last executing test programs:

34.496721862s ago: executing program 4 (id=3412):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0xd}]}, 0x18}], 0x1}, 0x0)

33.788973216s ago: executing program 4 (id=3418):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x111}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040091}, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'wg1\x00', 0x2})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@private0, <r2=>0x0}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x7, 0x80, 0xc00, 0x81, {{0x27, 0x4, 0x0, 0x3, 0x9c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@generic={0x88, 0xb, "62daca792fc3c16210"}, @timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x782b}, {@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8}, {@broadcast}]}, @timestamp={0x44, 0x10, 0xbb, 0x0, 0x0, [0x1, 0xfffffffc, 0x4]}, @noop, @timestamp_prespec={0x44, 0x44, 0x9c, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@local, 0x3}, {@broadcast, 0xd52}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x913}, {@empty, 0x3}, {@loopback, 0x3518}, {@local, 0x7fff}, {@multicast2, 0x1}]}, @rr={0x7, 0x3, 0x1e}]}}}}})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000340)={'veth1_to_hsr\x00'})
r4 = accept4(r3, &(0x7f0000000380)=@sco={0x1f, @fixed}, &(0x7f0000000400)=0x80, 0x80800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000440)={<r5=>0x0, @in6={{0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00', 0x8}}, [0x0, 0x2, 0x4, 0xe9, 0x9, 0x400, 0x0, 0x1000, 0x18000, 0xb, 0x7fffffff, 0x10001, 0x2, 0xdb]}, &(0x7f0000000540)=0x100)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000580)={r5, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x200, 0x8, 0x5, 0x7, 0x5}, &(0x7f0000000640)=0x98)
getsockname$ax25(0xffffffffffffffff, &(0x7f0000000680)={{}, [@null, @netrom, @netrom, @remote, @remote, @remote, @default, @default]}, &(0x7f0000000700)=0x48)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000740)="3ec456202c14341d11859e8f2e548c079a11f1054b7069e0c8bbca0c5c3cd000ef6e2a45cc8b7403fa3609d58de804e7f09d9b6633c8e88cddbba8948785d499f0ee9afaa890222492e968b86c372f3bcc3e603e7a4be8fa4f5dd2592688c00595620c863c1fb7108df7a45844d24ff723181964d23064b8df600be77e580e0ed75070e13a63bfaa97c101ec7b48eab8c6f720f960e1c6eff078eedae6b6db34f9c11a6be762de9dca60025def2b0cb840cc905d2c44624133f32a38ad82bdaee8ddcd284d5968120d621a24c2bca8e33fbb32d74e2e0c2c", 0xd8)
ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000840)=0x5)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000880)={'filter\x00', 0x0, 0x0, 0x0, [0x80000000, 0xffffffffffffff23, 0x9, 0x4, 0x3, 0x2]}, &(0x7f0000000900)=0x78)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r7 = accept4(r6, &(0x7f0000000940)=@pppoe, &(0x7f00000009c0)=0x80, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r8, &(0x7f0000000a80)="1d7a8e4107266f24575f7145628314c4efec0ce3c5a8498ecc846b152434b4d603df016d", &(0x7f0000000ac0)=@udp6=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c80)={r8, &(0x7f0000000b40)="f943acd4680a5269bf8d33059041f259d27976f19e9d5b73b5d9683c39a8b21827805d65223fda957d92053544400491631e8497c582fc2ff4b07fc9f78b7730e6526e87e8567047", &(0x7f0000000bc0)=""/192}, 0x20)
setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000cc0)='filter\x00', 0x7)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x10, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x47c}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x914, 0x5e, &(0x7f0000000e00)=""/94, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x5, 0xc, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[r8, r8, r8, r8, r8], &(0x7f0000000f00)=[{0x5, 0x2, 0x8, 0xb}, {0x4, 0x4, 0x4, 0x8}, {0x3, 0x5, 0xd, 0x3}, {0x4, 0x4, 0x5, 0x8}], 0x10, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000d00)='mmap_lock_acquire_returned\x00', r9, 0x0, 0x8000}, 0x18)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001040)={'ip6gretap0\x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x94, r11, 0x308, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0xcb1, 0x6]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xd]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x634}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0xa6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xea80}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x20004004)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000002380)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/201, 0xc9, 0x1, &(0x7f0000001380)=""/4096, 0x1000}, &(0x7f00000023c0)=0x40)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f0000002440)={0xac, r11, 0xa20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7f, 0x5b}}}}, [@NL80211_ATTR_IE={0x3c, 0x2a, [@mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0xb6, 0x2}}, @mic={0x8c, 0x10, {0x1b9, "0df988f37008", @short="cb6d7acf9003c6bd"}}, @ibss={0x6, 0x2, 0x7}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x1c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x84, 0xc}}, @gcr_ga={0xbd, 0x6}, @supported_rates, @mesh_chsw={0x76, 0x6, {0x5, 0xe, 0x25, 0x1}}]}, @NL80211_ATTR_SSID={0xb, 0x34, @random="0a74a9ee50d342"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000}, 0x4001)

31.517348479s ago: executing program 4 (id=3428):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r0, &(0x7f0000003cc0)=[{{&(0x7f0000001280)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null]}, 0x80, 0x0}}], 0x1, 0x80)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0)

31.349852937s ago: executing program 4 (id=3432):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601021c00000000000000070000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x2d, 0xff, 0xf}, 0x2c)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x554d}, 0x8)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00))
recvmmsg(r5, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x4800000}], 0x1, 0x10163, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x3c, r2, 0x8, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x8e}, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000002060500000000000a0000000000000005000400050000000900020073797a3200000010050001000700000005000500000000000d0003006c6973743a73657400000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000009500"/24], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r9, 0x700, 0x7, 0x9, 0x24a, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@generic={0x88, 0xd, "d36c678be2480ff5905be2"}, @end]}}}}})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0)

30.813525354s ago: executing program 4 (id=3442):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x7fffffff, 0x401, 0x6}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x54, &(0x7f0000000100), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010000040000000000000400008004006f76"], 0x18}], 0x1}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)

30.533068211s ago: executing program 4 (id=3446):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061779a9a430000160f00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

30.075913192s ago: executing program 32 (id=3446):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061779a9a430000160f00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

2.437260407s ago: executing program 3 (id=3834):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0)

2.352709765s ago: executing program 3 (id=3837):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
close(0x3)
socket(0x2000000000000021, 0x2, 0x10000000000002)
recvmmsg$unix(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031521000400000014000acd0b0001006970766c616e000004fd07964700028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.498433832s ago: executing program 1 (id=3852):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c15c0f96b5595d7b022a11cca741d0b8", @ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf25020000000900010073797a3100000000140002006772653000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@broadcast}, {@private}, {@dev}, {@empty}]}})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0)
r12 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f00000008c0), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$l2tp6(0xa, 0x2, 0x73)
r13 = socket$l2tp6(0xa, 0x2, 0x73)
close(r13)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000)

1.376663807s ago: executing program 3 (id=3855):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000003c0)=0x3, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@local, @in6=@mcast1, 0x4e23, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0x20, 0x2f, r1, r2}, {0x6, 0x7, 0x1, 0x10e, 0x0, 0x80000001, 0xd}, {0x1, 0x9, 0xa2b0, 0x2}, 0x6, 0x6e6bb5, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, 0x2, @in=@private=0xa010100, 0x0, 0x3, 0x1, 0x75, 0x7, 0x101, 0x1}}, 0xe8)
r3 = socket$inet(0x2, 0x802, 0x1)
write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0xc, 0x0, 0x100c, 0x1}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x27)

1.271885543s ago: executing program 1 (id=3858):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000040)={0x1, 0x1f})
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000040)={0x1, 0x1f}) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async)
socket$inet(0x2, 0x1, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x321) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) (async)

1.177299688s ago: executing program 3 (id=3859):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20040600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5053, 0x3, 0xfe9})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
unshare(0x20040600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) (async)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x5053, 0x3, 0xfe9}) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async)

1.130581664s ago: executing program 0 (id=3860):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r1=>0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0)
r3 = socket(0x15, 0x80000, 0x0)
getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000))
setsockopt$inet6_int(r3, 0x29, 0xc8, 0x0, 0x0)
sendto(r0, &(0x7f0000000000)="bdbde34c8b178cb3f5ca5ebb9918d3a8788122cd47d2690d659b5f505b116d95fd8d7b19849bff82ba4a9a96d8ba491e0ca564b985905fea65d8c7cdd3c0d84abf913c62ba1fbaff3502ae339755c812480076a4f090c95ed0c0ccbd953a7a54fdaaab1bb9a1e62312146a866c", 0x6d, 0x801, &(0x7f00000000c0)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x4, 0xe0, 0x81, "a387461ee3a0e405d0414368d4f74a9c89d77b4a5d11a581d51455fad0de9ad0c3dafc88cd78bc5340de243837774f8a2d0f3b4fdd1610309aaf372bbf6607", 0x39}, 0x80)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x68, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002fa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x18)
r9 = socket(0x22, 0x2, 0x2)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r12 = openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
readv(r12, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffff00000000fdffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000200000018120000", @ANYRES32=r13, @ANYBLOB="000000000000b6c4a29c8f85c6ce04b0b4d0484e00002db703000053f9c9aed8668370319500000000850c00000000000000000095000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r13, @ANYRES16=r10], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f0000000400))

1.073469227s ago: executing program 2 (id=3861):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000a0022e23c8aa51d2100aef5710500"/28], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94) (async, rerun: 64)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2}, 0x6) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000100)={0x11, 0x11, r7, 0x1, 0x65, 0x6, @random="e941890b0fdb"}, 0x14)

1.008865342s ago: executing program 3 (id=3862):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x8000) (async)
syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa3a}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}}, 0x0)

1.001587916s ago: executing program 5 (id=3863):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x4e, &(0x7f0000000500), 0x10, 0x0, 0x5c}, 0x20008080)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5421, &(0x7f00000003c0)=0x3d49)
read$alg(r2, &(0x7f0000000140)=""/116, 0x74)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000010400006e2d0ac8bdb46f0572000000000000000000000000bf000000000000009500"/57], &(0x7f0000000000)='GPL\x00', 0x8}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18410000ffffffff00000000005923000500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRESDEC=r5, @ANYRES64, @ANYBLOB="0800a000fe08000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b80)={'gre0\x00', 0x0, 0x7800, 0x700, 0x9, 0x7, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x64, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
shutdown(r9, 0x1)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r13, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)

880.599557ms ago: executing program 2 (id=3864):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="54a200000206030000000000000000000000000010000300686173682a6a702c6d6163000900020073797a31000000000c0007800800064000000009050005000200000005000400000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)

880.051321ms ago: executing program 0 (id=3865):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

878.918943ms ago: executing program 1 (id=3866):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="c77692e7751e997fb77d3944ffeb3fdb7ad7f2f58e43000deee724e43a8ae00322c008c8f18557b0fcbf6b4b74466ea44ee8b179e27720e8c3e1299280434cf284936912e0ccc53b9bfe532967681825fe57ce175ad10b68844fe17b5e021783", 0x60}], 0x1, 0x80000000, 0x7fffffff)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000104730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0xf, 0x0, &(0x7f00000000c0)) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00010000ac0000002c0012800b000100697036746e6c00001c000280050004000300000008001400080000000800070000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001})

761.469995ms ago: executing program 2 (id=3867):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
socket(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x50)
socket$packet(0x11, 0x3, 0x300) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket(0x28, 0x5, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async)
connect(r2, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x9, 0x9, "bc073ad2f21fac9b0d1b186a0dde95cf784cfb265749ba010b83fc41781f9cdaa2e5aacdd6bcfadcb017ff600fb2ccd0446a3e7c184f6fd6553b5969c994c5", 0x6}, 0x80) (async)
pipe(&(0x7f0000000000)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000)

723.323454ms ago: executing program 5 (id=3868):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x9}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x20040894)

709.258756ms ago: executing program 0 (id=3869):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4040)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000041)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x55}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x8006)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf0, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x316}], @NL80211_ATTR_MAC={0xa, 0x6, @random="f95512cd0a41"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bbc5d63565f94d755ee45cec7c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cca5bd2fb4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd55e1fdfa"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24008814}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r4, 0x220, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4e}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa4, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa9e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x4)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, 0x0, 0x3e6bc02d814772c2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040)
shutdown(r0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x110, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}}, {0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x3a, 0x1, "a25dc1f1b7427330003566265eb513d0270b9d5c0574851f0b2c0cc043595b2c1a76043d818c2136f8ca6f2bcfe80eb98be2700f1e99"}}, {0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9f, 0x1, "884294efd2c6c17da87367435e3001ab8cf99eb4eab2f46693dfdfba0f349917e8cf283b0b820977a5417154a4dcbf90dc79fc68132a752e974399e9e1c0e253d918b2dab6c6fbe20c20d9e18aa92e81090eaec646e741130910a7ce538257648a54a25cc6f074c785950dd7ea1030f21d84ad8e467562f2b039c604b1986efe04cf86c35e1a15e23ff7d1ec77eb2ca02eafa084be424e4ca06c6f"}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4004040)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='devices.list\x00', 0x0, 0x0)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001280), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x54, r12, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xaf3, 0x80000000, 0x4, 0x2, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x55}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044040)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r11)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f00000015c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x124, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f0000001640)=<r14=>0x0, &(0x7f0000001680)=0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001a00)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000017c0)={0x1f4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8000}, 0x44044)

625.41762ms ago: executing program 1 (id=3870):
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x38}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x38}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20c01}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20c01}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2)
syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10)

