fix it!
[  156.583116][   T30] audit: type=1804 audit(1759365192.909:3): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.716" name="/newroot/154/cgroup.controllers" dev="tmpfs" ino=801 res=1 errno=0
[  156.647114][   T30] audit: type=1800 audit(1759365192.939:4): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.716" name="cgroup.controllers" dev="tmpfs" ino=801 res=0 errno=0
[  156.737234][   T30] audit: type=1800 audit(1759365192.939:5): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.716" name="cgroup.controllers" dev="tmpfs" ino=801 res=0 errno=0
[  157.103159][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.722'.
[  157.219235][ T8544] netlink: 'syz.3.723': attribute type 2 has an invalid length.
[  157.542877][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.727'.
[  157.553871][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'.
[  157.566061][ T8556] netlink: 'syz.3.727': attribute type 1 has an invalid length.
[  157.574592][ T8556] netlink: 'syz.3.727': attribute type 3 has an invalid length.
[  157.583086][ T8556] netlink: 224 bytes leftover after parsing attributes in process `syz.3.727'.
[  157.594496][ T8556] NCSI netlink: No device for ifindex 131080
[  157.752525][ T8559] sctp: [Deprecated]: syz.3.728 (pid 8559) Use of int in max_burst socket option.
[  157.752525][ T8559] Use struct sctp_assoc_value instead
[  157.801031][ T8562] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[  158.042121][ T8569] 8021q: adding VLAN 0 to HW filter on device bond1
[  158.091902][ T8573] veth0: entered promiscuous mode
[  158.162301][ T8573] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  158.678055][ T8602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.699573][ T8602] syzkaller0: entered promiscuous mode
[  158.709970][ T8602] syzkaller0: entered allmulticast mode
[  158.725025][ T8601] tipc: Resetting bearer <eth:syzkaller0>
[  158.751570][ T8601] tipc: Disabling bearer <eth:syzkaller0>
[  158.772316][ T8608] tc_dump_action: action bad kind
[  158.886344][ T8610] __nla_validate_parse: 1 callbacks suppressed
[  158.886371][ T8610] netlink: 13 bytes leftover after parsing attributes in process `syz.4.743'.
[  158.909324][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'.
[  159.244609][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  159.300604][ T8626] batadv_slave_1: entered promiscuous mode
[  159.317677][ T8626] batadv_slave_0: entered promiscuous mode
[  159.325707][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.375963][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.410642][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'.
[  159.481214][ T8637] netlink: 'syz.4.753': attribute type 12 has an invalid length.
[  159.491292][ T8637] netlink: 'syz.4.753': attribute type 29 has an invalid length.
[  159.536005][ T8637] netlink: 148 bytes leftover after parsing attributes in process `syz.4.753'.
[  159.574331][ T8637] netlink: 59 bytes leftover after parsing attributes in process `syz.4.753'.
[  159.839810][ T8654] netlink: 'syz.3.756': attribute type 4 has an invalid length.
[  159.981713][ T8654] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  160.014541][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.756'.
[  160.040316][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.660346][ T8680] netlink: 108 bytes leftover after parsing attributes in process `syz.1.764'.
[  160.671205][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  160.722038][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'.
[  160.733900][ T8682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.856507][ T8682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.901071][ T8687] bridge0: port 2(vlan2) entered blocking state
[  160.908213][ T8687] bridge0: port 2(vlan2) entered disabled state
[  160.914900][ T8687] vlan2: entered allmulticast mode
[  160.922712][ T8687] bridge0: entered allmulticast mode
[  160.932176][ T8687] vlan2: left allmulticast mode
[  160.940757][ T8687] bridge0: left allmulticast mode
[  161.379337][ T8713] netlink: 'syz.3.774': attribute type 21 has an invalid length.
[  161.595030][ T8728] netlink: 'syz.2.779': attribute type 21 has an invalid length.
[  162.737879][ T8787] veth0: entered promiscuous mode
[  162.753292][ T8787] veth0: left promiscuous mode
[  163.360066][ T8812] sctp: [Deprecated]: syz.3.806 (pid 8812) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.360066][ T8812] Use struct sctp_sack_info instead
[  164.219449][ T8861] __nla_validate_parse: 12 callbacks suppressed
[  164.219469][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.820'.
[  164.484730][ T8874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  164.589881][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  164.734256][ T8887] netlink: 136 bytes leftover after parsing attributes in process `syz.4.829'.
[  164.798416][ T6283] IPVS: starting estimator thread 0...
[  164.812133][ T8890] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  164.907421][ T8891] IPVS: using max 30 ests per chain, 72000 per kthread
[  165.213222][ T8912] netlink: 'syz.1.838': attribute type 11 has an invalid length.
[  165.234636][ T8912] netlink: 'syz.1.838': attribute type 4 has an invalid length.
[  165.262595][ T8912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.838'.
[  165.353169][ T8919] netlink: 'syz.4.841': attribute type 5 has an invalid length.
[  165.554956][ T8924] netlink: 'syz.3.843': attribute type 1 has an invalid length.
[  165.589506][ T8924] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  165.759235][ T8940] netlink: 236 bytes leftover after parsing attributes in process `syz.4.846'.
[  165.842455][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'.
[  166.199697][ T8958] netlink: 'syz.3.851': attribute type 11 has an invalid length.
[  166.218044][ T8958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.851'.
[  166.301332][ T8960] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  166.598517][ T8965] netlink: 'syz.3.855': attribute type 4 has an invalid length.
[  166.655833][ T8965] netlink: 17 bytes leftover after parsing attributes in process `syz.3.855'.
[  166.687234][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'.
[  167.082077][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  167.092843][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  167.104478][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  167.113070][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  167.124145][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  167.303316][ T8980] netlink: 160 bytes leftover after parsing attributes in process `syz.2.859'.
[  167.563360][ T8971] chnl_net:caif_netlink_parms(): no params data found
[  167.582263][ T8990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  167.602286][ T8990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  167.819650][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.830392][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.840962][ T8971] bridge_slave_0: entered allmulticast mode
[  167.852110][ T8971] bridge_slave_0: entered promiscuous mode
[  167.883907][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.895760][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.903273][ T8971] bridge_slave_1: entered allmulticast mode
[  167.912044][ T8971] bridge_slave_1: entered promiscuous mode
[  168.001169][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.034094][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.112248][ T8971] team0: Port device team_slave_0 added
[  168.130939][ T8971] team0: Port device team_slave_1 added
[  168.294043][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.302706][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.329799][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.433561][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.453767][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.526177][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.718887][ T8971] hsr_slave_0: entered promiscuous mode
[  168.725877][ T8971] hsr_slave_1: entered promiscuous mode
[  168.743741][ T8971] debugfs: 'hsr0' already exists in 'hsr'
[  168.753200][ T8971] Cannot create hsr debugfs directory
[  168.872850][ T9061] netlink: 'syz.3.880': attribute type 1 has an invalid length.
[  168.902304][ T9052] bond3: entered allmulticast mode
[  168.944417][ T9056] erspan0: entered promiscuous mode
[  168.967469][ T9056] erspan0: entered allmulticast mode
[  169.078362][ T9069] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  169.185008][ T9082] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.195633][ T5185] Bluetooth: hci5: command tx timeout
[  169.228538][ T9069] __nla_validate_parse: 3 callbacks suppressed
[  169.228558][ T9069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.883'.
[  169.512862][ T9097] netlink: 64 bytes leftover after parsing attributes in process `syz.1.893'.
[  169.553157][ T8971] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  169.572478][ T8971] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  169.591280][ T8971] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  169.621533][ T8971] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  169.734537][ T9108] delete_channel: no stack
[  169.743618][ T9108] netlink: 'syz.2.897': attribute type 22 has an invalid length.
[  169.781711][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  169.812450][ T9111] veth5: entered allmulticast mode
[  169.830394][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.830531][ T9108] netlink: 'syz.2.897': attribute type 22 has an invalid length.
[  169.850095][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  169.862780][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.911107][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.927040][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.030593][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.090870][ T8971] 8021q: adding VLAN 0 to HW filter on device team0
[  170.110623][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.117852][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.152324][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.160796][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.370729][ T9142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.907'.
[  170.393696][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'.
[  170.604546][ T9159] ip6gre1: entered allmulticast mode
[  170.749354][ T9169] netlink: 'syz.2.915': attribute type 4 has an invalid length.
[  170.762846][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.899119][ T9178] netlink: 72 bytes leftover after parsing attributes in process `syz.3.917'.
[  170.966924][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.919'.
[  170.988799][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'.
[  170.995562][ T9185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.998951][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'.
[  171.266333][ T5185] Bluetooth: hci5: command tx timeout
[  171.324715][ T8971] veth0_vlan: entered promiscuous mode
[  171.334600][ T9200] syz.1.922 uses old SIOCAX25GETINFO
[  171.363475][ T8971] veth1_vlan: entered promiscuous mode
[  171.383021][ T9203] tc_dump_action: action bad kind
[  171.472221][ T8971] veth0_macvtap: entered promiscuous mode
[  171.493165][ T8971] veth1_macvtap: entered promiscuous mode
[  171.519343][ T9211] netlink: 'syz.2.925': attribute type 25 has an invalid length.
[  171.657989][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.694083][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.803461][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.819377][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.846624][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.913734][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.184489][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.203025][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.297077][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.318652][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.915452][ T9266] nbd4: detected capacity change from 0 to 63
[  172.958163][ T9271] block nbd4: NBD_DISCONNECT
[  173.010923][ T9271] block nbd4: Disconnected due to user request.
[  173.037245][ T9278] bond0: option ad_select: unable to set because the bond device is up
[  173.057705][ T9279] bond0: option ad_select: unable to set because the bond device is up
[  173.062060][ T9271] block nbd4: shutting down sockets
[  173.346759][ T5185] Bluetooth: hci5: command tx timeout
[  173.524603][ T9306] netlink: 'syz.4.956': attribute type 1 has an invalid length.
[  173.672929][ T9309] netlink: 'syz.1.957': attribute type 29 has an invalid length.
[  173.748510][ T9322] netlink: 'syz.1.961': attribute type 1 has an invalid length.
[  173.756403][ T9322] netlink: 'syz.1.961': attribute type 2 has an invalid length.
[  173.766346][ T9322] netlink: 'syz.1.961': attribute type 1 has an invalid length.
[  174.304424][   T13] dummy0: left allmulticast mode
[  174.312326][   T13] bridge0: port 4(dummy0) entered disabled state
[  174.322648][   T13] bridge0: port 3(batadv0) entered disabled state
[  174.332497][   T13] bridge_slave_1: left allmulticast mode
[  174.338829][   T13] bridge_slave_1: left promiscuous mode
[  174.345756][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.360626][   T13] bridge_slave_0: left allmulticast mode
[  174.366687][   T13] bridge_slave_0: left promiscuous mode
[  174.372735][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.489639][ T9360] __nla_validate_parse: 8 callbacks suppressed
[  174.489658][ T9360] netlink: 51 bytes leftover after parsing attributes in process `syz.5.972'.
