last executing test programs:

2.50630984s ago: executing program 2 (id=5071):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00'}, 0x94)

2.441183919s ago: executing program 2 (id=5073):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711066000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x14080}, 0x240400d4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x80)

1.568730043s ago: executing program 0 (id=5086):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x6c}, 0x8) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) (async)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x50}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x4004)

1.564764072s ago: executing program 2 (id=5088):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) (async)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r2, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="a702c27bf06db98cdf8d6889422019c0b20a0a589054612bc8b9aa12732b5894b3c2d33be1f984c47d286b219241aefd3c8c01f9843c6e8fb0e19e0c0743a2532975634b87c108677948f86f35b5eecd56f3b769bcfa672442f58bd4199e03bf4ea9385cd1df984d2958938330a1cd148cde179da1e2f11ca51a529ea58803884e2b6978de1a4127626ec37a290e73ca8d6d8ddfdfd53755d167ba8b2cd2fbff86ac34b7db68e9875e4307792830f899f0c75e418f58ce82039ce193097579f3aceff36ec054c4672cc8969f69efe1015860c8ffffecec6de646fb793021c2bb996dc9f7e6a72620e7cd729f1c24e8eeb58eb51a928570468e1fb23641e00fa426f6c24450abbde87f8833f0ee367758834d877babd4a80518cdcb04d6352e52d8abd6443757bd6ca779f0e57b25698598cdf11f8b45108cb1384fccab4aec1347e71eafcfafaadd4360716c11eb4d11864131df20db52730a242f45ccd6bc3dc02589c0e2a979b752986c692a4dff8ab71c5574220ae28bdb94c7e4ecf4b04e9ca4b68db1b27d0c2e8eea02487f5df0cb948cb2520694a6cb1dee45e0ef6d10925020001e0b49e1887f2c7e7dd98a4c04578e393b8bb7827868953f7587f5262aaf9f3d0803cd7e1ebc476f9407df2a9fea1349c80e14d094e3e203b18bd5bdee5453ad7817c73c974e753cdf923e9333c001cef33d89f8882adc5b5a491baecf9deb9199fd9e4740070183159818f1d527b0c369d590ec4988b7ed124eb9b34c050d426165f3ac392f2fc0dad59578c2498a755113f1e2207312e72fad25b59c0886c1242ed416e58d8fbff8e2ccf89d1aa87cde308c36e3c53c842a661df51449bd224cd967310172ad7165e6976e47cb7d191544d54170fdabdf9482e2b24d8a58376ea7cf60b347b55a259bf2eddb9e9d3aca20422dedcc9af246ead386662fdf14735a6e0deec38d23fbcebcc30349badcfb85308bd61354451d8199d9f53db36019d3d8e0db0becc5e1439c8104414d4020fa1f7298705becf897902d550862f1630a36773f585d0b122555632b7c333282b06d99a352daa20fda91c4406778dc36dcc5e73b8fa3048c53e30c762ede7be96880a1e3229a0bf88f8cc4e1c89571182e3dbdb5df2720ddf34f111314040c2f4ed3daf234a960e19d902fe68b41701c7834d9b092132f0b189cda43512319479475623598c4d1a00787f2ef605ff9289b180bbf17b62abaa1bea1429bc468f6f5df7fffcc7784a69338701a1e0fb471d3b17dba61e22705fe087b803faae47d7e338099021461a412af3ad4f94d6cea74fd858e5f39acdd93fc59c8970e00efc6cd78311d0859fab70c7de88d099c86743c8324427c7e931c0b50f54ab2d66bfc5eb474a2efd8ba91923825bacffff39d074e018373a36b55885cc1e2bbb5f8f7b001942e9e3dfb7f35e7b44b7c513ecc91f518d0d0577b9926961bcea1b468ee5f3d50d0cf188c81790dbb156be77eb6e69f5e2b922e13d8b92baef4125d802cfed1a097e3d9abb2b03e6566c17d24f78a6a29687188f22030c4f0e75935aea670bc038cee6e7827c66b772fe3bc17e5dcb66a371cda6ab8f95c199f23c8cfb98862947604c87973540ba650de26ceeaa118af2f8d51593c0bfab9a49360c862b5d2f0cd4912d42ab3a4830700ce125195190e28c20c44700b4c547d762b9d76aae14bcae36412fb8911a385ba5bda57f8cfeadf8f6e409226534866a61ee15cb5ad80cf22110176cf59db4e82207e3a5c12fb2afc1474ac7f6dd6c3f59a1f35caf41b9c75b98e3fdcee8ba0f62e0f66049ec52252990cb74339316e2878d76e5768096d16eed915721cd4cf2fbb8740ce3a483d95b15c28037e4f08568ce29e297f0fb9178ac6a3050e3311e57567b6a43e29fda3f6fe0116dcbb9999442d92902dbd030a806284e4702b68c49012738eab4ca6917ac15c333d9956abcc259887c0d804421569f67cda25ae113bf60c763d41bc96e1bbc984681fab5c0d74a1c5934d588f6eefea6cf186fb15b0d9fc3c656504fc542a7005f7f6a621476388b3cbb1d2fa6214cc62faacb3769fc7b5826af801f59d06d19cccac68eeb050b9d7f79b6263350178024072581b17f193d9700f63f7280f09f250988532ff9fb2baf6150f8ca02723e653662430df0e1cba59535448534d8b99a4869aa0e5f5ddde36bcce7b4c5018342bc73b0bafec14f27baa86ebaa0ae465686786a59ab7e6f443dc37154f43ee6128391f074929e9ec2b02835d83e04fffc6f0eec6de6d18b8396cc73b9e7634e9ca2838ebd710be87a9fe8d5a8619891a003fcd1c2c7e71b0df7c1bbf1efc3b69ef52053d29830c38e5eb6b3355ed23212bce370c9168f5dd17d5259642946c07eacfe1288105fe0beefcbee1828e1faf5cd9e030c35749b83ff25372757cf1dc7d27d963392d403e1d02ceac641b0d297b9ad07c45584f1717e0fdc96e105bdc421c8a8ebc9af1d2862729b4bd720d73bce506b9e37aa765ca3d5875cb52c2ae76579854455035cbc91fd71bd011326f3bd1dd4fcd56b9fe052336b85b4ed79c3c2a40f57a3dedacc9154b3cbbdf766c7d916d5aed0ba2c2724bcd97ec20da3e40b7e9a724d513f9ef6ed94c8afcc25c38ec2eb9267ef4dd07c7783decc2bc3e8b67e71dd54472b67e5bbe614856b96e1a3951b0c34668269116147b349b8ca5efd06e88a46c4dabf81c11cc1b46ffb9b9f7a8911fc8ad8b489f03f6faf9f231553cb4ad74470c330715781c9544ab48c38369265513952cc9f1063f43077390dbc59d704336e5f504e683ce34d1b02e76d4d2a689d2b401172245e3165a98e74e2aab0c7251cf8d59d377df853795c3fced7998025d5f851fdfb797a3a8dffff9b7fab792dfb60dcace3aada03c58baa51d79e0b8cd04017d9b193a2f9d732c1cef477c1683d923f70718d4be2deba348a418f1453414e4482b79813e34e1b7dfd5ac854b80e412d1d642f5a7f6132ad6c6eae847d6900a0efefa7a73ade315c25c1c0ec843394d315c10cc8b775b61c42507cc12b323a8734cd70bb1608be5355544009cd739e3d11701bf861901f40c7575093f8b619188303161100aa828f3d8fff2ba09b4d98ecbfd86d649f8b8224403921b8c0045a0cf501792c92d7571fb6f4137149b3f2b564c8d59cd2274cfa8e2caeeb4e6c47120a5a1cb6f3b9f817b12fc2a960a9aec82569bd0397cc3b686363c74672fe6627f69ba74f23f8093de16fa9e01694d81dec03a26c2573bd9dae8bd0edb97f6ff1e41af299118d6e17f81b20df90b22034b487e553dc6efc6ec6b8dd4659af003f4d187e519092ebfd332d58b37069b0b71df37f34ca89d9ce58e9000f3e5af502a4c0e486aa489826f1b2f397da15929e51aca8ba61c1fe6a0acea6481423f7168146c1b6213988b051a8209ff5fedbebe8993ea28cc0877a3af310c3e9aab2f9fafeee0605741abf51d9ade538450ff627dbc5ed266e11521922671afe6bca00709e9499387831f0961d9d78d437ea05f30996d4c3748aec2ab32879f3b2c553fd28028e57211443d3187373c60dfe083edc1e8ca29f4962a0c32c4d822523aef785094c36bd1006b33ab84819b36fbdb9bfefe1f3b0203fc056c0d332e323f881e04419a533201764a2bf4f4d09cdc82ed7581d9c08eaab4250a85c2fa2344492f5fd8ee25141972f8dedfa4f2f4c37bd356be7bdd061c396c3533ebbc267bc30983dfd34ba255979d206fb600b07d8ad7ec4aa12449a6fb50d3fd3d7e1ff542204a67ffd2390e2e1cc26d3ea43946893cd39906055c3ca4f660b71ee4a818383fc7c7cce0abde2428fbb1f1516b82719556e4f38b2e0896de65706e5d924ff9dcf16941e7293d312f5a69aafc1819b1d49461a5f44ca927d6748cfb36b6cb786be2f9f8316d9ef3c24709c0830d4457fe59992ada7f87ba46701298cde81012e5fdcc90f31ccd951cc73b79b1b01e37764f998d7b8e1503fd4e3785c63c054cf22ec82c94acfd733e3c81a87359898b1577d1630e22dbe34139e0dbb941bc8223b8e5bc784109bcb050a0905de7a59be4ff9855b1db9a50ae6d460f8a55742d354748fefb71e532340b379c393d053bfd3045370f247c3e54acfc07ac00cfbf39017e627706c927ae5ecd095f826a3ec076872eee99257abcf128082ea82d171022eda335c5306f798298bdbaf019f86f3314706a7c916cb428ef97a0a196ce7fdec1897c0d9e23c517e211c7867869c468978660cecae91c94dbacea6d812d1deff6753d8051c4aae074ece8f574540b560ac601a8104e24ce86a36cb2adf446debaf06b8675a55424c497e8cc4a8dce43cf3371083e5fbc8d76223652b82821bfe221109b9877dcd5dc7a03679c36e5607a0075436ea8a5c5dbbdd5c8995c0b3e5d447552600c6b787540bb9ac5a9430b830fb10f6b16ee7528c2e297d61eeb79c20426b146cefb33eee2458630102b34668300ff6dea9e413f66cf78c623403eca9869109bc66a49a0cca38882bc35badb3ef121baef323320c72ca4cb999d9964ad42070b1e589c961bfcf224016ecf9dcaa951fe9da5ac6e54e435b3237b4e066012bf132e8d23dff0481e2b6ebaca7fe5d32308eef7c2546130bcc998b32b676abf6ffde6ac89d280e531f7bd01b6f6fbd17a25482461ff5994012db41cd222ea72dfcc384ad6bfd80fef24424a2ad2451f741c530ac493212938c5277e3885b75caf3a6eb92638733a4f038cbc8264d76db9c36fec68d01231cedf0718df59ab6d133730f0ae865fca192098b5a46837c3fc0da67c7d104329cbacaaa6109c772c7ea588dd29eed97301cf4d6d85063e923cb5441c33b8b51e4bd2233ef361fb2ffe72ab2620eab2bf5903db9a11a2d9bb45f4dd004a24590e5f0ba6741b775480fbdd6b3fd2c37daed23fb09936ee1688dd58ba8c9eab2070711f5948b7cd983b8e8332a8dd49a792e970b153c18515858efd68da892b8bf017dd656f392df7ec9c4ab74dc4ccb4e39bfa890f3b595503e5e9bad8d4910129124808e0ee592bc002e99ecbbc1eb94aaefa9ce730438c67044c8061396e6079a6bda4210cb44e52bd97e26aedd65aa8a2a1898f16bee6862699560295d222e0bb7d217bb2f7a257bf7e6d4f6155b907a523ea5e22a55b547d625bff7752f311780d66766f95d4be38a261cb4114f90f73597bed75430e7f6bdd6116544b252b2b29f00c50a717da2ab4911af8aebc1dba81b884b9f3d63f9ea6177102ddc07a59b50f19f756172c1b515f55758bdff3d3094fb1f82b2864ec11cce06895a61585f02b295c3a15c8cfab53ee7b81f1a6a1814b8eaf3bce97a9782274e7431920580cb1ef1d5aef26205568b17b56ce1472d3131f4b771e18a68b7cea6d8cf859af35982373e89c5d0f0442576eef8ef34d14b7d87db9037cbfa08f4b391103eefed276eaee90554c7b32daa44029b67ea514786ea1f187715bac8ea5bf4f0717723b55b5f6807e55830d46dfd515b754d8797ed772aec91c7c08a2ce4fbbe9ba35593fbd800d173b20b6ac32bf4f62e336bb589148b4b448da8cad255e633e31d59bd8b3732da0bebad997874ec786742fb8e673712714d19d99a1faeb0bdf8bfcc29997dd6560ea76ce97c6f861a8d99bf16bb4822f1a1439c2cedd66b9b4aba07eaf5f4e6f57a60975eff5cf4109a8e4d25eb12f9bcc527d14c886a6319f3d79c4c03eefab6acc0a559f425f9a03722333a7", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x97a})

1.484653136s ago: executing program 2 (id=5091):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={<r1=>r0})
sendto$inet6(r1, &(0x7f0000000280)="7a76c547f79da00a504820d565f42e891dc2050d262ccfc1365e0f851dc8129778c4ca487b8918bdb3bd26bf08bbd21b7cacc6b8d499767d905b4fe906ae91ace54925729ae8c364c64f3e7d96a7fd18ae5ce0c156e460", 0x57, 0x2000000, &(0x7f0000000300)={0xa, 0x4e22, 0xe, @private1={0xfc, 0x1, '\x00', 0x2}, 0x5}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32)
setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

1.359439054s ago: executing program 4 (id=5096):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0xf}, {0x10000, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}]}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0xf}, {0x10000, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}]}}]}, 0x38}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000003e, 0x0, 0x3}, 0x10)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e)
r2 = socket(0x11, 0x3, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x107, 0x14, 0x0, 0x20000000)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010)
sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="5f2414f042aa19956605a693185dd991358bbdb8fdd6b23bdd0037f167ba97918136456b4c6be5db8c9d882b51a7afc59ec5ef5683189a1a5f9cfeba69c8c3a7558d8bd38fef22e447a716059b1b843cc9f3497556d6ec20a7f8d67dbddb5203af53733f264f945804efa02f0e0b335dcdb608a46232ff767ab13a6e1f6c69d5b6d432afc86e2c8e0d24bd49386c7aed419f234b", 0x94}], 0x1, &(0x7f0000000240)="f4c77d590d8dd880dcd9d34950faab1b9a666884805fe1c6590f00ff611a681e5fb31db15d9d9070fb7c4ed9d595ffac84a86afb03d7879592df4bf856f28dc99b8c8d9170a926a723617a2549e6231bcb84fbb7a89a46895ee780d29017bc6c3accef559d5133fd7bd6199cd2def1e369d0d221a573583c9d7cbf018fdd7bc813e9f23caa8f9de459c0a2fc27ffb223f7599091fd6193c0b2ccef6a04b07bb08e54efbbc6ea7cc2e1755cd3c627e9242fde0697fed61289e49bcd847d01eb72671c0dc2a273fe96bef5f3727c805ec5857c4eb76076fd633a85ab4f0e", 0xdd}, 0x20008000) (async)
sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x3}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="5f2414f042aa19956605a693185dd991358bbdb8fdd6b23bdd0037f167ba97918136456b4c6be5db8c9d882b51a7afc59ec5ef5683189a1a5f9cfeba69c8c3a7558d8bd38fef22e447a716059b1b843cc9f3497556d6ec20a7f8d67dbddb5203af53733f264f945804efa02f0e0b335dcdb608a46232ff767ab13a6e1f6c69d5b6d432afc86e2c8e0d24bd49386c7aed419f234b", 0x94}], 0x1, &(0x7f0000000240)="f4c77d590d8dd880dcd9d34950faab1b9a666884805fe1c6590f00ff611a681e5fb31db15d9d9070fb7c4ed9d595ffac84a86afb03d7879592df4bf856f28dc99b8c8d9170a926a723617a2549e6231bcb84fbb7a89a46895ee780d29017bc6c3accef559d5133fd7bd6199cd2def1e369d0d221a573583c9d7cbf018fdd7bc813e9f23caa8f9de459c0a2fc27ffb223f7599091fd6193c0b2ccef6a04b07bb08e54efbbc6ea7cc2e1755cd3c627e9242fde0697fed61289e49bcd847d01eb72671c0dc2a273fe96bef5f3727c805ec5857c4eb76076fd633a85ab4f0e", 0xdd}, 0x20008000)

1.273149055s ago: executing program 2 (id=5098):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000740)='veth0_virt_wifi\x00', 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={<r8=>r7})
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x2, 0x0, 0xc}, 0x10)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0)
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x2122)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0xf0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x7, 0x9}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xff000000, 0x7, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x7, 0x3ff, 0x2, 0x9, 0x7f, 'dvmrp0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @loopback, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040)

