last executing test programs:

6m57.624488079s ago: executing program 2 (id=4110):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000080611250000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="950000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

6m57.502582243s ago: executing program 0 (id=4113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r2)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x44800)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8edf020a810ca085, 0x33}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x34}}, 0x20040800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724cf7002f8dbdf2507"], 0x14}}, 0x4008800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='target_cmd_complete\x00', r6, 0x0, 0x1000203}, 0x18)
r9 = socket(0x1a, 0x4, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x40, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r10, 0x25, 0x6, @void}, 0x10)

6m57.446185119s ago: executing program 2 (id=4114):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={<r1=>0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000000c0)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xce, "3f300103f3052c7db9bd0accef6a54f68140477f2b8f310d3c9d6137afaed46ddaf7d097671fca7eed6606bfc77804f222c14d1010a89767b9dd6293a03e19a9d60feaf32cefc0fec22ad041a5aa8e8a78a1fd2ce2729324d06319e8a3aad153fcde588ca92b8f9643bb00f20fbee9cabc0ce049ee7d4ae68e7e716f6362ae8bdeefe1efa25bcdf092a8ea8292a608a7f3cdca88fc6399040d1a5f926168d93c785e66bbf4b2c46ce1841f00e5dcd61880d886fb7cedb4f8e166336d56e6c087bf4e83d9665756f0dae594b11dab"}, &(0x7f0000000200)=0xd6) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@private, @rand_addr, <r3=>0x0}, &(0x7f00000002c0)=0xc) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'syztnl2\x00', <r5=>0x0, 0x8000, 0x0, 0x5, 0x10000, {{0x15, 0x4, 0x1, 0x34, 0x54, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x34, 0x4f, 0x3, 0x1, [{@loopback, 0x5}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xdd}, {@remote, 0x1}, {@broadcast}, {@multicast2, 0x10001}]}, @lsrr={0x83, 0xb, 0x1f, [@loopback, @loopback]}]}}}}})
sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@RTM_DELMDB={0x58, 0x55, 0x800, 0x70bd2a, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x30}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000680)) (async)
sendto$inet6(r0, &(0x7f00000006c0)="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", 0x1000, 0x840, &(0x7f00000016c0)={0xa, 0x4e24, 0x2, @empty, 0xe}, 0x1c) (async)
r7 = accept$inet(r2, &(0x7f0000001700)={0x2, 0x0, @private}, &(0x7f0000001740)=0x10)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000001780)={@broadcast, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000017c0)={<r8=>r7, 0x6, 0x5, 0xfffffffffffffffc})
r9 = accept4$x25(r8, &(0x7f0000001800), &(0x7f0000001840)=0x12, 0x80800) (async)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000001fc0)=@broute={'broute\x00', 0x20, 0x4, 0x6c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000018c0], 0x0, &(0x7f0000001880), &(0x7f00000018c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x5, 0x31, 0x8, 'erspan0\x00', 'gretap0\x00', 'hsr0\x00', 'rose0\x00', @empty, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x15e, 0x1ae, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xff, 0xff000000, 0xff], 0xa, 0xc, 0xa, 0x18, 0x4e24, 0x4e24, 0x4e23, 0x4e20}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0x1, {0xfffffffffffffff8}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00', {0x100}}}}}, {0x11, 0xb, 0x88a2, 'veth1_to_hsr\x00', 'pim6reg0\x00', 'batadv_slave_1\x00', 'gre0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x4}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x5}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x60, 0x8863, 'veth1_vlan\x00', 'ip6erspan0\x00', 'gre0\x00', 'veth1_to_hsr\x00', @broadcast, [0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x12e, 0x1ae, 0x1fe, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@rand_addr=0x64010101, [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 0x4e24, 0x5c, 0x1, 0x4e24, 0x5, 0x11}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'dvmrp1\x00', 'lo\x00', 0x8, 0x1, 0x9, 0x10000, 0x1, 0x5, {0x1}, {0x800}}}}], [@common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}, @common=@ERROR={'ERROR\x00', 0x20, {"daec054548a5b622307f313d74a6681ea360a692abe785f76a83c19400cd"}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xf, {0x5}}}}}, {0x5, 0x10, 0xfbfb, 'pim6reg\x00', 'syzkaller1\x00', 'wg0\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, [0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x136, 0x166, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x10, 0x1, 0x1, 0x0, "df0b6c3f36cdada48a2417a3ee9ee42340eb696a3970340354c1762dee27ddc9725a9646f1204d120d65267a7e825c356c06cec11fb2efd4f145a438bc0a2b6b"}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz1\x00', {0x400}}}}], @common=@STANDARD={'\x00', 0x8, {0x8000000000000002}}}]}]}, 0x740)
ioctl$SIOCX25SCAUSEDIAG(r9, 0x89ec, &(0x7f0000002040)={0x9, 0x1}) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r8)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x5c, r11, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002200)={'batadv0\x00', @broadcast})
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000002240)={r4, @multicast1, @remote}, 0xc) (async)
ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000002280)=0x7) (async)
socket$packet(0x11, 0x3, 0x300)
r13 = accept$inet(r12, &(0x7f00000022c0)={0x2, 0x0, @multicast1}, &(0x7f0000002300)=0x10)
getsockopt$inet_mtu(r13, 0x0, 0xa, &(0x7f0000002340), &(0x7f0000002380)=0x4)
sendmsg$nl_route(r8, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=@bridge_setlink={0x38, 0x13, 0x4, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x4}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044000}, 0x8005) (async)
socket$nl_route(0x10, 0x3, 0x0)

6m57.220944677s ago: executing program 2 (id=4116):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee213459a7a00"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='ext4_fc_track_inode\x00'}, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r4, &(0x7f00000002c0)={{0x6, @rose}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x83, &(0x7f0000000180)={r5, 0xf9, 0x20}, &(0x7f0000000500)=0xc)

6m57.215290134s ago: executing program 0 (id=4117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)=""/203, &(0x7f0000000140)=0xcb)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, 0x0) (async)
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', <r4=>0x0, 0x40, 0x80, 0x0, 0x1, {{0x16, 0x4, 0x2, 0x4, 0x58, 0x66, 0x4c, 0xd, 0x4, 0x0, @local, @multicast2, {[@generic={0x44, 0x9, "939dc436346dd4"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x34, 0x1, [{0x1, 0x12, "9a15dc1d370071015ea3cbf611d5bed9"}, {0x2, 0x12, "a1ec744e554cdb0367fc952824561039"}, {0x6, 0x5, "b647ba"}, {0x6, 0x5, '%>\x00'}]}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x2c, 0x26, 0x600, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x9, 0x1}, {0xd, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004010}, 0x8000)
r5 = accept4(r1, 0x0, 0x0, 0x80000)
sendto$inet(r5, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0)
accept4$tipc(r5, 0x0, 0x0, 0x800)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff})

6m57.108029748s ago: executing program 0 (id=4118):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10010, r1, 0x18b85000)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

6m56.926663968s ago: executing program 0 (id=4122):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f0000010100000001000000ac81a023020a290797a2cd282d000000000000"], 0x14)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0))
socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0xb0, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_csum={0x98, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x69, 0x6, "a21599c56bad11200721ac41fa58300e3bee5430c120278c6860f7ce1a247beb11c1e7902e795212b9d91574019ea86c45c9ffa194f28077032784aaf2b73d505938bc11680cdf33fc9cf595769faca8e13c8992c8841321a5a9c7ae2c33c7603dca0cdf74"}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x2f, 0xe3, 0x90, 0x9, 0x29, @private0, @loopback, 0x8000, 0x1, 0x4, 0x81}})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="010029bd7000fbdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="04007a8024007a2c0c0002008c1d9b2fadb475f414e40000788d33c86858690cceb5192a481c999e"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf25520000000001f8ff09000000"], 0x1c}}, 0x40054)
r11 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521c3448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x48800)
splice(r11, 0x0, r5, 0x0, 0x7ffff040, 0x1200000000000000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000640)={0x0, 0xbd, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)

6m56.867332986s ago: executing program 2 (id=4124):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x8)
r2 = socket$inet6(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={<r3=>0x0, 0x84, "fa91e7bea32faf8fb14ba66d7614b90f79f5a00d6f9d791552c7a864445bdeaa7d1319e60b64436241ca3a5da370568597aa8c27d8ff8e4c9311c1ce7476577dee760b1aac07936f9bc99c0ade8573a1528fb2ce3bf309fcabf7fcfc264b0e095391f5480c92d490f6691d0ccb5e847e36b714a60f190530ba9051714d32d91c4094653b"}, &(0x7f0000000040)=0x8c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffe1}]}, &(0x7f00000004c0)=0x10)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000500)={'macvlan1\x00', {0x2, 0x0, @multicast1}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x1, 0x6, 0x30e9, 0x0, 0x6, 0x0, 0x40, 0x800, 0x1cf, 0x10, 0x1, 0x3, 0xa78, 0x9, 0x4, 0x0, 0x9e, 0x5, 0xb, 0x3f87, 0x9, 0x3ff, 0x1, 0x2, 0x8, 0x3, 0x6, 0x1, 0x9, 0x6, 0x0, 0xe, 0x8, 0x5, 0x1, 0x4, 0x9, 0x1, 0x1000, 0x80000000, 0x8, 0x2, 0x0, 0x401, 0x4, 0x1, 0xfdc, 0x7, 0x7, 0x3, 0xd, 0x800, 0xfffff486, 0x0, 0x86e, 0x9, 0xe, 0x7, 0xfffffffb, 0x3, 0x1, 0x2, 0x101, 0x1c000, 0x3, 0x8ad8, 0x2, 0x8, 0x27ca, 0x7, 0x46, 0x8, 0x400, 0x101, 0x4, 0xfffffffb, 0x6c60, 0x8, 0x7, 0xfffffffa, 0x2, 0x2, 0x8, 0x2d45, 0xb, 0xfcf, 0x3, 0x9, 0xfffffffc, 0x9, 0xfffffffd, 0x8001, 0x7, 0x6, 0xf3, 0xfffffffe, 0x3, 0x2c2ff227, 0x2, 0x2, 0xc1ee, 0x79f6, 0x9c1, 0x0, 0x2, 0x8, 0xfffffffb, 0x0, 0x0, 0xc7a3150, 0x8, 0x1, 0xff, 0x8, 0x2, 0x2, 0x9, 0x100, 0xaeb, 0xb, 0x8, 0x5, 0x200, 0x3, 0x4, 0xffff, 0x1]}})

6m56.695509893s ago: executing program 2 (id=4126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xeb}]}}]}, 0x44}}, 0x0)

6m56.683612998s ago: executing program 0 (id=4127):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@remote, @rose, @rose, @rose, @netrom, @remote, @default, @default]}, &(0x7f00000000c0)=0x48, 0x0)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x7, 0x4)

6m56.343516489s ago: executing program 2 (id=4129):
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xff64, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xfffffff7, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

6m55.606516559s ago: executing program 32 (id=4129):
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xff64, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xfffffff7, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

6m55.573368653s ago: executing program 0 (id=4133):
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0)
syz_emit_ethernet(0xad, &(0x7f0000000000)={@local, @random, @void, {@mpls_mc={0x8848, {[{0x8014, 0x0, 0x1}, {0x3a}, {0x853b}, {0x9, 0x0, 0x1}, {0x9}, {0x8001, 0x0, 0x1}, {0x330a}], @ipv4=@generic={{0xc, 0x4, 0x0, 0x30, 0x83, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0xc0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @noop, @noop, @timestamp={0x44, 0x8, 0x48, 0x0, 0x4, [0x8]}, @lsrr={0x83, 0x3, 0x84}]}}, "2fb581dd736b7723f1d5529433de3be4d631bbe8320f7e84e346d46d06d9383024c170233661dfa2a4132207b972accd2f5059242899960e93893d447a6b9a0c713591921e9660b18ec007e0e97926824e59ba"}}}}}, 0x0) (async)
syz_emit_ethernet(0xad, &(0x7f0000000000)={@local, @random, @void, {@mpls_mc={0x8848, {[{0x8014, 0x0, 0x1}, {0x3a}, {0x853b}, {0x9, 0x0, 0x1}, {0x9}, {0x8001, 0x0, 0x1}, {0x330a}], @ipv4=@generic={{0xc, 0x4, 0x0, 0x30, 0x83, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0xc0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @noop, @noop, @timestamp={0x44, 0x8, 0x48, 0x0, 0x4, [0x8]}, @lsrr={0x83, 0x3, 0x84}]}}, "2fb581dd736b7723f1d5529433de3be4d631bbe8320f7e84e346d46d06d9383024c170233661dfa2a4132207b972accd2f5059242899960e93893d447a6b9a0c713591921e9660b18ec007e0e97926824e59ba"}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r15 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r16 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r17, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
getsockopt$ax25_int(r7, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) (async)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x38}}, 0x4800)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)

6m54.834557482s ago: executing program 33 (id=4133):
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0)
syz_emit_ethernet(0xad, &(0x7f0000000000)={@local, @random, @void, {@mpls_mc={0x8848, {[{0x8014, 0x0, 0x1}, {0x3a}, {0x853b}, {0x9, 0x0, 0x1}, {0x9}, {0x8001, 0x0, 0x1}, {0x330a}], @ipv4=@generic={{0xc, 0x4, 0x0, 0x30, 0x83, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0xc0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @noop, @noop, @timestamp={0x44, 0x8, 0x48, 0x0, 0x4, [0x8]}, @lsrr={0x83, 0x3, 0x84}]}}, "2fb581dd736b7723f1d5529433de3be4d631bbe8320f7e84e346d46d06d9383024c170233661dfa2a4132207b972accd2f5059242899960e93893d447a6b9a0c713591921e9660b18ec007e0e97926824e59ba"}}}}}, 0x0) (async)
syz_emit_ethernet(0xad, &(0x7f0000000000)={@local, @random, @void, {@mpls_mc={0x8848, {[{0x8014, 0x0, 0x1}, {0x3a}, {0x853b}, {0x9, 0x0, 0x1}, {0x9}, {0x8001, 0x0, 0x1}, {0x330a}], @ipv4=@generic={{0xc, 0x4, 0x0, 0x30, 0x83, 0x66, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0xc0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @noop, @noop, @timestamp={0x44, 0x8, 0x48, 0x0, 0x4, [0x8]}, @lsrr={0x83, 0x3, 0x84}]}}, "2fb581dd736b7723f1d5529433de3be4d631bbe8320f7e84e346d46d06d9383024c170233661dfa2a4132207b972accd2f5059242899960e93893d447a6b9a0c713591921e9660b18ec007e0e97926824e59ba"}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r15 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r16 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r17, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
getsockopt$ax25_int(r7, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) (async)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x38}}, 0x4800)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)

7.331623489s ago: executing program 5 (id=8255):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0xfc}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}}, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfc}, &(0x7f00000000c0)=0x8) (async)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}}, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) (async)

7.143701352s ago: executing program 5 (id=8260):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
write$nci(r1, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x1, @v={0xff, 0x1, 0x6, 0x3, {0x7, 0x4, "8d502f3fe25994a9"}, 0x2}}, 0x12)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f00000002c0)=""/164, 0xa4}], 0x2)
connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14)

5.282843699s ago: executing program 5 (id=8283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r1=>0x0})
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c000180080007000000000008001800000000000800030000000000080009000300000008000c0000000000080012000000000008001f00000000006c000a8014000700fc"], 0x134}}, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={<r3=>0x0, 0x3f14d19d, 0x7})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x12, &(0x7f000000c280)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x94}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x8, @none, 0xda, 0x2}, 0xe)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000a80)={<r6=>0x0, 0x3, 0xfffffffffffffffd, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000e80)={<r7=>0x0, 0x15, 0xf, 0x1})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001280)={0x1, 0x5, {0x72, @usage=0x5, r3, 0x7, 0x0, 0x1, 0x3, 0x78, 0x400, @usage=0x6, 0x6, 0xa, [0x2, 0x5, 0x7ff, 0xcc23, 0x3, 0xfffffffffffffff8]}, {0x7, @struct={0x4, 0x4000080}, r6, 0x1, 0x2, 0x2, 0x0, 0xe764, 0x82, @usage=0x1, 0x4, 0x8, [0x7fffffffffffffff, 0x80002, 0x2, 0x5, 0x1]}, {0xffffffff, @usage=0x6, r7, 0x8, 0x8, 0x0, 0x7fff, 0x753, 0x20, @struct={0x3, 0x9}, 0x600, 0x10000, [0xfffffffffffffc01, 0x7, 0x1, 0x1, 0x7fffffff, 0xf49]}, {0x6, 0xfffff80000000000, 0x6}})
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x4}, 0x8)
r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r9}, 0x8)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000024a, &(0x7f0000000140)=ANY=[@ANYRES32=r10], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x9}, 0x2)

1.600675375s ago: executing program 1 (id=8320):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x7, 0xbff, 0x4609})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5e8e, 0x4)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
write$6lowpan_control(r1, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async)
write$6lowpan_control(r1, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

