last executing test programs:

2m14.06320188s ago: executing program 4 (id=2499):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x2205c804)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r8)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="640000005ed91f6974fe65000074324c98b761139b029465ac8a880c5542e3030000007fa23f1184ecd837aab50e4b40bba560c5eade29555fc7742f94c5a415ee39ee40c6057e2d2cc0f2d6af9171f129d7eae3ffe95b04e89a8a6da69db853a4f4809aaeef57ce15c4a973aa19e2b1002d4ce85b", @ANYRES16=r9, @ANYBLOB="080028bd7000fddbdf2509000000e80004801c00078008000400faffffff080003000700000008000300812900002400078008000200070000000800040005000000080002003400000008000400010000802c0007800800030001000000080001001b0000000800010011000000080001000700000008000400060000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00002400078008000200010000000800040002000000080001001b00000008000400af00000014000780080003000800000008000300170000000900010073797a31000000000900010073797a3000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="390979fd459c"})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r5)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4014}, 0x80)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00032cbd70b489858a24297cbc00"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44044081)

2m12.287825547s ago: executing program 4 (id=2505):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001000)={0x0, 'veth0_vlan\x00', {0x2}, 0x7}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)

2m12.157597922s ago: executing program 4 (id=2510):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffffca, &(0x7f0000000100)={&(0x7f0000000240)=@ipmr_newroute={0x0, 0x18, 0x800, 0x70bd28, 0x25dfdbff, {0x80, 0x0, 0x14, 0xf1, 0xfd, 0x6, 0xff, 0x8, 0xc38dc210cce7dfed}, [@RTA_OIF={0x0, 0x4, r4}, @RTA_SPORT={0x0, 0x1c, 0x4e24}, @RTA_FLOW={0x0, 0xb, 0x3}]}, 0x54}}, 0x0)

2m11.353401929s ago: executing program 4 (id=2517):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000580)={'erspan0\x00', <r4=>0x0, 0x30, 0x7800, 0x4, 0x1, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x64, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x6e, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e}, {@empty, 0x9}, {@empty, 0x3}, {@broadcast, 0x80000001}, {@private=0xa010102, 0x40}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r5=>0x0})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x3b)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x1c4, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r5}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8004}, 0x20004000) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000ac0)={<r12=>r8, 0x3, 0x2, 0x4})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x74, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @union={0x0, 0x5, 0x0, 0x5, 0x1, 0x823, [{0xd, 0x4, 0x9}, {0x4, 0x3, 0x3e}, {0x2, 0x0, 0x2}, {0x5, 0x1, 0x401}, {0x1, 0x0, 0x6}]}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000000a00)=""/119, 0x8d, 0x77, 0x0, 0x7fffffff, 0x10000, @value=r12}, 0x28) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840)

2m10.951543498s ago: executing program 4 (id=2522):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000380)=""/102, &(0x7f0000000200)=0x66)
pipe(&(0x7f0000000040))
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd25, 0x4, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xf}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c880}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8800)

2m10.565794029s ago: executing program 4 (id=2523):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r6, @ANYRES32=r5], 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)

2m6.069010848s ago: executing program 0 (id=2544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180))
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="010000"], 0x3c}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

2m5.284818463s ago: executing program 0 (id=2550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)

2m4.904914478s ago: executing program 0 (id=2554):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140)=0x4) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x4, 0xfffff801, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0xc3}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', <r2=>r0, 0x7800, 0x0, 0x6, 0x541, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x68, 0x0, 0xd, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x26, 0x2, [{0x0, 0x6, "b5d32808"}, {0x1, 0xe, "a21414d199d44b539a797dbd"}, {0x0, 0x3, '+'}, {0x6, 0x9, "51c7fa0533118a"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x29, 0x3, [{0x0, 0x2}, {0x7, 0x9, "8fee1769fba4b3"}, {0x5, 0x10, "8af0de521d62a35625c769d8db06"}, {0x6, 0x8, "4f2304174d58"}]}]}}}}}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x34}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40640c5}, 0x4008000) (async)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000000000000100000009000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1454bb0000000000000000110000000000000000000000010000007f0000000000000011000000000000000000000001000000f60000000000000054000000000000000000000007000000440db616dc4f75d3a15525d7d8863400000000050aeacfd78ad1b4e5000705964ef60704b0450008e8dd1f6d9c8d060e1446cdfc8817a8ed9585e000000000000014000000000000000000000001000000ffffffff00000000"], 0xd8}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="68a565d6139404cab54908a36108a90cc03de1f3c06eeb6af54be4e86a2d999215be1c6c4538368bcf5b2ae3598c9f3fc2bdf8dda4aa623e27c3094c9fdcb31ab8", 0x41}, {&(0x7f0000000600)="1fc0692f9495b0f08d87d71807109c690097764c3402d3359978f962c300ed0032298f116a52c7070bdf3fc858752369c050272ae8f2fd3061ee51d740522093", 0x40}, {&(0x7f0000000640)="67f8707ad101dc9219cbb8fe7417a1c68cda4a143ff69745183bdf826511c8f69cc6a10c62d49d718695c6e56120c18fc44a", 0x32}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0040000000000000000086e29f133b0002000000", @ANYRES32=r0, @ANYBLOB="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"], 0x168}}], 0x2, 0x84) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
connect$unix(r5, 0x0, 0x0) (async)
getsockname(r3, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'pim6reg1\x00'})

2m4.371857198s ago: executing program 0 (id=2557):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r1, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4)
sendto$inet6(r1, &(0x7f00000014c0)="4c900a7b62a7dd3c9882e6c5705268a21b4a030e86c6808b1f1adc043634b1f5b0a61020f9fd25ac9f48b0d296085f88ce03d5574de71c10412f2494722f052eb64ef46a6547f8877f7711997a2b7d221c1c5dd5868c0873dfe95b08fc5eb6851cc7d118cbd645427540ac4be4152dbced57b4662fa69dfbd871a0e9282322bbed6495ade77d4c5f7366f611862a4a60d46e40e74d7cb9c2a77963a21d45a556b520540ca1f94f3a2e2f1b9a234d8b1945d825d50f5f570381e7a162f731235eeaa97e", 0xc3, 0x8d0, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)

2m3.558212125s ago: executing program 3 (id=2562):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000003c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m1.402223524s ago: executing program 0 (id=2565):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1m59.320971229s ago: executing program 3 (id=2567):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000580))
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x5, 0x6, 0x8, 0x7f, 0x7ff}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x24}, 0x94)

1m58.412277053s ago: executing program 2 (id=2568):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x3c0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x6, @loopback, 0x800000}, 0x1c)

1m55.632138932s ago: executing program 0 (id=2569):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r2, 0x331, 0x0, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x48001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

1m52.394391791s ago: executing program 32 (id=2523):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r6, @ANYRES32=r5], 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)

1m47.041776166s ago: executing program 3 (id=2571):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1m46.668946381s ago: executing program 2 (id=2572):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x528, 0x298, 0x298, 0xffffffff, 0x388, 0xf0, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast2, @icmp_id, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0, @private0}}, @common=@ipv6header={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@mcast1, @empty, [], [], 'bond_slave_1\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000040)=0x71)
r1 = socket(0x1f, 0xa, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}})
socket$netlink(0x10, 0x3, 0xf)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, &(0x7f000001c980)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f000001ca40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0)

1m38.235438648s ago: executing program 33 (id=2569):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r2, 0x331, 0x0, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x48001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

1m37.821099403s ago: executing program 3 (id=2575):
r0 = socket$inet6(0xa, 0x80000, 0x2b4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x0, 0x318, 0x0, 0x0, 0xe8, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@remote, @loopback, [], [], 'wg1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x0, 0x5, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0xd1ce}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}, 0x38) (async)
close(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffff8, @empty, 0xfffffffc}, 0x1c) (async)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x78e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

1m35.058300627s ago: executing program 2 (id=2577):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

1m27.546685212s ago: executing program 3 (id=2578):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x35, 0xffffffffffffffff}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000500010073797a30000000000c0007800500150001000000050004000000000015000300686173683a69702c706f72742c6e657400000000050005000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x61, &(0x7f00000000c0)=0x35c3, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x60040085, &(0x7f0000000180)={0xa, 0x4e24, 0x8001, @private2, 0x627bcafb}, 0x1c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700), 0x3}, 0x20)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000440)=[@mss={0x2, 0x4}, @window={0x3, 0xc, 0x6}, @window={0x3, 0x1, 0x8}, @sack_perm, @window={0x3, 0x10, 0xc8}, @sack_perm], 0x6)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000)
recvmmsg(r3, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0xb9c}], 0x1, 0x12000, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000425d5f534b2e917604466be9605000800000000000a0087007770616e04f9cc0034000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000140001f42950d8727e5dfd0028000000"], 0x14}}, 0x0)

1m25.640907469s ago: executing program 2 (id=2579):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, 0x0, 0x0, 0x20044000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1e, 0x800, 0x0, 0x25dfdbfd, {0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xff7fc}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1e, 0x800, 0x0, 0x25dfdbfd, {0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xff7fc}]}, 0x24}}, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)

1m12.707921114s ago: executing program 3 (id=2581):
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000004000000156413a363e0bb94857e216b0458ed92d4000003000000400001802c0004001400010002000000ac141423000000000000000014ba020002000000ffffacdccd644aeaf5d400000d00017fc9ad375e8b268d3d9f5f926e84be6bcec5e766aa3f175d15d7bb9a0135be8dc5d586cbf0578096ce6e1b4e85f40f0d0fe595e470b9619bcafff9a21e92e722773f314e04eb903b73427d15447e3189b61b3e9d391d316e9a462ec1616f1cd32a5d5621dbd7eabffe189551499f27a765388e2e53a830125bcafe27f3547041f6ba91da917404201ed8175a8ce928b19bc353220ea5e7772d7e50168a8527d33b2968aa7e40112bc8ac262550223fb00b6796d10c65ef69bcdb38d076fab408e99ef00706c49cbc368c170512e24164d5cd257313797c21f2142ed58ffc2b444a131afdfb7642eb53b6cebb697fcbf95810238bbb9de4d4dc1c0e751f90fabfc0299edc378c292952114c1a1ee3a376bfe9cdb4a396c31b32ad58786b58ca45"], 0x54}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8020100090780000"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket$unix(0x1, 0x2, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="f16d914c579d986acdb1c6b264d879c270a560d22e9160134b1e15914c9adff2d18532f82cbd769e0fa0e63d9c57e33a87cf369a"], 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0xfff2, 0x6}, {0x0, 0xffff}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000200)={'erspan0\x00', @link_local})
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x393, 0x0)

1m10.944887436s ago: executing program 2 (id=2582):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x30, 0x0, "c5944c4bce3eb0e61e1e9dfdab77bb248132413a76c1f29e13decfb827a0f0249e646353cad981f8fb6cd138a0ceead64db1cc55d6c18a2b8b35e4c0f5b94be8eb8dbe57798bc860529ad489bf700730"}, 0xd8)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x80000000000000d)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="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"}, {&(0x7f0000000180)="1a4b584e08326f129c9e5d08b5bd71d4760d607ed6d3c5961b001aa7c94f315edeca074b8ff5fc7bf0344e600bc1975d6e499fd7f513870d899dd9ea87f3a8456cea5fd938c866ecc08d153e10c796b6f023762e8a213d7207610d7a5294fd89e0147c2c927cb5e3c3c18e686a9d99e7af3e85d3762752e690bcaff38967c1eb1a7df1804f665446f9ccee0d0dc575ffffffffffffffff16f30227050f278ca0e74e76dc7f4d0c"}], 0x0, 0x0, 0xfffffffffffffd6e, 0x600}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r4, 0x4004743c, 0x20000000)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x4c, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x2, 0xf3, 0x3, 0x2]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3cc}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x491}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)

1m10.67841507s ago: executing program 1 (id=2583):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[], 0x120}}, 0x0)
recvfrom$llc(r1, &(0x7f0000000140)=""/218, 0xda, 0x20002021, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m0.70559515s ago: executing program 1 (id=2584):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x80047453, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

59.817298826s ago: executing program 2 (id=2585):
r0 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r2 = socket$phonet(0x23, 0x2, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002840)={0x0, <r4=>0x0}, &(0x7f0000002880)=0xc)
sendmsg$netlink(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20, 0x50}, 0x40880)
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000040)={0x3, @bcast, r4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000080)={'vcan0\x00', 0x8})

55.374108647s ago: executing program 34 (id=2581):
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x54}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8020100090780000"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket$unix(0x1, 0x2, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="f16d914c579d986acdb1c6b264d879c270a560d22e9160134b1e15914c9adff2d18532f82cbd769e0fa0e63d9c57e33a87cf369a"], 0x8)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0xfff2, 0x6}, {0x0, 0xffff}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000200)={'erspan0\x00', @link_local})
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x393, 0x0)

47.579732947s ago: executing program 1 (id=2587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x3, 0x7}, 0xc)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0xd, {{0xa, 0x4e24, 0x4, @private0, 0x1}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {{0xa, 0x4e23, 0x2, @remote, 0x100}}]}, 0x190)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001042abd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="03010000bcb5f31a2400128011000100627269645e656b736c613065000000000c00058005002b0001000000140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair(0xb, 0xe361bcd883a26e46, 0x2, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x218, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x207, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="fec2d8e3dc1e2b2942098f52c7cf5eaca2bf492fbddc3caa880ee09c8e678bd4692c5ea403ea61f11c4ee62aa829520516ad9d2b7b655930c200ef6b52cb96d0f6cfdeb2f58c0728952697057e81d86ca2f79ff6db2d1cd9ec9d1e93ae297493def6f126c2a80f44e5cb7df4085deb4d746160e97d2b6ad2c6b8071bbf8aa472b38e017e9297b0b9ccebd1fb64c4e2598b0bf781157cb64e4afc42884eb3b8c8a5b65bc5265c30d9148abf5f28f203156a890d66c4d6a7b15e2beab06f439d2c59bbc7595e138f8bada2fe3b9daf6058f6299c2cfc616236510c597e7dc8b8da6ac42c49d300ad2b2323a64ecfaacc9ab08e431697367e2357a91f3b", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669c5d3f2df1b"]}]}, 0x218}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