[  174.722619][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.740781][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.755072][   T13] bond0 (unregistering): Released all slaves
[  174.807979][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  174.868080][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'.
[  174.938917][   T13] bond1 (unregistering): Released all slaves
[  174.957287][ T9358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.080996][   T13] tipc: Left network mode
[  175.221723][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'.
[  175.277822][ T9383] sch_fq: defrate 0 ignored.
[  175.283085][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'.
[  175.425676][ T5185] Bluetooth: hci5: command tx timeout
[  175.459170][ T9395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.981'.
[  175.466392][ T9398] netlink: 128 bytes leftover after parsing attributes in process `syz.1.980'.
[  175.630896][   T13] hsr_slave_0: left promiscuous mode
[  175.652029][   T13] hsr_slave_1: left promiscuous mode
[  175.666571][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.680079][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  175.694226][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.757634][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.988'.
[  175.778696][ T9415] netlink: 52 bytes leftover after parsing attributes in process `syz.1.988'.
[  176.198063][   T13] team0 (unregistering): Port device team_slave_1 removed
[  176.248559][   T13] team0 (unregistering): Port device team_slave_0 removed
[  176.608455][ T9416] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  177.200834][ T9458] delete_channel: no stack
[  177.213632][ T9459] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  177.362818][ T9463] 8021q: VLANs not supported on vxcan1
[  177.617320][ T9473] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2
[  177.651147][ T9473] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€
[  177.721221][   T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.741810][   T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.791258][   T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.814454][   T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.556507][ T9534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.738329][ T9545] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001
[  179.516429][ T9599] __nla_validate_parse: 10 callbacks suppressed
[  179.516447][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'.
[  179.578740][ T9602] syzkaller1: entered promiscuous mode
[  179.584248][ T9602] syzkaller1: entered allmulticast mode
[  179.777019][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1048'.
[  179.940638][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1048'.
[  180.045120][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'.
[  180.490294][ T9657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1059'.
[  180.628827][ T9661] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1062'.
[  180.663150][ T9661] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1062'.
[  180.704939][ T9672] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1062'.
[  180.753507][ T9672] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1062'.
[  181.001212][ T9691] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1071'.
[  181.701400][ T9733] gretap1: entered promiscuous mode
[  181.709157][ T9733] gretap1: entered allmulticast mode
[  181.719610][ T9721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.734176][ T9735] netlink: 'syz.4.1087': attribute type 4 has an invalid length.
[  181.751098][ T9720] tipc: Disabling bearer <eth:syzkaller0>
[  181.822595][ T9735] dvmrp1: entered allmulticast mode
[  182.343801][ T9768] netlink: 'syz.2.1096': attribute type 16 has an invalid length.
[  182.351740][ T9768] netlink: 'syz.2.1096': attribute type 3 has an invalid length.
[  182.800226][ T9784] dvmrp1: entered allmulticast mode
[  182.972656][ T9791] netlink: 'syz.5.1104': attribute type 12 has an invalid length.
[  182.995424][ T9791] netlink: 'syz.5.1104': attribute type 11 has an invalid length.
[  183.753813][ T9853] veth7: entered promiscuous mode
[  183.797653][ T9861] netlink: 'syz.1.1121': attribute type 4 has an invalid length.
[  183.863144][ T9863] vlan3: entered allmulticast mode
[  183.868453][ T9863] hsr0: entered allmulticast mode
[  183.875328][ T9863] hsr_slave_0: entered allmulticast mode
[  183.887648][ T9863] hsr_slave_1: entered allmulticast mode
[  183.903955][ T9865] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  183.963469][ T9865] netlink: 'syz.1.1124': attribute type 10 has an invalid length.
[  183.987421][ T9865] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  184.929610][ T9904] netlink: 'syz.4.1136': attribute type 1 has an invalid length.
[  185.054773][ T9902] vlan3: entered allmulticast mode
[  185.096146][ T9902] bridge0: entered allmulticast mode
[  185.291917][ T9924] __nla_validate_parse: 21 callbacks suppressed
[  185.291936][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'.
[  185.321821][ T9925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.347684][ T9925] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.611158][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'.
[  185.672882][ T9951] macvtap1: entered promiscuous mode
[  185.678881][ T9951] macvtap1: entered allmulticast mode
[  185.719387][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  185.887618][ T9965] syzkaller1: entered promiscuous mode
[  185.918357][ T9965] syzkaller1: entered allmulticast mode
[  186.259927][ T9987] netlink: 'syz.5.1158': attribute type 4 has an invalid length.
[  186.279502][ T9981] Driver unsupported XDP return value 0 on prog  (id 259) dev N/A, expect packet loss!
[  186.313050][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  186.345320][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  186.414208][ T9993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.427521][ T9993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.548062][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  186.581538][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  186.650583][ T9993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.695077][ T9993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.774758][ T9993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.788745][ T9993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.837225][T10022] netlink: 'syz.5.1170': attribute type 21 has an invalid length.
[  186.845495][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1170'.
[  186.880524][ T9993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.891195][ T9993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.928566][T10024] netlink: 'syz.2.1171': attribute type 10 has an invalid length.
[  186.946399][T10024] batman_adv: batadv0: Adding interface: team0
[  186.952804][T10024] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.992492][T10024] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  187.052285][ T1098] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.061003][ T1098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.092238][ T1098] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.100649][ T1098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.122753][ T1098] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.134573][ T1098] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.152803][ T1098] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.162328][ T1098] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.223042][T10031] openvswitch: netlink: Key type 85 is out of range max 32
[  187.301645][T10037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1173'.
[  187.633856][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1180'.
[  187.673520][T10055] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  187.789487][T10059] netlink: 'syz.3.1182': attribute type 3 has an invalid length.
[  187.825125][T10059] netlink: 'syz.3.1182': attribute type 3 has an invalid length.
[  188.068028][T10082] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  188.247292][T10096] netlink: 'syz.2.1192': attribute type 2 has an invalid length.
[  188.307606][T10100] netlink: 'syz.1.1193': attribute type 2 has an invalid length.
[  188.346470][T10100] nbd: must specify a device to reconfigure
[  188.417730][T10106] team0: Device gtp1 is of different type
[  188.490880][T10114] netlink: 'syz.2.1197': attribute type 21 has an invalid length.
[  188.879222][T10144] netlink: 'syz.4.1209': attribute type 178 has an invalid length.
[  189.532165][T10188] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  190.552441][T10248] netlink: 'syz.1.1245': attribute type 10 has an invalid length.
[  190.605391][T10248] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  190.626703][T10248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.743751][T10269] __nla_validate_parse: 22 callbacks suppressed
[  190.743770][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1249'.
[  190.812874][T10273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  190.966496][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1255'.
[  190.983702][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'.
[  191.013776][T10280] netlink: 'syz.1.1254': attribute type 3 has an invalid length.
[  191.022797][T10284] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1256'.
[  191.146603][T10289] netlink: 'syz.2.1259': attribute type 1 has an invalid length.
[  191.237090][T10289] 8021q: adding VLAN 0 to HW filter on device bond5
[  191.269078][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1261'.
[  191.331996][T10299] bond5: (slave veth5): Enslaving as an active interface with a down link
[  191.353329][T10299] vlan3: entered allmulticast mode
[  191.359382][T10299] bond5: entered allmulticast mode
[  191.366226][T10299] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  191.403242][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'.
[  191.422819][T10289] veth7: entered promiscuous mode
[  191.431642][T10289] bond5: (slave veth7): Enslaving as an active interface with a down link
[  191.543720][ T6284] IPVS: starting estimator thread 0...
[  191.574670][T10318] netlink: 'syz.3.1266': attribute type 9 has an invalid length.
[  191.655531][T10314] IPVS: using max 24 ests per chain, 57600 per kthread
[  191.722962][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1270'.
[  191.853271][T10332] bond6: entered promiscuous mode
[  191.860143][T10332] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.879258][T10334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1272'.
[  191.919706][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'.
[  191.943973][T10341] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.951363][T10341] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[  191.962122][T10341] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  191.977561][T10341] bond6: (slave wireguard1): making interface the new active one
[  191.993452][T10341] wireguard1: entered promiscuous mode
[  192.004344][T10341] bond6: (slave wireguard1): Enslaving as an active interface with an up link
[  192.297752][T10372] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  192.324900][T10372] nbd: must specify a device to reconfigure
[  192.501190][T10381] veth0_vlan: entered allmulticast mode
[  192.522111][T10381] veth0_vlan: left promiscuous mode
[  192.530321][T10381] veth0_vlan: entered promiscuous mode
[  192.545657][T10381] team0: Device veth0_vlan failed to register rx_handler
[  192.609425][T10383] 8021q: adding VLAN 0 to HW filter on device bond7
[  192.790905][T10385] 8021q: adding VLAN 0 to HW filter on device bond7
[  192.812898][T10385] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  192.862930][T10385] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  192.983534][T10388] veth9: entered promiscuous mode
[  192.996401][T10383] 8021q: adding VLAN 0 to HW filter on device bond7
[  193.045496][T10416] sctp: [Deprecated]: syz.3.1296 (pid 10416) Use of int in max_burst socket option deprecated.
[  193.045496][T10416] Use struct sctp_assoc_value instead
[  193.861914][T10471] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  194.125134][T10488] netem: invalid attributes len -24
[  194.131541][T10488] netem: change failed
[  194.266878][T10490] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  194.287877][T10490] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.296306][T10490] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.560433][T10572] syzkaller0: entered promiscuous mode
[  195.566508][T10572] syzkaller0: entered allmulticast mode
[  195.599466][T10564] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  195.905654][T10591] __nla_validate_parse: 83 callbacks suppressed
[  195.905674][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'.
[  197.147149][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  197.166973][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'.
[  197.184264][T10610] syz_tun: tun_net_xmit 86
[  197.221614][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'.
[  197.235533][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1352'.
[  197.244876][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  197.254065][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'.
[  197.260480][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'.
[  197.273848][T10616] validate_nla: 11 callbacks suppressed
[  197.273877][T10616] netlink: 'syz.3.1355': attribute type 1 has an invalid length.
[  197.301515][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1352'.
[  197.311457][T10616] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1355'.
[  197.443655][T10624] sctp: [Deprecated]: syz.1.1358 (pid 10624) Use of int in maxseg socket option.
[  197.443655][T10624] Use struct sctp_assoc_value instead
[  197.467068][T10627] gretap0: entered promiscuous mode
[  197.539087][T10616] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001
[  197.560287][ T5935] IPVS: starting estimator thread 0...
[  197.655374][T10632] IPVS: using max 27 ests per chain, 64800 per kthread
[  197.674025][T10638] syz_tun: tun_net_xmit 42
[  198.057411][T10661] netlink: 'syz.4.1369': attribute type 11 has an invalid length.
[  198.075413][T10661] netlink: 'syz.4.1369': attribute type 11 has an invalid length.
[  198.194477][T10669] IPVS: stopping master sync thread 10670 ...