1.597985229s ago: executing program 4 (id=8321):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={<r0=>0xffffffffffffffff, 0xb2, 0x100000001, 0x40})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000170a01020000000000080000020000024ca70ff00284ef39b15a0aeb0500eda33325f27c9b270d57aa4a1193302e4600"/65], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000170a01020000000000080000020000024ca70ff00284ef39b15a0aeb0500eda33325f27c9b270d57aa4a1193302e4600"/65], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8094)

1.593371115s ago: executing program 4 (id=8324):
r0 = socket(0x2, 0x80805, 0x8001)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000), 0x6)
ioctl$sock_bt_hci(r2, 0x400448e6, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r3, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x1, {0x1, 0x1, 0x1}, 0x9796ef04c0904618}, 0x18)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0xa, [@enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0xc, 0x4}, {0x3, 0x2}, {0xe, 0x5}]}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x81}, {0x6, 0x2}, {0x7, 0x7ff}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x5, 0x4}, @datasec={0xc, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x1, 0x9}, {0x3, 0x480eb8e0, 0x2}, {0x1, 0x9c, 0xab}, {0x5, 0x9, 0x2}, {0x4, 0x3, 0xfe2}], "8f"}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x20}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x1000}, {0x5, 0x8}]}]}, {0x0, [0x0, 0x61, 0x30, 0x30, 0x0, 0x30, 0xe, 0x2e]}}, &(0x7f0000000500)=""/4096, 0xf2, 0x1000, 0x1, 0x8, 0x10000, @value=r7}, 0x28)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0x3ff, 0x7, 0x10000, 0x2a001, r4, 0x0, '\x00', 0x0, r8, 0x3, 0x0, 0x4, 0xb}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9}, 0x20)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000140)="9ee24510de2ef6e2d079ca7627a26dbfe6d15fb41383ec448fb73c1bfc08d340aae9c91019b77d333f55495127942ccff4b6336a76c618548cd40c47215d14b2ddb2ca1305d8fb12e6c90456f1f1d253ceec6dc168961422fe689d3bdd8342d1c023544f78fbdcc2f582be9a326b96612fca172811ddc0628d5730087b99ed50b45e92d0dcec00"/149, &(0x7f0000000080)=""/32, &(0x7f0000000380)="a24199723c6c44cd1b51849389c4158ee9eea19e4d994887d3c22f3ca4226f8222b259818be2fe0ba9fa8a231b7b1ee8a801748a845dfbdaf5664cb91ac78e20f5ea8d216e6cd1393d202d80af35db9ff3a4ea7706bbedda000a63f0a5eb65bb5f9232e95bf143eec16bdfdcd5f3d17de4e203525f5a69546c3fed913e19fe992ea603ebea0127421e33a5766413b22ad88e4e7639af8afc874e33cb2890b30b4d2588e3cfcb970dd0a8e76722625982099138aef62bd6c2a48117d03731aae38da7b5bfd3b3410b6657f82fdd0d10873dc8acb8826a487c35465d6777655e20f1f95a28e464cffd6611ca335d3e92d8e653957e", &(0x7f0000000200)="5fd7b0943ecc4e13b2d79c076f721c20fec2f61d7d931f15a4b1d92dc7ffcd", 0x3, 0xffffffffffffffff, 0x4}, 0x38)

1.591660475s ago: executing program 1 (id=8326):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @local, <r1=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x10, 0x70bd2d, 0x25dfdbfe, {0xa, 0x3f, 0x28, 0x0, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000)

1.591471618s ago: executing program 5 (id=8327):
unshare(0x22020400)
r0 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xe}, 0x94)

1.515810188s ago: executing program 1 (id=8329):
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000400050000000000000008ffac67fb17b2a7d02570cd46c6ed3c4f136569e731a684f0c37dc8658ec22304b7522e86651093ec936dd2849335b40bd2f453529b8d5dc197110847f440e96c249c428448de46ced21f7eae1ea41367557f41c50776fbd466341cd7fd74bd230c79f68d1b4e490b8bb758fc250807be0daafdebe7ac3868a65c35b91f62cf1af1d7a658276690b9c953fed76ae51fa8121622e92699310fcfd5f9a8e36380545e0d7611fadea4a2432ae45a04d65f5f7bf1686dc5872d2ede63cd7199a512419f86405354c8007a21443e383844565b17ed95b5", @ANYBLOB="ba44e37c4746c1890ae60f50ca0ca4e414f7b289c55092cee95194db0c3053d10b31c2592b254291e0567b3439b22bca23a520389701544251e5849259c6be90153ebfe71d0fed6f0b3711", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004fa30ba234000000000200"/28], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="210000000100"], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x4f, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)
r9 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf259429000008000300", @ANYRES32=r10, @ANYBLOB="0a001a0008021100000000000a001a0008021100"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20044000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x8070bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804)

1.441629089s ago: executing program 3 (id=8331):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00')
ioctl$NS_GET_PARENT(r2, 0x8004b709, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000040))
sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4880) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001400090528bd700000000400021f0d00", @ANYRES32=r3, @ANYBLOB="080001fa5c26b500080001007f00000109000201ac1414aa0800d3dc5efc2acd90f5f82750833cf80fb34b32acd3e5dddc1eced601d33c8c"], 0x38}}, 0x0)

1.43323994s ago: executing program 5 (id=8332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x33}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x5d9d199f60c0aa59}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={<r3=>0x0, 0x400, 0x2, 0x4d19, 0x1, 0x7ff, 0x40, 0x2, {0x0, @in={{0x2, 0x4e22, @local}}, 0x7, 0xae, 0x8001, 0x5, 0x6e1}}, &(0x7f00000003c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x8}, &(0x7f00000004c0)=0x90)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x26080208}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x29, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x2)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @bcast}, [@rose, @netrom, @rose, @netrom, @remote, @remote, @bcast]}, &(0x7f0000000700)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000740)=@netrom={'nr', 0x0}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd3, 0x79}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x804d}, 0x4000800)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000008c0)={<r8=>r3, 0x8, 0x2}, &(0x7f0000000900)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000940)={0x0, 0xfff8, 0x2, 0x0, 0x140, 0x8, 0x0, 0x6, r8}, 0x20)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r9, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4319}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001f80)={'syztnl2\x00', &(0x7f0000001e80)={'syztnl2\x00', <r10=>0x0, 0x20, 0x40, 0x1, 0xa58, {{0x29, 0x4, 0x0, 0x6, 0xa4, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@timestamp={0x44, 0x1c, 0x3b, 0x0, 0x8, [0x40, 0x2, 0x5, 0x7f, 0x1, 0x0]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xcd, [@empty, @private=0xa010100, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @remote, @empty]}, @cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "62d492312d4e514c0fa100e3d55e3949"}]}, @timestamp={0x44, 0x10, 0xbb, 0x0, 0x6, [0x0, 0xa33, 0x4]}, @noop, @ssrr={0x89, 0xf, 0x29, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @end, @generic={0x7, 0xe, "79b64d9d32c5ee7054ba6564"}]}}}}})
sendmsg$inet(r6, &(0x7f00000021c0)={&(0x7f0000000ac0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000b00)="af3527b28c742609516d55011f99cfb7bf212be3089d5f80759e3ce149f4737d81cc94d3772b09134b95d6dc22c653811c31c5667450ec5623241291b6dade2e6f75cb57d29256caf95d3c73b608444b12a072746119718e5e36366c80cee1b225a374d3d3af7a6736f3b85b67b3ce1b58e929f42ee31bb61ddc0fe5c0ab785f2afcbf28fa96350f2b4f889859", 0x8d}, {&(0x7f0000000bc0)="123faaa3cff3b479ae4eca5c31112a73d0bedcd95a90fd329a12115b2b7f2ea450522f30225e970e605a6ecad92bddc8a70fce1c8cee9935a62646918ed5f85176cb214ae00463c6fede7a84df4036160c0880996156ca4d7ba85f3f483441b1582a64b76491c68c589adbdbc2d605070e204255b85fde8fbcbcf330ccb61df591e891a5890f8cdf002174ee85a3126bc7abf3fe9f3381ef4a738e3eebb4434ca1c7292da0a7d3ec7baf8e30c2562ddcccc59d4740306f2cc937389dbe068244e3ad370948ca1fd77067c5ce", 0xcc}, {&(0x7f0000000cc0)="3c240720cd3e8d4b93da35c14ab5fdf053e9ce60e1f181bde1fe20f26cb9a27190c68c0d7dc0f0f512346bf467f2d210b0695cade67be8a855d693a8783b623f4ddbd636d1d7174ddf2453d5ae41434b1c233e287cfd9c262cf027fa70b981449d93f6dd35cc2f5a18031f2aa70944bfa58547ba3344385fd3a7347f3a7202c437f6a2922e250b3ce5dd0387d285df5da59c4980f058a1c5b1e4a45bc4e8ddaad2c108189fdcc23cd1fb06d0cceb48683413a384504bd6fecfdd3be0a404defa8c0511edac74a606dc8fe0e6bdf151cff13c9f98d1f19547de3c66fe5b81c1a2", 0xe0}, {&(0x7f0000000dc0)="8eb233f65facfa3b2128147702ab4c917c459d0e3167826c36ae0c3f94317a0b5fc47e6fd37044c668e5672ebfa05e50eb296a9e0ec13117170a3e287b", 0x3d}, {&(0x7f0000000e00)="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", 0x1000}], 0x5, &(0x7f0000001fc0)=[@ip_retopts={{0x50, 0x0, 0x7, {[@rr={0x7, 0xf, 0x97, [@remote, @broadcast, @empty]}, @end, @ssrr={0x89, 0x7, 0xb, [@private=0xa010102]}, @rr={0x7, 0x13, 0x71, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x13, 0x35, [@dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @loopback}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0xe, [{@remote, 0x7}, {@remote, 0x2}]}, @ssrr={0x89, 0xb, 0x9b, [@broadcast, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x9, 0x1, 0xb, [{@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xee}, {@broadcast, 0x35}, {@loopback}]}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@generic={0x83, 0x2}, @cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "f38374f2c829c1e87950"}]}, @cipso={0x86, 0x4b, 0x1, [{0x7, 0xa, "14fecc861f0ff819"}, {0x6, 0x9, "a9e9e070cd0eb4"}, {0x0, 0xe, "c1542778c9cb16fbbf63698f"}, {0x0, 0xe, "64004d3c43ad36c12e8bf82f"}, {0x1, 0x4, "87ba"}, {0x5, 0x9, "3ef0bf7f9f7ac7"}, {0x0, 0x9, "881385c57f20ad"}]}, @lsrr={0x83, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x46, 0x3, 0x5, [{@multicast2, 0x4}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28e}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x8}, {@remote, 0x6}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@generic={0x83, 0x11, "03c3ed539d73affcaef659a4a8a229"}, @timestamp={0x44, 0x1c, 0xcc, 0x0, 0x2, [0x210, 0x9779, 0x3, 0x1, 0x400, 0x8]}, @noop, @generic={0x44, 0x7, "a890b0cb14"}, @timestamp={0x44, 0x8, 0x58, 0x0, 0xf, [0x400]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}], 0x200}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002200), &(0x7f0000002240)=0x30)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000002280)={0xa, 0x0, 0x6, @mcast2, 0xfd}, 0x20)
socket$nl_audit(0x10, 0x3, 0x9)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002300), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, r11, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_LINK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000026c0)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@fwd={0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x7, 0x2}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x4}}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x5f, 0x33]}}, &(0x7f00000025c0)=""/232, 0x7c, 0xe8, 0x1, 0x7fffffff, 0x10000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002780)={0x800, <r13=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002800)=@bpf_lsm={0x1d, 0x1, &(0x7f0000002400)=@raw=[@alu={0x4, 0x1, 0x2, 0x4, 0x1, 0x0, 0x1}], &(0x7f0000002440)='GPL\x00', 0x6, 0xba, &(0x7f0000002480)=""/186, 0x40f00, 0x4, '\x00', r10, 0x1b, r12, 0x8, &(0x7f0000002700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002740)={0x3, 0xc, 0x7ff, 0x7ff}, 0x10, r13, 0x0, 0x2, 0x0, &(0x7f00000027c0)=[{0x4, 0x5, 0x7, 0x7}, {0x3, 0x1, 0x8, 0x3}], 0x10, 0x670}, 0x94)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r6)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x40, r14, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x804)

1.355451138s ago: executing program 3 (id=8333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2b, 0x80801, 0x1) (async)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r1, 0x11e, 0x17, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0)

1.283298975s ago: executing program 3 (id=8334):
r0 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x2e, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x66, 0x0, 0x7, 0x1, 0x0, @remote, @private=0xa010100, {[@generic={0x82, 0x2}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x4}}}}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000a80))
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) (async)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x47}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x47}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1.136256115s ago: executing program 4 (id=8335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r1}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x7, 0x118, 0x1, {0x0, 0x2710}, {}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "7aa7763f48ef0d2d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4008050)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

1.125393133s ago: executing program 3 (id=8336):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402038006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.045719071s ago: executing program 3 (id=8337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000c000000ba0301000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ac"], 0x48)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='inet_sock_set_state\x00', r5, 0x0, 0x8}, 0x18)
accept$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000680)=0x10)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48)
sendfile(r4, r3, 0x0, 0xe25)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="650a00000000000061118000000000001800000000000000000025565bb3f15b3dd84041015865420000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

867.536546ms ago: executing program 5 (id=8338):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e400000000000000080c000780080006400000000612000300686173683a6e65742c706f72740000000900020073797a3100000000050005000200000005000400000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x11, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff7, 0x3d, 0xe}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})

866.660607ms ago: executing program 6 (id=8339):
socket$netlink(0x10, 0x3, 0x14)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x400, 0x8, 0x3, 0x5000c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0xbfd3, 0x6, 0x1090, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3eb, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x268e1059}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3ff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94)

865.109969ms ago: executing program 1 (id=8340):
r0 = socket(0x9, 0xa, 0x2)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)

859.494627ms ago: executing program 4 (id=8341):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c00001800378013000300717452283414d6bba919736d34290000"], 0x2c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0)
r7 = socket$inet(0x2, 0xa, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "0c029d9a32426fae0f3ed75e15c168f9d20b54bc3788416745fa1bd74f2c7f12c8c318b261369d5e93d44db80ff5d7a440e0e29bdd79ec720b8f4a714c194bda237534057b53d42f12b1e1652f5c6fc2f3e6b4c45c227ec5817a93601590b2015e566e9543dfd0240167e75ddc666807434e15141c633b86b32e122e041f4f9cfc9534b523cc36c965b5c51e12c021d07a3fd19e84897a132ea0c8b8e45495c5815a1fd3914b8072fca1782fe48bdeb0654154a3d7706836a79965a9a40688f0ee105f0e52be8a02322e3e017e6a06ec0fabb51fd2c4d0ace8061cef929a3bdb09d2edabf42a4c726a2a4bbf3945fde351dda943f33702c2272c05e29caed9b8"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r10, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r12 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r12, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r13, &(0x7f00000001c0)={0x2001})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r12, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r11, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x40}}, 0x20000000)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r11, 0x700, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xef57}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1)

760.499697ms ago: executing program 6 (id=8342):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close(r0)

675.733783ms ago: executing program 1 (id=8343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2, 0x13, 0x5, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x20000080)
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)

638.178879ms ago: executing program 6 (id=8344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0)

5.125683ms ago: executing program 4 (id=8345):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x3ff, 0x1, 0xffffffffffffff7f})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x74, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, @in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x10001000, @loopback, 0xbd}, @in6={0xa, 0x4e22, 0x0, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={<r2=>r1, 0xfffffff7}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0, 0x0]}, &(0x7f0000000200)=0x2c)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={<r5=>r4, 0x6fba, 0x80000001, 0x7}, &(0x7f0000000280)=0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x1412, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x104}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r3, 0xf6b, 0x8, 0x9, 0x3, 0x1}, 0x14)
r6 = socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000440)={r5, 0xfa7, 0xc0}, 0x8)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'ip_vti0\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@remote, r7}, 0x14)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000780)={<r10=>0x0, "f654a29d5248b0a3f964bb8b2702ba59"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000001780)={{r6}, r9, 0x2, @unused=[0x1, 0x4, 0x1, 0x7], @devid=r10})
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002780)={r0, r7, 0x25, 0x1d, @val=@tcx={@void, @value=r0}}, 0x1c)
getsockopt(r6, 0xd, 0x4, &(0x7f00000027c0)=""/212, &(0x7f00000028c0)=0xd4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000002900)=0x8, 0x4)
r12 = accept4(r6, &(0x7f0000002940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f00000029c0)=0x80, 0x0)
tee(r0, r12, 0x7, 0x3)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000002a00)={r2, 0xb0, "fcb173bbceda5b6c7ca2c2f09ebe697e80dad9d67f7ba78340aab954bb2e886428c6fb07c1cfd86c46d2a80e90e2c7ec885dcde1fb41435a3fb0b34706470a5863226ef613d6783cb92ea217bb398cb799ec709701b6ef2a00f657292900afba3e80df4b64a1b928860f13f3c72f10d9ac230aee07b8b7e1166bcef24a2b254bad853bb650a1a7d6c50a01817dcfcebae903045aaed1251709f5c97a8dd9c5b000744d8861c5c2966cb2b45135e8681c"}, &(0x7f0000002ac0)=0xb8)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002b40), r0)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r13, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x2400c040)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000002c40)={<r14=>r0, 0x7, 0x5e48, 0x1000})
ioctl$SIOCX25CALLACCPTAPPRV(r14, 0x89e8)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f0000002c80)={0x5, 0xa5e, 0x2})
setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000002d00)={0x5, &(0x7f0000002cc0)=[{0xfd19, 0x9, 0x25, 0x48d5}, {0x7b84, 0x9, 0x0, 0x52}, {0xfffa, 0x1, 0x80, 0x7}, {0x2, 0x38, 0x0, 0xfffff800}, {0x400, 0xd, 0xf9, 0x8}]}, 0x10)
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000002d40))