42.141428853s ago: executing program 35 (id=2585):
r0 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r2 = socket$phonet(0x23, 0x2, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002840)={0x0, <r4=>0x0}, &(0x7f0000002880)=0xc)
sendmsg$netlink(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20, 0x50}, 0x40880)
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000040)={0x3, @bcast, r4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000080)={'vcan0\x00', 0x8})

39.36374444s ago: executing program 1 (id=2589):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000005c000071102b0000001a009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = gettid()
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
r5 = socket(0x2a, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20)
recvmsg$unix(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062)
r11 = getuid()
r12 = socket$alg(0x26, 0x5, 0x0)
sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000400)={0xa8, 0x42, 0x4, 0x70bd27, 0x25dfdbfb, "", [@generic="b8508ec931cfe51ef2f1315c2e4a8bc12e176e4daa9b3897fb0f14e7568bd2fadcd2e84383faaf75fb1dc9501f8d661385cb53d76ddf884016aea0ea64f4d833e2c60edc72d78458f5923598beb06ba2e111770aafd6bcc4388762dd79eac75dc3a09839bb02fb2b794744fe84931644c77cbbbb2b6b68ed95cb797d72eefff1a3", @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xa8}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r11, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r2, r12, r2, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x68, 0x804}, 0x80)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r14, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

29.755964344s ago: executing program 1 (id=2590):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r2, 0x25, r0}, 0x10)
pipe(&(0x7f0000000080))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57c}, 0x94)

17.775999735s ago: executing program 1 (id=2591):
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom, @rose, @remote, @bcast, @rose, @bcast, @default]}, &(0x7f0000000340)=0x48, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000380)=0x8000, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14)
r2 = socket$kcm(0xa, 0x1, 0x106)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x497, 0x7, 0x2, 0x1}, 0x10)
socket$inet6(0xa, 0x6, 0x3)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0xe4, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_VF_PORTS={0xbc, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8fd049ca62022fec68f909b9409e2d76"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "312c01ae2afae27608211300965d6763"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "12d41c7d30c7de76d9b350790d13ed99"}, @IFLA_PORT_PROFILE={0x13, 0x2, '&:*.+!\x94,\f[&\'-*\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b61486e0de26ed8477239d1f824dca2d"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c2a6881d345dc78028eaa71ed88723db"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e697a3b3fa2bc214f907357c0b2c121c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fe7e12c832847ca831e2a6cb03871c6b"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}]}, @IFLA_LINK={0x8, 0x5, r6}]}, 0xe4}}, 0x4000040)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x7, @loopback, 0xd}}}, 0x80, 0x0}, 0xe07e872424dfef4e)
listen(r2, 0x8)

0s ago: executing program 36 (id=2591):
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@netrom, @rose, @remote, @bcast, @rose, @bcast, @default]}, &(0x7f0000000340)=0x48, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000380)=0x8000, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14)
r2 = socket$kcm(0xa, 0x1, 0x106)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r6=>0x0})
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000240)={0x497, 0x7, 0x2, 0x1}, 0x10)
socket$inet6(0xa, 0x6, 0x3)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0xe4, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_VF_PORTS={0xbc, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8fd049ca62022fec68f909b9409e2d76"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "312c01ae2afae27608211300965d6763"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "12d41c7d30c7de76d9b350790d13ed99"}, @IFLA_PORT_PROFILE={0x13, 0x2, '&:*.+!\x94,\f[&\'-*\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b61486e0de26ed8477239d1f824dca2d"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "c2a6881d345dc78028eaa71ed88723db"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e697a3b3fa2bc214f907357c0b2c121c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fe7e12c832847ca831e2a6cb03871c6b"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}]}, @IFLA_LINK={0x8, 0x5, r6}]}, 0xe4}}, 0x4000040)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x7, @loopback, 0xd}}}, 0x80, 0x0}, 0xe07e872424dfef4e)
listen(r2, 0x8)

kernel console output (not intermixed with test programs):

ver after parsing attributes in process `syz.1.255'.
[  100.354570][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'.
[  100.477240][ T6852] openvswitch: netlink: Multiple metadata blocks provided
[  101.483298][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'.
[  101.565473][ T6878] Bluetooth: MGMT ver 1.23
[  101.950924][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'.
[  101.952612][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  101.974046][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  101.988701][ T6897] netlink: 'syz.2.271': attribute type 3 has an invalid length.
[  102.518176][ T6928] netlink: 'syz.1.279': attribute type 3 has an invalid length.
[  102.812439][ T6941] macvtap1: entered allmulticast mode
[  102.838649][ T6941] veth0_macvtap: entered allmulticast mode
[  103.331614][ T6978] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.436309][ T6983] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  103.756848][ T7002] netlink: 'syz.0.306': attribute type 10 has an invalid length.
[  103.803602][ T6996] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.847833][ T6996] bond0: (slave bond1): Enslaving as an active interface with an up link
[  103.901570][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.918201][ T7002] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  103.957831][ T7014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.176269][ T7026] netlink: 'syz.4.312': attribute type 7 has an invalid length.
[  104.239784][ T7025] netlink: 'syz.4.312': attribute type 7 has an invalid length.
[  104.261919][ T7025] __nla_validate_parse: 8 callbacks suppressed
[  104.261935][ T7025] netlink: 140 bytes leftover after parsing attributes in process `syz.4.312'.
[  104.265361][ T7026] netlink: 140 bytes leftover after parsing attributes in process `syz.4.312'.
[  104.389080][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[  104.417283][ T7035] ip6t_rpfilter: unknown options
[  104.424346][ T7040] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000
[  104.511167][   T61] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa
[  104.881677][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.321'.
[  104.892680][ T7069] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  105.244602][ T7054] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[  105.513260][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'.
[  106.079389][ T7111] netlink: 'syz.4.338': attribute type 1 has an invalid length.
[  106.334430][ T7111] bond1: entered promiscuous mode
[  106.340064][ T7111] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.359678][ T7118] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.367850][ T7118] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  106.379040][ T7118] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  106.394386][ T7118] bond1: (slave wireguard0): making interface the new active one
[  106.402305][ T7118] wireguard0: entered promiscuous mode
[  106.409231][ T7118] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  106.532337][ T7128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.724686][ T7136] veth0_virt_wifi: renamed from vlan0
[  107.179926][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'.
[  107.475984][ T7174] netlink: 'syz.3.351': attribute type 3 has an invalid length.
[  107.853823][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'.
[  107.873269][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'.
[  107.883702][ T7190] netlink: 50 bytes leftover after parsing attributes in process `syz.3.356'.
[  108.051423][ T7196] netlink: 'syz.1.358': attribute type 1 has an invalid length.
[  108.093465][ T7198] netlink: 'syz.3.359': attribute type 2 has an invalid length.
[  108.111783][ T7198] netlink: 244 bytes leftover after parsing attributes in process `syz.3.359'.
[  108.857913][ T7219] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.991980][ T7234] macvlan2: entered promiscuous mode
[  109.011239][ T7234] macvlan2: entered allmulticast mode
[  109.038004][ T7234] bond2: (slave macvlan2): Opening slave failed
[  109.344316][ T7254] __nla_validate_parse: 5 callbacks suppressed
[  109.344335][ T7254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.371'.
[  109.436806][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'.
[  109.462382][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'.
[  109.994440][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[  110.028986][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.083195][ T7287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.381'.
[  110.139441][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.496318][ T7311] netlink: 'syz.1.386': attribute type 5 has an invalid length.
[  110.532716][ T7311] netlink: 140 bytes leftover after parsing attributes in process `syz.1.386'.
[  110.549840][ T7304] netlink: 'syz.1.386': attribute type 10 has an invalid length.
[  110.663656][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[  110.677367][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'.
[  110.691992][ T7304] bridge_slave_1: left allmulticast mode
[  110.703683][ T7304] bridge_slave_1: left promiscuous mode
[  110.727779][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.772343][ T7304] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  110.838723][ T7322] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  111.067091][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'.
[  111.569106][ T7359] netlink: 'syz.1.401': attribute type 29 has an invalid length.
[  111.591650][ T7359] netlink: 'syz.1.401': attribute type 29 has an invalid length.
[  111.644915][ T7359] netlink: 500 bytes leftover after parsing attributes in process `syz.1.401'.
[  113.221544][ T7446] netlink: 'syz.4.427': attribute type 4 has an invalid length.
[  113.348749][ T7453] netlink: 'syz.1.428': attribute type 4 has an invalid length.
[  113.434074][ T7455] netlink: 'syz.4.431': attribute type 2 has an invalid length.
[  113.513225][ T7459] netlink: 'syz.4.433': attribute type 1 has an invalid length.
[  113.553474][ T7461] netlink: 'syz.4.433': attribute type 1 has an invalid length.
[  113.746630][ T7469] team0: Device gtp0 is of different type
[  113.817875][   T61] bond0: (slave bond_slave_0): interface is now down
[  113.833700][   T61] bond0: (slave bond_slave_1): interface is now down
[  113.860659][   T61] bond0: (slave bridge_slave_1): interface is now down
[  113.898855][ T3559] bond0: (slave bond_slave_0): interface is now down
[  113.921282][ T3559] bond0: (slave bond_slave_1): interface is now down
[  113.945861][ T3559] bond0: (slave bridge_slave_1): interface is now down
[  113.974282][ T3559] bond0: now running without any active interface!
[  114.278652][ T7491] vlan0: entered promiscuous mode
[  114.326557][ T7491] team0: Port device vlan0 added
[  114.367546][ T7495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.549295][ T7495] syzkaller0: entered promiscuous mode
[  114.554940][ T7495] syzkaller0: entered allmulticast mode
[  114.591033][ T7495] tipc: Resetting bearer <eth:syzkaller0>
[  114.618075][ T7509] __nla_validate_parse: 71 callbacks suppressed
[  114.618093][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'.
[  114.690094][ T7493] tipc: Resetting bearer <eth:syzkaller0>
[  115.418290][ T5942] tipc: Node number set to 2333381008
[  116.212434][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[  116.231553][ T7516] netlink: 116 bytes leftover after parsing attributes in process `syz.0.448'.
[  116.938423][ T7567] netlink: 'syz.4.458': attribute type 21 has an invalid length.
[  117.001842][ T7567] netlink: 'syz.4.458': attribute type 6 has an invalid length.
[  117.044469][ T7567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.458'.
[  117.124794][ T7571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.278136][ T7579] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  117.325781][ T7579] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  117.518503][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'.
[  117.557407][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'.
[  117.629564][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'.
[  117.666089][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'.
[  117.693659][ T7608] netlink: 44 bytes leftover after parsing attributes in process `syz.0.466'.
[  117.844650][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'.
[  118.579304][ T7648] netlink: 'syz.0.479': attribute type 2 has an invalid length.
[  118.588197][ T7648] netlink: 119 bytes leftover after parsing attributes in process `syz.0.479'.
[  118.611003][ T7648] netlink: 'syz.0.479': attribute type 2 has an invalid length.
[  118.963293][ T7664] netlink: 'syz.3.484': attribute type 1 has an invalid length.
[  119.134513][ T7668] bond2: (slave gretap1): making interface the new active one
[  119.168995][ T7668] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  119.477442][ T7691] xt_ecn: cannot match TCP bits for non-tcp packets
[  119.953799][ T7712] __nla_validate_parse: 5 callbacks suppressed
[  119.953815][ T7712] netlink: 256 bytes leftover after parsing attributes in process `syz.1.501'.
[  119.971484][ T7711] netlink: 'syz.0.502': attribute type 1 has an invalid length.
[  119.987449][ T7711] netlink: 216 bytes leftover after parsing attributes in process `syz.0.502'.
[  120.007947][ T7711] netlink: 80 bytes leftover after parsing attributes in process `syz.0.502'.
[  120.022904][ T7711] tipc: Started in network mode
[  120.032247][ T7711] tipc: Node identity 16981737fa4f, cluster identity 4711
[  120.046251][ T7711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.062706][ T7711] syzkaller0: entered promiscuous mode
[  120.126583][ T7711] syzkaller0: entered allmulticast mode
[  120.194662][ T7722] netlink: 'syz.1.504': attribute type 10 has an invalid length.
[  120.210641][ T7725] netlink: 'syz.1.504': attribute type 10 has an invalid length.
[  120.221509][ T7711] tipc: Resetting bearer <eth:syzkaller0>
[  120.241524][ T7708] tipc: Resetting bearer <eth:syzkaller0>
[  120.294690][ T7708] tipc: Disabling bearer <eth:syzkaller0>
[  120.618445][ T7745] netlink: 'syz.3.510': attribute type 1 has an invalid length.
[  120.635854][ T7745] netlink: 216 bytes leftover after parsing attributes in process `syz.3.510'.
[  120.785027][ T7752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'.
[  121.227505][ T7772] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  121.287118][ T7772] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  121.388278][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'.
[  121.677777][ T7790] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  122.200623][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'.
[  122.978113][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[  123.014763][ T7861] netlink: 'syz.0.542': attribute type 3 has an invalid length.
[  123.050820][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[  123.090281][ T7862] netlink: 'syz.0.542': attribute type 3 has an invalid length.
[  123.415576][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.549'.
[  123.839317][ T7911] syzkaller0: entered promiscuous mode
[  123.844848][ T7911] syzkaller0: entered allmulticast mode
[  123.857281][   T61] wlan1: Trigger new scan to find an IBSS to join
[  123.999505][ T7918] 0ªX¹¦D: renamed from gretap0 (while UP)
[  124.016362][ T7922] netlink: 'syz.2.557': attribute type 1 has an invalid length.
[  124.036960][ T7918] 0ªX¹¦D: entered allmulticast mode
[  124.046536][ T7918] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  124.275018][ T7930] netlink: 'syz.2.559': attribute type 1 has an invalid length.
[  124.333365][ T7933] netlink: 'syz.4.560': attribute type 11 has an invalid length.
[  124.498319][ T7935] delete_channel: no stack
[  124.503193][ T7935] delete_channel: no stack
[  124.568058][ T7935] delete_channel: no stack
[  124.579693][ T7935] delete_channel: no stack
[  124.584334][ T7935] delete_channel: no stack
[  124.626284][ T7935] delete_channel: no stack
[  124.630949][ T7935] delete_channel: no stack
[  124.670405][ T7935] delete_channel: no stack
[  124.690150][ T7935] delete_channel: no stack
[  124.694821][ T7935] delete_channel: no stack
[  124.719283][ T7935] delete_channel: no stack
[  124.729399][ T7935] delete_channel: no stack
[  124.739821][ T7935] delete_channel: no stack
[  124.752610][ T7935] delete_channel: no stack
[  124.758389][ T7935] delete_channel: no stack
[  124.806989][ T7935] delete_channel: no stack
[  124.817158][ T7935] delete_channel: no stack
[  124.829194][ T7935] delete_channel: no stack
[  124.880632][ T7935] delete_channel: no stack
[  124.919726][ T7935] delete_channel: no stack
[  124.958921][ T7935] delete_channel: no stack
[  124.963555][ T7935] delete_channel: no stack
[  124.964338][ T7969] __nla_validate_parse: 4 callbacks suppressed
[  124.964352][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  124.984611][ T7935] delete_channel: no stack
[  125.001981][ T7935] delete_channel: no stack
[  125.023120][ T7935] delete_channel: no stack
[  125.034254][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  125.046319][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'.
[  125.050771][ T7935] delete_channel: no stack
[  125.055430][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'.
[  125.079023][ T7935] delete_channel: no stack
[  125.087290][ T7935] delete_channel: no stack
[  125.102061][ T7935] delete_channel: no stack
[  125.122093][ T7935] delete_channel: no stack
[  125.138876][ T7935] delete_channel: no stack
[  125.167384][ T7935] delete_channel: no stack
[  125.186304][ T7935] delete_channel: no stack
[  125.212309][ T7935] delete_channel: no stack
[  125.237580][ T7935] delete_channel: no stack
[  125.260167][ T7935] delete_channel: no stack
[  125.275891][ T7935] delete_channel: no stack
[  125.280771][ T7935] delete_channel: no stack
[  125.290917][ T7935] delete_channel: no stack
[  125.300290][ T7935] delete_channel: no stack
[  125.305113][ T7935] delete_channel: no stack
[  125.315073][ T7935] delete_channel: no stack
[  125.321059][ T7935] delete_channel: no stack
[  125.356199][ T7935] delete_channel: no stack
[  125.364394][ T7935] delete_channel: no stack
[  125.374670][ T7935] delete_channel: no stack
[  125.400272][ T7935] delete_channel: no stack
[  125.407410][ T7935] delete_channel: no stack
[  125.425703][ T7935] delete_channel: no stack
[  125.430370][ T7935] delete_channel: no stack
[  125.434983][ T7935] delete_channel: no stack
[  125.465342][ T7935] delete_channel: no stack
[  125.470188][ T7935] delete_channel: no stack
[  125.474815][ T7935] delete_channel: no stack
[  125.507139][ T7935] delete_channel: no stack
[  125.521018][ T7935] delete_channel: no stack
[  125.527997][ T7935] delete_channel: no stack
[  125.532943][ T7935] delete_channel: no stack
[  125.614772][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'.
[  125.696821][ T8001] openvswitch: netlink: IPv4 tunnel dst address is zero
[  125.761247][ T8006] netlink: 'syz.0.582': attribute type 29 has an invalid length.
[  126.389689][ T8044] xt_hashlimit: invalid rate
[  126.896560][ T3559] wlan1: Trigger new scan to find an IBSS to join
[  127.223637][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'.
[  127.414010][ T5942] IPVS: starting estimator thread 0...
[  127.515484][ T8097] IPVS: using max 27 ests per chain, 64800 per kthread
[  127.768662][ T8112] netlink: 'syz.2.614': attribute type 10 has an invalid length.
[  127.830197][ T8112] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  128.099629][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'.
[  128.341460][ T8144] netlink: 'syz.3.620': attribute type 39 has an invalid length.
[  128.473626][ T8151] netlink: 348 bytes leftover after parsing attributes in process `syz.3.620'.
[  128.536827][ T8154] netlink: 'syz.0.624': attribute type 39 has an invalid length.
[  128.936809][ T8170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.097958][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'.
[  129.097964][ T8176] netlink: 71 bytes leftover after parsing attributes in process `syz.4.631'.
[  129.222300][ T8181] batadv_slave_0: mtu less than device minimum
[  129.372824][ T8191] netlink: 'syz.3.636': attribute type 7 has an invalid length.
[  129.434014][ T8191] netlink: 'syz.3.636': attribute type 8 has an invalid length.
[  129.858273][ T3559] wlan1: Trigger new scan to find an IBSS to join
[  129.976187][ T8228] __nla_validate_parse: 4 callbacks suppressed
[  129.976204][ T8228] netlink: 2 bytes leftover after parsing attributes in process `syz.3.643'.
[  130.250781][ T8240] netlink: 'syz.4.645': attribute type 10 has an invalid length.
[  130.603305][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'.
[  130.654258][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'.
[  130.849019][   T12] wlan1: Creating new IBSS network, BSSID 02:5a:4d:19:55:82
[  131.004171][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.654'.
[  131.190848][ T8276] "syz.2.653" (8276) uses obsolete ecb(arc4) skcipher
[  131.658833][ T8301] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  132.080410][ T8311] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  132.191971][ T8325] bridge0: port 2(gretap0) entered blocking state
[  132.216629][ T8325] bridge0: port 2(gretap0) entered disabled state
[  132.223949][ T8325] gretap0: entered allmulticast mode
[  132.244228][ T8325] gretap0: entered promiscuous mode
[  132.260377][ T8325] bridge0: port 2(gretap0) entered blocking state
[  132.267000][ T8325] bridge0: port 2(gretap0) entered forwarding state
[  132.293503][ T8327] : renamed from hsr0 (while UP)
[  132.309558][ T8329] netlink: 72 bytes leftover after parsing attributes in process `syz.2.667'.
[  132.777502][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'.
[  132.843350][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.850134][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  132.899387][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.677'.
[  133.050649][ T8368] xt_l2tp: wrong L2TP version: 0
[  133.160877][ T8364] syzkaller0: entered promiscuous mode
[  133.201123][ T8364] syzkaller0: entered allmulticast mode
[  133.323108][ T8382] netlink: 240 bytes leftover after parsing attributes in process `syz.4.684'.
[  135.155846][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'.
[  135.167695][ T8382] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  135.726190][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'.
[  135.754538][ T8419] IPv6: addrconf: prefix option has invalid lifetime
[  135.951555][ T8427] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  136.007758][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'.
[  136.078054][ T8435] netlink: 108 bytes leftover after parsing attributes in process `syz.4.698'.
[  136.355061][ T8412] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  136.378306][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[  136.464300][ T8456] netlink: 340 bytes leftover after parsing attributes in process `syz.2.707'.
[  136.779830][ T8475] syzkaller1: entered promiscuous mode
[  136.803148][ T8475] syzkaller1: entered allmulticast mode
[  136.848407][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'.
[  136.906048][ T8479] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.096645][ T8479] macvlan2: entered promiscuous mode
[  137.114440][ T8479] macvlan2: entered allmulticast mode
[  137.153020][ T8479] bond2: (slave macvlan2): Opening slave failed
[  137.219103][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.277666][ T8497] bond0: (slave rose0): Enslaving as an active interface with an up link
[  137.334166][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  137.669559][ T8523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.804213][ T5942] IPVS: starting estimator thread 0...
[  137.808353][ T8521] lo: entered promiscuous mode
[  137.845873][ T8521] netlink: 'syz.0.724': attribute type 2 has an invalid length.
[  137.872514][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.915386][ T8534] IPVS: using max 38 ests per chain, 91200 per kthread
[  138.100627][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  138.146246][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'.
[  138.146658][ T8550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.645624][ T8570] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  139.013817][ T8580] syzkaller0: entered promiscuous mode
[  139.049353][ T8580] syzkaller0: entered allmulticast mode
[  139.524319][ T8616] xt_l2tp: wrong L2TP version: 0
[  139.542214][ T8616] netlink: 'syz.2.749': attribute type 39 has an invalid length.
[  140.034590][ T8641] IPVS: set_ctl: invalid protocol: 0 172.20.20.28:20004
[  140.090156][ T8642] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  140.098903][ T8644] xt_recent: Unsupported userspace flags (00000061)
[  140.683333][ T8671] __nla_validate_parse: 70 callbacks suppressed
[  140.683351][ T8671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.765'.
[  141.268721][ T8692] netlink: 'syz.2.771': attribute type 10 has an invalid length.
[  141.317378][ T8692] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  141.351612][ T8692] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  141.493045][ T8699] netlink: 'syz.1.773': attribute type 10 has an invalid length.
[  141.545502][ T8699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.773'.
[  141.639291][ T8699] batadv0: entered promiscuous mode
[  141.666897][ T8699] batadv0: entered allmulticast mode
[  141.700028][ T8699] bridge0: port 3(batadv0) entered blocking state
[  141.730849][ T8699] bridge0: port 3(batadv0) entered disabled state
[  141.810767][ T8710] netlink: 'syz.3.777': attribute type 83 has an invalid length.
[  141.852374][ T8699] bridge0: port 3(batadv0) entered blocking state
[  141.859044][ T8699] bridge0: port 3(batadv0) entered forwarding state
[  141.910401][ T8710] netlink: 'syz.3.777': attribute type 1 has an invalid length.
[  141.925311][ T8710] netlink: 244 bytes leftover after parsing attributes in process `syz.3.777'.
[  142.110704][   T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  142.116588][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'.
[  142.120327][   T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  142.149544][ T8727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'.
[  142.220078][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'.
[  142.570168][ T8742] netlink: 'syz.4.786': attribute type 2 has an invalid length.
[  142.764953][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  142.988704][ T8756] x_tables: unsorted underflow at hook 4
[  143.246102][ T8769] netlink: 72 bytes leftover after parsing attributes in process `syz.1.799'.
[  143.295985][ T8771] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  143.321237][ T8781] netlink: 92 bytes leftover after parsing attributes in process `syz.4.798'.
[  143.383931][ T8783] netlink: 'syz.2.801': attribute type 10 has an invalid length.
[  143.421685][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.477624][ T8783] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  143.495460][ T1102] bond0: (slave batadv0): interface is now down
[  143.520087][ T1102] bond0: now running without any active interface!
[  143.804905][ T8795] IPVS: set_ctl: invalid protocol: 124 172.20.20.187:0
[  144.019694][ T8800] bond4: entered promiscuous mode
[  144.047979][ T8800] bond4: entered allmulticast mode
[  144.065082][ T8800] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.497957][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.811'.
[  145.149450][ T8850] xt_CT: No such helper "syz0"
[  145.393026][ T8863] netlink: 'syz.0.824': attribute type 29 has an invalid length.
[  145.402142][ T8865] netlink: 'syz.0.824': attribute type 29 has an invalid length.
[  146.112070][ T8891] __nla_validate_parse: 3 callbacks suppressed
[  146.112088][ T8891] netlink: 256 bytes leftover after parsing attributes in process `syz.1.834'.
[  146.168865][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'.
[  146.198180][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'.
[  146.229590][ T8904] netlink: 'syz.0.837': attribute type 10 has an invalid length.
[  146.242702][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'.
[  146.274281][ T8904] netlink: 'syz.0.837': attribute type 10 has an invalid length.
[  146.283424][ T8904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.837'.
[  146.352008][ T8910] netlink: 248 bytes leftover after parsing attributes in process `syz.2.838'.
[  146.362801][ T8904] batadv0: entered promiscuous mode
[  146.369335][ T8904] batadv0: entered allmulticast mode
[  146.409847][ T8904] bond0: (slave batadv0): Releasing backup interface
[  146.430467][ T8904] bridge0: port 4(batadv0) entered blocking state
[  146.463361][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'.
[  146.468474][ T8904] bridge0: port 4(batadv0) entered disabled state
[  146.507266][   T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  146.516789][   T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  146.594233][ T8921] netlink: 'syz.4.842': attribute type 1 has an invalid length.
[  146.680444][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'.
[  146.762684][ T8921] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.833424][ T8928] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.862011][ T8928] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  146.874727][ T8928] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  147.048688][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.847'.
[  147.050172][ T8950] No such timeout policy "syz0"
[  147.304607][ T8940] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  147.318502][ T8948] netlink: 'syz.0.849': attribute type 11 has an invalid length.
[  147.326877][ T8948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.849'.
[  147.339844][ T8942] veth5: entered promiscuous mode
[  147.351772][ T8942] bond3: (slave veth5): Enslaving as an active interface with a down link
[  147.729927][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.737647][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.111295][ T8991] gre1: entered promiscuous mode
[  148.119072][ T8991] gre1: entered allmulticast mode
[  148.340598][ T9010] netlink: zone id is out of range
[  148.346607][ T9010] netlink: zone id is out of range
[  148.351909][ T9010] netlink: zone id is out of range
[  148.357232][ T9010] netlink: zone id is out of range
[  148.362470][ T9010] netlink: zone id is out of range
[  148.367979][ T9010] netlink: zone id is out of range
[  148.373383][ T9010] netlink: zone id is out of range
[  148.380828][ T9010] netlink: zone id is out of range
[  148.390941][ T9010] netlink: zone id is out of range
[  148.397088][ T9010] netlink: zone id is out of range
[  148.477714][ T9013] Driver unsupported XDP return value 0 on prog  (id 254) dev N/A, expect packet loss!
[  148.641888][ T9016] xt_CT: No such helper "netbios-ns"
[  148.781870][ T9022] bridge_slave_0: left allmulticast mode
[  148.792262][ T9022] bridge_slave_0: left promiscuous mode
[  148.819729][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.894280][ T9022] bridge_slave_1: left allmulticast mode
[  148.914952][ T9022] bridge_slave_1: left promiscuous mode
[  148.945593][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.991504][ T9022] bond0: (slave bond_slave_0): Releasing backup interface
[  149.009504][ T9022] bond0: (slave bond_slave_1): Releasing backup interface
[  149.022449][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.031064][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.045641][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.053082][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.069015][ T9022] bond0: (slave bond1): Releasing backup interface
[  149.082158][ T9022] bond2: (slave gretap1): Releasing active interface
[  149.620232][ T9072] netlink: 'syz.0.876': attribute type 5 has an invalid length.
[  150.473592][   T50] Bluetooth: hci4: link tx timeout
[  150.475673][ T9111] sctp: [Deprecated]: syz.3.889 (pid 9111) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.475673][ T9111] Use struct sctp_sack_info instead
[  150.479152][   T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.525717][ T5855] Bluetooth: hci4: link tx timeout
[  150.530912][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.538709][ T5855] Bluetooth: hci4: link tx timeout
[  150.543851][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.592982][ T5855] Bluetooth: hci4: link tx timeout
[  150.598240][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.605987][ T5855] Bluetooth: hci4: link tx timeout
[  150.611169][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  150.679465][ T9111] sctp: [Deprecated]: syz.3.889 (pid 9111) Use of int in maxseg socket option.
[  150.679465][ T9111] Use struct sctp_assoc_value instead
[  151.043541][ T9139] syzkaller0: entered promiscuous mode
[  151.052086][ T9139] syzkaller0: entered allmulticast mode
[  151.059173][ T9138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.115136][ T9147] bridge2: port 1(veth0_to_bond) entered blocking state
[  151.122543][ T9147] bridge2: port 1(veth0_to_bond) entered disabled state
[  151.157456][ T9147] veth0_to_bond: entered allmulticast mode
[  151.174680][ T9154] netlink: 'syz.3.901': attribute type 21 has an invalid length.
[  151.181020][ T9147] veth0_to_bond: entered promiscuous mode
[  151.204302][ T9154] __nla_validate_parse: 7 callbacks suppressed
[  151.204322][ T9154] netlink: 152 bytes leftover after parsing attributes in process `syz.3.901'.
[  151.241405][ T9138] tipc: Resetting bearer <eth:syzkaller0>
[  151.352311][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'.
[  152.087083][ T5981] tipc: Node number set to 1193488397
[  152.579169][ T5855] Bluetooth: hci4: command 0x0406 tx timeout
[  152.608110][ T9138] tipc: Disabling bearer <eth:syzkaller0>
[  152.827738][ T9197] netlink: 'syz.0.911': attribute type 2 has an invalid length.
[  152.838327][ T9197] netlink: 84 bytes leftover after parsing attributes in process `syz.0.911'.
[  152.986645][ T9205] bond5: entered promiscuous mode
[  152.992890][ T9205] bond5: entered allmulticast mode
[  152.999664][ T9205] 8021q: adding VLAN 0 to HW filter on device bond5
[  153.023073][ T9211] bridge_slave_0: invalid flags given to default FDB implementation
[  153.050556][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  153.270981][ T9224] nbd: must specify a size in bytes for the device
[  153.292783][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'.
[  153.467432][ T9235] xt_hashlimit: invalid interval
[  153.815607][ T9254] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  154.134015][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'.
[  156.588358][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'.
[  156.691308][ T9314] netlink: 'syz.3.944': attribute type 5 has an invalid length.
[  156.734718][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'.
[  156.820363][ T9325] dummy0: entered promiscuous mode
[  156.843797][ T9325] batadv_slave_1: entered promiscuous mode
[  156.856330][ T9325] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.869516][ T9325] Cannot create hsr debugfs directory
[  156.880795][ T9332] netlink: 64 bytes leftover after parsing attributes in process `syz.3.948'.
[  156.957968][ T9332] syzkaller1: entered promiscuous mode
[  156.964244][ T9332] syzkaller1: entered allmulticast mode
[  157.201230][ T9347] xt_CT: No such helper "syz0"
[  157.253395][ T9358] netlink: 188 bytes leftover after parsing attributes in process `syz.1.955'.
[  157.567849][ T9374] netlink: 808 bytes leftover after parsing attributes in process `syz.1.958'.
[  157.594805][ T9374] Cannot find map_set index 0 as target
[  157.747734][ T9391] netlink: 64 bytes leftover after parsing attributes in process `syz.2.962'.
[  157.762901][ T9390] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.963'.
[  157.846970][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'.
[  157.880417][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'.
[  157.979053][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.002815][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'.
[  158.052831][ T9410] netlink: 'syz.0.970': attribute type 83 has an invalid length.
[  158.226176][ T9428] netlink: 'syz.3.973': attribute type 1 has an invalid length.
[  158.348434][ T9415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.409487][ T9415] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.419118][ T9415] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.428067][ T9415] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.437066][ T9415] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.481649][ T9398] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  158.632245][ T9437] vlan2: entered allmulticast mode
[  158.649804][ T9439] af_packet: tpacket_rcv: packet too big, clamped from 349 to 4294967272. macoff=96
[  158.658108][ T9437] bond0: entered allmulticast mode
[  158.674754][ T9437] bond_slave_0: entered allmulticast mode
[  158.682888][ T9437] bond_slave_1: entered allmulticast mode
[  158.689289][ T9437] bridge_slave_1: entered allmulticast mode
[  158.913556][ T9457] xt_hashlimit: size too large, truncated to 1048576
[  159.011722][ T9468] xt_hashlimit: size too large, truncated to 1048576
[  159.122703][ T9481] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  159.152338][ T5944] IPVS: starting estimator thread 0...
[  159.285288][ T9483] IPVS: using max 28 ests per chain, 67200 per kthread
[  159.660580][ T9509] netlink: 'syz.4.997': attribute type 1 has an invalid length.
[  159.673191][ T9509] netlink: 'syz.4.997': attribute type 1 has an invalid length.
[  159.947434][ T9522] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  160.241526][ T9542] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.908088][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  161.382996][ T9577] ieee802154 phy0 wpan0: encryption failed: -22
[  162.441533][ T9595] __nla_validate_parse: 8 callbacks suppressed
[  162.441551][ T9595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1030'.
[  162.488146][ T9595] gretap0: entered promiscuous mode
[  162.503896][ T9596] veth0: entered promiscuous mode
[  162.530751][ T9595] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1030'.
[  162.530975][ T9598] netlink: 'syz.4.1033': attribute type 6 has an invalid length.
[  162.548339][ T9590] veth0: left promiscuous mode
[  162.571452][ T9598] netlink: 'syz.4.1033': attribute type 6 has an invalid length.
[  162.635879][ T9595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.662728][ T9595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.680689][ T9595] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  162.701737][ T9595] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  162.727167][ T9595] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  162.743987][ T9595] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  162.753744][ T9595] bond0 (unregistering): Released all slaves
[  162.786784][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1038'.
[  162.807746][ T9619] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1038'.
[  162.906938][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  162.913311][ T9621] tap0: tun_chr_ioctl cmd 1074025678
[  162.922998][ T9626] net_ratelimit: 5 callbacks suppressed
[  162.923013][ T9626] openvswitch: netlink: Tunnel attr 12289 out of range max 16
[  162.936514][ T9621] tap0: group set to 0
[  162.945069][ T9622] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1039'.
[  163.202297][ T9643] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  163.235993][ T9643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  163.290919][ T9644] tap0: tun_chr_ioctl cmd 1074025672
[  163.303737][ T9644] tap0: ignored: set checksum disabled
[  163.318199][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'.
[  163.448970][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'.
[  163.711751][ T9673] netlink: 'syz.0.1055': attribute type 2 has an invalid length.
[  163.796282][ T9673] nbd0: detected capacity change from 0 to 127
[  163.813115][ T9682] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  163.895801][   T50] block nbd0: Receive control failed (result -32)
[  164.170364][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'.
[  164.331965][ T9712] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  164.458228][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1066'.
[  164.550174][ T5981] IPVS: starting estimator thread 0...
[  164.655549][ T9721] IPVS: using max 30 ests per chain, 72000 per kthread
[  165.024972][ T9746] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  165.059820][ T9745] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  165.252003][ T9762] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  165.288923][ T9766] netlink: 'syz.2.1082': attribute type 4 has an invalid length.
[  165.306228][ T9762] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  165.338910][ T9762] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  165.500371][ T9781] netlink: 'syz.1.1088': attribute type 24 has an invalid length.
[  165.647997][ T9792] ipt_REJECT: TCP_RESET invalid for non-tcp
[  166.180537][ T9836] netlink: 'syz.2.1103': attribute type 10 has an invalid length.
[  166.206883][ T9836] batman_adv: batadv0: Adding interface: team0
[  166.213122][ T9836] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.240870][ T9836] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  166.252578][ T9835] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  166.272214][ T9835] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  166.491958][ T9851] 8021q: VLANs not supported on lo
[  166.654995][ T9861] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.888730][ T9871] pim6reg1: entered promiscuous mode
[  166.894099][ T9871] pim6reg1: entered allmulticast mode
[  167.431252][ T9905] delete_channel: no stack
[  167.469440][ T9894] __nla_validate_parse: 13 callbacks suppressed
[  167.469458][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'.
[  167.506928][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'.
[  167.615319][ T9894] batman_adv: batadv0: Removing interface: team0
[  167.650562][ T9894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.769412][ T9924] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1129'.
[  167.779396][ T9926] validate_nla: 2 callbacks suppressed
[  167.779413][ T9926] netlink: 'syz.1.1130': attribute type 2 has an invalid length.
[  167.990158][ T9941] netlink: 'syz.3.1135': attribute type 1 has an invalid length.
[  168.037331][ T9949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1137'.
[  168.148592][ T9954] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1138'.
[  168.186054][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'.
[  168.229654][ T9960] openvswitch: netlink: Message has 199 unknown bytes.
[  168.249255][ T9960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.373116][ T9961] netlink: 'syz.1.1139': attribute type 5 has an invalid length.
[  168.647193][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'.
[  168.698386][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'.
[  168.753866][ T9993] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1148'.
[  168.782133][ T9997] veth0: entered promiscuous mode
[  168.814782][ T9996] veth0: left promiscuous mode
[  169.219073][T10029] netlink: 'syz.0.1157': attribute type 6 has an invalid length.
[  169.229452][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1157'.
[  169.244127][T10035] Cannot find del_set index 4 as target
[  169.258199][T10035] Cannot find del_set index 4 as target
[  169.382259][T10044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.091921][T10085] openvswitch: netlink: Flow actions attr not present in new flow.
[  170.238973][T10095] tipc: Enabled bearer <udp:syz1>, priority 10
[  170.318476][T10103] netlink: 'syz.3.1178': attribute type 10 has an invalid length.
[  170.515583][T10119] xt_nat: multiple ranges no longer supported
[  171.242655][T10169] 8021q: VLANs not supported on vxcan1
[  171.349846][T10177] IPVS: set_ctl: invalid protocol: 108 172.20.20.45:20000
[  171.536178][T10183] ieee802154 phy0 wpan0: encryption failed: -22
[  171.824669][T10208] netlink: 'syz.3.1208': attribute type 10 has an invalid length.
[  171.842404][T10208] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  171.963883][T10207] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.513644][T10246] netlink: 'syz.4.1218': attribute type 2 has an invalid length.
[  172.527506][T10246] netlink: 'syz.4.1218': attribute type 8 has an invalid length.
[  172.568738][T10250] __nla_validate_parse: 11 callbacks suppressed
[  172.568756][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'.
[  172.580919][T10246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'.
[  172.681456][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'.
[  172.723641][T10254] Bluetooth: MGMT ver 1.23
[  172.742471][T10252] xfrm1: entered promiscuous mode
[  172.765396][T10252] xfrm1: entered allmulticast mode
[  172.832253][T10257] netlink: 'syz.3.1224': attribute type 1 has an invalid length.
[  172.951464][T10267] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1226'.
[  173.123226][T10275] netlink: 'syz.1.1229': attribute type 21 has an invalid length.
[  173.144353][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1229'.
[  173.296025][T10281] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1231'.
[  173.336520][T10282] ipt_REJECT: TCP_RESET invalid for non-tcp
[  173.372006][T10285] netlink: 'syz.0.1233': attribute type 10 has an invalid length.
[  173.406195][T10285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1233'.
[  173.512750][T10285] team0: Port device geneve0 added
[  173.538914][T10294] SET target dimension over the limit!
[  173.623113][T10300] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1237'.
[  173.634987][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'.
[  173.789292][T10300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.830596][T10300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.857487][T10300] bond0 (unregistering): Released all slaves
[  173.969812][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'.
[  174.331756][T10346] openvswitch: netlink: Key type 272 is out of range max 32
[  175.387382][T10388] pim6reg: entered allmulticast mode
[  175.413167][T10388] pim6reg: left allmulticast mode
[  176.352651][T10465] xt_cgroup: invalid path, errno=-2
[  177.645747][T10551] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  178.170330][T10584] __nla_validate_parse: 13 callbacks suppressed
[  178.170348][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'.
[  178.400021][T10598] bond4: entered promiscuous mode
[  178.406418][T10603] x_tables: duplicate underflow at hook 1
[  178.409475][T10598] bond4: entered allmulticast mode
[  178.443393][T10598] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.541866][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'.
[  178.556708][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'.
[  178.698206][T10614] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.706863][T10627] netlink: 'syz.0.1328': attribute type 1 has an invalid length.
[  178.707253][T10616] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  178.749544][T10620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.915755][T10636] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  178.932539][T10636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1334'.
[  179.354336][T10666] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  179.533458][T10680] netlink: 'syz.3.1349': attribute type 8 has an invalid length.
[  179.546959][T10678] netlink: 'syz.1.1350': attribute type 10 has an invalid length.
[  179.588443][T10678] team0: Device ipvlan1 failed to register rx_handler
[  179.872002][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'.
[  180.095360][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'.
[  180.114965][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'.
[  180.151754][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'.
[  180.360885][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  180.757892][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1371'.
[  180.870626][T10762] netlink: 'syz.0.1373': attribute type 11 has an invalid length.
[  181.176732][T10776] netlink: 'syz.2.1379': attribute type 1 has an invalid length.
[  181.211081][T10776] x_tables: unsorted underflow at hook 2
[  181.548342][T10791] x_tables: duplicate underflow at hook 1
[  181.778802][T10811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.788276][T10811] syzkaller0: entered promiscuous mode
[  181.793774][T10811] syzkaller0: entered allmulticast mode
[  181.855379][T10811] tipc: Resetting bearer <eth:syzkaller0>
[  181.887835][T10806] tipc: Resetting bearer <eth:syzkaller0>
[  181.911813][T10806] tipc: Disabling bearer <eth:syzkaller0>
[  182.134993][T10843] IPv6: NLM_F_CREATE should be specified when creating new route
[  182.252176][T10855] Cannot find del_set index 128 as target
[  182.670621][T10888] sctp: [Deprecated]: syz.2.1415 (pid 10888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.670621][T10888] Use struct sctp_sack_info instead
[  182.742243][T10890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.780790][T10890] syzkaller0: entered promiscuous mode
[  182.791126][T10890] syzkaller0: entered allmulticast mode
[  182.839115][T10898] sctp: [Deprecated]: syz.3.1418 (pid 10898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.839115][T10898] Use struct sctp_sack_info instead
[  182.873261][T10890] tipc: Resetting bearer <eth:syzkaller0>
[  182.919251][T10889] tipc: Resetting bearer <eth:syzkaller0>
[  182.929535][T10904] xt_hashlimit: size too large, truncated to 1048576
[  182.940394][T10898] netlink: 'syz.3.1418': attribute type 83 has an invalid length.
[  182.967442][T10889] tipc: Disabling bearer <eth:syzkaller0>
[  183.392714][T10929] __nla_validate_parse: 11 callbacks suppressed
[  183.392733][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1425'.
[  183.426122][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'.
[  183.881569][T10953] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  183.901099][T10953] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  183.927962][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1430'.
[  184.027638][T10966] netlink: 'syz.2.1432': attribute type 21 has an invalid length.
[  184.061231][T10963] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  184.091526][T10963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'.
[  184.229180][T10980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'.
[  184.412975][T10988] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  184.482916][T10984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.498198][T10984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.620984][T10984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.632113][T10984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.678800][T10999] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[  184.728013][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1446'.
[  184.753863][T10984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.779178][T10984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.856453][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'.
[  184.880822][T10984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.891848][T10984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.918135][T11012] netlink: 'syz.2.1448': attribute type 9 has an invalid length.
[  184.963623][T11017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.989144][T11017] syzkaller0: entered promiscuous mode
[  185.015408][T11017] syzkaller0: entered allmulticast mode
[  185.080920][T10984] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.089549][T10984] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.109773][T10984] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.118213][T10984] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.143172][T10984] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.151609][T10984] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.171967][T10984] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.180833][T10984] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.307647][T11017] tipc: Resetting bearer <eth:syzkaller0>
[  185.349325][T11016] tipc: Resetting bearer <eth:syzkaller0>
[  185.388270][T11016] tipc: Disabling bearer <eth:syzkaller0>
[  185.401109][T11033] tipc: MTU too low for tipc bearer
[  185.406582][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'.
[  185.426710][T11035] team0: Device wireguard0 is of different type
[  185.457600][T11042] netlink: 'syz.0.1456': attribute type 2 has an invalid length.
[  185.482285][T11039] tipc: MTU too low for tipc bearer
[  185.653243][T11052] tipc: Started in network mode
[  185.661751][T11052] tipc: Node identity 8a640cad3404, cluster identity 4711
[  185.679532][T11052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.689759][T11052] syzkaller0: entered promiscuous mode
[  185.699663][T11052] syzkaller0: entered allmulticast mode
[  185.760337][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'.
[  185.811397][T11052] tipc: Resetting bearer <eth:syzkaller0>
[  185.830081][T11051] tipc: Resetting bearer <eth:syzkaller0>
[  185.857559][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'.
[  185.864002][T11051] tipc: Disabling bearer <eth:syzkaller0>
[  186.238485][T11084] bond0: (slave bridge_slave_1): Releasing backup interface
[  186.263239][T11084] bridge_slave_1 (unregistering): left allmulticast mode
[  186.427082][T11094] netlink: 'syz.3.1471': attribute type 10 has an invalid length.
[  186.514919][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.672577][T11109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.909401][T11128] syzkaller0: entered promiscuous mode
[  186.915117][T11128] syzkaller0: entered allmulticast mode
[  187.185032][T11150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.204808][T11157] xt_time: unknown flags 0x4
[  187.313113][T11162] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  187.352463][T11164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.044382][T11213] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20002
[  188.079886][T11217] netlink: 'syz.4.1506': attribute type 1 has an invalid length.
[  188.103314][T11219] tc_dump_action: action bad kind
[  188.630373][T11232] __nla_validate_parse: 12 callbacks suppressed
[  188.630388][T11232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1514'.
[  188.645997][T11232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1514'.
[  188.784469][T11231] netlink: 'syz.3.1514': attribute type 1 has an invalid length.
[  188.820657][T11231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1514'.
[  189.047318][T11248] netlink: 'syz.0.1520': attribute type 1 has an invalid length.
[  189.538351][T11283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1532'.
[  189.564405][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'.
[  189.683439][T11289] netlink: 'syz.2.1535': attribute type 1 has an invalid length.
[  189.692026][T11289] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1535'.
[  189.793531][T11296] nbd: socks must be embedded in a SOCK_ITEM attr
[  189.859452][T11298] nbd: socks must be embedded in a SOCK_ITEM attr
[  189.884438][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'.
[  189.884484][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'.
[  189.932114][T11302] ip6tnl3: entered promiscuous mode
[  190.569383][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'.
[  190.784421][T11354] nbd: must specify a size in bytes for the device
[  190.945968][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  190.966641][T11360] ieee802154 phy0 wpan0: encryption failed: -22
[  190.973121][T11359] hsr_slave_0: left promiscuous mode
[  190.980347][T11359] hsr_slave_1: left promiscuous mode
[  191.205810][T11368] lo: entered promiscuous mode
[  191.216668][T11368] tunl0: entered promiscuous mode
[  191.229338][T11368] gre0: entered promiscuous mode
[  191.232181][T11369] xt_bpf: check failed: parse error
[  191.241883][T11368] erspan0: entered promiscuous mode
[  191.256876][T11368] ip_vti0: entered promiscuous mode
[  191.328592][T11368] openvswitch: netlink: IP tunnel TTL not specified.
[  191.352868][T11375] netlink: 'syz.4.1563': attribute type 13 has an invalid length.
[  191.561832][T11389] nbd: nbd0 already in use
[  191.686035][T11393] netlink: 'syz.0.1568': attribute type 30 has an invalid length.
[  191.720794][T11393] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  191.743244][T11393] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  191.837027][ T3559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  192.977369][T11476] xt_CONNSECMARK: invalid mode: 0
[  193.574508][T11513] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  193.589523][T11514] netlink: 'syz.0.1599': attribute type 83 has an invalid length.
[  193.827460][T11534] __nla_validate_parse: 9 callbacks suppressed
[  193.827478][T11534] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1601'.
[  193.880997][T11534] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1601'.
[  193.980085][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'.
[  194.040410][T11546] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1605'.
[  194.059664][   T30] audit: type=1107 audit(1753355446.032:2): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='åðA¬�¯Çöîï´Ãm©Š5÷¡Q•E³h³¤æÖjˆFS'
[  194.093383][T11551] netlink: 'syz.0.1607': attribute type 2 has an invalid length.
[  194.124184][T11552] netlink: 'syz.0.1607': attribute type 2 has an invalid length.
[  194.269824][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  194.280612][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.294149][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  194.384657][T11564] netlink: 'syz.2.1611': attribute type 16 has an invalid length.
[  194.428111][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'.
[  194.598452][T11577] netlink: 'syz.1.1616': attribute type 6 has an invalid length.
[  194.601656][T11580] netlink: 'syz.2.1617': attribute type 1 has an invalid length.
[  194.607936][T11577] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1616'.
[  194.614932][T11580] netlink: 'syz.2.1617': attribute type 11 has an invalid length.
[  194.650997][T11580] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1617'.
[  194.664981][   T30] audit: type=1800 audit(1753355446.642:3): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1616" name="memory.events" dev="tmpfs" ino=1485 res=0 errno=0
[  194.689460][   T30] audit: type=1804 audit(1753355446.642:4): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1616" name="/newroot/288/memory.events" dev="tmpfs" ino=1485 res=1 errno=0
[  194.817314][T11594] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  195.154307][T11624] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  195.155488][T11616] syzkaller0: entered promiscuous mode
[  195.169118][T11616] syzkaller0: entered allmulticast mode
[  195.317159][T11629] netlink: 'syz.0.1631': attribute type 1 has an invalid length.
[  196.020089][T11641] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1634'.
[  196.336284][ T5860] Bluetooth: hci1: command 0x0406 tx timeout
[  196.339592][ T5167] Bluetooth: hci2: command 0x0406 tx timeout
[  196.348468][ T5860] Bluetooth: hci3: command 0x0406 tx timeout
[  196.660236][T11629] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  196.994740][T11669] team0: Device gtp0 is of different type
[  197.154923][T11674] bridge0: port 4(batadv1) entered blocking state
[  197.181163][T11674] bridge0: port 4(batadv1) entered disabled state
[  197.208927][T11674] batadv1: entered allmulticast mode
[  197.216865][T11680] xt_CT: No such helper "snmp"
[  197.244954][T11674] batadv1: entered promiscuous mode
[  197.451375][T11699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1648'.
[  197.492962][T11699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1648'.
[  197.505630][T11699] ip6t_srh: unknown srh invflags 5F00
[  197.640548][T11715] xt_TCPMSS: Only works on TCP SYN packets
[  197.667813][  T182] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  197.677231][  T182] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  197.813621][T11728] netlink: 'syz.4.1658': attribute type 8 has an invalid length.
[  198.055737][T11745] netlink: 'syz.4.1663': attribute type 1 has an invalid length.
[  198.063526][T11745] netlink: 'syz.4.1663': attribute type 4 has an invalid length.
[  198.115754][T11746] lo: entered allmulticast mode
[  198.120849][T11745] lo: left allmulticast mode
[  198.974180][T11792] __nla_validate_parse: 4 callbacks suppressed
[  198.974198][T11792] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1680'.
[  199.002287][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'.
[  199.028139][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'.
[  199.041865][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1682'.
[  199.101787][T11796] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  199.310798][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'.
[  199.347936][T11811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.364610][T11809] syzkaller0: entered promiscuous mode
[  199.381849][T11809] syzkaller0: entered allmulticast mode
[  199.491615][T11809] tipc: Resetting bearer <eth:syzkaller0>
[  199.554175][T11809] tipc: Disabling bearer <eth:syzkaller0>
[  199.617339][T11822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.634224][T11820] validate_nla: 1 callbacks suppressed
[  199.634243][T11820] netlink: 'syz.4.1688': attribute type 3 has an invalid length.
[  199.740659][T11822] tipc: Disabling bearer <eth:syzkaller0>
[  199.804287][T11832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1692'.
[  199.814573][T11835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.826101][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'.
[  199.855890][T11832] IPv6: sit2: Disabled Multicast RS
[  199.962716][T11846] netlink: 'syz.0.1696': attribute type 1 has an invalid length.
[  200.102311][T11846] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.194398][T11846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.224689][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'.
[  200.239143][T11857] veth3: entered promiscuous mode
[  200.251870][T11857] bond0: (slave veth3): Enslaving as an active interface with a down link
[  200.288388][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.297153][T11861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.308577][T11871] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1704'.
[  200.319041][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.326954][T11861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.465991][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'.
[  200.483205][T11879] netlink: 'syz.2.1706': attribute type 2 has an invalid length.
[  200.551818][T11880] xt_socket: unknown flags 0x50
[  200.557131][T11887] xt_socket: unknown flags 0x50
[  201.217488][T11929] netlink: 'syz.1.1718': attribute type 11 has an invalid length.
[  201.227640][T11930] x_tables: duplicate underflow at hook 4
[  201.234014][T11929] netlink: 'syz.1.1718': attribute type 11 has an invalid length.
[  201.276330][T11934] IPVS: Error connecting to the multicast addr
[  201.591581][T11962] x_tables: duplicate entry at hook 1
[  201.762521][T11974] netlink: 'syz.3.1731': attribute type 33 has an invalid length.
[  201.798739][T11970] bond0: (slave netdevsim0): Releasing backup interface
[  201.894920][T11970] netlink: 'syz.3.1731': attribute type 10 has an invalid length.
[  202.223253][T11996] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  202.472567][T12024] delete_channel: no stack
[  202.841688][T12045] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  202.861331][T12047] netlink: 'syz.1.1755': attribute type 5 has an invalid length.
[  202.879920][T12045] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  202.889664][T12045] gretap1: entered promiscuous mode
[  202.905352][T12045] gretap1: entered allmulticast mode
[  203.209374][T12070] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  203.301071][T12076] netlink: zone id is out of range
[  203.315831][T12076] netlink: zone id is out of range
[  203.322218][T12076] netlink: zone id is out of range
[  203.333119][T12076] netlink: zone id is out of range
[  203.394869][T12080] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  203.534139][T12089] netlink: 'syz.3.1765': attribute type 4 has an invalid length.
[  203.535591][T12076] netlink: set zone limit has 4 unknown bytes
[  203.567053][T12089] : renamed from bond0 (while UP)
[  203.661572][T12096] x_tables: duplicate underflow at hook 4
[  203.950106][T12115] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  203.977865][T12116] xt_hashlimit: invalid interval
[  204.023340][T12121] xt_socket: unknown flags 0x50
[  204.033217][T12121] __nla_validate_parse: 16 callbacks suppressed
[  204.033235][T12121] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1776'.
[  204.199306][T12135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.333746][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1781'.
[  204.346466][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1781'.
[  204.544588][T12150] syzkaller0: entered promiscuous mode
[  204.551829][T12147] netlink: 'syz.4.1784': attribute type 5 has an invalid length.
[  204.564817][T12150] syzkaller0: entered allmulticast mode
[  204.898849][T12169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'.
[  205.064226][T12179] gretap0: left allmulticast mode
[  205.070016][T12179] gretap0: left promiscuous mode
[  205.075565][T12179] bridge0: port 2(gretap0) entered disabled state
[  205.119184][T12179] bridge0: port 3(batadv0) entered disabled state
[  205.140817][T12179] bridge_slave_0: left allmulticast mode
[  205.145541][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'.
[  205.147399][T12179] bridge_slave_0: left promiscuous mode
[  205.165597][T12179] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.260587][T12179] bond0: (slave bond_slave_0): Releasing backup interface
[  205.277415][T12179] bond_slave_0: left allmulticast mode
[  205.294989][T12179] bond0: (slave bond_slave_1): Releasing backup interface
[  205.312287][T12179] bond_slave_1: left allmulticast mode
[  205.331154][T12179] team0: Port device team_slave_0 removed
[  205.353754][T12179] team0: Port device team_slave_1 removed
[  205.368448][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.385553][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.445327][T12179] batadv1: left allmulticast mode
[  205.448508][T12166] infiniband syz!: set down
[  205.456615][T12166] infiniband syz!: added team_slave_0
[  205.462209][T12179] batadv1: left promiscuous mode
[  205.463581][T12166] syz!: rxe_create_cq: returned err = -12
[  205.473132][T12166] infiniband syz!: Couldn't create ib_mad CQ
[  205.481177][T12179] bridge0: port 4(batadv1) entered disabled state
[  205.491109][T12166] infiniband syz!: Couldn't open port 1
[  205.620401][T12166] RDS/IB: syz!: added
[  205.641641][T12166] smc: adding ib device syz! with port count 1
[  205.656658][T12166] smc:    ib device syz! port 1 has pnetid 
[  205.721170][T12197] netlink: zone id is out of range
[  205.881962][T12209] openvswitch: netlink: Actions may not be safe on all matching packets
[  206.060793][T12218] netlink: 'syz.0.1805': attribute type 2 has an invalid length.
[  206.132715][T12214] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  206.168779][T12218] netlink: 'syz.0.1805': attribute type 4 has an invalid length.
[  206.341456][T12229] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  207.072698][T12254] dvmrp1: entered allmulticast mode
[  207.141507][T12256] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  207.199946][T12256] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.280427][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'.
[  207.294890][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'.
[  207.541411][T12267] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  207.639985][T12273] ieee802154 phy0 wpan0: encryption failed: -90
[  207.660498][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1821'.
[  207.877433][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  207.926804][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  208.196750][T12305] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  208.472625][T12316] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000
[  208.773633][T12338] syzkaller1: entered promiscuous mode
[  208.781950][T12338] syzkaller1: entered allmulticast mode
[  208.989991][T12348] D: renamed from syzkaller0
[  209.051563][T12349] veth0: entered promiscuous mode
[  209.063958][T12349] veth0: left promiscuous mode
[  209.226170][T12359] netlink: 'syz.0.1846': attribute type 2 has an invalid length.
[  209.247402][T12359] __nla_validate_parse: 2 callbacks suppressed
[  209.247426][T12359] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1846'.
[  209.492443][T12384] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  209.495633][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'.
[  209.520658][T12380] openvswitch: netlink: Message has -1 unknown bytes.
[  209.683619][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1856'.
[  209.940817][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'.
[  210.254318][T12437] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  210.284711][T12437] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1871'.
[  210.318637][T12438] netlink: 'syz.4.1870': attribute type 28 has an invalid length.
[  210.371798][T12438] netlink: 'syz.4.1870': attribute type 3 has an invalid length.
[  210.399397][T12438] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1870'.
[  210.536905][T12450] netlink: 'syz.1.1873': attribute type 1 has an invalid length.
[  210.581025][T12450] netlink: 'syz.1.1873': attribute type 2 has an invalid length.
[  210.689897][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'.
[  211.122523][T12494] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1885'.
[  211.146913][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'.
[  211.175859][T12496] netlink: 'syz.3.1882': attribute type 2 has an invalid length.
[  211.183649][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'.
[  211.368411][T12507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.520425][T12515] netlink: 'syz.2.1890': attribute type 16 has an invalid length.
[  211.553780][T12517] netlink: 'syz.2.1890': attribute type 16 has an invalid length.
[  211.557836][T12515] netlink: 'syz.2.1890': attribute type 17 has an invalid length.
[  211.575049][T12517] netlink: 'syz.2.1890': attribute type 17 has an invalid length.
[  211.856580][ T6690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.888722][ T6690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.059453][T12547] netlink: 'syz.2.1901': attribute type 1 has an invalid length.
[  212.156615][T12547] 8021q: adding VLAN 0 to HW filter on device bond4
[  212.171351][T12555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.180892][T12555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.190806][T12555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.199659][T12555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.216362][T12555] bond4: (slave geneve2): making interface the new active one
[  212.231214][T12555] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  212.286706][T12547] bond4: entered promiscuous mode
[  212.291797][T12547] geneve2: entered promiscuous mode
[  213.624251][ T5924] IPVS: starting estimator thread 0...
[  213.685935][T12632] bridge5: entered promiscuous mode
[  213.704787][T12632] bridge5: entered allmulticast mode
[  213.735329][T12636] IPVS: using max 28 ests per chain, 67200 per kthread
[  213.744059][T12632] bridge0: port 2(veth0_to_bridge) entered blocking state
[  213.785444][T12632] bridge0: port 2(veth0_to_bridge) entered disabled state
[  213.813792][T12632] veth0_to_bridge: entered allmulticast mode
[  213.821992][T12632] veth0_to_bridge: entered promiscuous mode
[  215.115445][T12733] __nla_validate_parse: 17 callbacks suppressed
[  215.115464][T12733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1944'.
[  215.161000][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'.
[  215.184363][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'.
[  215.215464][T12735] netlink: 'syz.2.1947': attribute type 7 has an invalid length.
[  215.384919][T12754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1950'.
[  215.495300][T12762] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1953'.
[  215.552836][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'.
[  215.773356][T12785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.857412][T12785] syzkaller0: entered promiscuous mode
[  215.863049][T12785] syzkaller0: entered allmulticast mode
[  215.869390][T12785] tipc: Resetting bearer <eth:syzkaller0>
[  215.892614][T12793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1960'.
[  215.955610][T12784] tipc: Resetting bearer <eth:syzkaller0>
[  216.795364][ T5942] tipc: Node number set to 3193965741
[  217.464542][T12842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1967'.
[  217.799810][T12784] tipc: Disabling bearer <eth:syzkaller0>
[  217.871029][T12842] hsr_slave_0: left promiscuous mode
[  217.898539][T12842] hsr_slave_1: left promiscuous mode
[  218.532653][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1981'.
[  218.693375][T12894] netlink: 'syz.4.1981': attribute type 10 has an invalid length.
[  218.827949][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'.
[  220.186568][T12974] __nla_validate_parse: 1 callbacks suppressed
[  220.186587][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'.
[  220.546187][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'.
[  220.579657][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'.
[  220.588805][T12990] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  220.599393][T12990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.664584][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  220.971267][T13007] netlink: 'syz.3.2011': attribute type 10 has an invalid length.
[  220.978253][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2010'.
[  221.111217][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'.
[  221.217366][T13024] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2015'.
[  221.234030][T13023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.721549][T13022] tipc: Disabling bearer <eth:syzkaller0>
[  221.730421][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2024'.
[  221.803723][T13055] xt_CT: No such helper "syz1"
[  221.998773][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'.
[  222.202832][T13079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  222.301504][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'.
[  222.305364][T13079] netlink: 'syz.4.2033': attribute type 1 has an invalid length.
[  222.859991][T12811] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  223.415530][T13136] netlink: 'syz.3.2048': attribute type 28 has an invalid length.
[  223.485953][T13136] netlink: 'syz.3.2048': attribute type 3 has an invalid length.
[  224.077597][T13153] netlink: 'syz.4.2057': attribute type 2 has an invalid length.
[  224.122384][T13158] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  224.342597][T13175] netlink: 'syz.4.2061': attribute type 11 has an invalid length.
[  224.612339][T13199] netlink: 'syz.3.2066': attribute type 83 has an invalid length.
[  224.666263][T13201] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  224.777959][T13213] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  224.892953][T13208] netlink: 'syz.1.2071': attribute type 3 has an invalid length.
[  224.959456][T13210] netlink: 'syz.1.2071': attribute type 3 has an invalid length.
[  225.544335][T13245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.552677][T13245] syzkaller0: entered promiscuous mode
[  225.563312][T13245] syzkaller0: entered allmulticast mode
[  225.695099][T13244] tipc: Resetting bearer <eth:syzkaller0>
[  225.799631][T13244] tipc: Disabling bearer <eth:syzkaller0>
[  226.009696][T13270] ipvlan0: entered promiscuous mode
[  226.018066][T13270] ipvlan0: entered allmulticast mode
[  226.023645][T13270] veth0_vlan: entered allmulticast mode
[  226.222873][T13284] __nla_validate_parse: 5 callbacks suppressed
[  226.222892][T13284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2090'.
[  226.352236][T13290] netlink: 'syz.2.2091': attribute type 12 has an invalid length.
[  226.354445][T13272] infiniband syz2: set active
[  226.365394][T13272] infiniband syz2: added bond_slave_0
[  226.394406][T13290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2091'.
[  226.474046][T13272] RDS/IB: syz2: added
[  226.478823][T13272] smc: adding ib device syz2 with port count 1
[  226.499567][T13272] smc:    ib device syz2 port 1 has pnetid 
[  226.821279][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'.
[  226.859459][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'.
[  227.007336][T13312] syzkaller0: entered promiscuous mode
[  227.012865][T13312] syzkaller0: entered allmulticast mode
[  227.395305][T13324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.418239][T13320] syzkaller0: entered promiscuous mode
[  227.423770][T13320] syzkaller0: entered allmulticast mode
[  227.438785][T13328] netlink: 'syz.3.2103': attribute type 1 has an invalid length.
[  227.522683][T13319] tipc: Resetting bearer <eth:syzkaller0>
[  227.580085][T13331] netlink: 'syz.3.2104': attribute type 1 has an invalid length.
[  227.620360][T13319] tipc: Disabling bearer <eth:syzkaller0>
[  227.707128][T13331] 8021q: adding VLAN 0 to HW filter on device bond6
[  227.809038][T13333] bond6: (slave gretap2): making interface the new active one
[  227.824353][T13333] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  227.853699][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2106'.
[  227.892601][T13340] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  229.551083][T13394] delete_channel: no stack
[  230.283560][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'.
[  230.500130][T13435] x_tables: duplicate underflow at hook 3
[  230.618853][T13441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.637969][T13441] syzkaller0: entered promiscuous mode
[  230.644166][T13441] syzkaller0: entered allmulticast mode
[  230.665891][T13441] tipc: Resetting bearer <eth:syzkaller0>
[  230.692607][T13440] tipc: Resetting bearer <eth:syzkaller0>
[  230.734261][T13440] tipc: Disabling bearer <eth:syzkaller0>
[  230.831762][T13456] erspan0: vlans aren't supported yet for dev_uc|mc_add()
[  230.887806][T13458] ieee802154 phy0 wpan0: encryption failed: -22
[  230.899721][T13456] netlink: 'syz.0.2139': attribute type 12 has an invalid length.
[  230.901272][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'.
[  230.917479][T13456] lo: left promiscuous mode
[  230.939897][T13456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.154983][T13476] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2146'.
[  231.262732][T13483] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  231.274274][T13483] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  231.747400][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'.
[  232.038217][T13512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2156'.
[  232.072572][T13515] netlink: 'syz.3.2157': attribute type 1 has an invalid length.
[  232.115556][T13515] netlink: 'syz.3.2157': attribute type 1 has an invalid length.
[  232.137064][T13516] Cannot find add_set index 4 as target
[  232.252301][T13518] netlink: 'syz.0.2158': attribute type 13 has an invalid length.
[  232.284707][T13518] veth0_macvtap: left promiscuous mode
[  232.308044][T13518] macvtap0: entered allmulticast mode
[  232.344829][T13518] macvtap0: refused to change device tx_queue_len
[  232.718973][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'.
[  232.728382][T13547] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2168'.
[  232.833660][T13545] can: request_module (can-proto-0) failed.
[  232.949617][T13558] 8021q: VLANs not supported on sit0
[  232.982147][T13564] netlink: 'syz.3.2172': attribute type 11 has an invalid length.
[  233.137015][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'.
[  233.163976][T13579] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  233.186801][T13579] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  233.209026][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'.
[  233.219985][T13571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.243645][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2172'.
[  233.339500][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'.
[  233.459890][T13606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2183'.
[  233.539522][T13598] bond7 (unregistering): Released all slaves
[  233.630511][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'.
[  234.186515][T13637] netlink: 'syz.0.2191': attribute type 1 has an invalid length.
[  234.194269][T13637] netlink: 'syz.0.2191': attribute type 3 has an invalid length.
[  234.826107][ T5855] Bluetooth: hci4: link tx timeout
[  234.842269][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  235.888081][T13709] netlink: 'syz.0.2209': attribute type 1 has an invalid length.
[  236.017092][T13721] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  236.234859][T13749] vlan3: entered allmulticast mode
[  236.274087][T13749] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  236.457264][T13759] netlink: 'syz.0.2223': attribute type 1 has an invalid length.
[  236.500972][T13761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.656605][T13761] syzkaller0: entered promiscuous mode
[  236.662272][T13761] syzkaller0: entered allmulticast mode
[  236.668771][T13761] tipc: Resetting bearer <eth:syzkaller0>
[  236.719075][T13766] bond5 (unregistering): Released all slaves
[  236.751599][T13767] ip6tnl5: entered promiscuous mode
[  236.757262][T13767] ip6tnl5: entered allmulticast mode
[  236.807760][T13752] tipc: Resetting bearer <eth:syzkaller0>
[  236.820222][T13782] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  236.896191][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  238.337160][T13752] tipc: Disabling bearer <eth:syzkaller0>
[  238.356040][T13791] __nla_validate_parse: 7 callbacks suppressed
[  238.356059][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'.
[  238.399200][T13791] netlink: 'syz.4.2230': attribute type 20 has an invalid length.
[  238.497081][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'.
[  238.506297][T13791] netlink: 'syz.4.2230': attribute type 20 has an invalid length.
[  238.569075][T13819] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  238.807944][T13834] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  238.900507][T13842] netlink: 'syz.4.2246': attribute type 29 has an invalid length.
[  238.910591][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'.
[  238.959695][T13842] openvswitch: netlink: IPv6 tunnel dst address is zero
[  239.134636][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2248'.
[  239.251061][T13856] netlink: 'syz.1.2249': attribute type 10 has an invalid length.
[  239.320347][T13856] geneve1: entered allmulticast mode
[  239.513877][T13867] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2253'.
[  239.529242][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2253'.
[  239.821087][T13880] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2257'.
[  239.855649][T13880] 0ªX¹¦D: renamed from gretap0 (while UP)
[  239.865895][T13883] netlink: 'syz.2.2258': attribute type 2 has an invalid length.
[  239.882839][T13880] 0ªX¹¦D: entered allmulticast mode
[  239.889037][T13880] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  239.925695][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'.
[  239.951523][T13888] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  239.978133][T13888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.099943][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2262'.
[  240.162483][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2262'.
[  240.321838][T13903] netlink: 'syz.0.2264': attribute type 3 has an invalid length.
[  240.387449][T13921] ip6t_srh: unknown srh match flags  536B
[  240.523887][T13924] bond7: entered promiscuous mode
[  240.529716][T13924] bond7: entered allmulticast mode
[  240.539215][T13924] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.047218][T13967] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  241.702113][T14016] syzkaller0: entered promiscuous mode
[  241.708570][T14016] syzkaller0: entered allmulticast mode
[  241.719008][T13954] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  241.972955][T14030] geneve2: entered promiscuous mode
[  241.990232][T14030] geneve2: entered allmulticast mode
[  241.991376][T14033] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  242.237314][T14048] 8021q: VLANs not supported on gre0
[  242.268723][T14048] unknown channel width for channel at 909000KHz?
[  242.275620][T14048] unknown channel width for channel at 909000KHz?
[  242.593735][T14064] netlink: 'syz.2.2311': attribute type 11 has an invalid length.
[  242.608111][T14064] netlink: 'syz.2.2311': attribute type 11 has an invalid length.
[  242.976201][ T5855] Bluetooth: hci3: command 0x0406 tx timeout
[  243.022000][T14086] bridge0: port 4(batadv0) entered disabled state
[  243.054201][T14086] bridge_slave_0: left allmulticast mode
[  243.069857][T14086] bridge_slave_0: left promiscuous mode
[  243.076613][T14086] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.087990][T14086] bridge_slave_1: left allmulticast mode
[  243.093680][T14086] bridge_slave_1: left promiscuous mode
[  243.100174][T14086] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.119366][T14086] veth0_to_bond: left allmulticast mode
[  243.124939][T14086] veth0_to_bond: left promiscuous mode
[  243.133565][T14086] bridge2: port 1(veth0_to_bond) entered disabled state
[  243.186529][T14086] team0: Port device team_slave_0 removed
[  243.198648][T14086] team0: Port device team_slave_1 removed
[  243.216489][T14086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.229659][T14086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.239899][T14086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.249573][T14086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.272426][T14086] team0: Port device geneve0 removed
[  243.279682][T14086] bond1: left allmulticast mode
[  243.284549][T14086] bond1: left promiscuous mode
[  243.289641][T14086] bridge0: port 3(bond1) entered disabled state
[  243.310074][T14086] bond0: (slave veth3): Releasing active interface
[  243.607591][T14127] tipc: Enabled bearer <udp:syz1>, priority 10
[  243.624019][T14125] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  243.669614][T14125] bond5: entered promiscuous mode
[  243.675113][T14125] bond5: entered allmulticast mode
[  243.680796][T14125] 8021q: adding VLAN 0 to HW filter on device bond5
[  243.711224][T14131] gtp0: entered promiscuous mode
[  243.729483][T14131] gtp0: entered allmulticast mode
[  243.759908][T14127] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  243.893467][T14150] __nla_validate_parse: 47 callbacks suppressed
[  243.893484][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'.
[  244.047742][T14159] netlink: 'syz.1.2335': attribute type 16 has an invalid length.
[  244.058534][T14159] netlink: 'syz.1.2335': attribute type 17 has an invalid length.
[  244.133609][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  244.163252][T14163] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.179681][T14163] macvlan2: entered promiscuous mode
[  244.185085][T14163] macvlan2: entered allmulticast mode
[  244.194619][T14163] bond1: entered promiscuous mode
[  244.200398][T14163] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.209413][T14163] bond1: left promiscuous mode
[  244.235081][T14165] netlink: 'syz.1.2336': attribute type 33 has an invalid length.
[  244.243062][T14165] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2336'.
[  244.253285][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'.
[  244.376843][T14168] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2337'.
[  244.422702][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'.
[  244.434422][T14170] netlink: 'syz.1.2338': attribute type 1 has an invalid length.
[  244.444305][T14170] netlink: 'syz.1.2338': attribute type 1 has an invalid length.
[  244.490557][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'.
[  244.529249][T14172] 8021q: adding VLAN 0 to HW filter on device bond5
[  244.549728][T14172] vlan2: entered allmulticast mode
[  244.558360][T14172] bond5: entered allmulticast mode
[  244.564465][T14175] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2340'.
[  244.865298][T14154] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  245.267040][T14202] 8021q: VLANs not supported on lo
[  245.472942][T14214] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2351'.
[  245.723323][T14222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2353'.
[  246.015922][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  247.654429][T14285] syzkaller1: entered promiscuous mode
[  247.709958][T14285] syzkaller1: entered allmulticast mode
[  248.270706][T14307] xt_cgroup: invalid path, errno=-2
[  249.448355][T14355] __nla_validate_parse: 7 callbacks suppressed
[  249.448376][T14355] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2391'.
[  249.629990][T14359] ieee802154 phy0 wpan0: encryption failed: -22
[  249.768765][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  250.413857][T14388] bridge: RTM_NEWNEIGH with invalid state 0x8
[  250.834722][T14401] macvlan1: mtu less than device minimum
[  251.024366][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'.
[  252.348777][T14455] netlink: 'syz.1.2416': attribute type 10 has an invalid length.
[  252.531977][T14461] x_tables: duplicate underflow at hook 3
[  252.606904][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'.
[  252.707681][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'.
[  252.883793][T14464] bridge0: port 1(vlan2) entered blocking state
[  252.935505][T14464] bridge0: port 1(vlan2) entered disabled state
[  252.964340][T14464] vlan2: entered allmulticast mode
[  252.995345][T14464] bridge0: entered allmulticast mode
[  253.054441][T14464] vlan2: left allmulticast mode
[  253.106245][T14464] bridge0: left allmulticast mode
[  253.504004][T14494] x_tables: duplicate underflow at hook 3
[  253.531503][T14494] x_tables: duplicate underflow at hook 3
[  253.582385][T14497] Cannot find del_set index 5 as target
[  253.633144][T14493] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2425'.
[  253.817436][T14505] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  253.888237][T13714] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  254.105966][T14515] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2432'.
[  254.124278][T13723] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  254.171112][T14514] sit3: entered promiscuous mode
[  254.192828][T14514] sit3: entered allmulticast mode
[  254.531992][T14531] bridge0: port 3(syz_tun) entered blocking state
[  254.550453][T14531] bridge0: port 3(syz_tun) entered disabled state
[  254.568459][T14531] syz_tun: entered allmulticast mode
[  254.591215][T14531] syz_tun: entered promiscuous mode
[  254.591306][T14535] netlink: 163944 bytes leftover after parsing attributes in process `syz.3.2436'.
[  254.644739][T14531] bridge0: port 3(syz_tun) entered blocking state
[  254.651624][T14531] bridge0: port 3(syz_tun) entered forwarding state
[  255.092133][T14552] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2441'.
[  255.556784][T14566] netlink: 'syz.4.2447': attribute type 6 has an invalid length.
[  255.703583][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  255.712867][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.719668][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  256.066281][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'.
[  256.469237][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'.
[  256.776252][T14605] netlink: 'syz.2.2456': attribute type 29 has an invalid length.
[  256.795874][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'.
[  256.869556][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'.
[  257.096126][T14623] netlink: 'syz.1.2459': attribute type 16 has an invalid length.
[  257.114286][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2459'.
[  257.941500][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2462'.
[  258.173652][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  259.223818][T14687] pim6reg: entered allmulticast mode
[  259.298717][T14690] Unsupported ieee802154 address type: 0
[  259.308505][T14690] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2480'.
[  259.398053][T14685] No such timeout policy "syz0"
[  260.059025][T14707] netlink: 'syz.1.2485': attribute type 4 has an invalid length.
[  260.127805][T14708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.704854][T14731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2491'.
[  260.723822][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  260.847932][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  261.581148][T14752] netlink: 'syz.1.2495': attribute type 1 has an invalid length.
[  261.600962][T14752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2495'.
[  261.747731][T14766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2497'.
[  261.793526][T14766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2497'.
[  262.335876][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'.
[  262.354980][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'.
[  262.522833][T14802] ipt_rpfilter: unknown options
[  262.613277][T14806] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2504'.
[  262.878805][T14811] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2507'.
[  263.001881][T14811] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  263.513699][T14786] team0: Port device vlan0 removed
[  264.020013][T14816] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  265.134208][T14866] netlink: 'syz.0.2520': attribute type 1 has an invalid length.
[  265.236149][T14874] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  265.262738][T14874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.318823][T14875] ipvlan0: entered promiscuous mode
[  265.403095][T14875] ipvlan0: entered allmulticast mode
[  265.440227][T14875] veth0_vlan: entered allmulticast mode
[  265.734397][T14886] lo speed is unknown, defaulting to 1000
[  265.745472][T14886] lo speed is unknown, defaulting to 1000
[  265.783070][T14886] lo speed is unknown, defaulting to 1000
[  265.822702][T14887] __nla_validate_parse: 9 callbacks suppressed
[  265.822720][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'.
[  265.934011][T14891] 0ªX¹¦D: left allmulticast mode
[  266.060078][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2525'.
[  266.143716][T14893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2525'.
[  266.223048][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'.
[  266.871828][T14891] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  267.043065][T14887] netlink: 'syz.4.2523': attribute type 8 has an invalid length.
[  267.295536][T14907] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  267.346642][T14910] vlan0: entered allmulticast mode
[  267.354521][T14910] veth0_vlan: entered allmulticast mode
[  267.799407][T14922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2531'.
[  267.977932][T14930] netlink: 'syz.2.2532': attribute type 32 has an invalid length.
[  268.049396][T14886] infiniband syz0: set active
[  268.056994][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'.
[  268.123303][T14886] infiniband syz0: added lo
[  268.153641][T14886] syz0: rxe_create_cq: returned err = -12
[  268.203346][T14886] infiniband syz0: Couldn't create ib_mad CQ
[  268.234830][T14886] infiniband syz0: Couldn't open port 1
[  268.244812][T14926] bond6: (slave gretap2): Releasing active interface
[  268.493657][   T60] lo speed is unknown, defaulting to 1000
[  268.506814][T14942] netlink: 'syz.1.2535': attribute type 2 has an invalid length.
[  268.518336][T14930] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  268.594246][T14886] RDS/IB: syz0: added
[  268.622899][T14886] smc: adding ib device syz0 with port count 1
[  268.679492][T14886] smc:    ib device syz0 port 1 has pnetid 
[  268.767793][   T60] lo speed is unknown, defaulting to 1000
[  268.864872][T14886] lo speed is unknown, defaulting to 1000
[  269.467031][T14968] netlink: 'syz.0.2539': attribute type 11 has an invalid length.
[  269.524777][T14971] netlink: 'syz.1.2540': attribute type 4 has an invalid length.
[  270.136568][T14984] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[  270.203293][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'.
[  270.260911][T14989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2544'.
[  270.350808][T14995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2546'.
[  270.382839][T14988] bond8: (slave gretap2): making interface the new active one
[  270.392730][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'.
[  270.426641][T14988] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  270.499831][T14886] lo speed is unknown, defaulting to 1000
[  270.553853][T14989] 8021q: adding VLAN 0 to HW filter on device bond8
[  270.616079][T14999] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.624874][T14999] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.633763][T14999] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.642919][T14999] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.075145][    C0] sched: DL replenish lagged too much
[  271.362902][T15021] __nla_validate_parse: 3 callbacks suppressed
[  271.362922][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'.
[  271.902642][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'.
[  272.098635][T14886] lo speed is unknown, defaulting to 1000
[  280.778199][T15063] openvswitch: netlink: Missing key (keys=40, expected=100)
[  288.531082][  T182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  293.040787][T15076] xt_nfacct: accounting object `syz1' does not exists
[  294.393329][T14886] lo speed is unknown, defaulting to 1000
[  302.085736][T15084] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2576'.
[  306.782930][ T5924] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 62 sec
[  307.405561][T15092] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2576'.
[  315.180382][T15102] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2578'.
[  316.659516][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.815499][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.898534][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  317.028101][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  317.337946][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.344302][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  321.036065][ T5855] Bluetooth: hci5: command tx timeout
[  323.095481][ T5855] Bluetooth: hci5: command tx timeout
[  323.717681][ T6690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  325.155516][ T5855] Bluetooth: hci5: command tx timeout
[  327.315339][ T5855] Bluetooth: hci5: command tx timeout
[  327.924579][T15114] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  328.686256][T15114] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  328.694748][T15114] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  329.599132][T14886] lo speed is unknown, defaulting to 1000
[  333.424838][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.645454][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.653982][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.674490][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.794291][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  336.178639][   T50] Bluetooth: hci2: command tx timeout
[  336.347868][   T60] page_pool_release_retry() stalled pool shutdown: id 72, 54 inflight 62 sec
[  338.255649][   T50] Bluetooth: hci2: command tx timeout
[  340.707204][   T50] Bluetooth: hci2: command tx timeout
[  341.224093][T15126] x_tables: duplicate entry at hook 3
[  342.738438][   T50] Bluetooth: hci2: command tx timeout
[  350.587634][T15133] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2587'.
[  359.386261][T13744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  366.910806][T14886] lo speed is unknown, defaulting to 1000
[  367.485245][  T978] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 122 sec
[  378.808326][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.816122][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.251215][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.262319][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.272088][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.281730][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.395537][ T5855] Bluetooth: hci4: command tx timeout
[  385.455780][ T5855] Bluetooth: hci4: command tx timeout
[  387.580653][ T5855] Bluetooth: hci4: command tx timeout
[  389.140636][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  389.184307][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  389.245458][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  389.341115][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  389.350116][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  389.616564][ T5855] Bluetooth: hci4: command tx timeout
[  392.182905][ T5855] Bluetooth: hci6: command tx timeout
[  392.616773][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  392.957081][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  392.969152][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  392.990646][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.065887][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.663942][ T6690] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  394.275581][   T50] Bluetooth: hci6: command tx timeout
[  394.750876][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  394.761976][ T5855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  394.787603][ T5855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  394.796598][ T5855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  395.006726][ T5855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  395.645559][ T5855] Bluetooth: hci3: command tx timeout
[  396.345177][ T5855] Bluetooth: hci6: command tx timeout
[  397.061286][ T5855] Bluetooth: hci7: command tx timeout
[  397.696698][ T5855] Bluetooth: hci3: command tx timeout
[  398.421324][ T5855] Bluetooth: hci6: command tx timeout
[  398.914162][T13723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  399.655625][ T5855] Bluetooth: hci7: command tx timeout
[  400.146151][ T5855] Bluetooth: hci3: command tx timeout
[  401.856314][ T5855] Bluetooth: hci7: command tx timeout
[  402.276123][ T5855] Bluetooth: hci3: command tx timeout
[  402.527979][T13723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.975656][ T5855] Bluetooth: hci7: command tx timeout
[  409.467999][   T60] page_pool_release_retry() stalled pool shutdown: id 72, 53 inflight 135 sec
[  412.947982][T13723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.105262][T13723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.417173][T14886] lo speed is unknown, defaulting to 1000
[  425.177257][   T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  426.120744][   T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  426.184375][   T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  426.193937][   T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  426.215946][   T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  427.622982][T15171] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 182 sec
[  427.813497][ T5855] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  427.824460][ T5855] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  428.238551][T13723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.249354][ T5855] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  428.485363][ T5855] Bluetooth: hci8: command tx timeout
[  428.492232][ T5855] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  428.501072][ T5855] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  429.085850][T13723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.585402][ T5862] Bluetooth: hci8: command tx timeout
[  431.535457][ T5862] Bluetooth: hci9: command tx timeout
[  431.568061][  T182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.665262][ T5862] Bluetooth: hci8: command tx timeout
[  433.615846][ T5862] Bluetooth: hci9: command tx timeout
[  434.735903][ T5862] Bluetooth: hci8: command tx timeout
[  436.256565][   T50] Bluetooth: hci9: command tx timeout
[  436.267067][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  437.783082][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  438.063682][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  438.153897][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  438.162694][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  438.356089][ T5862] Bluetooth: hci9: command tx timeout
[  440.057696][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.495708][ T5855] Bluetooth: hci1: command tx timeout
[  442.131471][ T5855] Bluetooth: hci5: command 0x0406 tx timeout
[  442.239508][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  442.250186][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  442.292719][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  442.500013][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  442.595193][   T50] Bluetooth: hci1: command tx timeout
[  443.121185][   T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  444.656208][   T50] Bluetooth: hci1: command tx timeout
[  445.319297][ T5855] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  445.339507][ T5855] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  445.496584][ T5855] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  445.509027][ T5855] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  445.531664][T13723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.544779][ T5855] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  446.238522][T13723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.736441][ T5855] Bluetooth: hci1: command tx timeout
[  446.835320][ T5855] Bluetooth: hci10: command tx timeout
[  448.338134][ T5855] Bluetooth: hci11: command tx timeout
[  448.896173][ T5855] Bluetooth: hci10: command tx timeout
[  450.418081][ T5855] Bluetooth: hci11: command tx timeout
[  451.066212][ T5855] Bluetooth: hci10: command tx timeout
[  452.498040][ T5855] Bluetooth: hci11: command tx timeout
[  453.195226][ T5855] Bluetooth: hci10: command tx timeout
[  454.595498][ T5855] Bluetooth: hci11: command tx timeout
[  457.955732][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  459.634202][T14886] lo speed is unknown, defaulting to 1000
[  467.915161][T13716] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  470.562532][   T60] page_pool_release_retry() stalled pool shutdown: id 72, 53 inflight 197 sec
[  471.821898][T13723] veth0_to_bridge: left allmulticast mode
[  472.487901][T13723] veth0_to_bridge: left promiscuous mode
[  472.589492][T13723] bridge0: port 2(veth0_to_bridge) entered disabled state
[  476.180727][T13723] bridge_slave_0: left allmulticast mode
[  476.252768][T13723] bridge_slave_0: left promiscuous mode
[  476.483223][T13723] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.581790][ T5862] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  480.617783][ T5862] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  480.627428][ T5862] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  480.646389][ T5862] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  480.654238][ T5862] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  482.765220][ T5862] Bluetooth: hci12: command tx timeout
[  484.836013][ T5862] Bluetooth: hci12: command tx timeout
[  486.896031][ T5855] Bluetooth: hci12: command tx timeout
[  487.616098][ T5862] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  487.650813][ T5862] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  487.660530][ T5862] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  487.816370][ T5862] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  487.855485][ T5862] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  489.130564][ T5862] Bluetooth: hci12: command tx timeout
[  489.141459][ T5924] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 244 sec
[  490.265128][ T5862] Bluetooth: hci13: command tx timeout
[  492.355311][ T5862] Bluetooth: hci13: command tx timeout
[  494.486167][ T5862] Bluetooth: hci13: command tx timeout
[  496.496552][ T5862] Bluetooth: hci13: command tx timeout
[  501.172898][  T182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  501.480575][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  505.601057][ T5855] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  505.612396][ T5855] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  505.621480][ T5855] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  505.673368][ T5855] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  505.683111][ T5855] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  507.895613][   T50] Bluetooth: hci14: command tx timeout
[  508.658522][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  510.107679][ T5862] Bluetooth: hci14: command tx timeout
[  510.856539][   T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  510.869029][   T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  510.877905][   T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  510.887697][   T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  511.003842][   T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  512.175643][   T50] Bluetooth: hci14: command tx timeout
[  513.146493][   T50] Bluetooth: hci15: command tx timeout
[  513.776458][   T50] Bluetooth: hci6: command 0x0406 tx timeout
[  514.255638][   T50] Bluetooth: hci14: command tx timeout
[  515.223349][   T50] Bluetooth: hci15: command tx timeout
[  517.328263][T15211] Bluetooth: hci15: command tx timeout
[  519.348045][T15210] Bluetooth: hci3: command 0x0406 tx timeout
[  519.354139][T15210] Bluetooth: hci7: command 0x0406 tx timeout
[  519.362002][T15210] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  519.372321][T15210] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  519.589275][T15210] Bluetooth: hci15: command tx timeout
[  519.625919][T15210] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  519.634167][T15210] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  519.642665][T15210] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  522.576326][ T5855] Bluetooth: hci16: command tx timeout
[  524.666897][ T5855] Bluetooth: hci16: command tx timeout
[  526.795176][ T5855] Bluetooth: hci16: command tx timeout
[  528.825569][ T5855] Bluetooth: hci16: command tx timeout
[  531.978093][ T5944] page_pool_release_retry() stalled pool shutdown: id 72, 53 inflight 258 sec
[  536.218063][  T182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  549.905828][   T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  549.918310][   T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  549.927413][   T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  549.956532][   T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  550.055986][   T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  550.239200][T15214] Bluetooth: hci8: command 0x0406 tx timeout
[  552.271161][ T5862] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  552.290072][ T5862] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  552.305280][ T5862] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  552.339539][ T5862] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  552.347866][ T5862] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  554.385578][ T5862] Bluetooth: hci17: command tx timeout
[  554.496152][ T5862] Bluetooth: hci18: command tx timeout
[  554.916151][ T5862] Bluetooth: hci9: command 0x0406 tx timeout
[  555.619886][   T10] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 310 sec
[  556.442968][ T5862] Bluetooth: hci17: command tx timeout
[  556.704163][ T5862] Bluetooth: hci18: command tx timeout
[  558.498367][ T5862] Bluetooth: hci17: command tx timeout
[  558.593525][ T5855] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  558.725820][ T5855] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  558.737341][ T5855] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  558.745580][ T5855] Bluetooth: hci18: command tx timeout
[  558.856331][ T5855] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  558.865958][ T5855] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  560.575570][   T50] Bluetooth: hci17: command tx timeout
[  560.816001][   T50] Bluetooth: hci18: command tx timeout
[  561.203417][   T50] Bluetooth: hci19: command tx timeout
[  562.924751][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  563.235574][ T5855] Bluetooth: hci19: command tx timeout
[  564.498668][ T5862] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  564.556338][ T5862] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  564.564869][ T5862] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  564.607736][ T5862] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  564.708222][ T5862] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  565.195051][ T5862] Bluetooth: hci1: command 0x0406 tx timeout
[  565.416013][ T5862] Bluetooth: hci19: command tx timeout
[  566.974882][   T50] Bluetooth: hci20: command tx timeout
[  567.455441][   T50] Bluetooth: hci19: command tx timeout
[  569.145711][ T5855] Bluetooth: hci20: command tx timeout
[  569.856716][T15214] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  569.869151][T15214] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  569.879013][T15214] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  569.888451][T15214] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  570.019958][T15214] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  570.100196][ T5855] Bluetooth: hci10: command 0x0406 tx timeout
[  570.106830][T15214] Bluetooth: hci11: command 0x0406 tx timeout
[  570.427522][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  571.215095][   T50] Bluetooth: hci20: command tx timeout
[  572.155574][   T50] Bluetooth: hci21: command tx timeout
[  573.327109][   T50] Bluetooth: hci20: command tx timeout
[  574.175553][   T50] Bluetooth: hci21: command tx timeout
[  574.255717][T13723] bond4 (unregistering): (slave geneve2): Releasing active interface
[  574.263961][T13723] geneve2 (unregistering): left promiscuous mode
[  576.255446][   T50] Bluetooth: hci21: command tx timeout
[  578.338494][   T50] Bluetooth: hci21: command tx timeout
[  592.439920][ T5981] page_pool_release_retry() stalled pool shutdown: id 72, 53 inflight 318 sec
[  599.912212][ T5862] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  600.197755][ T5862] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  600.316176][ T5862] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  600.387464][ T5862] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  600.423071][ T5862] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  602.495554][ T5862] Bluetooth: hci22: command tx timeout
[  604.212485][T13722] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  604.628828][   T50] Bluetooth: hci22: command tx timeout
[  606.203028][   T50] Bluetooth: hci12: command 0x0406 tx timeout
[  606.725651][   T50] Bluetooth: hci22: command tx timeout
[  608.735412][ T5862] Bluetooth: hci22: command tx timeout
[  611.055473][   T50] Bluetooth: hci13: command 0x0406 tx timeout
[  611.456909][T15214] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  611.701332][T15214] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  611.959418][T15214] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  611.972339][T15214] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  611.980565][T15214] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  612.057752][T15213] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1
[  612.069390][   T50] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9
[  612.158234][   T50] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9
[  612.169049][   T50] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4
[  612.177995][   T50] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2
[  614.043520][T13723] bond1 (unregistering): Released all slaves
[  614.355280][ T5855] Bluetooth: hci23: command tx timeout
[  614.420101][ T5855] Bluetooth: hci24: command tx timeout
[  616.430877][ T5855] Bluetooth: hci23: command tx timeout
[  616.575305][ T5855] Bluetooth: hci24: command tx timeout
[  616.997470][   T10] page_pool_release_retry() stalled pool shutdown: id 70, 54 inflight 372 sec
[  618.550587][ T5855] Bluetooth: hci23: command tx timeout
[  618.902831][T15213] Bluetooth: hci24: command tx timeout
[  618.967779][T15213] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1
[  618.978944][T15213] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9
[  618.987509][T15213] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9
[  619.096616][T15213] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4
[  619.108050][T15213] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2
[  620.890519][T15213] Bluetooth: hci23: command tx timeout
[  620.908131][   T31] INFO: task syz-executor:15104 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  621.018217][T15213] Bluetooth: hci24: command tx timeout
[  621.456359][T15213] Bluetooth: hci25: command tx timeout
[  621.665139][   T31]       Not tainted 6.16.0-rc6-syzkaller-00145-g14822f782700 #0
[  621.672825][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  622.375475][   T31] task:syz-executor    state:D stack:24008 pid:15104 tgid:15104 ppid:1      task_flags:0x400140 flags:0x00004006
[  623.536601][T15213] Bluetooth: hci25: command tx timeout
[  623.556324][   T31] Call Trace:
[  623.559655][   T31]  <TASK>
[  623.562603][   T31]  __schedule+0x16f5/0x4d00
[  624.141335][   T31]  ? kvm_sched_clock_read+0x11/0x20
[  624.327744][   T31]  ? sched_clock+0x3f/0x60
[  624.332245][   T31]  ? sched_clock_cpu+0x74/0x430
[  624.364314][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.855405][   T31]  ? psi_task_change+0xe5/0x250
[  624.860344][   T31]  ? __lock_acquire+0xab9/0xd20
[  625.165199][   T31]  ? schedule+0x165/0x360
[  625.169605][   T31]  ? __pfx___schedule+0x10/0x10
[  625.174490][   T31]  ? schedule+0x91/0x360
[  625.185228][   T31]  schedule+0x165/0x360
[  625.189463][   T31]  schedule_preempt_disabled+0x13/0x30
[  625.620450][T15213] Bluetooth: hci25: command tx timeout
[  625.886336][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  625.892135][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  626.057801][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  626.063792][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  626.075714][T15213] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1
[  626.089100][T15213] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9
[  626.098662][T15213] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9
[  626.108292][T15213] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4
[  626.118132][T15213] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2
[  626.235007][   T31]  ? __lock_acquire+0xab9/0xd20
[  626.239947][   T31]  ? rdma_dev_exit_net+0x8c/0x340
[  626.255151][   T31]  down_write+0x1ab/0x1f0
[  626.259535][   T31]  ? __pfx_down_write+0x10/0x10
[  626.264408][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  626.285016][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  626.290281][   T31]  ? rdma_net_to_dev_net+0x1ed/0x240
[  626.305039][   T31]  rdma_dev_exit_net+0x8c/0x340
[  627.165198][   T31]  ? __pfx___might_resched+0x10/0x10
[  627.170558][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  627.695250][T15213] Bluetooth: hci25: command tx timeout
[  627.949470][   T31]  ? net_generic+0x1e/0x240
[  627.954036][   T31]  ? mutex_is_locked+0x17/0x50
[  627.991919][   T31]  ? rtnl_is_locked+0x15/0x20
[  628.115094][   T31]  ops_undo_list+0x49a/0x990
[  628.119772][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  628.124904][   T31]  ? ops_init+0x469/0x5c0
[  628.258553][T15213] Bluetooth: hci26: command tx timeout
[  628.455089][   T31]  setup_net+0x3e2/0x4b0
[  628.459415][   T31]  ? __pfx_setup_net+0x10/0x10
[  628.464206][   T31]  ? copy_net_ns+0x304/0x4d0
[  628.704986][   T31]  ? down_read_killable+0x1d1/0x350
[  628.710277][   T31]  copy_net_ns+0x31b/0x4d0
[  628.714723][   T31]  create_new_namespaces+0x3f3/0x720
[  629.699671][   T31]  ? security_capable+0x7e/0x2e0
[  629.704695][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  629.725160][   T31]  ksys_unshare+0x4c8/0x8c0
[  630.065504][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  630.070601][   T31]  ? rcu_is_watching+0x15/0xb0
[  630.095038][   T31]  __x64_sys_unshare+0x38/0x50
[  630.099861][   T31]  do_syscall_64+0xfa/0x3b0
[  630.104383][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  630.575343][ T5855] Bluetooth: hci26: command tx timeout