[  198.201833][T10670] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  198.225395][    C1] syz_tun: tun_net_xmit 86
[  198.462300][T10685] bond4: entered promiscuous mode
[  198.468252][T10685] bond4: entered allmulticast mode
[  198.474010][T10685] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.540471][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.607930][T10696] netlink: 'syz.2.1384': attribute type 33 has an invalid length.
[  198.687683][T10696] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  198.705290][    C1] syz_tun: tun_net_xmit 42
[  198.712045][T10696] bond8 (unregistering): Released all slaves
[  198.841880][T10709] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:65535
[  198.843145][T10713] netlink: 'syz.5.1391': attribute type 58 has an invalid length.
[  199.212750][T10734] batadv0: left allmulticast mode
[  199.219311][T10734] bridge0: port 2(batadv0) entered disabled state
[  199.255706][T10734] bridge_slave_0: left promiscuous mode
[  199.263313][T10734] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.271131][    C1] syz_tun: tun_net_xmit 86
[  199.371911][T10739] netlink: 'syz.1.1398': attribute type 11 has an invalid length.
[  199.379850][T10736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.390172][T10739] netlink: 'syz.1.1398': attribute type 11 has an invalid length.
[  199.570742][T10759] netlink: 'syz.3.1401': attribute type 16 has an invalid length.
[  199.608421][T10759] netlink: 'syz.3.1401': attribute type 17 has an invalid length.
[  199.662050][T10759] gretap0: left promiscuous mode
[  199.704967][T10759] erspan0: left promiscuous mode
[  199.728041][T10759] erspan0: left allmulticast mode
[  199.745311][    C1] syz_tun: tun_net_xmit 42
[  199.777322][T10759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.794333][T10768] netlink: 'syz.5.1404': attribute type 16 has an invalid length.
[  199.806140][T10767] tipc: Cannot configure node identity twice
[  199.845046][T10770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.876021][T10768] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.878682][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.883240][T10768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.883572][T10768] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.883700][T10768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.901657][ T5989] syz_tun: tun_net_xmit 110
[  199.941076][T10768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.217007][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.246284][T10787] bridge_slave_1: left allmulticast mode
[  200.270957][T10787] bridge_slave_1: left promiscuous mode
[  200.283650][T10787] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.313293][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  200.317741][T10787] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  200.320144][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  200.362056][T10797] bridge0: entered promiscuous mode
[  200.378035][T10797] bridge0: entered allmulticast mode
[  200.426302][ T6285] syz_tun: tun_net_xmit 110
[  201.298110][T10862] __nla_validate_parse: 22 callbacks suppressed
[  201.298128][T10862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'.
[  201.611620][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'.
[  201.807845][T10883] bond8: option all_slaves_active: invalid value (222)
[  201.819801][T10883] bond8 (unregistering): Released all slaves
[  201.979878][T10894] bond1: entered promiscuous mode
[  201.985815][T10894] bond1: entered allmulticast mode
[  201.996914][T10894] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.017542][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1444'.
[  202.052340][T10899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.288470][T10914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.314612][T10918] batman_adv: batadv0: Adding interface: dummy0
[  202.371650][T10918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.409091][T10924] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1454'.
[  202.428299][T10918] batman_adv: batadv0: Interface activated: dummy0
[  202.721809][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1460'.
[  203.678381][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'.
[  204.105786][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1474'.
[  204.167153][T10998] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.185739][T11009] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1477'.
[  204.236605][T10997] bond8 (unregistering): Released all slaves
[  204.336622][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'.
[  204.355583][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'.
[  204.358078][T11024] validate_nla: 2 callbacks suppressed
[  204.358094][T11024] netlink: 'syz.3.1479': attribute type 12 has an invalid length.
[  204.439633][T11029] netlink: 'syz.4.1481': attribute type 1 has an invalid length.
[  204.589463][T11031] bond4: (slave bridge7): making interface the new active one
[  204.591436][T11042] netlink: 'syz.2.1487': attribute type 1 has an invalid length.
[  204.600478][T11031] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  204.644275][T11044] netlink: zone id is out of range
[  204.649625][T11044] netlink: zone id is out of range
[  204.654881][T11044] netlink: zone id is out of range
[  204.673819][T11044] netlink: zone id is out of range
[  204.685307][T11044] netlink: zone id is out of range
[  204.693500][T11044] netlink: zone id is out of range
[  204.705526][T11044] netlink: zone id is out of range
[  204.735435][T11044] netlink: zone id is out of range
[  204.740650][T11044] netlink: zone id is out of range
[  204.775828][T11044] netlink: zone id is out of range
[  205.059318][T11068] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  205.185083][T11077] netlink: 'syz.5.1495': attribute type 1 has an invalid length.
[  205.285768][T11077] 8021q: adding VLAN 0 to HW filter on device bond3
[  205.683519][T11106] netlink: 'syz.1.1501': attribute type 5 has an invalid length.
[  205.739242][T11106] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  205.857957][T11106] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.955827][T11113] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.964196][T11113] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  205.992741][T11113] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  206.031541][T11116] syzkaller0: entered promiscuous mode
[  206.042134][T11116] syzkaller0: entered allmulticast mode
[  206.068796][T11123] team0: No ports can be present during mode change
[  206.255710][T11133] netlink: 'syz.1.1509': attribute type 5 has an invalid length.
[  206.323942][T11139] __nla_validate_parse: 57 callbacks suppressed
[  206.323961][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1510'.
[  206.368470][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1510'.
[  206.431094][T11145] gre1: entered promiscuous mode
[  206.450028][T11145] gre1: entered allmulticast mode
[  206.490312][T11151] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1515'.
[  206.501037][T11151] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1515'.
[  206.520723][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'.
[  206.534513][T11149] veth1_to_bond: entered allmulticast mode
[  206.577803][T11148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.585758][T11148] syzkaller0: entered promiscuous mode
[  206.591241][T11148] syzkaller0: entered allmulticast mode
[  206.609037][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'.
[  206.714620][T11145] bond0: (slave bond_slave_1): Releasing backup interface
[  206.769860][T11145] veth1_to_bond (unregistering): left allmulticast mode
[  206.811848][T11162] bond5: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  206.827270][T11162] bond5 (unregistering): Released all slaves
[  206.907628][T11148] tipc: Resetting bearer <eth:syzkaller0>
[  206.928827][T11147] tipc: Resetting bearer <eth:syzkaller0>
[  206.978638][T11147] tipc: Disabling bearer <eth:syzkaller0>
[  207.271873][T11190] netlink: 'syz.1.1526': attribute type 1 has an invalid length.
[  207.374492][T11190] 8021q: adding VLAN 0 to HW filter on device bond6
[  207.394960][T11191] bond6: (slave geneve2): making interface the new active one
[  207.404853][T11191] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  207.480908][T11199] bridge2: entered promiscuous mode
[  207.508387][T11199] bridge2: entered allmulticast mode
[  207.544377][T11209] netlink: 'syz.4.1530': attribute type 16 has an invalid length.
[  207.572601][T11213] netlink: 'syz.1.1532': attribute type 1 has an invalid length.
[  207.626682][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1530'.
[  207.638817][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'.
[  207.645039][T11213] 8021q: adding VLAN 0 to HW filter on device bond7
[  207.866469][T11227] veth1_macvtap: left promiscuous mode
[  208.423869][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'.
[  208.464835][T11267] syz_tun: tun_net_xmit 42
[  208.624064][T11282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  208.820817][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1555'.
[  208.884798][T11310] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  209.352101][T11341] syzkaller0: entered promiscuous mode
[  209.357849][T11341] syzkaller0: entered allmulticast mode
[  209.506134][    C0] syz_tun: tun_net_xmit 42
[  210.548343][    C0] syz_tun: tun_net_xmit 42
[  210.648772][T11309] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.112788][T11379] delete_channel: no stack
[  211.750581][T11422] __nla_validate_parse: 3 callbacks suppressed
[  211.750600][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'.
[  211.984097][T11425] veth0: entered promiscuous mode
[  212.004295][T11424] veth0: left promiscuous mode
[  212.181386][T11446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1601'.
[  212.481975][T11463] validate_nla: 6 callbacks suppressed
[  212.481993][T11463] netlink: 'syz.1.1603': attribute type 1 has an invalid length.
[  212.522787][T11463] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1603'.
[  212.602109][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1605'.
[  212.624082][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'.
[  212.652169][T11469] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1606'.
[  212.728872][T11482] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1609'.
[  212.892217][T11489] netlink: 'syz.1.1610': attribute type 11 has an invalid length.
[  212.919211][T11491] netlink: 'syz.2.1611': attribute type 10 has an invalid length.
[  212.920705][T11489] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  212.959342][T11491] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  213.004828][T11493] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  213.017126][T11493] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  213.029414][T11493] gretap2: entered promiscuous mode
[  213.042832][T11493] gretap2: entered allmulticast mode
[  213.145414][T11503] netlink: 'syz.3.1615': attribute type 1 has an invalid length.
[  213.192432][T11503] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.251891][T11506] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1616'.
[  213.273030][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'.
[  213.560686][T11526] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  213.574271][T11525] netlink: 'syz.5.1622': attribute type 4 has an invalid length.
[  213.599484][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'.
[  213.615875][T11526] 8021q: adding VLAN 0 to HW filter on device bond8
[  213.675028][T11532] 8021q: adding VLAN 0 to HW filter on device bond8
[  213.684925][T11532] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  213.698150][T11532] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  213.797153][T11526] veth11: entered promiscuous mode
[  213.812567][T11526] bond8: (slave veth11): Enslaving as an active interface with a down link
[  214.239935][T11572] netlink: 'syz.2.1635': attribute type 1 has an invalid length.
[  214.267487][T11572] nbd: must specify at least one socket
[  214.625085][T11589] bridge_slave_0: left allmulticast mode
[  214.632089][T11589] bridge_slave_0: left promiscuous mode
[  214.638419][T11589] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.167838][T11617] tipc: Enabled bearer <udp:syz2>, priority 10
[  215.181869][T11614] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  215.301889][T11625] net_ratelimit: 6 callbacks suppressed
[  215.301908][T11625] openvswitch: netlink: Duplicate or invalid key (type 0).
[  215.333315][T11625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.648447][T11648] wg2: entered promiscuous mode
[  215.653978][T11648] wg2: entered allmulticast mode
[  215.742767][T11652] nbd: must specify at least one socket
[  215.837916][T11655] netlink: 'syz.2.1661': attribute type 83 has an invalid length.
[  215.918087][T11664] gre0: entered promiscuous mode
[  216.210145][T11680] netlink: 'syz.3.1668': attribute type 8 has an invalid length.
[  216.297101][ T6285] tipc: Node number set to 2039394400
[  216.732458][T11691] bond5 (unregistering): Released all slaves
[  217.423089][T11712] netlink: 'syz.3.1677': attribute type 7 has an invalid length.
[  217.437321][T11714] __nla_validate_parse: 15 callbacks suppressed
[  217.437344][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1676'.