4.424055ms ago: executing program 1 (id=8346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0)

4.070036ms ago: executing program 6 (id=8347):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040011}, 0x812)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @multicast1, r2}, 0xc) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @multicast1, r2}, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0xffffffff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.601536ms ago: executing program 4 (id=8348):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
ioctl$TUNSETFILTEREBPF(r1, 0x8008b705, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000140000001c030000000000706970000000000c06008008001449c8a9"], 0x3c}}, 0x20000000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000007f140000006000000003088700fe88a43de1a404000000000000007d01ff020000000000000000000000000001"], 0xfdef)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @random}, 0x0, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010f000000090004040000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400b0}, 0x4009090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000200000600180000000000e5f1000000000000"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90)

2.20195ms ago: executing program 6 (id=8349):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc)
listen(r0, 0x0) (async)
ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x9, 0x8}, 0xc) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1.629559ms ago: executing program 6 (id=8350):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0x9}, {0x0, 0xffe0}, {0x4, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0xac6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', 0x2})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c250000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072009f"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 3 (id=8351):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x110, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0xfc, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xc8, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x110}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x26, 0xa, 0x5)

kernel console output (not intermixed with test programs):


[  717.267127][T28613] __nla_validate_parse: 8 callbacks suppressed
[  717.267150][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6251'.
[  717.282947][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6251'.
[  717.330487][T28493] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.351487][T28493] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.375621][T28493] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.516335][T28493] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.532030][T28493] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.546757][T28493] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  717.637696][T28626] gre1: entered promiscuous mode
[  717.642858][T28626] gre1: entered allmulticast mode
[  717.716837][T28630] netlink: 'syz.1.6254': attribute type 4 has an invalid length.
[  717.843480][T28493] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  717.864716][T28493] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.874541][T28493] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  718.086402][ T9734] batman_adv: batadv1: IGMP Querier appeared
[  718.126887][T28642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6258'.
[  718.175151][T28645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6258'.
[  718.375591][T28493] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  718.424694][T28493] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  718.562466][T28493] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  718.692304][T28493] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  718.728255][ T5148] Bluetooth: hci0: command tx timeout
[  719.121693][T28672] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001
[  719.268736][T28493] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.342531][T28493] 8021q: adding VLAN 0 to HW filter on device team0
[  719.390675][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.397959][ T9724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.457879][ T9724] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.465126][ T9724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.384128][T28493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.576787][T28493] veth0_vlan: entered promiscuous mode
[  720.613474][T28493] veth1_vlan: entered promiscuous mode
[  720.642360][T28729] Bluetooth: MGMT ver 1.23
[  720.722762][T28493] veth0_macvtap: entered promiscuous mode
[  720.748331][T28736] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20002
[  720.759032][T28493] veth1_macvtap: entered promiscuous mode
[  720.818729][ T5148] Bluetooth: hci0: command tx timeout
[  720.834113][T28743] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6281'.
[  720.846915][T28493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  720.875085][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6280'.
[  720.903353][T28493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  720.928865][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  720.940146][T28745] netlink: 'syz.6.6280': attribute type 1 has an invalid length.
[  720.948600][T28745] netlink: 'syz.6.6280': attribute type 2 has an invalid length.
[  720.974753][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  720.983728][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.006539][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  721.243273][T28761] nbd: must specify an index to disconnect
[  721.257902][T28764] syzkaller1: entered promiscuous mode
[  721.263589][T28764] syzkaller1: entered allmulticast mode
[  721.272827][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.288315][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.302403][T28764] syzkaller1: left promiscuous mode
[  721.308669][T28764] syzkaller1: left allmulticast mode
[  721.387939][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.399341][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.497492][T28771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6290'.
[  721.518041][T28769] netlink: 'syz.6.6289': attribute type 10 has an invalid length.
[  721.543019][T28769] team0: Port device dummy0 added
[  721.856612][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'.
[  721.876274][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'.
[  721.915724][T28788] netlink: 'syz.6.6294': attribute type 1 has an invalid length.
[  721.923536][T28788] netlink: 'syz.6.6294': attribute type 2 has an invalid length.
[  722.025827][T28791] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6295'.
[  722.115397][T28800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  722.123763][T28797] syzkaller0: entered promiscuous mode
[  722.132457][T28797] syzkaller0: entered allmulticast mode
[  722.141067][T28791] netlink: 'syz.3.6295': attribute type 8 has an invalid length.
[  722.147340][T28805] IPVS: length: 94 != 8
[  722.204315][T28800] tipc: Resetting bearer <eth:syzkaller0>
[  722.229267][T28800] tipc: Disabling bearer <eth:syzkaller0>
[  722.514092][T28823] netlink: 'syz.6.6305': attribute type 21 has an invalid length.
[  722.520460][T28824] netlink: 'syz.4.6304': attribute type 11 has an invalid length.
[  722.528188][T28823] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6305'.
[  722.541752][T28823] netlink: 'syz.6.6305': attribute type 4 has an invalid length.
[  722.562420][T28823] netlink: 'syz.6.6305': attribute type 5 has an invalid length.
[  722.563294][T28824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6304'.
[  722.595908][T28823] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6305'.
[  722.597187][T28828] netlink: 'syz.6.6305': attribute type 21 has an invalid length.
[  722.641128][T28828] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6305'.
[  722.655220][T28828] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6305'.
[  722.891346][ T5148] Bluetooth: hci0: command tx timeout
[  723.013720][T28850] bridge: RTM_NEWNEIGH with invalid state 0x8
[  723.112707][T28855] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6314'.
[  723.169311][T28858] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6315'.
[  723.219702][T28862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  723.350650][T28868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6319'.
[  723.443188][T28872] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6321'.
[  723.482662][T28877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6319'.
[  723.716429][ T5148] block nbd1: Receive control failed (result -32)
[  724.170512][T28908] veth0_to_bridge: left allmulticast mode
[  724.176888][T28908] veth0_to_bridge: left promiscuous mode
[  724.183027][T28908] bridge0: port 4(veth0_to_bridge) entered disabled state
[  724.243014][T28908] bridge_slave_0: left allmulticast mode
[  724.265137][T28908] bridge_slave_0: left promiscuous mode
[  724.271053][T28908] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.330183][T28908] bridge_slave_1: left allmulticast mode
[  724.338335][T28908] bridge_slave_1: left promiscuous mode
[  724.348064][T28908] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.365736][T28908] bond0: (slave bond_slave_0): Releasing backup interface
[  724.381807][T28908] bond0: (slave bond_slave_1): Releasing backup interface
[  724.400018][T28908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  724.936745][T28944] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  726.388145][T29009] syzkaller0: entered promiscuous mode
[  726.393696][T29009] syzkaller0: entered allmulticast mode
[  726.419821][T29009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  726.431022][T29009] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  726.439294][T29009] gretap1: entered promiscuous mode
[  726.444563][T29009] gretap1: entered allmulticast mode
[  726.882947][T29025] netem: invalid attributes len -24
[  726.889004][T29025] netem: change failed
[  727.179321][T29037] validate_nla: 5 callbacks suppressed
[  727.179343][T29037] netlink: 'syz.4.6376': attribute type 4 has an invalid length.
[  727.478046][T29064] netlink: 'syz.5.6383': attribute type 5 has an invalid length.
[  727.750306][T29080] veth1_to_hsr: default FDB implementation only supports local addresses
[  727.926214][T29091] bridge2: entered promiscuous mode
[  727.932506][T29091] bridge2: entered allmulticast mode
[  727.955990][T29095] netlink: 'syz.4.6392': attribute type 18 has an invalid length.
[  728.030168][ T1086] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  728.032692][T29091] __nla_validate_parse: 8 callbacks suppressed
[  728.032717][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6391'.
[  728.064991][ T1086] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  728.138652][ T1086] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  728.160059][ T1086] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  728.680350][T29125] tipc: Started in network mode
[  728.688047][T29125] tipc: Node identity 8a5fd5cf7d4f, cluster identity 4711
[  728.697021][T29125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  728.710088][T29125] syzkaller0: entered promiscuous mode
[  728.716824][T29125] syzkaller0: entered allmulticast mode
[  728.736202][T29125] tipc: Resetting bearer <eth:syzkaller0>
[  728.757165][T29124] tipc: Resetting bearer <eth:syzkaller0>
[  728.796520][T29124] tipc: Disabling bearer <eth:syzkaller0>
[  729.068583][T29139] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6407'.
[  729.307986][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6414'.
[  729.325729][T29157] tipc: Started in network mode
[  729.332091][T29157] tipc: Node identity 1a35fb592bc3, cluster identity 4711
[  729.340120][T29157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  729.363315][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6416'.
[  729.406579][T29157] syzkaller0: entered promiscuous mode
[  729.413449][T29157] syzkaller0: entered allmulticast mode
[  729.452986][T29157] tipc: Resetting bearer <eth:syzkaller0>
[  729.471458][T29156] tipc: Resetting bearer <eth:syzkaller0>
[  729.499419][T29156] tipc: Disabling bearer <eth:syzkaller0>
[  729.521977][T29164] syzkaller1: entered promiscuous mode
[  729.528273][T29164] syzkaller1: entered allmulticast mode
[  729.859090][T29183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6423'.
[  730.375168][T29214] x_tables: ip6_tables: mh match: only valid for protocol 135
[  730.465331][T29217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6435'.
[  730.745148][T29231] team0: Port device dummy0 removed
[  730.951987][T29244] xfrm1: entered allmulticast mode
[  731.156602][T29257] netlink: 'syz.5.6450': attribute type 8 has an invalid length.
[  731.256685][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'.
[  731.280099][T29261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6453'.
[  731.379434][T29273] bond2: option mode: unable to set because the bond device has slaves
[  731.660022][T29289] netlink: 'syz.6.6459': attribute type 29 has an invalid length.
[  731.722702][T29294] netlink: 'syz.6.6459': attribute type 29 has an invalid length.
[  731.733538][T29294] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6459'.
[  731.754076][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6461'.
[  732.056244][T29310] blkio.reset_stats is deprecated
[  732.127321][T29304] bridge0: port 3(ipvlan2) entered blocking state
[  732.133957][T29304] bridge0: port 3(ipvlan2) entered disabled state
[  732.160163][T29304] ipvlan2: entered allmulticast mode
[  732.170027][T29304] bridge0: entered allmulticast mode
[  732.191444][T29312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.196086][T29304] ipvlan2: left allmulticast mode
[  732.220531][T29304] bridge0: left allmulticast mode
[  732.290724][T29319] !€ÿ: renamed from bond_slave_0 (while UP)
[  732.484599][T29328] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  732.878242][T29352] netlink: 'syz.6.6479': attribute type 26 has an invalid length.
[  732.937119][T29359] bond11: option packets_per_slave: invalid value (18446744073709551615)
[  732.948285][T29359] bond11: option packets_per_slave: allowed values 0 - 65535
[  732.963351][T29359] bond11 (unregistering): Released all slaves
[  733.150600][T29371] __nla_validate_parse: 28 callbacks suppressed
[  733.150621][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6484'.
[  733.174221][T29374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6485'.
[  733.227261][T29374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6485'.
[  735.525470][T29389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6486'.
[  735.539862][T29390] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  735.717896][T29397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  735.766461][T29397] syzkaller0: entered promiscuous mode
[  735.795677][T29397] syzkaller0: entered allmulticast mode
[  735.991776][T29397] tipc: Resetting bearer <eth:syzkaller0>
[  736.019335][T29396] tipc: Resetting bearer <eth:syzkaller0>
[  736.145726][T29396] tipc: Disabling bearer <eth:syzkaller0>
[  736.189749][T29422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  736.343536][T29422] tipc: Disabling bearer <eth:syzkaller0>
[  736.680532][T29457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6500'.
[  738.179428][T29512] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6517'.
[  738.233262][T29511] nft_compat: unsupported protocol 0
[  738.239455][T29511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6516'.
[  738.256903][T29511] netlink: 'syz.6.6516': attribute type 7 has an invalid length.
[  738.265173][T29511] netlink: 'syz.6.6516': attribute type 8 has an invalid length.
[  738.273542][T29511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6516'.
[  738.373674][T29522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6519'.
[  738.390179][T29519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6519'.
[  738.457017][T29527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6521'.
[  738.473591][T29527] netlink: 'syz.4.6521': attribute type 29 has an invalid length.
[  738.503006][T29527] netlink: 'syz.4.6521': attribute type 29 has an invalid length.
[  738.508875][T29529] netlink: 'syz.3.6523': attribute type 1 has an invalid length.
[  738.561154][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6522'.
[  738.632108][T29531] veth13: entered allmulticast mode
[  738.722905][T29527] netlink: 'syz.4.6521': attribute type 29 has an invalid length.
[  738.733230][T29527] netlink: 'syz.4.6521': attribute type 29 has an invalid length.
[  738.842484][T29542] bridge0: port 3(batadv0) entered blocking state
[  738.892416][T29542] bridge0: port 3(batadv0) entered disabled state
[  738.915612][T29542] batadv0: entered allmulticast mode
[  738.927989][T29542] batadv0: entered promiscuous mode
[  738.971957][T29554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'.
[  739.074096][T29562] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6531'.
[  739.330648][T29579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  739.349083][ T9717] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  739.359088][ T9717] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  739.383844][T29579] syzkaller0: entered promiscuous mode
[  739.397620][T29579] syzkaller0: entered allmulticast mode
[  739.434982][T29579] tipc: Resetting bearer <eth:syzkaller0>
[  739.445291][T29577] tipc: Resetting bearer <eth:syzkaller0>
[  739.500784][T29577] tipc: Disabling bearer <eth:syzkaller0>
[  739.588115][T29595] netlink: 'syz.1.6540': attribute type 75 has an invalid length.
[  739.651590][T29592] hsr0 speed is unknown, defaulting to 1000
[  739.768025][T29603] netlink: 'syz.1.6542': attribute type 13 has an invalid length.
[  739.799164][T29601] bridge1: the hash_elasticity option has been deprecated and is always 16
[  739.830223][T29607] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  739.868653][T29603] erspan0: refused to change device tx_queue_len
[  739.876350][T29603] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  740.005439][T29608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.630863][T29608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.782447][T29639] netlink: 'syz.6.6549': attribute type 1 has an invalid length.
[  740.863433][T29608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.927622][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  740.970959][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  740.984374][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  740.988663][T29639] bond7: entered promiscuous mode
[  741.001237][T29639] 8021q: adding VLAN 0 to HW filter on device bond7
[  741.003138][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  741.023093][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  741.090737][T29608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.205571][T29643] hsr0 speed is unknown, defaulting to 1000
[  741.318235][ T9735] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  741.422369][ T9717] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  741.459681][ T9717] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  741.468873][ T9717] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  741.600364][T29643] chnl_net:caif_netlink_parms(): no params data found
[  741.691214][T29643] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.699457][T29643] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.708377][T29643] bridge_slave_0: entered allmulticast mode
[  741.716694][T29643] bridge_slave_0: entered promiscuous mode
[  741.726358][T29643] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.734058][T29643] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.741842][T29643] bridge_slave_1: entered allmulticast mode
[  741.750058][T29643] bridge_slave_1: entered promiscuous mode
[  741.786677][T29643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.799401][T29643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.839026][T29643] team0: Port device team_slave_0 added
[  741.848768][T29643] team0: Port device team_slave_1 added
[  741.881366][T29643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.888714][T29643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.915962][T29643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.931542][T29643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.939107][T29643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.966119][T29643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.019065][T29643] hsr_slave_0: entered promiscuous mode
