last executing test programs:

1m2.644667194s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

52.09409771s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

40.877374249s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

29.910616422s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

17.968191739s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000000a14d0a800000000000000000000000000000005206361576883181dae8d719f90daa47cc93deaa55b1e53e343ceaf48497b5f1a234d67f8e79b6033f711c68eb54eb62a7c47e91ef3910b99096c7b85b2ade6bedadd3a87fcee13c36aa2c11a44ba22ec4e05de202f71914ba08f91cd6686941720fefbe0982c114919b5337cc83b27201ff6622c06ef24612712d9cc02dc1500a789d258150dd8f71fe63bba1bf2715f69d1b310667813ef642b39f4e80a15ebb4a2c5d46c4e5268986c775b1d46ec7079c2a1244b5f87f0ac9183ccb027a01e5511e31d46f3432fdddeac663879f561210368e4f8e65302ff39f76103f9896bb7a2bb691ca4197eb340099da58bee689a9cc6cc05ce8d0eb87541916086108dd268c2f0398e9c9f8c3e3080b9138aa97280bc938b0562d33fde593c5a5490cb53daba46232023ccf1e64ed1bdbc3f9a45e5bc374d5"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

7.753898759s ago: executing program 4 (id=597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x4e20, 0xfff9, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x1c0000000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100}, {0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
sendto$l2tp(r8, &(0x7f00000000c0)="fefe", 0x2, 0x1c1, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r9, 0x800442d3, 0x200000f3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r10, @ANYBLOB="408052"], 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

5.352225711s ago: executing program 1 (id=1829):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

5.184287423s ago: executing program 1 (id=1831):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000980)=ANY=[@ANYBLOB="64000000190001000000f7ffffffffff1c0109004d000f803b6f2811032d68bea02b2844f47c285eb2ff3720c904f9bfaf5eeba9024644942e3645a3e6db0d1191744909497df00d71d2273b284c3cac17e3bb7700000000000000000000841adf000000"], 0x64}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000980)=ANY=[@ANYBLOB="64000000190001000000f7ffffffffff1c0109004d000f803b6f2811032d68bea02b2844f47c285eb2ff3720c904f9bfaf5eeba9024644942e3645a3e6db0d1191744909497df00d71d2273b284c3cac17e3bb7700000000000000000000841adf000000"], 0x64}}, 0x0) (async)

5.010044315s ago: executing program 1 (id=1833):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', <r1=>0x0, 0x7800, 0x10, 0x6, 0x3, {{0x30, 0x4, 0x0, 0x9, 0xc0, 0x66, 0x0, 0x7f, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xaa, 0x1, 0x6, [{@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@loopback, 0x6}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x3}, {@local}]}, @end, @lsrr={0x83, 0xf, 0x52, [@broadcast, @rand_addr=0x64010102, @loopback]}, @generic={0x88, 0x8, "caab4b42aad7"}, @rr={0x7, 0x7, 0xa9, [@broadcast]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x6, [{@loopback, 0x9}]}, @timestamp_addr={0x44, 0x34, 0x3b, 0x1, 0x0, [{@local, 0x7ff}, {@broadcast, 0x6}, {@private=0xa010102, 0x3}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x17, 0xa7, [@remote, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102]}]}}}}}) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40800000000000073114000000000008510000002000000b7000000000000009500c200000000009500001200000000f593d26bc6fa2d343eac9290dcd80ae286e2d02b53c0a1a0284786a4715338416e7ab1f3a8b3163df0353c209c42e1e46c9b6f9acfb9db20783be91d051bbfa1512dc8a244e4d473dc55ad"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x92, '\x00', r1, @cgroup_skb}, 0x94)

4.864549615s ago: executing program 1 (id=1836):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001600)}, 0xbe58}, {{&(0x7f0000000300)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001d40)=""/93, 0x5d}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/155, 0x9b}], 0x4, &(0x7f0000001640)=""/96, 0x60}, 0x8}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001880)=""/232, 0xe8}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000001980)=""/152, 0x98}, {&(0x7f0000001a40)=""/22, 0x16}], 0x5, &(0x7f0000004c80)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000001b00)=@tipc=@id, 0x80, &(0x7f0000001c00), 0x0, &(0x7f0000005c80)=""/4096, 0x1000}, 0xfffffffe}], 0x4, 0x7ffeedc0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x873, 0x8, 0x8, 0xffff, 0x7, 0x4, 0x2}, 0x1c)
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', <r4=>0x0, 0x0, 0x6, 0x8b, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x4, 0xff}})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0x5}, {0xfff2, 0x4}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40)

3.915539696s ago: executing program 1 (id=1840):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b15d6a457d4dcf94f41e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319882945b3d0aa8e9a54cbd1aeb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a1126043b88f00fdc17ccd274999304c1dff6f4f4f8b219b418e09cf2c0e0cb2f9ad957fd859564f7ff6f28fb3b2d3a97df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175178f6fa467be03e9f7cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa175137b205fc7ccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db946b1a1b989dc6b146853fea8deab55df9eaf759ffd08ff483103720ebfbc53be6a85fc1b610ba8e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8b7b4f3472976f6688cb230ccd762d00fcf810ca0c3d20ccdcac10fe09cc5fccf31d9e16e899d32dee701d2b6fff95c1328f249878e6dde3ed840d4b5fb05cc1399dd151f59e53712285d5e9c4dba7e1eb9ff174487c74454f8f5e996e600c5740d21d7ac237d62bee06c1834b04e29c8ee7a5a56a386eca1b136904aeca3cbb85c7278fe202d286d45461d8c9e74654b95b8ebdfa7d9bbe7d5cc269d368efe9056060de9bcaa714bcc8429b623dd78d4fd6ebfaadb7bd35a3ff3da98e2164c8cc1d0d7017b8a7a0fef4f802d538e5bd40daba01aa97fa689d928a6e52e1b21c"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

3.781501787s ago: executing program 1 (id=1841):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000940))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000980)="5b1d30896aed537a8e10240c80c7984127a12de554ed990ca04f9fcadd6231c44c259bbaf9a385fd81ad02d25447eec2303c9d46a72dfe7670a784265d8773884f2c5f5dd8579d14484ad4c532abc7f7a4af6c5fed84ccf4d8836a8ec34906e19913ed330d1f3918d183acc895fa2306f1c9d2f09fb62340d2d743265a2e91e220646e96c2615a7aca5fa85a234a3201891c39c72658a65e288b814605f7a80cd6354d4766792db1268942b6d1c2607c0bcd2dcb7562e8ec4d5339f94bfd92caca3569c0fdc449a5d2", &(0x7f0000000a80)=""/174, &(0x7f0000000b40)="a9ae152880273949721811b759b5cef0c5019ad4921b4f0cca5a7fdf0bc6f53e07b6a46f9108f4d62960174e819cd28a55cf497bfbb9d8dde0e570a4af1c67200a3f6a57e81aa7efa5a2436083ab0dd4bc498488d35aa37ac716850f9890cd5dea2b1543a59887fe0ad53acfdf63996f12b3ac41725203ef16a0d49e30b83526b8f96787c00805ce0a5848c1d9538596cf29ae2c1a2f94ea4ea833e1408aa67acf2e9bae550a0fa719ca25766e2f9ad432f5dc748c1f3878520459fdd3f8801676765d3f5482aa386656d6", &(0x7f0000000c40)="e45fab7ee0ccaf3fdcd98f7b709163129cfaf3a15d55be13a5686addca2ff62e52bc366955f8fcb778e545a55e69c361ab08f0a100c5848664eeaef06cf03f005fbf1115938c099246a1eaf5c9b1a01004bb084d43802cf122c46730f85cf97eb4d5d025bed93f47e430861cf8d2ca10fd12b39ed85fb52d05da960b680b8fbf25108ea96a5fbc81af0b8f06f7515d39df09f16f91e0209fe6d2f74833ffa613e5d44da51c6f4ffbbdd8deee74ff30501957fe0aa8037b4d9fd544576e89bba939ff81d529f1f1ad5c805c1b7c5542a1ebc7bd7157948108c9a08a", 0x6f, r3, 0x4}, 0x38)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000000c0)={r1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000e00)={0x5, 0x7fffffff, 0x5})
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x368, 0xffffffff, 0xf8, 0x1c8, 0xf8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc2, 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'nr0\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002", @ANYRESDEC=r1, @ANYRESHEX=r9], 0xc0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe5, 0x18, &(0x7f0000000580)="2ae004259d0f2c59ad56956e118f3fffb02717e0ef521294d7828f16f500898fee4c46c2855fc60d3e93257966d204db330541759329a35225cdeff1bcd8be710f8ca84e18a4e00c09c20aee3c99fcdbd73fc9653acdeb707f8c35e11b5d4eb75e3baefbf9cc507e608587bd552eae5bfc73cfdeae78c09f37f7a1616747cb20fe71b12c713ef8b9fb7346368f37f0083d0e543e579a4e45bc663a4a96c958acedae6dd9e2458025ee45ab85f6f3e5a675e7373d4e7a8a1543a429821507976032459413a0fa5dc03326e0f25fd6cde2ae77943fbfeafd96650ef0bde91dc5067f21ceaab1", &(0x7f0000000680)=""/24, 0xfffffffe, 0x0, 0xc2, 0xb1, &(0x7f00000006c0)="4092320f10a34761908104698a0c20b8e78a1759d048f12bb5aabba005a6895533d4b0ddb5715604a6d13a90067c204abfb73f3e2b035fef4c5ec3b2afb3b5a1aee780040e376ae2d671199f11ba8306629f0393141b63e2664aa689760f3ab8903d025127b54f5e9e8c0c24085de7a5744f8d2e0ae5c0f9c5f0fbb966c91d09de8e5a84d8b822dd90442824f07b05d50c5cc1172a63f6ab91d89e4471185a60ab2c766c430077058e52ea0831097dadd0a66581b45a5dd5fbe230c84d029a68d602", &(0x7f00000007c0)="54f3c16605da0eeeeaaab92e98c12ec4872690d126e8e5933cdae6ece8d60cdb0c373880c115787c56af7678b681e81c4806e2cc96024a94871f70cc3fee3d2ba3a6b47880fad5ed4a2acfec03835db810168a675f0b5dd635901bc56729644b9aef23510e29466be477e1111e68a183b09fe9b74fec188841e6585e07755b669edc1a72eddf921d0835cfb5dc3caff298ba7b8e603f284908163a314b02b82a829bea0f09a96e9f2af4649895639f6154", 0x7, 0x0, 0x6}, 0x50)

1.042393338s ago: executing program 0 (id=1866):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x5, <r2=>0x0}, 0x8) (async)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r3, 0x0, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x1, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x8c}], &(0x7f0000000580)='syzkaller\x00', 0xa5d, 0x1000, &(0x7f00000006c0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xd, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0x1], &(0x7f0000001740)=[{0x4, 0x1, 0x3, 0x6}, {0x1, 0x1002, 0x4, 0x2}, {0x1, 0x4, 0x4, 0x2}], 0x10, 0x8000}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r8, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r8, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0xffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x4, 0x1d, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb4e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000300)=""/199, 0x1e00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xa, 0x1c, 0x8}, 0x10, r2, r4, 0x9, &(0x7f0000001840)=[0xffffffffffffffff, r5, r12, 0xffffffffffffffff], &(0x7f0000001880)=[{0x1, 0x3, 0x5, 0xb}, {0x1, 0x5, 0x7, 0xa}, {0x0, 0x5, 0x6, 0x8}, {0x2, 0x2, 0x2, 0x2}, {0x5, 0x2, 0x8, 0x6}, {0x1, 0x3, 0x5, 0x5}, {0x2, 0x1, 0xd, 0x5}, {0x5, 0x5, 0x6, 0xa}, {0x5, 0x1, 0x7, 0x1}], 0x10, 0x4}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$inet6(0xa, 0x1, 0x0) (async)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r14}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bridge_slave_0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x564) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={r14, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000001a00)=[{}], 0x8, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10)

1.026385549s ago: executing program 3 (id=1867):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40864}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0xba, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYRESOCT=r5, @ANYBLOB="7fea231c147cbb5be513150976f83f5982780896b7985f8e2264b0468586cc035c6abdc1f99431f89855967cd6b9ad649e48d6ea870a83700ea0b040677756a17188ff88056bc41d9131e89f677754758f6960c494fdabf2b6ba66a7c662"], 0x10}, 0x20880)
r7 = socket$kcm(0x29, 0x5, 0x0)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r2, r8})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
recvmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0) (async)
recvmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000102, 0x0)
recvfrom$x25(r8, &(0x7f0000000280)=""/154, 0x9a, 0x40, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async)
recvfrom$x25(r8, &(0x7f0000000280)=""/154, 0x9a, 0x40, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)

885.567543ms ago: executing program 2 (id=1868):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x4, 0x10}, &(0x7f0000000200)=0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x891)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async, rerun: 64)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/157, &(0x7f0000000140)=0x9d) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0)

828.439715ms ago: executing program 3 (id=1869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@dev, @initdev, <r1=>0x0}, &(0x7f0000000240)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x48, 0x4a, 0x200, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x18, 0x0, r1, 0x21677133}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

807.127786ms ago: executing program 0 (id=1870):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0) (async)
r1 = socket$kcm(0x10, 0x0, 0x4) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fcdbdf2500000000", @ANYBLOB="020000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20008004) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'macvlan0\x00', @broadcast}) (async)
r4 = socket(0xa, 0x3, 0x3a)
socket$pppoe(0x18, 0x1, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x5c) (async)
ioctl$FICLONE(r2, 0x40049409, r4)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000640)) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)

701.672296ms ago: executing program 2 (id=1871):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001c00)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0x1000}, {&(0x7f0000001a00)="d8", 0x1}], 0x2, 0x9)
close(r1) (async)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080))
accept4(r3, 0x0, 0x0, 0x800) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="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", 0x1b4}], 0x2}], 0x1, 0x40800) (async)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000600)="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", 0x1b4}], 0x2}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

700.631418ms ago: executing program 0 (id=1872):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={<r4=>r0}) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7d, &(0x7f0000000700)={r6, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r6, 0xffff8001}, 0x8)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f725238a32"], 0x50) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x2c060000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet(0xa, 0x801, 0x84) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

682.371371ms ago: executing program 3 (id=1873):
r0 = socket(0xa, 0x2400000001, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffe6d)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)

593.865981ms ago: executing program 2 (id=1874):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3e8, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x28b, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x40005) (async)
bind$phonet(r6, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0x100d}, {&(0x7f00000017c0)=""/4075, 0xfeb}, {&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000000)=""/46, 0x2e}], 0x5}, 0x40000100) (async)
sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2b20dd9dc19d7fac80841b6234ead9f6aea35be46a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000000)