[  217.472981][T11712] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.1677'.
[  217.756353][ T5874] Bluetooth: hci3: command 0x0406 tx timeout
[  217.762415][ T5874] Bluetooth: hci1: command 0x0406 tx timeout
[  217.769365][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout
[  217.881822][T11738] bond6: Removing last ns target with arp_interval on
[  218.098933][T11769] sctp: [Deprecated]: syz.4.1690 (pid 11769) Use of struct sctp_assoc_value in delayed_ack socket option.
[  218.098933][T11769] Use struct sctp_sack_info instead
[  218.129987][T11762] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1688'.
[  218.258413][T11779] netlink: 'syz.3.1694': attribute type 4 has an invalid length.
[  218.295377][T11779] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1694'.
[  218.895471][T11816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1703'.
[  219.123832][T11824] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  219.161442][T11831] netlink: 'syz.5.1708': attribute type 7 has an invalid length.
[  219.524670][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.573841][T11852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.656295][T11858] 8021q: VLANs not supported on syzkaller1
[  219.659705][T11857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.800610][T11859] sctp: [Deprecated]: syz.2.1717 (pid 11859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.800610][T11859] Use struct sctp_sack_info instead
[  219.834531][T11857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.920310][T11855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.017705][T11870] netlink: 'syz.2.1718': attribute type 12 has an invalid length.
[  220.026013][T11870] netlink: 'syz.2.1718': attribute type 29 has an invalid length.
[  220.033849][T11870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.043101][T11870] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1718'.
[  220.276724][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1719'.
[  220.335586][T11880] sctp: [Deprecated]: syz.1.1722 (pid 11880) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.335586][T11880] Use struct sctp_sack_info instead
[  220.624592][T11885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'.
[  220.661039][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'.
[  221.258200][T11918] ip6gre0: Master is either lo or non-ether device
[  221.678422][T11943] syzkaller1: entered promiscuous mode
[  221.683942][T11943] syzkaller1: entered allmulticast mode
[  221.718585][T11943] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  222.172927][T11965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.186343][T11965] syzkaller0: entered promiscuous mode
[  222.205041][T11965] syzkaller0: entered allmulticast mode
[  222.281704][T11965] tipc: Resetting bearer <eth:syzkaller0>
[  222.459448][T11964] tipc: Resetting bearer <eth:syzkaller0>
[  222.509352][T11988] netlink: 'syz.5.1756': attribute type 1 has an invalid length.
[  222.526715][T11988] netlink: 'syz.5.1756': attribute type 1 has an invalid length.
[  222.536925][T11964] tipc: Disabling bearer <eth:syzkaller0>
[  222.548505][T11988] netlink: 'syz.5.1756': attribute type 1 has an invalid length.
[  222.589801][T11988] netlink: 'syz.5.1756': attribute type 2 has an invalid length.
[  222.630177][T11988] __nla_validate_parse: 8 callbacks suppressed
[  222.630196][T11988] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1756'.
[  222.759600][T12000] Bluetooth: hci1: too big key_count value 32778
[  222.841091][T11949] netlink: 'syz.1.1744': attribute type 1 has an invalid length.
[  222.847295][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'.
[  222.862632][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.914257][T11949] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1744'.
[  223.082044][T12008] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.114378][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'.
[  223.142343][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'.
[  223.291081][T12021] netlink: 'syz.3.1765': attribute type 14 has an invalid length.
[  223.620877][T12049] netlink: 'syz.3.1774': attribute type 6 has an invalid length.
[  223.644225][T12049] netlink: 'syz.3.1774': attribute type 6 has an invalid length.
[  223.677838][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.693933][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'.
[  223.756243][T12055] netlink: 'syz.2.1773': attribute type 4 has an invalid length.
[  223.782497][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'.
[  223.798915][T12055] netlink: 'syz.2.1773': attribute type 4 has an invalid length.
[  224.080464][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1784'.
[  224.104783][ T3007] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.116332][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1784'.
[  224.130762][ T3007] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.144168][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'.
[  224.147417][ T3007] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.165054][ T3007] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.268230][T12093] netlink: 'syz.3.1787': attribute type 11 has an invalid length.
[  224.444581][T12104] openvswitch: netlink: Actions may not be safe on all matching packets
[  224.559176][T12107] pim6reg1: entered promiscuous mode
[  224.579531][T12107] pim6reg1: entered allmulticast mode
[  224.660585][T12110] syzkaller1: entered promiscuous mode
[  224.666610][T12110] syzkaller1: entered allmulticast mode
[  224.978477][T12137] tipc: Started in network mode
[  224.983397][T12137] tipc: Node identity 6ee736fc767d, cluster identity 4711
[  225.001422][T12137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.026426][T12137] syzkaller0: entered promiscuous mode
[  225.031967][T12137] syzkaller0: entered allmulticast mode
[  225.106967][T12137] tipc: Resetting bearer <eth:syzkaller0>
[  225.147929][T12136] tipc: Resetting bearer <eth:syzkaller0>
[  225.234217][T12136] tipc: Disabling bearer <eth:syzkaller0>
[  225.262323][T12135] syzkaller1: entered promiscuous mode
[  225.272112][T12135] syzkaller1: entered allmulticast mode
[  225.665362][T12173] IPVS: set_ctl: invalid protocol: 108 172.30.1.3:20000
[  225.774880][T12186] netlink: 'syz.1.1814': attribute type 1 has an invalid length.
[  226.028934][T12192] bond9: ARP target 1.0.0.0 is already present
[  226.044454][T12192] bond9: option arp_ip_target: invalid value (1)
[  226.090581][T12192] bond9 (unregistering): Released all slaves
[  226.362536][T12227] syzkaller0: entered allmulticast mode
[  226.519274][T12233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.554511][T12233] syzkaller0: entered promiscuous mode
[  226.561956][T12233] syzkaller0: entered allmulticast mode
[  226.580467][T12233] tipc: Resetting bearer <eth:syzkaller0>
[  226.619323][T12232] tipc: Resetting bearer <eth:syzkaller0>
[  226.661184][T12232] tipc: Disabling bearer <eth:syzkaller0>
[  226.699713][T12246] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  226.954250][T12262] netlink: 'syz.2.1839': attribute type 1 has an invalid length.
[  226.957941][T12264] netlink: 'syz.5.1838': attribute type 26 has an invalid length.
[  226.971551][T12264] netlink: 'syz.5.1838': attribute type 26 has an invalid length.
[  227.067879][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.473203][T12296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.483235][T12296] syzkaller0: entered promiscuous mode
[  227.489205][T12296] syzkaller0: entered allmulticast mode
[  227.549744][T12296] tipc: Resetting bearer <eth:syzkaller0>
[  227.612366][T12295] tipc: Resetting bearer <eth:syzkaller0>
[  227.656468][T12295] tipc: Disabling bearer <eth:syzkaller0>
[  227.704818][T12310] syzkaller0: entered promiscuous mode
[  227.712798][T12310] syzkaller0: entered allmulticast mode
[  228.184701][T12329] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  228.236847][T12341] __nla_validate_parse: 17 callbacks suppressed
[  228.236869][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'.
[  228.338139][T12343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1865'.
[  228.447657][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.484237][T12355] netlink: 'syz.5.1866': attribute type 5 has an invalid length.
[  228.520858][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.535569][ T6285] syz_tun: tun_net_xmit 90
[  228.582058][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.633018][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.668868][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'.
[  228.695863][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.715397][ T6285] syz_tun: tun_net_xmit 90
[  228.741390][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.775497][ T6285] syz_tun: tun_net_xmit 90
[  228.781396][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  228.982007][T12383] netlink: 'syz.4.1876': attribute type 3 has an invalid length.
[  228.999113][T12383] netlink: 'syz.4.1876': attribute type 13 has an invalid length.
[  229.118148][T12383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.164181][T12393] netlink: 'syz.2.1878': attribute type 1 has an invalid length.
[  229.182423][T12393] netlink: 'syz.2.1878': attribute type 1 has an invalid length.
[  229.194173][T12386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.206341][T12386] syzkaller0: entered promiscuous mode
[  229.211943][T12386] syzkaller0: entered allmulticast mode
[  229.274026][T12386] tipc: Resetting bearer <eth:syzkaller0>
[  229.310401][T12385] tipc: Resetting bearer <eth:syzkaller0>
[  229.369162][T12385] tipc: Disabling bearer <eth:syzkaller0>
[  229.453476][T12402] pim6reg1: entered promiscuous mode
[  229.459704][T12402] pim6reg1: entered allmulticast mode
[  231.141022][T12438] syz_tun: tun_net_xmit 42
[  231.179432][T12429] virtio_net virtio1 eth0: entered promiscuous mode
[  231.189686][T12429] ifb1: entered promiscuous mode
[  231.195557][T12429] debugfs: 'hsr0' already exists in 'hsr'
[  231.206537][T12429] Cannot create hsr debugfs directory
[  231.904811][T12493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.127138][   T30] audit: type=1107 audit(1759365268.449:6): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¿�ÿ3J1Á£€9V!é¿cD¶Bª‚àØÒæ
X¢3ãQZ¦ôŸYYÔXf³#÷`Ä÷ýÛøp0�,´�“\ôŒúùG‡ÏzÞ'
[  232.155292][    C1] syz_tun: tun_net_xmit 42
[  232.233838][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.258694][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.282233][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.293721][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.325924][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.342159][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.358302][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.366808][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  232.374991][T12520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  233.195420][    C1] syz_tun: tun_net_xmit 42
[  234.296320][T12567] __nla_validate_parse: 141 callbacks suppressed
[  234.296341][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1929'.
[  234.401260][T12576] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  234.448287][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.486443][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.496831][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.523675][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.560625][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.575844][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  234.592606][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.627230][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.641371][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'.
[  234.771769][T12600] netem: change failed
[  234.810999][T12574] delete_channel: no stack
[  234.944870][T12611] netlink: 'syz.2.1943': attribute type 1 has an invalid length.
[  235.095926][T12623] netlink: 'syz.3.1948': attribute type 11 has an invalid length.
[  235.751539][T12675] sctp: [Deprecated]: syz.5.1962 (pid 12675) Use of int in max_burst socket option.
[  235.751539][T12675] Use struct sctp_assoc_value instead
[  235.940642][T12684] bond8: entered allmulticast mode
[  235.952726][T12683] veth1_to_bond: entered allmulticast mode
[  235.977120][T12689] netlink: 'syz.1.1964': attribute type 11 has an invalid length.
[  236.000523][T12683] veth1_to_bond: left allmulticast mode
[  236.158625][T12698] syz_tun: tun_net_xmit 42
[  236.206704][ T2978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  236.225590][ T2978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  236.242745][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  236.375532][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  236.640197][T12730] team0: Device ip6gre1 is of different type
[  236.893117][T12750] netlink: 'syz.3.1981': attribute type 10 has an invalid length.