[  742.026216][T29643] hsr_slave_1: entered promiscuous mode
[  742.032593][T29643] debugfs: 'hsr0' already exists in 'hsr'
[  742.038736][T29643] Cannot create hsr debugfs directory
[  742.197607][T29643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.209959][T29643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.221768][T29643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  742.309314][T29643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.319992][T29643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.330868][T29643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  742.410510][T29643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.421775][T29643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.433561][T29643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  742.511716][T29643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.523140][T29643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.534413][T29643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  742.669351][T29643] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  742.680024][T29643] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  742.691433][T29643] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  742.702463][T29643] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  742.791277][T29643] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.812841][T29643] 8021q: adding VLAN 0 to HW filter on device team0
[  742.832187][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.839464][ T9717] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.850638][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.858082][ T9717] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.059271][T29643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  743.109599][T29643] veth0_vlan: entered promiscuous mode
[  743.121712][T29643] veth1_vlan: entered promiscuous mode
[  743.135215][ T5837] Bluetooth: hci4: command tx timeout
[  743.160953][T29643] veth0_macvtap: entered promiscuous mode
[  743.171444][T29643] veth1_macvtap: entered promiscuous mode
[  743.193809][T29643] batman_adv: batadv0: Interface activated: batadv_slave_0
[  743.211269][T29643] batman_adv: batadv0: Interface activated: batadv_slave_1
[  743.227525][ T9732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.237020][ T9732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.251430][ T9732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.260958][ T9732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.332624][ T9717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.340989][ T9717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.365069][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  743.386681][ T9719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.395115][ T9719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.205042][ T5837] Bluetooth: hci4: command tx timeout
[  747.285430][ T5837] Bluetooth: hci4: command tx timeout
[  749.365488][ T5837] Bluetooth: hci4: command tx timeout
[  757.605505][ T5837] Bluetooth: hci3: command 0x0405 tx timeout
[  776.645483][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  811.214296][T29688] xt_l2tp: invalid flags combination: 0
[  811.475939][T29703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6561'.
[  811.603017][T29708] syzkaller0: entered promiscuous mode
[  811.619267][T29708] syzkaller0: entered allmulticast mode
[  811.781446][T29724] wg1: entered promiscuous mode
[  811.786918][T29724] wg1: entered allmulticast mode
[  811.903033][T29731] netlink: 'syz.1.6570': attribute type 13 has an invalid length.
[  811.912051][T29731] netlink: 'syz.1.6570': attribute type 58 has an invalid length.
[  811.921236][T29731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6570'.
[  812.231540][T29748] netlink: 'syz.5.6573': attribute type 1 has an invalid length.
[  812.341128][T29748] bond11: entered promiscuous mode
[  812.353932][T29748] bond11: entered allmulticast mode
[  812.360568][T29748] 8021q: adding VLAN 0 to HW filter on device bond11
[  812.383278][T29760] netlink: 'syz.1.6576': attribute type 11 has an invalid length.
[  812.552117][T29765] »»»»»»: renamed from vlan0 (while UP)
[  812.714568][T29774] : renamed from hsr0
[  812.729976][T29767] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6578'.
[  813.042523][T29790] delete_channel: no stack
[  813.074184][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6585'.
[  813.230939][T29802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6587'.
[  813.538100][T29808] team0 (unregistering): Port device team_slave_0 removed
[  813.549779][T29808] team0 (unregistering): Port device team_slave_1 removed
[  813.560821][T29808] team0 (unregistering): Port device geneve0 removed
[  813.745838][T29819] hsr0 speed is unknown, defaulting to 1000
[  813.925067][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  814.430477][T29859] netlink: 'syz.6.6602': attribute type 11 has an invalid length.
[  814.454234][T29861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6600'.
[  814.544330][T29865] syzkaller1: entered promiscuous mode
[  814.561560][T29865] syzkaller1: entered allmulticast mode
[  814.756471][T29879] tipc: New replicast peer: 255.255.255.255
[  814.774240][T29879] tipc: Enabled bearer <udp:syz2>, priority 10
[  814.810960][T29883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6610'.
[  814.832102][T29884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6607'.
[  814.875696][T29884] tipc: Disabling bearer <udp:syz2>
[  814.917418][T29881] syz_tun: left allmulticast mode
[  815.162419][T29899] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  815.277208][T29909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6617'.
[  815.306099][T29912] IPVS: length: 161 != 24
[  815.319192][T29911] hsr0 speed is unknown, defaulting to 1000
[  815.326115][T29909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6617'.
[  816.182935][T29949] SET target dimension over the limit!
[  816.455240][T29968] netlink: 'syz.3.6629': attribute type 1 has an invalid length.
[  816.624269][T29962] syzkaller0: entered promiscuous mode
[  816.630586][T29962] syzkaller0: entered allmulticast mode
[  816.656440][T29978] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  816.928305][T29968] bond3: (slave gretap2): making interface the new active one
[  816.946533][T29968] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  817.000591][T29992] __nla_validate_parse: 6 callbacks suppressed
[  817.000614][T29992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6641'.
[  817.440270][T30002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  817.448154][T30002] syzkaller0: entered promiscuous mode
[  817.453772][T30002] syzkaller0: entered allmulticast mode
[  817.500064][T30004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6644'.
[  817.536798][T30009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6644'.
[  817.537761][T30005] tipc: Resetting bearer <eth:syzkaller0>
[  817.549848][T30007] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6646'.
[  817.611581][T30016] netlink: 512 bytes leftover after parsing attributes in process `syz.5.6647'.
[  817.698427][T30005] tipc: Resetting bearer <eth:syzkaller0>
[  817.767282][T30023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6650'.
[  817.793894][T30023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6650'.
[  817.805834][T30005] tipc: Disabling bearer <eth:syzkaller0>
[  818.107054][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6653'.
[  818.307078][T30058] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  818.742989][T30087] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6665'.
[  818.818888][T30091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6667'.
[  819.023893][T30103] veth1_to_bond: entered allmulticast mode
[  819.208018][T30104] veth1_to_bond: left allmulticast mode
[  819.318166][T30118] netlink: 'syz.5.6673': attribute type 12 has an invalid length.
[  820.035073][T30160] 8021q: VLANs not supported on lo
[  820.492742][T30190] netlink: 'syz.1.6689': attribute type 3 has an invalid length.
[  820.784185][T30203] bond0: entered promiscuous mode
[  820.789717][T30203] bond_slave_0: entered promiscuous mode
[  820.831446][T30208] netlink: 'syz.6.6693': attribute type 7 has an invalid length.
[  820.899074][T30203] bond_slave_1: entered promiscuous mode
[  821.320470][T30219] bridge0: entered allmulticast mode
[  821.527716][T30225] 8021q: adding VLAN 0 to HW filter on device bond2
[  822.012917][T30257] netlink: 'syz.1.6715': attribute type 62 has an invalid length.
[  822.054297][T30263] netlink: 'syz.3.6717': attribute type 1 has an invalid length.
[  822.157998][T30262] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  822.171960][T30262] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  822.182592][T30262] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  822.233815][T30273] netlink: 'syz.1.6720': attribute type 1 has an invalid length.
[  822.262489][T30277] __nla_validate_parse: 9 callbacks suppressed
[  822.262510][T30277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6721'.
[  822.306203][T30263] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  822.322822][T30263] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  822.379254][T30288] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6720'.
[  822.503441][T30273] bond1: entered promiscuous mode
[  822.508758][T30273] bond1: entered allmulticast mode
[  822.514539][T30273] 8021q: adding VLAN 0 to HW filter on device bond1
[  822.523551][T30288] 8021q: VLANs not supported on ip6_vti0
[  822.553758][T30293] macvlan2: entered promiscuous mode
[  822.559979][T30293] macvlan2: entered allmulticast mode
[  822.569215][T30293] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  822.651383][T30303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6726'.
[  822.776126][T30310] netlink: 'syz.4.6728': attribute type 8 has an invalid length.
[  822.792582][T30310] bridge3: entered promiscuous mode
[  822.917182][T30322] team0: renamed from veth1_to_bridge (while UP)
[  823.190858][T30326] netlink: 'syz.1.6733': attribute type 1 has an invalid length.
[  823.389050][T30343] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  823.430944][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6738'.
[  823.440391][T30343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6737'.
[  823.509195][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6740'.
[  823.633140][T30358] netlink: 'syz.6.6741': attribute type 4 has an invalid length.
[  823.646568][T30358] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6741'.
[  823.658121][T30358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6741'.
[  823.668829][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6741'.
[  823.867784][T30370] netlink: 'syz.5.6744': attribute type 1 has an invalid length.
[  823.875886][T30370] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6744'.
[  824.011342][T30377] vlan2: entered allmulticast mode
[  824.268733][T30388] Cannot find add_set index 2 as target
[  824.300055][T30389] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  824.377796][T30393] wg2: entered promiscuous mode
[  824.383295][T30393] wg2: entered allmulticast mode
[  824.389387][T30396] tc_dump_action: action bad kind
[  824.430075][T30400] bond0: entered allmulticast mode
[  824.436507][T30400] !€ÿ: entered allmulticast mode
[  824.441701][T30400] bond_slave_1: entered allmulticast mode
[  824.448157][T30400] dummy0: entered allmulticast mode
[  824.782627][T30416] syzkaller1: entered promiscuous mode
[  824.788558][T30416] syzkaller1: entered allmulticast mode
[  824.995760][T30425] netlink: 'syz.4.6765': attribute type 83 has an invalid length.
[  825.840695][T30474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  825.887293][T30478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.895346][T30478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.918602][T30478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.936842][T30478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  826.035994][T30475] netlink: 'syz.4.6780': attribute type 10 has an invalid length.
[  826.049021][T30490] netlink: 'syz.4.6780': attribute type 10 has an invalid length.
[  826.077287][T30485] tipc: Started in network mode
[  826.082516][T30485] tipc: Node identity 72458fec4eb6, cluster identity 4711
[  826.135723][T30485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.143829][T30492] syzkaller0: entered promiscuous mode
[  826.151340][T30492] syzkaller0: entered allmulticast mode
[  826.190851][T30485] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  826.430550][T30498] team0 (unregistering): Port device team_slave_0 removed
[  826.443906][T30498] team0 (unregistering): Port device team_slave_1 removed
[  826.477896][T30492] tipc: Resetting bearer <eth:syzkaller0>
[  826.494370][T30484] tipc: Resetting bearer <eth:syzkaller0>
[  826.572056][T30484] tipc: Disabling bearer <eth:syzkaller0>
[  826.672175][T30522] netlink: 'syz.5.6792': attribute type 4 has an invalid length.
[  826.782120][T30514] netlink: 'syz.6.6791': attribute type 21 has an invalid length.
[  826.837132][T30514] netlink: 'syz.6.6791': attribute type 5 has an invalid length.
[  826.881160][T30531] hsr0 speed is unknown, defaulting to 1000
[  827.400208][T30567] __nla_validate_parse: 15 callbacks suppressed
[  827.400231][T30567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6806'.
[  827.430912][T30567] netlink: 'syz.1.6806': attribute type 5 has an invalid length.
[  827.449611][T30567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6806'.
[  827.496245][T30567] geneve2: entered promiscuous mode
[  827.501626][T30567] geneve2: entered allmulticast mode
[  827.524555][ T9719] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  827.550565][ T9719] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  827.607227][ T9719] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  827.624831][ T9719] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  828.200847][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6820'.
[  828.291913][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6820'.
[  828.302607][T30613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6821'.
[  828.368811][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6820'.
[  828.499998][T30622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6823'.
[  828.524824][T30621] netlink: 'syz.3.6822': attribute type 11 has an invalid length.
[  828.765127][T30637] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6827'.
[  828.811567][T30639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6829'.
[  828.857038][T30643] xt_time: invalid argument - start or stop time greater than 23:59:59
[  829.115511][T30656] macvtap1: entered promiscuous mode
[  829.121729][T30656] vlan0: entered promiscuous mode
[  829.135327][T30656] macvtap1: entered allmulticast mode
[  829.140910][T30656] vlan0: entered allmulticast mode
[  829.150153][T24079] IPVS: starting estimator thread 0...
[  829.158684][T30656] veth0_vlan: entered allmulticast mode
[  829.180577][T30661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  829.206762][T30662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  829.221683][T30661] syzkaller0: entered promiscuous mode
[  829.245617][T30663] IPVS: using max 29 ests per chain, 69600 per kthread
[  829.254925][T30661] syzkaller0: entered allmulticast mode
[  829.308274][T30662] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  829.336228][T30661] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  829.388881][T30659] tipc: Resetting bearer <eth:syzkaller0>
[  829.464370][T30659] tipc: Disabling bearer <eth:syzkaller0>
[  830.359891][T30714] hsr0 speed is unknown, defaulting to 1000
[  830.458681][T30727] netlink: 'syz.4.6856': attribute type 29 has an invalid length.
[  830.485218][T30727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6856'.
[  830.622641][T30731] netlink: 'syz.4.6856': attribute type 29 has an invalid length.
[  830.653309][T30733] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  830.991028][T30748] SET target dimension over the limit!
[  831.316705][T30770] xt_policy: too many policy elements
[  831.536879][T30778] bond5: entered promiscuous mode
[  831.542162][T30778] bond5: entered allmulticast mode
[  831.548541][T30778] 8021q: adding VLAN 0 to HW filter on device bond5
[  831.821287][T30794] pim6reg1: entered promiscuous mode
[  831.841761][T30794] pim6reg1: entered allmulticast mode
[  832.170696][T30813] netlink: 'syz.6.6883': attribute type 14 has an invalid length.
[  832.200771][T30813] netlink: 'syz.6.6883': attribute type 13 has an invalid length.
[  833.069105][T30861] __nla_validate_parse: 14 callbacks suppressed
[  833.069127][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6894'.
[  833.090917][T30854] netlink: 'syz.3.6893': attribute type 75 has an invalid length.
[  833.338056][T30877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'.
[  833.357097][T30878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'.
[  833.836090][T30908] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  833.857378][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6906'.
[  833.890479][T30908] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  834.515735][T30945] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  834.524354][T30945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6916'.
[  834.707470][T30945] hsr_slave_1 (unregistering): left promiscuous mode
[  834.751781][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6923'.
[  834.890801][T30972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.002370][T30977] netlink: 'syz.3.6925': attribute type 5 has an invalid length.
[  835.409587][T31004] netlink: 'syz.6.6934': attribute type 11 has an invalid length.
[  835.418822][T31004] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6934'.
[  835.612904][T31013] ip6gretap0: left promiscuous mode
[  835.627966][T31013] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.638870][T31013] 8021q: adding VLAN 0 to HW filter on device team0
[  835.647455][T24070] tipc: Node number set to 1022595052
[  835.662764][T31013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  835.928162][T31029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6943'.
[  835.962546][T31031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.043859][T31034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.046371][T31031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6944'.
[  836.096081][T16999] IPVS: starting estimator thread 0...
[  836.121971][T31039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6945'.
[  836.196431][T31038] IPVS: using max 29 ests per chain, 69600 per kthread
[  836.822116][T31078] x_tables: duplicate underflow at hook 3
[  836.883743][T31079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.916562][T31079] syzkaller0: entered promiscuous mode
[  836.925530][T31079] syzkaller0: entered allmulticast mode
[  837.000900][T31077] tipc: Resetting bearer <eth:syzkaller0>
[  837.040609][T31077] tipc: Disabling bearer <eth:syzkaller0>
[  837.572645][T31121] tipc: New replicast peer: 255.255.255.255
[  837.590493][T31121] tipc: Enabled bearer <udp:s>, priority 10
[  837.702805][T31127] tc_dump_action: action bad kind
[  837.731730][T31129] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  837.873518][T31133] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  837.889554][ T9719] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  837.911885][ T9719] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  837.930761][ T9719] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  837.950443][ T9719] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  838.100647][T31141] __nla_validate_parse: 6 callbacks suppressed
[  838.100668][T31141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6980'.
[  838.146740][T31145] bond7: invalid ARP target 0.0.0.0 specified for addition
[  838.154113][T31145] bond7: option arp_ip_target: invalid value (0)
[  838.164444][T31145] bond7 (unregistering): Released all slaves
[  838.186619][T31147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6979'.
[  838.201773][T31144] v: renamed from vlan0
[  838.208984][T31144] tipc: Disabling bearer <eth:vlan0>
[  838.213177][T31152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6981'.