509.772824ms ago: executing program 3 (id=1875):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="25830385bf25a0d1485487736c9ef8401b8d140a98b7329b5d0a4a331acd0fb434b8db1098b3eb5b8ef092f8ca2d47fa418e3186eedc75f64d765d8221915d2958e4dcdf6e25fb0c3746478be11f5cd112dbf24ec36b3ea469df0eae5333b9de47ec8eeead9aea374a11b7c296ae3590377652585c662a3e5c939c49bf31f4e85061282f9be8b8027a0208c97d20a839ea0a5108b0af3b2dbb7ec3f6b06c554572c40145f2e0954c787a14bde87fd1600f0f909c4dd40e6f014bece6dbe0a680604e2b43b501494d1a5febfa2514dcc2eb1506980353b26ac1e7a0318fd043aa8a06d927cd4c2829caeedd6c7b811deb10b5b3042c", 0xf5}, {&(0x7f0000000140)="fc6e70482971a697b7451d97e5cfdac64b275b810f901d201829521832e8ed3196b4e758917337314fb967687b5c6874f8efa967a8ab68698c90af9ba32ddda77e0e2aeb9fd00b577831f4d9f8a245116f888865ce18e35196aa9ae5d905b8d008a1081293954da30c153aa27e3250ae3bf345a79e03c0473a1c19a075cf8cfab5e7f8fc", 0x84}, {&(0x7f0000000600)="a402ef51c65586473e425c30ada12c28112084494863b5f935897fd892b6bed179d894055a76e5e40f1b6ec66b651343cad2e045b549242fde8a90ea466a8475bed8ecf025490f23103e0c89bc53a0b03e4677459a6eab427061284ed917dea33e61835b757afcf52e8e765679bedcde946af29fa8fd037c6b6a53c93dc1a23a903edcaf3c8e29cd6d1de49b1f156b3a170c848ccf45ee83fdcd0d78022c121f4f74141066f40370be3e098b19c6537ba2ac", 0xb2}, {&(0x7f0000000040)="13c92553e0723364642e65ab47e396b462b9161c57aef891a2c3296ea3e553815cc41c5c47b77ac71dac0d08d5992f5a0b79d600258f1475b18cd569302020d359b0cdaeb986266075aeb7f500152cb253602a1a", 0x54}, {&(0x7f00000006c0)="c22a17c5f433337640a2cb7c95b4a0df523fff5580f6fc64b76d5fc1307cd10abab1138fe355cbe3c8c6b4894def291c1a9f1ff18ab661cef250335c7af0415380f49f14ac342b444d8c744e7fa3da5548ee4789009f6fa6e08326adbd736af1cbfabf178e48b38b0b24b529b1ac516d07e5132251586b389189924ff5e67f11b1bd920349a0cf78fd119d99ceb80acb77ffbbec9a6538c741d18e3b9e5cb9089d1709d40a657bad13baa66d32a5df3b1bea0afd06a986ca64a03bf2ef41bedeaee582197661fae8c2f13b3e138ac7f62102485be1b4c07c3951378b6783a3", 0xdf}, {&(0x7f00000003c0)="3bcd263227b26243f9aa6cb50ce7a6e8e8bd252398899b2fc124c59d63eecf0bdd184486b0b1d0df3008a82915337f92366e3d26270c6ee2e8dcec1d3c05ad6a2251ec2b91e23dbd252fc9d184e49e4fffb69bf98f6d61fa", 0x58}], 0x6, &(0x7f0000000840)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20000000}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="d3d3b291dbd487f7741659a985e9b70a967c5c373c4cfca88acc38f0224d0e02f109c5451f73bdd21a28ddf4319e2181b6b871d986d0c57b363250db3590f4c10c34add7da41c61e17b0fa3211aad336ed14ff9dc6ab931f7bba47368dc0f12710b0d5fba8fc58f9f8c99f68f8482ec7671da75c430bfc9f511f135852113776ecbfa95bf725e70b8d3d5f67654090c127d5345875fba5659c77", 0x9a}, {&(0x7f0000000480)="428ea765b4b7e9764125aef9638b69c8baed9c6455150537d1c753fd71895f271c651489f64d605621a7d542bca411227aa96933ff4524a39704", 0x3a}, {&(0x7f0000000980)="2a27865aecedb793265459e6fa962b2569e7bc1963c711c7c41d4c6795466ad5556742d48255a4ecf7195a40aa683a109b774a12c6956650686731ba26c6f7ca9750a6e9a1246957acd8094706adbb1aaf8ebc0515d4b67a57b56e3c8d5cf20cb39456009171b41332621bd951b91b4adf85077add80355b", 0x78}, {&(0x7f0000000a00)="308ab465a0b09aa1b88b565c9bd27207b8768ddf934990ea19cb16dd3a61824d16033d0d1a1af8d431dab75ab6138ddb54bdba315468b328ca0e4913858e6165c29ce6c779d7c59f2c826250637491117d99bc6f7182f0bee756484ed2e65dc8b25c10b8f76934ef931e8ed8574456c41680add517e7eb5a0fde564fc709d7274d43aa1e9d9d59d29eb3faa0be67c9c7dc205c5f279f5d4e38bc2fe76100db61418ce27ee84b8c8045b49289358d62813a", 0xb1}, {&(0x7f0000000580)="821adb17f3a46286ad94212f8dbf3d9ea84dc29f5781a97e423c85a4376891e849b6c2e2", 0x24}], 0x5, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x86f}], 0x18, 0x4801}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="59395a655844534ee226934a59fc9d605f617b0bfa14b154e8ed90243828ffcbbe4a368359c321d2b9d20ebf0461015917846bdef81bbc1fa27f81f50ae81e66ea0f4b96f5b2916fcc90995ea0cff3ed82309e441d8c1b7dc05d69a32be1b497c2abe97072626f774f013a3ca49d1577b6a710b0af0f67f923ce8f5921ac54d9585f627d1e5a86ac80b38862c0b5d1cce87039fc9286cb16f92201fd0e59d0e87e0502996360dbd0d517dcc46d42bdd4ea6adaa0dde022e39e4b771d", 0xbc}, {&(0x7f0000000c40)="460a5214466de219e79e3bc533498d3513aee241f77c072e59d30deb43d76302fa43ba703c48c0b4a8c367df1ca85bc20913703c1cce76def270ed7a655884107b165972c380f178d8af378cff8087618112c07b2ee8ade93f46fc80d4f5c136adfcd6ac8ed28f7a01bc501e4a4bff20c9620ff020247e2c797f92dc55c5b21d1b09a54171f4", 0x86}, {&(0x7f0000000d00)="7658eebd8367db2b197f654c286666a5a12eab73b05aeb3ecc073718219ec27632110e992de04755475c4da2fbc9bf0a49c209f3b3327c", 0x37}, {&(0x7f0000000d40)="92297cc5eca15aa51ba55d5fb96ef350339357d5b53dbf0e8fdc1f7ae725359c98040bdb9950a45a88c49af5214abf43a42e1bc6b03f4466285a5e2ab12e56db28c2f6262ef5ca", 0x47}, {&(0x7f0000000dc0)="7a97a87db03e42a764fbbb702cf5ffdbb4f6634cfa993d51d6d357f563ab35388682829f979c8c0fef", 0x29}], 0x5, &(0x7f0000000e80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x78, "137aae6512b8c73621ace49bedd86fd24a3496d4672b0e943360defbbe76030f7c0dbd3d42f456b3dce8698024f1794783c8c59bfdf0ca3b1b5f8fd0b2c36bd904b9ec780e422eb52f24346474e4bd907bb549cb3578056f4dbb4aa04813312dd3f2ab64c23647c22dab069f7edfa6651d9c79dd57810d54"}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @assoc={0x18, 0x117, 0x4, 0x800}], 0x108, 0x40}], 0x4, 0x20044881)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000000fc0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="25830385bf25a0d1485487736c9ef8401b8d140a98b7329b5d0a4a331acd0fb434b8db1098b3eb5b8ef092f8ca2d47fa418e3186eedc75f64d765d8221915d2958e4dcdf6e25fb0c3746478be11f5cd112dbf24ec36b3ea469df0eae5333b9de47ec8eeead9aea374a11b7c296ae3590377652585c662a3e5c939c49bf31f4e85061282f9be8b8027a0208c97d20a839ea0a5108b0af3b2dbb7ec3f6b06c554572c40145f2e0954c787a14bde87fd1600f0f909c4dd40e6f014bece6dbe0a680604e2b43b501494d1a5febfa2514dcc2eb1506980353b26ac1e7a0318fd043aa8a06d927cd4c2829caeedd6c7b811deb10b5b3042c", 0xf5}, {&(0x7f0000000140)="fc6e70482971a697b7451d97e5cfdac64b275b810f901d201829521832e8ed3196b4e758917337314fb967687b5c6874f8efa967a8ab68698c90af9ba32ddda77e0e2aeb9fd00b577831f4d9f8a245116f888865ce18e35196aa9ae5d905b8d008a1081293954da30c153aa27e3250ae3bf345a79e03c0473a1c19a075cf8cfab5e7f8fc", 0x84}, {&(0x7f0000000600)="a402ef51c65586473e425c30ada12c28112084494863b5f935897fd892b6bed179d894055a76e5e40f1b6ec66b651343cad2e045b549242fde8a90ea466a8475bed8ecf025490f23103e0c89bc53a0b03e4677459a6eab427061284ed917dea33e61835b757afcf52e8e765679bedcde946af29fa8fd037c6b6a53c93dc1a23a903edcaf3c8e29cd6d1de49b1f156b3a170c848ccf45ee83fdcd0d78022c121f4f74141066f40370be3e098b19c6537ba2ac", 0xb2}, {&(0x7f0000000040)="13c92553e0723364642e65ab47e396b462b9161c57aef891a2c3296ea3e553815cc41c5c47b77ac71dac0d08d5992f5a0b79d600258f1475b18cd569302020d359b0cdaeb986266075aeb7f500152cb253602a1a", 0x54}, {&(0x7f00000006c0)="c22a17c5f433337640a2cb7c95b4a0df523fff5580f6fc64b76d5fc1307cd10abab1138fe355cbe3c8c6b4894def291c1a9f1ff18ab661cef250335c7af0415380f49f14ac342b444d8c744e7fa3da5548ee4789009f6fa6e08326adbd736af1cbfabf178e48b38b0b24b529b1ac516d07e5132251586b389189924ff5e67f11b1bd920349a0cf78fd119d99ceb80acb77ffbbec9a6538c741d18e3b9e5cb9089d1709d40a657bad13baa66d32a5df3b1bea0afd06a986ca64a03bf2ef41bedeaee582197661fae8c2f13b3e138ac7f62102485be1b4c07c3951378b6783a3", 0xdf}, {&(0x7f00000003c0)="3bcd263227b26243f9aa6cb50ce7a6e8e8bd252398899b2fc124c59d63eecf0bdd184486b0b1d0df3008a82915337f92366e3d26270c6ee2e8dcec1d3c05ad6a2251ec2b91e23dbd252fc9d184e49e4fffb69bf98f6d61fa", 0x58}], 0x6, &(0x7f0000000840)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x20000000}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="d3d3b291dbd487f7741659a985e9b70a967c5c373c4cfca88acc38f0224d0e02f109c5451f73bdd21a28ddf4319e2181b6b871d986d0c57b363250db3590f4c10c34add7da41c61e17b0fa3211aad336ed14ff9dc6ab931f7bba47368dc0f12710b0d5fba8fc58f9f8c99f68f8482ec7671da75c430bfc9f511f135852113776ecbfa95bf725e70b8d3d5f67654090c127d5345875fba5659c77", 0x9a}, {&(0x7f0000000480)="428ea765b4b7e9764125aef9638b69c8baed9c6455150537d1c753fd71895f271c651489f64d605621a7d542bca411227aa96933ff4524a39704", 0x3a}, {&(0x7f0000000980)="2a27865aecedb793265459e6fa962b2569e7bc1963c711c7c41d4c6795466ad5556742d48255a4ecf7195a40aa683a109b774a12c6956650686731ba26c6f7ca9750a6e9a1246957acd8094706adbb1aaf8ebc0515d4b67a57b56e3c8d5cf20cb39456009171b41332621bd951b91b4adf85077add80355b", 0x78}, {&(0x7f0000000a00)="308ab465a0b09aa1b88b565c9bd27207b8768ddf934990ea19cb16dd3a61824d16033d0d1a1af8d431dab75ab6138ddb54bdba315468b328ca0e4913858e6165c29ce6c779d7c59f2c826250637491117d99bc6f7182f0bee756484ed2e65dc8b25c10b8f76934ef931e8ed8574456c41680add517e7eb5a0fde564fc709d7274d43aa1e9d9d59d29eb3faa0be67c9c7dc205c5f279f5d4e38bc2fe76100db61418ce27ee84b8c8045b49289358d62813a", 0xb1}, {&(0x7f0000000580)="821adb17f3a46286ad94212f8dbf3d9ea84dc29f5781a97e423c85a4376891e849b6c2e2", 0x24}], 0x5, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x86f}], 0x18, 0x4801}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="59395a655844534ee226934a59fc9d605f617b0bfa14b154e8ed90243828ffcbbe4a368359c321d2b9d20ebf0461015917846bdef81bbc1fa27f81f50ae81e66ea0f4b96f5b2916fcc90995ea0cff3ed82309e441d8c1b7dc05d69a32be1b497c2abe97072626f774f013a3ca49d1577b6a710b0af0f67f923ce8f5921ac54d9585f627d1e5a86ac80b38862c0b5d1cce87039fc9286cb16f92201fd0e59d0e87e0502996360dbd0d517dcc46d42bdd4ea6adaa0dde022e39e4b771d", 0xbc}, {&(0x7f0000000c40)="460a5214466de219e79e3bc533498d3513aee241f77c072e59d30deb43d76302fa43ba703c48c0b4a8c367df1ca85bc20913703c1cce76def270ed7a655884107b165972c380f178d8af378cff8087618112c07b2ee8ade93f46fc80d4f5c136adfcd6ac8ed28f7a01bc501e4a4bff20c9620ff020247e2c797f92dc55c5b21d1b09a54171f4", 0x86}, {&(0x7f0000000d00)="7658eebd8367db2b197f654c286666a5a12eab73b05aeb3ecc073718219ec27632110e992de04755475c4da2fbc9bf0a49c209f3b3327c", 0x37}, {&(0x7f0000000d40)="92297cc5eca15aa51ba55d5fb96ef350339357d5b53dbf0e8fdc1f7ae725359c98040bdb9950a45a88c49af5214abf43a42e1bc6b03f4466285a5e2ab12e56db28c2f6262ef5ca", 0x47}, {&(0x7f0000000dc0)="7a97a87db03e42a764fbbb702cf5ffdbb4f6634cfa993d51d6d357f563ab35388682829f979c8c0fef", 0x29}], 0x5, &(0x7f0000000e80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x78, "137aae6512b8c73621ace49bedd86fd24a3496d4672b0e943360defbbe76030f7c0dbd3d42f456b3dce8698024f1794783c8c59bfdf0ca3b1b5f8fd0b2c36bd904b9ec780e422eb52f24346474e4bd907bb549cb3578056f4dbb4aa04813312dd3f2ab64c23647c22dab069f7edfa6651d9c79dd57810d54"}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @assoc={0x18, 0x117, 0x4, 0x800}], 0x108, 0x40}], 0x4, 0x20044881) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async)

473.039227ms ago: executing program 3 (id=1876):
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0x80, 0x9, 0x40148, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0xf}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0x1, @sctp_ip4_spec={@broadcast, @multicast2, 0x4e22, 0x4e23, 0x80}, @esp_ip4_spec={@empty, @remote, 0x3, 0x3}, 0x7, 0x6, 0x7fff, 0x8c, 0xfffffffffffffffe}}})
getsockopt(r0, 0x200000000114, 0x271d, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x8b2a, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008040)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

414.082244ms ago: executing program 2 (id=1877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000001010300000000000000000802000009080007400000000724001880080003400000000608000340000e00090800024000000200480003400000000608000840000000990800084000008000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0)

329.691799ms ago: executing program 0 (id=1878):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

328.953742ms ago: executing program 2 (id=1879):
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000040)={0x0, @broadcast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x5d)

200.881648ms ago: executing program 3 (id=1880):
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff4068}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4006090}, 0x20000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000300)="89e05c60951f1138015fe0ffbe38aba49214b8b926e00339f9a6cf9d5e864b6a4c8b4ac99dc7dde32e14dfe7276eb9db283ce67888cb4bcb0e7e383b85413385d8bae673ab606e3136b53fa4245b9a7ab622a74fdeccbe6b4ac366aaa3341ab31d8e40d64003f089f9ba7adcdc71b6e679af36625c0a98f7e4b06dd10e72f32f3fe63b", &(0x7f00000003c0)=@udp=r2, 0x2}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$inet6(r3, &(0x7f0000000440)=""/4096, 0x1000, 0xb6ef9ef8aa6b406f, &(0x7f0000001440)={0xa, 0x4e24, 0xf12, @mcast2, 0x13}, 0x1c)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001480)=0x1025, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000014c0)={@rand_addr=0x64010101, @empty, 0x1, "258c6ad97588311455e5b5ff5156eccbc1d0da596d5c072299ff641e1517067e", 0xfffffff8, 0x5}, 0x3c)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x80, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x201}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x80}, 0x1, 0x0, 0x0, 0x94}, 0x20044808)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001780)={'syztnl2\x00', &(0x7f0000001640)={'gretap0\x00', 0x0, 0x700, 0x7, 0x3, 0xd0, {{0x3e, 0x4, 0x0, 0x3, 0xf8, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0x32, [@rand_addr=0x64010100, @local, @empty, @empty]}, @cipso={0x86, 0x5a, 0x3, [{0x6, 0xa, "40f914efb5bf596b"}, {0x5, 0x8, "6d1168589637"}, {0x0, 0x8, "df008a1a723e"}, {0x7, 0xe, "1d9371929d15bf568ca87995"}, {0x0, 0x12, "72fbab4374b61035d6a32281416d94d3"}, {0x1, 0x7, "bd789e297c"}, {0x7, 0xc, "bb1a6a4684fccf2aa90a"}, {0x6, 0x7, "d44626aae5"}]}, @cipso={0x86, 0x4b, 0x3, [{0x0, 0x3, "d5"}, {0x3, 0x9, "5fc65764664c31"}, {0x0, 0xa, "d414c44be9be61ec"}, {0x1, 0xa, "bf71f49934af9b3e"}, {0x7, 0x10, "9952c533958ba6826dae2b5616e7"}, {0x2, 0x3, "b2"}, {0x6, 0x12, "ac8998c08f9c3e468a4a9eb4d8491533"}]}, @timestamp_prespec={0x44, 0x2c, 0x2a, 0x3, 0x1, [{@loopback, 0xfffffe01}, {@multicast1, 0x6}, {@loopback, 0x1d75}, {@private=0xa010102, 0x6}, {@loopback, 0x1}]}]}}}}})
socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00'}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001840)={'wg0\x00', <r8=>0x0})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x11, 0xffffff90, 0x9, 0x8, 0x88, r7, 0x8, '\x00', r8, r9, 0x2, 0x1, 0x1}, 0x50)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000001940)=0x1, 0x4)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000001980)=@gcm_128={{0x304}, "9b14c6b197cff1c6", "c7c00e53a80dbb626ac5c739d68b0912", "b14e304a", "9badbe6a4b70e139"}, 0x28)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r7)
sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r12, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x84)
getsockopt(r4, 0x7, 0x4, &(0x7f0000001b00)=""/14, &(0x7f0000001b40)=0xe)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001c00)={'gre0\x00', &(0x7f0000001b80)={'ip_vti0\x00', r8, 0x20, 0x700, 0x7ff, 0x7b, {{0xb, 0x4, 0x2, 0x28, 0x2c, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x2b, 0x0, 0x7, [0x4]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "d1eadcb03332"}]}]}}}}})
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)

162.082704ms ago: executing program 2 (id=1881):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
bind$inet(r2, &(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@RTM_GETMDB={0x18, 0x56, 0x300, 0x70bd27, 0x25dfdbff, {0x7, r3}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8002)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x128, 0x24, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10, 0x5}, {0xd, 0x8}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x8, 0x1, 0x0, 0x5, 0xf, 0x2}}, {0x8, 0x2, [0x5, 0x10]}}, {{0x1c, 0x1, {0x8, 0x3, 0x6, 0x9, 0x0, 0x6, 0x3, 0x6}}, {0x10, 0x2, [0x0, 0xb98a, 0x9, 0x2, 0x93d9, 0x7f]}}, {{0x1c, 0x1, {0x8, 0x3, 0xe0, 0x5, 0x1, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0x93, 0x2, 0x73]}}, {{0x1c, 0x1, {0x10, 0x4, 0x1, 0x7b29df91, 0x2, 0x80000000, 0x2, 0x1}}, {0x6, 0x2, [0xf6aa]}}, {{0x1c, 0x1, {0xe, 0x81, 0x3ff, 0x1ff, 0x1, 0x200, 0x7, 0x6}}, {0x10, 0x2, [0x6, 0x9, 0x7ff, 0x0, 0x5, 0x1]}}, {{0x1c, 0x1, {0x7d, 0x5, 0x5, 0xffffff88, 0x2, 0x4, 0x9, 0x8}}, {0x14, 0x2, [0xfff, 0x0, 0x1e00, 0x8001, 0x6, 0xcf00, 0x6, 0x1bf]}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, &(0x7f0000000300))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="383476e16dfc3c7b6388f848560cd2b37a5aa4174a0e93f48d97bf635715bc7f2b479c6a22506131bab6", 0x2a}, {&(0x7f0000000640)="fa51369804df39b7002137c2b1e6a843116b94da917d3cd6de60352052e5715fa961f84505e0209502289b34c8775be3e0fd97ef25b72afb9dc186b485094bcd1a6c26e21139835d018838141285240495c1bcc040f963dedf568869864bf725aab2baa11fe8093b77c1fa41b3e1dc90b2a1dfce930141752d6d97d568bab02a6a16dae07edee9bf66c1dae30248a7bc63a9b954443f9d7f", 0x98}, {&(0x7f0000000700)="eadb5166e3c9fab6e912fb772055ba53a2823deaaca6a64339c716dd003e204983583870825123e76b47028533c8f0ba53e3da52e0db80276566459265b8a56741a076c1c3e2d6ba37ef36b6cefbc02b347142cf4c2dbb14bedf8c0998c39c58afba7db243a87c87241b50d40b6f8bd726637378629d43172ccfdf117a9fa649f248792fdd4b7c44a9420435c1ee74cb53ca4a09a6a4e0fb7c956d5e4ec5740cc8ed44da453cfeac54dffff2aa2bed5daea16bb4f9322382ffcc61370316a3363934ef2fde", 0xc5}, {&(0x7f0000000480)="ed5be815d4dfb02a6b910f76778263d14f1e4b5a5962c087cdd83538612f5b33a8980b9ae505dbc8b9d4feca58e06c0c2e5a7967915ea8e22c75ede5cb6afaff0adfb9eb9c5a4ca1331dee10ec0692a52f3822a136ed523516948624e51c2316194a876d7ee7ec7a0f7ed09ff6f0c2c0727642e78868eb5931", 0x79}], 0x4)

93.824004ms ago: executing program 0 (id=1882):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

0s ago: executing program 0 (id=1883):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000200)={[0x7]}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

kernel console output (not intermixed with test programs):

ond0
[  126.701477][ T8411] pimreg: left allmulticast mode
[  126.848925][ T8120] 8021q: adding VLAN 0 to HW filter on device team0
[  126.913236][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  126.930830][ T8422] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  126.951935][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.959125][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.982987][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.990213][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.070432][ T8430] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[  127.078305][ T8430] __nla_validate_parse: 9 callbacks suppressed
[  127.078318][ T8430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.682'.
[  127.124808][ T8430] nbd: illegal input index 1048576
[  127.430533][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.515966][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  127.620149][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.643897][ T8462] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  127.658997][ T7176] IPVS: starting estimator thread 0...
[  127.689777][   T51] Bluetooth: hci2: command tx timeout
[  127.698657][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  127.720600][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.746950][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  127.765916][ T8468] IPVS: using max 31 ests per chain, 74400 per kthread
[  127.801450][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.813069][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  127.826454][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.909821][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  127.948355][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  127.969842][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.000940][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  128.026578][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.053646][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'.
[  128.069139][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  128.102621][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.153491][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  128.179491][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.196332][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.209117][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  128.228274][ T8456] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.416831][ T8510] netlink: 'syz.0.697': attribute type 3 has an invalid length.
[  128.422085][ T8508] netlink: 'syz.1.699': attribute type 11 has an invalid length.
[  128.453946][ T8508] netlink: 'syz.1.699': attribute type 11 has an invalid length.
[  128.474133][ T8508] netlink: 224 bytes leftover after parsing attributes in process `syz.1.699'.
[  128.557733][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'.
[  128.582443][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.701'.
[  128.622958][ T8516] sctp: [Deprecated]: syz.1.702 (pid 8516) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.622958][ T8516] Use struct sctp_sack_info instead
[  128.860688][ T8120] veth0_vlan: entered promiscuous mode
[  128.878338][ T8120] veth1_vlan: entered promiscuous mode
[  128.942140][ T8120] veth0_macvtap: entered promiscuous mode
[  128.995296][ T8120] veth1_macvtap: entered promiscuous mode
[  129.077974][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.136486][ T8536] netlink: 288 bytes leftover after parsing attributes in process `syz.2.707'.
[  129.153664][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.184897][ T8120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.237717][ T8120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.260161][ T8120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.268916][ T8120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.549860][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.581024][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.649423][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.669908][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.770306][   T51] Bluetooth: hci2: command tx timeout
[  129.937781][ T8581] team0: Device vti0 is of different type
[  130.167903][ T8591] team0: Device vti0 is up. Set it down before adding it as a team port
[  130.188079][ T8592] x_tables: duplicate underflow at hook 3
[  130.205590][ T8597] netlink: 'syz.1.724': attribute type 1 has an invalid length.
[  130.434923][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.576433][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.881705][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.986112][ T8626] syzkaller1: entered promiscuous mode
[  131.002854][ T8626] syzkaller1: entered allmulticast mode
[  131.083318][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.213240][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.234181][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.247824][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.257042][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.272191][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.510861][ T8620] netlink: 181048 bytes leftover after parsing attributes in process `syz.3.729'.
[  131.629425][ T8658] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  131.746382][   T12] bridge_slave_1: left allmulticast mode
[  131.752670][   T12] bridge_slave_1: left promiscuous mode
[  131.761690][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.791389][   T12] bridge_slave_0: left allmulticast mode
[  131.798040][   T12] bridge_slave_0: left promiscuous mode
[  131.808497][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.178802][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.190030][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.203122][   T12] bond0 (unregistering): Released all slaves
[  132.218627][ T8662] veth0: entered promiscuous mode
[  132.343738][ T8660] veth0: left promiscuous mode
[  132.602887][ T8637] chnl_net:caif_netlink_parms(): no params data found
[  132.730843][ T8695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.759960][ T8695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.798784][ T8695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.844381][ T8695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.884602][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.894590][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.896673][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.903998][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.916987][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.919350][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.746'.
[  132.990322][ T8713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'.
[  133.029436][ T8713] netlink: 'syz.2.750': attribute type 10 has an invalid length.
[  133.129244][   T12] hsr_slave_0: left promiscuous mode
[  133.141304][   T12] hsr_slave_1: left promiscuous mode
[  133.160622][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.178351][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.201306][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.219877][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.272885][   T12] veth1_macvtap: left promiscuous mode
[  133.278872][   T12] veth0_macvtap: left promiscuous mode
[  133.284943][   T12] veth1_vlan: left promiscuous mode
[  133.292982][   T51] Bluetooth: hci2: command tx timeout
[  133.299918][   T12] veth0_vlan: left promiscuous mode
[  133.799836][   T12] team0 (unregistering): Port device team_slave_1 removed
[  133.839352][   T12] team0 (unregistering): Port device team_slave_0 removed
[  134.310298][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.325104][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.345985][ T8637] bridge_slave_0: entered allmulticast mode
[  134.376048][ T8637] bridge_slave_0: entered promiscuous mode
[  134.379031][ T8739] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  134.396149][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.436906][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.446319][ T8743] netlink: 'syz.2.755': attribute type 142 has an invalid length.
[  134.457184][ T8637] bridge_slave_1: entered allmulticast mode
[  134.476468][ T8637] bridge_slave_1: entered promiscuous mode
[  134.643129][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.671642][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.872618][ T8637] team0: Port device team_slave_0 added
[  134.892961][ T8637] team0: Port device team_slave_1 added
[  135.027354][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.045276][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.076437][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.099744][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.106921][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.146228][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.214832][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.373964][   T51] Bluetooth: hci2: command tx timeout
[  135.652175][ T8637] hsr_slave_0: entered promiscuous mode
[  135.674675][ T8637] hsr_slave_1: entered promiscuous mode
[  136.271411][ T8827] ipt_ECN: cannot use operation on non-tcp rule
[  136.553979][ T8843] netlink: 'syz.3.784': attribute type 2 has an invalid length.
[  136.984496][ T8867] netlink: 'syz.3.791': attribute type 1 has an invalid length.
[  137.450047][   T51] Bluetooth: hci2: command tx timeout
[  137.684264][ T8637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.751588][ T8637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.857921][ T8637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.918576][ T8637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.930346][ T2128] wlan1: Trigger new scan to find an IBSS to join
[  138.002725][ T8922] netlink: 'syz.3.802': attribute type 1 has an invalid length.
[  138.042943][ T8922] __nla_validate_parse: 8 callbacks suppressed
[  138.043018][ T8922] netlink: 224 bytes leftover after parsing attributes in process `syz.3.802'.
[  138.423332][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.469459][ T8943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'.
[  138.493985][ T8948] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  138.508646][ T8637] 8021q: adding VLAN 0 to HW filter on device team0
[  138.562588][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'.
[  138.597800][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'.
[  138.613178][ T8948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  138.655764][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.663033][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.713193][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.720492][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.340601][ T8983] nftables ruleset with unbound set
[  139.396664][ T8985] netlink: 71 bytes leftover after parsing attributes in process `syz.3.815'.
[  139.533457][   T51] Bluetooth: hci2: command tx timeout
[  139.567632][ T8999] netlink: 168 bytes leftover after parsing attributes in process `syz.3.820'.
[  139.621558][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'.
[  139.646834][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[  139.674078][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.691233][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[  140.099431][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  140.126423][ T9024] gtp0: entered promiscuous mode
[  140.158081][ T9027] can: request_module (can-proto-0) failed.
[  140.170933][ T9024] gtp0: entered allmulticast mode
[  140.656932][ T8637] veth0_vlan: entered promiscuous mode
[  140.714532][ T8637] veth1_vlan: entered promiscuous mode
[  140.912265][ T8637] veth0_macvtap: entered promiscuous mode
[  140.949344][ T9078] netlink: 'syz.3.839': attribute type 1 has an invalid length.
[  140.962893][ T8637] veth1_macvtap: entered promiscuous mode
[  140.971334][   T49] wlan1: Trigger new scan to find an IBSS to join
[  140.989784][ T9078] netlink: 'syz.3.839': attribute type 1 has an invalid length.
[  140.997473][ T9078] netlink: 'syz.3.839': attribute type 1 has an invalid length.
[  141.052232][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.138214][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.209178][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.242653][ T8637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.279865][ T8637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.301094][ T8637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.324169][ T8637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.574112][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.610422][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.749752][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.762888][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.891840][ T2947] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  142.314531][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.496269][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.612051][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.796044][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.959291][ T9157] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  142.988746][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.521348][   T49] bridge_slave_1: left allmulticast mode
[  143.542371][   T49] bridge_slave_1: left promiscuous mode
[  143.580094][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.640759][   T49] bridge_slave_0: left allmulticast mode
[  143.646457][   T49] bridge_slave_0: left promiscuous mode
[  143.665369][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.697605][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.706716][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.715871][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.738682][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.750534][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.794141][ T9194] __nla_validate_parse: 4 callbacks suppressed
[  143.794158][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  143.895449][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  143.930639][ T3010] wlan1: Trigger new scan to find an IBSS to join
[  144.047672][ T9205] ieee802154 phy1 wpan1: encryption failed: -22
[  144.064494][ T9206] ieee802154 phy1 wpan1: encryption failed: -22
[  144.326573][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'.
[  144.338149][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'.
[  144.419232][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.436409][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.446582][   T49] bond0 (unregistering): Released all slaves
[  144.461041][ T9185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.858'.
[  144.504314][ T9211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.746280][ T9224] netlink: 'syz.3.866': attribute type 39 has an invalid length.
[  144.893620][ T3010] wlan1: Creating new IBSS network, BSSID 1e:da:f2:6a:ec:3f
[  145.093434][ T9234] pimreg: entered allmulticast mode
[  145.098953][ T9237] pimreg: left allmulticast mode
[  145.376577][ T9252] xt_hashlimit: size too large, truncated to 1048576
[  145.394559][   T49] hsr_slave_0: left promiscuous mode
[  145.431924][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'.
[  145.449198][   T49] hsr_slave_1: left promiscuous mode
[  145.469212][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.502131][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.514691][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.526608][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.565649][   T49] veth1_macvtap: left promiscuous mode
[  145.571503][   T49] veth0_macvtap: left promiscuous mode
[  145.577360][   T49] veth1_vlan: left promiscuous mode
[  145.583842][   T49] veth0_vlan: left promiscuous mode
[  145.849853][   T51] Bluetooth: hci2: command tx timeout
[  146.118960][   T49] team0 (unregistering): Port device team_slave_1 removed
[  146.156314][   T49] team0 (unregistering): Port device team_slave_0 removed
[  146.333957][   T55] block nbd0: Possible stuck request ffff888025c37000: control (read@0,1024B). Runtime 30 seconds
[  146.345174][   T55] block nbd0: Possible stuck request ffff888025c371c0: control (read@1024,1024B). Runtime 30 seconds
[  146.356606][   T55] block nbd0: Possible stuck request ffff888025c37380: control (read@2048,1024B). Runtime 30 seconds
[  146.373741][   T55] block nbd0: Possible stuck request ffff888025c37540: control (read@3072,1024B). Runtime 30 seconds
[  146.580895][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'.
[  146.827010][ T9187] chnl_net:caif_netlink_parms(): no params data found
[  146.914729][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'.
[  147.165460][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'.
[  147.598566][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.618642][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.641088][ T9187] bridge_slave_0: entered allmulticast mode
[  147.657073][ T9187] bridge_slave_0: entered promiscuous mode
[  147.686123][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.704882][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.725345][ T9187] bridge_slave_1: entered allmulticast mode
[  147.756679][ T9187] bridge_slave_1: entered promiscuous mode
[  147.919000][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.887'.
[  147.934024][   T51] Bluetooth: hci2: command tx timeout
[  147.978122][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.999989][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.109800][ T9369] netlink: 'syz.3.889': attribute type 29 has an invalid length.
[  148.123056][ T9371] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  148.271985][ T9377] Unsupported ieee802154 address type: 0
[  148.444362][ T9364] gre1: entered promiscuous mode
[  148.469791][ T9364] gre1: entered allmulticast mode
[  148.626563][ T9187] team0: Port device team_slave_0 added
[  148.636836][ T9187] team0: Port device team_slave_1 added
[  148.849765][ T9398] __nla_validate_parse: 1 callbacks suppressed
[  148.849784][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'.
[  148.877175][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.903555][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.933298][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  148.946499][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.016764][ T9403] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  149.045627][ T9403] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  149.068893][ T9403] gretap3: entered promiscuous mode
[  149.093746][ T9403] gretap3: entered allmulticast mode
[  149.105325][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.114596][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.147337][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.247205][ T9424] netlink: 'syz.2.904': attribute type 10 has an invalid length.
[  149.347270][ T9424] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  150.009899][   T51] Bluetooth: hci2: command tx timeout
[  150.705739][ T9430] vlan0: entered allmulticast mode
[  150.711110][ T9430] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  150.718944][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'.
[  150.744121][ T9187] hsr_slave_0: entered promiscuous mode
[  150.770941][ T9187] hsr_slave_1: entered promiscuous mode
[  151.093423][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'.
[  151.106349][ T9465] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  151.153676][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.912'.
[  151.238192][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  151.506544][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  151.576048][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  151.620853][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  151.658371][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'.
[  152.092802][   T51] Bluetooth: hci2: command tx timeout
[  152.182988][ T9519] netlink: 'syz.3.926': attribute type 4 has an invalid length.
[  152.277153][ T9521] netlink: 'syz.3.926': attribute type 4 has an invalid length.
[  152.334666][ T9187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  152.384449][ T9187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  152.447650][ T9187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  152.478325][ T9187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  153.037195][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.136454][ T9187] 8021q: adding VLAN 0 to HW filter on device team0
[  153.169529][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.176863][ T9329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.233440][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.240676][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.331867][ T9573] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  153.645201][ T9589] sctp: [Deprecated]: syz.3.942 (pid 9589) Use of int in maxseg socket option.
[  153.645201][ T9589] Use struct sctp_assoc_value instead
[  153.878925][ T9603] IPVS: stopping master sync thread 9606 ...
[  153.886138][ T9606] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  153.954867][ T9603] bridge: RTM_NEWNEIGH with invalid ether address
[  154.238357][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.313717][ T9595] __nla_validate_parse: 35 callbacks suppressed
[  154.313736][ T9595] netlink: 104 bytes leftover after parsing attributes in process `syz.0.945'.
[  154.644389][ T9636] netlink: 'syz.1.953': attribute type 1 has an invalid length.
[  154.677947][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.893364][ T9649] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.983594][ T9641] netlink: 'syz.0.954': attribute type 5 has an invalid length.
[  155.066189][ T9651] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.955'.
[  155.295074][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.961'.
[  155.361364][ T9651] veth9: entered allmulticast mode
[  155.535721][ T9187] veth0_vlan: entered promiscuous mode
[  155.575457][ T9187] veth1_vlan: entered promiscuous mode
[  155.641700][ T9187] veth0_macvtap: entered promiscuous mode
[  155.654849][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'.
[  155.686303][ T9187] veth1_macvtap: entered promiscuous mode
[  155.756386][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.808139][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.842111][ T9187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.851417][ T9187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.865046][ T9187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.874529][ T9187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.904280][ T9690] netlink: 'syz.2.965': attribute type 11 has an invalid length.
[  155.915879][ T9690] netlink: 224 bytes leftover after parsing attributes in process `syz.2.965'.
[  156.052201][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.085320][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.184166][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.207581][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.408590][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'.
[  156.436132][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  156.530341][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  156.661980][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  156.768657][ T9310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.822445][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  157.036898][ T9310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.183574][ T9310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.274178][ T9718] infiniband syz2: set active
[  157.279101][ T9718] infiniband syz2: added vxcan1
[  157.286554][ T5903] vxcan1 speed is unknown, defaulting to 1000
[  157.297513][ T9718] syz2: rxe_create_cq: returned err = -12
[  157.310224][ T9718] infiniband syz2: Couldn't create ib_mad CQ
[  157.317103][ T9718] infiniband syz2: Couldn't open port 1
[  157.375956][ T9718] RDS/IB: syz2: added
[  157.392349][ T9718] smc: adding ib device syz2 with port count 1
[  157.398789][ T9718] smc:    ib device syz2 port 1 has pnetid 
[  157.413182][   T43] vxcan1 speed is unknown, defaulting to 1000
[  157.444864][ T9310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.470983][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  157.830148][ T9310] bridge_slave_1: left allmulticast mode
[  157.854231][ T9310] bridge_slave_1: left promiscuous mode
[  157.876375][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.968355][ T9310] bridge_slave_0: left allmulticast mode
[  157.988891][ T9310] bridge_slave_0: left promiscuous mode
[  158.022404][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.031581][ T9312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  158.104391][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[  158.236834][ T9774] netlink: 9 bytes leftover after parsing attributes in process `syz.0.982'.
[  158.288750][ T9776] netlink: 5 bytes leftover after parsing attributes in process `syz.0.982'.
[  158.312050][ T9777] Cannot find del_set index 5 as target
[  158.549392][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.565334][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.581445][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.593135][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.606836][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.765784][ T9310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.776659][ T9310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.790489][ T9310] bond0 (unregistering): Released all slaves
[  158.808948][ T9774] gretap0: entered promiscuous mode
[  158.816288][ T9776] 0ªX¹¦D: renamed from gretap0
[  158.824293][ T9776] 0ªX¹¦D: left promiscuous mode
[  158.829391][ T9776] 0ªX¹¦D: entered allmulticast mode
[  158.858612][ T9776] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  158.881054][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  159.245341][ T9802] netlink: 'syz.2.990': attribute type 11 has an invalid length.
[  159.392422][ T9787] vxcan1 speed is unknown, defaulting to 1000
[  159.441549][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  159.545375][ T9814] netlink: 'syz.0.992': attribute type 29 has an invalid length.
[  159.563711][ T9814] netlink: 'syz.0.992': attribute type 29 has an invalid length.
[  159.578329][ T9814] netlink: 500 bytes leftover after parsing attributes in process `syz.0.992'.
[  159.596210][ T9814] unsupported nla_type 58
[  159.776655][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  160.105875][ T9835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.996'.
[  160.314733][ T9787] chnl_net:caif_netlink_parms(): no params data found
[  160.525264][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'.
[  160.545227][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'.
[  160.558123][ T9853] netlink: 'syz.1.999': attribute type 5 has an invalid length.
[  160.588581][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  160.650776][   T51] Bluetooth: hci2: command tx timeout
[  160.705443][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.716456][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.724761][ T9787] bridge_slave_0: entered allmulticast mode
[  160.733376][ T9787] bridge_slave_0: entered promiscuous mode
[  160.744756][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.752464][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.760364][ T9787] bridge_slave_1: entered allmulticast mode
[  160.771891][ T9787] bridge_slave_1: entered promiscuous mode
[  160.905890][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.942295][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.043902][ T9870] netlink: 'syz.2.1005': attribute type 4 has an invalid length.
[  161.056194][ T9787] team0: Port device team_slave_0 added
[  161.093602][ T9787] team0: Port device team_slave_1 added
[  161.098289][ T9873] netlink: 'syz.2.1005': attribute type 29 has an invalid length.
[  161.134931][ T9870] netlink: 'syz.2.1005': attribute type 4 has an invalid length.
[  161.281754][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.288745][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.338129][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.366563][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.379607][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.456488][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.502416][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  161.705766][ T9787] hsr_slave_0: entered promiscuous mode
[  161.760895][ T9787] hsr_slave_1: entered promiscuous mode
[  161.767317][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.814998][ T9787] Cannot create hsr debugfs directory
[  161.884912][ T9909] netlink: 'syz.1.1014': attribute type 29 has an invalid length.
[  161.900987][ T9909] netlink: 'syz.1.1014': attribute type 29 has an invalid length.
[  162.084121][ T9911] sctp: [Deprecated]: syz.1.1015 (pid 9911) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.084121][ T9911] Use struct sctp_sack_info instead
[  162.123290][ T9911] sctp: [Deprecated]: syz.1.1015 (pid 9911) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.123290][ T9911] Use struct sctp_sack_info instead
[  162.143794][ T9718] vxcan1 speed is unknown, defaulting to 1000
[  162.177483][ T9911] sctp: [Deprecated]: syz.1.1015 (pid 9911) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.177483][ T9911] Use struct sctp_sack_info instead
[  162.237375][ T9919] xt_CT: No such helper "snmp"
[  162.388310][ T9926] netlink: 'syz.2.1018': attribute type 1 has an invalid length.
[  162.730365][   T51] Bluetooth: hci2: command tx timeout
[  162.951680][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'.
[  162.984551][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'.
[  163.084181][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[  163.374148][ T9787] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.443439][ T9310] hsr_slave_0: left promiscuous mode
[  163.453340][ T9310] hsr_slave_1: left promiscuous mode
[  163.459421][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.467906][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.478451][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.487515][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.511292][ T9310] veth1_macvtap: left promiscuous mode
[  163.516843][ T9310] veth0_macvtap: left promiscuous mode
[  163.523486][ T9310] veth1_vlan: left promiscuous mode
[  163.529174][ T9310] veth0_vlan: left promiscuous mode
[  163.592901][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'.
[  164.121494][ T9310] team0 (unregistering): Port device team_slave_1 removed
[  164.161075][ T9310] team0 (unregistering): Port device team_slave_0 removed
[  164.481693][ T9987] sock: sock_timestamping_bind_phc: sock not bind to device
[  164.564130][ T9787] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  164.581626][ T9787] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.602833][ T9973] tipc: Started in network mode
[  164.608430][ T9973] tipc: Node identity 4ece8a31f5af, cluster identity 4711
[  164.626832][ T9973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.649294][ T9974] tipc: Disabling bearer <eth:syzkaller0>
[  164.665957][ T9979] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  164.676433][ T9979] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  164.692266][ T9787] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.810078][   T51] Bluetooth: hci2: command tx timeout
[  165.084158][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.145390][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'.
[  165.165425][ T9787] 8021q: adding VLAN 0 to HW filter on device team0
[  165.231022][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.238242][ T9317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.262003][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.269298][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.568277][T10039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1045'.
[  165.693552][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'.
[  165.714281][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'.
[  165.731834][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.871473][T10051] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  165.886378][T10051] netlink: 'syz.1.1049': attribute type 3 has an invalid length.
[  165.901914][T10051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1049'.
[  165.929039][T10051] NCSI netlink: No device for ifindex 0
[  165.972812][T10057] netlink: 'syz.0.1051': attribute type 10 has an invalid length.
[  166.000038][T10057] veth0_vlan: entered allmulticast mode
[  166.010230][T10057] veth0_vlan: left promiscuous mode
[  166.017672][T10057] veth0_vlan: entered promiscuous mode
[  166.036281][T10057] team0: Device veth0_vlan failed to register rx_handler
[  166.137722][T10064] vxcan1 speed is unknown, defaulting to 1000
[  166.217463][T10072] netlink: 'syz.3.1054': attribute type 10 has an invalid length.
[  166.265446][T10072] team0: Port device hsr0 added
[  166.386987][T10074] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1055'.
[  166.407404][ T9787] veth0_vlan: entered promiscuous mode
[  166.477684][ T9787] veth1_vlan: entered promiscuous mode
[  166.535699][T10076] netlink: 'syz.3.1056': attribute type 62 has an invalid length.
[  166.566750][ T9787] veth0_macvtap: entered promiscuous mode
[  166.598868][ T9787] veth1_macvtap: entered promiscuous mode
[  166.646832][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.680458][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.704302][ T9787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.728681][ T9787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.763451][ T9787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.773237][ T9787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.801145][T10085] openvswitch: netlink: Flow actions attr not present in new flow.
[  166.841885][T10057] sctp: [Deprecated]: syz.0.1051 (pid 10057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.841885][T10057] Use struct sctp_sack_info instead
[  166.892652][   T51] Bluetooth: hci2: command tx timeout
[  166.914669][T10057] sctp: [Deprecated]: syz.0.1051 (pid 10057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.914669][T10057] Use struct sctp_sack_info instead
[  167.030526][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.058967][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.272605][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.295976][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.374679][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'.
[  167.435257][T10113] sock: sock_timestamping_bind_phc: sock not bind to device
[  167.916335][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1068'.
[  167.998081][T10135] vxcan1 speed is unknown, defaulting to 1000
[  168.119931][T10138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1070'.
[  168.129251][T10138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1070'.
[  168.249175][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.436091][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.527523][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.674670][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.828825][   T13] bridge_slave_1: left allmulticast mode
[  168.835012][   T13] bridge_slave_1: left promiscuous mode
[  168.840907][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.853080][   T13] bridge_slave_0: left allmulticast mode
[  168.858820][   T13] bridge_slave_0: left promiscuous mode
[  168.864634][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.030868][T10149] netlink: 'syz.1.1072': attribute type 2 has an invalid length.
[  169.052212][T10153] netlink: 'syz.1.1072': attribute type 2 has an invalid length.
[  169.563901][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.574931][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.582739][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.593636][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.602702][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.611813][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.614452][   T13] bond0 (unregistering): Released all slaves
[  169.626277][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.793045][T10171] vxcan1 speed is unknown, defaulting to 1000
[  170.689985][T10222] __nla_validate_parse: 2 callbacks suppressed
[  170.690004][T10222] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1085'.
[  170.912149][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'.
[  171.045189][   T13] hsr_slave_0: left promiscuous mode
[  171.065369][   T13] hsr_slave_1: left promiscuous mode
[  171.083445][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.114345][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.133860][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.145492][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.207249][   T13] veth1_macvtap: left promiscuous mode
[  171.214172][   T13] veth0_macvtap: left promiscuous mode
[  171.219907][   T13] veth1_vlan: left promiscuous mode
[  171.225376][   T13] veth0_vlan: left promiscuous mode
[  171.677979][   T13] team0 (unregistering): Port device team_slave_1 removed
[  171.721028][   T13] team0 (unregistering): Port device team_slave_0 removed
[  171.769966][ T5859] Bluetooth: hci2: command tx timeout
[  172.095988][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'.
[  172.100093][T10235] vxcan1 speed is unknown, defaulting to 1000
[  172.268026][T10267] syzkaller1: entered promiscuous mode
[  172.280695][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'.
[  172.310206][T10267] syzkaller1: entered allmulticast mode
[  172.354140][T10264] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1098'.
[  172.393481][T10264] netlink: 'syz.3.1098': attribute type 5 has an invalid length.
[  172.466137][T10171] chnl_net:caif_netlink_parms(): no params data found
[  172.693015][T10282] netlink: 'syz.3.1104': attribute type 25 has an invalid length.
[  172.867159][T10171] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.882269][T10171] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.889540][T10171] bridge_slave_0: entered allmulticast mode
[  172.903064][T10171] bridge_slave_0: entered promiscuous mode
[  172.918904][T10293] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  172.924511][T10296] sctp: [Deprecated]: syz.3.1108 (pid 10296) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.924511][T10296] Use struct sctp_sack_info instead
[  172.946669][T10171] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.971146][T10171] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.978553][T10171] bridge_slave_1: entered allmulticast mode
[  173.076386][T10171] bridge_slave_1: entered promiscuous mode
[  173.135721][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[  173.302874][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.323141][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.403983][T10313] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1115'.
[  173.534945][T10171] team0: Port device team_slave_0 added
[  173.565902][T10171] team0: Port device team_slave_1 added
[  173.605835][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1121'.
[  173.618744][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1119'.
[  173.659243][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1121'.
[  173.695931][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.703758][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.733453][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.753716][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.774675][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.804740][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.855392][ T5859] Bluetooth: hci2: command tx timeout
[  174.178763][T10171] hsr_slave_0: entered promiscuous mode
[  174.187540][T10171] hsr_slave_1: entered promiscuous mode
[  174.223799][T10342] syzkaller1: entered promiscuous mode
[  174.229468][T10342] syzkaller1: entered allmulticast mode
[  174.548428][T10368] netlink: 'syz.1.1132': attribute type 11 has an invalid length.
[  174.555553][T10367] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  174.605099][T10370] openvswitch: netlink: Actions may not be safe on all matching packets
[  174.735780][T10372] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  174.735820][ T7197] IPVS: starting estimator thread 0...
[  174.820176][T10377] xt_CT: No such helper "snmp"
[  174.873992][T10381] IPVS: using max 34 ests per chain, 81600 per kthread
[  175.175827][T10171] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  175.192491][T10171] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  175.218922][T10171] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  175.232758][T10171] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  175.284723][T10406] syzkaller0: entered promiscuous mode
[  175.313401][T10406] syzkaller0: entered allmulticast mode
[  175.935602][ T5859] Bluetooth: hci2: command tx timeout
[  176.411557][   T55] block nbd0: Possible stuck request ffff888025c37000: control (read@0,1024B). Runtime 60 seconds
[  176.422363][   T55] block nbd0: Possible stuck request ffff888025c371c0: control (read@1024,1024B). Runtime 60 seconds
[  176.433339][   T55] block nbd0: Possible stuck request ffff888025c37380: control (read@2048,1024B). Runtime 60 seconds
[  176.445053][   T55] block nbd0: Possible stuck request ffff888025c37540: control (read@3072,1024B). Runtime 60 seconds
[  176.883856][T10443] __nla_validate_parse: 4 callbacks suppressed
[  176.883874][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'.
[  176.901631][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'.
[  176.938620][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'.
[  176.959321][T10446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1154'.
[  177.035000][T10171] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.088045][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'.
[  177.100735][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'.
[  177.118566][T10171] 8021q: adding VLAN 0 to HW filter on device team0
[  177.158367][T10458] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1159'.
[  177.167711][T10458] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1159'.
[  177.222366][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.229574][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.277624][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.284885][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.383539][T10479] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  177.509434][T10478] bond2: (slave bridge3): making interface the new active one
[  177.518332][T10478] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  177.833797][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'.
[  178.011607][ T5859] Bluetooth: hci2: command tx timeout
[  178.156252][T10171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.226681][T10527] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1176'.
[  178.489575][T10499] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  178.645193][T10554] netlink: zone id is out of range
[  178.650874][T10554] netlink: zone id is out of range
[  178.779472][T10171] veth0_vlan: entered promiscuous mode
[  178.793428][   T30] audit: type=1800 audit(1751858905.264:3): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1186" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1281 res=0 errno=0
[  178.837906][T10171] veth1_vlan: entered promiscuous mode
[  179.048567][T10568] syzkaller0: entered promiscuous mode
[  179.056490][T10568] syzkaller0: entered allmulticast mode
[  179.073366][T10171] veth0_macvtap: entered promiscuous mode
[  179.091432][T10171] veth1_macvtap: entered promiscuous mode
[  180.090398][ T5859] Bluetooth: hci2: command 0x0401 tx timeout
[  180.542633][T10171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.576275][T10171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.603653][T10171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.627561][T10171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.636437][T10171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.670202][T10171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.908714][T10616] pim6reg: entered allmulticast mode
[  180.933620][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.945591][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.975800][T10616] pim6reg: left allmulticast mode
[  181.090710][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.108468][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.486227][T10644] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  181.766434][T10672] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  181.815581][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.835602][T10675] netlink: 'syz.3.1221': attribute type 18 has an invalid length.
[  181.973924][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.082803][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.147213][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.225723][   T49] bridge_slave_1: left allmulticast mode
[  182.231603][   T49] bridge_slave_1: left promiscuous mode
[  182.237312][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.247727][   T49] bridge_slave_0: left allmulticast mode
[  182.254045][   T49] bridge_slave_0: left promiscuous mode
[  182.259936][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.545260][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.556586][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.566830][   T49] bond0 (unregistering): Released all slaves
[  182.754962][T10683] netlink: 'syz.3.1226': attribute type 1 has an invalid length.
[  182.779536][T10686] xt_SECMARK: invalid mode: 0
[  182.824512][T10683] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.938406][T10692] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.976323][T10692] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  183.000664][T10692] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  183.086740][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.097771][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.120194][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.132078][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.141388][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.267890][T10705] tls_set_device_offload: netdev not found
[  183.297563][T10698] vxcan1 speed is unknown, defaulting to 1000
[  183.356228][T10709] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  183.365158][T10710] __nla_validate_parse: 7 callbacks suppressed
[  183.365180][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'.
[  183.575156][T10723] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  183.649718][T10723] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1237'.
[  184.258361][   T49] hsr_slave_0: left promiscuous mode
[  184.278024][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  184.295683][   T49] hsr_slave_1: left promiscuous mode
[  184.313297][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.335878][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.386997][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.409435][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.482130][   T49] veth1_macvtap: left promiscuous mode
[  184.487804][   T49] veth0_macvtap: left promiscuous mode
[  184.494119][   T49] veth1_vlan: left promiscuous mode
[  184.499551][   T49] veth0_vlan: left promiscuous mode
[  184.752059][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'.
[  184.823706][T10797] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  184.979325][   T49] team0 (unregistering): Port device team_slave_1 removed
[  185.022360][   T49] team0 (unregistering): Port device team_slave_0 removed
[  185.214856][ T5859] Bluetooth: hci2: command tx timeout
[  185.398005][T10772] bridge_slave_1: left allmulticast mode
[  185.405821][T10772] bridge_slave_1: left promiscuous mode
[  185.412702][T10772] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.425839][T10772] bridge_slave_0: left allmulticast mode
[  185.431874][T10772] bridge_slave_0: left promiscuous mode
[  185.438429][T10772] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.710884][T10810] xt_hashlimit: invalid interval
[  185.719965][T10698] chnl_net:caif_netlink_parms(): no params data found
[  185.918703][T10821] netlink: 'syz.0.1264': attribute type 10 has an invalid length.
[  185.928088][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  185.970844][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'.
[  185.980993][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'.
[  186.093857][T10830] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  186.198620][T10698] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.217194][T10839] openvswitch: netlink: IP tunnel TTL not specified.
[  186.224462][T10698] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.238460][T10698] bridge_slave_0: entered allmulticast mode
[  186.263079][T10698] bridge_slave_0: entered promiscuous mode
[  186.285395][T10844] netlink: 'syz.2.1271': attribute type 1 has an invalid length.
[  186.321547][T10698] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.336150][T10698] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.345414][T10848] netlink: 'syz.3.1273': attribute type 1 has an invalid length.
[  186.356412][T10698] bridge_slave_1: entered allmulticast mode
[  186.365014][T10848] netlink: 'syz.3.1273': attribute type 1 has an invalid length.
[  186.377756][T10698] bridge_slave_1: entered promiscuous mode
[  186.423130][T10844] 8021q: adding VLAN 0 to HW filter on device bond5
[  186.431507][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'.
[  186.477541][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'.
[  186.509580][T10849] 8021q: adding VLAN 0 to HW filter on device bond5
[  186.517428][T10849] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  186.530453][T10849] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  186.588262][T10865] sctp: [Deprecated]: syz.1.1275 (pid 10865) Use of int in max_burst socket option.
[  186.588262][T10865] Use struct sctp_assoc_value instead
[  186.609085][T10864] netlink: ct family unspecified
[  186.616978][T10864] openvswitch: netlink: Actions may not be safe on all matching packets
[  186.634485][T10853] gretap2: entered promiscuous mode
[  186.646668][T10853] bond5: (slave gretap2): making interface the new active one
[  186.659243][T10853] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  186.712495][T10868] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1276'.
[  186.746343][T10858] macvlan0: entered promiscuous mode
[  186.871468][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.902554][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.104418][T10698] team0: Port device team_slave_0 added
[  187.115595][T10698] team0: Port device team_slave_1 added
[  187.163426][T10888] netlink: 'syz.3.1282': attribute type 3 has an invalid length.
[  187.173774][T10889] netlink: 'syz.3.1282': attribute type 3 has an invalid length.
[  187.184528][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.203785][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.274334][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.292364][ T5859] Bluetooth: hci2: command 0x041b tx timeout
[  187.364023][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.388024][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.432355][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.555398][T10698] hsr_slave_0: entered promiscuous mode
[  187.562215][T10698] hsr_slave_1: entered promiscuous mode
[  187.958424][T10929] netlink: 'syz.3.1297': attribute type 1 has an invalid length.
[  187.984687][T10931] netlink: 'syz.1.1298': attribute type 10 has an invalid length.
[  188.004621][T10931] batadv0: entered promiscuous mode
[  188.010482][T10931] batadv0: entered allmulticast mode
[  188.017827][T10931] bridge0: port 3(batadv0) entered blocking state
[  188.025511][T10931] bridge0: port 3(batadv0) entered disabled state
[  188.036496][T10931] bridge0: port 3(batadv0) entered blocking state
[  188.043168][T10931] bridge0: port 3(batadv0) entered forwarding state
[  188.053147][T10934] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20000
[  188.261687][ T9310] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  188.272880][ T9310] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  188.374028][T10698] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  188.404560][T10698] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  188.449817][T10698] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  188.466952][T10698] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  188.632654][T10962] __nla_validate_parse: 11 callbacks suppressed
[  188.632672][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'.
[  188.679308][T10698] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.696500][T10958] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  188.741464][T10698] 8021q: adding VLAN 0 to HW filter on device team0
[  188.767874][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.775300][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.813407][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.820639][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.902572][T10968] veth11: entered promiscuous mode
[  189.018251][T10698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.126453][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1314'.
[  189.137705][T10985] dvmrp0: entered allmulticast mode
[  189.204919][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'.
[  189.227713][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'.
[  189.357695][T10994] dvmrp0: left allmulticast mode
[  189.370351][   T51] Bluetooth: hci2: command 0x041b tx timeout
[  189.441494][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'.
[  189.457371][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'.
[  189.547797][T11007] veth3: entered allmulticast mode
[  189.646614][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1321'.
[  189.671037][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.843986][T11032] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1322'.
[  190.022191][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'.
[  190.063461][T11034] netlink: 'syz.0.1325': attribute type 3 has an invalid length.
[  190.265798][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'.
[  190.294063][T11045] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  190.488173][T11050] netlink: 'syz.2.1329': attribute type 10 has an invalid length.
[  190.521853][T11054] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  190.563209][T11050] batadv0: entered promiscuous mode
[  190.592089][T11050] batadv0: entered allmulticast mode
[  190.620881][T11050] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  190.686768][T10698] veth0_vlan: entered promiscuous mode
[  190.722831][T10698] veth1_vlan: entered promiscuous mode
[  190.833788][T10698] veth0_macvtap: entered promiscuous mode
[  190.856203][T10698] veth1_macvtap: entered promiscuous mode
[  190.914010][T10698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.138464][ T9310] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  191.296861][T10698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.362390][T10698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.394237][T10698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.422995][T10698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.444369][T10698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.453408][   T51] Bluetooth: hci2: command 0x041b tx timeout
[  191.574402][T11093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.718468][ T9312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.739995][ T9312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.805331][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.826111][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.554793][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.638289][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.987309][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.134319][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.244047][   T49] bridge_slave_1: left allmulticast mode
[  193.251548][   T49] bridge_slave_1: left promiscuous mode
[  193.257258][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.267090][   T49] bridge_slave_0: left allmulticast mode
[  193.273073][   T49] bridge_slave_0: left promiscuous mode
[  193.278854][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.442452][T11133] netlink: 'syz.2.1354': attribute type 1 has an invalid length.
[  193.719996][T11148] xt_CT: No such helper "syz0"
[  193.885100][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.894532][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.908956][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.925791][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.943654][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.004319][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.016602][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.026855][   T49] bond0 (unregistering): Released all slaves
[  194.113404][T11133] 8021q: adding VLAN 0 to HW filter on device bond6
[  194.216256][T11160] netlink: 'syz.3.1357': attribute type 29 has an invalid length.
[  194.341317][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.538619][T11153] vxcan1 speed is unknown, defaulting to 1000
[  194.708532][T11187] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  194.716739][T11187] __nla_validate_parse: 8 callbacks suppressed
[  194.716753][T11187] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1364'.
[  194.963893][T11198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1366'.
[  195.342784][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1368'.
[  195.832091][   T49] hsr_slave_0: left promiscuous mode
[  195.855521][   T49] hsr_slave_1: left promiscuous mode
[  195.868168][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.894895][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.910156][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.926991][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.010136][ T5860] Bluetooth: hci2: command tx timeout
[  196.021314][   T49] veth1_macvtap: left promiscuous mode
[  196.027937][   T49] veth0_macvtap: left promiscuous mode
[  196.044039][   T49] veth1_vlan: left promiscuous mode
[  196.051127][   T49] veth0_vlan: left promiscuous mode
[  196.414917][ T5860] Bluetooth: hci3: command 0x0406 tx timeout
[  196.417773][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  196.683229][   T49] team0 (unregistering): Port device team_slave_1 removed
[  196.727630][   T49] team0 (unregistering): Port device team_slave_0 removed
[  196.895106][ T1024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  196.913089][T11269] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1378'.
[  197.116459][T11227] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  197.180065][T11227] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  197.223770][T11227] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  197.276213][T11153] chnl_net:caif_netlink_parms(): no params data found
[  197.531353][T11153] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.558704][T11153] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.575475][T11153] bridge_slave_0: entered allmulticast mode
[  197.592859][T11153] bridge_slave_0: entered promiscuous mode
[  197.612472][T11153] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.646910][T11153] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.683752][T11153] bridge_slave_1: entered allmulticast mode
[  197.717206][T11153] bridge_slave_1: entered promiscuous mode
[  197.783501][T11294] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  197.812950][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'.
[  197.854469][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'.
[  197.890860][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.914698][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.006536][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'.
[  198.016398][T11304] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  198.075186][T11304] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  198.090021][ T5859] Bluetooth: hci2: command tx timeout
[  198.105562][T11153] team0: Port device team_slave_0 added
[  198.150513][T11153] team0: Port device team_slave_1 added
[  198.236710][T11153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.255918][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.373398][T11153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.403132][T11153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.430401][T11153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.457338][T11153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.628985][T11153] hsr_slave_0: entered promiscuous mode
[  198.652228][T11153] hsr_slave_1: entered promiscuous mode
[  198.901722][T11330] netlink: 'syz.0.1394': attribute type 3 has an invalid length.
[  198.909772][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'.
[  198.976192][T11334] netlink: 'syz.1.1396': attribute type 5 has an invalid length.
[  199.190542][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'.
[  199.464014][T11355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1401'.
[  199.696701][T11364] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  199.836479][T11369] netlink: zone id is out of range
[  199.855839][T11153] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  199.904340][T11369] netlink: zone id is out of range
[  199.922835][T11153] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  199.932807][T11369] netlink: zone id is out of range
[  199.974123][T11153] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  199.981479][T11369] netlink: zone id is out of range
[  199.986733][T11369] netlink: zone id is out of range
[  200.035132][T11153] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  200.042100][T11369] netlink: zone id is out of range
[  200.042236][T11369] netlink: zone id is out of range
[  200.042717][T11369] netlink: zone id is out of range
[  200.116755][T11382] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1408'.
[  200.170039][ T5859] Bluetooth: hci2: command tx timeout
[  200.262400][T11395] x_tables: duplicate entry at hook 2
[  200.372254][T11153] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.408159][T11153] 8021q: adding VLAN 0 to HW filter on device team0
[  200.411538][T11402] netlink: 'syz.1.1414': attribute type 1 has an invalid length.
[  200.440131][T11402] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1414'.
[  200.451406][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.458625][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.564542][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.571949][ T9319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.721397][T11408] netlink: 'syz.1.1415': attribute type 4 has an invalid length.
[  200.842623][T11409] netlink: 'syz.1.1415': attribute type 4 has an invalid length.
[  201.380005][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.543030][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1420'.
[  201.572820][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'.
[  201.594769][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'.
[  201.673704][T11436] bridge0: port 3(vlan3) entered blocking state
[  201.693530][T11447] xt_l2tp: missing protocol rule (udp|l2tpip)
[  201.696789][T11436] bridge0: port 3(vlan3) entered disabled state
[  201.715235][T11436] vlan3: entered allmulticast mode
[  201.730008][T11436] bridge0: entered allmulticast mode
[  201.738239][T11436] vlan3: left allmulticast mode
[  201.757735][T11436] bridge0: left allmulticast mode
[  201.801808][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1424'.
[  201.874245][T11450] Driver unsupported XDP return value 0 on prog  (id 397) dev N/A, expect packet loss!
[  202.068896][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'.
[  202.087295][T11461] lo: entered allmulticast mode
[  202.107278][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'.
[  202.184896][T11153] veth0_vlan: entered promiscuous mode
[  202.250013][ T5859] Bluetooth: hci2: command tx timeout
[  202.266011][T11153] veth1_vlan: entered promiscuous mode
[  202.364243][T11153] veth0_macvtap: entered promiscuous mode
[  202.379323][T11477] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1430'.
[  202.393102][T11153] veth1_macvtap: entered promiscuous mode
[  202.438181][T11153] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.480522][T11153] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.515843][T11153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.552042][T11153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.584776][T11153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.594154][T11153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.608976][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'.
[  202.765318][ T9310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.783712][ T9310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.823774][T11499] xt_hashlimit: overflow, try lower: 4294967295/0
[  202.845949][T11500] xt_hashlimit: overflow, try lower: 4294967295/0
[  202.895315][ T2128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.940743][ T2128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.182245][T11523] netlink: 'syz.1.1441': attribute type 1 has an invalid length.
[  203.349497][T11536] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  203.518927][T11543] 8021q: adding VLAN 0 to HW filter on device bond5
[  203.693790][ T9319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.791863][ T9319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.974392][ T9319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.054944][ T9319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.318008][ T9319] bridge_slave_1: left allmulticast mode
[  204.324292][ T9319] bridge_slave_1: left promiscuous mode
[  204.330102][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.339158][ T9319] bridge_slave_0: left allmulticast mode
[  204.345151][ T9319] bridge_slave_0: left promiscuous mode
[  204.351014][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.901246][ T9319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.962645][ T9319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.010701][ T9319] bond0 (unregistering): Released all slaves
[  205.438201][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.458602][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.471063][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.480898][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.488546][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.537955][T11594] net_ratelimit: 8 callbacks suppressed
[  205.537971][T11594] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  205.550481][T11590] __nla_validate_parse: 4 callbacks suppressed
[  205.550497][T11590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1460'.
[  205.834728][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[  205.871299][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[  205.892543][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'.
[  205.908292][T11588] vxcan1 speed is unknown, defaulting to 1000
[  205.947927][T11612] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  205.962093][T11612] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  206.010012][T11618] syzkaller1: entered promiscuous mode
[  206.015541][T11618] syzkaller1: entered allmulticast mode
[  206.175832][ T9319] hsr_slave_0: left promiscuous mode
[  206.208352][ T9319] hsr_slave_1: left promiscuous mode
[  206.224710][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.249599][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.278406][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.281106][T11635] netlink: 'syz.2.1473': attribute type 1 has an invalid length.
[  206.299814][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.307906][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'.
[  206.321055][T11635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1473'.
[  206.353990][ T9319] veth1_macvtap: left promiscuous mode
[  206.362941][ T9319] veth0_macvtap: left promiscuous mode
[  206.377255][ T9319] veth1_vlan: left promiscuous mode
[  206.383343][ T9319] veth0_vlan: left promiscuous mode
[  206.496390][   T55] block nbd0: Possible stuck request ffff888025c37000: control (read@0,1024B). Runtime 90 seconds
[  206.508099][   T55] block nbd0: Possible stuck request ffff888025c371c0: control (read@1024,1024B). Runtime 90 seconds
[  206.519386][   T55] block nbd0: Possible stuck request ffff888025c37380: control (read@2048,1024B). Runtime 90 seconds
[  206.530707][   T55] block nbd0: Possible stuck request ffff888025c37540: control (read@3072,1024B). Runtime 90 seconds
[  206.580058][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  206.902815][ T9319] team0 (unregistering): Port device team_slave_1 removed
[  206.945665][ T9319] team0 (unregistering): Port device team_slave_0 removed
[  207.534032][   T51] Bluetooth: hci2: command tx timeout
[  207.647600][T11662] bond3: entered promiscuous mode
[  207.657378][T11662] bond3: entered allmulticast mode
[  207.663301][T11662] 8021q: adding VLAN 0 to HW filter on device bond3
[  207.724383][T11668] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  207.763282][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  207.772584][T11588] chnl_net:caif_netlink_parms(): no params data found
[  208.038081][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'.
[  208.164693][T11697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1485'.
[  208.238051][T11588] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.271120][T11588] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.279196][T11588] bridge_slave_0: entered allmulticast mode
[  208.288324][T11588] bridge_slave_0: entered promiscuous mode
[  208.297161][T11588] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.323566][T11588] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.337281][T11588] bridge_slave_1: entered allmulticast mode
[  208.352948][T11588] bridge_slave_1: entered promiscuous mode
[  208.483519][T11588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.523708][T11588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.648342][T11588] team0: Port device team_slave_0 added
[  208.663107][T11588] team0: Port device team_slave_1 added
[  208.830630][T11588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.849752][T11588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.941186][T11588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.983553][T11588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.999752][T11588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.082674][T11588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.410833][T11588] hsr_slave_0: entered promiscuous mode
[  209.417504][T11588] hsr_slave_1: entered promiscuous mode
[  209.617623][   T51] Bluetooth: hci2: command tx timeout
[  209.847759][T11798] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (39785) !
[  210.353238][T11829] Bluetooth: MGMT ver 1.23
[  210.417092][T11827] bond3: entered promiscuous mode
[  210.422600][T11827] bond3: entered allmulticast mode
[  210.428927][T11827] 8021q: adding VLAN 0 to HW filter on device bond3
[  210.657526][T11845] __nla_validate_parse: 4 callbacks suppressed
[  210.657542][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'.
[  210.946830][T11862] IPv6: Can't replace route, no match found
[  210.977024][T11588] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  211.017676][T11588] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  211.057034][T11588] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  211.057072][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1531'.
[  211.085929][T11588] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  211.135890][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'.
[  211.204870][T11882] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  211.385493][T11588] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.445266][T11588] 8021q: adding VLAN 0 to HW filter on device team0
[  211.471799][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.478978][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.514315][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.521587][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.690194][   T51] Bluetooth: hci2: command tx timeout
[  211.745775][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'.
[  212.087881][T11937] bridge0: entered allmulticast mode
[  212.120008][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'.
[  212.144761][T11937] bridge_slave_1: left allmulticast mode
[  212.162095][T11937] bridge_slave_1: left promiscuous mode
[  212.174883][T11937] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.201878][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  212.211372][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'.
[  212.239154][T11937] bridge_slave_0: left allmulticast mode
[  212.245113][T11937] bridge_slave_0: left promiscuous mode
[  212.256772][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.267916][T11937] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.277405][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.287879][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.300843][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.323562][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.335607][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.345486][T11948] netlink: 8536 bytes leftover after parsing attributes in process `syz.1.1553'.
[  212.355569][T11937] bridge0 (unregistering): left allmulticast mode
[  212.369921][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.380378][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.390351][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.405552][T11946] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  212.435281][T11588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.511746][T11954] veth0: entered promiscuous mode
[  212.644366][T11953] veth0: left promiscuous mode
[  212.746172][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'.
[  212.758931][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'.
[  212.929458][T11588] veth0_vlan: entered promiscuous mode
[  212.943951][T11588] veth1_vlan: entered promiscuous mode
[  212.988263][T11588] veth0_macvtap: entered promiscuous mode
[  213.005347][T11588] veth1_macvtap: entered promiscuous mode
[  213.185686][T11588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.371165][T11588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.407404][T11588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.444322][T11588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.456918][T11588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.478376][T11588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.702043][ T9319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.728490][ T9319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.770124][   T51] Bluetooth: hci2: command tx timeout
[  213.994287][ T9312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.017520][ T9312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.142063][T12022] netlink: 'syz.3.1572': attribute type 1 has an invalid length.
[  214.222581][T12022] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.564706][ T9312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.687591][ T9312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.805553][ T9312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.916288][ T9312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.033570][ T9312] bridge_slave_1: left allmulticast mode
[  215.039235][ T9312] bridge_slave_1: left promiscuous mode
[  215.044989][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.055276][ T9312] bridge_slave_0: left allmulticast mode
[  215.064301][ T9312] bridge_slave_0: left promiscuous mode
[  215.070160][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.363647][ T9312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.375656][ T9312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.386116][ T9312] bond0 (unregistering): Released all slaves
[  215.709626][ T9312] hsr_slave_0: left promiscuous mode
[  215.726787][ T9312] hsr_slave_1: left promiscuous mode
[  215.733309][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.741251][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.800051][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.807535][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.872392][ T9312] veth1_macvtap: left promiscuous mode
[  215.882067][T12062] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.902045][ T9312] veth0_macvtap: left promiscuous mode
[  215.907765][ T9312] veth1_vlan: left promiscuous mode
[  215.936552][ T9312] veth0_vlan: left promiscuous mode
[  216.232752][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.242598][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.252802][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.268950][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.287890][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.579493][ T9312] team0 (unregistering): Port device team_slave_1 removed
[  216.619519][ T9312] team0 (unregistering): Port device team_slave_0 removed
[  217.088008][T12070] vxcan1 speed is unknown, defaulting to 1000
[  217.346031][T12088] __nla_validate_parse: 10 callbacks suppressed
[  217.346050][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  217.527692][T12098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1595'.
[  217.559051][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'.
[  217.570536][T12100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1597'.
[  217.598962][T12102] netlink: 'syz.1.1598': attribute type 1 has an invalid length.
[  217.625039][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1598'.
[  217.636681][T12097] Cannot find add_set index 4 as target
[  217.666386][T12097] Cannot find add_set index 4 as target
[  217.711604][T12097] Cannot find add_set index 4 as target
[  217.747596][T12097] Cannot find add_set index 4 as target
[  217.757112][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  217.781053][T12097] Cannot find add_set index 4 as target
[  217.794885][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'.
[  217.817120][T12097] Cannot find add_set index 4 as target
[  217.853633][T12097] Cannot find add_set index 4 as target
[  217.859412][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  217.859504][T12107] netlink: 'syz.0.1600': attribute type 15 has an invalid length.
[  217.878608][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'.
[  217.894265][T12097] Cannot find add_set index 4 as target
[  217.920954][T12097] Cannot find add_set index 4 as target
[  217.927415][T12110] netlink: 'syz.0.1600': attribute type 15 has an invalid length.
[  217.945634][T12097] Cannot find add_set index 4 as target
[  217.993449][T12070] chnl_net:caif_netlink_parms(): no params data found
[  218.216258][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'.
[  218.239016][T12070] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.247215][T12070] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.280228][T12070] bridge_slave_0: entered allmulticast mode
[  218.287359][T12070] bridge_slave_0: entered promiscuous mode
[  218.322499][T12070] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.331887][   T51] Bluetooth: hci2: command tx timeout
[  218.350253][T12070] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.357470][T12070] bridge_slave_1: entered allmulticast mode
[  218.378099][T12070] bridge_slave_1: entered promiscuous mode
[  218.524352][T12070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.573619][T12070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.683315][T12070] team0: Port device team_slave_0 added
[  218.703743][T12070] team0: Port device team_slave_1 added
[  218.804670][T12156] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  218.812877][T12156] netlink: 'syz.1.1613': attribute type 3 has an invalid length.
[  218.821655][T12156] netlink: 'syz.1.1613': attribute type 235 has an invalid length.
[  218.825098][T12070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.836987][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.872799][T12070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.930653][T12070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.937649][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.978396][T12070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.017911][T12158] syzkaller1: entered promiscuous mode
[  219.026050][T12158] syzkaller1: entered allmulticast mode
[  219.146588][T12070] hsr_slave_0: entered promiscuous mode
[  219.174543][T12070] hsr_slave_1: entered promiscuous mode
[  219.350893][T12175] veth1_macvtap: left promiscuous mode
[  219.873082][T12218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  220.306109][T12070] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  220.333446][T12070] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  220.371118][T12070] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  220.395463][T12070] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  220.411361][   T51] Bluetooth: hci2: command tx timeout
[  220.742041][T12279] netlink: 'syz.1.1646': attribute type 10 has an invalid length.
[  220.914356][T12293] netlink: 'syz.0.1648': attribute type 5 has an invalid length.
[  221.015609][T12070] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.029971][T12293] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  221.031543][ T7194] syzkaller0: tun_net_xmit 76
[  221.050171][T12293] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  221.058388][T12293] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  221.079936][T12293] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  221.088198][T12293] geneve2: entered promiscuous mode
[  221.126677][T12293] geneve2: entered allmulticast mode
[  221.162241][T12296] syzkaller0: tun_chr_ioctl cmd 1074025677
[  221.168090][T12296] syzkaller0: Linktype set failed because interface is up
[  221.251806][T12070] 8021q: adding VLAN 0 to HW filter on device team0
[  222.490390][   T51] Bluetooth: hci2: command tx timeout
[  222.697714][T12323] __nla_validate_parse: 10 callbacks suppressed
[  222.697732][T12323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1655'.
[  222.750063][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.757214][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.814438][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.821660][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.904696][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  223.124365][T12345] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  223.142305][T12345] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  223.199425][T12353] xt_l2tp: unknown flags: 18
[  223.442883][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'.
[  223.453432][T12368] syz_tun: entered allmulticast mode
[  223.462220][T12366] syz_tun: left allmulticast mode
[  223.543939][T12070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.592420][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  223.613536][T12380] bridge0: port 3(batadv0) entered disabled state
[  223.719996][T12380] bridge_slave_1: left allmulticast mode
[  223.746349][T12380] bridge_slave_1: left promiscuous mode
[  223.783733][T12380] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.844285][T12380] bridge_slave_0: left allmulticast mode
[  223.870145][T12380] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.132751][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  224.477176][T12070] veth0_vlan: entered promiscuous mode
[  224.525938][T12070] veth1_vlan: entered promiscuous mode
[  224.569811][   T51] Bluetooth: hci2: command tx timeout
[  224.591346][T12070] veth0_macvtap: entered promiscuous mode
[  224.616037][T12070] veth1_macvtap: entered promiscuous mode
[  224.680642][T12070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.720727][T12070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.776886][T12070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.812766][T12418] netlink: 'syz.1.1680': attribute type 10 has an invalid length.
[  224.814287][T12070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.836769][T12418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1680'.
[  224.855163][T12070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.870995][T12070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.910096][T12418] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  224.928688][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'.
[  225.025650][T12413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.173335][T12431] netlink: 'syz.0.1685': attribute type 1 has an invalid length.
[  225.221916][T12413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.314782][T12431] 8021q: adding VLAN 0 to HW filter on device bond4
[  225.378411][T12413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.422353][T12429] bond4: (slave veth5): Enslaving as an active interface with a down link
[  225.448279][T12431] 8021q: adding VLAN 0 to HW filter on device batadv1
[  225.457536][T12431] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  225.487682][T12439] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  225.506027][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'.
[  225.512181][T12439] netlink: 'syz.2.1687': attribute type 2 has an invalid length.
[  225.518499][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1685'.
[  225.676018][T12413] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.687389][T12445] openvswitch: netlink: IPv6 tunnel dst address is zero
[  225.735447][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.779913][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.828916][ T9319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.855915][ T9319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.928110][T12413] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.960121][T12458] netlink: 'syz.3.1693': attribute type 10 has an invalid length.
[  225.969292][T12413] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.038240][T12458] batman_adv: batadv0: Adding interface: team0
[  226.055283][T12458] batman_adv: batadv0: The MTU of interface team0 is too small (1494) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.086389][T12458] batman_adv: batadv0: The MTU of interface team0 is too small (1494) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  226.116053][T12458] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  226.195116][T12413] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.378114][T12476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.407017][T12413] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.518422][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.876115][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.094778][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.154895][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.227539][   T36] bridge_slave_1: left allmulticast mode
[  227.233504][   T36] bridge_slave_1: left promiscuous mode
[  227.239248][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.248986][   T36] bridge_slave_0: left allmulticast mode
[  227.254996][   T36] bridge_slave_0: left promiscuous mode
[  227.260812][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.582415][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.594759][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.604852][   T36] bond0 (unregistering): Released all slaves
[  227.885991][T12490] netlink: 'syz.0.1700': attribute type 4 has an invalid length.
[  227.938625][T12497] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  228.199712][T12504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1707'.
[  228.319414][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  228.339687][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  228.348572][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  228.371045][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  228.379828][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  228.672498][   T36] hsr_slave_0: left promiscuous mode
[  228.695553][   T36] hsr_slave_1: left promiscuous mode
[  228.714931][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.727148][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.751034][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.758735][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.843149][   T36] veth1_macvtap: left promiscuous mode
[  228.848761][   T36] veth0_macvtap: left promiscuous mode
[  228.861747][   T36] veth1_vlan: left promiscuous mode
[  228.867107][   T36] veth0_vlan: left promiscuous mode
[  229.419582][   T36] team0 (unregistering): Port device team_slave_1 removed
[  229.457963][   T36] team0 (unregistering): Port device team_slave_0 removed
[  229.861645][T12517] vxcan1 speed is unknown, defaulting to 1000
[  230.060979][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.068756][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.100457][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.108464][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'.
[  230.137224][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.151620][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'.
[  230.171015][T12568] netlink: 'syz.3.1722': attribute type 2 has an invalid length.
[  230.191749][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.225989][T12568] netlink: 'syz.3.1722': attribute type 2 has an invalid length.
[  230.253825][T12568] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  230.317590][T12568] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1722'.
[  230.363769][T12568] macvlan0: entered promiscuous mode
[  230.369290][T12568] macvlan0: entered allmulticast mode
[  230.491131][   T51] Bluetooth: hci2: command tx timeout
[  230.507220][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'.
[  230.539274][T12590] bond0: entered promiscuous mode
[  230.586066][T12590] bond0: left promiscuous mode
[  230.638396][T12597] tipc: Started in network mode
[  230.652733][T12597] tipc: Node identity e0000002, cluster identity 4711
[  230.673046][T12597] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  230.811007][T12517] chnl_net:caif_netlink_parms(): no params data found
[  231.063222][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'.
[  231.101050][T12630] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1736'.
[  231.166207][T12630] 0ªX¹¦D: entered promiscuous mode
[  231.177232][T12632] tls_set_device_offload: netdev not found
[  231.188106][T12632] validate_nla: 3 callbacks suppressed
[  231.188123][T12632] netlink: 'syz.1.1738': attribute type 62 has an invalid length.
[  231.192444][T12630] 0ªX¹¦D: left allmulticast mode
[  231.290197][T12517] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.303626][T12517] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.321562][T12517] bridge_slave_0: entered allmulticast mode
[  231.329188][T12517] bridge_slave_0: entered promiscuous mode
[  231.332685][T12619] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1736'.
[  231.354801][T12619] 1ªX¹¦D: renamed from 
30ªX¹¦D
[  231.367996][T12619] 1ªX¹¦D: left promiscuous mode
[  231.373461][T12619] 1ªX¹¦D: entered allmulticast mode
[  231.380616][T12619] A link change request failed with some changes committed already. Interface 
31ªX¹¦D may have been left with an inconsistent configuration, please check.
[  231.396976][T12517] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.410423][T12517] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.422138][T12517] bridge_slave_1: entered allmulticast mode
[  231.430856][T12517] bridge_slave_1: entered promiscuous mode
[  231.439545][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'.
[  231.619416][T12517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.634942][T12517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.688911][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  231.806372][T12517] team0: Port device team_slave_0 added
[  231.845056][T12517] team0: Port device team_slave_1 added
[  231.997091][T12517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.005412][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.069739][T12517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.085442][T12517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.094628][T12517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.145513][T12517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.434513][T12517] hsr_slave_0: entered promiscuous mode
[  232.455138][T12517] hsr_slave_1: entered promiscuous mode
[  232.571414][   T51] Bluetooth: hci2: command tx timeout
[  232.623583][T12716] netlink: 'syz.0.1763': attribute type 23 has an invalid length.
[  232.886134][T12728] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  233.214310][T12753] __nla_validate_parse: 6 callbacks suppressed
[  233.214328][T12753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1775'.
[  233.347752][T12761] IPv6: NLM_F_REPLACE set, but no existing node found!
[  233.421499][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'.
[  233.458019][T12766] lo: left allmulticast mode
[  233.476214][T12766] 0ªX¹¦D: left allmulticast mode
[  233.493708][T12766] veth0_vlan: left allmulticast mode
[  233.500278][T12766] batman_adv: batadv0: Interface deactivated: ipvlan2
[  233.514516][T12766] sit1: left promiscuous mode
[  233.519281][T12766] sit1: left allmulticast mode
[  233.539030][T12766] bond3: left promiscuous mode
[  233.548721][T12766] bond3: left allmulticast mode
[  233.567805][T12766] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  233.576673][T12766] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  233.585050][T12766] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  233.594257][T12766] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  233.605315][T12766] geneve2: left promiscuous mode
[  233.610505][T12766] geneve2: left allmulticast mode
[  233.666770][T12776] C: renamed from lo (while UP)
[  233.752659][T12517] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.761388][T12780] netlink: 'syz.2.1783': attribute type 1 has an invalid length.
[  233.780149][T12517] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  233.807592][T12517] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.828338][T12517] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.895012][T12791] netlink: 'syz.0.1785': attribute type 1 has an invalid length.
[  233.919314][T12791] netlink: 'syz.0.1785': attribute type 4 has an invalid length.
[  233.934333][T12791] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1785'.
[  233.993525][T12517] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.039173][T12517] 8021q: adding VLAN 0 to HW filter on device team0
[  234.086995][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.094276][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.128519][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.135785][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.155569][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'.
[  234.652611][   T51] Bluetooth: hci2: command tx timeout
[  234.735427][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.785055][T12824] syz.3.1795 (12824) used greatest stack depth: 17992 bytes left
[  234.830689][T12834] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  234.879931][T12834] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1797'.
[  234.926521][T12841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1800'.
[  235.094485][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'.
[  235.338114][T12869] Cannot find set identified by id 4 to match
[  235.495796][T12517] veth0_vlan: entered promiscuous mode
[  235.508531][T12517] veth1_vlan: entered promiscuous mode
[  235.542720][T12517] veth0_macvtap: entered promiscuous mode
[  235.555504][T12517] veth1_macvtap: entered promiscuous mode
[  235.582541][T12517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.600103][T12517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.613732][T12517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.622822][T12517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.632261][T12517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.641053][T12517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.705843][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.715649][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.747368][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.755486][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.766364][T12876] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1808'.
[  235.930114][ T1024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  236.238032][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'.
[  236.279049][T12882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1810'.
[  236.577372][   T55] block nbd0: Possible stuck request ffff888025c37000: control (read@0,1024B). Runtime 120 seconds
[  236.588641][   T55] block nbd0: Possible stuck request ffff888025c371c0: control (read@1024,1024B). Runtime 120 seconds
[  236.600404][   T55] block nbd0: Possible stuck request ffff888025c37380: control (read@2048,1024B). Runtime 120 seconds
[  236.613326][   T55] block nbd0: Possible stuck request ffff888025c37540: control (read@3072,1024B). Runtime 120 seconds
[  236.898669][T12900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.916421][T12900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.932303][T12900] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  236.946079][T12900] bond0 (unregistering): Released all slaves
[  237.018362][ T9312] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.088533][ T9312] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.516527][ T9312] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.584508][ T9312] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.771211][ T9312] bridge_slave_1: left allmulticast mode
[  237.776871][ T9312] bridge_slave_1: left promiscuous mode
[  237.782777][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.792800][ T9312] bridge_slave_0: left allmulticast mode
[  237.798824][ T9312] bridge_slave_0: left promiscuous mode
[  237.804809][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.151938][T12927] netlink: 'syz.3.1820': attribute type 7 has an invalid length.
[  238.178663][T12927] netlink: 'syz.3.1820': attribute type 8 has an invalid length.
[  238.351225][ T9312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.383707][ T9312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.418660][ T9312] bond0 (unregistering): Released all slaves
[  238.455903][T12916] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  238.733910][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.747575][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.757323][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.778946][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.787783][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.874093][T12944] vxcan1 speed is unknown, defaulting to 1000
[  238.884641][T12950] __nla_validate_parse: 8 callbacks suppressed
[  238.884666][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1826'.
[  239.053445][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  239.086115][T12960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.091780][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  239.155675][T12961] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1830'.
[  239.186094][T12961] nbd: illegal input index -8454144
[  239.218283][T12965] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1831'.
[  239.266843][T12966] nbd: must specify at least one socket
[  239.275510][T12967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1831'.
[  239.490765][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'.
[  239.719003][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1834'.
[  239.740176][T12975] tipc: Invalid UDP bearer configuration
[  239.740234][T12975] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  239.778504][ T9312] hsr_slave_0: left promiscuous mode
[  239.791693][ T9312] hsr_slave_1: left promiscuous mode
[  239.797788][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.812146][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.822219][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.831706][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.838635][T12990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1839'.
[  239.865185][ T9312] veth1_macvtap: left promiscuous mode
[  239.871247][ T9312] veth0_macvtap: left promiscuous mode
[  239.876832][ T9312] veth1_vlan: left promiscuous mode
[  239.882539][ T9312] veth0_vlan: left promiscuous mode
[  240.305115][ T9312] team0 (unregistering): Port device team_slave_1 removed
[  240.347181][ T9312] team0 (unregistering): Port device team_slave_0 removed
[  240.726158][T12997] xt_CONNSECMARK: invalid mode: 0
[  240.732415][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1841'.
[  240.812734][   T51] Bluetooth: hci2: command tx timeout
[  241.035476][T12944] chnl_net:caif_netlink_parms(): no params data found
[  241.183561][T13011] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.505575][T12944] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.550979][T12944] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.558929][T12944] bridge_slave_0: entered allmulticast mode
[  241.574457][T12944] bridge_slave_0: entered promiscuous mode
[  241.583178][T12944] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.590774][T12944] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.598068][T12944] bridge_slave_1: entered allmulticast mode
[  241.606229][T12944] bridge_slave_1: entered promiscuous mode
[  241.638529][T12995] infiniband syz!: set down
[  241.648916][T12995] infiniband syz!: added team_slave_0
[  241.660292][T12995] syz!: rxe_create_cq: returned err = -12
[  241.666214][T12995] infiniband syz!: Couldn't create ib_mad CQ
[  241.672886][T12995] infiniband syz!: Couldn't open port 1
[  241.712075][T12944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.726505][T12995] RDS/IB: syz!: added
[  241.737631][T12995] smc: adding ib device syz! with port count 1
[  241.749603][T12944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.772711][T12995] smc:    ib device syz! port 1 has pnetid 
[  241.858117][T12944] team0: Port device team_slave_0 added
[  241.875921][T12944] team0: Port device team_slave_1 added
[  241.970974][T13043] netlink: 'syz.2.1853': attribute type 1 has an invalid length.
[  242.084774][T12944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.107897][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.169285][T12944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.202335][T12944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.214406][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.246339][T12944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.463408][T12944] hsr_slave_0: entered promiscuous mode
[  242.480384][T12944] hsr_slave_1: entered promiscuous mode
[  242.893546][   T51] Bluetooth: hci2: command tx timeout
[  243.164091][T13077] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  243.227683][T13082] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  243.755083][T13117] netlink: 'syz.0.1872': attribute type 1 has an invalid length.
[  243.844628][T13117] 8021q: adding VLAN 0 to HW filter on device bond5
[  243.954826][T12944] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  244.008927][T12944] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  244.036356][T12944] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  244.078690][T12944] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  244.250785][ T2128] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  244.281003][T13152] __nla_validate_parse: 7 callbacks suppressed
[  244.281024][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'.
[  244.319825][ T2128] ------------[ cut here ]------------
[  244.330485][ T2128] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5
[  244.349021][ T2128] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
[  244.396123][ T2128] CPU: 0 UID: 0 PID: 2128 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) 
[  244.396150][ T2128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  244.396161][ T2128] Workqueue: events_unbound cfg80211_wiphy_work
[  244.396189][ T2128] Call Trace:
[  244.396196][ T2128]  <TASK>
[  244.396205][ T2128]  dump_stack_lvl+0x189/0x250
[  244.396231][ T2128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.396249][ T2128]  ? __pfx__printk+0x10/0x10
[  244.396283][ T2128]  ubsan_epilogue+0xa/0x40
[  244.396304][ T2128]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  244.396328][ T2128]  ieee80211_request_ibss_scan+0x600/0x8b0
[  244.396368][ T2128]  ieee80211_ibss_work+0xd85/0x1060
[  244.396390][ T2128]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.396415][ T2128]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  244.396437][ T2128]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.396459][ T2128]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  244.396486][ T2128]  ? skb_dequeue+0x10e/0x150
[  244.396499][ T2128]  ? ieee80211_iface_work+0xcdb/0xfe0
[  244.396518][ T2128]  ? ieee80211_iface_work+0xf39/0xfe0
[  244.396537][ T2128]  ? rcu_is_watching+0x15/0xb0
[  244.396563][ T2128]  cfg80211_wiphy_work+0x2df/0x460
[  244.396582][ T2128]  ? process_scheduled_works+0x9ef/0x17b0
[  244.396604][ T2128]  process_scheduled_works+0xade/0x17b0
[  244.396656][ T2128]  ? __pfx_process_scheduled_works+0x10/0x10
[  244.396695][ T2128]  worker_thread+0x8a0/0xda0
[  244.396714][ T2128]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.396744][ T2128]  ? __kthread_parkme+0x7b/0x200
[  244.396775][ T2128]  kthread+0x70e/0x8a0
[  244.396801][ T2128]  ? __pfx_worker_thread+0x10/0x10
[  244.396820][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.396845][ T2128]  ? _raw_spin_unlock_irq+0x23/0x50
[  244.396866][ T2128]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.396887][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.396909][ T2128]  ret_from_fork+0x3fc/0x770
[  244.396929][ T2128]  ? __pfx_ret_from_fork+0x10/0x10
[  244.396954][ T2128]  ? __switch_to_asm+0x39/0x70
[  244.396972][ T2128]  ? __switch_to_asm+0x33/0x70
[  244.396988][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.397010][ T2128]  ret_from_fork_asm+0x1a/0x30
[  244.397049][ T2128]  </TASK>
[  244.397056][ T2128] ---[ end trace ]---
[  244.617135][ T2128] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  244.624361][ T2128] CPU: 0 UID: 0 PID: 2128 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) 
[  244.636624][ T2128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  244.646681][ T2128] Workqueue: events_unbound cfg80211_wiphy_work
[  244.652926][ T2128] Call Trace:
[  244.656203][ T2128]  <TASK>
[  244.659125][ T2128]  dump_stack_lvl+0x99/0x250
[  244.663712][ T2128]  ? __asan_memcpy+0x40/0x70
[  244.668291][ T2128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.673488][ T2128]  ? __pfx__printk+0x10/0x10
[  244.678172][ T2128]  panic+0x2db/0x790
[  244.682065][ T2128]  ? __pfx_panic+0x10/0x10
[  244.686480][ T2128]  ? _printk+0xcf/0x120
[  244.690649][ T2128]  ? __pfx__printk+0x10/0x10
[  244.695280][ T2128]  check_panic_on_warn+0x89/0xb0
[  244.700302][ T2128]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  244.706017][ T2128]  ieee80211_request_ibss_scan+0x600/0x8b0
[  244.711832][ T2128]  ieee80211_ibss_work+0xd85/0x1060
[  244.717025][ T2128]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.722225][ T2128]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  244.728118][ T2128]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.734469][ T2128]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  244.740129][ T2128]  ? skb_dequeue+0x10e/0x150
[  244.744719][ T2128]  ? ieee80211_iface_work+0xcdb/0xfe0
[  244.750084][ T2128]  ? ieee80211_iface_work+0xf39/0xfe0
[  244.755448][ T2128]  ? rcu_is_watching+0x15/0xb0
[  244.760209][ T2128]  cfg80211_wiphy_work+0x2df/0x460
[  244.765381][ T2128]  ? process_scheduled_works+0x9ef/0x17b0
[  244.771117][ T2128]  process_scheduled_works+0xade/0x17b0
[  244.776692][ T2128]  ? __pfx_process_scheduled_works+0x10/0x10
[  244.782683][ T2128]  worker_thread+0x8a0/0xda0
[  244.787276][ T2128]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.793608][ T2128]  ? __kthread_parkme+0x7b/0x200
[  244.798549][ T2128]  kthread+0x70e/0x8a0
[  244.802616][ T2128]  ? __pfx_worker_thread+0x10/0x10
[  244.807726][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.812319][ T2128]  ? _raw_spin_unlock_irq+0x23/0x50
[  244.817518][ T2128]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.822720][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.827321][ T2128]  ret_from_fork+0x3fc/0x770
[  244.831909][ T2128]  ? __pfx_ret_from_fork+0x10/0x10
[  244.837188][ T2128]  ? __switch_to_asm+0x39/0x70
[  244.841943][ T2128]  ? __switch_to_asm+0x33/0x70
[  244.846703][ T2128]  ? __pfx_kthread+0x10/0x10
[  244.851285][ T2128]  ret_from_fork_asm+0x1a/0x30
[  244.856075][ T2128]  </TASK>
[  244.859356][ T2128] Kernel Offset: disabled
[  244.863725][ T2128] Rebooting in 86400 seconds..