1.270992775s ago: executing program 4 (id=5100):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @multicast}, 0x14)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=""/14, &(0x7f0000000240)=0xe)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r15=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0)
writev(r5, &(0x7f0000000680)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}, {&(0x7f0000000340)="61832e7ff76ea46fab746309bcd1dfc06e5423edb5516e43b59dc2c97d81397ce8822494743ec7c6cfc8b4972fe3445c6f9f2d9ff4a63c2c438f5b7e97514892ffe647b50793aa82d2a4eba670f6ff53", 0x50}, {&(0x7f0000000400)="6284d182af227fa93d79cb0eb7c1cfc9bbfa053e7b83b392fa6e8002c9258e900613e7a8c5e2ecc6cf1027fd6b770b17617f13a68c6592048fe97145d6374c64260176d4c94717788e34964569a487d654bbfb936fbca7af56460c01ae7ff89ca8567e", 0x63}, {&(0x7f0000000480)="08889cb8e7eceeca6e44e5746332c51dffce173d53d47be153cf5136f0c75f5e3e997619edb43be8bd26355dfabaf4ae3cefda21dc860667b226e78e157d51e6f7c69d672a2f25f6", 0x48}, {&(0x7f0000000500)="2b3150b4f084058ca6d7cd6aa4fe8359482b54c123eb5074398417b9b9155500bfa5647f26b15ee19ed76ffee214c25a85956b062c5d750f45e58e0064b12db86f01c7abd75b97e00c9cec6228f6defb1c9b5bce681a5aa053e760e14b35947f49f07228867c91c90103397ab61784a37c666fb0e1477e05663d25d4b183eb60fa0b67230d17695f7086f1d9d11107fe906c4cb1116856e2ca642f85f33da84e", 0xa0}], 0x5)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0)

1.129105773s ago: executing program 4 (id=5104):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10)
recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x8001}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040100)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x8)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000380), 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r10 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000006c0)=""/113, &(0x7f0000000400)=0x71)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)

956.390217ms ago: executing program 3 (id=5108):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={<r2=>0x0, 0x619c, 0x3, [0x0, 0x40, 0x7]}, &(0x7f00000000c0)=0xe)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x8, 0x2}, 0x8)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x8, 0x8}, 0x50)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000040))

853.133307ms ago: executing program 3 (id=5109):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0x9}, {0x8, 0xffe0}, {0x4, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r6, 0x6, 0x22, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0)
write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

737.472593ms ago: executing program 3 (id=5112):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000093d9d767729276b7855000000200000185000000c400000095000000000000009500a505000000a1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
write(r3, &(0x7f0000000040)="05000000010000", 0x7)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xbc, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0xbc}}, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000000c0)={r8})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000200)={'lo\x00'})
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000180), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

669.174606ms ago: executing program 1 (id=5113):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "9fcfb34bab6ccc4f", "bc0481f486479ef99f569c9ce26da9d7", "2f68dc6c", "415559ca07c12afe"}, 0x28)
syz_emit_ethernet(0x1de, &(0x7f00000003c0)={@random="27289a341ad8", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1a8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2c, '\x00', [@ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x1a, 0x7, [0x3e1]}}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d310c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

667.33314ms ago: executing program 0 (id=5114):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x404cc83)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x29, 0x1, 0x0)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000580)=<r9=>0x0)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x70, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x54, 0x19, "02d4990f95d61c3e08d60ea22cf6ee5e13a4cc950ac202a6fa339fa8202038d8413fb348bee47ae5e72251dd5bfa3bbbd2a9937aba561498cde1be2913f9d827ddd176f89a150bd26e0d3015d4ec49a8"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4804)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0x143, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce5, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

639.970727ms ago: executing program 1 (id=5115):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="4dc6b006f97df8799839f891c4d7823b4631d2ea3796e814b74ddd4222f9aef3bc1c7ce0aca55051115facd7d7e14b0a082ac5fec3e8aa9888c241d04ee7e2f70c0259", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf254b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x18004}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
socketpair(0x0, 0x80000, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000000c0), 0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

580.704504ms ago: executing program 3 (id=5116):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000fc00000071184100001000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

507.368109ms ago: executing program 0 (id=5117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x9b, &(0x7f0000000200)}, 0xfffffffffffffc74)
r2 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f0000000080))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000001ac0), 0x6)
r4 = socket$isdn(0x22, 0x2, 0x1)
close(r4)
ioctl$sock_bt_hci(r3, 0x400448dc, 0x0)
sendmsg$kcm(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x33}, 0x20000085)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x10, 0x2)

499.025026ms ago: executing program 0 (id=5118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xac9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa699}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x4000000)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
unshare(0x26020480)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

489.200334ms ago: executing program 3 (id=5119):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={<r2=>0x0, @loopback, @empty}, &(0x7f0000000140)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getaddr={0x30, 0x16, 0x800, 0x70bd2a, 0x25dfdbfc, {0x2, 0x1, 0x2, 0xc8, r2}, [@IFA_FLAGS={0x8, 0x8, 0x480}, @IFA_FLAGS={0x8, 0x8, 0x22}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044010)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400))
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0xf4, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x95, 0x14, '\x00\x00\x007&\x87\xf5\xa0fq\x7fy\x9eY^\x17\x9c\xf2\\F\x02\xecL%\xe7\xd0C\xf3\x1b\x92\xf5=}\xea\xc3\xf9\xe2Dx\xec\xf4\xbd\xc6<+R\x91\xc8\xb1\xe5\xea\xea\xb8\x1bw-\xf3gN\xab\xe1\'\x01r\xddV\xf8\xdc\xcf\x85\xf8T0\x85\xcbi\xd0H\xc3\a\x04u\x946h\xbb\xe8O\xfc7\xefbh\xbdKX\xe6\xderRD\x94\x82\xc1/\nU\xeb\v\xea\xcf\xb8wF\x14\xa2\xb7\xcc\x06s\x84\xc5\x113\fw\x05\xb1b\xd8) \x8bX,\xe5\xa5\x9d\xf8b\x96\x864o\xed'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'red\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'tunl0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'tunl0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6tnl0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'tunl0\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48004}, 0x40840)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000e40)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newtclass={0x44, 0x28, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xfff2, 0xd}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xed, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x44}}, 0x20000804) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newtclass={0x44, 0x28, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {0xfff2, 0xd}, {0x10, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xed, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x44}}, 0x20000804)
r12 = socket(0x8, 0x9, 0x737)
getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40)

424.194735ms ago: executing program 0 (id=5120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'hsr0\x00', 0x200})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x24}}, 0x20004090)
r3 = socket$kcm(0x2, 0xa, 0x2)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1000000}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)=@ethtool_ts_info})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xfdef)

423.011085ms ago: executing program 1 (id=5121):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) (async)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000b000000080000000200000000000000a0c6f74749569c209fdca8368f959c5fdd838d7e852b484820da4b9bc999be41fc82a5d6b2c523dbcb0bb2d84ffed82ceabadac92dd437646aa01a738a61980930da56d4129891f7fbfa1223bd515ef9d4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x2, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r3}], &(0x7f0000000740)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xc, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[r3, r3, r3, r2], &(0x7f0000000880)=[{0x5, 0x3, 0x5, 0x3}], 0x10, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f00000006c0), &(0x7f0000000980)=r4}, 0x20)
readv(r1, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', <r7=>0x0, 0x40, 0x10, 0xffff, 0x9, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x64, 0x0, 0xa, 0x0, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0x67, [@multicast2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r9, 0x8b20, &(0x7f0000000080)) (async)
ioctl$sock_proto_private(r9, 0x8b20, &(0x7f0000000080))
socket(0x10, 0x3, 0x0) (async)
r10 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r13=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001580)={0x62c, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x560, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "808b208dd57c6ed3e529b05c31cd19969ebcf6d97c00501830442b7778b3f28052a40a8efa4c0acc59c64091c2def476a247ad792bf7d861901950e6d698130c2250d11982b281622b3e00aa9147c28a7a6e5e36c0a518d60257191bd24622c61b24473b4eb71fb36dad2fdf55de41a078b7b0039fc3293e4f28c2d65765902e72d52371942866dd33168a0ff954e4399000c54451ccfc6a5bff89c5ccd515493df8d6c44e56d9a8cac88b6d313a8c4e022f150537b0e0e1304cf0f8ad1b38dc5bc51790de65608eb8323faf5d303aff68b61db794ba87b4751034b05549410011dec780a45bc1ea2029e841c919358f67e41b33aff8"}, @ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'etf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'etf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xafd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@^[;\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}\\\x9d\'&%[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '/'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xf1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x3d, 0x2, '\x00\xd16\xc6WqkEl`\xf3\a<\x14b\x90G|\x02\x87\xf7i\x10/\xd5.\x92\x8f\xea\x86Np\x0ej\xe5\x1f\xae\n\x8bU\x8cD\xae\x855\xf0O\x1c\xb1\xd1\xe2\xdc\xd0\xfe\x91~\r'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':\'%/^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']]$,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'etf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*%&{-}\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "126eff73d914fc4fa60e528b70201442c5ce815af594b8ae599950007c88191156e1e59d7dc6a6dcab9e2fc02e5a333a99d8449875b9c027057920db165644a758c5ddc342e16d97140d224f808171982989daeb74f63f3e38f78bca9168ee2834e9b49bfa045087e5faeb5605398cb68c0915a5566f582e768f64833ad94947e80d8da327c7f81348089c94060239872a6ff27ab8ef799530a8d31bc50183fdab5a2a112a3335ea3ffcddab9060f3a35255b76198f4d624cc76ea21e3e8087442154aecd802bd9d492bdfe89a4b8bbceb"}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "c19da9ee7240d72ec4154162afce0dc5314612e750cc4a0bb9fa8cd4e462d795a484ac73309a80310a7e21283423df830f17d2e0d8403c6e8dc321456f0b9bf854dba806353a680915febb78f0819b46e3d920a53b67862d94ec1eacefb1ba85284467db22d3c4f28d49d6d6de2ee765ff310c5180764e221cc9f6bc01dea7cd31811c7e31c4976be6903372d08519da9ebd551cf0c9f4"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-*@^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x62c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4040)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r16=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0)

422.675453ms ago: executing program 2 (id=5122):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)

309.260406ms ago: executing program 1 (id=5123):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x58, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x4]}}]}]}, 0x58}}, 0x0)

248.178329ms ago: executing program 4 (id=5124):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x300000}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='c r'], 0x9)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x50, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x300000}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10001}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) (async)
write$cgroup_devices(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='c r'], 0x9) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}}, 0x0) (async)

207.322227ms ago: executing program 3 (id=5125):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004340), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108ff070000fcdbdf2517000000480006804400040067636d28616573290000000000000000000000000000000000000000000000001c0000001be4f75693f04f32d191a4e05026ebffbd5ef8f7084654605723385f"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x1) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'wlan0\x00', @multicast}) (async)
r6 = socket$inet_sctp(0x2, 0x4, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @broadcast}], 0x20) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7) (async)
r8 = socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000440)=0x4) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r10=>0x0}) (async)
r11 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, r2, 0x303, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x24}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x480a0}, 0x4044044)
sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffe59, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff7, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}, @qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1b44}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

117.201169ms ago: executing program 0 (id=5126):
socket(0x2, 0x5, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) (async, rerun: 64)
r0 = socket$inet(0x2, 0x3, 0x4) (rerun: 64)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x27, 0x0}}], 0x1, 0x24008010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000013b194d83bf8479ab0000000000", @ANYRES32=0x0, @ANYBLOB="2a1004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

111.513098ms ago: executing program 1 (id=5127):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x96}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x48}}, 0x40801) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r3, 0x2f, 0x0, 0x0, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7800, 0xfffffff8, 0xffffff01}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100000c00b3313265b22af3b92e2300000004000000000000000000e9379476844a8d53"], 0x0, 0x26}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) (async, rerun: 64)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "35becb4662d39f0437"}]}, 0x24}}, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80)

110.073267ms ago: executing program 4 (id=5128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
tee(r5, r6, 0x81, 0x0)
close(0x4)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r3, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4040010)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000040)) (async)
tee(r5, r6, 0x81, 0x0) (async)
close(0x4) (async)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r3, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4040010) (async)

69.936876ms ago: executing program 1 (id=5129):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0xa)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000003600004400128009000100766c616e00000000340082800600010080000000280003800c00010000000000000000000c00010000000100070000000c000100000000000310000008000500dbdd9c1787772490eed0f81000807703b90865dbc4df91f05ae412ab34d0b23f14c6ca165b2ad23159d282d5b4dca209fd15324cbe576d3db953d87003310466d2739e83335394db20229f9134afb99078ca2ab51b3616df0e58af6d3ccad2acc2f46edab95f75244704066d98f86f6c51c95cfae31e20fd27d11f552c2b1a800957652afdaab0851fc6507d938b0b6b25d5cca16dbb61af34", @ANYRES32=r6, @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0)

0s ago: executing program 4 (id=5130):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5)
setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f00000008c0), 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf70}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)

kernel console output (not intermixed with test programs):