[  838.223911][T31152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6981'.
[  838.226690][T31147] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  838.385660][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6983'.
[  838.480442][T31157] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6983'.
[  839.243673][T31168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6987'.
[  839.471165][T31182] xfrm1: entered allmulticast mode
[  839.473051][T31176] netlink: 'syz.4.6989': attribute type 13 has an invalid length.
[  839.535060][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  839.590105][T31176] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.613283][T31176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  839.994549][T31211] netlink: 'syz.4.6999': attribute type 10 has an invalid length.
[  840.039651][T31211] geneve1: entered promiscuous mode
[  840.047499][T31211] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  840.151110][T31215] IPVS: set_ctl: invalid protocol: 60 172.20.20.14:20000
[  840.168228][T31215] veth0: entered promiscuous mode
[  840.207671][T31217] netlink: 416 bytes leftover after parsing attributes in process `syz.1.7001'.
[  840.378092][T31227] IPVS: length: 239 != 24
[  840.413746][T31230] lo speed is unknown, defaulting to 1000
[  840.456547][T31230] lo speed is unknown, defaulting to 1000
[  840.464460][T31230] lo speed is unknown, defaulting to 1000
[  840.536413][T31235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7006'.
[  840.834168][T31251] : entered promiscuous mode
[  840.855651][T31249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.890357][T31249] syzkaller0: entered promiscuous mode
[  840.904790][T31249] syzkaller0: entered allmulticast mode
[  840.971337][T31230] infiniband syz0: set active
[  840.985299][T31230] infiniband syz0: added lo
[  841.023418][T31257] bond3: Removing last arp target with arp_interval on
[  841.054943][T24080] lo speed is unknown, defaulting to 1000
[  841.057650][T31262] tipc: Resetting bearer <eth:syzkaller0>
[  841.076722][T31230] RDS/IB: syz0: added
[  841.080923][T31230] smc: adding ib device syz0 with port count 1
[  841.087589][T31230] smc:    ib device syz0 port 1 has no pnetid
[  841.094064][T24080] lo speed is unknown, defaulting to 1000
[  841.101667][T31230] lo speed is unknown, defaulting to 1000
[  841.116463][T31247] tipc: Resetting bearer <eth:syzkaller0>
[  841.175756][T31247] tipc: Disabling bearer <eth:syzkaller0>
[  841.547175][T31286] netlink: 'syz.5.7020': attribute type 11 has an invalid length.
[  841.571661][T31286] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7020'.
[  841.607989][T31230] lo speed is unknown, defaulting to 1000
[  842.070971][T31305] IPv6: addrconf: prefix option has invalid lifetime
[  842.107179][T31305] geneve3: entered promiscuous mode
[  842.213255][T31230] lo speed is unknown, defaulting to 1000
[  842.566305][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  842.992520][T31230] lo speed is unknown, defaulting to 1000
[  843.146099][T31336] lo: Caught tx_queue_len zero misconfig
[  843.207309][T31338] netlink: 'syz.1.7037': attribute type 1 has an invalid length.
[  843.215912][T31336] syzkaller0: entered promiscuous mode
[  843.221434][T31336] syzkaller0: entered allmulticast mode
[  843.240831][T31338] __nla_validate_parse: 6 callbacks suppressed
[  843.240851][T31338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7037'.
[  843.354103][T31343] bridge0: mtu less than device minimum
[  843.361575][T31345] bridge0: mtu less than device minimum
[  843.724100][T31230] lo speed is unknown, defaulting to 1000
[  843.913958][T31371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7047'.
[  844.069159][T31230] lo speed is unknown, defaulting to 1000
[  844.130874][T31376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7049'.
[  844.161280][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7049'.
[  844.389948][T31230] lo speed is unknown, defaulting to 1000
[  844.609051][T31389] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7055'.
[  844.609051][T31390] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7055'.
[  844.657398][T31389] netlink: 'syz.3.7055': attribute type 1 has an invalid length.
[  844.685079][T31393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7056'.
[  844.712332][T31393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7056'.
[  844.733332][T31398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7056'.
[  844.742677][T31398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7056'.
[  844.771338][T31230] lo speed is unknown, defaulting to 1000
[  845.062131][T31409] bond0: Caught tx_queue_len zero misconfig
[  845.423198][T31230] lo speed is unknown, defaulting to 1000
[  845.512844][T31434] sctp: [Deprecated]: syz.4.7067 (pid 31434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  845.512844][T31434] Use struct sctp_sack_info instead
[  845.892913][T31461] xt_hashlimit: size too large, truncated to 1048576
[  847.090002][T31542] netlink: 'syz.3.7096': attribute type 1 has an invalid length.
[  847.126720][T31542] netlink: 'syz.3.7096': attribute type 15 has an invalid length.
[  847.221751][T31548] openvswitch: netlink: Flow key attr not present in new flow.
[  847.232346][T31548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  847.432002][T31562] netlink: 'syz.1.7102': attribute type 13 has an invalid length.
[  847.556975][T31562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  847.591462][T31565] syzkaller0: entered promiscuous mode
[  847.613588][T31565] syzkaller0: entered allmulticast mode
[  848.234474][T31599] bond13: option packets_per_slave: invalid value (18446744073709551615)
[  848.316049][T31599] bond13: option packets_per_slave: allowed values 0 - 65535
[  848.358298][T31599] bond13 (unregistering): Released all slaves
[  848.616831][T31624] ip6tnl0: Caught tx_queue_len zero misconfig
[  848.645812][T31624] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  848.702325][T31628] __nla_validate_parse: 13 callbacks suppressed
[  848.702350][T31628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7115'.
[  848.999587][T31636] x_tables: duplicate underflow at hook 1
[  849.012181][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7120'.
[  849.279054][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  849.294518][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  849.310307][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  849.320590][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  849.329214][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  849.381302][T31646] hsr0 speed is unknown, defaulting to 1000
[  849.390521][T31646] lo speed is unknown, defaulting to 1000
[  849.546710][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053eb8000: rx timeout, send abort
[  849.555850][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053eb8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  849.769529][T31660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7126'.
[  849.770064][T31663] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7126'.
[  849.907904][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7128'.
[  849.976478][T31667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.232416][T31690] openvswitch: netlink: Missing valid actions attribute.
[  850.240023][T31690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.745848][T31719] lo speed is unknown, defaulting to 1000
[  850.760971][T31719] lo speed is unknown, defaulting to 1000
[  850.771785][T31719] lo speed is unknown, defaulting to 1000
[  850.819773][T31719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  850.845750][T31646] chnl_net:caif_netlink_parms(): no params data found
[  850.869581][T31719] lo speed is unknown, defaulting to 1000
[  850.905609][T31719] lo speed is unknown, defaulting to 1000
[  850.913606][T31724] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7143'.
[  850.975790][T31719] lo speed is unknown, defaulting to 1000
[  850.994387][T31719] lo speed is unknown, defaulting to 1000
[  851.035189][T31719] lo speed is unknown, defaulting to 1000
[  851.060717][T31719] lo speed is unknown, defaulting to 1000
[  851.062201][T31646] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.074170][T31646] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.081933][T31646] bridge_slave_0: entered allmulticast mode
[  851.092772][T31646] bridge_slave_0: entered promiscuous mode
[  851.102287][T31719] lo speed is unknown, defaulting to 1000
[  851.103579][T31646] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.117138][T31646] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.125112][T31646] bridge_slave_1: entered allmulticast mode
[  851.134208][T31646] bridge_slave_1: entered promiscuous mode
[  851.142765][T31719] lo speed is unknown, defaulting to 1000
[  851.175726][T31719] lo speed is unknown, defaulting to 1000
[  851.222871][T31719] lo speed is unknown, defaulting to 1000
[  851.238581][T31646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  851.272785][T31646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  851.366143][ T5148] Bluetooth: hci1: command tx timeout
[  851.405958][T31646] team0: Port device team_slave_0 added
[  851.441495][T31646] team0: Port device team_slave_1 added
[  851.519455][T31646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  851.535330][T31646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  851.563524][T31646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  851.577776][T31646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  851.585319][T31646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  851.613575][T31646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  851.622354][T31750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7149'.
[  851.748088][T31646] hsr_slave_0: entered promiscuous mode
[  851.776508][T31646] hsr_slave_1: entered promiscuous mode
[  851.792730][T31646] debugfs: 'hsr0' already exists in 'hsr'
[  851.817337][T31646] Cannot create hsr debugfs directory
[  851.851687][T31763] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  851.870698][T31758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7153'.
[  851.896470][T31765] netlink: 12024 bytes leftover after parsing attributes in process `syz.3.7155'.
[  852.173351][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7158'.
[  852.520267][T31646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.553663][T31646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  852.566651][T31646] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  852.728529][T31646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.741541][T31646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  852.760523][T31646] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  852.847809][T31813] : entered promiscuous mode
[  852.944501][T31646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.964496][T31646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  852.977594][T31646] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  853.066549][T31646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.084742][T31646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  853.096913][T31646] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  853.179284][T31831] netlink: 'syz.4.7173': attribute type 2 has an invalid length.
[  853.448415][ T5148] Bluetooth: hci1: command tx timeout
[  853.559971][T31846] xt_CT: You must specify a L4 protocol and not use inversions on it
[  853.570912][T31646] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  853.667154][T31646] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  853.704906][T31855] netlink: 'syz.6.7179': attribute type 12 has an invalid length.
[  853.723052][T31646] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  853.740580][T31646] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  853.774386][T31855] __nla_validate_parse: 5 callbacks suppressed
[  853.774406][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7179'.
[  854.116658][T31646] 8021q: adding VLAN 0 to HW filter on device bond0
[  854.151954][T31646] 8021q: adding VLAN 0 to HW filter on device team0
[  854.177406][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state
[  854.184738][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state
[  854.270498][T31884] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  854.298005][T31884] bond8 (unregistering): Released all slaves
[  854.337304][T31891] sctp: [Deprecated]: syz.1.7187 (pid 31891) Use of int in max_burst socket option.
[  854.337304][T31891] Use struct sctp_assoc_value instead
[  854.358082][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.365454][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  854.522657][T31646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  854.537881][T31898] netlink: 'syz.6.7189': attribute type 7 has an invalid length.
[  854.586388][T31896] xt_l2tp: missing protocol rule (udp|l2tpip)
[  854.622126][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7192'.
[  854.648026][T31898] netlink: 'syz.6.7189': attribute type 7 has an invalid length.
[  854.761138][T31905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  854.826733][T31905] syzkaller0: entered promiscuous mode
[  854.832280][T31905] syzkaller0: entered allmulticast mode
[  854.940603][T31910] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7191'.
[  855.032885][T31896] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  855.058814][T31905] netlink: 'syz.4.7191': attribute type 29 has an invalid length.
[  855.082680][T31923] bridge0: entered promiscuous mode
[  855.092431][T31910] netlink: 'syz.4.7191': attribute type 29 has an invalid length.
[  855.136530][T31927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'.
[  855.245602][T31910] tipc: Resetting bearer <eth:syzkaller0>
[  855.260357][T31903] tipc: Resetting bearer <eth:syzkaller0>
[  855.359967][T31903] tipc: Disabling bearer <eth:syzkaller0>
[  855.408988][T31646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.524711][ T5148] Bluetooth: hci1: command tx timeout
[  855.611464][T31944] netlink: 'syz.3.7197': attribute type 17 has an invalid length.
[  855.648845][T31944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7197'.
[  855.716131][T31944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7197'.
[  855.763410][T31944] gretap0: entered promiscuous mode
[  855.785050][T31944] gretap0: left promiscuous mode
[  856.122220][T31646] veth0_vlan: entered promiscuous mode
[  856.136975][T31646] veth1_vlan: entered promiscuous mode
[  856.175235][T31646] veth0_macvtap: entered promiscuous mode
[  856.186436][T31646] veth1_macvtap: entered promiscuous mode
[  856.212081][T31646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  856.232330][T31646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  856.251418][ T9735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.261450][ T9735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.272471][ T9735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.281992][ T9735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.386728][T31951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  856.547905][ T9735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.585576][ T9735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.667181][ T9735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.668825][T31986] net veth1_virt_wifi .: renamed from virt_wifi0
[  856.683789][ T9735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.692236][T31989] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[  856.735918][T31989] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20000
[  856.774252][T31989] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20002
[  856.976959][T32003] netlink: 'syz.1.7210': attribute type 1 has an invalid length.
[  857.217508][T32010] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7214'.
[  857.247247][T32010] ip6tnl0: Caught tx_queue_len zero misconfig
[  857.328722][T32014] syzkaller0: entered promiscuous mode
[  857.334379][T32014] syzkaller0: entered allmulticast mode
[  857.513505][T32018] netlink: 'syz.4.7217': attribute type 1 has an invalid length.
[  857.526484][T32018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7217'.
[  857.543056][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7217'.
[  857.553447][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7217'.
[  857.606084][ T5148] Bluetooth: hci1: command tx timeout
[  857.617714][T32018] veth3: entered promiscuous mode
[  857.659655][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  857.662285][ T9735] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  857.671861][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  857.690791][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  857.703787][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  857.711970][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  857.738202][ T9735] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.748716][ T9735] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  857.814144][T32021] hsr0 speed is unknown, defaulting to 1000
[  857.824896][T32021] lo speed is unknown, defaulting to 1000
[  857.870977][ T9735] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  857.895112][ T9735] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.933174][ T9735] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  858.032265][ T9735] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  858.055335][ T9735] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.079323][ T9735] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  858.241979][ T9735] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  858.272821][ T9735] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.295138][ T9735] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[  858.331051][T32021] lo speed is unknown, defaulting to 1000
[  858.406509][T32044] sctp: [Deprecated]: syz.5.7225 (pid 32044) Use of struct sctp_assoc_value in delayed_ack socket option.
[  858.406509][T32044] Use struct sctp_sack_info instead
[  858.446908][T32046] netlink: 'syz.3.7226': attribute type 10 has an invalid length.
[  858.488688][T32046] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  858.878365][T32068] __nla_validate_parse: 3 callbacks suppressed
[  858.878385][T32068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7234'.
[  859.182188][ T9735] team0: Port device geneve2 removed
[  859.228653][ T9735] team0: Port device geneve0 removed
[  859.705274][ T9735] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  859.718412][ T9735] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  859.727533][ T9735] bond0 (unregistering): Released all slaves
[  859.743531][ T9735] bond1 (unregistering): Released all slaves
[  859.760573][ T9735] bond2 (unregistering): Released all slaves
[  859.768579][ T5837] Bluetooth: hci2: command tx timeout
[  859.956348][ T9735] bond3 (unregistering): (slave veth9): Releasing active interface
[  859.967687][ T9735] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  859.979151][ T9735] bond3 (unregistering): Released all slaves
[  859.993685][ T9735] bond4 (unregistering): Released all slaves
[  860.005871][ T5837] Bluetooth: hci1: command tx timeout
[  860.012002][ T9735] bond5 (unregistering): Released all slaves
[  860.162204][ T9735] bond6 (unregistering): Released all slaves
[  860.312264][ T9735] bond7 (unregistering): Released all slaves
[  860.410534][T32075] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7235'.
[  860.632335][T32021] chnl_net:caif_netlink_parms(): no params data found
[  860.686543][T32086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  860.694200][T32086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  860.705835][T32086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  860.725204][T32091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7238'.
[  860.734721][T32086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  860.921101][T32101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7242'.
[  861.013631][T32098] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.021630][T32098] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.399457][T32098] bridge_slave_0: left allmulticast mode
[  861.420372][T32098] bridge_slave_0: left promiscuous mode
[  861.438717][T32098] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.474350][T32098] bridge_slave_1: left allmulticast mode
[  861.488010][T32098] bridge_slave_1: left promiscuous mode