618.084745ms ago: executing program 2 (id=3871):
socket(0x40000000015, 0x5, 0x3) (async)
r0 = socket(0x40000000015, 0x5, 0x3)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYBLOB="16c8127438eb43296cd1d48d1150ff3ab8ffe8", @ANYRES32=0x0, @ANYBLOB="d031d52828d12e15d5dcf35cb2bc9cc76cc505f5a39a9f4849070288ac7b7d9248f1e643303cdc371db98da36e90f4faeb4bdde4884e9b39cb6032f78e5616e0a3a1acd0c5d27a158e7c2d9fea7f8094d06bcd991940bfd066d6304c5279484f9bff4f54ff90bf068db1f351f3586c91f893f7a20e16befa5cf766926263d831c0e6171b2259ac780317743f924635e944cc115f2132c51382448c8533507b332f3ef6464e93b1571b387d65b56a5cad4603ee372aff8fac0d90e90000b28a2b", @ANYBLOB="08000d000000000008000400080008"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10)

602.09259ms ago: executing program 5 (id=3872):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000200), 0x4)
socket$inet(0xa, 0x801, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000700)={r6}, &(0x7f0000000740)=0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003f000701feffffff00000000037c000004004280140001801000108004000b"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0)

521.549662ms ago: executing program 0 (id=3873):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, 0x8)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x500}}], 0x2, 0x0)

520.902252ms ago: executing program 1 (id=3874):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000600))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0xf, 0x1, 0xfff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@fallback=r2, r2, 0x2f, 0x0, 0x0, @void, @value, @void, @void, r3}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

476.205741ms ago: executing program 2 (id=3875):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtclass={0xd4, 0x28, 0x500, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0x3}, {0xa, 0x9}, {0x0, 0xfff5}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x3, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xee0, 0xd0e67cb}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x40}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6f}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_LMAX={0x8, 0x2, 0xd313}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0xd4}}, 0x20048098)
sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000280)="7116258bebc8e2b9cd2083c272dd9a336b04530b0b", 0x15}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000400))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={<r3=>r0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdde4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r4}, 0x4)
close(r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x4028094)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000840)={0x101, 0x8, 0x10000000, 0x3}, 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000008c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
accept4$unix(r7, &(0x7f0000000900), &(0x7f0000000980)=0x6e, 0xc0000)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000009c0)=""/32, 0x20, 0x40000000, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
bind$802154_dgram(r3, &(0x7f0000000b00)={0x24, @none={0x0, 0x1}}, 0x14)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r7)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2200040d}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r9, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008081)
r10 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'\x00', <r11=>0x0})
connect$packet(r3, &(0x7f0000000cc0)={0x11, 0x17, r11, 0x1, 0x5, 0x6, @broadcast}, 0x14)
getpeername$inet(r3, &(0x7f0000000d00)={0x2, 0x0, @local}, &(0x7f0000000d40)=0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000dc0)={'wg0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40600000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf4, r9, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x20004800)

452.765147ms ago: executing program 5 (id=3876):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e22, @private=0xa810100}, 0x10, 0x0}, 0x24044041)

257.459285ms ago: executing program 0 (id=3877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="73619454b396dea70e00", @ANYRES32=<r1=>0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000300016802c00018028000100ffff"], 0x68}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES8=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0)

257.195005ms ago: executing program 5 (id=3878):
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "31e8ddc76a8cf6d8cbcb41c68b6660d12b22c62bb15e0b17c8bd5a1a8baddbd2b3c06e968960a30a59337d70ea6629283891a8d008e806e8ab2292176c77f4559b634102fc42ff105087e0c24a54f4af1d9d76611814a22abb3104cd9b354ab6aea895e194ca92f7620789b5f3d944f29279f3cdbce54478c01f11dcbdc77d04ac961c1f392b2136376281f3eafa563d45d5230e4e88349a83853c6367236d3d02e0f489f911ab42a80afa847e1bd2c3f29e42b6ed3566b304b652c7a56002019594c6147fe729d88278698f32a3e409847c336ae0210328ea135d83ea1195d2d8d757dd404e4fb0aaac0989ecd8e5157b4d64db19af0eadcb"}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x24, 0xc, "1e75d0da693633fa1eddfbc6be6a411543a1e29eba4b1db8a4ac3917205674d5"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x164b6e8d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4cdeae4e}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}], {0x14}}, 0x228}, 0x1, 0x0, 0x0, 0x4}, 0x5)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x0, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x60}}, 0x0)

124.817696ms ago: executing program 5 (id=3879):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)

114.729089ms ago: executing program 1 (id=3880):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r13, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

1.255462ms ago: executing program 0 (id=3881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001900010000000000000000001d01000015000200000000000000000089543896f10eee1e0200000008000e00", @ANYRES32=0x0, @ANYBLOB="0800050002002000c4784bee040fe54020cc3c60491708d539ccd28ff7b38d681908414fd7e3023739a4901eca72388921b0fc123a18d416780585943cd3a199b2a66eec103232b6421b38cb9cb286fb0561582719015ba8717bff654af386f3df87e91cf7ba4a98575fce4bba3bcf1ed225c05412d712a95bbc4f0c4cf7db74a57a1334950f0a3fd273c84118e02d7a8bceded073ff918f4781404d5cb3cdafc93c9d6f6ae78de760fb12dcb8e1f10f81b1d7d2fbb96427fae671f9816df44614e9a6919a88f0ae"], 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x102084}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e59788b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa77a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2800}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa70}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c6e8e2bc96affdaca98c038a7636f02504ac4781010d1ed799cb4d4f2aeeb0f77dd446b9"}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x37}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc01}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x20010)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001900010000000000000000001d01000015000200000000000000000089543896f10eee1e0200000008000e00", @ANYRES32=0x0, @ANYBLOB="0800050002002000c4784bee040fe54020cc3c60491708d539ccd28ff7b38d681908414fd7e3023739a4901eca72388921b0fc123a18d416780585943cd3a199b2a66eec103232b6421b38cb9cb286fb0561582719015ba8717bff654af386f3df87e91cf7ba4a98575fce4bba3bcf1ed225c05412d712a95bbc4f0c4cf7db74a57a1334950f0a3fd273c84118e02d7a8bceded073ff918f4781404d5cb3cdafc93c9d6f6ae78de760fb12dcb8e1f10f81b1d7d2fbb96427fae671f9816df44614e9a6919a88f0ae"], 0x3c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x102084}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e59788b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa77a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2800}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa70}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c6e8e2bc96affdaca98c038a7636f02504ac4781010d1ed799cb4d4f2aeeb0f77dd446b9"}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x37}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc01}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000004}, 0x20010) (async)

548.663µs ago: executing program 2 (id=3882):
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x128, 0x1403, 0x2, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x200008c0}, 0x44)

0s ago: executing program 3 (id=3883):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
listen(r0, 0x3)
r7 = socket$inet(0x2, 0xa, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1000}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

total queues is 0
[  347.380058][T14110] geneve3: entered promiscuous mode
[  347.405429][T14110] geneve3: entered allmulticast mode
[  347.430537][T11510] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  347.444112][T11510] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  347.478848][T11510] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  347.519119][T11510] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  348.140994][T14144] __nla_validate_parse: 4 callbacks suppressed
[  348.141013][T14144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2231'.
[  349.376198][T14204] bond7: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  349.437036][T14220] ieee802154 phy0 wpan0: encryption failed: -22
[  349.531913][T14222] netlink: 'syz.0.2249': attribute type 1 has an invalid length.
[  349.652477][T14222] 8021q: adding VLAN 0 to HW filter on device bond4
[  349.689751][T14223] 8021q: adding VLAN 0 to HW filter on device bond4
[  349.697886][T14223] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  349.717005][T14223] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  350.011580][T14248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2254'.
[  350.055744][T14248] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2254'.
[  350.202042][T14266] netlink: 'syz.1.2256': attribute type 10 has an invalid length.
[  350.262847][T14268] netlink: 'syz.1.2256': attribute type 10 has an invalid length.
[  350.343674][T14268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2256'.
[  350.414176][T14268] batadv0: entered allmulticast mode
[  350.444001][T14268] bond0: (slave batadv0): Releasing backup interface
[  350.502522][T14268] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  350.613961][T14277] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2260'.
[  350.926442][T14289] delete_channel: no stack
[  350.933271][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2266'.
[  350.955273][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2266'.
[  351.041805][T14297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2268'.
[  351.052124][T14297] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2268'.
[  351.063727][T14297] netlink: 'syz.4.2268': attribute type 6 has an invalid length.
[  351.072257][T14297] netlink: 'syz.4.2268': attribute type 5 has an invalid length.
[  351.094485][T14297] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2268'.
[  351.487210][T14330] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  351.615246][T14340] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  351.643490][T14337] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  351.833739][T14344] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  351.867460][T14344] bond7 (unregistering): Released all slaves
[  351.966591][T14355] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.182773][T14369] x_tables: duplicate underflow at hook 1
[  352.443009][T14382] netlink: 'syz.2.2292': attribute type 1 has an invalid length.
[  352.577432][T14382] bond8: entered promiscuous mode
[  352.603046][T14382] bond8: entered allmulticast mode
[  352.631787][T14382] 8021q: adding VLAN 0 to HW filter on device bond8
[  352.702931][T14388] gretap1: entered promiscuous mode
[  352.719724][T14388] bond8: (slave gretap1): making interface the new active one
[  352.728078][T14388] gretap1: entered allmulticast mode
[  352.748478][T14388] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  353.201238][T14424] pimreg: entered allmulticast mode
[  353.669552][T14458] __nla_validate_parse: 5 callbacks suppressed
[  353.669573][T14458] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2316'.
[  353.731408][T14461] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  353.748168][T14462] netlink: 'syz.2.2315': attribute type 1 has an invalid length.
[  353.758324][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'.
[  353.796141][T14466] bond10: (slave gretap4): making interface the new active one
[  353.804706][T14466] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  353.830246][T14465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2318'.
[  353.893729][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'.
[  353.913698][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'.
[  353.926973][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2320'.
[  354.355424][T14496] netlink: 'syz.1.2328': attribute type 9 has an invalid length.
[  354.379943][T14496] netlink: 'syz.1.2328': attribute type 6 has an invalid length.
[  354.636766][T14506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.654438][T14506] syzkaller0: entered promiscuous mode
[  354.678562][T14506] syzkaller0: entered allmulticast mode
[  354.745166][T14506] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  354.767501][T14506] tipc: Resetting bearer <eth:syzkaller0>
[  354.788956][T14505] tipc: Resetting bearer <eth:syzkaller0>
[  354.808097][T14505] tipc: Disabling bearer <eth:syzkaller0>
[  354.973437][T14533] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2341'.
[  354.995767][T14535] Unsupported ieee802154 address type: 0
[  355.005864][T14533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.160598][T12486] IPVS: starting estimator thread 0...
[  355.256310][T14544] IPVS: using max 27 ests per chain, 64800 per kthread
[  355.396060][T14556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2350'.
[  355.418967][T14556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2350'.
[  355.710232][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'.
[  356.386137][T14617] netlink: 'syz.1.2363': attribute type 1 has an invalid length.
[  356.419567][T14617] 8021q: adding VLAN 0 to HW filter on device bond11
[  356.909740][T14641] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  356.921947][T14652] netlink: 'syz.0.2372': attribute type 10 has an invalid length.
[  356.955913][T14656] netlink: 'syz.4.2371': attribute type 1 has an invalid length.
[  356.963901][T14656] netlink: 'syz.4.2371': attribute type 3 has an invalid length.
[  357.030679][T14652] xt_cgroup: invalid path, errno=-2
[  357.163892][T14661] netlink: 'syz.3.2373': attribute type 12 has an invalid length.
[  357.313494][T14661] bond7: option primary_reselect: invalid value (255)
[  357.337867][T14661] bond7 (unregistering): Released all slaves
[  357.348862][T14671] No such timeout policy "syz1"
[  357.549653][T14683] chnl_net:caif_netlink_parms(): no params data found
[  357.809474][T14698] netlink: 'syz.3.2386': attribute type 9 has an invalid length.
[  357.851113][T14703] netlink: 'syz.1.2388': attribute type 10 has an invalid length.
[  357.867503][T14703] batadv0: left promiscuous mode
[  357.874413][T14703] batadv0: left allmulticast mode
[  357.890505][T14703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.907485][T14703] batadv0: entered promiscuous mode
[  357.913733][T14703] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  357.919663][T14709] netlink: 'syz.1.2388': attribute type 10 has an invalid length.
[  357.998572][T14709] batadv0: entered allmulticast mode
[  358.036364][T14715] netlink: 'syz.3.2390': attribute type 23 has an invalid length.
[  358.053158][T14709] bond0: (slave batadv0): Releasing backup interface
[  358.110582][T14709] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  358.646144][T14747] netlink: 'syz.3.2397': attribute type 1 has an invalid length.
[  358.669734][T14748] bridge6: the hash_elasticity option has been deprecated and is always 16
[  358.729775][T14751] __nla_validate_parse: 10 callbacks suppressed
[  358.729795][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2397'.
[  358.760408][T14747] 8021q: adding VLAN 0 to HW filter on device bond7
[  361.088255][T14798] syzkaller1: entered promiscuous mode
[  361.106559][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2411'.
[  361.135158][T14798] syzkaller1: entered allmulticast mode
[  361.137278][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'.
[  361.346324][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'.
[  361.440119][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'.
[  361.562212][T14826] validate_nla: 2 callbacks suppressed
[  361.562233][T14826] netlink: 'syz.4.2418': attribute type 7 has an invalid length.
[  361.575759][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'.
[  361.808746][T14834] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  361.823514][T14834] bond5 (unregistering): Released all slaves
[  362.226410][T14857] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  362.317961][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2427'.
[  362.335519][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'.
[  362.370108][T14851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.516587][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2427'.
[  362.715652][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'.
[  362.840543][T14847] tipc: Disabling bearer <eth:syzkaller0>
[  363.286039][T14914] netlink: 'syz.2.2440': attribute type 1 has an invalid length.
[  363.491945][T14931] netlink: 'syz.1.2446': attribute type 2 has an invalid length.
[  363.807788][T14952] __nla_validate_parse: 3 callbacks suppressed
[  363.807811][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'.
[  363.825137][T14954] netlink: 'syz.3.2451': attribute type 3 has an invalid length.
[  363.836295][T14953] syzkaller0: entered promiscuous mode
[  363.841898][T14953] syzkaller0: entered allmulticast mode
[  363.845926][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'.
[  363.848557][T14954] openvswitch: netlink: IP tunnel dst address not specified
[  363.880561][T14958] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.923533][T14957] tipc: Enabled bearer <ib:caif0>, priority 15
[  364.513949][T14983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.537000][T14983] syzkaller1: entered promiscuous mode
[  364.551685][T14983] syzkaller1: entered allmulticast mode
[  364.820057][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2464'.
[  365.113785][T15016] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2466'.
[  365.156198][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  365.397200][T15032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2474'.
[  365.507779][T15032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.515586][T15032] syzkaller0: entered promiscuous mode
[  365.521114][T15032] syzkaller0: entered allmulticast mode
[  365.638530][T15041] lo speed is unknown, defaulting to 1000
[  365.645802][T15032] tipc: Resetting bearer <eth:syzkaller0>
[  365.675379][T15027] tipc: Resetting bearer <eth:syzkaller0>
[  365.772469][T15027] tipc: Disabling bearer <eth:syzkaller0>
[  365.956999][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'.
[  365.995125][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'.
[  366.084736][T15054] netlink: 'syz.0.2479': attribute type 12 has an invalid length.
[  366.104696][T15054] netlink: 'syz.0.2479': attribute type 11 has an invalid length.
[  366.385264][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'.
[  366.430686][T15082] delete_channel: no stack
[  366.443387][T15078] 8021q: adding VLAN 0 to HW filter on device bond8
[  366.740864][T15104] netlink: 'syz.3.2491': attribute type 1 has an invalid length.
[  366.891262][T15104] 8021q: adding VLAN 0 to HW filter on device bond9
[  366.943858][T15116] netlink: 'syz.1.2494': attribute type 4 has an invalid length.
[  366.952789][T15117] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2493'.
[  367.260413][T15041] wg1 speed is unknown, defaulting to 1000
[  367.363338][T15131] netlink: 'syz.4.2499': attribute type 83 has an invalid length.
[  367.531310][T15141] netlink: 'syz.1.2500': attribute type 1 has an invalid length.
[  367.604290][T15145] netlink: 'syz.0.2501': attribute type 5 has an invalid length.
[  368.059754][T15159] xt_hashlimit: size too large, truncated to 1048576
[  368.670680][T15177] xt_l2tp: missing protocol rule (udp|l2tpip)
[  368.948759][T15187] __nla_validate_parse: 1 callbacks suppressed
[  368.948778][T15187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2514'.
[  369.015985][T15187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2514'.
[  369.242392][T15206] netlink: 'syz.4.2521': attribute type 11 has an invalid length.
[  369.253244][T15206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2521'.
[  369.381969][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'.
[  369.646130][T15240] netlink: 'syz.4.2529': attribute type 11 has an invalid length.
[  369.654009][T15240] netlink: 'syz.4.2529': attribute type 4 has an invalid length.
[  369.674895][T15240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2529'.
[  369.768032][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'.
[  369.798632][T15250] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  369.810923][T15252] netlink: 'syz.3.2532': attribute type 10 has an invalid length.
[  370.004171][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'.
[  370.123983][T15260] vlan2: entered allmulticast mode
[  370.156429][T15260] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  370.370383][T15277] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  370.380918][T15277] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2541'.
[  370.415077][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'.
[  370.462029][T15278] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  370.493125][T15278] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2541'.
[  370.849923][T15299] netlink: 'syz.2.2548': attribute type 28 has an invalid length.
[  370.874135][T15304] xt_ecn: cannot match TCP bits for non-tcp packets
[  371.235200][T15329] IPVS: set_ctl: invalid protocol: 9856 0.32.0.0:2086
[  372.268664][T15359] bridge_slave_1: left allmulticast mode
[  372.274397][T15359] bridge_slave_1: left promiscuous mode
[  372.280690][T15359] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.303742][T15359] bridge_slave_0: left allmulticast mode
[  372.319374][T15359] bridge_slave_0: left promiscuous mode
[  372.336898][T15359] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.466133][T15373] bond5: (slave gretap1): making interface the new active one
[  372.511626][T15373] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  372.569953][T15390] macvtap1: entered promiscuous mode
[  372.575735][T15390] macvtap1: entered allmulticast mode
[  372.816031][T15404] wg2: entered promiscuous mode
[  372.821924][T15404] wg2: entered allmulticast mode
[  373.024444][T15418] bridge0: port 1(batadv0) entered blocking state
[  373.058683][T15418] bridge0: port 1(batadv0) entered disabled state
[  373.081230][T15418] batadv0: entered allmulticast mode
[  373.134525][T15418] batadv0: entered promiscuous mode
[  373.514780][T11506] batman_adv: batadv0: IGMP Querier appeared
[  373.520876][T11506] batman_adv: batadv0: MLD Querier appeared
[  373.565589][T15449] validate_nla: 2 callbacks suppressed
[  373.565610][T15449] netlink: 'syz.2.2588': attribute type 7 has an invalid length.
[  373.596037][T15450] netlink: 'syz.2.2588': attribute type 7 has an invalid length.
[  373.673522][T15458] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  373.837200][T15456] bridge_slave_1: entered allmulticast mode
[  374.530685][T15506] __nla_validate_parse: 12 callbacks suppressed
[  374.530716][T15506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2606'.
[  374.635554][T15499] lo speed is unknown, defaulting to 1000
[  374.961272][T15519] netlink: 'syz.3.2610': attribute type 1 has an invalid length.
[  374.969187][T15519] netlink: 'syz.3.2610': attribute type 1 has an invalid length.
[  375.058130][T15521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  375.688453][T15548] netlink: 'syz.0.2619': attribute type 1 has an invalid length.
[  375.724799][T15548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2619'.
[  375.739656][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'.
[  375.755474][T15552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.820486][T15552] syzkaller0: entered promiscuous mode
[  375.830770][T15552] syzkaller0: entered allmulticast mode
[  375.838322][T15553] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) !
[  375.894963][T15554] tipc: Resetting bearer <eth:syzkaller0>
[  375.956619][T15551] tipc: Resetting bearer <eth:syzkaller0>
[  376.001611][T15551] tipc: Disabling bearer <eth:syzkaller0>
[  376.019750][T15564] tunl0: entered promiscuous mode
[  376.045624][T15564] gre0: entered promiscuous mode
[  376.051748][T15564] gretap0: entered promiscuous mode
[  376.061592][T15564] erspan0: entered promiscuous mode
[  376.068307][T15564] ip_vti0: entered promiscuous mode
[  376.076028][T15499] wg1 speed is unknown, defaulting to 1000
[  376.092974][T15566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.165116][ T6691] IPVS: ip_vs_send_async error -101
[  376.186503][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2627'.
[  376.221409][T15570] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2627'.
[  376.473775][T15582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2630'.
[  376.527118][T15583] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  377.039610][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'.
[  377.066897][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2637'.
[  377.138854][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'.
[  377.534546][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.615196][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.635888][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'.
[  377.710009][T15625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.823418][T15706] xt_TPROXY: Can be used only with -p tcp or -p udp
[  379.922221][T15763] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  380.170581][T15744] bond0: (slave bond_slave_0): Releasing backup interface
[  380.200272][T15744] bond0: (slave bond_slave_1): Releasing backup interface
[  380.221458][T15744] team0: Port device team_slave_0 removed
[  380.245612][T15744] team0: Port device team_slave_1 removed
[  380.258451][T15744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.272783][T15744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.296563][T15744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  380.313749][ T6691] IPVS: ip_vs_send_async error -101
[  380.373159][T15767] bond6: (slave ip6gretap1): making interface the new active one
[  380.382601][T15767] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  380.391674][T15767] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  380.415061][T15767] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  380.593993][T15787] lo speed is unknown, defaulting to 1000
[  380.705861][T15794] __nla_validate_parse: 6 callbacks suppressed
[  380.705885][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'.
[  380.787303][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'.
[  380.810843][T15794] bond0: entered promiscuous mode
[  380.837021][T15794] bond_slave_0: entered promiscuous mode
[  380.853378][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'.
[  380.854165][T15794] bond_slave_1: entered promiscuous mode
[  380.903116][T15794] bond0: left promiscuous mode
[  380.923841][T15794] bond_slave_0: left promiscuous mode
[  380.941784][T15794] bond_slave_1: left promiscuous mode
[  380.979208][T15799] veth0: entered promiscuous mode
[  381.860948][T15844] bond12: option miimon: invalid value (18446744073709551585)
[  381.880678][T15844] bond12: option miimon: allowed values 0 - 2147483647
[  381.894154][T15844] bond12 (unregistering): Released all slaves
[  381.975102][T15853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'.
[  382.124951][T15857] netlink: 'syz.4.2711': attribute type 10 has an invalid length.
[  382.152777][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2711'.
[  382.170444][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'.
[  382.178069][T15857] batadv0: entered promiscuous mode
[  382.192824][T15857] batadv0: entered allmulticast mode
[  382.209100][T15857] bridge0: port 3(batadv0) entered blocking state
[  382.218675][T15857] bridge0: port 3(batadv0) entered disabled state
[  382.275534][T11514] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  382.284951][T11514] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  382.363593][T15787] wg1 speed is unknown, defaulting to 1000
[  382.776227][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2720'.
[  383.170070][T15906] netlink: 'syz.0.2724': attribute type 10 has an invalid length.
[  383.279807][T15906] geneve1: entered promiscuous mode
[  383.286833][T15906] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  383.324477][T15907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.342877][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2727'.
[  383.399509][T15919] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2728'.
[  383.410213][T15912] bond12: Unable to set down delay as MII monitoring is disabled
[  383.433196][T15912] bond12 (unregistering): Released all slaves
[  383.668181][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2730'.
[  384.329185][T15967] team_slave_0: mtu greater than device maximum
[  384.537915][T15979] netlink: 'syz.1.2745': attribute type 7 has an invalid length.
[  384.551370][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  384.559672][T15979] netlink: 'syz.1.2745': attribute type 8 has an invalid length.
[  384.575454][T15979] ip6gretap0: entered promiscuous mode
[  384.596226][T15979] ip6gretap0: left promiscuous mode
[  385.221011][T16026] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  385.235697][T16022] netlink: 'syz.2.2759': attribute type 10 has an invalid length.
[  385.259860][T16022] SET target dimension over the limit!
[  385.409635][T16032] geneve2: entered promiscuous mode
[  385.419210][T16032] geneve2: entered allmulticast mode
[  385.426842][T11507] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.435671][T11507] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.444163][T11507] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.457158][T11507] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.531363][T16043] bridge0: port 2(veth0_to_bridge) entered blocking state
[  385.545755][T16043] bridge0: port 2(veth0_to_bridge) entered disabled state
[  385.553345][T16043] veth0_to_bridge: entered allmulticast mode
[  385.561681][T16043] veth0_to_bridge: entered promiscuous mode
[  385.887669][T16061] netlink: 'syz.2.2771': attribute type 16 has an invalid length.
[  385.903593][T16061] netlink: 'syz.2.2771': attribute type 17 has an invalid length.
[  386.145789][T16061] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.179183][T16061] 8021q: adding VLAN 0 to HW filter on device team0
[  386.225321][T16061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.431363][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.442710][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.461461][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.480856][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.497658][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.522112][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.537403][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.546930][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.556751][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.573335][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.652312][T16079] xfrm2: entered allmulticast mode
[  386.738338][T16068] lo speed is unknown, defaulting to 1000
[  386.805807][T16083] __nla_validate_parse: 7 callbacks suppressed
[  386.805827][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'.
[  387.032878][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'.
[  387.287939][T16100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2782'.
[  387.499990][T16106] macvtap0: entered promiscuous mode
[  387.507194][T16106] vlan0: entered promiscuous mode
[  387.514267][T16106] macvtap0: entered allmulticast mode
[  387.520385][T16106] vlan0: entered allmulticast mode
[  387.525839][T16106] veth0_vlan: entered allmulticast mode
[  387.574483][T16106] macvtap1: entered promiscuous mode
[  387.583022][T16106] macvtap1: entered allmulticast mode
[  387.607724][T16068] wg1 speed is unknown, defaulting to 1000
[  388.055004][T16135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.086079][T16132] netlink: 'syz.3.2791': attribute type 4 has an invalid length.
[  388.158132][T16068] chnl_net:caif_netlink_parms(): no params data found
[  388.578691][T16068] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.625303][T16068] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.627733][   T52] Bluetooth: hci1: command tx timeout
[  388.632666][T16068] bridge_slave_0: entered allmulticast mode
[  388.650461][T16068] bridge_slave_0: entered promiscuous mode
[  388.659723][T16068] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.670180][T16068] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.678372][T16068] bridge_slave_1: entered allmulticast mode
[  388.687960][T16068] bridge_slave_1: entered promiscuous mode
[  388.827134][T16068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.850324][T16068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.001423][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'.
[  389.045848][T16175] netlink: 'syz.0.2805': attribute type 1 has an invalid length.
[  389.068021][T16068] team0: Port device team_slave_0 added
[  389.111376][T16068] team0: Port device team_slave_1 added
[  389.188051][T16185] !��: renamed from bond_slave_0 (while UP)
[  389.246797][T16068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.275680][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.331090][T16068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.355612][T16068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.367720][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.394570][T16068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.652277][T16068] hsr_slave_0: entered promiscuous mode
[  389.678499][T16068] hsr_slave_1: entered promiscuous mode
[  389.693515][T16068] debugfs: 'hsr0' already exists in 'hsr'
[  389.701084][T16068] Cannot create hsr debugfs directory
[  389.895504][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2819'.
[  390.054026][T16223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2821'.
[  390.359109][T16068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.381213][T16068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  390.391876][T16068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  390.540272][T16068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.567749][T16068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  390.583701][T16068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  390.691501][T16068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.705568][   T52] Bluetooth: hci1: command tx timeout
[  390.714439][T16068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  390.734746][T16068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  390.862147][T16068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.881437][T16068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  390.892362][T16068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  390.894738][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'.
[  390.929053][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'.
[  390.960896][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'.
[  391.106935][T16068] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  391.131644][T16068] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  391.143909][T16068] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  391.156717][T16068] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  391.416501][T16068] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.477972][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'.
[  391.510532][T16068] 8021q: adding VLAN 0 to HW filter on device team0
[  391.529183][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.536544][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.596133][T16300] delete_channel: no stack
[  391.602000][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.609258][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.267651][T16068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.357028][T16329] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2846'.
[  392.376481][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'.
[  392.423121][T16329] vlan3: entered allmulticast mode
[  392.435170][T16329] gretap0: entered allmulticast mode
[  392.767695][T16356] netlink: 'syz.2.2851': attribute type 21 has an invalid length.
[  392.785793][   T52] Bluetooth: hci1: command tx timeout
[  392.791335][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'.
[  392.826424][T16356] netlink: 'syz.2.2851': attribute type 21 has an invalid length.
[  392.844835][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'.
[  392.940645][T16363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2852'.
[  393.114401][T16372] netlink: 'syz.3.2853': attribute type 1 has an invalid length.
[  393.129350][T16068] veth0_vlan: entered promiscuous mode
[  393.159680][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'.
[  393.175270][T16370] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2855'.
[  393.185600][T16370] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2855'.
[  393.236788][T16375] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  393.261705][ T7551] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  393.285793][T16377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.296107][T16372] 8021q: adding VLAN 0 to HW filter on device bond11
[  393.308036][T16068] veth1_vlan: entered promiscuous mode
[  393.368776][T16068] veth0_macvtap: entered promiscuous mode
[  393.416637][ T7554] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  393.439057][T16068] veth1_macvtap: entered promiscuous mode
[  393.481367][T16068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.514964][T16068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.532342][ T7554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.552475][ T7554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.584925][ T7554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.613465][ T7554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.777697][ T7552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.798210][ T7552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.857544][ T7551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.867680][ T7551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.926318][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'.
[  393.936632][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'.
[  394.032498][T16397] hsr_slave_1 (unregistering): left promiscuous mode
[  394.249302][T16418] openvswitch: netlink: IP tunnel TTL not specified.
[  394.735665][T16450] x_tables: unsorted underflow at hook 2
[  394.750163][T16451] netlink: 'syz.0.2880': attribute type 1 has an invalid length.
[  394.867475][   T52] Bluetooth: hci1: command tx timeout
[  395.280344][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  395.300910][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  395.309853][ T5825] syz_tun (unregistering): left allmulticast mode
[  395.317301][ T5825] syz_tun (unregistering): left promiscuous mode
[  395.323767][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  395.323928][ T5825] bridge0: port 1(syz_tun) entered disabled state
[  395.334083][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  395.346857][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  395.369305][ T7554] smc: removing ib device syz1
[  395.415604][T16462] lo speed is unknown, defaulting to 1000
[  395.957747][T16484] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  395.980352][T16487] tipc: Invalid UDP bearer configuration
[  395.980414][T16487] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  396.306333][T16462] wg1 speed is unknown, defaulting to 1000
[  396.423874][T16494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.109735][T16517] tipc: Started in network mode
[  397.128832][T16517] tipc: Node identity b2cb19494803, cluster identity 4711
[  397.136603][T16517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.145514][T16529] syzkaller0: entered promiscuous mode
[  397.149449][T16527] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  397.151035][T16529] syzkaller0: entered allmulticast mode
[  397.298252][T16517] tipc: Resetting bearer <eth:syzkaller0>
[  397.335072][T16516] tipc: Resetting bearer <eth:syzkaller0>
[  397.435874][   T52] Bluetooth: hci5: command tx timeout
[  397.449090][T16516] tipc: Disabling bearer <eth:syzkaller0>
[  397.597663][T16541] __nla_validate_parse: 12 callbacks suppressed
[  397.597687][T16541] netlink: 1600 bytes leftover after parsing attributes in process `syz.0.2905'.
[  397.605862][T16462] chnl_net:caif_netlink_parms(): no params data found
[  398.132600][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.342568][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.480782][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.513933][T16462] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.535656][T16462] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.565536][T16462] bridge_slave_0: entered allmulticast mode
[  398.572049][T16589] xt_socket: unknown flags 0x50
[  398.582189][T16589] xt_socket: unknown flags 0x50
[  398.588261][T16589] xt_socket: unknown flags 0x50
[  398.593531][T16589] xt_socket: unknown flags 0x50
[  398.600156][T16589] xt_socket: unknown flags 0x50
[  398.601429][T16462] bridge_slave_0: entered promiscuous mode
[  398.606191][T16589] xt_socket: unknown flags 0x50
[  398.630104][T16589] xt_socket: unknown flags 0x50
[  398.639613][T16589] xt_socket: unknown flags 0x50
[  398.648693][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.655998][T16589] xt_socket: unknown flags 0x50
[  398.694122][T16589] xt_socket: unknown flags 0x50
[  398.759082][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'.
[  398.768380][T16462] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.776358][T16462] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.783713][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2918'.
[  398.800723][T16462] bridge_slave_1: entered allmulticast mode
[  398.817921][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'.
[  398.827511][T16599] netlink: 'syz.2.2920': attribute type 30 has an invalid length.
[  398.845005][T16462] bridge_slave_1: entered promiscuous mode
[  398.848562][T16598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2919'.
[  398.851177][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'.
[  398.871308][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'.
[  398.997727][T16595] geneve2: entered promiscuous mode
[  399.009777][T16595] geneve2: entered allmulticast mode
[  399.117456][T16462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.199255][T16462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.359972][T16462] team0: Port device team_slave_0 added
[  399.482600][T16462] team0: Port device team_slave_1 added
[  399.505020][   T52] Bluetooth: hci5: command tx timeout
[  399.690889][   T13] veth0_to_bridge: left allmulticast mode
[  399.707356][   T13] veth0_to_bridge: left promiscuous mode
[  399.721332][   T13] bridge0: port 2(veth0_to_bridge) entered disabled state
[  401.188214][   T13] bond8 (unregistering): (slave gretap3): Releasing active interface
[  401.217811][   T13] bond10 (unregistering): (slave gretap4): Releasing active interface
[  401.585009][   T52] Bluetooth: hci5: command tx timeout
[  401.935402][   T13] bond0 (unregistering): left promiscuous mode
[  401.941647][   T13] bond_slave_0: left promiscuous mode
[  401.947411][   T13] bond_slave_1: left promiscuous mode
[  401.952986][   T13] bridge_slave_1: left promiscuous mode
[  401.972302][   T13] bond9 (unregistering): (slave macvlan3): Releasing active interface
[  401.981408][   T13] macvlan3 (unregistering): left promiscuous mode
[  401.995532][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.006035][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.018490][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  402.028347][   T13] bond0 (unregistering): Released all slaves
[  402.130460][   T13] bond1 (unregistering): Released all slaves
[  402.231734][   T13] bond2 (unregistering): Released all slaves
[  402.331162][   T13] bond3 (unregistering): Released all slaves
[  402.347688][   T13] bond4 (unregistering): Released all slaves
[  402.362768][   T13] bond5 (unregistering): Released all slaves
[  402.381814][   T13] bond6 (unregistering): (slave veth5): Releasing backup interface
[  402.390946][   T13] bond6 (unregistering): Released all slaves
[  402.493499][   T13] bond7 (unregistering): Released all slaves
[  402.509166][   T13] bond8 (unregistering): Released all slaves
[  402.523658][   T13] bond9 (unregistering): Released all slaves
[  402.539801][   T13] bond10 (unregistering): Released all slaves
[  402.637780][   T13] bond11 (unregistering): Released all slaves
[  402.653406][T16462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.660892][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.688134][T16462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.725370][T16670] tunl0: entered promiscuous mode
[  402.758758][T16670] netlink: 'syz.3.2936': attribute type 3 has an invalid length.
[  402.787134][T16670] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2936'.
[  402.823320][T16462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.859104][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.953214][T16462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.007890][   T13] tipc: Disabling bearer <udp:syz1>
[  403.029565][   T13] tipc: Left network mode
[  403.166171][   T13] IPVS: stopping master sync thread 6691 ...
[  403.404424][T16462] hsr_slave_0: entered promiscuous mode
[  403.412312][T16462] hsr_slave_1: entered promiscuous mode
[  403.423551][T16462] debugfs: 'hsr0' already exists in 'hsr'
[  403.438023][T16462] Cannot create hsr debugfs directory
[  403.671351][   T52] Bluetooth: hci5: command tx timeout
[  403.862108][T16716] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  403.879177][T16716] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  403.923995][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2947'.
[  404.913270][   T13] hsr_slave_0: left promiscuous mode
[  404.923074][   T13] hsr_slave_1: left promiscuous mode
[  404.936753][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.950348][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.978508][   T13] batman_adv: batadv0: Removing interface: team0
[  405.106651][T16783] netlink: 'syz.4.2959': attribute type 4 has an invalid length.
[  405.746941][   T52] Bluetooth: hci5: command tx timeout
[  405.933726][   T13] team0 (unregistering): Port device team_slave_1 removed
[  405.976552][   T13] team0 (unregistering): Port device team_slave_0 removed
[  406.292152][ T7543] smc: removing ib device syz0
[  406.897007][T16814] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2963'.
[  407.089368][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2962'.
[  407.108348][T16821] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  407.128055][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2962'.
[  407.343342][T16462] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  407.387933][T16462] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  407.418747][T16462] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  407.421750][T16839] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  407.505268][T16462] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  407.661139][T16845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'.
[  407.730015][T16845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'.
[  407.767390][T16852] pim6reg: entered allmulticast mode
[  407.929123][T16852] pim6reg: left allmulticast mode
[  408.201798][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'.
[  408.242204][T16870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2973'.
[  408.343016][T16462] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.461473][T16462] 8021q: adding VLAN 0 to HW filter on device team0
[  408.539248][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.546506][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.610812][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.618047][ T7535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.671526][T16888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2977'.
[  408.819303][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2978'.
[  408.869709][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'.
[  408.880182][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'.
[  409.088815][T16904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2981'.
[  409.492524][T16924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.626649][T16931] Cannot find set identified by id 0 to match
[  409.687009][T16927] : entered promiscuous mode
[  409.694254][T16924] smc: net device vcan0 applied user defined pnetid SYZ1
[  409.759209][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.923906][T16939] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2989'.
[  409.928138][T16462] veth0_vlan: entered promiscuous mode
[  409.940714][T16939] ieee802154 phy0 wpan0: encryption failed: -22
[  409.950138][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'.
[  409.990082][T16462] veth1_vlan: entered promiscuous mode
[  410.152209][T16462] veth0_macvtap: entered promiscuous mode
[  410.198478][T16462] veth1_macvtap: entered promiscuous mode
[  410.261299][   T13] IPVS: stop unused estimator thread 0...
[  410.273428][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.339985][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.389238][T11520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.405773][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2990'.
[  410.451599][T11520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.501826][T11520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.538804][T11520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.834130][T11520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.885164][T11520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.955280][T11520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.963180][T11520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.037108][T17028] netlink: 'syz.0.3008': attribute type 5 has an invalid length.
[  412.084443][   T34] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  412.109707][   T34] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  412.147752][   T34] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  412.171765][   T34] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  412.728072][T17049] netlink: 'syz.1.3013': attribute type 1 has an invalid length.
[  413.168161][T17062] netlink: 'syz.1.3018': attribute type 1 has an invalid length.
[  413.347580][T17072] netlink: 'syz.4.3022': attribute type 1 has an invalid length.
[  413.368971][T17072] __nla_validate_parse: 11 callbacks suppressed
[  413.368990][T17072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3022'.
[  413.388959][T17072] block nbd1: not configured, cannot reconfigure
[  413.413653][T17077] xt_NFQUEUE: number of queues (257) out of range (got 65790)
[  413.557968][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'.
[  413.921457][T17100] netlink: 'syz.0.3032': attribute type 39 has an invalid length.
[  414.431356][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3040'.
[  414.512048][T17135] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3042'.
[  414.648287][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3045'.
[  414.770284][T17147] netlink: 'syz.0.3047': attribute type 2 has an invalid length.
[  415.242665][T17177] nbd: must specify a size in bytes for the device
[  415.247861][T17172] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'.
[  415.282588][T17172] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'.
[  415.293190][T17172] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'.
[  415.325457][T17172] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'.
[  415.348114][T17172] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3053'.
[  415.348626][T17179] netlink: 'syz.4.3056': attribute type 1 has an invalid length.
[  415.445684][T17179] 8021q: adding VLAN 0 to HW filter on device bond1
[  415.890919][T17214] gre0: entered promiscuous mode
[  415.931419][T17213] netlink: 'syz.1.3067': attribute type 1 has an invalid length.
[  416.338381][T17245] dvmrp0: entered allmulticast mode
[  416.363569][T17245] nbd: illegal input index -8454144
[  416.373576][T17245] dvmrp0: left allmulticast mode
[  417.310045][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.329929][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.348208][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.360730][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.368775][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.542219][T17277] wg1 speed is unknown, defaulting to 1000
[  417.557499][ T7552] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.588282][ T7552] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  417.603428][ T7552] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  417.727513][ T7552] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.757097][ T7552] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  417.782863][ T7552] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  417.948010][ T7552] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.976371][ T7552] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  417.990993][ T7552] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  418.080339][ T7552] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.090326][ T7552] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  418.100349][ T7552] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  418.177466][T17317] openvswitch: netlink: Missing key (keys=40, expected=100)
[  418.441147][T17328] Bluetooth: MGMT ver 1.23
[  418.592121][T17277] chnl_net:caif_netlink_parms(): no params data found
[  418.725014][T17342] __nla_validate_parse: 18 callbacks suppressed
[  418.725034][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3107'.
[  419.425815][ T5146] Bluetooth: hci0: command tx timeout
[  420.040341][ T7552] bond8 (unregistering): (slave gretap1): Releasing active interface
[  420.049060][ T7552] gretap1 (unregistering): left allmulticast mode
[  420.102071][ T7552] bond1 (unregistering): (slave geneve2): Releasing active interface
[  420.123526][ T7552] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  420.400889][ T7552] bond3 (unregistering): (slave bridge6): Releasing active interface
[  420.588882][ T7552] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  420.597779][ T7552] bond0 (unregistering): Released all slaves
[  420.697961][ T7552] bond1 (unregistering): Released all slaves
[  420.796456][ T7552] bond2 (unregistering): (slave veth5): Releasing active interface
[  420.807193][ T7552] bond2 (unregistering): Released all slaves
[  420.821524][ T7552] bond3 (unregistering): Released all slaves
[  420.923008][ T7552] bond4 (unregistering): Released all slaves
[  421.018205][ T7552] bond5 (unregistering): (slave wireguard1): Releasing backup interface
[  421.029077][ T7552] wireguard1: left promiscuous mode
[  421.036413][ T7552] bond5 (unregistering): Released all slaves
[  421.051809][ T7552] bond6 (unregistering): (slave veth11): Releasing backup interface
[  421.063197][ T7552] bond6 (unregistering): Released all slaves
[  421.079951][ T7552] bond7 (unregistering): Released all slaves
[  421.179970][ T7552] bond8 (unregistering): Released all slaves
[  421.197124][ T7552] bond9 (unregistering): Released all slaves
[  421.212419][ T7552] bond10 (unregistering): Released all slaves
[  421.227499][ T7552] bond11 (unregistering): Released all slaves
[  421.511371][ T5146] Bluetooth: hci0: command tx timeout
[  421.547441][ T7552] : left promiscuous mode
[  421.806371][T17277] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.824029][T17277] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.842005][T17277] bridge_slave_0: entered allmulticast mode
[  421.869599][T17277] bridge_slave_0: entered promiscuous mode
[  421.882996][ T7552] tipc: Disabling bearer <udp:s>
[  421.896629][T17384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.904100][ T7552] tipc: Left network mode
[  421.910670][T17387] �
: renamed from veth1_vlan (while UP)
[  421.924193][T17277] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.941446][T17277] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.956551][ T7552] IPVS: stopping backup sync thread 8446 ...
[  421.966712][T17277] bridge_slave_1: entered allmulticast mode
[  421.983252][T17277] bridge_slave_1: entered promiscuous mode
[  422.059397][T17384] tipc: Disabling bearer <eth:syzkaller0>
[  422.192977][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3122'.
[  422.280945][T17277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.294884][T17277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.437266][T17277] team0: Port device team_slave_0 added
[  422.456180][T17277] team0: Port device team_slave_1 added
[  422.514496][T17277] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.522074][T17277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.550093][T17277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.582746][T17277] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.590016][T17277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  422.617784][T17277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.714433][T17277] hsr_slave_0: entered promiscuous mode
[  422.721998][T17277] hsr_slave_1: entered promiscuous mode
[  422.730095][T17277] debugfs: 'hsr0' already exists in 'hsr'
[  422.736603][T17277] Cannot create hsr debugfs directory
[  422.762624][ T7552] hsr_slave_0: left promiscuous mode
[  422.770383][ T7552] hsr_slave_1: left promiscuous mode
[  422.789232][ T7552] vlan0: left allmulticast mode
[  422.794126][ T7552] veth0_vlan: left allmulticast mode
[  422.799638][ T7552] vlan0: left promiscuous mode
[  422.805426][ T7552] veth0_vlan: left promiscuous mode
[  422.879919][ T7552] pimreg (unregistering): left allmulticast mode
[  423.590549][ T5146] Bluetooth: hci0: command tx timeout
[  424.348086][T17439] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.531481][T17471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.629884][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3137'.
[  424.759421][T17473] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3137'.
[  425.108812][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3143'.
[  425.124529][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3143'.
[  425.143762][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  425.266037][ T7552] IPVS: stop unused estimator thread 0...
[  425.308630][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3147'.
[  425.331223][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057d81000: rx timeout, send abort
[  425.513907][T17277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  425.550537][T17277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  425.562861][T17277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  425.604321][T17277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  425.786781][T17277] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.816990][T17277] 8021q: adding VLAN 0 to HW filter on device team0
[  425.831377][    C0] vcan0: j1939_tp_rxtimer: 0xffff888144b2a000: rx timeout, send abort
[  425.839797][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057d81000: abort rx timeout. Force session deactivation
[  425.856486][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.863835][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.905076][T11520] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.912310][T11520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.932593][T17522] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3152'.
[  426.339726][    C0] vcan0: j1939_tp_rxtimer: 0xffff888144b2a000: abort rx timeout. Force session deactivation
[  426.358069][T17541] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  426.378650][T17541] bond12 (unregistering): Released all slaves
[  426.508023][T17554] netlink: 'syz.1.3160': attribute type 1 has an invalid length.
[  426.627870][T17554] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.727181][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3160'.
[  426.802292][T17558] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.822242][T17558] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  426.834061][T17558] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  426.956241][T17567] 8021q: adding VLAN 0 to HW filter on device bond12
[  426.999731][T17565] veth3: entered promiscuous mode
[  427.008858][T17565] bond1: (slave veth3): Enslaving as an active interface with a down link
[  427.020220][T17554] 8021q: adding VLAN 0 to HW filter on device bond1
[  427.061470][T17579] team_slave_0: mtu greater than device maximum
[  427.164080][T17584] team_slave_0: entered promiscuous mode
[  427.170229][T17584] team_slave_1: entered promiscuous mode
[  427.175987][T17584] geneve0: entered promiscuous mode
[  427.214879][T17590] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3169'.
[  427.226947][T17584] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  427.256823][T17587] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  427.271026][T17277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.520721][T17277] veth0_vlan: entered promiscuous mode
[  427.578322][T17277] veth1_vlan: entered promiscuous mode
[  427.674639][T17277] veth0_macvtap: entered promiscuous mode
[  427.697468][T17277] veth1_macvtap: entered promiscuous mode
[  427.716077][T17621] netlink: 'syz.4.3178': attribute type 1 has an invalid length.
[  427.840421][T17631] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3179'.
[  427.874870][T17277] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.918332][T17277] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.991899][T11520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.033418][T17633] IPVS: set_ctl: invalid protocol: 0 172.20.20.52:20001
[  428.052803][T11520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.084909][T11520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.106442][T11520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.339467][T17657] pim6reg: entered allmulticast mode
[  428.862169][ T7552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.902806][ T7552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.987916][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.997515][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.459254][T17687] geneve2: entered promiscuous mode
[  429.476632][T17687] geneve2: entered allmulticast mode
[  429.493043][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  429.533114][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  429.578890][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  429.605258][ T7554] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  430.106696][T17710] __nla_validate_parse: 1 callbacks suppressed
[  430.106716][T17710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'.
[  430.152517][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  430.163053][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  430.172014][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  430.181384][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  430.197358][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  430.236467][T17710] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.245169][T17710] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.347855][T17719] wg1 speed is unknown, defaulting to 1000
[  430.391015][T17727] bridge0: port 3(ipvlan2) entered blocking state
[  430.399612][T17727] bridge0: port 3(ipvlan2) entered disabled state
[  430.406671][T17727] ipvlan2: entered allmulticast mode
[  430.412093][T17727] bridge0: entered allmulticast mode
[  430.420353][T17727] ipvlan2: left allmulticast mode
[  430.426623][T17727] bridge0: left allmulticast mode
[  430.430923][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'.
[  430.477865][T17712] wg1 speed is unknown, defaulting to 1000
[  430.572479][T17732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3207'.
[  430.639406][T17734] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  430.661369][T17734] Cannot find add_set index 0 as target
[  430.881423][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3209'.
[  431.051179][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'.
[  431.333431][T17712] chnl_net:caif_netlink_parms(): no params data found
[  431.458484][T17776] xt_hashlimit: size too large, truncated to 1048576
[  431.577899][T17782] netlink: 'syz.3.3218': attribute type 13 has an invalid length.
[  431.830150][T17712] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.841514][T17712] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.865831][T17712] bridge_slave_0: entered allmulticast mode
[  431.873846][T17712] bridge_slave_0: entered promiscuous mode
[  431.906932][T17712] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.919388][T17712] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.934423][T17712] bridge_slave_1: entered allmulticast mode
[  431.946500][T17712] bridge_slave_1: entered promiscuous mode
[  431.962873][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  432.074558][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.143044][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.225345][ T5146] Bluetooth: hci2: command tx timeout
[  432.276083][T17818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3228'.
[  432.294352][T17712] team0: Port device team_slave_0 added
[  432.322293][T17712] team0: Port device team_slave_1 added
[  432.347710][T17822] bond0: (slave rose0): Enslaving as an active interface with an up link
[  432.401771][T17824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.417665][T17824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.440119][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.459784][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.527272][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.567490][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.584827][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.616770][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.633514][T17827] ������: renamed from vlan0 (while UP)
[  432.709288][T17712] hsr_slave_0: entered promiscuous mode
[  432.716638][T17712] hsr_slave_1: entered promiscuous mode
[  432.723333][T17712] debugfs: 'hsr0' already exists in 'hsr'
[  432.730426][T17712] Cannot create hsr debugfs directory
[  432.806515][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'.
[  432.821194][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3236'.
[  432.862696][T17843] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[  432.980230][T17712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.993712][T17712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.004192][T17712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  433.121235][T17849] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3238'.
[  433.148896][T17712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.177969][T17712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.198967][T17712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  433.344247][T17712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.360914][T17712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.374729][T17712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  433.626506][T17712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.649709][T17712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.661189][T17712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  433.733664][T17880] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.073670][T17901] veth0_macvtap: left promiscuous mode
[  434.121406][T17712] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  434.306797][ T5146] Bluetooth: hci2: command tx timeout
[  435.933192][T17712] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  435.960378][T17712] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  436.012775][T17947] __nla_validate_parse: 4 callbacks suppressed
[  436.012797][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'.
[  436.019756][T17712] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  436.044504][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'.
[  436.119592][T17947] geneve4: entered promiscuous mode
[  436.124982][T17947] geneve4: entered allmulticast mode
[  436.296827][T17712] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.352829][T17712] 8021q: adding VLAN 0 to HW filter on device team0
[  436.370840][T11520] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.378117][T11520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.397160][ T5146] Bluetooth: hci2: command tx timeout
[  436.427484][T11520] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.434760][T11520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.726845][T17973] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  436.759269][T17973] bond2 (unregistering): Released all slaves
[  436.759412][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'.
[  436.916220][T17981] hsr_slave_1 (unregistering): left promiscuous mode
[  436.941019][T17986] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  437.138096][T17996] netlink: 'syz.2.3279': attribute type 7 has an invalid length.
[  437.239337][T17712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.341195][T17712] veth0_vlan: entered promiscuous mode
[  437.395848][T17712] veth1_vlan: entered promiscuous mode
[  437.449562][T18007] netlink: 'syz.2.3283': attribute type 1 has an invalid length.
[  437.516850][T18010] netlink: 'syz.3.3285': attribute type 1 has an invalid length.
[  437.519867][T18012] netlink: 'syz.4.3286': attribute type 8 has an invalid length.
[  437.536484][T17712] veth0_macvtap: entered promiscuous mode
[  437.552826][T17712] veth1_macvtap: entered promiscuous mode
[  437.608247][T18010] 8021q: adding VLAN 0 to HW filter on device bond13
[  437.639488][T18017] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  437.652458][T18017] bond2 (unregistering): Released all slaves
[  437.687404][T18013] bridge1: entered promiscuous mode
[  437.708482][T18016] bond13: (slave gretap4): making interface the new active one
[  437.720191][T18016] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  437.730542][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'.
[  437.836340][T17712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.884219][T17712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.972804][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.002842][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.058581][T18025] netlink: 'syz.2.3289': attribute type 1 has an invalid length.
[  438.117402][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.129666][T18025] netlink: 'syz.2.3289': attribute type 1 has an invalid length.
[  438.148012][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.180194][T18025] netlink: 'syz.2.3289': attribute type 3 has an invalid length.
[  438.192590][T18025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3289'.
[  438.245607][T18037] nbd1: detected capacity change from 0 to 63
[  438.273876][ T5146] block nbd1: Receive control failed (result -32)
[  438.322797][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.374842][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.456162][ T7552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.464261][ T7552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.475957][ T5146] Bluetooth: hci2: command tx timeout
[  438.549610][T18061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3299'.
[  438.577212][T18054] bond3: option min_links: invalid value (18446744073709551614)
[  438.586956][T18054] bond3: option min_links: allowed values 0 - 2147483647
[  438.596535][T18054] bond3 (unregistering): Released all slaves
[  438.907937][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  438.937115][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'.
[  439.020377][T18078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3304'.
[  439.043631][T18078] team0: No ports can be present during mode change
[  439.260741][T18091] : renamed from hsr0 (while UP)
[  439.529094][T18097] bond0: entered promiscuous mode
[  439.534227][T18097] bond_slave_0: entered promiscuous mode
[  439.575396][T18097] bond_slave_1: entered promiscuous mode
[  439.818322][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  439.828956][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  439.849999][T18112] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3314'.
[  439.850540][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  439.869440][T18112] 0��{X��: renamed from gretap0 (while UP)
[  439.871816][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  439.883532][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  439.936006][T18112] 0��{X��: entered allmulticast mode
[  439.941942][T18112] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  440.078702][T18110] wg1 speed is unknown, defaulting to 1000
[  440.434024][T18135] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  440.518948][T18141] netlink: 'syz.2.3321': attribute type 2 has an invalid length.
[  440.534417][T18140] tipc: Enabling <eth:lo> not permitted
[  440.566159][T18140] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  440.581261][T18110] chnl_net:caif_netlink_parms(): no params data found
[  440.888963][T18110] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.905471][T18110] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.912786][T18110] bridge_slave_0: entered allmulticast mode
[  440.926306][T18110] bridge_slave_0: entered promiscuous mode
[  440.958846][T18168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.972195][T18168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.986149][T18168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.993854][T18168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.040364][T18110] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.049877][T18110] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.057304][T18110] bridge_slave_1: entered allmulticast mode
[  441.065086][T18110] bridge_slave_1: entered promiscuous mode
[  441.130344][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.153899][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.290472][T18110] team0: Port device team_slave_0 added
[  441.328385][T18110] team0: Port device team_slave_1 added
[  441.476936][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.494445][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.527885][T18195] __nla_validate_parse: 3 callbacks suppressed
[  441.527904][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'.
[  441.532426][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.545007][T18195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3335'.
[  441.559304][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.570750][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.605753][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.714339][T18110] hsr_slave_0: entered promiscuous mode
[  441.729035][T18110] hsr_slave_1: entered promiscuous mode
[  441.735943][T18110] debugfs: 'hsr0' already exists in 'hsr'
[  441.742531][T18110] Cannot create hsr debugfs directory
[  441.987490][   T52] Bluetooth: hci3: command tx timeout
[  442.023995][T18110] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.051222][T18110] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.064213][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'.
[  442.080119][T18110] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  442.158809][T18110] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.173185][T18110] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.189783][T18110] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  442.231472][T18218] netlink: 'syz.0.3344': attribute type 7 has an invalid length.
[  442.271421][T18218] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3344'.
[  442.284533][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3344'.
[  442.324790][T18110] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.341674][T18110] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.361094][T18110] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  442.363723][T18230] netlink: 'syz.1.3347': attribute type 6 has an invalid length.
[  442.468905][T18110] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.482422][T18110] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  442.492897][T18110] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  442.624021][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'.
[  443.458919][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3354'.
[  444.064843][   T52] Bluetooth: hci3: command tx timeout
[  444.406854][T18110] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  444.472093][T18110] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  444.492284][T18267] netlink: 'syz.2.3356': attribute type 1 has an invalid length.
[  444.549307][T18110] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  444.576624][T18267] macvlan2: entered promiscuous mode
[  444.582958][T18267] macvlan2: entered allmulticast mode
[  444.593058][T18267] bond2: entered promiscuous mode
[  444.599515][T18267] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  444.611376][T18267] bond2: left promiscuous mode
[  444.642110][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'.
[  444.661389][T18110] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  444.847041][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3363'.
[  444.973506][T18110] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.010192][T18110] 8021q: adding VLAN 0 to HW filter on device team0
[  445.027994][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.035234][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.074281][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.081551][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.184476][T18299] erspan0: entered promiscuous mode
[  445.214050][T18301] pim6reg: entered allmulticast mode
[  445.250910][T18110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  445.439460][T18318] netlink: 'syz.4.3369': attribute type 23 has an invalid length.
[  445.601716][T18323] netlink: 'syz.4.3371': attribute type 1 has an invalid length.
[  445.644315][T18323] netlink: 'syz.4.3371': attribute type 1 has an invalid length.
[  445.672369][T18330] pim6reg: entered allmulticast mode
[  445.685157][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3373'.
[  445.838019][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.990418][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  446.033199][T18110] veth0_vlan: entered promiscuous mode
[  446.068303][T18110] veth1_vlan: entered promiscuous mode
[  446.142431][T18346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.153269][   T52] Bluetooth: hci3: command tx timeout
[  446.321383][T18346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.360942][T18355] netlink: 'syz.1.3383': attribute type 27 has an invalid length.
[  446.365080][T18352] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  446.380645][ T5948] IPVS: starting estimator thread 0...
[  446.420343][T18110] veth0_macvtap: entered promiscuous mode
[  446.494763][T18356] IPVS: using max 24 ests per chain, 57600 per kthread
[  446.519720][T18346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.541215][T18358] __nla_validate_parse: 3 callbacks suppressed
[  446.541234][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'.
[  446.562056][T18110] veth1_macvtap: entered promiscuous mode
[  446.640883][T18346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.732085][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.772217][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.827792][ T7543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.871305][ T7543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.909335][ T7543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.947643][ T7543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.010853][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.056234][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.111714][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.147253][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.236284][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'.
[  447.252338][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.262007][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.273976][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'.
[  447.327491][T18390] netlink: 'syz.4.3393': attribute type 1 has an invalid length.
[  447.343818][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.344454][T18390] netlink: 'syz.4.3393': attribute type 10 has an invalid length.
[  447.361994][T18390] netlink: 'syz.4.3393': attribute type 4 has an invalid length.
[  447.370777][T18390] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3393'.
[  447.380412][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.502712][T18402] C: renamed from lo (while UP)
[  447.598904][T18408] x_tables: duplicate underflow at hook 1
[  447.640142][T18408] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002
[  447.865963][T18419] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3401'.
[  448.164036][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'.
[  448.226092][   T52] Bluetooth: hci3: command tx timeout
[  448.360517][T18440] netlink: 'syz.3.3409': attribute type 4 has an invalid length.
[  448.377075][T18440] netlink: 'syz.3.3409': attribute type 4 has an invalid length.
[  449.537348][T18468] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  449.555031][T18468] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  449.676207][T18468] syzkaller0: entered promiscuous mode
[  449.690116][T18468] syzkaller0: entered allmulticast mode
[  449.737719][T18468] tipc: Started in network mode
[  449.742657][T18468] tipc: Node identity , cluster identity 4711
[  449.784562][T18468] tipc: Failed to obtain node identity
[  449.795924][T18468] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  449.920806][T18491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3422'.
[  449.969506][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3421'.
[  449.971282][T18493] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3422'.
[  450.030943][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'.
[  450.586249][T18515] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  451.852829][T18517] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  451.878723][T18517] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  451.887915][T18517] gretap1: entered promiscuous mode
[  451.893175][T18517] gretap1: entered allmulticast mode
[  452.030433][T18522] 8021q: VLANs not supported on tunl0
[  452.107556][T12485] IPVS: starting estimator thread 0...
[  452.206430][T18528] IPVS: using max 29 ests per chain, 69600 per kthread
[  452.502725][T18545] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  452.536312][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3441'.
[  452.608067][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3440'.
[  452.817674][T18556] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  452.830351][   T10] IPVS: starting estimator thread 0...
[  452.887277][   T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.926924][T18558] IPVS: using max 26 ests per chain, 62400 per kthread
[  452.960994][T18562] tipc: Started in network mode
[  452.971644][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'.
[  452.976365][T18562] tipc: Node identity ca2818a85aa6, cluster identity 4711
[  452.996877][T18562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.009818][   T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.043058][T18562] syzkaller0: entered promiscuous mode
[  453.048913][T18562] syzkaller0: entered allmulticast mode
[  453.067893][   T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.115940][T18566] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  453.146808][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'.
[  453.192333][T18567] tipc: Resetting bearer <eth:syzkaller0>
[  453.212278][   T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.255006][T18561] tipc: Resetting bearer <eth:syzkaller0>
[  453.272833][T18561] tipc: Disabling bearer <eth:syzkaller0>
[  453.454122][   T13] bridge_slave_1: left allmulticast mode
[  453.460722][   T13] bridge_slave_1: left promiscuous mode
[  453.467013][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.502446][   T13] bridge_slave_0: left allmulticast mode
[  453.510569][   T13] bridge_slave_0: left promiscuous mode
[  453.529309][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.610216][T18581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.913031][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  453.928910][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  453.938138][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  453.948417][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  453.960020][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  454.258729][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.271076][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.292729][   T13] bond0 (unregistering): Released all slaves
[  454.348296][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3456'.
[  454.455897][   T13] bond1 (unregistering): Released all slaves
[  454.480413][   T13] bond2 (unregistering): Released all slaves
[  454.500522][T18582] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  454.591115][T18584] netlink: 'syz.0.3454': attribute type 1 has an invalid length.
[  454.618098][T18584] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3454'.
[  454.645099][   T13] tipc: Left network mode
[  454.646394][T18589] wg1 speed is unknown, defaulting to 1000
[  454.671787][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'.
[  454.795753][T18602] syz.2.3459: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  454.814700][T18602] CPU: 0 UID: 0 PID: 18602 Comm: syz.2.3459 Not tainted syzkaller #0 PREEMPT(full) 
[  454.814730][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  454.814751][T18602] Call Trace:
[  454.814759][T18602]  <TASK>
[  454.814767][T18602]  dump_stack_lvl+0x189/0x250
[  454.814800][T18602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.814824][T18602]  ? __pfx__printk+0x10/0x10
[  454.814844][T18602]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  454.814868][T18602]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  454.814892][T18602]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  454.814917][T18602]  warn_alloc+0x214/0x310
[  454.814949][T18602]  ? __pfx_warn_alloc+0x10/0x10
[  454.814985][T18602]  ? __get_vm_area_node+0x28f/0x300
[  454.815008][T18602]  ? fq_pie_init+0x435/0x840
[  454.815038][T18602]  __vmalloc_node_range_noprof+0x690/0x12d0
[  454.815063][T18602]  ? __alloc_frozen_pages_noprof+0x9f/0x370
[  454.815120][T18602]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  454.815144][T18602]  ? fq_pie_init+0x435/0x840
[  454.815172][T18602]  ? rcu_is_watching+0x15/0xb0
[  454.815204][T18602]  ? fq_pie_init+0x435/0x840
[  454.815229][T18602]  __kvmalloc_node_noprof+0x674/0x910
[  454.815255][T18602]  ? fq_pie_init+0x435/0x840
[  454.815282][T18602]  ? tcf_block_get+0x67/0xa0
[  454.815309][T18602]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  454.815343][T18602]  fq_pie_init+0x435/0x840
[  454.815372][T18602]  ? __pfx_fq_pie_init+0x10/0x10
[  454.815397][T18602]  qdisc_create+0x7ac/0xea0
[  454.815431][T18602]  tc_modify_qdisc+0x1538/0x20e0
[  454.815474][T18602]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  454.815539][T18602]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  454.815562][T18602]  rtnetlink_rcv_msg+0x77c/0xb70
[  454.815596][T18602]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  454.815624][T18602]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  454.815657][T18602]  ? ref_tracker_free+0x63a/0x7d0
[  454.815680][T18602]  ? __asan_memcpy+0x40/0x70
[  454.815700][T18602]  ? __pfx_ref_tracker_free+0x10/0x10
[  454.815734][T18602]  netlink_rcv_skb+0x208/0x470
[  454.815766][T18602]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  454.815797][T18602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  454.815840][T18602]  ? netlink_deliver_tap+0x2e/0x1b0
[  454.815879][T18602]  netlink_unicast+0x82f/0x9e0
[  454.815917][T18602]  ? __pfx_netlink_unicast+0x10/0x10
[  454.815947][T18602]  ? netlink_sendmsg+0x642/0xb30
[  454.815974][T18602]  ? skb_put+0x11b/0x210
[  454.816008][T18602]  netlink_sendmsg+0x805/0xb30
[  454.816049][T18602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.816084][T18602]  ? aa_sock_msg_perm+0xf1/0x1d0
[  454.816111][T18602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  454.816139][T18602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  454.816171][T18602]  __sock_sendmsg+0x21c/0x270
[  454.816200][T18602]  ____sys_sendmsg+0x505/0x830
[  454.816241][T18602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  454.816285][T18602]  ? import_iovec+0x74/0xa0
[  454.816317][T18602]  ___sys_sendmsg+0x21f/0x2a0
[  454.816340][T18602]  ? __pfx____sys_sendmsg+0x10/0x10
[  454.816401][T18602]  ? __fget_files+0x2a/0x420
[  454.816427][T18602]  ? __fget_files+0x3a0/0x420
[  454.816464][T18602]  __x64_sys_sendmsg+0x19b/0x260
[  454.816488][T18602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  454.816527][T18602]  ? do_syscall_64+0xbe/0xfa0
[  454.816554][T18602]  do_syscall_64+0xfa/0xfa0
[  454.816573][T18602]  ? lockdep_hardirqs_on+0x9c/0x150
[  454.816593][T18602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.816614][T18602]  ? clear_bhb_loop+0x60/0xb0
[  454.816647][T18602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.816672][T18602] RIP: 0033:0x7f9612f8efc9
[  454.816692][T18602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.816711][T18602] RSP: 002b:00007f9613e0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.816733][T18602] RAX: ffffffffffffffda RBX: 00007f96131e5fa0 RCX: 00007f9612f8efc9
[  454.816749][T18602] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000006
[  454.816762][T18602] RBP: 00007f9613011f91 R08: 0000000000000000 R09: 0000000000000000
[  454.816775][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.816788][T18602] R13: 00007f96131e6038 R14: 00007f96131e5fa0 R15: 00007ffc6e3d7ba8
[  454.816824][T18602]  </TASK>
[  454.816890][T18602] Mem-Info:
[  455.252323][T18602] active_anon:3835 inactive_anon:0 isolated_anon:0
[  455.252323][T18602]  active_file:2766 inactive_file:40001 isolated_file:0
[  455.252323][T18602]  unevictable:768 dirty:59 writeback:0
[  455.252323][T18602]  slab_reclaimable:12198 slab_unreclaimable:110498
[  455.252323][T18602]  mapped:28837 shmem:1361 pagetables:1047
[  455.252323][T18602]  sec_pagetables:0 bounce:0
[  455.252323][T18602]  kernel_misc_reclaimable:0
[  455.252323][T18602]  free:1312945 free_pcp:13167 free_cma:0
[  455.285412][T18618] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  455.303513][T18602] Node 0 active_anon:15440kB inactive_anon:0kB active_file:11064kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115348kB dirty:232kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15160kB pagetables:4044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  455.339771][T18602] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  455.371100][T18602] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  455.402311][T18602] lowmem_reserve[]: 0 2501 2503 2503 2503
[  455.408886][T18602] Node 0 DMA32 free:1333968kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15640kB inactive_anon:0kB active_file:11064kB inactive_file:159800kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:41864kB local_pcp:17800kB free_cma:0kB
[  455.448449][T18602] lowmem_reserve[]: 0 0 1 1 1
[  455.453333][T18602] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  455.484489][T18602] lowmem_reserve[]: 0 0 0 0 0
[  455.490691][T18602] Node 1 Normal free:3902452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10944kB local_pcp:6880kB free_cma:0kB
[  455.524262][T18602] lowmem_reserve[]: 0 0 0 0 0
[  455.529179][T18602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  455.542263][T18602] Node 0 DMA32: 1143*4kB (ME) 295*8kB (UME) 229*16kB (ME) 175*32kB (ME) 42*64kB (UM) 8*128kB (M) 37*256kB (UM) 86*512kB (UM) 31*1024kB (U) 4*2048kB (UME) 298*4096kB (UM) = 1333956kB
[  455.561279][T18602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  455.573126][T18602] Node 1 Normal: 185*4kB (UME) 48*8kB (UME) 47*16kB (UME) 185*32kB (UME) 54*64kB (UME) 10*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3902452kB
[  455.595462][T18602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  455.605253][T18602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.615145][T18602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  455.625362][T18602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.635026][T18602] 44127 total pagecache pages
[  455.639870][T18602] 0 pages in swap cache
[  455.644064][T18602] Free swap  = 124996kB
[  455.648811][T18602] Total swap = 124996kB
[  455.652995][T18602] 2097051 pages RAM
[  455.656875][T18602] 0 pages HighMem/MovableOnly
[  455.661574][T18602] 424556 pages reserved
[  455.669616][T18602] 0 pages cma reserved
[  455.681714][T18603] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  455.750831][T18632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3466'.
[  455.847304][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'.
[  455.932909][T18639] openvswitch: netlink: Flow key attribute not present in set flow.
[  456.065053][ T5146] Bluetooth: hci1: command tx timeout
[  456.108961][   T13] hsr_slave_0: left promiscuous mode
[  456.119412][   T13] hsr_slave_1: left promiscuous mode
[  456.129385][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.145785][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.196645][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.210015][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.315614][   T13] veth1_macvtap: left promiscuous mode
[  456.321635][   T13] veth1_vlan: left promiscuous mode
[  456.328683][   T13] veth0_vlan: left promiscuous mode
[  456.804428][   T13] team0 (unregistering): Port device team_slave_1 removed
[  456.848155][   T13] team0 (unregistering): Port device team_slave_0 removed
[  457.482767][T18589] chnl_net:caif_netlink_parms(): no params data found
[  458.019921][T18696] IPv6: Can't replace route, no match found
[  458.028687][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3482'.
[  458.155131][   T52] Bluetooth: hci1: command tx timeout
[  458.197274][T18589] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.204940][T18589] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.212470][T18589] bridge_slave_0: entered allmulticast mode
[  458.221444][T18589] bridge_slave_0: entered promiscuous mode
[  458.235216][T18589] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.242615][T18589] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.252414][T18589] bridge_slave_1: entered allmulticast mode
[  458.268517][T18589] bridge_slave_1: entered promiscuous mode
[  458.410263][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.432599][T18708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3487'.
[  458.472275][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.481904][T18708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3487'.
[  458.551665][T18708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3487'.
[  458.570547][T18589] team0: Port device team_slave_0 added
[  458.581920][T18589] team0: Port device team_slave_1 added
[  458.691164][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.701466][   T13] IPVS: stop unused estimator thread 0...
[  458.707775][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.737989][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.777581][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.801648][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.842651][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.970704][T18589] hsr_slave_0: entered promiscuous mode
[  458.983976][T18589] hsr_slave_1: entered promiscuous mode
[  458.997307][T18589] debugfs: 'hsr0' already exists in 'hsr'
[  459.003109][T18589] Cannot create hsr debugfs directory
[  459.030635][T18735] ip6gre1: entered allmulticast mode
[  459.709038][T18765] tipc: Started in network mode
[  459.715852][T18765] tipc: Node identity 8220e882dde5, cluster identity 4711
[  459.723433][T18765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.768114][T18765] syzkaller0: entered promiscuous mode
[  459.773984][T18765] syzkaller0: entered allmulticast mode
[  459.847901][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'.
[  459.857789][T18765] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) !
[  459.925208][T18779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.937670][T18765] tipc: Resetting bearer <eth:syzkaller0>
[  459.966779][T18764] tipc: Resetting bearer <eth:syzkaller0>
[  460.008617][T18764] tipc: Disabling bearer <eth:syzkaller0>
[  460.037002][T18589] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  460.052659][T18589] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  460.086472][T18589] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  460.111696][T18589] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  460.225754][ T5146] Bluetooth: hci1: command tx timeout
[  460.427535][T18589] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.456236][T18589] 8021q: adding VLAN 0 to HW filter on device team0
[  460.516069][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.523305][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.577196][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.584441][ T7535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.620063][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3517'.
[  460.747394][T18813] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  460.829291][T18826] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  461.020404][T18839] netlink: 'syz.3.3524': attribute type 1 has an invalid length.
[  461.029286][T18840] netlink: 'syz.2.3523': attribute type 4 has an invalid length.
[  461.147898][T18846] bond1: (slave ip6gretap1): making interface the new active one
[  461.166873][T18846] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  461.179017][T18846] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  461.188403][T18846] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  461.340507][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.787924][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'.
[  461.910374][T18886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  462.047959][T18898] netlink: 'syz.2.3538': attribute type 5 has an invalid length.
[  462.230192][T18906] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3538'.
[  462.304811][ T5146] Bluetooth: hci1: command tx timeout
[  462.468881][T18589] veth0_vlan: entered promiscuous mode
[  462.511713][T18589] veth1_vlan: entered promiscuous mode
[  462.516366][T18921] netlink: 'syz.3.3543': attribute type 11 has an invalid length.
[  462.541951][T18921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3543'.
[  462.602602][T18589] veth0_macvtap: entered promiscuous mode
[  462.614222][T18929] netlink: 'syz.0.3546': attribute type 4 has an invalid length.
[  462.632296][T18589] veth1_macvtap: entered promiscuous mode
[  462.653092][T18932] netlink: 'syz.0.3546': attribute type 4 has an invalid length.
[  462.703669][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.751010][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.835764][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.860627][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.874330][T18941] netlink: 'syz.0.3550': attribute type 15 has an invalid length.
[  462.887503][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.915288][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'.
[  462.947319][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.973092][T18944] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  463.165352][T18954] netlink: 'syz.0.3555': attribute type 1 has an invalid length.
[  463.219866][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.240799][T18954] bond1: (slave gretap1): making interface the new active one
[  463.244757][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.250188][T18954] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  463.274131][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3555'.
[  463.348316][T18964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3557'.
[  463.410733][T18954] 8021q: adding VLAN 0 to HW filter on device bond1
[  463.434325][ T7554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.457942][ T7554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.601643][T18970] netlink: 'syz.2.3559': attribute type 21 has an invalid length.
[  463.627875][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'.
[  463.637544][T18970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3559'.
[  463.843480][T18986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3562'.
[  464.037682][T18998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.091939][T19000] syzkaller0: entered promiscuous mode
[  464.150609][T19000] syzkaller0: entered allmulticast mode
[  464.196996][T18998] tipc: Resetting bearer <eth:syzkaller0>
[  464.216519][T18997] tipc: Resetting bearer <eth:syzkaller0>
[  464.246677][T18997] tipc: Disabling bearer <eth:syzkaller0>
[  464.275637][T19007] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3569'.
[  464.331733][T19010] wg1 speed is unknown, defaulting to 1000
[  464.344313][T19014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3571'.
[  464.408804][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3573'.
[  464.749306][T19040] SET target dimension over the limit!
[  464.795142][T19044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3576'.
[  465.688454][T19088] tipc: Started in network mode
[  465.693417][T19088] tipc: Node identity ca78a97ede3b, cluster identity 4711
[  465.701798][T19088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.714293][T19088] syzkaller0: entered promiscuous mode
[  465.734514][T19088] syzkaller0: entered allmulticast mode
[  465.977684][T19110] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3596'.
[  466.354234][T19095] tipc: Resetting bearer <eth:syzkaller0>
[  466.441710][T19095] tipc: Disabling bearer <eth:syzkaller0>
[  466.658929][T19142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  466.666285][T19142] IPv6: NLM_F_CREATE should be set when creating new route
[  467.358709][T19185] netlink: 'syz.0.3622': attribute type 24 has an invalid length.
[  467.639394][T19198] ipt_REJECT: ECHOREPLY no longer supported.
[  467.725460][T19194] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  467.950448][T19215] openvswitch: netlink: IP tunnel dst address not specified
[  467.971306][T19209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  467.988145][T19209] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  467.997554][T19209] gretap2: entered promiscuous mode
[  468.003007][T19209] gretap2: entered allmulticast mode
[  468.008694][T19220] netlink: 'syz.1.3634': attribute type 2 has an invalid length.
[  468.015042][T19213] netlink: 'syz.0.3631': attribute type 4 has an invalid length.
[  468.050038][T19218] netlink: 'syz.5.3633': attribute type 11 has an invalid length.
[  468.067642][T19218] netlink: 'syz.5.3633': attribute type 11 has an invalid length.
[  468.154015][T19228] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  468.238958][T19233] ipt_REJECT: TCP_RESET invalid for non-tcp
[  468.495731][T19249] syzkaller0: entered promiscuous mode
[  468.501734][T19249] syzkaller0: entered allmulticast mode
[  468.518371][T19249] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  468.558830][T19249] netlink: 'syz.5.3644': attribute type 10 has an invalid length.
[  468.575122][T19249] __nla_validate_parse: 12 callbacks suppressed
[  468.575147][T19249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3644'.
[  468.618942][T19249] batadv0: entered promiscuous mode
[  468.648108][T19249] batadv0: entered allmulticast mode
[  468.662660][T19249] bridge0: port 3(batadv0) entered blocking state
[  468.690669][T19249] bridge0: port 3(batadv0) entered disabled state
[  468.766203][T19249] bridge0: port 3(batadv0) entered blocking state
[  468.772854][T19249] bridge0: port 3(batadv0) entered forwarding state
[  468.780455][T19266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3647'.
[  468.819842][T19268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3648'.
[  469.103894][T19277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3652'.
[  469.255956][ T7554] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  469.266028][ T7554] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  469.526101][T19292] can: request_module (can-proto-0) failed.
[  469.554838][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3658'.
[  469.584469][T19302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3658'.
[  469.710747][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'.
[  469.778212][T19311] syzkaller1: entered promiscuous mode
[  469.805596][T19311] syzkaller1: entered allmulticast mode
[  469.937640][T19321] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3662'.
[  469.958359][T19319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3665'.
[  469.976194][T19319] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001
[  470.117793][T19336] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3662'.
[  470.136525][T19336] gretap0: entered promiscuous mode
[  470.152210][T19336] 0��{X��: renamed from gretap0
[  470.167625][T19336] 0��{X��: left promiscuous mode
[  470.181177][T19336] 0��{X��: entered allmulticast mode
[  470.194078][T19336] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  470.223752][T19337] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  470.459312][T19352] macvtap1: entered allmulticast mode
[  470.469950][T19352] veth0_macvtap: entered allmulticast mode
[  470.810329][T19376] netlink: 'syz.0.3679': attribute type 1 has an invalid length.
[  470.889889][T19376] 8021q: adding VLAN 0 to HW filter on device bond2
[  471.006886][T19395] netlink: 'syz.5.3684': attribute type 83 has an invalid length.
[  471.017771][ T7554] tipc: Subscription rejected, illegal request
[  471.168513][T19406] ipt_ECN: cannot use operation on non-tcp rule
[  471.227435][T19406] bond2: entered allmulticast mode
[  471.233083][T19406] 8021q: adding VLAN 0 to HW filter on device bond2
[  471.289960][T19414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  471.314248][T19414] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  471.322554][T19414] gretap0: entered promiscuous mode
[  471.328053][T19414] gretap0: entered allmulticast mode
[  471.385612][T19416] netlink: 'syz.5.3691': attribute type 29 has an invalid length.
[  471.417460][T19416] netlink: 'syz.5.3691': attribute type 29 has an invalid length.
[  471.869744][T19459] IPVS: set_ctl: invalid protocol: 183 100.1.1.1:20002
[  472.430616][T19485] netlink: 'syz.0.3711': attribute type 1 has an invalid length.
[  472.611688][T19494] IPv6: sit1: Disabled Multicast RS
[  472.625499][T19494] sit1: entered allmulticast mode
[  472.652721][T19495] netlink: 'syz.5.3714': attribute type 7 has an invalid length.
[  472.685983][T19496] netlink: 'syz.3.3713': attribute type 4 has an invalid length.
[  472.699640][T19490] netlink: 'syz.0.3711': attribute type 1 has an invalid length.
[  473.379861][T19550] tipc: Started in network mode
[  473.385050][T19550] tipc: Node identity 263571995c1f, cluster identity 4711
[  473.393988][T19550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.423962][T19550] syzkaller0: entered promiscuous mode
[  473.440251][T19550] syzkaller0: entered allmulticast mode
[  473.500648][T19550] tipc: Resetting bearer <eth:syzkaller0>
[  473.581935][T19558] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.618284][T19558] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.669816][T19548] tipc: Resetting bearer <eth:syzkaller0>
[  473.687102][T19548] tipc: Disabling bearer <eth:syzkaller0>
[  473.752999][T19563] xt_TCPMSS: Only works on TCP SYN packets
[  474.019826][T19584] gre0: entered promiscuous mode
[  474.333945][T19598] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  474.373726][T19598] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  474.387297][T19612] __nla_validate_parse: 20 callbacks suppressed
[  474.387318][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'.
[  474.981468][T19681] netlink: 'syz.3.3748': attribute type 1 has an invalid length.
[  475.001782][T19686] netlink: 'syz.1.3750': attribute type 10 has an invalid length.
[  475.012860][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'.
[  475.088105][T19686] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  475.293833][T19696] netlink: 'syz.5.3753': attribute type 2 has an invalid length.
[  475.331139][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3756'.
[  475.358882][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3755'.
[  475.378862][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3755'.
[  475.666575][T19718] netlink: 'syz.5.3758': attribute type 1 has an invalid length.
[  475.800972][T19714] bond2: (slave geneve2): making interface the new active one
[  475.809850][T19714] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  475.828486][ T7535] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  475.887074][ T7535] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  475.945100][ T7535] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  475.953991][ T7535] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  476.102549][T19737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3765'.
[  476.122331][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'.
[  476.166942][T19739] bond3: Invalid ad_actor_system MAC address.
[  476.173987][T19739] bond3: option ad_actor_system: invalid value (1)
[  476.200879][T19739] bond3 (unregistering): Released all slaves
[  476.258274][T19744] netlink: 'syz.2.3766': attribute type 6 has an invalid length.
[  476.328062][T19746] netlink: 'syz.2.3766': attribute type 6 has an invalid length.
[  476.379217][T19744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3766'.
[  476.466831][T19744] team0: Port device geneve0 added
[  476.558559][T19756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3771'.
[  476.662940][T19758] syzkaller0: entered promiscuous mode
[  476.676998][T19758] syzkaller0: entered allmulticast mode
[  476.701889][T19760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3774'.
[  476.740984][T19758] xt_l2tp: invalid flags combination: 8
[  477.314477][T19779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.419505][T19789] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  477.432921][T19789] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  477.460688][T19790] macvlan0: entered promiscuous mode
[  477.467674][T19790] macvlan0: entered allmulticast mode
[  477.473700][T19790] bond3: (slave macvlan0): Error -98 calling set_mac_address
[  477.515832][T19779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.517046][T19796] validate_nla: 1 callbacks suppressed
[  477.517068][T19796] netlink: 'syz.5.3784': attribute type 1 has an invalid length.
[  477.540459][T19796] netlink: 'syz.5.3784': attribute type 4 has an invalid length.
[  477.651286][T19779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.776067][T19779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.861676][T19821] ipt_REJECT: TCP_RESET invalid for non-tcp
[  477.870324][T19819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.991882][ T7535] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.032650][   T34] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.045416][T19819] tipc: Resetting bearer <eth:syzkaller0>
[  478.063575][   T34] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.084475][ T7552] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.656845][T19835] netlink: 'syz.0.3797': attribute type 1 has an invalid length.
[  478.665530][T19835] netlink: 'syz.0.3797': attribute type 1 has an invalid length.
[  478.674051][T19818] tipc: Resetting bearer <eth:syzkaller0>
[  478.730468][T19818] tipc: Disabling bearer <eth:syzkaller0>
[  479.214100][T19880] netlink: 'syz.2.3808': attribute type 10 has an invalid length.
[  479.282199][T19880] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  479.388190][T19889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.396144][T19889] syzkaller0: entered promiscuous mode
[  479.401655][T19889] syzkaller0: entered allmulticast mode
[  479.413555][T19889] sch_fq: defrate 4 ignored.
[  479.448552][T19889] tipc: Resetting bearer <eth:syzkaller0>
[  479.480853][T19888] tipc: Resetting bearer <eth:syzkaller0>
[  479.519503][T19888] tipc: Disabling bearer <eth:syzkaller0>
[  479.531595][T19898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  479.712755][T19913] __nla_validate_parse: 5 callbacks suppressed
[  479.712777][T19913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3817'.
[  479.754007][T19915] openvswitch: netlink: Unknown key attributes 1
[  479.755166][T19913] syzkaller0: entered promiscuous mode
[  479.768147][T19913] syzkaller0: entered allmulticast mode
[  479.780920][T19913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3817'.
[  480.102382][T19933] vcan0: entered allmulticast mode
[  480.553111][T19958] netlink: 'syz.5.3828': attribute type 1 has an invalid length.
[  480.578634][T19963] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  480.588415][T19963] netlink: 'syz.1.3829': attribute type 8 has an invalid length.
[  480.650122][T19966] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  480.858206][T19958] veth3: entered promiscuous mode
[  480.890422][T19958] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  481.059111][T19987] bond0: (slave gre0): Error: Device type is different from other slaves
[  481.137711][T19999] netlink: 'syz.3.3837': attribute type 1 has an invalid length.
[  481.301526][T20005] veth1_macvtap: left promiscuous mode
[  481.370278][T20011] netlink: 'syz.1.3840': attribute type 1 has an invalid length.
[  481.378955][T20011] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3840'.
[  481.686379][T20026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3848'.
[  481.776387][T20028] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3849'.
[  481.927875][T20038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  481.935275][T20038] IPv6: NLM_F_CREATE should be set when creating new route
[  482.040937][T20043] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  482.067869][T20046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  482.081201][T20047] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  482.119565][T20051] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  482.151854][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3858'.
[  482.242008][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3860'.
[  482.263822][T20057] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  482.276600][T20062] xt_ecn: cannot match TCP bits for non-tcp packets
[  482.285856][T20065] xt_ecn: cannot match TCP bits for non-tcp packets
[  482.818879][T20102] openvswitch: netlink: IPv4 tunnel dst address is zero
[  482.849825][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'.
[  482.896288][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  482.898637][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'.
[  482.906784][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.941561][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.985156][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.016824][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'.
[  483.358448][T20129] 
[  483.360846][T20129] ======================================================
[  483.367881][T20129] WARNING: possible circular locking dependency detected
[  483.374927][T20129] syzkaller #0 Not tainted
[  483.379384][T20129] ------------------------------------------------------
[  483.386434][T20129] syz.1.3880/20129 is trying to acquire lock:
[  483.392511][T20129] ffffffff8f639a98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  483.401848][T20129] 
[  483.401848][T20129] but task is already holding lock:
[  483.409215][T20129] ffff88814537b570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  483.418547][T20129] 
[  483.418547][T20129] which lock already depends on the new lock.
[  483.418547][T20129] 
[  483.428961][T20129] 
[  483.428961][T20129] the existing dependency chain (in reverse order) is:
[  483.437987][T20129] 
[  483.437987][T20129] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  483.446095][T20129]        lock_acquire+0x120/0x360
[  483.451147][T20129]        _raw_spin_lock_bh+0x36/0x50
[  483.456452][T20129]        nr_rt_device_down+0x12a/0x720
[  483.461934][T20129]        nr_device_event+0x137/0x150
[  483.467234][T20129]        notifier_call_chain+0x1b6/0x3e0
[  483.472886][T20129]        __dev_notify_flags+0x18d/0x2e0
[  483.478447][T20129]        netif_change_flags+0xe8/0x1a0
[  483.483932][T20129]        dev_change_flags+0x130/0x260
[  483.489320][T20129]        dev_ioctl+0x7b4/0x1150
[  483.494195][T20129]        sock_do_ioctl+0x22c/0x300
[  483.499326][T20129]        sock_ioctl+0x576/0x790
[  483.504182][T20129]        __se_sys_ioctl+0xfc/0x170
[  483.509297][T20129]        do_syscall_64+0xfa/0xfa0
[  483.514330][T20129]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.520763][T20129] 
[  483.520763][T20129] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  483.528600][T20129]        lock_acquire+0x120/0x360
[  483.533647][T20129]        _raw_spin_lock_bh+0x36/0x50
[  483.538956][T20129]        nr_rt_device_down+0xa9/0x720
[  483.544360][T20129]        nr_device_event+0x137/0x150
[  483.549663][T20129]        notifier_call_chain+0x1b6/0x3e0
[  483.555313][T20129]        __dev_notify_flags+0x18d/0x2e0
[  483.560873][T20129]        netif_change_flags+0xe8/0x1a0
[  483.566345][T20129]        dev_change_flags+0x130/0x260
[  483.571734][T20129]        dev_ioctl+0x7b4/0x1150
[  483.576637][T20129]        sock_do_ioctl+0x22c/0x300
[  483.581761][T20129]        sock_ioctl+0x576/0x790
[  483.586620][T20129]        __se_sys_ioctl+0xfc/0x170
[  483.591738][T20129]        do_syscall_64+0xfa/0xfa0
[  483.596783][T20129]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.603207][T20129] 
[  483.603207][T20129] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  483.611137][T20129]        validate_chain+0xb9b/0x2140
[  483.616568][T20129]        __lock_acquire+0xab9/0xd20
[  483.621834][T20129]        lock_acquire+0x120/0x360
[  483.627240][T20129]        _raw_spin_lock_bh+0x36/0x50
[  483.632569][T20129]        nr_remove_neigh+0x25/0xe0
[  483.637686][T20129]        nr_add_node+0x1d9f/0x2570
[  483.642815][T20129]        nr_rt_ioctl+0xc12/0xd50
[  483.647809][T20129]        sock_do_ioctl+0xdc/0x300
[  483.652849][T20129]        sock_ioctl+0x576/0x790
[  483.657710][T20129]        __se_sys_ioctl+0xfc/0x170
[  483.662830][T20129]        do_syscall_64+0xfa/0xfa0
[  483.667860][T20129]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.674399][T20129] 
[  483.674399][T20129] other info that might help us debug this:
[  483.674399][T20129] 
[  483.684742][T20129] Chain exists of:
[  483.684742][T20129]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  483.684742][T20129] 
[  483.698670][T20129]  Possible unsafe locking scenario:
[  483.698670][T20129] 
[  483.706129][T20129]        CPU0                    CPU1
[  483.711498][T20129]        ----                    ----
[  483.716862][T20129]   lock(&nr_node->node_lock);
[  483.721644][T20129]                                lock(nr_node_list_lock);
[  483.728759][T20129]                                lock(&nr_node->node_lock);
[  483.736050][T20129]   lock(nr_neigh_list_lock);
[  483.740744][T20129] 
[  483.740744][T20129]  *** DEADLOCK ***
[  483.740744][T20129] 
[  483.748982][T20129] 1 lock held by syz.1.3880/20129:
[  483.754106][T20129]  #0: ffff88814537b570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  483.763885][T20129] 
[  483.763885][T20129] stack backtrace:
[  483.769800][T20129] CPU: 1 UID: 0 PID: 20129 Comm: syz.1.3880 Not tainted syzkaller #0 PREEMPT(full) 
[  483.769830][T20129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  483.769845][T20129] Call Trace:
[  483.769852][T20129]  <TASK>
[  483.769860][T20129]  dump_stack_lvl+0x189/0x250
[  483.769884][T20129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.769902][T20129]  ? __pfx__printk+0x10/0x10
[  483.769919][T20129]  ? stack_trace_save+0x9c/0xe0
[  483.769941][T20129]  print_circular_bug+0x2ee/0x310
[  483.769971][T20129]  check_noncircular+0x134/0x160
[  483.770006][T20129]  validate_chain+0xb9b/0x2140
[  483.770042][T20129]  __lock_acquire+0xab9/0xd20
[  483.770067][T20129]  ? nr_remove_neigh+0x25/0xe0
[  483.770082][T20129]  lock_acquire+0x120/0x360
[  483.770104][T20129]  ? nr_remove_neigh+0x25/0xe0
[  483.770122][T20129]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  483.770140][T20129]  ? nr_remove_neigh+0x25/0xe0
[  483.770161][T20129]  _raw_spin_lock_bh+0x36/0x50
[  483.770188][T20129]  ? nr_remove_neigh+0x25/0xe0
[  483.770203][T20129]  nr_remove_neigh+0x25/0xe0
[  483.770220][T20129]  nr_add_node+0x1d9f/0x2570
[  483.770248][T20129]  ? dev_get_by_name+0x21/0x200
[  483.770266][T20129]  ? dev_get_by_name+0x21/0x200
[  483.770283][T20129]  ? dev_get_by_name+0x21/0x200
[  483.770300][T20129]  ? nr_call_to_digi+0x136/0x1b0
[  483.770326][T20129]  nr_rt_ioctl+0xc12/0xd50
[  483.770357][T20129]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  483.770381][T20129]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.770402][T20129]  ? apparmor_capable+0x137/0x1b0
[  483.770428][T20129]  ? capable+0x89/0xe0
[  483.770452][T20129]  ? nr_ioctl+0x1b1/0x3b0
[  483.770474][T20129]  sock_do_ioctl+0xdc/0x300
[  483.770494][T20129]  ? __pfx_sock_do_ioctl+0x10/0x10
[  483.770520][T20129]  sock_ioctl+0x576/0x790
[  483.770539][T20129]  ? __pfx_sock_ioctl+0x10/0x10
[  483.770559][T20129]  ? __fget_files+0x3a0/0x420
[  483.770580][T20129]  ? __fget_files+0x2a/0x420
[  483.770602][T20129]  ? bpf_lsm_file_ioctl+0x9/0x20
[  483.770627][T20129]  ? __pfx_sock_ioctl+0x10/0x10
[  483.770645][T20129]  __se_sys_ioctl+0xfc/0x170
[  483.770661][T20129]  do_syscall_64+0xfa/0xfa0
[  483.770677][T20129]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.770694][T20129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.770710][T20129]  ? clear_bhb_loop+0x60/0xb0
[  483.770729][T20129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.770745][T20129] RIP: 0033:0x7f4fdf98efc9
[  483.770763][T20129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.770779][T20129] RSP: 002b:00007f4fe08fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.770798][T20129] RAX: ffffffffffffffda RBX: 00007f4fdfbe5fa0 RCX: 00007f4fdf98efc9
[  483.770811][T20129] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a
[  483.770823][T20129] RBP: 00007f4fdfa11f91 R08: 0000000000000000 R09: 0000000000000000
[  483.770833][T20129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.770844][T20129] R13: 00007f4fdfbe6038 R14: 00007f4fdfbe5fa0 R15: 00007ffddb069178
[  483.770867][T20129]  </TASK>