length.
[  219.588685][T16602] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004
[  219.698232][T16610] syzkaller1: entered promiscuous mode
[  219.791887][T16610] syzkaller1: entered allmulticast mode
[  219.797449][T16619] IPVS: Scheduler module ip_vs_@ not found
[  220.295663][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  220.304262][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  220.315738][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  220.338725][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  220.347160][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  220.378478][T16649] __nla_validate_parse: 30 callbacks suppressed
[  220.378498][T16649] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3096'.
[  220.397696][T16649] netlink: 'syz.3.3096': attribute type 1 has an invalid length.
[  220.408503][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'.
[  220.426752][T16646]  speed is unknown, defaulting to 1000
[  220.476329][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'.
[  220.535785][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'.
[  220.645966][T16658] vlan2: entered allmulticast mode
[  220.652149][T16658] bridge0: entered allmulticast mode
[  220.658095][T16658] bridge7: port 1(vlan2) entered blocking state
[  220.669208][T16658] bridge7: port 1(vlan2) entered disabled state
[  220.676974][T16675] nbd: must specify a size in bytes for the device
[  220.687724][T16658] vlan2: entered promiscuous mode
[  220.700223][T16675] nbd: must specify a size in bytes for the device
[  220.710436][T16675] nbd: must specify a size in bytes for the device
[  220.717730][T16675] nbd: must specify a size in bytes for the device
[  220.718172][T16658] bridge0: entered promiscuous mode
[  220.724952][T16675] nbd: must specify a size in bytes for the device
[  220.736650][T16675] nbd: must specify a size in bytes for the device
[  220.736983][T16672] veth0_to_bridge: entered promiscuous mode
[  220.744532][T16675] nbd: must specify a size in bytes for the device
[  220.758882][T16671] veth0_to_bridge: left promiscuous mode
[  220.797001][T16675] nbd: must specify a size in bytes for the device
[  220.800447][T16646] chnl_net:caif_netlink_parms(): no params data found
[  220.808518][T16675] nbd: must specify a size in bytes for the device
[  220.817317][T16675] nbd: must specify a size in bytes for the device
[  220.836553][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3106'.
[  220.879797][T16675] nbd: must specify a size in bytes for the device
[  220.890663][T16675] nbd: must specify a size in bytes for the device
[  220.908422][T16675] nbd: must specify a size in bytes for the device
[  220.915508][T16675] nbd: must specify a size in bytes for the device
[  220.922623][T16675] nbd: must specify a size in bytes for the device
[  220.929379][T16675] nbd: must specify a size in bytes for the device
[  220.940139][T16675] nbd: must specify a size in bytes for the device
[  220.947406][T16675] nbd: must specify a size in bytes for the device
[  220.954310][T16675] nbd: must specify a size in bytes for the device
[  220.975682][T16675] nbd: must specify a size in bytes for the device
[  220.992506][T16675] nbd: must specify a size in bytes for the device
[  220.999171][T16675] nbd: must specify a size in bytes for the device
[  221.005858][T16675] nbd: must specify a size in bytes for the device
[  221.014162][T16675] nbd: must specify a size in bytes for the device
[  221.020771][T16675] nbd: must specify a size in bytes for the device
[  221.023569][T16646] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.031426][T16675] nbd: must specify a size in bytes for the device
[  221.037194][T16646] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.041015][T16675] nbd: must specify a size in bytes for the device
[  221.049955][T16646] bridge_slave_0: entered allmulticast mode
[  221.057496][T16675] nbd: must specify a size in bytes for the device
[  221.062122][T16646] bridge_slave_0: entered promiscuous mode
[  221.070999][T16675] nbd: must specify a size in bytes for the device
[  221.075974][T16646] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.086845][T16646] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.091607][T16675] nbd: must specify a size in bytes for the device
[  221.094193][T16646] bridge_slave_1: entered allmulticast mode
[  221.100534][T16675] nbd: must specify a size in bytes for the device
[  221.108722][T16646] bridge_slave_1: entered promiscuous mode
[  221.116803][T16675] nbd: must specify a size in bytes for the device
[  221.147875][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'.
[  221.156800][T16709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3112'.
[  221.159278][T16675] nbd: must specify a size in bytes for the device
[  221.191098][T16709] veth0: entered promiscuous mode
[  221.216029][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.235011][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.254059][T16708] veth0: left promiscuous mode
[  221.265300][T16713] netlink: 'syz.1.3113': attribute type 1 has an invalid length.
[  221.281190][T16713] netlink: 'syz.1.3113': attribute type 11 has an invalid length.
[  221.292313][T16713] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3113'.
[  221.324610][T16646] team0: Port device team_slave_0 added
[  221.345615][T16646] team0: Port device team_slave_1 added
[  221.405044][T16724] lo: entered promiscuous mode
[  221.419081][T16724] tunl0: entered promiscuous mode
[  221.428480][T16724] gre0: entered promiscuous mode
[  221.447179][T16724] gretap0: entered promiscuous mode
[  221.458027][T16724] erspan0: entered promiscuous mode
[  221.469362][T16724] ip_vti0: entered promiscuous mode
[  221.477826][T16724] ip6_vti0: entered promiscuous mode
[  221.486003][T16724] sit0: entered promiscuous mode
[  221.495591][T16724] ip6tnl0: entered promiscuous mode
[  221.502298][T16724] ip6gre0: entered promiscuous mode
[  221.509414][T16724] syz_tun: entered promiscuous mode
[  221.517398][T16724] ip6gretap0: entered promiscuous mode
[  221.525080][T16724] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.532377][T16724] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.542241][T16724] bridge0: entered promiscuous mode
[  221.550354][T16724] bond0: entered promiscuous mode
[  221.556253][T16724] bond_slave_0: entered promiscuous mode
[  221.563566][T16724] bond_slave_1: entered promiscuous mode
[  221.574996][T16724] team0: entered promiscuous mode
[  221.580208][T16724] team_slave_0: entered promiscuous mode
[  221.586788][T16724] team_slave_1: entered promiscuous mode
[  221.609728][T16724] dummy0: entered promiscuous mode
[  221.625777][T16724] nlmon0: entered promiscuous mode
[  221.635399][T16724] caif0: entered promiscuous mode
[  221.640720][T16724] batadv0: entered promiscuous mode
[  221.649110][T16724] vxcan0: entered promiscuous mode
[  221.655650][T16724] vxcan1: entered promiscuous mode
[  221.662686][T16724] veth0: entered promiscuous mode
[  221.670188][T16724] veth1: entered promiscuous mode
[  221.681063][T16724] wg0: entered promiscuous mode
[  221.688889][T16724] wg1: entered promiscuous mode
[  221.696253][T16724] wg2: entered promiscuous mode
[  221.703768][T16724] veth0_to_bridge: entered promiscuous mode
[  221.714339][T16724] veth1_to_bridge: entered promiscuous mode
[  221.724881][T16724] veth0_to_bond: entered promiscuous mode
[  221.736691][T16724] veth1_to_bond: entered promiscuous mode
[  221.744639][T16724] veth0_to_team: entered promiscuous mode
[  221.753997][T16724] veth1_to_team: entered promiscuous mode
[  221.764713][T16724] veth0_to_batadv: entered promiscuous mode
[  221.773900][T16724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.781766][T16724] batadv_slave_0: entered promiscuous mode
[  221.789391][T16724] veth1_to_batadv: entered promiscuous mode
[  221.798813][T16724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.806506][T16724] batadv_slave_1: entered promiscuous mode
[  221.814625][T16724] xfrm0: entered promiscuous mode
[  221.820769][T16724] veth0_to_hsr: entered promiscuous mode
[  221.828975][T16724] veth1_to_hsr: entered promiscuous mode
[  221.842122][T16724] hsr0: entered promiscuous mode
[  221.849446][T16724] veth1_virt_wifi: entered promiscuous mode
[  221.861077][T16724] veth0_virt_wifi: entered promiscuous mode
[  221.874804][T16724] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  221.889777][T16724] vlan1: entered promiscuous mode
[  221.896057][T16724] macvlan0: entered promiscuous mode
[  221.904156][T16724] macvlan1: entered promiscuous mode
[  221.910944][T16724] ipvlan0: entered promiscuous mode
[  221.916762][T16724] ipvlan1: entered promiscuous mode
[  221.926473][T16724] macvtap0: entered promiscuous mode
[  221.933327][T16724] macsec0: entered promiscuous mode
[  221.940245][T16724] geneve0: entered promiscuous mode
[  221.949398][T16724] geneve1: entered promiscuous mode
[  221.958303][T16724] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  221.970084][T16724] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode
[  221.978909][T16724] vlan0: left allmulticast mode
[  221.984137][T16724] veth0_vlan: left allmulticast mode
[  221.989724][T16724] macvtap1: left allmulticast mode
[  221.995944][T16724] netdevsim netdevsim1 eth0: entered promiscuous mode
[  222.003038][T16724] netdevsim netdevsim1 eth1: entered promiscuous mode
[  222.009903][T16724] netdevsim netdevsim1 eth2: entered promiscuous mode
[  222.017120][T16724] netdevsim netdevsim1 eth3: entered promiscuous mode
[  222.024137][T16724] bridge1: entered promiscuous mode
[  222.029404][T16724] veth2: entered promiscuous mode
[  222.034651][T16724] veth3: entered promiscuous mode
[  222.045267][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.052432][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.078821][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.094794][T16729] : entered promiscuous mode
[  222.099841][T16732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.107685][T16736] syzkaller0: entered promiscuous mode
[  222.123485][T16736] syzkaller0: entered allmulticast mode
[  222.140292][T16749] tipc: Resetting bearer <eth:syzkaller0>
[  222.161168][T14760] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.175267][T14760] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.185376][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.194950][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.224116][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.294779][T14760] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.313408][T14760] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.329295][T16749] tipc: Resetting bearer <eth:syzkaller0>
[  222.337039][T16749] tipc: Disabling bearer <eth:syzkaller0>
[  222.352367][T16756] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  222.405912][T16646] hsr_slave_0: entered promiscuous mode
[  222.414967][T16646] hsr_slave_1: entered promiscuous mode
[  222.420947][T16646] debugfs: 'hsr0' already exists in 'hsr'
[  222.427461][ T5871] Bluetooth: hci0: command tx timeout
[  222.444657][T16646] Cannot create hsr debugfs directory
[  222.472353][T16767]  speed is unknown, defaulting to 1000
[  222.478067][T16765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3126'.
[  222.602419][T16787] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3133'.
[  222.732847][T16800] IPVS: length: 8 != 1152
[  222.760785][T16802] team0: Device ip6gre1 is up. Set it down before adding it as a team port
[  222.816156][T16811] netlink: 'syz.3.3136': attribute type 5 has an invalid length.
[  223.029977][T16646] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  223.051286][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  223.059325][    C1] lec:lec_tx_timeout: lec0
[  223.063903][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  223.076868][T16646] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  223.107097][T16646] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  223.139777][T16646] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  223.175878][T16844] batadv_slave_1 (unregistering): left promiscuous mode
[  223.281098][T16844] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  223.418258][T16646] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.460002][T16646] 8021q: adding VLAN 0 to HW filter on device team0
[  223.486986][T14759] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.494169][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.538294][T14758] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.545463][T14758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.860899][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.037888][T16907] dvmrp0: entered allmulticast mode
[  224.198433][ T5927] IPVS: starting estimator thread 0...
[  224.209204][T16646] veth0_vlan: entered promiscuous mode
[  224.238106][T16646] veth1_vlan: entered promiscuous mode
[  224.298061][T16646] veth0_macvtap: entered promiscuous mode
[  224.311363][T16924] IPVS: using max 37 ests per chain, 88800 per kthread
[  224.320331][T16646] veth1_macvtap: entered promiscuous mode
[  224.357679][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.369136][T16932] bridge0: port 1(veth0_to_bridge) entered blocking state
[  224.378357][T16932] bridge0: port 1(veth0_to_bridge) entered disabled state
[  224.386122][T16932] veth0_to_bridge: entered allmulticast mode
[  224.393278][T16932] veth0_to_bridge: entered promiscuous mode
[  224.400509][T16932] bridge0: port 1(veth0_to_bridge) entered blocking state
[  224.407728][T16932] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  224.420082][T16932] netlink: 'syz.3.3170': attribute type 4 has an invalid length.
[  224.429420][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.449427][ T7469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.472231][ T7469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.490929][T16943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.502428][ T5871] Bluetooth: hci0: command tx timeout
[  224.511496][T16942] tipc: Disabling bearer <eth:syzkaller0>
[  224.528831][ T7469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.543131][T16946] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  224.549299][ T7469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.671064][T14758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.709957][T14758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.775971][ T7469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.804501][ T7469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.120047][T16999] netlink: 'syz.0.3193': attribute type 11 has an invalid length.
[  225.154941][T17003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.179290][T17003] netlink: 'syz.2.3195': attribute type 33 has an invalid length.
[  225.375681][T14760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  225.395251][T14760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  225.436112][T14760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  225.454631][T14760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  225.463476][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  225.470868][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  225.480504][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  225.497933][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  225.505525][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  225.531052][T17025]  speed is unknown, defaulting to 1000
[  225.810890][T17025] chnl_net:caif_netlink_parms(): no params data found
[  225.880168][T17062] __nla_validate_parse: 15 callbacks suppressed
[  225.880186][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3212'.
[  225.948189][T17025] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.966388][T17025] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.980259][T17025] bridge_slave_0: entered allmulticast mode
[  225.989902][T17025] bridge_slave_0: entered promiscuous mode
[  225.998490][T17025] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.008174][T17025] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.017236][T17025] bridge_slave_1: entered allmulticast mode
[  226.028533][T17025] bridge_slave_1: entered promiscuous mode
[  226.067652][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.085059][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.106692][T17081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3221'.
[  226.135323][T17025] team0: Port device team_slave_0 added
[  226.154710][T17025] team0: Port device team_slave_1 added
[  226.193878][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3224'.
[  226.210514][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.218436][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.249519][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.284638][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.300090][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.347043][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.347426][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'.
[  226.435940][T17025] hsr_slave_0: entered promiscuous mode
[  226.447167][T17025] hsr_slave_1: entered promiscuous mode
[  226.455708][T17025] debugfs: 'hsr0' already exists in 'hsr'
[  226.461458][T17025] Cannot create hsr debugfs directory
[  226.468980][T17103] netlink: 'syz.0.3229': attribute type 3 has an invalid length.
[  226.582999][ T5864] Bluetooth: hci0: command tx timeout
[  226.588502][T17108] mac80211_hwsim hwsim27 syzkaller0: Caught tx_queue_len zero misconfig
[  226.608523][T17025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.629547][T17025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.674863][T17025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.685993][T17025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.705715][T17119] wg2: entered promiscuous mode
[  226.710705][T17119] wg2: entered allmulticast mode
[  226.727830][T17025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.738465][T17025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.820695][T17025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.837182][T17025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.943790][T17025] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.953728][T17025] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.966426][T17025] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.976705][T17025] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.025009][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'.
[  227.055054][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'.
[  227.069960][T17025] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.093473][T17025] 8021q: adding VLAN 0 to HW filter on device team0
[  227.106731][T14759] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.113875][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.140451][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.147599][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.217157][T17162] netlink: 'syz.1.3248': attribute type 10 has an invalid length.
[  227.226917][T17162] batadv0: left promiscuous mode
[  227.236106][T17162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.247419][T17162] batadv0: entered promiscuous mode
[  227.258598][T17162] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  227.348688][T17025] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.395082][T17025] veth0_vlan: entered promiscuous mode
[  227.405605][T17025] veth1_vlan: entered promiscuous mode
[  227.415220][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3251'.
[  227.427764][T17025] veth0_macvtap: entered promiscuous mode
[  227.440836][T17025] veth1_macvtap: entered promiscuous mode
[  227.457870][T17025] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.476575][T17025] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.489691][T14788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.510667][T14788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.524199][T14760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.537209][ T7469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.541814][ T5864] Bluetooth: hci3: command tx timeout
[  227.577529][ T7469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.590969][ T7469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.610407][T14781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.619744][T14781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.853861][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'.
[  227.872465][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'.
[  227.892754][T17205] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3260'.
[  228.081297][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  228.089370][    C1] lec:lec_tx_timeout: lec0
[  228.093995][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  228.154348][T17215] netlink: 'syz.4.3265': attribute type 7 has an invalid length.
[  228.287555][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  228.304148][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  228.314182][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  228.326053][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  228.341898][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  228.410585][T17227]  speed is unknown, defaulting to 1000
[  228.606775][T17227] chnl_net:caif_netlink_parms(): no params data found
[  228.661932][ T5871] Bluetooth: hci0: command tx timeout
[  228.759297][T17268] geneve2: entered promiscuous mode
[  228.795582][T17227] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.805529][T17227] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.819164][T17227] bridge_slave_0: entered allmulticast mode
[  228.827286][T17227] bridge_slave_0: entered promiscuous mode
[  228.941198][T17227] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.951042][T17227] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.964906][T17227] bridge_slave_1: entered allmulticast mode
[  228.972853][T17227] bridge_slave_1: entered promiscuous mode
[  228.983738][T17279] geneve2: entered promiscuous mode
[  229.007444][T17284] vlan2: entered allmulticast mode
[  229.012860][T17284] bridge0: entered allmulticast mode
[  229.057523][T17227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.073763][T17227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.112550][T17227] team0: Port device team_slave_0 added
[  229.134886][T17227] team0: Port device team_slave_1 added
[  229.189544][T17227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.197277][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.224202][T17227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.246196][T17295] sch_fq: defrate 0 ignored.
[  229.258111][T17227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.266583][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.293024][T17227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.398066][T17227] hsr_slave_0: entered promiscuous mode
[  229.405225][T17227] hsr_slave_1: entered promiscuous mode
[  229.414931][T17227] debugfs: 'hsr0' already exists in 'hsr'
[  229.420679][T17227] Cannot create hsr debugfs directory
[  229.530277][T17322] netlink: 'syz.4.3301': attribute type 1 has an invalid length.
[  229.632503][ T5871] Bluetooth: hci3: command tx timeout
[  229.775069][T17227] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.860458][T17227] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  229.957058][T17227] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.016524][T17227] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.018111][T17371] netlink: 'syz.0.3316': attribute type 1 has an invalid length.
[  230.207969][T17383] ªªªªªª: renamed from vlan0 (while UP)
[  230.234685][T17227] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  230.254342][T17227] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  230.271146][T17227] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  230.290651][T17227] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  230.300838][T17387] netlink: 'syz.4.3320': attribute type 3 has an invalid length.
[  230.398537][T17227] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.420990][T17227] 8021q: adding VLAN 0 to HW filter on device team0
[  230.429040][ T5871] Bluetooth: hci1: command tx timeout
[  230.443928][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.451076][ T7469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.476387][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.483550][ T7469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.514852][T17406] netlink: 'syz.4.3324': attribute type 13 has an invalid length.
[  230.516368][T17227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.540507][T17406] lo: entered promiscuous mode
[  230.546246][T17406] lo: entered allmulticast mode
[  230.556196][T17406] tunl0: entered promiscuous mode
[  230.564131][T17406] tunl0: entered allmulticast mode
[  230.574285][T17406] gre0: entered promiscuous mode
[  230.580269][T17406] gre0: entered allmulticast mode
[  230.590486][T17406] gretap0: entered promiscuous mode
[  230.597020][T17406] gretap0: entered allmulticast mode
[  230.604537][T17406] gretap0: refused to change device tx_queue_len
[  230.610866][T17406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  230.747961][T17417] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  230.756283][ T5871] Bluetooth: hci0: command tx timeout
[  230.806282][T17227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.883042][T17227] veth0_vlan: entered promiscuous mode
[  230.895727][T17227] veth1_vlan: entered promiscuous mode
[  230.945004][T17227] veth0_macvtap: entered promiscuous mode
[  230.958509][T17227] veth1_macvtap: entered promiscuous mode
[  230.982429][T17227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.012410][T17227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.046325][T14759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.073868][T14759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.094654][T14759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.104987][T17445] __nla_validate_parse: 16 callbacks suppressed
[  231.105005][T17445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3335'.
[  231.108601][T17449] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3337'.
[  231.140414][T14759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.229803][T14785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.249321][T14785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.296227][ T7469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.300958][T17460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3341'.
[  231.308690][ T7469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.397502][T17469] netlink: 'syz.2.3263': attribute type 19 has an invalid length.
[  231.406845][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'.
[  231.431908][T17469] netlink: 'syz.2.3263': attribute type 19 has an invalid length.
[  231.434274][T14759] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.448374][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'.
[  231.453297][T14759] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.473635][T14759] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.477217][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'.
[  231.498625][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'.
[  231.501606][T14759] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.568181][T17480] openvswitch: netlink: Actions may not be safe on all matching packets
[  231.568897][T17482] openvswitch: netlink: Actions may not be safe on all matching packets
[  231.604520][T17480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3347'.
[  231.626556][T17482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3347'.
[  231.701828][ T5871] Bluetooth: hci3: command tx timeout
[  231.739190][T17490] netlink: 'syz.4.3350': attribute type 29 has an invalid length.
[  231.765217][T17489] tls_set_device_offload: netdev not found
[  231.775653][T17489] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3349'.
[  231.923904][T17504] pim6reg1: entered promiscuous mode
[  231.929650][T17504] pim6reg1: entered allmulticast mode
[  231.957314][T17506] tipc: Started in network mode
[  231.969633][T17506] tipc: Node identity 080211, cluster identity 4711
[  231.977942][T17506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.986211][T17506] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  231.994095][T17506] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  232.063490][T17506] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  232.186440][T17532] netlink: 'syz.4.3365': attribute type 1 has an invalid length.
[  232.292574][T17542] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.322417][T17542] tipc: Resetting bearer <eth:syzkaller0>
[  232.391981][T17555] Bluetooth: MGMT ver 1.23
[  232.424771][T17561] netlink: 'syz.4.3375': attribute type 1 has an invalid length.
[  232.443887][T17561] netlink: 'syz.4.3375': attribute type 9 has an invalid length.
[  232.506244][ T5864] Bluetooth: hci1: command tx timeout
[  232.518199][T17564] netlink: 'syz.2.3376': attribute type 5 has an invalid length.
[  232.535855][T17565] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  232.544632][T17565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.640465][T17585] openvswitch: netlink: Flow key attr not present in new flow.
[  232.664408][T17587] netlink: 'syz.1.3380': attribute type 10 has an invalid length.
[  232.762738][T17592] netlink: 'syz.0.3383': attribute type 3 has an invalid length.
[  232.943498][T17616] netlink: 'syz.2.3391': attribute type 16 has an invalid length.
[  232.954588][T17616] netlink: 'syz.2.3391': attribute type 17 has an invalid length.
[  232.995456][T17616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  233.033021][T16190] tipc: Node number set to 134353152
[  233.101357][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  233.109420][    C1] lec:lec_tx_timeout: lec0
[  233.113940][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  233.138199][T17635] netlink: 'syz.0.3396': attribute type 10 has an invalid length.
[  233.150693][T17635] 8021q: adding VLAN 0 to HW filter on device team0
[  233.173669][T17635] bond0: (slave team0): Enslaving as an active interface with an up link
[  233.215151][T17635] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  233.275032][T17635] 8021q: adding VLAN 0 to HW filter on device bond4
[  233.305808][T17658] bond_slave_0: entered promiscuous mode
[  233.311539][T17658] bond_slave_1: entered promiscuous mode
[  233.317213][T17658] syz_tun: entered promiscuous mode
[  233.327883][T17658] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  233.337999][T17658] bond4: (slave macvlan0): unknown ethtool speed (30000) for port 1 (set it to 0)
[  233.350101][T17658] bond4: (slave macvlan0): speed changed to 0 on port 1
[  233.369637][T17658] bond4: (slave macvlan0): Enslaving as a backup interface with an up link
[  233.414827][T17636] bond4: (slave macvlan1): Error -98 calling set_mac_address
[  233.446549][T17635] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  233.521153][T17672] openvswitch: netlink: IP tunnel TTL not specified.
[  233.781424][ T5864] Bluetooth: hci3: command tx timeout
[  233.912063][T17714] nbd: must specify at least one socket
[  234.065002][T17725] nftables ruleset with unbound chain
[  234.297035][T17736] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  234.328076][T17736] mac80211_hwsim hwsim35 wlan1: left allmulticast mode
[  234.346538][T17742] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.359456][T17742] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  234.393129][T17736] bridge_slave_0: left allmulticast mode
[  234.399178][T17736] bridge_slave_0: left promiscuous mode
[  234.405611][T17736] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.418333][T17736] bridge_slave_1: left allmulticast mode
[  234.421788][ T5871] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  234.424528][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout
[  234.436578][T17736] bridge_slave_1: left promiscuous mode
[  234.442501][T17736] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.453158][T17736] bond0: (slave bond_slave_0): Releasing backup interface
[  234.464357][T17736] bond0: (slave bond_slave_1): Releasing backup interface
[  234.475639][T17736] team0: Port device team_slave_0 removed
[  234.489935][T17736] team0: Port device team_slave_1 removed
[  234.496380][T17736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.504303][T17736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.512593][T17736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.520073][T17736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.577424][T17747] bond1: (slave bridge3): making interface the new active one
[  234.585561][ T5864] Bluetooth: hci1: command tx timeout
[  234.588459][T17747] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  234.642379][T17761] ip6gre0: entered promiscuous mode
[  234.652969][T17761] ip6gre0: entered allmulticast mode
[  234.887032][T17783] syz.0.3449 (17783) used obsolete PPPIOCDETACH ioctl
[  235.159943][T17809] wg2: left promiscuous mode
[  235.189090][T17809] erspan0: entered allmulticast mode
[  235.403150][T17846] pim6reg: entered allmulticast mode
[  235.427672][T17848] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  235.602699][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.609685][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.617148][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.624882][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.632663][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.639539][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.646767][T17873] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  235.675632][T17878] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.889232][T17899] bond0: entered promiscuous mode
[  235.897335][T17899] team0: entered promiscuous mode
[  235.903432][T17899] team_slave_0: entered promiscuous mode
[  235.909220][T17899] team_slave_1: entered promiscuous mode
[  235.917312][T17899] bond0: left promiscuous mode
[  235.925183][T17899] team0: left promiscuous mode
[  235.930212][T17899] team_slave_0: left promiscuous mode
[  235.939266][T17899] team_slave_1: left promiscuous mode
[  236.058559][T17915] ipvlan2: entered promiscuous mode
[  236.219794][T17936] __nla_validate_parse: 18 callbacks suppressed
[  236.219814][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'.
[  236.229712][T17938] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3494'.
[  236.237840][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'.
[  236.257288][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'.
[  236.267016][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'.
[  236.313090][T17941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3495'.
[  236.393915][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3498'.
[  236.395789][T17949] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  236.407094][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'.
[  236.419696][T17949] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  236.435958][T17948] debugfs: 'hsr1' already exists in 'hsr'
[  236.442580][T17948] Cannot create hsr debugfs directory
[  236.448137][T17948] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  236.461152][T17948] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.517624][T17952] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3500'.
[  236.530744][T17952] 8021q: VLANs not supported on gre0
[  236.590627][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'.
[  236.662189][ T5864] Bluetooth: hci1: command tx timeout
[  236.754963][T17979] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  236.817955][T17983] syzkaller0: entered promiscuous mode
[  236.837402][T17983] syzkaller0: entered allmulticast mode
[  236.939359][T17990] unknown channel width for channel at 909000KHz?
[  237.040411][T17996] validate_nla: 11 callbacks suppressed
[  237.040431][T17996] netlink: 'syz.0.3515': attribute type 4 has an invalid length.
[  237.110137][T18003] netlink: 'syz.3.3514': attribute type 13 has an invalid length.
[  237.197773][T18003] net_ratelimit: 2 callbacks suppressed
[  237.197784][T18003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.405407][T18027] netlink: 'syz.4.3524': attribute type 11 has an invalid length.
[  237.543041][T18038] !
: renamed from dummy0 (while UP)
[  237.596497][T18046] bond0: entered promiscuous mode
[  237.628581][T18046] bond_slave_0: entered promiscuous mode
[  237.650793][T18046] bond_slave_1: entered promiscuous mode
[  237.662273][T18054] netlink: 'syz.1.3533': attribute type 33 has an invalid length.
[  237.665026][T18046] batadv0: entered promiscuous mode
[  237.677151][T18046] debugfs: 'hsr1' already exists in 'hsr'
[  237.698592][T18046] Cannot create hsr debugfs directory
[  237.716473][T18046] hsr1: entered allmulticast mode
[  237.728520][T18046] bond0: entered allmulticast mode
[  237.734830][T18046] bond_slave_0: entered allmulticast mode
[  237.745074][T18046] bond_slave_1: entered allmulticast mode
[  237.750916][T18046] batadv0: entered allmulticast mode
[  237.758810][T18046] 8021q: adding VLAN 0 to HW filter on device hsr1
[  237.770717][T18046] bond0: left promiscuous mode
[  237.781836][T18046] bond_slave_0: left promiscuous mode
[  237.787441][T18046] bond_slave_1: left promiscuous mode
[  237.795186][T18046] batadv0: left promiscuous mode
[  237.808961][T18054] team0: left promiscuous mode
[  237.836561][T18061]  speed is unknown, defaulting to 1000
[  237.997286][T18074] netlink: 'syz.2.3539': attribute type 10 has an invalid length.
[  238.075811][T18074] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  238.121788][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  238.129871][    C1] lec:lec_tx_timeout: lec0
[  238.135119][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  238.236046][T18098] netlink: 'syz.3.3548': attribute type 1 has an invalid length.
[  238.296177][T18098] bond1: (slave bridge2): making interface the new active one
[  238.329615][T18098] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  238.346339][T18104] netlink: 'syz.1.3550': attribute type 12 has an invalid length.
[  238.423807][T18104] netlink: 'syz.1.3550': attribute type 29 has an invalid length.
[  238.432658][T18104] netlink: 'syz.1.3550': attribute type 1 has an invalid length.
[  238.606569][T18131] netlink: 'syz.0.3560': attribute type 1 has an invalid length.
[  238.650166][T18131] 8021q: adding VLAN 0 to HW filter on device bond5
[  238.659212][T18138] xt_policy: too many policy elements
[  239.111739][T18188] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  239.151113][T18190] netlink: 'syz.3.3576': attribute type 1 has an invalid length.
[  239.219742][T18199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  239.300008][T18208] veth3: entered promiscuous mode
[  239.306749][T18208] veth3: entered allmulticast mode
[  239.398261][T18216]  speed is unknown, defaulting to 1000
[  239.418913][T18219] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  239.594858][T18231] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  239.605570][T18231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.939348][T18220] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.946546][T18220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.954363][T18220] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.961509][T18220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.980494][T18220] team_slave_0: entered promiscuous mode
[  239.986269][T18220] team_slave_1: entered promiscuous mode
[  239.997923][T18220] 8021q: adding VLAN 0 to HW filter on device team0
[  240.007430][T18220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.918924][T18349] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.947704][T18349] 0ªî{X¹¦: renamed from gretap0
[  240.955908][T18349] 0ªî{X¹¦: entered allmulticast mode
[  240.968674][T18349] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  241.275576][T18383] lo: entered promiscuous mode
[  241.288888][T18383] tunl0: entered promiscuous mode
[  241.296674][T18383] gre0: entered promiscuous mode
[  241.346842][T18383] gretap0: entered promiscuous mode
[  241.365520][T18383] erspan0: entered promiscuous mode
[  241.379354][T18383] ip_vti0: entered promiscuous mode
[  241.389530][T18381] lo: left allmulticast mode
[  241.396001][T18381] tunl0: left allmulticast mode
[  241.401190][T18381] gre0: left allmulticast mode
[  241.426430][T18381] gretap0: left allmulticast mode
[  241.434594][T18381] erspan0: entered promiscuous mode
[  241.448806][T18381] ip_vti0: entered promiscuous mode
[  241.457499][T18381] ip6_vti0: entered promiscuous mode
[  241.469835][T18381] sit0: entered promiscuous mode
[  241.490233][T18381] ip6tnl0: entered promiscuous mode
[  241.503776][T18381] ip6gre0: entered promiscuous mode
[  241.517956][T18381] ip6gretap0: entered promiscuous mode
[  241.542833][T18381] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.550317][T18381] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.569354][T18381] bridge0: entered promiscuous mode
[  241.583521][T18381] bond0: entered promiscuous mode
[  241.589667][T18381] bond_slave_0: entered promiscuous mode
[  241.603865][T18381] bond_slave_1: entered promiscuous mode
[  241.629684][T18381] team0: entered promiscuous mode
[  241.635331][T18381] team_slave_0: entered promiscuous mode
[  241.641056][T18381] team_slave_1: entered promiscuous mode
[  241.652981][T18381] !
: entered promiscuous mode
[  241.670483][T18381] nlmon0: entered promiscuous mode
[  241.678390][T18381] caif0: entered promiscuous mode
[  241.687190][T18381] batadv0: entered promiscuous mode
[  241.697336][T18381] vxcan0: entered promiscuous mode
[  241.708983][T18381] vxcan1: entered promiscuous mode
[  241.719875][T18381] veth0: entered promiscuous mode
[  241.728212][T18381] veth1: entered promiscuous mode
[  241.737309][T18381] wg0: entered promiscuous mode
[  241.744803][T18381] wg1: entered promiscuous mode
[  241.752603][T18381] wg2: entered promiscuous mode
[  241.760123][T18381] veth0_to_bridge: entered promiscuous mode
[  241.780398][T18381] veth1_to_bridge: entered promiscuous mode
[  241.792474][T18381] veth0_to_bond: entered promiscuous mode
[  241.805675][T18381] veth1_to_bond: entered promiscuous mode
[  241.816485][T18381] veth0_to_team: entered promiscuous mode
[  241.874703][T18381] veth1_to_team: entered promiscuous mode
[  241.885833][T18381] veth0_to_batadv: entered promiscuous mode
[  241.898680][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.906520][T18381] batadv_slave_0: entered promiscuous mode
[  241.920844][T18381] veth1_to_batadv: entered promiscuous mode
[  241.934263][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.942781][T18381] batadv_slave_1: entered promiscuous mode
[  241.955978][T18381] xfrm0: entered promiscuous mode
[  241.964172][T18381] veth0_to_hsr: entered promiscuous mode
[  241.974787][T18381] veth1_to_hsr: entered promiscuous mode
[  241.986708][T18381] hsr0: entered promiscuous mode
[  241.999363][T18381] veth1_virt_wifi: entered promiscuous mode
[  242.008999][T18381] veth0_virt_wifi: entered promiscuous mode
[  242.027152][T18381] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  242.078873][T18381] ªªªªªª: entered promiscuous mode
[  242.085606][T18381] vlan1: entered promiscuous mode
[  242.091021][T18381] macvlan0: entered promiscuous mode
[  242.107390][T18381] macvlan1: entered promiscuous mode
[  242.124594][T18381] ipvlan0: entered promiscuous mode
[  242.130073][T18381] ipvlan1: entered promiscuous mode
[  242.147634][T18381] macvtap0: entered promiscuous mode
[  242.164999][T18381] macsec0: entered promiscuous mode
[  242.176618][T18381] geneve0: entered promiscuous mode
[  242.186692][T18381] geneve1: entered promiscuous mode
[  242.197213][T18381] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  242.209019][T18381] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  242.232910][T18381] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  242.249147][T18381] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  242.266437][T18381] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  242.287888][T18381] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  242.303038][T18381] bond1: entered promiscuous mode
[  242.308369][T18381] syztnl2: entered promiscuous mode
[  242.322837][T18381] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode
[  242.330288][T18381] macsec1: entered promiscuous mode
[  242.336555][T18381] ip6erspan0: entered promiscuous mode
[  242.347371][T18381] mac80211_hwsim hwsim39 wlan2: entered promiscuous mode
[  242.355386][T18392] __nla_validate_parse: 25 callbacks suppressed
[  242.355404][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'.
[  242.385120][T18395] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  242.438825][T18416] validate_nla: 3 callbacks suppressed
[  242.438842][T18416] netlink: 'syz.0.3642': attribute type 1 has an invalid length.
[  242.469655][T18416] netlink: 'syz.0.3642': attribute type 4 has an invalid length.
[  242.479049][T18416] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3642'.
[  242.500540][T14781] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.533403][T14781] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.554059][T18427] netlink: 'syz.3.3643': attribute type 4 has an invalid length.
[  242.575100][T14781] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.607203][T18432] netlink: 'syz.3.3643': attribute type 4 has an invalid length.
[  242.625524][T14781] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.708948][T18443] netlink: set zone limit has 8 unknown bytes
[  242.822939][ T5864] Bluetooth: hci1: command tx timeout
[  242.833586][T18460] IPVS: set_ctl: invalid protocol: 174 255.255.255.255:20000
[  242.942490][T18475] netlink: 'syz.3.3657': attribute type 3 has an invalid length.
[  243.036546][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  243.046739][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'.
[  243.082282][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  243.102895][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3660'.
[  243.140822][T18500] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3665'.
[  243.157450][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'.
[  243.184252][T18506] : renamed from hsr0
[  243.299102][T18512] netlink: 'syz.4.3668': attribute type 1 has an invalid length.
[  243.307870][T18512] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3668'.
[  243.436285][T18519] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3672'.
[  243.450969][T18519] netlink: 'syz.3.3672': attribute type 2 has an invalid length.
[  243.459090][T18519] nbd: must specify a device to reconfigure
[  243.608634][T18534] openvswitch: netlink: Tunnel attr 64 out of range max 16
[  243.662844][T18539] netlink: 'syz.2.3679': attribute type 1 has an invalid length.
[  244.236166][T18573] tipc: Invalid UDP bearer configuration
[  244.236205][T18573] tipc: Enabling of bearer <udp:siz2> rejected, failed to enable media
[  244.261238][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms
[  244.269289][    C1] lec:lec_tx_timeout: lec0
[  244.275634][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  244.490000][T18603] openvswitch: netlink: Flow key attr not present in new flow.
[  244.686366][T18630] netlink: 'syz.4.3706': attribute type 29 has an invalid length.
[  244.698460][T18630] netlink: 'syz.4.3706': attribute type 29 has an invalid length.
[  245.180276][T18668] ieee802154 phy1 wpan1: encryption failed: -22
[  245.308205][T18675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  245.320055][T18682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  245.992827][T18758] tipc: New replicast peer: 255.255.255.255
[  246.002362][T18758] tipc: Enabled bearer <udp:syz2>, priority 10
[  246.175861][T18771] 8021q: adding VLAN 0 to HW filter on device bond2
[  246.185677][T18771] team0: Failed to send options change via netlink (err -105)
[  246.194146][T18771] team0: Port device bond2 added
[  246.200059][T14788] team0: Failed to send port change of device bond2 via netlink (err -105)
[  246.225846][T18772] bpq0: entered promiscuous mode
[  246.260085][T18772] bpq0: left promiscuous mode
[  246.438118][T18805] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.445352][T18805] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.848235][T18851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.026781][T18869] pim6reg1: entered promiscuous mode
[  247.032630][T18869] pim6reg1: entered allmulticast mode
[  247.870338][T18891] validate_nla: 15 callbacks suppressed
[  247.870358][T18891] netlink: 'syz.0.3786': attribute type 1 has an invalid length.
[  247.920471][T18878] __nla_validate_parse: 34 callbacks suppressed
[  247.920489][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  247.940657][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3789'.
[  247.964951][T18891] 8021q: adding VLAN 0 to HW filter on device bond6
[  247.984772][T18895] vlan2: entered promiscuous mode
[  247.994720][T18898] vlan0: entered promiscuous mode
[  247.999780][T18898] bond6: entered promiscuous mode
[  248.005243][T18898] vlan0: entered allmulticast mode
[  248.010366][T18898] bond6: entered allmulticast mode
[  248.123569][T18906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.134229][T18906] netlink: 'syz.1.3793': attribute type 11 has an invalid length.
[  248.153480][T18906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3793'.
[  248.164780][T18906] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  248.315217][T18917] netlink: 'syz.3.3797': attribute type 13 has an invalid length.
[  248.333766][T18930] netlink: 'syz.1.3800': attribute type 11 has an invalid length.
[  248.342084][T18917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.348695][T18930] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3800'.
[  248.393696][T18931] bond0: (slave syz_tun): Releasing backup interface
[  248.475121][T18405] IPVS: starting estimator thread 0...
[  248.482176][T18941] IPVS: set_ctl: invalid protocol: 103 100.1.0.254:20001
[  248.572527][T18942] IPVS: using max 44 ests per chain, 105600 per kthread
[  248.804719][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'.
[  248.937126][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3819'.
[  249.013279][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3820'.
[  249.066195][T19001] tipc: Started in network mode
[  249.079596][T19001] tipc: Node identity 080211, cluster identity 4711
[  249.087128][T19001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.097641][T19001] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  249.183579][T19009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3826'.
[  249.364691][T19030] netlink: zone id is out of range
[  249.420676][T19035] IPVS: Error joining to the multicast group
[  249.430435][T19022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3825'.
[  249.467735][T19030] netlink: zone id is out of range
[  249.523065][T19030] netlink: zone id is out of range
[  249.546317][T19030] netlink: zone id is out of range
[  249.566958][T19030] netlink: del zone limit has 4 unknown bytes
[  249.693918][T19057] tipc: New replicast peer: 255.255.255.255
[  249.700175][T19057] tipc: Enabled bearer <udp:s>, priority 10
[  249.742605][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3844'.
[  249.889145][T19081] syz.4.3847: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  249.906337][T19081] CPU: 1 UID: 0 PID: 19081 Comm: syz.4.3847 Not tainted syzkaller #0 PREEMPT(full) 
[  249.906363][T19081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.906374][T19081] Call Trace:
[  249.906381][T19081]  <TASK>
[  249.906389][T19081]  dump_stack_lvl+0x189/0x250
[  249.906416][T19081]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.906435][T19081]  ? __pfx__printk+0x10/0x10
[  249.906455][T19081]  ? lock_release+0x4b/0x3e0
[  249.906480][T19081]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  249.906500][T19081]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  249.906521][T19081]  warn_alloc+0x214/0x310
[  249.906545][T19081]  ? stack_depot_save_flags+0x40/0x860
[  249.906568][T19081]  ? __pfx_warn_alloc+0x10/0x10
[  249.906591][T19081]  ? kasan_save_track+0x4f/0x80
[  249.906611][T19081]  ? xskq_create+0x56/0x170
[  249.906631][T19081]  ? xsk_init_queue+0xb0/0x110
[  249.906650][T19081]  ? xsk_setsockopt+0x4dc/0x8d0
[  249.906668][T19081]  ? do_sock_setsockopt+0x17c/0x1b0
[  249.906684][T19081]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  249.906699][T19081]  ? do_syscall_64+0xfa/0x3b0
[  249.906721][T19081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.906742][T19081]  __vmalloc_node_range_noprof+0x125/0x12f0
[  249.906778][T19081]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  249.906802][T19081]  ? xskq_create+0x56/0x170
[  249.906823][T19081]  ? __kasan_kmalloc+0x93/0xb0
[  249.906845][T19081]  vmalloc_user_noprof+0xad/0xf0
[  249.906867][T19081]  ? xskq_create+0xbf/0x170
[  249.906887][T19081]  xskq_create+0xbf/0x170
[  249.906907][T19081]  xsk_init_queue+0xb0/0x110
[  249.906925][T19081]  xsk_setsockopt+0x4dc/0x8d0
[  249.906944][T19081]  ? __pfx_xsk_setsockopt+0x10/0x10
[  249.906964][T19081]  ? __pfx_aa_sk_perm+0x10/0x10
[  249.906987][T19081]  ? lock_release+0x4b/0x3e0
[  249.907009][T19081]  ? aa_sock_opt_perm+0xff/0x1b0
[  249.907027][T19081]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  249.907045][T19081]  ? __pfx_xsk_setsockopt+0x10/0x10
[  249.907065][T19081]  do_sock_setsockopt+0x17c/0x1b0
[  249.907083][T19081]  __x64_sys_setsockopt+0x13f/0x1b0
[  249.907102][T19081]  do_syscall_64+0xfa/0x3b0
[  249.907125][T19081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.907141][T19081]  ? clear_bhb_loop+0x60/0xb0
[  249.907165][T19081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.907187][T19081] RIP: 0033:0x7fe311d8ebe9
[  249.907203][T19081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.907219][T19081] RSP: 002b:00007fe30fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  249.907238][T19081] RAX: ffffffffffffffda RBX: 00007fe311fb5fa0 RCX: 00007fe311d8ebe9
[  249.907251][T19081] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  249.907262][T19081] RBP: 00007fe311e11e19 R08: 0000000000000004 R09: 0000000000000000
[  249.907274][T19081] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.907285][T19081] R13: 00007fe311fb6038 R14: 00007fe311fb5fa0 R15: 00007ffeabcd41e8
[  249.907305][T19081]  </TASK>
[  249.907357][T19081] Mem-Info:
[  250.018532][T19090] netlink: 'syz.3.3852': attribute type 23 has an invalid length.
[  250.023324][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  250.023348][    C1] lec:lec_tx_timeout: lec0
[  250.023916][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  250.074231][T19081] active_anon:10695 inactive_anon:0 isolated_anon:0
[  250.074231][T19081]  active_file:2884 inactive_file:39926 isolated_file:0
[  250.074231][T19081]  unevictable:768 dirty:63 writeback:0
[  250.074231][T19081]  slab_reclaimable:13117 slab_unreclaimable:156361
[  250.074231][T19081]  mapped:28942 shmem:1381 pagetables:1018
[  250.074231][T19081]  sec_pagetables:0 bounce:0
[  250.074231][T19081]  kernel_misc_reclaimable:0
[  250.074231][T19081]  free:1256701 free_pcp:14031 free_cma:0
[  250.074278][T19081] Node 0 active_anon:42780kB inactive_anon:0kB active_file:11536kB inactive_file:159504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115768kB dirty:248kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16288kB pagetables:3952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.074320][T19081] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.074363][T19081] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.074415][T19081] lowmem_reserve[]: 0 2497 2499 2499 2499
[  250.074451][T19081] Node 0 DMA32 free:1119892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42732kB inactive_anon:0kB active_file:11536kB inactive_file:157936kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:40076kB local_pcp:19756kB free_cma:0kB
[  250.074506][T19081] lowmem_reserve[]: 0 0 1 1 1
[  250.074540][T19081] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  250.074591][T19081] lowmem_reserve[]: 0 0 0 0 0
[  250.074625][T19081] Node 1 Normal free:3891540kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16032kB local_pcp:6848kB free_cma:0kB
[  250.074679][T19081] lowmem_reserve[]: 0 0 0 0 0
[  250.074714][T19081] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  250.074830][T19081] Node 0 DMA32: 273*4kB (ME) 122*8kB (UM) 34*16kB (UME) 43*32kB (UME) 64*64kB (UME) 20*128kB (M) 13*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 8*2048kB (UME) 263*4096kB (UM) = 1119892kB
[  250.074982][T19081] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 
[  250.254934][T19103] bridge0: port 3(batadv1) entered blocking state
[  250.299656][T19081] 0*2048kB 0*4096kB = 12kB
[  250.299689][T19081] Node 1 Normal: 177*4kB (UE) 56*8kB (UME) 49*16kB (UME) 76*32kB (UME) 23*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3891540kB
[  250.299846][T19081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.299862][T19081] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  250.299877][T19081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.299892][T19081] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  250.299907][T19081] 44188 total pagecache pages
[  250.299915][T19081] 0 pages in swap cache
[  250.299929][T19081] Free swap  = 124996kB
[  250.299937][T19081] Total swap = 124996kB
[  250.299945][T19081] 2097051 pages RAM
[  250.299953][T19081] 0 pages HighMem/MovableOnly
[  250.299960][T19081] 425660 pages reserved
[  250.299967][T19081] 0 pages cma reserved
[  250.306058][T19105] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  250.366320][T19103] bridge0: port 3(batadv1) entered disabled state
[  250.676942][T19103] batadv1: entered allmulticast mode
[  250.686505][T19103] batadv1: entered promiscuous mode
[  250.752377][T14785] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  250.762075][T14785] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  250.791558][ T5914] tipc: Node number set to 134353152
[  250.965908][T19128] syzkaller0: entered promiscuous mode
[  250.971903][T19128] syzkaller0: entered allmulticast mode
[  250.988973][T19132] openvswitch: netlink: Flow actions attr not present in new flow.
[  251.068762][T19138] openvswitch: netlink: IPv6 tunnel dst address is zero
[  251.347817][T19156] 
: renamed from bridge_slave_0
[  251.511002][T19172]  speed is unknown, defaulting to 1000
[  251.571016][T19179] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003
[  251.589374][T19180] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003
[  251.674227][T19179] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  251.691011][T19179] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  251.802759][T19195] xt_socket: unknown flags 0x50
[  251.908359][T19210] netlink: 'syz.1.3892': attribute type 2 has an invalid length.
[  252.608430][T19287] veth5: entered allmulticast mode
[  252.684782][T19293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.692087][T19293] IPv6: NLM_F_CREATE should be set when creating new route
[  252.702421][T19293] netlink: 'syz.0.3916': attribute type 7 has an invalid length.
[  252.710798][T19293] netlink: 'syz.0.3916': attribute type 8 has an invalid length.
[  252.726637][T19295] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  252.763246][T19301] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  252.783568][T19301] netlink: 'syz.4.3918': attribute type 1 has an invalid length.
[  252.829757][T19301] 8021q: adding VLAN 0 to HW filter on device bond2
[  252.865918][T19308] bond2 (unregistering): Released all slaves
[  252.956718][T19320] __nla_validate_parse: 24 callbacks suppressed
[  252.956738][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3926'.
[  253.043271][T19327] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1
[  253.057140][T19330] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3929'.
[  253.080974][T19337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3930'.
[  253.104710][T19330] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3929'.
[  253.132753][T19339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3927'.
[  253.139583][T19341] netlink: 'syz.4.3931': attribute type 3 has an invalid length.
[  253.155369][T19344] netlink: 'syz.3.3933': attribute type 5 has an invalid length.
[  253.165050][T19341] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.3931'.
[  253.319000][T19363] netlink: 'syz.4.3937': attribute type 11 has an invalid length.
[  253.478410][T19386] netlink: 'syz.1.3944': attribute type 1 has an invalid length.
[  253.501063][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3945'.
[  253.564482][T19386] 8021q: adding VLAN 0 to HW filter on device bond2
[  253.573516][T19393] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  253.576713][T19387] netlink: 'syz.1.3944': attribute type 1 has an invalid length.
[  253.610948][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'.
[  253.679270][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'.
[  253.684989][T19386] bond2: (slave veth1): Enslaving as an active interface with a down link
[  253.689620][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3949'.
[  253.709900][T19406] veth0_to_bond: left promiscuous mode
[  253.719269][T19406] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  253.772882][T19408] IPVS: persistence engine module ip_vs_pe_À
 not found
[  253.798061][T19411] netlink: 'syz.4.3953': attribute type 4 has an invalid length.
[  254.036210][T19437] sctp: [Deprecated]: syz.4.3962 (pid 19437) Use of int in max_burst socket option deprecated.
[  254.036210][T19437] Use struct sctp_assoc_value instead
[  254.174123][T19460] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  254.233039][T19469] syzkaller1: entered promiscuous mode
[  254.238628][T19469] syzkaller1: entered allmulticast mode
[  254.242219][T19475] netlink: 'syz.2.3973': attribute type 10 has an invalid length.
[  254.246589][T19469] syzkaller1: left promiscuous mode
[  254.257456][T19469] syzkaller1: left allmulticast mode
[  254.274117][T19476] netlink: 'syz.4.3972': attribute type 1 has an invalid length.
[  254.298602][T19475] team0: Device hsr_slave_0 failed to register rx_handler
[  254.366935][T19480] geneve2: entered promiscuous mode
[  254.375475][T19480] geneve2: entered allmulticast mode
[  254.383622][T14758] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  254.397735][T14758] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  254.428346][T14758] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  254.447856][T14758] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  254.467068][T19491] nbd: must specify a device to reconfigure
[  254.567358][T19491] IPVS: set_ctl: invalid protocol: 47 172.20.20.25:20003
[  254.805697][T19509] syzkaller0: entered promiscuous mode
[  254.812399][T19509] syzkaller0: entered allmulticast mode
[  255.046056][T19542] blkio.reset_stats is deprecated
[  255.071309][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  255.079353][    C1] lec:lec_tx_timeout: lec0
[  255.085205][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  255.135719][T19554] netlink: 'syz.2.3998': attribute type 23 has an invalid length.
[  255.462208][ T7469] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.483824][ T7469] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.508831][ T7469] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.527188][ T7469] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.598969][T19591] netlink: 'syz.2.4011': attribute type 1 has an invalid length.
[  255.640523][T19591] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  255.664866][T19597] net_ratelimit: 1 callbacks suppressed
[  255.664884][T19597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.681125][T19591] veth3: entered promiscuous mode
[  255.692408][T19591] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  255.702205][ T7469] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  255.713457][T19591] 8021q: adding VLAN 0 to HW filter on device bond3
[  255.778060][T19611] syzkaller1: entered promiscuous mode
[  255.789032][T19611] syzkaller1: entered allmulticast mode
[  255.805708][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.822561][T14758] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  256.016300][T19631] syzkaller0: entered promiscuous mode
[  256.030138][T19631] syzkaller0: entered allmulticast mode
[  256.171051][T19637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  256.248006][T19669] dummy0: default FDB implementation only supports local addresses
[  256.357438][T19678] syzkaller0: entered promiscuous mode
[  256.367321][T19678] syzkaller0: entered allmulticast mode
[  256.376113][T19670] syzkaller1: entered promiscuous mode
[  256.392536][T19670] syzkaller1: entered allmulticast mode
[  256.414930][T19662] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  256.485992][T19684] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  257.032191][T19748] bond4: (slave gretap0): making interface the new active one
[  257.044767][T19748] bond4: (slave gretap0): Enslaving as an active interface with an up link
[  258.037226][T19799] 8021q: adding VLAN 0 to HW filter on device batadv1
[  258.045810][T19799] team0: Port device batadv1 added
[  258.308033][T19816] validate_nla: 6 callbacks suppressed
[  258.308053][T19816] netlink: 'syz.1.4079': attribute type 2 has an invalid length.
[  258.326484][T19816] netlink: 'syz.1.4079': attribute type 2 has an invalid length.
[  258.334647][T19816] netlink: 'syz.1.4079': attribute type 2 has an invalid length.
[  258.347971][T19816] netlink: 'syz.1.4079': attribute type 2 has an invalid length.
[  258.355746][T19816] netlink: 'syz.1.4079': attribute type 1 has an invalid length.
[  258.367589][T19816] netlink: 'syz.1.4079': attribute type 1 has an invalid length.
[  258.375782][T19816] netlink: 'syz.1.4079': attribute type 1 has an invalid length.
[  258.389844][T19816] netlink: 'syz.1.4079': attribute type 1 has an invalid length.
[  259.094546][T19820] __nla_validate_parse: 29 callbacks suppressed
[  259.094565][T19820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4080'.
[  260.091439][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  260.099482][    C1] lec:lec_tx_timeout: lec0
[  260.104025][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  260.499643][T19825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4082'.
[  260.570296][T19829] wireguard: wg1: Could not create IPv4 socket
[  260.585556][T19829] wg1: entered allmulticast mode
[  260.620258][ T5914] IPVS: starting estimator thread 0...
[  260.693790][T19843] bond5: entered promiscuous mode
[  260.698896][T19843] bond5: entered allmulticast mode
[  260.704635][T19843] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.715956][T19839] IPVS: using max 43 ests per chain, 103200 per kthread
[  260.819058][T19858] netlink: 'syz.2.4094': attribute type 1 has an invalid length.
[  260.840271][T19858] netlink: 'syz.2.4094': attribute type 2 has an invalid length.
[  260.853405][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.857924][T19855] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4093'.
[  260.871588][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.886289][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4093'.
[  260.911495][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.946502][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.956594][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.974990][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.984049][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.992494][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.000912][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.009427][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.017909][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.026567][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.035930][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.044717][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.054822][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.063358][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.071971][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.080357][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.090071][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.120421][T19877] bond2: entered promiscuous mode
[  261.129702][T19877] 8021q: adding VLAN 0 to HW filter on device bond2
[  261.137017][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.177211][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'.
[  261.186187][T19877] 8021q: adding VLAN 0 to HW filter on device bond2
[  261.186594][T19877] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  261.194084][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'.
[  261.210763][T19877] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  261.225773][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'.
[  261.239549][T19877] bond2: (slave wireguard0): making interface the new active one
[  261.247536][T19877] wireguard0: entered promiscuous mode
[  261.254945][T19877] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  261.264409][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.272895][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.285275][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.378371][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.389393][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.429750][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4102'.
[  261.436685][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.456697][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.474525][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.534659][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.549291][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.558310][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.568138][T19899] netem: incorrect gi model size
[  261.573321][T19899] netem: change failed
[  261.604017][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.613824][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4104'.
[  261.625549][T19863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.845389][T19905] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4107'.
[  262.070290][T19939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.226221][T19954] veth0_to_batadv: left promiscuous mode
[  262.486188][T19971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.508728][T19971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.526173][T19981] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode
[  262.536378][T19981] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode
[  262.547126][T19981] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.006662][T20021] xt_limit: Overflow, try lower: 604147548/4200216962
[  263.048982][T20025] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  263.071788][T20023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.103262][T20023] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  263.303422][T20045] bond0: entered allmulticast mode
[  263.329825][T20045] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  263.400222][T20058] pimreg3: entered allmulticast mode
[  263.505381][T20065] pim6reg1: entered promiscuous mode
[  263.519579][T20065] pim6reg1: entered allmulticast mode
[  263.820676][T20095] validate_nla: 5 callbacks suppressed
[  263.820694][T20095] netlink: 'syz.4.4160': attribute type 1 has an invalid length.
[  263.837221][T20095] netlink: 'syz.4.4160': attribute type 1 has an invalid length.
[  264.114924][T20123] __nla_validate_parse: 17 callbacks suppressed
[  264.114942][T20123] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4167'.
[  264.148638][T20119] 8021q: VLANs not supported on syzkaller1
[  264.171190][T20120] 8021q: VLANs not supported on syzkaller1
[  264.265791][T20135] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  264.401106][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4176'.
[  264.610965][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'.
[  264.658285][T20176] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  264.689020][T20176] bond7: (slave vcan1): Error -95 calling set_mac_address
[  264.739482][T20190] syz_tun: entered allmulticast mode
[  264.763869][T20188] syz_tun: left allmulticast mode
[  264.775410][T20192] netlink: 'syz.2.4188': attribute type 1 has an invalid length.
[  264.809292][T20192] 8021q: adding VLAN 0 to HW filter on device bond4
[  264.856066][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'.
[  264.856526][T20197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.062016][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4197'.
[  265.111299][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  265.119354][    C1] lec:lec_tx_timeout: lec0
[  265.123880][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  265.191053][T20219] bridge1: entered promiscuous mode
[  265.196958][T20219] bridge1: entered allmulticast mode
[  265.230375][T20219] tipc: Started in network mode
[  265.242693][T20219] tipc: Node identity fea1eb2696cd, cluster identity 4711
[  265.250117][T20219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.266498][T20232] lo: left promiscuous mode
[  265.272519][T20232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  265.373157][T20217] tipc: Resetting bearer <eth:syzkaller0>
[  265.375180][T20240] netlink: 'syz.3.4205': attribute type 1 has an invalid length.
[  265.387536][ T5868] Bluetooth: hci1: command 0x0405 tx timeout
[  265.393847][T20240] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4205'.
[  265.431165][T20217] tipc: Disabling bearer <eth:syzkaller0>
[  265.474952][ T5871] block nbd3: Receive control failed (result -32)
[  265.574102][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'.
[  265.585455][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'.
[  265.637499][T20256] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  265.649620][T20241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4204'.
[  265.686560][T20256] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  265.801042][T20271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4212'.
[  265.814750][T20271] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  265.847050][T20271] bond5: entered promiscuous mode
[  265.852654][T20271] bond5: entered allmulticast mode
[  265.858338][T20271] 8021q: adding VLAN 0 to HW filter on device bond5
[  265.976132][T20285] openvswitch: netlink: Flow actions attr not present in new flow.
[  266.313004][T20302] netlink: 'syz.3.4220': attribute type 11 has an invalid length.
[  266.418105][T14758] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  266.577894][T20338] netlink: 'syz.4.4229': attribute type 6 has an invalid length.
[  266.588192][T20338] netlink: 'syz.4.4229': attribute type 5 has an invalid length.
[  266.657652][T20344] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004
[  266.690439][T20344] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003
[  267.197284][T20366] bond0: entered promiscuous mode
[  267.206519][T20366] bond_slave_0: entered promiscuous mode
[  267.214056][T20366] bond_slave_1: entered promiscuous mode
[  267.257285][T20366] bond0: left promiscuous mode
[  267.265882][T20370] netlink: 'syz.4.4237': attribute type 32 has an invalid length.
[  267.274503][T20366] bond_slave_0: left promiscuous mode
[  267.287987][T20366] bond_slave_1: left promiscuous mode
[  267.308816][T20374] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  267.517633][T20397] batadv_slave_0: entered promiscuous mode
[  267.674148][T20396] batadv_slave_0: left promiscuous mode
[  267.829759][T20421] netlink: 'syz.3.4247': attribute type 9 has an invalid length.
[  267.875597][T20427] nbd: must specify an index to disconnect
[  267.996802][T20442] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  268.234627][T20460] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613)
[  268.272368][T20460] netlink: 'syz.3.4255': attribute type 10 has an invalid length.
[  268.298262][T20460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.354228][T20460] batadv0: entered allmulticast mode
[  268.392093][T20460] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  268.858645][T20516] netlink: 'syz.1.4269': attribute type 1 has an invalid length.
[  268.870091][T20516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.997882][T20529] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  269.009501][T20529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.139590][T20541] __nla_validate_parse: 21 callbacks suppressed
[  269.139608][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4277'.
[  269.191132][T20547] sctp: [Deprecated]: syz.4.4280 (pid 20547) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.191132][T20547] Use struct sctp_sack_info instead
[  269.219056][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4277'.
[  269.255155][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4282'.
[  269.276888][T20552] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4282'.
[  269.298179][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4282'.
[  269.318015][T20561] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4285'.
[  269.330156][T20561] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4285'.
[  269.343742][T20553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4282'.
[  269.343787][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4286'.
[  269.366975][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4282'.
[  269.501598][T20575] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  269.669252][T20594] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  269.683822][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.690720][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.697920][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.720495][T20594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  269.726521][T20591]  speed is unknown, defaulting to 1000
[  269.756617][T20591] syzkaller0 speed is unknown, defaulting to 1000
[  269.773504][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.807279][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.820022][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.842982][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.873350][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.904781][T20606] bond8: entered promiscuous mode
[  269.910075][T20606] bond8: entered allmulticast mode
[  269.916730][T20606] 8021q: adding VLAN 0 to HW filter on device bond8
[  269.926321][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.938860][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.952144][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  269.974593][T20594] syzkaller0 speed is unknown, defaulting to 1000
[  270.499631][T20663] netlink: 'syz.2.4318': attribute type 1 has an invalid length.
[  270.901227][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  270.909300][    C1] lec:lec_tx_timeout: lec0
[  270.914453][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  271.223084][T20721] net veth1_virt_wifi .: renamed from virt_wifi0
[  271.466999][T20754] syzkaller1: entered promiscuous mode
[  271.492816][T20754] syzkaller1: entered allmulticast mode
[  272.033653][T20767] netlink: 'syz.1.4351': attribute type 10 has an invalid length.
[  272.052622][T14788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.060482][T14788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.356391][T20822] netlink: 'syz.1.4364': attribute type 1 has an invalid length.
[  272.373757][T20817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.404468][T20822] gretap1: entered promiscuous mode
[  272.582773][T20848] netlink: 'syz.2.4372': attribute type 9 has an invalid length.
[  272.590798][T20848] netlink: 'syz.2.4372': attribute type 9 has an invalid length.
[  272.694969][T20857] lo: left promiscuous mode
[  272.715350][T20857] tunl0: left promiscuous mode
[  272.725807][T20857] gre0: left promiscuous mode
[  272.738048][T20857] gretap0: left promiscuous mode
[  272.744708][T20857] erspan0: left promiscuous mode
[  272.761639][T20857] ip_vti0: left promiscuous mode
[  272.769594][T20857] ip6_vti0: left promiscuous mode
[  272.776531][T20857] sit0: left promiscuous mode
[  272.784627][T20857] ip6tnl0: left promiscuous mode
[  272.790730][T20857] ip6gre0: left promiscuous mode
[  272.797087][T20857] ip6gretap0: left promiscuous mode
[  272.803829][T20857] bridge0: left promiscuous mode
[  272.823397][T20857] bond0: left promiscuous mode
[  272.839917][T20857] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.849790][T20857] team0: left promiscuous mode
[  272.859891][T20857] 8021q: adding VLAN 0 to HW filter on device team0
[  272.870176][T20857] !
: left promiscuous mode
[  272.880383][T20857] nlmon0: left promiscuous mode
[  272.910880][T20857] caif0: left promiscuous mode
[  272.916944][T20857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.969620][ T7469] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  273.305380][T20911] netlink: 'syz.4.4389': attribute type 10 has an invalid length.
[  273.314045][T20911] team0: Device hsr_slave_0 failed to register rx_handler
[  273.402994][T20922] netlink: 'syz.4.4393': attribute type 10 has an invalid length.
[  273.411838][T20922] team0: Device hsr_slave_0 failed to register rx_handler
[  273.459932][T20925] ip6gre0: Master is either lo or non-ether device
[  273.542694][T20927] can: request_module (can-proto-0) failed.
[  273.825813][T20960] netlink: 'syz.4.4403': attribute type 3 has an invalid length.
[  273.934765][T20960]  speed is unknown, defaulting to 1000
[  273.967897][T20960] syzkaller0 speed is unknown, defaulting to 1000
[  274.207890][T20990] __nla_validate_parse: 24 callbacks suppressed
[  274.207909][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4410'.
[  274.319925][T20990] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4410'.
[  274.553553][T21030] netlink: 'syz.0.4421': attribute type 1 has an invalid length.
[  274.574569][T21030] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4421'.
[  274.603420][T21038] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4424'.
[  275.144855][T21079] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4437'.
[  275.188402][T21086] netlink: 'syz.3.4439': attribute type 4 has an invalid length.
[  275.290877][T21099] xt_time: invalid argument - start or stop time greater than 23:59:59
[  275.310446][T21097] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4440'.
[  275.325751][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4443'.
[  275.338149][T21097] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4440'.
[  275.438860][T21113] netlink: 'syz.0.4444': attribute type 7 has an invalid length.
[  275.668456][T21134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4449'.
[  275.686392][T21136] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4452'.
[  275.737432][T21140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.838448][T21159] netlink: 'syz.4.4457': attribute type 27 has an invalid length.
[  275.848511][T21161] delete_channel: no stack
[  275.926348][T21169] netlink: 'syz.0.4461': attribute type 10 has an invalid length.
[  275.939065][T21169] bridge_slave_1: left allmulticast mode
[  275.944817][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  275.944841][    C1] lec:lec_tx_timeout: lec0
[  275.953309][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  275.964356][T21169] bridge_slave_1: left promiscuous mode
[  275.970001][T21169] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.979264][T21169] bridge_slave_1: entered promiscuous mode
[  275.986324][T21169] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  276.741377][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  276.828689][T21201] netlink: 'syz.4.4469': attribute type 1 has an invalid length.
[  276.871067][T21201] gretap1: entered promiscuous mode
[  276.879643][T21201] bond3: (slave gretap1): making interface the new active one
[  276.888845][T21201] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  276.919396][T21201] macvlan2: entered promiscuous mode
[  276.924979][T21201] macvlan2: entered allmulticast mode
[  276.931005][T21201] bond3: entered promiscuous mode
[  276.937194][T21201] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  276.945695][T21201] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  276.963446][T21201] bond3: left promiscuous mode
[  277.317581][T21254] tipc: Started in network mode
[  277.334946][T21254] tipc: Node identity da768a546b7f, cluster identity 4711
[  277.347787][T21254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.587589][T21273] syzkaller1: entered promiscuous mode
[  277.600709][T21273] syzkaller1: entered allmulticast mode
[  277.643480][T21255] tipc: Disabling bearer <eth:syzkaller0>
[  277.855737][ T5927] IPVS: starting estimator thread 0...
[  277.951592][T21299] IPVS: using max 37 ests per chain, 88800 per kthread
[  277.975365][T21314] siw: device registration error -23
[  277.983465][T21310] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  278.006528][T21320] netlink: 'syz.3.4502': attribute type 1 has an invalid length.
[  278.027900][T21320] nbd: couldn't find a device at index 1
[  278.059938][T21322] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  278.079267][T21322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.199941][T21334] Unsupported ieee802154 address type: 0
[  278.343544][T21346] pim6reg1: entered promiscuous mode
[  278.360005][T21346] pim6reg1: entered allmulticast mode
[  278.380325][T21352] pim6reg1: entered promiscuous mode
[  278.386501][T21352] pim6reg1: entered allmulticast mode
[  278.471456][T21357] netlink: 'syz.2.4515': attribute type 33 has an invalid length.
[  279.378072][T21453] netlink: 'syz.2.4539': attribute type 3 has an invalid length.
[  279.402972][T21453] tipc: Enabled bearer <udp:s>, priority 10
[  279.426556][T21453] __nla_validate_parse: 21 callbacks suppressed
[  279.426577][T21453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4539'.
[  279.574936][T21468] Dead loop on virtual device ip6_vti0, fix it urgently!
[  279.600857][T21468] tap0: tun_chr_ioctl cmd 1074025676
[  279.617252][T21468] tap0: owner set to 0
[  279.625551][T21471] netlink: 'syz.1.4547': attribute type 4 has an invalid length.
[  279.642580][T21471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4547'.
[  279.677587][T21465] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4542'.
[  279.711496][T21465] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4542'.
[  279.741016][T21481] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4550'.
[  279.760782][T21481] vlan2: entered allmulticast mode
[  279.767215][T21481] gretap0: entered allmulticast mode
[  279.881555][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4553'.
[  279.918020][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'.
[  279.935189][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4554'.
[  280.079586][T21499] 8021q: VLANs not supported on ip_vti0
[  280.335942][T21510]  speed is unknown, defaulting to 1000
[  280.400839][T21510] syzkaller0 speed is unknown, defaulting to 1000
[  280.522293][ T5927] tipc: Node number set to 1751968550
[  280.671959][T21530] bridge0: entered promiscuous mode
[  280.679183][T21530] macsec2: entered promiscuous mode
[  280.693365][T21530] bridge0: port 4(macsec2) entered blocking state
[  280.730180][T21530] bridge0: port 4(macsec2) entered disabled state
[  280.768621][T21530] macsec2: entered allmulticast mode
[  280.799412][T21530] bridge0: entered allmulticast mode
[  280.835728][T21530] macsec2: left allmulticast mode
[  280.841316][T21530] bridge0: left allmulticast mode
[  280.851767][T21530] bridge0: left promiscuous mode
[  280.961247][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  280.969299][    C1] lec:lec_tx_timeout: lec0
[  280.973882][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  281.216248][T21556] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4573'.
[  281.233466][T21560] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4574'.
[  281.536265][T21583] netlink: 'syz.4.4581': attribute type 10 has an invalid length.
[  281.555382][T21583] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  281.571163][T21583] netlink: 'syz.4.4581': attribute type 29 has an invalid length.
[  281.652275][T21590] netlink: 'syz.4.4581': attribute type 29 has an invalid length.
[  281.912757][T21619] netlink: 'syz.3.4594': attribute type 1 has an invalid length.
[  281.925035][T14785] tipc: Subscription rejected, illegal request
[  282.032176][T21632] netlink: 'syz.0.4598': attribute type 1 has an invalid length.
[  282.156605][T21642] bond0: (slave bond_slave_1): Releasing backup interface
[  282.246937][T21654] netlink: 'syz.2.4602': attribute type 11 has an invalid length.
[  282.361000][T21668] netlink: 'syz.2.4608': attribute type 1 has an invalid length.
[  282.676541][T21696] veth0: entered promiscuous mode
[  282.685102][T21696] veth0: left promiscuous mode
[  282.723443][T21702] netlink: 'syz.2.4615': attribute type 9 has an invalid length.
[  283.135798][T21753] netlink: 'syz.4.4629': attribute type 9 has an invalid length.
[  284.251091][T21829] netlink: 'syz.0.4643': attribute type 33 has an invalid length.
[  284.297374][T21829] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  284.390821][T21845] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  284.412431][T21845] 0ªî{X¹¦: entered allmulticast mode
[  284.426386][T21845] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  284.578575][T21866] __nla_validate_parse: 23 callbacks suppressed
[  284.578592][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'.
[  284.591618][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  284.594947][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'.
[  284.613407][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4656'.
[  284.784139][T21886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4661'.
[  284.838407][T21892] sctp: [Deprecated]: syz.2.4663 (pid 21892) Use of int in max_burst socket option.
[  284.838407][T21892] Use struct sctp_assoc_value instead
[  284.910369][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4662'.
[  284.956683][T21906] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4665'.
[  285.036740][T21909] sock: sock_set_timeout: `syz.0.4666' (pid 21909) tries to set negative timeout
[  285.048919][T21910] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4667'.
[  285.109168][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'.
[  285.130557][T21916] validate_nla: 1 callbacks suppressed
[  285.130575][T21916] netlink: 'syz.2.4669': attribute type 1 has an invalid length.
[  285.147716][T21916] netlink: 'syz.2.4669': attribute type 2 has an invalid length.
[  285.160248][T21918] dvmrp1: entered allmulticast mode
[  285.169123][T21916] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4669'.
[  285.219708][T21922] netlink: 'syz.2.4671': attribute type 33 has an invalid length.
[  285.308374][T21926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4672'.
[  285.358524][T21933] netlink: 'syz.2.4675': attribute type 64 has an invalid length.
[  285.651133][T21960] netlink: 'syz.1.4685': attribute type 1 has an invalid length.
[  285.675425][T21960] netlink: 'syz.1.4685': attribute type 2 has an invalid length.
[  285.688406][T21960] netlink: 'syz.1.4685': attribute type 1 has an invalid length.
[  285.715244][T21964] bridge0: entered promiscuous mode
[  285.730560][T21964] macsec2: entered promiscuous mode
[  285.743062][T21964] bridge0: port 1(macsec2) entered blocking state
[  285.750055][T21964] bridge0: port 1(macsec2) entered disabled state
[  285.757252][T21964] macsec2: entered allmulticast mode
[  285.764968][T21964] bridge0: entered allmulticast mode
[  285.788477][T21970] netlink: 'syz.3.4687': attribute type 83 has an invalid length.
[  285.797598][T21964] macsec2: left allmulticast mode
[  285.802837][T21964] bridge0: left allmulticast mode
[  285.811046][T21964] bridge0: left promiscuous mode
[  285.862705][T21970] tipc: Started in network mode
[  285.885138][T21970] tipc: Node identity ac14140f, cluster identity 4711
[  285.912806][T21970] tipc: New replicast peer: 255.255.255.255
[  285.919140][T21970] tipc: Enabled bearer <udp:syz2>, priority 10
[  285.981290][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  285.989313][    C1] lec:lec_tx_timeout: lec0
[  285.994259][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  286.137153][T22002] netlink: 'syz.1.4699': attribute type 1 has an invalid length.
[  286.170085][T22005] delete_channel: no stack
[  286.185093][T22003] delete_channel: no stack
[  286.411030][   T30] audit: type=1804 audit(1755992029.612:11): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4704" name="/newroot/309/cgroup.controllers" dev="tmpfs" ino=1588 res=1 errno=0
[  286.440964][   T30] audit: type=1800 audit(1755992029.642:12): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4704" name="cgroup.controllers" dev="tmpfs" ino=1588 res=0 errno=0
[  286.512335][T22041] netlink: 'syz.0.4708': attribute type 28 has an invalid length.
[  286.911374][ T5862] tipc: Node number set to 2886997007
[  287.119231][T22088] xfrm0: left promiscuous mode
[  287.243437][T22098] sctp: [Deprecated]: syz.3.4726 (pid 22098) Use of int in max_burst socket option.
[  287.243437][T22098] Use struct sctp_assoc_value instead
[  287.310265][T22105] dvmrp0: left allmulticast mode
[  287.386210][T22116] nbd: couldn't find device at index 1048576
[  287.441542][T22125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.459412][T22126] dvmrp0: entered allmulticast mode
[  287.526573][T22136] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  291.001318][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  291.009330][    C1] lec:lec_tx_timeout: lec0
[  291.014047][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  296.021428][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  296.029442][    C1] lec:lec_tx_timeout: lec0
[  296.034044][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  299.941396][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  301.041454][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  301.049464][    C1] lec:lec_tx_timeout: lec0
[  301.054007][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  302.394042][T14781] bond0 (unregistering): Released all slaves
[  302.403674][T14781] bond1 (unregistering): Released all slaves
[  302.417033][T14781] bond2 (unregistering): Released all slaves
[  302.426317][T14781] bond3 (unregistering): Released all slaves
[  302.437303][T14781] bond4 (unregistering): Released all slaves
[  302.445933][T14781] bond5 (unregistering): Released all slaves
[  302.455905][T14781] bond6 (unregistering): Released all slaves
[  302.467444][T14781] bond7 (unregistering): Released all slaves
[  302.476637][T14781] bond8 (unregistering): Released all slaves
[  302.489711][T14781] bond9 (unregistering): Released all slaves
[  302.500758][T14781] bond10 (unregistering): Released all slaves
[  302.509736][T14781] bond11 (unregistering): Released all slaves
[  302.520798][T14781] bond12 (unregistering): (slave bond13): Releasing backup interface
[  302.529146][T14781] bond13 (unregistering): left promiscuous mode
[  302.536182][T14781] bond13 (unregistering): left allmulticast mode
[  302.543294][T14781] bond12 (unregistering): Released all slaves
[  302.556556][T14781] bond13 (unregistering): Released all slaves
[  302.618655][T14781] tipc: Disabling bearer <udp:syz1>
[  302.624031][T14781] tipc: Disabling bearer <udp:syz2>
[  302.629347][T14781] tipc: Disabling bearer <udp:s>
[  302.636729][T14781] tipc: Left network mode
[  302.838389][T14781] hsr_slave_0: left promiscuous mode
[  302.846061][T14781] hsr_slave_1: left promiscuous mode
[  302.851825][T14781] batman_adv: batadv0: Interface deactivated: dummy0
[  302.858489][T14781] batman_adv: batadv0: Removing interface: dummy0
[  302.867446][T14781] vlan0: left allmulticast mode
[  302.872334][T14781] veth0_vlan: left allmulticast mode
[  302.877616][T14781] vlan0: left promiscuous mode
[  302.917328][T14781] pimreg (unregistering): left allmulticast mode
[  303.045616][T14781] vcan0 (unregistering): left allmulticast mode
[  303.059518][T14781] lo (unregistering): left allmulticast mode
[  303.238821][T14781] IPVS: stop unused estimator thread 0...
[  306.061298][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  306.069311][    C1] lec:lec_tx_timeout: lec0
[  306.073820][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  308.450560][T22173]  speed is unknown, defaulting to 1000
[  308.462913][T22173] syzkaller0 speed is unknown, defaulting to 1000
[  308.498436][T22191] validate_nla: 3 callbacks suppressed
[  308.498452][T22191] netlink: 'syz.1.4746': attribute type 1 has an invalid length.
[  308.635872][T22193] bond9: entered promiscuous mode
[  308.641066][T22193] bond9: entered allmulticast mode
[  308.647036][T22193] 8021q: adding VLAN 0 to HW filter on device bond9
[  308.669680][T22191] bridge40: entered promiscuous mode
[  308.675685][T22191] bridge40: entered allmulticast mode
[  308.684952][T22191] __nla_validate_parse: 19 callbacks suppressed
[  308.684970][T22191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4746'.
[  308.817008][T22216] netlink: 'syz.1.4758': attribute type 25 has an invalid length.
[  308.894750][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'.
[  309.003080][T22229] netlink: 'syz.3.4762': attribute type 1 has an invalid length.
[  309.010973][T22229] netlink: 'syz.3.4762': attribute type 1 has an invalid length.
[  309.134427][T22249] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4767'.
[  309.149673][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'.
[  309.188808][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4768'.
[  309.523877][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4775'.
[  309.605147][T22296] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4778'.
[  309.685573][T22307] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4779'.
[  309.697713][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4779'.
[  309.836681][T22320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4783'.
[  309.975876][T22334] netlink: 'syz.2.4788': attribute type 1 has an invalid length.
[  310.222901][T22361] syzkaller1: entered promiscuous mode
[  310.228777][T22361] syzkaller1: entered allmulticast mode
[  310.249717][T22369] netlink: 'syz.2.4799': attribute type 10 has an invalid length.
[  310.312923][T22369] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  310.332960][T22369] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  310.359975][T14758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.394599][T14758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.434290][T22381] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 1, id = 0
[  310.447056][T22379] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002
[  310.494197][T22379] IPVS: stopping backup sync thread 22381 ...
[  310.791506][   T30] audit: type=1804 audit(1755992053.992:13): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4809" name="/newroot/324/memory.events" dev="tmpfs" ino=1662 res=1 errno=0
[  310.878048][   T30] audit: type=1800 audit(1755992053.992:14): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4809" name="memory.events" dev="tmpfs" ino=1662 res=0 errno=0
[  310.904067][T22416] netlink: 'syz.2.4813': attribute type 2 has an invalid length.
[  311.049116][T22425] hsr_slave_0: left promiscuous mode
[  311.057286][T22425] hsr_slave_1: left promiscuous mode
[  311.081386][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  311.089461][    C1] lec:lec_tx_timeout: lec0
[  311.104711][T22437] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  311.237369][T22451] bridge6: entered promiscuous mode
[  311.260727][T22451] bridge6: entered allmulticast mode
[  311.369918][T22448] erspan0: entered promiscuous mode
[  311.375909][T22448] erspan0: entered allmulticast mode
[  311.406297][T22472] netlink: 'syz.1.4833': attribute type 1 has an invalid length.
[  311.459379][T22472] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  311.586250][T22490] netlink: 'syz.0.4838': attribute type 7 has an invalid length.
[  311.643765][T22498] openvswitch: netlink: Message has -1 unknown bytes.
[  311.811060][ T5862] IPVS: starting estimator thread 0...
[  311.817300][T22522] netlink: 'syz.0.4847': attribute type 1 has an invalid length.
[  311.853958][T22522] macvlan1: entered allmulticast mode
[  311.859805][T22522] bond0: (slave macvlan1): Error -98 calling set_mac_address
[  311.904671][T22521] IPVS: using max 44 ests per chain, 105600 per kthread
[  311.975876][T22524]  speed is unknown, defaulting to 1000
[  312.003791][T22529] pim6reg1: entered promiscuous mode
[  312.016413][T22529] pim6reg1: entered allmulticast mode
[  312.028278][T22524] syzkaller0 speed is unknown, defaulting to 1000
[  312.038220][T22531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.055109][T22531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.065943][T22531] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  312.078859][T22531] batadv0: left promiscuous mode
[  312.086256][T22531] bond0 (unregistering): Released all slaves
[  312.259352][T22540] pim6reg: entered allmulticast mode
[  312.578417][T22567]  speed is unknown, defaulting to 1000
[  312.589770][T22567] syzkaller0 speed is unknown, defaulting to 1000
[  312.596294][T22566]  speed is unknown, defaulting to 1000
[  312.628951][T22566] syzkaller0 speed is unknown, defaulting to 1000
[  313.830318][T22583] validate_nla: 1 callbacks suppressed
[  313.830334][T22583] netlink: 'syz.0.4862': attribute type 1 has an invalid length.
[  313.849244][T22583] __nla_validate_parse: 30 callbacks suppressed
[  313.849261][T22583] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4862'.
[  313.870347][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4866'.
[  313.912771][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4867'.
[  314.057367][T22609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4870'.
[  314.059753][T22608] netlink: 'syz.0.4869': attribute type 6 has an invalid length.
[  314.104617][T22608] netlink: 'syz.0.4869': attribute type 1 has an invalid length.
[  314.109723][T22609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4870'.
[  314.138879][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4871'.
[  314.147013][T22608] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4869'.
[  314.157920][T22618] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  314.234561][T22626] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4870'.
[  314.401026][T22642] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4877'.
[  314.793519][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4884'.
[  314.827340][T22670] netlink: 'syz.3.4883': attribute type 10 has an invalid length.
[  314.837394][T22670] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  314.860404][T22670] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  315.433851][T22700] netlink: 'syz.3.4893': attribute type 1 has an invalid length.
[  315.441928][T22703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  315.446389][T22699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  315.574125][T22712] vlan3: entered promiscuous mode
[  315.614956][T22712] bridge0: entered promiscuous mode
[  315.638759][T22723] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004
[  315.676709][T22728] netlink: 'syz.4.4898': attribute type 1 has an invalid length.
[  315.973064][T22752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.597142][T22785] netlink: 'syz.4.4917': attribute type 11 has an invalid length.
[  316.906907][T22802] rdma_op ffff88801e36c1f0 conn xmit_rdma 0000000000000000
[  317.225035][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  317.520009][T22862] netlink: 'syz.0.4939': attribute type 29 has an invalid length.
[  317.576862][T22870] veth1_to_bond: entered allmulticast mode
[  317.627804][T22870] veth1_to_bond: left allmulticast mode
[  317.668654][T22876] pim6reg1: entered promiscuous mode
[  317.681647][T22876] pim6reg1: entered allmulticast mode
[  317.793590][T22886] netlink: 'syz.0.4946': attribute type 29 has an invalid length.
[  317.794768][T22865] netlink: 'syz.1.4940': attribute type 11 has an invalid length.
[  317.802212][T22885] netlink: 'syz.0.4946': attribute type 29 has an invalid length.
[  317.928071][T22891] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  318.158942][T22911] syzkaller0: entered promiscuous mode
[  318.168571][T22911] syzkaller0: entered allmulticast mode
[  318.197211][T22915] 8021q: adding VLAN 0 to HW filter on device bond9
[  318.804218][T22972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.879370][T22975] validate_nla: 2 callbacks suppressed
[  318.879387][T22975] netlink: 'syz.0.4973': attribute type 1 has an invalid length.
[  318.978714][T22987] __nla_validate_parse: 29 callbacks suppressed
[  318.978733][T22987] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4976'.
[  319.016199][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4978'.
[  319.016230][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4978'.
[  319.048855][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'.
[  319.105143][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'.
[  319.159158][T23004] netlink: 'syz.3.4981': attribute type 3 has an invalid length.
[  319.166500][T23009] sctp: [Deprecated]: syz.1.4984 (pid 23009) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.166500][T23009] Use struct sctp_sack_info instead
[  319.167889][T23004] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4981'.
[  319.204126][T23004] netlink: 'syz.3.4981': attribute type 10 has an invalid length.
[  319.213509][T23004] veth0_vlan: entered allmulticast mode
[  319.290572][T23004] veth0_vlan: left promiscuous mode
[  319.312258][T23004] veth0_vlan: entered promiscuous mode
[  319.367154][T23004] team0: Device veth0_vlan failed to register rx_handler
[  319.436878][T23024] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4990'.
[  319.485240][T23024] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4990'.
[  319.618233][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'.
[  319.664532][T23038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4994'.
[  319.685020][T23045] veth5: entered promiscuous mode
[  319.690079][T23045] veth5: entered allmulticast mode
[  319.895983][T23075] netlink: 'syz.0.5005': attribute type 1 has an invalid length.
[  319.908788][T23077] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  319.917804][T23075] nbd: couldn't find device at index 1048576
[  320.441883][T23127] veth0_to_team: entered promiscuous mode
[  320.461771][T23127] veth0_to_team: entered allmulticast mode
[  321.210608][T23198] macsec2: entered promiscuous mode
[  321.216656][T23198] bridge0: entered promiscuous mode
[  321.230643][T23198] bridge0: port 2(macsec2) entered blocking state
[  321.246171][T23198] bridge0: port 2(macsec2) entered disabled state
[  321.254139][T23198] macsec2: entered allmulticast mode
[  321.259534][T23198] bridge0: entered allmulticast mode
[  321.269981][T23198] macsec2: left allmulticast mode
[  321.276056][T23198] bridge0: left allmulticast mode
[  321.286559][T23198] bridge0: left promiscuous mode
[  321.298004][T23195]  speed is unknown, defaulting to 1000
[  321.320463][T23202] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  322.239931][T23204] vlan2: entered allmulticast mode
[  322.245307][T23204] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  322.255649][T23195] syzkaller0 speed is unknown, defaulting to 1000
[  322.901642][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms
[  322.909658][    C1] lec:lec_tx_timeout: lec0
[  331.301416][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  339.781476][ T5868] Bluetooth: hci5: command 0x0406 tx timeout
[  355.141502][ T5868] Bluetooth: hci3: command 0x0406 tx timeout
[  369.212428][T23229] netlink: 'syz.1.5056': attribute type 1 has an invalid length.
[  369.228903][T23229] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  369.427624][T23255] __nla_validate_parse: 13 callbacks suppressed
[  369.427646][T23255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5063'.
[  369.980784][T23302] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  370.084919][T23311] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  370.093162][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5078'.
[  370.176480][T23321] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  370.185708][T23316] bond0: (slave bridge0): Releasing backup interface
[  370.205900][T23316] 
: left allmulticast mode
[  370.210815][T23316] bridge0: port 1(
) entered disabled state
[  370.220088][T23316] bridge_slave_1: left allmulticast mode
[  370.235176][T23316] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.248786][T23316] bond0: (slave bond_slave_0): Releasing backup interface
[  370.266800][T23316] bond0: (slave bond_slave_1): Releasing backup interface
[  370.280963][T23316] team0: Port device team_slave_0 removed
[  370.288727][T23316] team0: Port device team_slave_1 removed
[  370.295349][T23316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.304320][T23316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.314378][T23316] bond2: (slave wireguard0): Releasing backup interface
[  370.321504][T23316] wireguard0: left promiscuous mode
[  370.329308][T23316] bond3: (slave gretap1): Releasing active interface
[  370.501559][ T5868] Bluetooth: hci4: command 0x0406 tx timeout
[  370.604314][T23338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5087'.
[  370.716682][T23361] netlink: 'syz.1.5093': attribute type 1 has an invalid length.
[  370.724960][T23361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5093'.
[  370.828437][T23373] netlink: 'syz.4.5100': attribute type 10 has an invalid length.
[  370.839803][T23373] bridge_slave_1: left promiscuous mode
[  370.854373][T23373] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  370.867391][T23375] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5097'.
[  370.867753][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5100'.
[  370.902511][T23373] vlan0: entered allmulticast mode
[  370.908301][T23373] bridge4: port 1(vlan0) entered blocking state
[  370.915228][T23373] bridge4: port 1(vlan0) entered disabled state
[  370.923272][T23373] vlan0: entered promiscuous mode
[  370.928317][T23373] bridge0: entered promiscuous mode
[  370.935179][T23377] : renamed from hsr0
[  371.027713][T23388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5103'.
[  371.044979][T23388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5103'.
[  371.097053][T23383] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  371.110459][T23383] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  371.492856][T23418] netlink: 211488 bytes leftover after parsing attributes in process `syz.0.5114'.
[  371.516701][T23418] openvswitch: netlink: Message has 5 unknown bytes.
[  371.539772][T23420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.554113][T23420] syzkaller0: MTU too low for tipc bearer
[  371.569332][T23420] tipc: Disabling bearer <eth:syzkaller0>
[  371.581010][T23428] netlink: 'syz.3.5116': attribute type 3 has an invalid length.
[  371.590666][T23428] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5116'.
[  371.736828][T23443] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  371.806099][T23432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.815179][T23433] netlink: 'syz.3.5119': attribute type 11 has an invalid length.
[  371.830158][T23433] netlink: 'syz.3.5119': attribute type 4 has an invalid length.
[  371.838718][T23452] netlink: 'syz.1.5123': attribute type 11 has an invalid length.
[  371.839270][T23455] netlink: 'syz.1.5123': attribute type 10 has an invalid length.
[  371.868212][T23455] netlink: 'syz.1.5123': attribute type 27 has an invalid length.
[  371.880943][T23455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.947543][T23466] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  371.972161][T23466] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  371.980496][T23460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.011865][T23475] tunl0: left promiscuous mode
[  372.017210][T23475] gre0: left promiscuous mode
[  372.022478][T23475] gretap0: left promiscuous mode
[  372.027517][T23475] erspan0: left promiscuous mode
[  372.038570][T23475] ip_vti0: left promiscuous mode
[  372.061823][T23480] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  372.063835][T23475] bond_slave_0: left promiscuous mode
[  372.080668][T23475] team_slave_0: left promiscuous mode
[  372.086129][T23475] team_slave_1: left promiscuous mode
[  372.093135][T23475] bridge_slave_1: left promiscuous mode
[  372.105289][T23475] ------------[ cut here ]------------
[  372.110790][T23475] WARNING: CPU: 0 PID: 23475 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0
[  372.120762][T23475] Modules linked in:
[  372.124708][T23475] CPU: 0 UID: 0 PID: 23475 Comm: syz.0.5126 Not tainted syzkaller #0 PREEMPT(full) 
[  372.134122][T23475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  372.144235][T23475] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  372.150502][T23475] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01
[  372.170155][T23475] RSP: 0018:ffffc9000d6be3c0 EFLAGS: 00010293
[  372.176238][T23475] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff88807d818000
[  372.184242][T23475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  372.192329][T23475] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  372.200304][T23475] R10: dffffc0000000000 R11: fffff52001ad7c70 R12: ffff888062846cde
[  372.208285][T23475] R13: ffff8880304cd890 R14: 0000000000000000 R15: 1ffff11006099b12
[  372.216267][T23475] FS:  00007faec15906c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  372.225218][T23475] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.231816][T23475] CR2: 0000200000000040 CR3: 0000000031772000 CR4: 00000000003526f0
[  372.239795][T23475] Call Trace:
[  372.243109][T23475]  <TASK>
[  372.246034][T23475]  fib6_ifdown+0x401/0x4c0
[  372.250462][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  372.255420][T23475]  fib6_clean_node+0x24d/0x590
[  372.260200][T23475]  ? __pfx_fib6_clean_node+0x10/0x10
[  372.265530][T23475]  ? rcu_qs+0xc4/0x170
[  372.269615][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.274407][T23475]  fib6_walk_continue+0x678/0x910
[  372.279448][T23475]  fib6_walk+0x149/0x290
[  372.283715][T23475]  __fib6_clean_all+0x234/0x380
[  372.288554][T23475]  ? __fib6_clean_all+0x9b/0x380
[  372.293508][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  372.298449][T23475]  ? __pfx___fib6_clean_all+0x10/0x10
[  372.303820][T23475]  ? __pfx_fib6_clean_node+0x10/0x10
[  372.309093][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  372.314058][T23475]  ? __mutex_trylock_common+0x153/0x260
[  372.319603][T23475]  rt6_disable_ip+0x120/0x720
[  372.324297][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.329215][T23475]  ? trace_contention_end+0x39/0x120
[  372.334524][T23475]  ? __pfx_rt6_disable_ip+0x10/0x10
[  372.339729][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.344503][T23475]  addrconf_ifdown+0x15d/0x1880
[  372.349383][T23475]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  372.355040][T23475]  ? tls_dev_event+0x717/0xec0
[  372.359800][T23475]  ? __pfx_addrconf_ifdown+0x10/0x10
[  372.365090][T23475]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  372.371058][T23475]  ? net_generic+0x1e/0x240
[  372.375564][T23475]  ? __pfx_tls_dev_event+0x10/0x10
[  372.380666][T23475]  addrconf_notify+0x1bc/0x1010
[  372.385523][T23475]  notifier_call_chain+0x1b3/0x3e0
[  372.390621][T23475]  __dev_notify_flags+0x18d/0x2e0
[  372.395664][T23475]  ? __pfx___dev_notify_flags+0x10/0x10
[  372.401226][T23475]  ? __dev_change_flags+0x4cc/0x6d0
[  372.406432][T23475]  ? __pfx___dev_change_flags+0x10/0x10
[  372.411989][T23475]  ? netif_state_change+0x256/0x3a0
[  372.417195][T23475]  ? __pfx_netif_state_change+0x10/0x10
[  372.422743][T23475]  ? lock_release+0x4b/0x3e0
[  372.427321][T23475]  ? lock_release+0x4b/0x3e0
[  372.431924][T23475]  netif_change_flags+0xe8/0x1a0
[  372.436862][T23475]  do_setlink+0xc55/0x41c0
[  372.441293][T23475]  ? __kernel_text_address+0xd/0x40
[  372.446494][T23475]  ? arch_stack_walk+0xfc/0x150
[  372.451372][T23475]  ? __pfx_do_setlink+0x10/0x10
[  372.456219][T23475]  ? stack_trace_save+0x9c/0xe0
[  372.461056][T23475]  ? __mutex_trylock_common+0x153/0x260
[  372.466607][T23475]  ? __pfx___mutex_trylock_common+0x10/0x10
[  372.472508][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.477272][T23475]  ? trace_contention_end+0x39/0x120
[  372.482611][T23475]  ? __mutex_lock+0x335/0x1350
[  372.487364][T23475]  ? rtnl_newlink+0x8db/0x1c70
[  372.492146][T23475]  ? __pfx___mutex_lock+0x10/0x10
[  372.497175][T23475]  ? ns_capable+0x8a/0xf0
[  372.501517][T23475]  ? rtnl_link_get_net_capable+0x16a/0x350
[  372.507308][T23475]  rtnl_newlink+0x149f/0x1c70
[  372.511993][T23475]  ? netlink_sendmsg+0x805/0xb30
[  372.516933][T23475]  ? __pfx_rtnl_newlink+0x10/0x10
[  372.521962][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.526707][T23475]  ? nlmon_xmit+0xb0/0x100
[  372.531302][T23475]  ? kmem_cache_free+0x18f/0x400
[  372.536245][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.541000][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  372.546149][T23475]  ? __local_bh_enable_ip+0x12d/0x1c0
[  372.551545][T23475]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  372.557270][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  372.562416][T23475]  ? lock_release+0x4b/0x3e0
[  372.567013][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  372.572139][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  372.577425][T23475]  ? __dev_queue_xmit+0x1d79/0x3b50
[  372.582629][T23475]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  372.587727][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.592593][T23475]  ? lock_release+0x4b/0x3e0
[  372.597276][T23475]  ? bpf_lsm_capable+0x9/0x20
[  372.601965][T23475]  ? security_capable+0x7e/0x2e0
[  372.606894][T23475]  ? __pfx_rtnl_newlink+0x10/0x10
[  372.611933][T23475]  rtnetlink_rcv_msg+0x7cc/0xb70
[  372.616889][T23475]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  372.622008][T23475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  372.627458][T23475]  ? ref_tracker_free+0x63a/0x7d0
[  372.632499][T23475]  ? __asan_memcpy+0x40/0x70
[  372.637106][T23475]  ? __pfx_ref_tracker_free+0x10/0x10
[  372.642482][T23475]  netlink_rcv_skb+0x208/0x470
[  372.647336][T23475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  372.652811][T23475]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.658103][T23475]  netlink_unicast+0x82c/0x9e0
[  372.662883][T23475]  ? __pfx_netlink_unicast+0x10/0x10
[  372.668151][T23475]  ? netlink_sendmsg+0x642/0xb30
[  372.673109][T23475]  ? skb_put+0x11b/0x210
[  372.677348][T23475]  netlink_sendmsg+0x805/0xb30
[  372.682156][T23475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.687425][T23475]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.692372][T23475]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.697686][T23475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.702978][T23475]  __sock_sendmsg+0x21c/0x270
[  372.707662][T23475]  ____sys_sendmsg+0x505/0x830
[  372.712441][T23475]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.717728][T23475]  ? import_iovec+0x74/0xa0
[  372.722239][T23475]  ___sys_sendmsg+0x21f/0x2a0
[  372.726988][T23475]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.732550][T23475]  ? futex_wake+0x4b2/0x560
[  372.737065][T23475]  ? __fget_files+0x2a/0x420
[  372.741654][T23475]  ? __fget_files+0x3a0/0x420
[  372.746319][T23475]  __x64_sys_sendmsg+0x19b/0x260
[  372.751270][T23475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.756759][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.761526][T23475]  ? rcu_is_watching+0x15/0xb0
[  372.766284][T23475]  do_syscall_64+0xfa/0x3b0
[  372.770773][T23475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.776838][T23475]  ? clear_bhb_loop+0x60/0xb0
[  372.781517][T23475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.787388][T23475] RIP: 0033:0x7faec078ebe9
[  372.791816][T23475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.811449][T23475] RSP: 002b:00007faec1590038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.819870][T23475] RAX: ffffffffffffffda RBX: 00007faec09b6180 RCX: 00007faec078ebe9
[  372.827852][T23475] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000045
[  372.835831][T23475] RBP: 00007faec0811e19 R08: 0000000000000000 R09: 0000000000000000
[  372.843903][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.851893][T23475] R13: 00007faec09b6218 R14: 00007faec09b6180 R15: 00007ffed6887e18
[  372.859870][T23475]  </TASK>
[  372.862891][T23475] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  372.870170][T23475] CPU: 0 UID: 0 PID: 23475 Comm: syz.0.5126 Not tainted syzkaller #0 PREEMPT(full) 
[  372.879726][T23475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  372.889765][T23475] Call Trace:
[  372.893031][T23475]  <TASK>
[  372.895958][T23475]  dump_stack_lvl+0x99/0x250
[  372.900625][T23475]  ? __asan_memcpy+0x40/0x70
[  372.905201][T23475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.910428][T23475]  ? __pfx__printk+0x10/0x10
[  372.915026][T23475]  vpanic+0x281/0x750
[  372.919078][T23475]  ? __pfx__printk+0x10/0x10
[  372.923656][T23475]  ? __pfx_vpanic+0x10/0x10
[  372.928146][T23475]  ? is_bpf_text_address+0x26/0x2b0
[  372.933341][T23475]  panic+0xb9/0xc0
[  372.937060][T23475]  ? __pfx_panic+0x10/0x10
[  372.941461][T23475]  __warn+0x31b/0x4b0
[  372.945429][T23475]  ? rt6_multipath_rebalance+0x455/0x8b0
[  372.951140][T23475]  ? rt6_multipath_rebalance+0x455/0x8b0
[  372.956770][T23475]  report_bug+0x2be/0x4f0
[  372.961085][T23475]  ? rt6_multipath_rebalance+0x455/0x8b0
[  372.966701][T23475]  ? rt6_multipath_rebalance+0x455/0x8b0
[  372.972323][T23475]  ? rt6_multipath_rebalance+0x457/0x8b0
[  372.978047][T23475]  handle_bug+0x84/0x160
[  372.982269][T23475]  exc_invalid_op+0x1a/0x50
[  372.986761][T23475]  asm_exc_invalid_op+0x1a/0x20
[  372.991607][T23475] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  372.997861][T23475] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 3d 62 f2 f7 e9 78 fe ff ff e8 73 f9 8e f7 eb 05 e8 6c f9 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 45 c9 4b 01
[  373.017493][T23475] RSP: 0018:ffffc9000d6be3c0 EFLAGS: 00010293
[  373.023547][T23475] RAX: ffffffff8a30b1bd RBX: dffffc0000000000 RCX: ffff88807d818000
[  373.031512][T23475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  373.039493][T23475] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  373.047449][T23475] R10: dffffc0000000000 R11: fffff52001ad7c70 R12: ffff888062846cde
[  373.055408][T23475] R13: ffff8880304cd890 R14: 0000000000000000 R15: 1ffff11006099b12
[  373.063366][T23475]  ? rt6_multipath_rebalance+0x44d/0x8b0
[  373.069006][T23475]  fib6_ifdown+0x401/0x4c0
[  373.073413][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  373.078363][T23475]  fib6_clean_node+0x24d/0x590
[  373.083120][T23475]  ? __pfx_fib6_clean_node+0x10/0x10
[  373.088385][T23475]  ? rcu_qs+0xc4/0x170
[  373.092443][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.097205][T23475]  fib6_walk_continue+0x678/0x910
[  373.102215][T23475]  fib6_walk+0x149/0x290
[  373.106440][T23475]  __fib6_clean_all+0x234/0x380
[  373.111278][T23475]  ? __fib6_clean_all+0x9b/0x380
[  373.116213][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  373.121135][T23475]  ? __pfx___fib6_clean_all+0x10/0x10
[  373.126497][T23475]  ? __pfx_fib6_clean_node+0x10/0x10
[  373.131769][T23475]  ? __pfx_fib6_ifdown+0x10/0x10
[  373.136718][T23475]  ? __mutex_trylock_common+0x153/0x260
[  373.142248][T23475]  rt6_disable_ip+0x120/0x720
[  373.146916][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.151839][T23475]  ? trace_contention_end+0x39/0x120
[  373.157123][T23475]  ? __pfx_rt6_disable_ip+0x10/0x10
[  373.162344][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.167098][T23475]  addrconf_ifdown+0x15d/0x1880
[  373.171935][T23475]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  373.177572][T23475]  ? tls_dev_event+0x717/0xec0
[  373.182320][T23475]  ? __pfx_addrconf_ifdown+0x10/0x10
[  373.187593][T23475]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  373.193571][T23475]  ? net_generic+0x1e/0x240
[  373.198081][T23475]  ? __pfx_tls_dev_event+0x10/0x10
[  373.203188][T23475]  addrconf_notify+0x1bc/0x1010
[  373.208032][T23475]  notifier_call_chain+0x1b3/0x3e0
[  373.213236][T23475]  __dev_notify_flags+0x18d/0x2e0
[  373.218272][T23475]  ? __pfx___dev_notify_flags+0x10/0x10
[  373.223975][T23475]  ? __dev_change_flags+0x4cc/0x6d0
[  373.229156][T23475]  ? __pfx___dev_change_flags+0x10/0x10
[  373.234686][T23475]  ? netif_state_change+0x256/0x3a0
[  373.239911][T23475]  ? __pfx_netif_state_change+0x10/0x10
[  373.245441][T23475]  ? lock_release+0x4b/0x3e0
[  373.250015][T23475]  ? lock_release+0x4b/0x3e0
[  373.254595][T23475]  netif_change_flags+0xe8/0x1a0
[  373.259533][T23475]  do_setlink+0xc55/0x41c0
[  373.264017][T23475]  ? __kernel_text_address+0xd/0x40
[  373.269199][T23475]  ? arch_stack_walk+0xfc/0x150
[  373.274040][T23475]  ? __pfx_do_setlink+0x10/0x10
[  373.278892][T23475]  ? stack_trace_save+0x9c/0xe0
[  373.283730][T23475]  ? __mutex_trylock_common+0x153/0x260
[  373.289263][T23475]  ? __pfx___mutex_trylock_common+0x10/0x10
[  373.295141][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.299916][T23475]  ? trace_contention_end+0x39/0x120
[  373.305299][T23475]  ? __mutex_lock+0x335/0x1350
[  373.310052][T23475]  ? rtnl_newlink+0x8db/0x1c70
[  373.314818][T23475]  ? __pfx___mutex_lock+0x10/0x10
[  373.319853][T23475]  ? ns_capable+0x8a/0xf0
[  373.324174][T23475]  ? rtnl_link_get_net_capable+0x16a/0x350
[  373.330005][T23475]  rtnl_newlink+0x149f/0x1c70
[  373.334677][T23475]  ? netlink_sendmsg+0x805/0xb30
[  373.339658][T23475]  ? __pfx_rtnl_newlink+0x10/0x10
[  373.344676][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.349596][T23475]  ? nlmon_xmit+0xb0/0x100
[  373.354005][T23475]  ? kmem_cache_free+0x18f/0x400
[  373.358958][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.363704][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  373.369236][T23475]  ? __local_bh_enable_ip+0x12d/0x1c0
[  373.374596][T23475]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  373.380338][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  373.385434][T23475]  ? lock_release+0x4b/0x3e0
[  373.390009][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  373.395111][T23475]  ? __dev_queue_xmit+0x27b/0x3b50
[  373.400222][T23475]  ? __dev_queue_xmit+0x1d79/0x3b50
[  373.405407][T23475]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  373.410504][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.415251][T23475]  ? lock_release+0x4b/0x3e0
[  373.419828][T23475]  ? bpf_lsm_capable+0x9/0x20
[  373.424523][T23475]  ? security_capable+0x7e/0x2e0
[  373.429448][T23475]  ? __pfx_rtnl_newlink+0x10/0x10
[  373.434467][T23475]  rtnetlink_rcv_msg+0x7cc/0xb70
[  373.439412][T23475]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  373.444594][T23475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  373.450051][T23475]  ? ref_tracker_free+0x63a/0x7d0
[  373.455151][T23475]  ? __asan_memcpy+0x40/0x70
[  373.459727][T23475]  ? __pfx_ref_tracker_free+0x10/0x10
[  373.465096][T23475]  netlink_rcv_skb+0x208/0x470
[  373.469860][T23475]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  373.475311][T23475]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  373.480609][T23475]  netlink_unicast+0x82c/0x9e0
[  373.485359][T23475]  ? __pfx_netlink_unicast+0x10/0x10
[  373.490628][T23475]  ? netlink_sendmsg+0x642/0xb30
[  373.495552][T23475]  ? skb_put+0x11b/0x210
[  373.500300][T23475]  netlink_sendmsg+0x805/0xb30
[  373.505052][T23475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.510322][T23475]  ? aa_sock_msg_perm+0xf1/0x1d0
[  373.515243][T23475]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  373.520513][T23475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  373.526555][T23475]  __sock_sendmsg+0x21c/0x270
[  373.531224][T23475]  ____sys_sendmsg+0x505/0x830
[  373.535988][T23475]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.541267][T23475]  ? import_iovec+0x74/0xa0
[  373.545768][T23475]  ___sys_sendmsg+0x21f/0x2a0
[  373.550427][T23475]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.555608][T23475]  ? futex_wake+0x4b2/0x560
[  373.560102][T23475]  ? __fget_files+0x2a/0x420
[  373.564682][T23475]  ? __fget_files+0x3a0/0x420
[  373.569346][T23475]  __x64_sys_sendmsg+0x19b/0x260
[  373.574272][T23475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.579729][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.584480][T23475]  ? rcu_is_watching+0x15/0xb0
[  373.589245][T23475]  do_syscall_64+0xfa/0x3b0
[  373.593764][T23475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.599830][T23475]  ? clear_bhb_loop+0x60/0xb0
[  373.604494][T23475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.610374][T23475] RIP: 0033:0x7faec078ebe9
[  373.614781][T23475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.634394][T23475] RSP: 002b:00007faec1590038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.642815][T23475] RAX: ffffffffffffffda RBX: 00007faec09b6180 RCX: 00007faec078ebe9
[  373.650770][T23475] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000045
[  373.658724][T23475] RBP: 00007faec0811e19 R08: 0000000000000000 R09: 0000000000000000
[  373.666678][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.674635][T23475] R13: 00007faec09b6218 R14: 00007faec09b6180 R15: 00007ffed6887e18
[  373.682613][T23475]  </TASK>
[  373.685883][T23475] Kernel Offset: disabled
[  373.690201][T23475] Rebooting in 86400 seconds..