[  861.494407][T32098] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.519789][T32098] bond0: (slave bond_slave_0): Releasing backup interface
[  861.544081][T32098] bond0: (slave bond_slave_1): Releasing backup interface
[  861.564060][T32098] team0: Port device team_slave_0 removed
[  861.585926][T32098] team0: Port device team_slave_1 removed
[  861.598721][T32098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  861.612251][T32098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  861.627853][T32098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  861.640796][T32098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  861.649854][T32098] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  861.745837][T32130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7246'.
[  861.755232][T32130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7246'.
[  861.820774][T32109] wg0: entered promiscuous mode
[  861.844911][ T5837] Bluetooth: hci2: command tx timeout
[  861.882231][T32130] erspan0: entered promiscuous mode
[  861.890449][T32130] erspan0: left promiscuous mode
[  862.085602][ T5837] Bluetooth: hci1: command tx timeout
[  862.099567][T32143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'.
[  862.108896][T32143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7250'.
[  862.150384][T32021] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.169217][T32021] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.185161][T32021] bridge_slave_0: entered allmulticast mode
[  862.200959][T32021] bridge_slave_0: entered promiscuous mode
[  862.251620][T32021] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.272845][T32021] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.282587][T32021] bridge_slave_1: entered allmulticast mode
[  862.291021][T32021] bridge_slave_1: entered promiscuous mode
[  862.425472][T32021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.459601][T32021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.580606][ T9735] : left promiscuous mode
[  862.692064][T32021] team0: Port device team_slave_0 added
[  862.719064][ T9735] tipc: Disabling bearer <udp:s>
[  862.736039][ T9735] tipc: Left network mode
[  862.747193][T32021] team0: Port device team_slave_1 added
[  862.784863][T32175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7256'.
[  862.849045][T32171] netlink: 'syz.3.7259': attribute type 24 has an invalid length.
[  862.876061][ T9735] IPVS: stopping master sync thread 21417 ...
[  862.956645][T32021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.974420][T32021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.002054][T32021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.055249][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802d867800: rx timeout, send abort
[  863.067490][T32021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.084737][T32021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.144701][T32021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.164379][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7264'.
[  863.422020][T32021] hsr_slave_0: entered promiscuous mode
[  863.436554][T32021] hsr_slave_1: entered promiscuous mode
[  863.459515][T32021] debugfs: 'hsr0' already exists in 'hsr'
[  863.474655][T32021] Cannot create hsr debugfs directory
[  863.555394][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880542fdc00: rx timeout, send abort
[  863.564041][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802d867800: abort rx timeout. Force session deactivation
[  863.758958][T32207] geneve4: entered promiscuous mode
[  863.805394][ T9735] hsr_slave_0: left promiscuous mode
[  863.812189][ T9735] hsr_slave_1: left promiscuous mode
[  863.843983][ T9735] v: left allmulticast mode
[  863.862667][ T9735] veth0_vlan: left allmulticast mode
[  863.871270][ T9735] v: left promiscuous mode
[  863.928245][ T5837] Bluetooth: hci2: command tx timeout
[  864.063679][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880542fdc00: abort rx timeout. Force session deactivation
[  864.168946][ T5837] Bluetooth: hci1: command tx timeout
[  865.081870][   T12] smc: removing ib device syz0
[  865.096587][T32205] tipc: Started in network mode
[  865.106646][T32205] tipc: Node identity 76b2c4a0649a, cluster identity 4711
[  865.114363][T32205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  865.155244][T32209] syzkaller0: entered promiscuous mode
[  865.173676][T32209] syzkaller0: entered allmulticast mode
[  865.213732][ T5911] lo speed is unknown, defaulting to 1000
[  865.231218][ T5911] syz0: Port: 1 Link DOWN
[  865.390918][T32233] tipc: Resetting bearer <eth:syzkaller0>
[  865.417759][T32238] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  865.435815][T32204] tipc: Resetting bearer <eth:syzkaller0>
[  865.453238][T32243] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  865.481269][T32244] __nla_validate_parse: 3 callbacks suppressed
[  865.481291][T32244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7279'.
[  865.515845][T32243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7279'.
[  865.526319][T32204] tipc: Disabling bearer <eth:syzkaller0>
[  865.827753][T32257] netlink: 'syz.3.7281': attribute type 11 has an invalid length.
[  866.005274][ T5837] Bluetooth: hci2: command tx timeout
[  866.256612][ T5837] Bluetooth: hci1: command tx timeout
[  866.319817][T32283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7287'.
[  866.353319][T32284] v: renamed from vlan0 (while UP)
[  866.492690][T32280] veth0: entered promiscuous mode
[  866.505297][T32280] veth0: left promiscuous mode
[  866.827371][T32301] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7292'.
[  866.890460][T32291] syzkaller1: entered promiscuous mode
[  866.901069][T32291] syzkaller1: entered allmulticast mode
[  867.225944][T32311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7295'.
[  867.502132][T32326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7295'.
[  867.557821][T32309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7295'.
[  867.782491][T32311] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7295'.
[  868.325658][ T5837] Bluetooth: hci1: command tx timeout
[  868.343524][T32349] pimreg: entered allmulticast mode
[  868.385631][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7304'.
[  868.470232][T32354] : entered promiscuous mode
[  868.672537][T32360] x_tables: unsorted underflow at hook 3
[  868.683641][T32021] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  868.714167][T32360] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7307'.
[  868.766608][T32021] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  868.809047][T32021] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  868.874251][T32348] pimreg: left allmulticast mode
[  869.022870][T32021] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  869.278590][T32368] hsr0 speed is unknown, defaulting to 1000
[  869.356489][T32368] lo speed is unknown, defaulting to 1000
[  869.664265][T32021] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.672634][T32394] netlink: 'syz.3.7313': attribute type 2 has an invalid length.
[  869.696054][T32394] netlink: 'syz.3.7313': attribute type 8 has an invalid length.
[  869.829019][T32410] netlink: 'syz.1.7316': attribute type 1 has an invalid length.
[  869.834522][T32021] 8021q: adding VLAN 0 to HW filter on device team0
[  869.870177][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.877463][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.003306][T32410] 8021q: adding VLAN 0 to HW filter on device bond2
[  870.100641][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.108004][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.128268][T32421] netlink: 'syz.5.7319': attribute type 1 has an invalid length.
[  870.275140][T32426] IPVS: set_ctl: invalid protocol: 154 127.0.0.1:20002
[  870.407363][ T5837] Bluetooth: hci1: command tx timeout
[  871.112164][T32457] __nla_validate_parse: 3 callbacks suppressed
[  871.112186][T32457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7325'.
[  871.163823][ T9735] bond2 (unregistering): (slave gre2): Releasing backup interface
[  871.171953][ T9735] gre2 (unregistering): left promiscuous mode
[  871.270336][ T9735] bond4 (unregistering): (slave geneve3): Releasing active interface
[  871.459078][ T9735] bond1 (unregistering): (slave bridge2): Releasing active interface
[  871.519540][ T9735] bond3 (unregistering): (slave bridge3): Releasing active interface
[  871.774284][ T9735] bond0 (unregistering): Released all slaves
[  871.789960][ T9735] bond1 (unregistering): Released all slaves
[  871.929170][ T9735] bond2 (unregistering): Released all slaves
[  871.946008][ T9735] bond3 (unregistering): Released all slaves
[  871.973404][ T9735] bond4 (unregistering): Released all slaves
[  872.293676][ T9735] tipc: Left network mode
[  872.496208][ T5837] Bluetooth: hci1: command tx timeout
[  872.590916][T32021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.176565][T32505] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7337'.
[  873.187154][T32505] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7337'.
[  873.276732][T32510] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7337'.
[  873.288485][T32510] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7337'.
[  873.551726][ T9735] hsr_slave_0: left promiscuous mode
[  873.588334][ T9735] veth1_macvtap: left promiscuous mode
[  873.595035][ T9735] veth0_macvtap: left promiscuous mode
[  873.763162][ T9735] pimreg3 (unregistering): left allmulticast mode
[  873.832669][ T9735] pimreg (unregistering): left allmulticast mode
[  874.564888][ T5837] Bluetooth: hci1: command tx timeout
[  874.762399][ T9735] smc: removing net device vcan0 with user defined pnetid SYZ1
[  874.777544][ T9735] lo (unregistering): left allmulticast mode
[  874.790083][T32533] lo: Caught tx_queue_len zero misconfig
[  874.862292][T32021] veth0_vlan: entered promiscuous mode
[  874.902895][T32021] veth1_vlan: entered promiscuous mode
[  874.990613][T32021] veth0_macvtap: entered promiscuous mode
[  875.100022][T32568] gre1: entered promiscuous mode
[  875.105365][T32568] gre1: entered allmulticast mode
[  875.112740][T32021] veth1_macvtap: entered promiscuous mode
[  875.127086][T32568] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7356'.
[  875.138066][T32568] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7356'.
[  875.236573][T32572] netlink: 'syz.5.7358': attribute type 10 has an invalid length.
[  875.383794][T32021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  875.535471][T32021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.548306][ T9735] IPVS: stop unused estimator thread 0...
[  875.636728][ T1086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  875.660372][ T1086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  875.696143][ T1086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  875.721206][ T1086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.902137][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.914779][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.989667][ T9734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.998003][ T9734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.509563][T32613] veth1: entered allmulticast mode
[  876.560978][T32617] hsr0 speed is unknown, defaulting to 1000
[  876.577072][T32617] lo speed is unknown, defaulting to 1000
[  876.646083][ T5837] Bluetooth: hci1: command tx timeout
[  876.940128][T32644] netlink: 'syz.1.7375': attribute type 3 has an invalid length.
[  876.952574][T32644] netlink: 'syz.1.7375': attribute type 3 has an invalid length.
[  877.169164][T32658] netlink: 'syz.4.7380': attribute type 29 has an invalid length.
[  877.179243][T32656] veth1_to_bond: entered allmulticast mode
[  877.186596][T32656] veth1_to_bond: left allmulticast mode
[  877.186621][T32658] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7380'.
[  877.204348][T32656] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7379'.
[  877.222323][T32658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7380'.
[  877.254151][T32656] bond0: (slave bond_slave_1): Releasing backup interface
[  877.395857][T32665] syzkaller1: entered promiscuous mode
[  877.402843][T32665] syzkaller1: entered allmulticast mode
[  877.749429][T32687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7387'.
[  877.755274][T32683] hsr0 speed is unknown, defaulting to 1000
[  877.785399][T32683] lo speed is unknown, defaulting to 1000
[  877.809286][T32684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7388'.
[  877.941994][T32690] netlink: 'syz.6.7389': attribute type 11 has an invalid length.
[  877.950425][T32690] netlink: 'syz.6.7389': attribute type 11 has an invalid length.
[  877.959335][T32690] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7389'.
[  878.183299][T32706] tipc: Started in network mode
[  878.192466][T32706] tipc: Node identity aefde48c4215, cluster identity 4711
[  878.201735][T32706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  878.210556][T32708] syzkaller0: entered promiscuous mode
[  878.249549][T32708] syzkaller0: entered allmulticast mode
[  878.318421][T32709] tipc: Resetting bearer <eth:syzkaller0>
[  878.349323][T32709] tipc: Disabling bearer <eth:syzkaller0>
[  878.464323][T32721] --map-set only usable from mangle table
[  878.727566][ T5837] Bluetooth: hci1: command tx timeout
[  879.107151][T32748] netlink: 'syz.4.7403': attribute type 10 has an invalid length.
[  879.116238][T32748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7403'.
[  880.809184][ T5837] Bluetooth: hci1: command tx timeout
[  881.278314][T32728] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  881.279352][T32732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  881.304812][T32730] syzkaller1: entered promiscuous mode
[  881.310493][T32730] syzkaller1: entered allmulticast mode
[  881.360152][T32748] batadv0: entered promiscuous mode
[  881.370228][T32748] batadv0: entered allmulticast mode
[  881.380736][T32748] bridge0: port 4(batadv0) entered blocking state
[  881.387873][T32748] bridge0: port 4(batadv0) entered disabled state
[  881.414352][T32748] bridge0: port 4(batadv0) entered blocking state
[  881.421048][T32748] bridge0: port 4(batadv0) entered forwarding state
[  881.636721][ T9735] batman_adv: batadv0: IGMP Querier appeared
[  881.642907][ T9735] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  881.822198][  T317] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7410'.
[  881.875936][  T321] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004
[  882.198627][  T338] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003
[  882.238088][  T338] syzkaller1: entered promiscuous mode
[  882.255768][  T338] syzkaller1: entered allmulticast mode
[  882.285515][  T338] xt_limit: Overflow, try lower: 604147548/4200216962
[  882.355206][  T349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7419'.
[  882.409872][  T350] netlink: 'syz.5.7420': attribute type 1 has an invalid length.
[  882.409872][  T351] netlink: 'syz.5.7420': attribute type 1 has an invalid length.
[  882.517026][  T351] 8021q: adding VLAN 0 to HW filter on device bond1
[  882.675548][  T373] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7424'.
[  882.814508][  T383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  882.893204][ T5837] Bluetooth: hci1: command tx timeout
[  882.953082][  T391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7431'.
[  883.086052][  T399] netlink: 'syz.5.7433': attribute type 21 has an invalid length.
[  883.388279][  T412] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004
[  883.404378][  T420] netlink: 'syz.5.7438': attribute type 1 has an invalid length.
[  883.435495][  T420] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7438'.
[  883.478610][  T427] netlink: 'syz.3.7440': attribute type 11 has an invalid length.
[  883.487075][  T428] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7438'.
[  883.500917][  T427] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7440'.
[  883.625096][  T436] netlink: 'syz.5.7442': attribute type 18 has an invalid length.
[  883.710773][ T1086] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  883.732821][ T1086] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  883.758370][ T1086] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  883.772739][  T442] IPVS: length: 8 != 1152
[  883.778735][  T433] syzkaller1: entered promiscuous mode
[  883.778762][  T433] syzkaller1: entered allmulticast mode
[  883.782136][ T1086] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  883.802956][  T442] netlink: 'syz.6.7443': attribute type 33 has an invalid length.
[  883.890360][  T442] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  883.909534][  T442] bond1 (unregistering): Released all slaves
[  883.917112][  T450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7444'.
[  883.930527][  T450] Cannot find add_set index 2 as target
[  883.939639][  T450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7444'.
[  884.151558][  T457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7448'.
[  884.774367][  T498] netlink: 'syz.6.7458': attribute type 1 has an invalid length.
[  884.795980][  T498] netlink: 'syz.6.7458': attribute type 2 has an invalid length.
[  884.888321][  T501] netlink: 'syz.3.7461': attribute type 3 has an invalid length.
[  884.965038][ T5837] Bluetooth: hci1: command tx timeout
[  885.665406][  T545] netlink: 'syz.1.7475': attribute type 12 has an invalid length.
[  885.869187][  T560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7481'.
[  886.472673][  T592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  886.487612][  T592] syzkaller0: entered promiscuous mode
[  886.493160][  T592] syzkaller0: entered allmulticast mode
[  886.620427][  T599] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  886.699499][  T600] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  886.759372][ T9724] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  886.787846][ T9724] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  886.797463][ T9724] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  886.808394][ T1086] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  886.907808][  T591] tipc: Resetting bearer <eth:syzkaller0>
[  886.929173][  T614] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  886.981849][  T591] tipc: Disabling bearer <eth:syzkaller0>
[  887.047580][ T5837] Bluetooth: hci1: command tx timeout
[  887.470860][  T642] __nla_validate_parse: 4 callbacks suppressed
[  887.470881][  T642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7505'.
[  887.528733][  T637] team0: Device wireguard0 is up. Set it down before adding it as a team port
[  887.628104][  T649] validate_nla: 3 callbacks suppressed
[  887.628125][  T649] netlink: 'syz.4.7506': attribute type 9 has an invalid length.
[  887.658060][  T649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7506'.
[  887.719927][  T651] netlink: 'syz.6.7508': attribute type 1 has an invalid length.
[  887.753618][  T651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7508'.
[  887.923492][  T657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7510'.
[  888.210412][  T669] netlink: 'syz.4.7513': attribute type 11 has an invalid length.
[  888.373004][  T677] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7517'.
[  888.568503][  T689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7522'.
[  888.908824][  T713] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7529'.
[  889.075425][  T727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7531'.
[  889.125044][ T5837] Bluetooth: hci1: command tx timeout
[  889.247058][T24070] IPVS: starting estimator thread 0...
[  889.344285][  T740] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7533'.
[  889.397708][  T737] IPVS: using max 29 ests per chain, 69600 per kthread
[  889.413250][  T743] IPVS: length: 239 != 24
[  889.432648][  T745] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7537'.
[  889.642338][  T758] netlink: 'syz.3.7538': attribute type 10 has an invalid length.
[  890.499802][  T813] bridge0: port 2(bridge_slave_1) entered disabled state
[  890.572757][  T813] bridge_slave_1 (unregistering): left allmulticast mode
[  890.580521][  T813] bridge_slave_1 (unregistering): left promiscuous mode
[  890.588032][  T813] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.214679][ T5148] Bluetooth: hci1: command tx timeout
[  891.371257][  T832] tap0: tun_chr_ioctl cmd 1074025676