[  237.008877][T12754] bond9: option xmit_hash_policy: invalid value (64)
[  237.022084][T12754] bond9 (unregistering): Released all slaves
[  237.105655][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  237.185269][    C0] syz_tun: tun_net_xmit 42
[  237.472446][T12782] can: request_module (can-proto-3) failed.
[  237.474230][T12787] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  238.083355][T12817] vlan4: entered promiscuous mode
[  238.111867][T12817] bridge0: entered promiscuous mode
[  238.123846][T12822] net_ratelimit: 24 callbacks suppressed
[  238.123865][T12822] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  238.225257][    C0] syz_tun: tun_net_xmit 42
[  238.322510][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.341011][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.353483][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.369175][T12826] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  238.445110][T12826] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  238.507209][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.517592][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.526728][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.534617][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.544124][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.554532][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.562489][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.573109][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.581424][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.608570][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.629400][T12826] hsr0 speed is unknown, defaulting to 1000
[  238.987666][T12849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.042977][T12852] syzkaller0: entered promiscuous mode
[  239.049124][T12852] syzkaller0: entered allmulticast mode
[  239.113813][T12865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.152095][T12852] tipc: Resetting bearer <eth:syzkaller0>
[  239.270594][T12852] tipc: Disabling bearer <eth:syzkaller0>
[  239.338645][T12879] netlink: 'syz.4.2024': attribute type 1 has an invalid length.
[  239.512231][T12897] tipc: Trying to set illegal importance in message
[  239.844505][T12920] __nla_validate_parse: 108 callbacks suppressed
[  239.844527][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2035'.
[  240.065402][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  240.173948][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'.
[  240.203679][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'.
[  240.320532][T12949] netlink: 'syz.2.2046': attribute type 2 has an invalid length.
[  240.340575][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  240.553448][T12960] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2050'.
[  240.620111][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'.
[  241.038519][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'.
[  241.182722][T12998] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  241.845439][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2074'.
[  241.965852][T13041] netlink: 'syz.3.2079': attribute type 5 has an invalid length.
[  241.988154][T13040] team0: No ports can be present during mode change
[  242.036940][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'.
[  242.199453][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2080'.
[  242.463367][T13071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  242.474128][T13070] netlink: 'syz.5.2090': attribute type 18 has an invalid length.
[  242.475028][T13070] netlink: 'syz.5.2090': attribute type 18 has an invalid length.
[  242.517766][ T2978] tipc: Subscription rejected, illegal request
[  242.801729][T13089] ieee802154 phy0 wpan0: encryption failed: -22
[  242.819806][T13092] tipc: Started in network mode
[  242.824928][T13092] tipc: Node identity 7e1c85fec2c2, cluster identity 4711
[  242.844109][T13092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.960779][T13092] syzkaller0: entered promiscuous mode
[  242.967170][T13092] syzkaller0: entered allmulticast mode
[  242.989410][T13106] netlink: 'syz.3.2098': attribute type 7 has an invalid length.
[  242.998560][T13092] tipc: Resetting bearer <eth:syzkaller0>
[  243.177118][ T2978] tipc: Resetting bearer <eth:syzkaller0>
[  243.218481][T13091] tipc: Resetting bearer <eth:syzkaller0>
[  243.915440][ T5871] tipc: Node number set to 3168699902
[  244.651029][T13091] tipc: Disabling bearer <eth:syzkaller0>
[  244.849127][T13149] netlink: 'syz.4.2112': attribute type 11 has an invalid length.
[  244.891186][T13149] __nla_validate_parse: 14 callbacks suppressed
[  244.891208][T13149] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2112'.
[  244.918095][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2116'.
[  244.929285][T13156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2116'.
[  244.939730][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2116'.
[  244.965542][T13156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2116'.
[  244.984183][T13156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2116'.
[  245.071949][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'.
[  245.169540][T13165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.292736][T13144] tipc: Resetting bearer <eth:syzkaller0>
[  245.309208][T13177] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2120'.
[  245.383680][T13183] netlink: 'syz.1.2122': attribute type 2 has an invalid length.
[  246.723100][T13144] tipc: Disabling bearer <eth:syzkaller0>
[  246.843555][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2127'.
[  246.866707][T13198] veth1_macvtap: left promiscuous mode
[  246.907703][T13196] sctp: [Deprecated]: syz.5.2127 (pid 13196) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.907703][T13196] Use struct sctp_sack_info instead
[  246.944199][T13202] netlink: 'syz.3.2128': attribute type 7 has an invalid length.
[  246.967257][T13202] : entered promiscuous mode
[  247.026649][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'.
[  247.304491][T13233] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  247.665317][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  247.693222][T13261] netlink: 'syz.3.2144': attribute type 29 has an invalid length.
[  247.702398][T13261] netlink: 'syz.3.2144': attribute type 29 has an invalid length.
[  247.717622][T13261] netlink: 'syz.3.2144': attribute type 29 has an invalid length.
[  247.740221][T13261] netlink: 'syz.3.2144': attribute type 29 has an invalid length.
[  247.912548][T13272] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  248.209638][T13301] sit0: entered promiscuous mode
[  248.234876][T13301] netlink: 'syz.3.2151': attribute type 1 has an invalid length.
[  248.248741][T13302] netlink: 'syz.2.2152': attribute type 10 has an invalid length.
[  248.291607][T13302] batman_adv: batadv0: Removing interface: team0
[  248.349832][T13302] 8021q: adding VLAN 0 to HW filter on device team0
[  248.381509][T13302] bond0: (slave team0): Enslaving as an active interface with an up link
[  248.762492][T13297] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  248.783002][T13297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.808995][T13339] netlink: 'syz.4.2161': attribute type 1 has an invalid length.
[  248.891661][T13347] bond0: entered promiscuous mode
[  248.905387][T13347] bond_slave_0: entered promiscuous mode
[  248.911390][T13347] bond_slave_1: entered promiscuous mode
[  248.917916][T13347] bond0: entered allmulticast mode
[  248.923177][T13347] bond_slave_0: entered allmulticast mode
[  248.929117][T13347] bond_slave_1: entered allmulticast mode
[  249.059009][T13339] 8021q: adding VLAN 0 to HW filter on device bond8
[  249.080131][T13339] bond7: (slave bond8): making interface the new active one
[  249.112988][T13339] bond7: (slave bond8): Enslaving as an active interface with an up link
[  249.151687][T13346] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[  249.523679][T13380] netlink: 'syz.3.2172': attribute type 10 has an invalid length.
[  250.180971][T13401] __nla_validate_parse: 14 callbacks suppressed
[  250.180991][T13401] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2179'.
[  250.431561][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2183'.
[  250.449164][T13412] validate_nla: 2 callbacks suppressed
[  250.449181][T13412] netlink: 'syz.2.2184': attribute type 10 has an invalid length.
[  250.482336][T13418] netlink: 'syz.1.2185': attribute type 11 has an invalid length.
[  250.520380][T13415] bond5: invalid ARP target 0.0.0.0 specified for addition
[  250.532038][T13415] bond5: option arp_ip_target: invalid value (0)
[  250.547032][T13415] bond5 (unregistering): Released all slaves
[  250.577638][T13412] batman_adv: batadv0: Interface deactivated: dummy0
[  250.589125][T13412] batman_adv: batadv0: Removing interface: dummy0
[  250.598114][T13412] team0: Port device dummy0 added
[  250.603786][T13422] netlink: 'syz.3.2186': attribute type 3 has an invalid length.
[  250.613404][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'.
[  250.615309][T13422] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2186'.
[  250.654286][T13421] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2183'.
[  250.685980][T13429] veth0_macvtap: left promiscuous mode
[  250.847587][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'.
[  250.879903][T13436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'.
[  250.894303][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'.
[  250.924809][T13436] netlink: 'syz.2.2189': attribute type 7 has an invalid length.
[  250.935695][T13436] netlink: 'syz.2.2189': attribute type 8 has an invalid length.
[  250.954904][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'.
[  250.966610][T13444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2193'.
[  250.990498][T13436] gretap0: entered promiscuous mode
[  251.002784][T13436] gretap0: left promiscuous mode
[  251.389272][T13468] openvswitch: netlink: Missing key (keys=40, expected=100)
[  251.599904][T13463] bond8: option lp_interval: invalid value (0)
[  251.606784][T13463] bond8: option lp_interval: allowed values 1 - 2147483647
[  251.624121][T13463] bond8 (unregistering): Released all slaves
[  251.758844][T13495] 8021q: VLANs not supported on sit0
[  251.929683][T13511] xt_limit: Overflow, try lower: 271964/0
[  252.228165][T13531] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  252.247303][T13532] syzkaller1: entered promiscuous mode
[  252.252814][T13532] syzkaller1: entered allmulticast mode
[  252.399918][T13543] macvlan0: entered promiscuous mode
[  252.414976][T13545] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  252.437233][T13543] batadv_slave_0: entered promiscuous mode
[  252.472424][T13543] debugfs: 'hsr1' already exists in 'hsr'
[  252.495573][T13543] Cannot create hsr debugfs directory
[  252.746968][T13566] netlink: 'syz.4.2229': attribute type 1 has an invalid length.
[  252.767742][T13569] netlink: 'syz.3.2228': attribute type 1 has an invalid length.
[  252.793179][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.881341][T13576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.922026][T13576] syzkaller0: entered promiscuous mode
[  252.932533][T13576] syzkaller0: entered allmulticast mode
[  252.993918][T13576] tipc: Resetting bearer <eth:syzkaller0>
[  253.009186][T13573] tipc: Resetting bearer <eth:syzkaller0>
[  253.046055][T13573] tipc: Disabling bearer <eth:syzkaller0>
[  253.585996][ T5185] Bluetooth: hci4: command 0x0406 tx timeout
[  261.757681][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  263.025441][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  274.213846][T13585] __nla_validate_parse: 16 callbacks suppressed
[  274.213865][T13585] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2233'.
[  274.240464][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2236'.
[  274.251053][T13592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.314002][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2236'.
[  274.330533][T13602] netlink: 'syz.2.2239': attribute type 1 has an invalid length.
[  274.338872][T13602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2239'.
[  274.352938][T13602] nbd: couldn't find device at index 1048576
[  274.519137][T13615] netlink: 'syz.5.2242': attribute type 4 has an invalid length.
[  274.592338][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2244'.
[  275.143704][T13661] netlink: 'syz.1.2258': attribute type 1 has an invalid length.
[  275.165062][T13665] netlink: 'syz.4.2260': attribute type 1 has an invalid length.
[  275.248166][T13665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.260611][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'.
[  275.273707][T13665] syzkaller0: entered promiscuous mode
[  275.282041][T13665] syzkaller0: entered allmulticast mode
[  275.339590][T13662] tipc: Resetting bearer <eth:syzkaller0>
[  275.394038][T13662] tipc: Disabling bearer <eth:syzkaller0>
[  275.689832][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'.
[  275.958425][T13715] netlink: 'syz.4.2274': attribute type 1 has an invalid length.
[  275.968729][T13715] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2274'.
[  275.978835][T13715] netlink: 'syz.4.2274': attribute type 1 has an invalid length.
[  276.082636][T13724] netlink: 'syz.3.2276': attribute type 1 has an invalid length.
[  276.090947][T13724] netlink: 'syz.3.2276': attribute type 4 has an invalid length.
[  276.099791][T13724] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2276'.
[  276.164524][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2276'.
[  276.908731][T13739] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  277.240377][T13771] netlink: 'syz.2.2288': attribute type 10 has an invalid length.
[  277.283208][T13764] pim6reg: entered allmulticast mode
[  277.298017][ T6287] hsr0 speed is unknown, defaulting to 1000
[  277.749405][T13794] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.977689][   T32] tipc: Subscription rejected, illegal request
[  278.080993][T13824] netlink: 'syz.4.2297': attribute type 4 has an invalid length.
[  278.273124][T13824] bond9 (unregistering): Released all slaves
[  278.369064][T13820] hsr0 speed is unknown, defaulting to 1000
[  278.452945][T13839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.252245][T13893] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  279.301074][T13893] bond9 (unregistering): Released all slaves
[  279.303901][T13899] atomic_op ffff88806975b998 conn xmit_atomic 0000000000000000
[  279.536863][T13911] __nla_validate_parse: 8 callbacks suppressed
[  279.536881][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'.
[  279.641148][T13918] syzkaller0: entered promiscuous mode
[  279.649919][T13918] syzkaller0: entered allmulticast mode
[  279.734130][T13930] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2325'.
[  279.989260][T13949] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2330'.
[  281.185026][T13934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.347051][T13965] validate_nla: 1 callbacks suppressed
[  281.347069][T13965] netlink: 'syz.2.2333': attribute type 12 has an invalid length.
[  281.468225][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2338'.
[  281.500103][T13974] openvswitch: netlink: Missing valid actions attribute.
[  281.522311][T13977] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  281.526753][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.565255][T13977] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  281.615702][T13977] netlink: 'syz.2.2340': attribute type 7 has an invalid length.
[  281.655233][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'.
[  281.697263][T13985] tipc: Cannot configure node identity twice
[  281.839795][T13997] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2347'.
[  281.868756][T14001] netlink: 'syz.1.2348': attribute type 29 has an invalid length.
[  281.879028][T14001] netlink: 'syz.1.2348': attribute type 29 has an invalid length.
[  281.891447][T14001] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2348'.
[  281.948721][T14003] netlink: 'syz.2.2349': attribute type 29 has an invalid length.
[  281.972380][T14003] netlink: 'syz.2.2349': attribute type 29 has an invalid length.
[  281.997421][T14003] netlink: 'syz.2.2349': attribute type 29 has an invalid length.
[  282.010947][T14003] netlink: 'syz.2.2349': attribute type 29 has an invalid length.
[  282.092075][T14011] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2352'.
[  282.301548][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.334170][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.343244][T14025] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003
[  283.365005][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'.
[  283.384728][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'.
[  283.400210][T14041] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  283.430811][T14046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.484839][T14041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  283.607500][T14056] vxcan1: tx drop: invalid da for name 0x0000000000000001
[  284.411978][T14097] bond9: Removing last ns target with arp_interval on
[  284.464477][T14111] delete_channel: no stack
[  285.000661][T14140] hsr0 speed is unknown, defaulting to 1000
[  285.022580][T14145] __nla_validate_parse: 9 callbacks suppressed
[  285.022600][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2399'.
[  285.108435][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'.
[  285.319063][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2404'.
[  285.341416][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2404'.
[  285.654821][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2410'.
[  285.675572][T14180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.747975][T14187] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2413'.
[  285.754546][T14184] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2412'.
[  285.770791][T14187] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2413'.
[  285.781737][T14186] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2413'.
[  285.805552][T14186] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2413'.
[  286.113404][T14200] bond0: (slave team0): Releasing backup interface
[  286.124217][T14200] dummy0: left allmulticast mode
[  286.142614][T14200] bridge0: port 3(dummy0) entered disabled state
[  286.188051][T14200] bridge_slave_0: left allmulticast mode
[  286.193735][T14200] bridge_slave_0: left promiscuous mode
[  286.204024][T14200] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.238597][T14200] bond0: (slave bridge_slave_1): Releasing backup interface
[  286.253280][T14200] bond0: (slave bond_slave_0): Releasing backup interface
[  286.264863][T14200] bond0: (slave bond_slave_1): Releasing backup interface
[  286.284161][T14200] team0: Port device team_slave_0 removed
[  286.299414][T14200] team0: Port device team_slave_1 removed
[  286.316545][T14200] bond1: (slave veth3): Releasing backup interface
[  286.330936][T14200] bond2: (slave bridge1): Releasing backup interface
[  286.342056][T14200] bridge1: left promiscuous mode
[  286.363402][T14200] bond4: (slave bridge7): Releasing active interface
[  286.382307][T14200] bond7: (slave bond8): Releasing backup interface
[  286.395519][T14200] bond7: (slave bond8): the permanent HWaddr of slave - 56:e7:43:f8:58:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  286.415020][T14242] delete_channel: no stack
[  286.419657][T14200] bond7: (slave gretap2): making interface the new active one
[  286.434368][T14200] bond7: (slave gretap2): Releasing backup interface
[  286.829602][T14274] tc_dump_action: action bad kind
[  286.860917][T14276] veth0_macvtap: left promiscuous mode
[  286.917682][T14278] validate_nla: 7 callbacks suppressed
[  286.917702][T14278] netlink: 'syz.2.2430': attribute type 1 has an invalid length.
[  286.958013][T14278] netlink: 'syz.2.2430': attribute type 1 has an invalid length.
[  286.998361][T14287] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  287.621087][T14316] syzkaller1: entered promiscuous mode
[  287.628447][T14316] syzkaller1: entered allmulticast mode
[  287.683009][T14321] syzkaller1: entered promiscuous mode
[  287.691407][T14321] syzkaller1: entered allmulticast mode
[  288.078850][T14340] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  288.130013][T14341] netem: unknown loss type 8
[  288.150099][T14341] netem: change failed
[  288.994605][T14403] netlink: 'syz.3.2471': attribute type 11 has an invalid length.
[  289.651673][T14442] netlink: 'syz.3.2485': attribute type 7 has an invalid length.
[  289.742658][T14450] netlink: 'syz.1.2484': attribute type 15 has an invalid length.
[  289.751315][T14449] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  289.848221][T14450] bond8: entered allmulticast mode
[  289.881379][T14450] 8021q: adding VLAN 0 to HW filter on device bond8
[  289.917213][T14450] bridge0: port 1(bond8) entered blocking state
[  289.934307][T14450] bridge0: port 1(bond8) entered disabled state
[  289.944885][T14450] bond8: entered promiscuous mode
[  289.953735][T14450] bridge0: port 1(bond8) entered blocking state
[  289.960910][T14450] bridge0: port 1(bond8) entered forwarding state
[  289.988883][ T2978] bridge0: port 1(bond8) entered disabled state
[  290.070006][T14459] netlink: 'syz.2.2489': attribute type 25 has an invalid length.
[  290.130540][T14466] netlink: 'syz.1.2492': attribute type 10 has an invalid length.
[  290.147560][ T2978] nci: nci_rx_work: unknown MT 0x1
[  291.177330][T14524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.198910][T14528] syzkaller0: entered promiscuous mode
[  291.218168][T14528] syzkaller0: entered allmulticast mode
[  291.385941][T14528] tipc: Resetting bearer <eth:syzkaller0>
[  291.545764][T14528] tipc: Disabling bearer <eth:syzkaller0>
[  291.596289][T14552] netlink: 'syz.3.2508': attribute type 1 has an invalid length.
[  291.695783][T14554] syzkaller1: entered promiscuous mode
[  291.701295][T14554] syzkaller1: entered allmulticast mode
[  291.729733][T14554] syzkaller1: left promiscuous mode
[  291.737055][T14549] __nla_validate_parse: 16 callbacks suppressed
[  291.737075][T14549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2508'.
[  291.754360][T14554] syzkaller1: left allmulticast mode
[  291.797583][T14563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2511'.
[  291.822084][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[  291.831257][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  291.899993][T14567] netlink: 'syz.1.2513': attribute type 1 has an invalid length.
[  291.914658][T14567] netlink: 'syz.1.2513': attribute type 1 has an invalid length.
[  291.925643][T14567] netlink: 'syz.1.2513': attribute type 4 has an invalid length.
[  291.938484][T14567] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2513'.
[  291.951995][T14567] NCSI netlink: No device for ifindex 830110067
[  292.001759][T14577] nbd: must specify an index to disconnect
[  292.019568][T14577] ip6gre1: entered allmulticast mode
[  292.112092][T14581] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.2518'.
[  292.163977][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'.
[  292.434479][T14604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.459976][T14604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.808269][T14628] nbd: must specify a device to reconfigure
[  292.842539][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2536'.
[  292.918134][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'.
[  293.066759][T14643] veth11: entered allmulticast mode
[  293.074766][T14643] netlink: 'syz.1.2542': attribute type 11 has an invalid length.
[  293.083353][T14643] netlink: 'syz.1.2542': attribute type 11 has an invalid length.
[  293.091799][T14643] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2542'.
[  293.240465][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'.
[  293.314656][T14654] syzkaller1: entered promiscuous mode
[  293.321167][T14654] syzkaller1: entered allmulticast mode
[  293.596860][T14666] team0 (unregistering): Port device team_slave_0 removed
[  293.619334][T14670] xt_policy: too many policy elements
[  293.623238][T14666] team0 (unregistering): Port device team_slave_1 removed
[  293.672348][T14667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.686412][T14667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.702088][T14674] netlink: 'syz.2.2550': attribute type 6 has an invalid length.
[  293.791863][T14667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.802411][T14667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.821247][T14669] netlink: 'syz.2.2550': attribute type 1 has an invalid length.
[  293.917433][T14667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.937024][T14667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.073207][T14667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.088346][T14667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.115482][T14689] netlink: 'syz.2.2555': attribute type 12 has an invalid length.
[  294.123571][T14691] geneve2: entered promiscuous mode
[  294.130259][T14691] geneve2: entered allmulticast mode
[  294.144306][ T1098] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  294.189275][ T1098] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  294.213346][ T1098] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  294.235083][ T1098] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  294.299070][ T1098] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.321212][ T1098] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.337557][ T1098] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.346402][ T1098] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.366009][   T37] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.386472][   T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.388369][T14699] netlink: 'syz.2.2558': attribute type 1 has an invalid length.
[  294.426791][ T6268] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.435011][ T6268] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.553438][T14705] gretap2: entered promiscuous mode
[  294.595991][T14707] netlink: 'syz.5.2561': attribute type 19 has an invalid length.
[  294.721636][T14715] netlink: 'syz.2.2564': attribute type 1 has an invalid length.
[  294.807820][T14717] 8021q: adding VLAN 0 to HW filter on device bond9
[  294.821409][T14719] tipc: New replicast peer: 255.255.255.255
[  294.830813][T14719] tipc: Enabled bearer <udp:syz2>, priority 10
[  295.244726][T14746] 8021q: adding VLAN 0 to HW filter on device bond7
[  295.274296][T14749] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  295.291285][T14746] netlink: 'syz.5.2575': attribute type 83 has an invalid length.
[  295.982613][T14751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.550202][T14809] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  296.582504][T14812] netlink: 'syz.5.2592': attribute type 1 has an invalid length.
[  296.713817][T14814] netlink: 'syz.1.2593': attribute type 1 has an invalid length.
[  296.771826][T14814] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  296.784557][T14814] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  296.847444][T14827] __nla_validate_parse: 19 callbacks suppressed
[  296.847465][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'.
[  296.927471][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'.
[  296.937455][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'.
[  297.084561][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2603'.
[  297.095030][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2603'.
[  297.137203][T14844] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2604'.
[  297.148828][T14844] NCSI netlink: No device for ifindex 0
[  297.214746][T14851] netlink: 'syz.2.2607': attribute type 3 has an invalid length.
[  297.241238][T14851] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.523752][T14865] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20004
[  297.554789][T14873] openvswitch: netlink: Actions may not be safe on all matching packets
[  297.576841][T14876] netlink: 'syz.2.2613': attribute type 10 has an invalid length.
[  297.590252][T14876] team0: Device ipvlan1 failed to register rx_handler
[  297.649925][T14872] hsr0 speed is unknown, defaulting to 1000
[  297.707165][T14881] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2615'.
[  297.719014][T14881] ip6gretap0: entered promiscuous mode
[  297.724948][T14880] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2615'.
[  297.747263][T14883] netlink: 'syz.3.2615': attribute type 1 has an invalid length.
[  297.760188][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2615'.
[  297.770122][T14881] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2615'.
[  298.551514][T14945] bond0: Error: Cannot enslave bond to itself.
[  298.843812][T14965] netlink: 'syz.5.2640': attribute type 20 has an invalid length.
[  298.872971][T14966] openvswitch: netlink: Flow key attr not present in new flow.
[  298.965891][T14962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.997147][T14962] syzkaller0: entered promiscuous mode
[  299.037132][T14962] syzkaller0: entered allmulticast mode
[  299.197286][T14980] netlink: 'syz.4.2642': attribute type 33 has an invalid length.
[  299.211790][T14961] tipc: Resetting bearer <eth:syzkaller0>
[  299.331414][T14961] tipc: Disabling bearer <eth:syzkaller0>
[  299.548246][T14997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  299.646482][T15009] 8021q: adding VLAN 0 to HW filter on device team0
[  299.653817][T15009] team0: Cannot enslave team device to itself
[  300.228177][T15056] netlink: 'syz.4.2663': attribute type 10 has an invalid length.
[  300.264215][T15056] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  300.330937][T15063] xt_l2tp: invalid flags combination: 0
[  300.888619][T15092] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002
[  301.014785][T15101] netlink: 'syz.3.2673': attribute type 75 has an invalid length.
[  301.128884][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.143367][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.582719][T15145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.619233][T15142] netlink: 'syz.2.2683': attribute type 1 has an invalid length.
[  301.654756][T15142] netlink: 'syz.2.2683': attribute type 1 has an invalid length.
[  301.996874][T15170] netlink: 'syz.1.2692': attribute type 4 has an invalid length.
[  302.022506][T15173] __nla_validate_parse: 76 callbacks suppressed
[  302.022528][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'.
[  302.060257][T15174] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2693'.
[  302.096071][T15175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2691'.
[  302.132830][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'.
[  302.326746][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'.
[  302.552179][T15207] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  302.679074][T15209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2700'.
[  302.743929][T15210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2700'.
[  302.919867][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'.
[  302.983211][T15216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'.
[  303.012207][T15212] 8021q: adding VLAN 0 to HW filter on device bond10
[  303.031109][T15220] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  303.311541][T15241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2706'.
[  303.505520][ T5876] Bluetooth: hci1: command 0x0406 tx timeout
[  303.854037][T15278] netlink: 'syz.1.2718': attribute type 1 has an invalid length.
[  303.874268][T15278] netlink: 'syz.1.2718': attribute type 12 has an invalid length.
[  303.899005][T15278] netlink: 'syz.1.2718': attribute type 12 has an invalid length.
[  304.046955][T15289] netlink: 'syz.1.2723': attribute type 11 has an invalid length.
[  304.058779][T15289] netlink: 'syz.1.2723': attribute type 11 has an invalid length.
[  304.622600][T15333] netlink: 'syz.3.2733': attribute type 1 has an invalid length.
[  304.650425][T15333] netlink: 'syz.3.2733': attribute type 2 has an invalid length.
[  304.685411][T15333] netlink: 'syz.3.2733': attribute type 1 has an invalid length.
[  304.750034][T15338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.757777][T15338] syzkaller0: entered promiscuous mode
[  304.763271][T15338] syzkaller0: entered allmulticast mode
[  304.810282][T15338] tipc: Resetting bearer <eth:syzkaller0>
[  304.827595][T15336] tipc: Resetting bearer <eth:syzkaller0>
[  304.853265][T15336] tipc: Disabling bearer <eth:syzkaller0>
[  304.907467][T15346] syz.1.2737 (15346) used obsolete PPPIOCDETACH ioctl
[  305.115074][T15354] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  305.126729][T15354] batman_adv: batadv0: Adding interface: netdevsim0
[  305.133355][T15354] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.176058][T15354] batman_adv: batadv0: Interface activated: netdevsim0
[  305.540217][T15380] hsr0 speed is unknown, defaulting to 1000
[  305.954455][T15412] syzkaller1: entered promiscuous mode
[  305.961580][T15412] syzkaller1: entered allmulticast mode
[  306.145011][T15426] IPv6: Can't replace route, no match found
[  306.219954][T15422] vxcan0: entered allmulticast mode
[  306.253653][T15433] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  306.284126][T15433] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  306.297890][T15433] gretap3: entered promiscuous mode
[  306.303129][T15433] gretap3: entered allmulticast mode
[  306.468288][T15447] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  306.476511][T15447] team0: Device macvtap0 is already an upper device of the team interface
[  306.971985][T15482] netlink: 'syz.5.2782': attribute type 6 has an invalid length.
[  306.986840][T15482] netlink: 'syz.5.2782': attribute type 6 has an invalid length.
[  307.006297][T15485] netlink: 'syz.5.2782': attribute type 6 has an invalid length.
[  307.115769][T15492] __nla_validate_parse: 25 callbacks suppressed
[  307.115792][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'.
[  307.146983][T15492] netlink: 'syz.2.2785': attribute type 5 has an invalid length.
[  307.158756][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2785'.
[  307.199008][T15492] geneve3: entered promiscuous mode
[  307.204331][T15492] geneve3: entered allmulticast mode
[  307.212823][ T1098] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  307.223398][ T1098] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  307.240765][ T1098] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  307.313377][   T78] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  307.323536][T15506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2790'.
[  307.335050][T15506] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2790'.
[  307.356791][T15506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2790'.
[  307.514896][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2794'.
[  307.767596][T15533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.785088][T15533] syzkaller0: entered promiscuous mode
[  307.792363][T15533] syzkaller0: entered allmulticast mode
[  307.936508][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'.
[  307.959611][T15540] bond11: (slave bridge11): making interface the new active one
[  307.968725][T15540] bond11: (slave bridge11): Enslaving as an active interface with an up link
[  308.008205][T15532] tipc: Resetting bearer <eth:syzkaller0>
[  308.053192][T15532] tipc: Disabling bearer <eth:syzkaller0>
[  308.078330][T15535] sctp: [Deprecated]: syz.4.2802 (pid 15535) Use of struct sctp_assoc_value in delayed_ack socket option.
[  308.078330][T15535] Use struct sctp_sack_info instead
[  308.362247][T15563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2810'.
[  308.437302][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2810'.
[  309.021057][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  309.124134][T15594] 8021q: adding VLAN 0 to HW filter on device bond11
[  309.177017][T15597] validate_nla: 4 callbacks suppressed
[  309.177037][T15597] netlink: 'syz.2.2820': attribute type 8 has an invalid length.
[  309.236606][T15594] bond11: option mode: unable to set because the bond device is up
[  309.529107][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.544001][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.553363][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.564885][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.573940][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.628945][T15602] hsr0 speed is unknown, defaulting to 1000
[  309.808608][T15612] netlink: 'syz.2.2825': attribute type 27 has an invalid length.
[  309.825530][T15612] netlink: 'syz.2.2825': attribute type 4 has an invalid length.
[  309.891514][T15612] batman_adv: batadv0: Interface deactivated: netdevsim0
[  310.033941][T15602] chnl_net:caif_netlink_parms(): no params data found
[  310.138381][T15620] syz.4.2828: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  310.201720][T15629] netlink: 'syz.1.2830': attribute type 10 has an invalid length.
[  310.210187][T15620] CPU: 0 UID: 0 PID: 15620 Comm: syz.4.2828 Not tainted syzkaller #0 PREEMPT(full) 
[  310.210214][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  310.210234][T15620] Call Trace:
[  310.210242][T15620]  <TASK>
[  310.210251][T15620]  dump_stack_lvl+0x189/0x250
[  310.210283][T15620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.210306][T15620]  ? __pfx__printk+0x10/0x10
[  310.210334][T15620]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.210358][T15620]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.210383][T15620]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  310.210408][T15620]  warn_alloc+0x214/0x310
[  310.210439][T15620]  ? stack_depot_save_flags+0x40/0x860
[  310.210468][T15620]  ? __pfx_warn_alloc+0x10/0x10
[  310.210496][T15620]  ? kasan_save_track+0x4f/0x80
[  310.210522][T15620]  ? xskq_create+0x56/0x170
[  310.210538][T15620]  ? xsk_init_queue+0xb0/0x110
[  310.210554][T15620]  ? xsk_setsockopt+0x4dc/0x8d0
[  310.210580][T15620]  ? do_sock_setsockopt+0x179/0x1b0
[  310.210601][T15620]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  310.210621][T15620]  ? do_syscall_64+0xfa/0x3b0
[  310.210641][T15620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.210668][T15620]  __vmalloc_node_range_noprof+0x125/0x12f0
[  310.210728][T15620]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.210761][T15620]  ? __kasan_kmalloc+0x93/0xb0
[  310.210790][T15620]  vmalloc_user_noprof+0xad/0xf0
[  310.210817][T15620]  ? xskq_create+0xbf/0x170
[  310.210837][T15620]  xskq_create+0xbf/0x170
[  310.210859][T15620]  xsk_init_queue+0xb0/0x110
[  310.210880][T15620]  xsk_setsockopt+0x4dc/0x8d0
[  310.210912][T15620]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.210940][T15620]  ? __pfx_aa_sk_perm+0x10/0x10
[  310.210973][T15620]  ? aa_sock_opt_perm+0xff/0x1b0
[  310.211003][T15620]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  310.211023][T15620]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.211053][T15620]  do_sock_setsockopt+0x179/0x1b0
[  310.211082][T15620]  __x64_sys_setsockopt+0x13f/0x1b0
[  310.211110][T15620]  do_syscall_64+0xfa/0x3b0
[  310.211130][T15620]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.211150][T15620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.211168][T15620]  ? clear_bhb_loop+0x60/0xb0
[  310.211191][T15620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.211209][T15620] RIP: 0033:0x7f794338eec9
[  310.211226][T15620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.211243][T15620] RSP: 002b:00007f7944313038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  310.211263][T15620] RAX: ffffffffffffffda RBX: 00007f79435e5fa0 RCX: 00007f794338eec9
[  310.211278][T15620] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  310.211290][T15620] RBP: 00007f7943411f91 R08: 0000000000000004 R09: 0000000000000000
[  310.211301][T15620] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.211313][T15620] R13: 00007f79435e6038 R14: 00007f79435e5fa0 R15: 00007ffdccc1d408
[  310.211344][T15620]  </TASK>
[  310.211356][T15620] Mem-Info:
[  310.518240][T15620] active_anon:4687 inactive_anon:0 isolated_anon:0
[  310.518240][T15620]  active_file:2756 inactive_file:39956 isolated_file:0
[  310.518240][T15620]  unevictable:768 dirty:77 writeback:0
[  310.518240][T15620]  slab_reclaimable:12673 slab_unreclaimable:117786
[  310.518240][T15620]  mapped:29873 shmem:1382 pagetables:922
[  310.518240][T15620]  sec_pagetables:0 bounce:0
[  310.518240][T15620]  kernel_misc_reclaimable:0
[  310.518240][T15620]  free:1302658 free_pcp:18916 free_cma:0
[  310.565348][T15620] Node 0 active_anon:20348kB inactive_anon:0kB active_file:11024kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119492kB dirty:308kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14160kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.621591][T15620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.659009][T15602] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.667512][T15602] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.674892][T15602] bridge_slave_0: entered allmulticast mode
[  310.687345][T15602] bridge_slave_0: entered promiscuous mode
[  310.698478][T15602] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.707699][T15620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.738464][T15602] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.749746][T15602] bridge_slave_1: entered allmulticast mode
[  310.758290][T15602] bridge_slave_1: entered promiscuous mode
[  310.790331][T15620] lowmem_reserve[]: 0 2497 2499 2499 2499
[  310.798060][T15620] Node 0 DMA32 free:1307712kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26088kB inactive_anon:0kB active_file:11024kB inactive_file:158052kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:50816kB local_pcp:20572kB free_cma:0kB
[  310.847776][T15620] lowmem_reserve[]: 0 0 1 1 1
[  310.861152][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.874741][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.888216][T15620] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  310.940259][T15620] lowmem_reserve[]: 0 0 0 0 0
[  310.948647][T15620] Node 1 Normal free:3887676kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17024kB local_pcp:8704kB free_cma:0kB
[  310.981802][T15620] lowmem_reserve[]: 0 0 0 0 0
[  310.988272][T15620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  311.002526][T15620] Node 0 DMA32: 270*4kB (UME) 9*8kB (UME) 150*16kB (M) 27*32kB (ME) 2*64kB (UM) 4*128kB (UM) 10*256kB (UME) 15*512kB (UE) 19*1024kB (UME) 6*2048kB (UM) 308*4096kB (UM) = 1308608kB
[  311.021310][T15620] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  311.034020][T15620] Node 1 Normal: 153*4kB (U) 45*8kB (UME) 41*16kB (UME) 111*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887676kB
[  311.052242][T15620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.062135][T15620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.071987][T15620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.099247][T15620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.115885][T15602] team0: Port device team_slave_0 added
[  311.127246][T15602] team0: Port device team_slave_1 added
[  311.138213][T15620] 44070 total pagecache pages
[  311.143004][T15620] 0 pages in swap cache
[  311.147451][T15620] Free swap  = 124996kB
[  311.151704][T15620] Total swap = 124996kB
[  311.158355][T15620] 2097051 pages RAM
[  311.162270][T15620] 0 pages HighMem/MovableOnly
[  311.167888][T15620] 425673 pages reserved
[  311.172911][T15620] 0 pages cma reserved
[  311.294513][T15651] netlink: 'syz.4.2833': attribute type 1 has an invalid length.
[  311.298562][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.316499][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.352422][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.402726][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.419796][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.454894][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.505775][T15652] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  311.516794][T15656] 8021q: adding VLAN 0 to HW filter on device bond12
[  311.521278][ T2978] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  311.660936][T15602] hsr_slave_0: entered promiscuous mode
[  311.667810][   T78] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  311.668725][T15602] hsr_slave_1: entered promiscuous mode
[  311.678508][ T5876] Bluetooth: hci2: command tx timeout
[  311.684758][T15602] debugfs: 'hsr0' already exists in 'hsr'
[  311.696407][T15602] Cannot create hsr debugfs directory
[  311.799948][T15678] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002
[  311.829598][T15678] netlink: 'syz.1.2840': attribute type 1 has an invalid length.
[  311.869113][T15678] netlink: 'syz.1.2840': attribute type 3 has an invalid length.
[  311.888814][T15678] netlink: 'syz.1.2840': attribute type 235 has an invalid length.
[  312.030127][T15684] netlink: 'syz.1.2843': attribute type 2 has an invalid length.
[  312.035823][T15602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.054148][T15602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.152457][T15690] netlink: 'syz.5.2845': attribute type 18 has an invalid length.
[  312.193384][T15696] netlink: 'syz.1.2848': attribute type 11 has an invalid length.
[  312.207892][T15696] __nla_validate_parse: 9 callbacks suppressed
[  312.207910][T15696] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.2848'.
[  312.215895][T15602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.230399][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'.
[  312.257838][T15602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.405018][T15602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.420086][T15602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.538292][T15602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  312.573225][T15602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.612069][T15714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2855'.
[  312.691631][T15722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2856'.
[  312.715799][T15722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2856'.
[  312.740628][T15723] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2856'.
[  312.768864][T15723] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2856'.
[  312.801341][T15736] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  312.921002][T15742] veth1_macvtap: left promiscuous mode
[  313.100212][T15602] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  313.134598][T15602] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  313.177213][T15602] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  313.199839][T15602] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  313.294202][T15767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2866'.
[  313.380753][T15602] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.428856][T15602] 8021q: adding VLAN 0 to HW filter on device team0
[  313.448587][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.455792][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.478758][T15773] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2867'.
[  313.487413][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.494868][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.515091][T15772] delete_channel: no stack
[  313.616644][T15779] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  313.748268][ T5876] Bluetooth: hci2: command tx timeout
[  313.828773][T15783] netlink: 'syz.2.2869': attribute type 11 has an invalid length.
[  313.843288][T15783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2869'.
[  313.952894][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.067951][T15602] veth0_vlan: entered promiscuous mode
[  314.119450][T15602] veth1_vlan: entered promiscuous mode
[  314.222516][T15602] veth0_macvtap: entered promiscuous mode
[  314.261640][T15602] veth1_macvtap: entered promiscuous mode
[  314.333819][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.387863][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.419528][   T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.456739][   T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.480590][ T2978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.505229][ T2978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.819618][  T972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.829352][  T972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.889937][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.908360][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.114345][T15826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.127845][T15826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.140467][T15826] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  315.154889][T15826] bond0 (unregistering): (slave team0): Releasing backup interface
[  315.170552][T15826] bond0 (unregistering): Released all slaves
[  315.752423][T15861] team0: Device ip6gre2 is up. Set it down before adding it as a team port
[  315.826384][ T5876] Bluetooth: hci2: command tx timeout
[  316.381985][T15879] validate_nla: 9 callbacks suppressed
[  316.382003][T15879] netlink: 'syz.5.2898': attribute type 14 has an invalid length.
[  316.425331][T15879] netlink: 'syz.5.2898': attribute type 13 has an invalid length.
[  316.530443][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.543582][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.561899][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.576460][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.588473][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.589412][ T5873] syz_tun (unregistering): left promiscuous mode
[  316.740168][T15888] netlink: 'syz.5.2901': attribute type 21 has an invalid length.
[  316.760822][T15882] hsr0 speed is unknown, defaulting to 1000
[  317.258906][T15912] netlink: 'syz.3.2905': attribute type 4 has an invalid length.
[  317.373520][T15882] chnl_net:caif_netlink_parms(): no params data found
[  317.426284][   T13] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  317.440713][   T13] ref_tracker: netdev@ffff88807edce610 has 1/1 users at
[  317.440713][   T13]      batadv_hard_if_event+0xf0f/0x1730
[  317.440713][   T13]      notifier_call_chain+0x1b3/0x3e0
[  317.440713][   T13]      register_netdevice+0x1608/0x1ae0
[  317.440713][   T13]      veth_newlink+0x5cc/0xa50
[  317.440713][   T13]      rtnl_newlink_create+0x30d/0xb00
[  317.440713][   T13]      rtnl_newlink+0x16d6/0x1c70
[  317.440713][   T13]      rtnetlink_rcv_msg+0x7cc/0xb70
[  317.440713][   T13]      netlink_rcv_skb+0x208/0x470
[  317.440713][   T13]      netlink_unicast+0x82c/0x9e0
[  317.440713][   T13]      netlink_sendmsg+0x805/0xb30
[  317.440713][   T13]      __sock_sendmsg+0x21c/0x270
[  317.440713][   T13]      __sys_sendto+0x3bd/0x520
[  317.440713][   T13]      __x64_sys_sendto+0xde/0x100
[  317.440713][   T13]      do_syscall_64+0xfa/0x3b0
[  317.440713][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.440713][   T13] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  317.647566][T15923] __nla_validate_parse: 12 callbacks suppressed
[  317.647589][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2908'.
[  317.769312][T15923] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2908'.
[  317.811790][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'.
[  317.905912][ T5876] Bluetooth: hci2: command tx timeout
Stopping sshd: stopped /usr/sbin/sshd (pid 5621)
OK
[  318.054137][T15926] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  318.706213][ T5876] Bluetooth: hci3: command tx timeout
Stopping crond: stopped /usr/sbin/crond (pid 5607)
OK
Stopping dhcpcd...
no /sbin/dhcpcd found; none killed
Stopping network: OK
Stopping iptables: modprobe: can't change directory to 'syzkaller': No such file or directory
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
FAIL
Stopping system message bus: done
killall: udevd: no process killed
Stopping klogd: start-stop-daemon: warning: killing process 5224: No such process
FAIL
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 5217)
OK
umount: devtmpfs busy - remounted read-only
[  323.169457][T15966] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro.
[  323.190694][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system poweroff
[  325.246428][T15967] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  325.276897][T15967] ACPI: PM: Preparing to enter system sleep state S5
[  325.286976][T15967] kvm: exiting hardware virtualization
[  325.292645][T15967] reboot: Power down
serialport: VM disconnected.