[  891.376753][  T832] tap0: owner set to 0
[  891.384144][  T832] tap0: tun_chr_ioctl cmd 1074025673
[  891.638905][  T848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  891.718738][  T859] netlink: 'syz.1.7570': attribute type 1 has an invalid length.
[  891.736034][  T854] syzkaller0: entered promiscuous mode
[  891.741671][  T854] syzkaller0: entered allmulticast mode
[  891.803770][  T854] tipc: Resetting bearer <eth:syzkaller0>
[  892.493344][ T5148] Bluetooth: hci2: command 0x0405 tx timeout
[  892.654788][T24079] tipc: Node number set to 3974685836
[  893.301267][ T5148] Bluetooth: hci1: command tx timeout
[  894.528306][  T854] tipc: Disabling bearer <eth:syzkaller0>
[  894.546138][  T870] tipc: Resetting bearer <eth:macvlan1>
[  894.575003][ T5148] Bluetooth: hci2: command 0x0405 tx timeout
[  894.768309][  T896] veth1_macvtap: left promiscuous mode
[  894.798778][  T898] __nla_validate_parse: 6 callbacks suppressed
[  894.798801][  T898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7582'.
[  894.810719][  T904] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7583'.
[  894.831557][  T903] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7583'.
[  895.009309][  T913] openvswitch: netlink: nsh attribute has 65512 unknown bytes.
[  895.039536][  T913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  895.098994][  T922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  895.108215][  T922] syzkaller0: entered promiscuous mode
[  895.113758][  T922] syzkaller0: entered allmulticast mode
[  895.208848][  T935] netlink: 'syz.6.7591': attribute type 1 has an invalid length.
[  895.277548][  T952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7594'.
[  895.296123][  T935] bond1: entered promiscuous mode
[  895.301982][  T935] 8021q: adding VLAN 0 to HW filter on device bond1
[  895.311084][  T917] tipc: Resetting bearer <eth:syzkaller0>
[  895.333442][  T950] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7591'.
[  895.344118][  T917] tipc: Disabling bearer <eth:syzkaller0>
[  895.364946][ T5837] Bluetooth: hci1: command tx timeout
[  895.535398][  T965] netlink: 'syz.4.7598': attribute type 1 has an invalid length.
[  895.559290][  T967] xt_CT: You must specify a L4 protocol and not use inversions on it
[  895.572634][ T9719] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  895.640041][  T965] 8021q: adding VLAN 0 to HW filter on device bond5
[  895.649730][  T965] bond4: (slave bond5): making interface the new active one
[  895.659040][  T965] bond4: (slave bond5): Enslaving as an active interface with an up link
[  895.684326][  T976] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  895.699830][  T976] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  895.720190][  T975] syzkaller0: entered promiscuous mode
[  895.727556][  T975] syzkaller0: entered allmulticast mode
[  895.943487][  T982] netlink: 284 bytes leftover after parsing attributes in process `syz.1.7601'.
[  896.011310][  T983] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7601'.
[  896.098953][  T988] batadv1: entered allmulticast mode
[  896.303563][ T1002] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7606'.
[  896.481221][ T1008] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7608'.
[  896.648050][ T1010] netlink: 'syz.6.7610': attribute type 12 has an invalid length.
[  896.665572][ T1010] netlink: 'syz.6.7610': attribute type 29 has an invalid length.
[  896.683901][ T1010] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7610'.
[  896.710024][ T1010] netlink: 'syz.6.7610': attribute type 2 has an invalid length.
[  897.398629][ T1075] x_tables: ip6_tables: mh match: only valid for protocol 135
[  897.444772][ T5837] Bluetooth: hci1: command tx timeout
[  897.858406][ T1106] netlink: zone id is out of range
[  897.874448][ T1106] netlink: zone id is out of range
[  897.891717][ T1106] netlink: zone id is out of range
[  897.911097][ T1106] netlink: zone id is out of range
[  897.942684][ T1106] netlink: zone id is out of range
[  897.995203][ T1106] netlink: zone id is out of range
[  898.014608][ T1106] netlink: zone id is out of range
[  898.036032][ T1106] netlink: zone id is out of range
[  898.892203][ T1169] netlink: 'syz.6.7652': attribute type 17 has an invalid length.
[  899.022500][ T1174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  899.048366][ T1175] syzkaller0: entered promiscuous mode
[  899.054390][ T1175] syzkaller0: entered allmulticast mode
[  899.097383][ T1175] tipc: Resetting bearer <eth:syzkaller0>
[  899.149961][ T1175] tipc: Disabling bearer <eth:syzkaller0>
[  899.260105][ T1189] netlink: 'syz.6.7658': attribute type 1 has an invalid length.
[  899.413363][ T1201] rdma_op ffff8880286e49f0 conn xmit_rdma 0000000000000000
[  899.526993][ T5837] Bluetooth: hci1: command tx timeout
[  899.829362][ T1224] __nla_validate_parse: 11 callbacks suppressed
[  899.829384][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'.
[  899.860000][ T1226] bond0: Caught tx_queue_len zero misconfig
[  900.208155][ T1248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  900.258516][ T1248] syzkaller0: entered promiscuous mode
[  900.264184][ T1248] syzkaller0: entered allmulticast mode
[  900.271162][ T1248] tipc: Resetting bearer <eth:syzkaller0>
[  900.289260][ T1247] tipc: Resetting bearer <eth:syzkaller0>
[  900.645666][ T1260] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7681'.
[  900.673470][ T1263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7682'.
[  900.893308][ T1266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7683'.
[  900.908359][ T1266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7683'.
[  901.300420][T24070] tipc: Node number set to 304661664
[  901.606585][ T5837] Bluetooth: hci1: command tx timeout
[  902.499511][ T1247] tipc: Disabling bearer <eth:syzkaller0>
[  902.619258][ T1272] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7684'.
[  902.667204][ T1263] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  902.889754][ T1285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7687'.
[  902.931048][ T1286] Cannot find del_set index 4 as target
[  902.964253][ T1291] netlink: 'syz.3.7689': attribute type 10 has an invalid length.
[  902.978872][ T1291] wg0: left promiscuous mode
[  903.020155][ T1291] --map-set only usable from mangle table
[  903.038874][ T1297] netlink: 'syz.5.7691': attribute type 23 has an invalid length.
[  903.081494][ T1297] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  903.081835][ T1299] netlink: 'syz.5.7691': attribute type 5 has an invalid length.
[  903.207400][ T1309] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7693'.
[  903.263208][ T1315] netlink: 'syz.3.7694': attribute type 21 has an invalid length.
[  903.271269][ T1315] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7694'.
[  903.280553][ T1315] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7694'.
[  903.694799][ T5837] Bluetooth: hci1: command tx timeout
[  903.728862][ T1338] --map-set only usable from mangle table
[  903.905205][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  903.930191][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  903.939860][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  903.958600][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  904.097192][ T1352] netlink: 'syz.4.7705': attribute type 11 has an invalid length.
[  904.786684][ T1389] lo: entered allmulticast mode
[  905.253716][ T1416] netlink: 'syz.4.7724': attribute type 13 has an invalid length.
[  905.286937][ T1416] veth0_macvtap: left promiscuous mode
[  905.317695][ T1416] macvtap0: entered allmulticast mode
[  905.347246][ T1416] macvtap0: refused to change device tx_queue_len
[  905.765445][ T5837] Bluetooth: hci1: command tx timeout
[  905.899043][ T1451] netlink: 'syz.3.7735': attribute type 29 has an invalid length.
[  906.221664][ T1461] __nla_validate_parse: 10 callbacks suppressed
[  906.221689][ T1461] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7739'.
[  906.267107][ T1461] gretap0: entered promiscuous mode
[  906.275813][ T1464] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7739'.
[  906.299040][ T1464] 0ªî{X¹¦: renamed from gretap0
[  906.316995][ T1464] 0ªî{X¹¦: left promiscuous mode
[  906.322486][ T1464] 0ªî{X¹¦: entered allmulticast mode
[  906.341910][ T1464] net_ratelimit: 17 callbacks suppressed
[  906.341932][ T1464] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  906.935598][ T1482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7743'.
[  906.966319][ T1482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7743'.
[  907.389209][ T1521] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7753'.
[  907.400575][ T1521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7753'.
[  907.777619][ T1547] team0: Caught tx_queue_len zero misconfig
[  907.856321][ T5837] Bluetooth: hci1: command tx timeout
[  907.981253][ T1554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7763'.
[  908.046499][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7765'.
[  908.057080][ T1558] netlink: 'syz.6.7765': attribute type 20 has an invalid length.
[  908.095021][ T1160] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  908.104456][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7765'.
[  908.118116][ T1160] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  908.128607][ T1160] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  908.137905][ T1558] netlink: 'syz.6.7765': attribute type 20 has an invalid length.
[  908.146114][ T1160] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  908.624842][ T1581] netlink: 'syz.5.7770': attribute type 1 has an invalid length.
[  908.655031][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7770'.
[  909.376467][ T1606] netlink: 'syz.4.7779': attribute type 3 has an invalid length.
[  909.926839][ T5837] Bluetooth: hci1: command tx timeout
[  910.352124][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.360193][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.368197][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.376200][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.384136][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.392118][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.400123][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.408111][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.416074][ T1660] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  910.473842][ T1666] netlink: 'syz.5.7793': attribute type 1 has an invalid length.
[  910.569768][ T1666] bond4: (slave ip6gretap1): making interface the new active one
[  910.590175][ T1666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  910.607315][ T1666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  910.632888][ T1666] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  910.902442][ T1688] netlink: 'syz.6.7798': attribute type 3 has an invalid length.
[  911.072813][ T1696] Cannot find del_set index 3 as target
[  911.110692][ T1700] netlink: 'syz.3.7802': attribute type 5 has an invalid length.
[  911.293868][ T1712] __nla_validate_parse: 10 callbacks suppressed
[  911.293889][ T1712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7804'.
[  911.418215][ T1712] bond3: option lp_interval: invalid value (0)
[  911.425532][ T1712] bond3: option lp_interval: allowed values 1 - 2147483647
[  911.477512][ T1712] bond3 (unregistering): Released all slaves
[  911.501812][ T1725] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7807'.
[  911.548118][ T1726] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7807'.
[  911.790298][ T1735] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7810'.
[  911.933665][ T1749] x_tables: duplicate underflow at hook 2
[  911.954377][ T1750] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7814'.
[  911.969109][ T1753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7817'.
[  912.005193][ T5148] Bluetooth: hci1: command tx timeout
[  912.108674][ T1764] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  912.124362][ T1764] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7819'.
[  912.253873][ T1777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7821'.
[  912.270189][ T1778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7821'.
[  912.361928][ T1780] netlink: 'syz.1.7823': attribute type 1 has an invalid length.
[  912.371680][ T1780] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7823'.
[  913.098342][ T1812] net_ratelimit: 45 callbacks suppressed
[  913.098364][ T1812] openvswitch: netlink: EtherType 53b is less than min 600
[  914.084992][ T5148] Bluetooth: hci1: command tx timeout
[  914.338889][ T1883] macvtap1: entered promiscuous mode
[  914.344529][ T1883] vlan0: entered promiscuous mode
[  914.350613][ T1883] macvtap1: entered allmulticast mode
[  914.357405][ T1883] vlan0: entered allmulticast mode
[  914.362705][ T1883] veth0_vlan: entered allmulticast mode
[  914.387009][ T1883] macvtap2: entered promiscuous mode
[  914.392688][ T1883] macvtap2: entered allmulticast mode
[  914.578480][ T1890] syzkaller0: entered promiscuous mode
[  914.593737][ T1890] syzkaller0: entered allmulticast mode
[  914.772638][ T1900] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  915.075592][ T1928] syzkaller1: entered promiscuous mode
[  915.101356][ T1928] syzkaller1: entered allmulticast mode
[  915.112457][ T1919] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  915.840430][ T1969] netlink: 'syz.5.7870': attribute type 1 has an invalid length.
[  916.166191][ T5148] Bluetooth: hci1: command tx timeout
[  916.337326][ T1985] __nla_validate_parse: 19 callbacks suppressed
[  916.337350][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7875'.
[  916.373938][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7875'.
[  916.383654][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7875'.
[  916.592599][ T2008] xt_CT: You must specify a L4 protocol and not use inversions on it
[  916.753841][ T2017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7885'.
[  916.876241][ T2023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  916.999498][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7890'.
[  917.071539][ T2040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7891'.
[  917.552716][ T2067] xt_CT: You must specify a L4 protocol and not use inversions on it
[  917.637762][ T2072] netem: incorrect ge model size
[  917.653233][ T2072] netem: change failed
[  917.797358][ T2079] nftables ruleset with unbound chain
[  917.962482][ T2087] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7905'.
[  917.973131][ T2087] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7905'.
[  917.982384][ T2087] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7905'.
[  917.999426][ T2087] syzkaller1: entered promiscuous mode
[  918.009143][ T2087] syzkaller1: entered allmulticast mode
[  918.074482][ T9719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.083436][ T9719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.157216][ T2093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7907'.
[  918.247424][ T5148] Bluetooth: hci1: command tx timeout
[  918.303406][ T2104] netlink: 'syz.4.7911': attribute type 5 has an invalid length.
[  918.577033][ T2123] netlink: 'syz.4.7917': attribute type 2 has an invalid length.
[  918.580462][ T2124] netlink: 'syz.4.7917': attribute type 2 has an invalid length.
[  918.612490][ T2123] : entered promiscuous mode
[  918.884905][ T5148] Bluetooth: hci2: command 0x0405 tx timeout
[  918.949738][ T2146] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  919.002965][ T2149] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  919.159971][ T2157] netlink: 'syz.1.7928': attribute type 83 has an invalid length.
[  919.734347][ T2194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  920.161276][ T2217] bond7: option lp_interval: invalid value (0)
[  920.168629][ T2217] bond7: option lp_interval: allowed values 1 - 2147483647
[  920.178334][ T2217] bond7 (unregistering): Released all slaves
[  920.228686][ T2221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  920.282264][ T2221] tipc: Resetting bearer <eth:syzkaller0>
[  920.326342][ T5148] Bluetooth: hci1: command tx timeout
[  920.332742][ T2219] tipc: Disabling bearer <eth:syzkaller0>
[  920.640589][ T2252] bond7: Removing last arp target with arp_interval on
[  921.340232][ T2300] netlink: 'syz.3.7965': attribute type 11 has an invalid length.
[  921.375934][ T2300] __nla_validate_parse: 11 callbacks suppressed
[  921.375955][ T2300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7965'.
[  921.401844][ T2304] netlink: 'syz.4.7968': attribute type 1 has an invalid length.
[  921.442928][ T2305] netlink: 'syz.4.7968': attribute type 1 has an invalid length.
[  921.450325][ T2306] gre0: entered promiscuous mode
[  921.601389][ T2310] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  921.609697][ T2317] netlink: 'syz.3.7971': attribute type 10 has an invalid length.
[  921.613866][ T2310] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  921.647098][ T2304] gretap1: entered promiscuous mode
[  921.660043][ T2304] bond6: (slave gretap1): making interface the new active one
[  921.671209][ T2304] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  921.707086][ T2315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7970'.
[  921.876410][ T2331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7975'.
[  922.189580][ T2346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.271222][ T2348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7980'.
[  922.282925][ T2348] netlink: 'syz.3.7980': attribute type 2 has an invalid length.
[  922.293369][ T2348] netlink: 'syz.3.7980': attribute type 8 has an invalid length.
[  922.310360][ T2348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7980'.
[  922.406486][ T5148] Bluetooth: hci1: command tx timeout
[  922.487513][ T2355] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  922.516121][ T2355] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  922.847515][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7989'.
[  923.563747][ T2395] 8021q: VLANs not supported on ip_vti0
[  923.610911][ T2394] pim6reg1: entered promiscuous mode
[  923.617716][ T2394] pim6reg1: entered allmulticast mode
[  923.724861][ T2405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'.
[  923.759728][ T2405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'.
[  923.760651][ T2401] netlink: 'syz.1.7994': attribute type 6 has an invalid length.
[  923.860904][ T2401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'.
[  923.874425][ T2415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7996'.
[  923.921100][ T2401] netlink: 'syz.1.7994': attribute type 4 has an invalid length.
[  924.489284][ T5148] Bluetooth: hci1: command tx timeout
[  924.678406][ T2480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  924.685797][ T2480] IPv6: NLM_F_CREATE should be set when creating new route
[  924.693084][ T2480] IPv6: NLM_F_CREATE should be set when creating new route
[  924.700392][ T2480] IPv6: NLM_F_CREATE should be set when creating new route
[  924.891638][ T2495] netlink: 'syz.6.8015': attribute type 25 has an invalid length.
[  925.033417][ T2501] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  925.049293][ T2502] ip6gre1: entered promiscuous mode
[  925.055751][ T2502] ip6gre1: entered allmulticast mode
[  925.071965][ T2502] syzkaller0: entered promiscuous mode
[  925.077831][ T2502] syzkaller0: entered allmulticast mode
[  925.513187][ T2522] bond_slave_0: entered promiscuous mode
[  925.545961][ T2522] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  925.587879][ T2522] bond8: (slave macvlan2): Enslaving as an active interface with an up link
[  925.776110][ T2549] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  925.776364][ T2551] netlink: 'syz.3.8029': attribute type 2 has an invalid length.
[  925.807070][ T2549] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  925.849830][ T2549] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  925.853930][ T2553] syzkaller0: entered promiscuous mode
[  925.867230][ T2553] syzkaller0: entered allmulticast mode
[  925.928342][ T2553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  925.957911][ T2552] tipc: Resetting bearer <eth:syzkaller0>
[  926.001225][ T2552] tipc: Disabling bearer <eth:syzkaller0>
[  926.564865][ T5148] Bluetooth: hci1: command tx timeout
[  926.665565][ T2626] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  926.720315][ T2634] __nla_validate_parse: 9 callbacks suppressed
[  926.720338][ T2634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8045'.
[  926.795563][ T2650] netlink: 'syz.3.8047': attribute type 1 has an invalid length.
[  926.803484][ T2650] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8047'.
[  927.180171][ T2671] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8054'.
[  927.212562][ T2671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8054'.
[  927.338517][ T2618] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  928.157148][ T2720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8065'.
[  928.275725][ T2714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8064'.
[  928.294736][ T2725] hsr0 speed is unknown, defaulting to 1000
[  928.302773][ T2725] lo speed is unknown, defaulting to 1000
[  928.419666][ T2736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8069'.
[  928.453223][ T2739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8069'.
[  928.518064][ T2744] openvswitch: netlink: IP tunnel dst address not specified
[  928.567632][ T5148] Bluetooth: hci0: command 0x0406 tx timeout
[  929.313180][ T2799] xt_hashlimit: size too large, truncated to 1048576
[  929.352769][ T2800] netlink: 'syz.1.8083': attribute type 39 has an invalid length.
[  929.387307][ T2802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8084'.
[  929.433011][ T2802] netlink: 'syz.6.8084': attribute type 11 has an invalid length.
[  929.466158][ T2802] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.8084'.
[  929.958109][ T2830] team0: Mode changed to "loadbalance"
[  929.966996][ T2831] netlink: 'syz.4.8090': attribute type 1 has an invalid length.
[  930.006991][ T2831] xt_connbytes: Forcing CT accounting to be enabled
[  930.026246][ T2831] netlink: 'syz.4.8090': attribute type 1 has an invalid length.
[  930.139824][ T2845] nbd: couldn't find a device at index 0
[  930.563687][ T2582] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  930.595067][ T2582] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.607271][ T2582] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  930.618655][ T2582] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  930.627912][ T2582] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.637657][ T2582] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  930.675585][ T2582] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  930.685564][ T2582] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.694519][ T2582] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  930.704459][ T2582] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  930.713697][ T2582] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.724002][ T2582] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  930.875772][ T2889] netlink: 'syz.4.8105': attribute type 10 has an invalid length.
[  930.884520][ T2889] bridge0: port 4(batadv0) entered disabled state
[  930.891469][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.920242][ T2582] batman_adv: batadv0: IGMP Querier disappeared - multicast optimizations disabled
[  930.934569][ T2889] bridge0: port 4(batadv0) entered blocking state
[  930.941243][ T2889] bridge0: port 4(batadv0) entered forwarding state
[  930.948304][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.955671][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.007228][ T2889] bridge0: entered promiscuous mode
[  931.015934][ T2889] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  931.085170][ T2582] batman_adv: batadv1: IGMP Querier disappeared - multicast optimizations disabled
[  931.360897][ T2915] netlink: 'syz.1.8113': attribute type 1 has an invalid length.
[  931.381154][ T2915] netlink: 'syz.1.8113': attribute type 2 has an invalid length.
[  931.397482][ T2910] netlink: 'syz.4.8111': attribute type 5 has an invalid length.
[  931.406726][ T2919] netlink: 'syz.1.8113': attribute type 1 has an invalid length.
[  931.406752][ T2919] netlink: 'syz.1.8113': attribute type 2 has an invalid length.
[  931.779163][ T2935] x_tables: duplicate underflow at hook 1
[  931.987029][ T2936] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  932.001358][ T2936] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.152492][ T2936] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  932.163808][ T2936] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.282266][ T2936] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  932.295555][ T2936] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.467992][ T2936] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  932.500330][ T2936] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.580357][ T2970] __nla_validate_parse: 11 callbacks suppressed
[  932.580385][ T2970] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8128'.
[  932.604745][ T2970] nbd: couldn't find a device at index 0
[  932.614998][ T2979] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8129'.
[  932.778463][ T2582] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  932.808300][ T2582] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  932.918066][ T2568] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  932.977983][ T2568] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.042106][ T2593] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  933.075297][ T2593] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.161583][ T2585] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  933.193348][ T2585] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  933.503572][ T3024] netlink: 'syz.6.8141': attribute type 1 has an invalid length.
[  933.614294][ T3024] bond3: (slave bridge3): making interface the new active one
[  933.619682][ T3032] netlink: 'syz.1.8144': attribute type 10 has an invalid length.
[  933.627414][ T3024] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  933.632919][ T3032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8144'.
[  934.037555][ T3062] netlink: 'syz.4.8153': attribute type 1 has an invalid length.
[  934.132080][ T3065] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8154'.
[  934.374086][ T3081] syzkaller0: entered promiscuous mode
[  934.379883][ T3087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8159'.
[  934.390846][ T3081] syzkaller0: entered allmulticast mode
[  934.810487][ T3105] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  935.234214][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8174'.
[  935.756678][ T3144] team0 (unregistering): Port device team_slave_0 removed
[  935.803291][ T3165] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8181'.
[  935.817624][ T3144] team0 (unregistering): Port device team_slave_1 removed
[  936.132411][ T3181] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8187'.
[  936.166560][ T3181] nbd: illegal input index -8454144
[  936.358236][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8189'.
[  936.477281][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8191'.
[  936.540230][ T3207] sctp: [Deprecated]: syz.6.8192 (pid 3207) Use of struct sctp_assoc_value in delayed_ack socket option.
[  936.540230][ T3207] Use struct sctp_sack_info instead
[  936.966710][ T3237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  936.987179][ T3237] syzkaller0: entered promiscuous mode
[  937.000845][ T3237] syzkaller0: entered allmulticast mode
[  937.062913][ T3237] tipc: Resetting bearer <eth:syzkaller0>
[  937.091422][ T3235] tipc: Resetting bearer <eth:syzkaller0>
[  937.113977][ T3235] tipc: Disabling bearer <eth:syzkaller0>
[  937.365717][ T5148] Bluetooth: hci2: command 0x0405 tx timeout
[  938.319004][ T3290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8214'.
[  938.422980][ T3297] lo: left promiscuous mode
[  938.430804][ T3297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  938.898931][ T3329] syzkaller0: entered promiscuous mode
[  938.905640][ T3329] syzkaller0: entered allmulticast mode
[  939.271287][ T3344] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  939.345658][ T3349] netlink: 'syz.1.8229': attribute type 1 has an invalid length.
[  939.362236][ T3350] sctp: [Deprecated]: syz.3.8227 (pid 3350) Use of int in max_burst socket option deprecated.
[  939.362236][ T3350] Use struct sctp_assoc_value instead
[  939.445381][ T5148] Bluetooth: hci2: command 0x0405 tx timeout
[  939.602158][ T3357] macvlan3: entered promiscuous mode
[  939.613681][ T3357] macvlan3: entered allmulticast mode
[  939.621197][ T3357] bond5: entered promiscuous mode
[  939.627900][ T3357] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  939.642454][ T3357] bond5: left promiscuous mode
[  939.706927][ T3367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8233'.
[  939.723248][ T3368] lo: entered allmulticast mode
[  939.733445][ T3368] lo: left allmulticast mode
[  939.860046][ T3377] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8236'.
[  940.154162][ T3402] netlink: 'syz.5.8244': attribute type 1 has an invalid length.
[  940.194971][ T3402] netlink: 'syz.5.8244': attribute type 4 has an invalid length.
[  940.229875][ T3402] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.8244'.
[  940.338692][ T3401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.452937][ T3420] geneve3: entered promiscuous mode
[  940.459160][ T3420] geneve3: entered allmulticast mode
[  940.545604][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8250'.
[  940.557315][ T3423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8250'.
[  940.637044][ T3430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8252'.
[  940.830454][ T3442] netlink: 'syz.5.8255': attribute type 21 has an invalid length.
[  940.840698][ T3442] openvswitch: netlink: Missing valid actions attribute.
[  940.860432][ T3442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  940.873070][ T3442] openvswitch: netlink: Missing valid actions attribute.
[  940.889498][ T3442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  941.081020][ T3461] xt_ecn: cannot match TCP bits for non-tcp packets
[  941.101177][ T3461] netlink: 576 bytes leftover after parsing attributes in process `syz.1.8259'.
[  941.337572][ T3504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.376076][ T3490] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8264'.
[  941.510148][ T3490] can: request_module (can-proto-5) failed.
[  941.574283][ T3536] xt_time: unknown flags 0xf4
[  941.677124][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8269'.
[  941.882787][ T3596] xt_hashlimit: invalid rate
[  942.505724][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.753033][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.183627][ T3643] ip6erspan1: entered promiscuous mode
[  943.189883][ T3647] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000
[  943.561154][ T3664] __nla_validate_parse: 8 callbacks suppressed
[  943.561174][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8291'.
[  943.896706][ T3684] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  944.160113][ T3653] clip:clip_setentry: non-CLIP VCC
[  944.240088][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8296'.
[  944.407812][ T3705] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  944.599058][ T3712] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  944.746508][ T3720] netlink: 'syz.3.8302': attribute type 2 has an invalid length.
[  944.762351][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'.
[  944.916447][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8306'.
[  944.936073][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8306'.
[  944.993579][ T3735] netlink: 'syz.4.8308': attribute type 10 has an invalid length.
[  945.016955][ T3728] bridge0: port 3(vlan4) entered blocking state
[  945.037183][ T3728] bridge0: port 3(vlan4) entered disabled state
[  945.044017][ T3728] vlan4: entered allmulticast mode
[  945.053467][ T3728] bridge0: entered allmulticast mode
[  945.065763][ T3728] vlan4: left allmulticast mode
[  945.070925][ T3728] bridge0: left allmulticast mode
[  945.173353][ T3738] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8308'.
[  945.312050][ T3745] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  945.416885][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8312'.
[  945.487545][ T3753] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8313'.
[  946.735665][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8330'.
[  946.748970][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8331'.
[  947.054830][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  947.059911][ T3833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.209499][ T3831] bond7: Removing last ns target with arp_interval on
[  947.596450][ T3852] x_tables: duplicate entry at hook 2
[  947.712436][ T3860] vxcan2: entered allmulticast mode
[  947.829694][ T3862] 8021q: adding VLAN 0 to HW filter on device bond4
[  947.855707][ T3866] netlink: 'syz.4.8348': attribute type 7 has an invalid length.
[  948.157798][ T3877] 
[  948.160292][ T3877] ======================================================
[  948.167359][ T3877] WARNING: possible circular locking dependency detected
[  948.174420][ T3877] syzkaller #0 Not tainted
[  948.178938][ T3877] ------------------------------------------------------
[  948.186046][ T3877] syz.6.8350/3877 is trying to acquire lock:
[  948.192039][ T3877] ffffffff8f425d98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  948.201494][ T3877] 
[  948.201494][ T3877] but task is already holding lock:
[  948.208963][ T3877] ffff88805a933f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  948.218304][ T3877] 
[  948.218304][ T3877] which lock already depends on the new lock.
[  948.218304][ T3877] 
[  948.229074][ T3877] 
[  948.229074][ T3877] the existing dependency chain (in reverse order) is:
[  948.238123][ T3877] 
[  948.238123][ T3877] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  948.246258][ T3877]        lock_acquire+0x120/0x360
[  948.251304][ T3877]        _raw_spin_lock_bh+0x36/0x50
[  948.256615][ T3877]        nr_rt_device_down+0x12a/0x720
[  948.262088][ T3877]        nr_device_event+0x137/0x150
[  948.267429][ T3877]        notifier_call_chain+0x1b6/0x3e0
[  948.273082][ T3877]        __dev_notify_flags+0x18d/0x2e0
[  948.278650][ T3877]        netif_change_flags+0xe8/0x1a0
[  948.284141][ T3877]        dev_change_flags+0x130/0x260
[  948.289634][ T3877]        dev_ioctl+0x7b4/0x1150
[  948.294510][ T3877]        sock_do_ioctl+0x22c/0x300
[  948.299652][ T3877]        sock_ioctl+0x576/0x790
[  948.304554][ T3877]        __se_sys_ioctl+0xfc/0x170
[  948.309693][ T3877]        do_syscall_64+0xfa/0xfa0
[  948.314742][ T3877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.321169][ T3877] 
[  948.321169][ T3877] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  948.329021][ T3877]        lock_acquire+0x120/0x360
[  948.334062][ T3877]        _raw_spin_lock_bh+0x36/0x50
[  948.339373][ T3877]        nr_rt_device_down+0xa9/0x720
[  948.344857][ T3877]        nr_device_event+0x137/0x150
[  948.350155][ T3877]        notifier_call_chain+0x1b6/0x3e0
[  948.355830][ T3877]        __dev_notify_flags+0x18d/0x2e0
[  948.361388][ T3877]        netif_change_flags+0xe8/0x1a0
[  948.366857][ T3877]        dev_change_flags+0x130/0x260
[  948.372248][ T3877]        dev_ioctl+0x7b4/0x1150
[  948.377162][ T3877]        sock_do_ioctl+0x22c/0x300
[  948.382303][ T3877]        sock_ioctl+0x576/0x790
[  948.387168][ T3877]        __se_sys_ioctl+0xfc/0x170
[  948.392300][ T3877]        do_syscall_64+0xfa/0xfa0
[  948.397346][ T3877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.403772][ T3877] 
[  948.403772][ T3877] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  948.411705][ T3877]        validate_chain+0xb9b/0x2140
[  948.417027][ T3877]        __lock_acquire+0xab9/0xd20
[  948.422257][ T3877]        lock_acquire+0x120/0x360
[  948.427304][ T3877]        _raw_spin_lock_bh+0x36/0x50
[  948.432620][ T3877]        nr_remove_neigh+0x25/0xe0
[  948.437752][ T3877]        nr_add_node+0x1d9f/0x2570
[  948.442880][ T3877]        nr_rt_ioctl+0xc12/0xd50
[  948.447831][ T3877]        sock_do_ioctl+0xdc/0x300
[  948.452869][ T3877]        sock_ioctl+0x576/0x790
[  948.457728][ T3877]        __se_sys_ioctl+0xfc/0x170
[  948.462942][ T3877]        do_syscall_64+0xfa/0xfa0
[  948.468009][ T3877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.474433][ T3877] 
[  948.474433][ T3877] other info that might help us debug this:
[  948.474433][ T3877] 
[  948.484694][ T3877] Chain exists of:
[  948.484694][ T3877]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  948.484694][ T3877] 
[  948.498607][ T3877]  Possible unsafe locking scenario:
[  948.498607][ T3877] 
[  948.506112][ T3877]        CPU0                    CPU1
[  948.511528][ T3877]        ----                    ----
[  948.516901][ T3877]   lock(&nr_node->node_lock);
[  948.521680][ T3877]                                lock(nr_node_list_lock);
[  948.528795][ T3877]                                lock(&nr_node->node_lock);
[  948.536090][ T3877]   lock(nr_neigh_list_lock);
[  948.540779][ T3877] 
[  948.540779][ T3877]  *** DEADLOCK ***
[  948.540779][ T3877] 
[  948.548927][ T3877] 1 lock held by syz.6.8350/3877:
[  948.553973][ T3877]  #0: ffff88805a933f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  948.563754][ T3877] 
[  948.563754][ T3877] stack backtrace:
[  948.569726][ T3877] CPU: 0 UID: 0 PID: 3877 Comm: syz.6.8350 Not tainted syzkaller #0 PREEMPT(full) 
[  948.569751][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  948.569764][ T3877] Call Trace:
[  948.569773][ T3877]  <TASK>
[  948.569784][ T3877]  dump_stack_lvl+0x189/0x250
[  948.569817][ T3877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  948.569843][ T3877]  ? __pfx__printk+0x10/0x10
[  948.569861][ T3877]  ? stack_trace_save+0x9c/0xe0
[  948.569893][ T3877]  print_circular_bug+0x2ee/0x310
[  948.569919][ T3877]  check_noncircular+0x134/0x160
[  948.569944][ T3877]  validate_chain+0xb9b/0x2140
[  948.569976][ T3877]  __lock_acquire+0xab9/0xd20
[  948.569996][ T3877]  ? nr_remove_neigh+0x25/0xe0
[  948.570019][ T3877]  lock_acquire+0x120/0x360
[  948.570035][ T3877]  ? nr_remove_neigh+0x25/0xe0
[  948.570061][ T3877]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  948.570086][ T3877]  ? nr_remove_neigh+0x25/0xe0
[  948.570108][ T3877]  _raw_spin_lock_bh+0x36/0x50
[  948.570131][ T3877]  ? nr_remove_neigh+0x25/0xe0
[  948.570173][ T3877]  nr_remove_neigh+0x25/0xe0
[  948.570198][ T3877]  nr_add_node+0x1d9f/0x2570
[  948.570228][ T3877]  ? dev_get_by_name+0x21/0x200
[  948.570251][ T3877]  ? dev_get_by_name+0x21/0x200
[  948.570271][ T3877]  ? dev_get_by_name+0x21/0x200
[  948.570292][ T3877]  ? nr_call_to_digi+0x136/0x1b0
[  948.570314][ T3877]  nr_rt_ioctl+0xc12/0xd50
[  948.570342][ T3877]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  948.570363][ T3877]  ? lockdep_hardirqs_on+0x9c/0x150
[  948.570395][ T3877]  ? apparmor_capable+0x137/0x1b0
[  948.570421][ T3877]  ? capable+0x89/0xe0
[  948.570440][ T3877]  ? nr_ioctl+0x1b1/0x3b0
[  948.570458][ T3877]  sock_do_ioctl+0xdc/0x300
[  948.570484][ T3877]  ? __pfx_sock_do_ioctl+0x10/0x10
[  948.570514][ T3877]  sock_ioctl+0x576/0x790
[  948.570536][ T3877]  ? __pfx_sock_ioctl+0x10/0x10
[  948.570560][ T3877]  ? __fget_files+0x3a0/0x420
[  948.570576][ T3877]  ? __fget_files+0x2a/0x420
[  948.570594][ T3877]  ? bpf_lsm_file_ioctl+0x9/0x20
[  948.570615][ T3877]  ? __pfx_sock_ioctl+0x10/0x10
[  948.570636][ T3877]  __se_sys_ioctl+0xfc/0x170
[  948.570660][ T3877]  do_syscall_64+0xfa/0xfa0
[  948.570686][ T3877]  ? lockdep_hardirqs_on+0x9c/0x150
[  948.570710][ T3877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.570728][ T3877]  ? clear_bhb_loop+0x60/0xb0
[  948.570749][ T3877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.570768][ T3877] RIP: 0033:0x7fd0f518efc9
[  948.570787][ T3877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  948.570804][ T3877] RSP: 002b:00007fd0f5fb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  948.570825][ T3877] RAX: ffffffffffffffda RBX: 00007fd0f53e6090 RCX: 00007fd0f518efc9
[  948.570839][ T3877] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000d
[  948.570852][ T3877] RBP: 00007fd0f5211f91 R08: 0000000000000000 R09: 0000000000000000
[  948.570864][ T3877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  948.570875][ T3877] R13: 00007fd0f53e6128 R14: 00007fd0f53e6090 R15: 00007ffdccd9ba78
[  948.570898][ T3877]  </TASK>
[  952.645142][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  955.205542][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog