last executing test programs:

3.917294573s ago: executing program 0 (id=10453):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async, rerun: 64)
socket(0x10, 0x803, 0x0) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x96590}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x78}}, 0x800) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) (async, rerun: 64)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r3, 0xfffffffc) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000040)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c3790000591bf900000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005399d0050000000000920100050c100000000000204e0000", 0x58}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}]}]}, 0x28}}, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r10=>0x0}) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)

3.745008359s ago: executing program 0 (id=10457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket(0x11, 0xa, 0x8)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0x8015, 0xad0, 0x7, 0xb, 0xffdffffe}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000175622d57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20110002e8d1000008001c00", @ANYRES32, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB='\b\x00.'], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c844) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0xfffff354}, 0x28)
listen(r3, 0xfffffffc) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

3.277173358s ago: executing program 0 (id=10464):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000002c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x2a, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.229915564s ago: executing program 2 (id=10465):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

3.14340823s ago: executing program 2 (id=10466):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x2000}}, 0x1c}}, 0x20004840)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r2 = socket$inet(0x2, 0x5, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001b00010000000000000000006401010100000000d20000000000000000000000000080000000ffff0a010101000000fbffffff7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000f0000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000200000000000000020000000000000000000000000000000200000008000000000000000000000044"], 0xfc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x2, 0x7cc8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x6, 0x0, 0xb, 0xa, 0x6, 0x2, 0x8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

2.92821621s ago: executing program 2 (id=10468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @random="000e00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x20, 0x65, 0x0, 0x5, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x11, 0x80, 0x0, @rand_addr=0x64010102, "01040000"}}}}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
close(r1)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

2.927616799s ago: executing program 0 (id=10469):
mmap(&(0x7f0000515000/0x3000)=nil, 0x3000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0xb0}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet6(0xa, 0x80002, 0x88)
sendmmsg$inet6(r2, &(0x7f0000003a80)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000003700)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, 0x0}}], 0x2, 0xc044)
bind$l2tp(r1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x4, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r4 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r4, &(0x7f0000005580)={&(0x7f0000005280)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000005300)=""/212, 0xd4}, {&(0x7f0000005400)=""/185, 0xb9}, {&(0x7f00000054c0)=""/169, 0xa9}], 0x3}, 0x40000062)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@loopback}]}, 0x34}], 0x1}, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x110, 0x0, 0xffffe000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c6500000000e601752bf2fe68000000000000000000000000000000000000000000000500000000d1"], 0x78)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r2, &(0x7f0000005040)=[{{&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000400)=""/177, 0xb1}], 0x3}, 0x7ff}, {{&(0x7f0000000280)=@tipc, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=""/47, 0x2f}, 0x6}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/156, 0x9c}, {&(0x7f00000009c0)=""/139, 0x8b}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/173, 0xad}, {&(0x7f0000001b40)=""/137, 0x89}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0xa, &(0x7f0000002cc0)=""/107, 0x6b}, 0x4}, {{&(0x7f0000002d40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)=""/110, 0x6e}, {&(0x7f0000002e40)=""/108, 0x6c}], 0x2, &(0x7f0000002f00)=""/189, 0xbd}, 0xa}, {{&(0x7f0000002fc0)=@nfc, 0x80, &(0x7f0000003200)=[{&(0x7f0000003040)=""/167, 0xa7}, {&(0x7f0000003100)=""/85, 0x55}, {&(0x7f0000003180)=""/95, 0x5f}], 0x3, &(0x7f0000003240)=""/224, 0xe0}, 0xfffffffe}, {{&(0x7f0000003340)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003640)=[{&(0x7f00000033c0)=""/223, 0xdf}, {&(0x7f00000034c0)=""/116, 0x74}, {&(0x7f0000003540)=""/229, 0xe5}], 0x3}, 0xfffffff7}, {{&(0x7f0000003680)=@isdn, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003740)=""/72, 0x48}, {&(0x7f00000037c0)=""/148, 0x94}, {&(0x7f0000003880)=""/148, 0x94}, {&(0x7f0000003940)=""/210, 0xd2}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/98, 0x62}], 0x6, &(0x7f0000004c00)=""/165, 0xa5}, 0x3}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004cc0)=""/121, 0x79}, {&(0x7f0000003a40)=""/49, 0x31}, {&(0x7f0000004d40)=""/161, 0xa1}, {&(0x7f0000004e00)=""/111, 0x6f}, {&(0x7f0000004e80)=""/116, 0x74}], 0x5, &(0x7f0000004f80)=""/164, 0xa4}, 0x3}], 0x8, 0x0, &(0x7f0000005240)={0x77359400})
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x80000000, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000010000"], 0xf4}}, 0x0)

2.879700392s ago: executing program 2 (id=10470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x5460, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x5460, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES16, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002a005001d0000000000bfa9c605ae8c620ec40500010004000000050015"], 0x4c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
close(0x3)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000019180)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0xc044) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0xc044)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000200)={0x3, 'pimreg1\x00', {0xa3be}, 0x8001}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000200)={0x3, 'pimreg1\x00', {0xa3be}, 0x8001})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000c46e81849b7c7028ab0d7503895f8c3aada11110e8bc160e2facd4580a9c57e16f248a99e51a474935e34ac1ea61f62182e64f7213f6c1e492c89a89cb3bc869e8684315379698beb271187cdb8a1ccabae092f0525ef375d185029bbf4e09ddd559e649e43946b06e64e8466ce935b04a8fb0d8314ed4008b72b814ff4e6171a270cf135055b026effbcff1fab4145e1bd901e95792c94f4e87164c33c98547cf4da831058a2d", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000a00feffffff000000000100000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.696418212s ago: executing program 3 (id=10474):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10)

2.237877837s ago: executing program 3 (id=10478):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r1, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff0000000014000100fe"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0xe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2.216487693s ago: executing program 3 (id=10479):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0xffffe4b}, 0x4000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000005800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x42011}, 0x4040811)

2.07553824s ago: executing program 3 (id=10481):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmsg$unix(r1, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40000120)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r2, &(0x7f0000000000)="2a00ee0f0700000000d7", 0xa, 0x804, &(0x7f0000000080)={0x2, 0x4e24, @empty=0xe0000000}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)

2.009579368s ago: executing program 0 (id=10482):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan3\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r6, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000005c0)={r6, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, &(0x7f00000002c0)=0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x38, 0x29, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0xc}, {0x6, 0xe}, {0x1, 0xf}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x81, 0x9}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xe0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xac, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_ACT={0x88, 0x2, [@m_skbedit={0x84, 0xe, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2048}]}, {0x27, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x24, 0x0, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x200000}, 0x13f42)
sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000)

1.668883144s ago: executing program 1 (id=10486):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(0x0) (async)
splice(r2, 0x0, r1, 0x0, 0xf3a, 0x8)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async)
shutdown(r5, 0x1)
write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) (async)
sendfile(r4, r3, 0x0, 0xf03a0005) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x5, 0x0, 0x0, 0x95ae, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x9, 0x80000000, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async, rerun: 32)
socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008000140ff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
write$cgroup_type(r6, &(0x7f00000000c0), 0x9)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x10000) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)

1.39855453s ago: executing program 4 (id=10487):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000009500000000000000850000005b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x7, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x1)

1.343695754s ago: executing program 1 (id=10488):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000002060108000000000000000007000000040007800c000780080012400000000e0900020073797a300000000005000400020000000900020073797a30000000003c000708000b40fffffffb1800028014000240fe8000000000000000000000100000aa0800174000000009050015003900000008000a40000000032d4702f322b94fb5a0e3c11700"], 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1.26547031s ago: executing program 4 (id=10489):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001680)={'ip_vti0\x00', &(0x7f0000001640)={'syztnl2\x00', <r2=>0x0, 0x700, 0x8000, 0x8, 0x3, {{0x7, 0x4, 0x0, 0x2f, 0x1c, 0x66, 0x0, 0x68, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@generic={0x86, 0x6, "19eae391"}]}}}}})
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'veth0\x00', {0x2}, 0x3})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000016c0)={r1, r2, 0x25, 0x0, @void}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x5d5d, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4d5, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @random="7ffe24421209", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74b4fe23a15739ce574efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57ddb4b68dc45942824251d7d17b5191584bcd400e40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb3e1d772595c58e918d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$netlink(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000003c0)={{r7}, r8, 0x18, @unused=[0x8, 0x1, 0x10000, 0x1000], @subvolid=0x2})
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
r10 = syz_genetlink_get_family_id$fou(&(0x7f00000013c0), r7)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r7)
sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, r11, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x78b6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000001480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r10, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x44009}, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001b00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.249654993s ago: executing program 1 (id=10490):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r2, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x415, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040081}, 0x40000)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a01040000000000000000020000012800048024000180090001006d65746100f7ff0014000280080003400000000a08000240000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x8810)
sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a1bb036d6753aa32d58fc8443aeef5ec478a1ab44b508b1f23d81c95369fdf2da8b5da85604516e1848194a5eca5dce17c8ac0cb57472c7b91bd618f16ad", 0x3e}, {&(0x7f0000000340)="e919a6cc1f3824abcfa7bc88ed23362261539b6e241a54b16d63ab76ee0023e532d5f6c79a9bbe9df89f303c02f04bccb054fc2ae2355817b23ee90b3b9555cc78ff", 0x42}], 0x2}}], 0x1, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4040004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1a4, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x97b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3e1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x495}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x5, 0x7, 0x141, 0x1, 0x40, 0x9, 0x10, 0xfa7d, 0x7, 0x9]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1000]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7ff, 0x2, 0x4, 0x5, 0x7fffffff, 0x7, 0x1]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x88}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x5}, 0xcb0e1ba28fd40298)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

1.190481911s ago: executing program 3 (id=10491):
r0 = socket$kcm(0x29, 0x4, 0x0)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @bcast, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x0)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x4, 0x10, 0x2, 0x0, 0x0, [{{r1}, 0xb6}, {{r2}, 0x2}]})
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000140)=0x2, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r4=>0x0, 0x0, 0x61, 0x8, 0x5, 0x8, @private2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10, 0x700, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', r4, 0x20, 0x7800, 0x80000000, 0x9, {{0xa, 0x4, 0x2, 0x28, 0x28, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x82, 0xc, "fda5fcd25e6760494134"}, @ra={0x94, 0x4, 0x8001}, @generic={0x86, 0x2}]}}}}})
sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x11, 0x400, 0x70bd2d, 0x25dfdbfb, {0x8}, [@generic="08dbe415e4ff7c175dc11f9236783849f5df507c656568fbbd96136e2ab14ba12ff75647a2fd1e8d25f225c8a38a7d3bada0b78f16300888f79206d0004b0ec047b45982db9dfd43b83905cb682f145fb4d4ec8a1bc1ffe7396e8ca935aceeafe5ac72f594ab07a7925c6adba5a968dc230ab6ccee2fa3", @generic="41ee5530ff199538ba030120", @typed={0x8, 0x3fff, 0x0, 0x0, @u32=0x2000000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44011}, 0x4000000)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000480)=0x1, 0x4)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000004c0))
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000500))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1dc, r6, 0x4, 0x3, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "0e557579838df7f5d068ca2b6273e6e80fc7495d9106d6f5ff49b5303c446dfe2e4a78ffe876797e8dfb4aa0b697434f659de4675c142e783fb0ac585c3195c8781901132ca2ede75c068d1e2515bb238fb75cfee854442a89dc7e1c8e433d4bab780840e662a900dea9ec2aa476dddd311b50271cfff71b2cd8ae8a4723e5f43b25baaeaefefa3a35ab57cbcf34bf8e3d496dcae7a5e97cb1fed8514db437762b66c35f0293f864aef7cd368804b0d4f8c7b5c1e96e9ac7ac"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000810)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000840)=@req={0x40, 0x9, 0x5f, 0x5}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880))
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x2, 0x12, 0x4, 0x8, 0x5, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}]}, 0x28}}, 0x90)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0xa, &(0x7f0000000980)=0xf, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x98, 0x98, 0x190, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f00000009c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xff, 0xffffff00, 'vxcan1\x00', 'wg0\x00', {}, {0xff}, 0xc, 0x3, 0x8}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x68e2, 0xf53]}}, @common=@addrtype={{0x30}, {0x4, 0xa80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff000000, 'caif0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x5e, 0x2, 0x5}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)
ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000d80), r5)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x1)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ec0)={0x0, 0x0, 0x4, 0x2, 0xa, 0x0, 0x0, 0x10000, {<r11=>0x0, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x0, 0x5, 0x8, 0x3}}, &(0x7f0000000f80)=0xb0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000fc0)={r11, 0x3}, 0x8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), r5)
sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="cb745ebd8165cd84ac160875e836668c6505d2bb48707cacf308ba5755a92ec14c322749c813320f9eed98a98990f7f8c50881ab8cb4bd7d9d9e03620bc7f4", 0x3f}, {&(0x7f0000001080)="6020bbc004b3eac2e7a005ddf5fde1560905f584141187cbd150fe4876d7d024843873592f66c462c437267d3a51a284069c4ed06186a52a96c422f04d9f110656a551b7ba3e1ded47e2b900a0ffc65214ca85571fe61bdd47137f95e08726567f196d15c44d8847a6d5f79abfcd5bb791fca98a47e93db42035228f0daa36991ff90efbe7fd8f8c3596e79e3f72d02c7fc7ca2ddcbcad5f37778c307640ea6049a1c390dc34028a7a406ef6435d04bd7e91badc52c66a456aff71b1100bbcb4d22a2fe72d48666bd5071a", 0xcb}, {&(0x7f0000001180)="f04a4dff1df05fddbd891f5aa69103245f03e5cd6c5489f6fe56a443dd5dd02df916af338508c0853398bfc84e92e7764dbfacc7ee96819ffa30abc0e1743a21f69c19abdb33d6e7da6fef01d57daadb798bb83ed0f49c0a48c1ce90b14f3b491f15c41499412c125e268d91bd7f4dd21fa09ed63704a5f9acadbf11286d03c703019e87a44893889bc39a20a9c41d199bcd0f4f339a64a7df0006f7cb39f54fbc613ea32402bf73903336baece34ce7513bc7f02d", 0xb5}], 0x3, &(0x7f0000001280)=[{0x60, 0x1, 0x8, "e791c2785a55cdeb4482932c3de9812077b3e936d37e96831854c0b0fde28ddfbe21f246ba85cc39fa76894d03848a215c5887443547060ad5e8cdbdd319dafa38f3fe19f355e8a88ec79a2c05c1"}, {0xb0, 0x116, 0x5, "d92951f458c81ceb967f39535d2781736f2ec3a5ed707f35d21d8937a71f140955b8ac03a34fdd4ff9dc12e63d4cb360cd3cf121b40696545a9a10a8b783fde3e5d8373c0a0fe04c4700af4ca0901303192439e010877c465e8c27cb50cb00f7d01721b57713daa04b2a8af4824398af0fcad81dbce39364225a47a8fb7d4b8364a0fd9fc2fe70a4d305d448abeb72b05004404110c673409a"}], 0x110}, 0x11)

785.203918ms ago: executing program 3 (id=10492):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x88}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x9, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x45}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000fddbdf251f0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x7, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=<r11=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r12=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000001000010027bd7004ffdbdf2500000000", @ANYRES32=r12, @ANYBLOB="104e0600016a03004c001280110001006272696467655f736c6176650000000034000580060002000e000000050001"], 0x94}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', <r13=>0x0, 0x20, 0x8000, 0x1, 0x68, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', <r14=>0x0, 0x7, 0x7800, 0x81, 0x2, {{0xf, 0x4, 0x3, 0x9, 0x3c, 0x65, 0x0, 0xb, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x8, 0xad, 0x0, 0x4, [0x8000]}, @ssrr={0x89, 0x1f, 0x53, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xcc, r2, 0x101, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x2004c014)

744.780143ms ago: executing program 4 (id=10493):
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15)
r1 = socket(0x1, 0x800, 0x4494)
recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/212, 0xd4}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/174, 0xae}], 0x4, &(0x7f0000000340)=""/114, 0x72}, 0x2000)

684.248766ms ago: executing program 4 (id=10494):
r0 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x60, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}}}})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x1, 0x4)

573.479641ms ago: executing program 4 (id=10495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

445.141391ms ago: executing program 4 (id=10496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="27030200000000000000dbac00cca5efc1f53aae04275733c995dc121e32c7d6d27dc3a663880a9ecbc87df07fcf6fc7fa28e9b202a8ab74679fcbc938e8adb0634fb582045a5bb9dbeac17897f398ebb6999265206cdf3d4fef64726c696a93f509ec4671706724f7923c71bc5d9e14f0a18b8a22289bc2ff85f69c9b2a817bc7c56be745ffb1beed157da125c5b4"], 0x14}}, 0x20000800) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="27030200000000000000dbac00cca5efc1f53aae04275733c995dc121e32c7d6d27dc3a663880a9ecbc87df07fcf6fc7fa28e9b202a8ab74679fcbc938e8adb0634fb582045a5bb9dbeac17897f398ebb6999265206cdf3d4fef64726c696a93f509ec4671706724f7923c71bc5d9e14f0a18b8a22289bc2ff85f69c9b2a817bc7c56be745ffb1beed157da125c5b4"], 0x14}}, 0x20000800)

444.713454ms ago: executing program 2 (id=10497):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x78, 0x0, [0x0, 0x8, 0x10001, 0x1]}})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000042000102"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x4000)
readv(r4, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4092, 0xffc}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/36, 0x24}], 0x4)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x300, 0x8, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf405}, 0xfffffffa, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x3, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0)
mmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r2, 0xdf8dc000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="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"], 0x1c}}, 0x0)
close(r10)
mmap(&(0x7f0000a5d000/0x4000)=nil, 0x4000, 0xd6d740ae6b6e76d, 0x13, r3, 0xb0267000)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r12, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x2, 0x20, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
ioctl$PPPIOCSMRU(r12, 0x40047452, 0x0)

285.941507ms ago: executing program 2 (id=10498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r1, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000010000000400000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

278.566142ms ago: executing program 0 (id=10499):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)=0x20)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000500000001000004018000001531b7a8969c591a00000000002e005f5f2e"], &(0x7f0000000580)=""/5, 0x37, 0x5, 0x1, 0x7fffffff}, 0x28)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x9, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0xbe8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)

229.65001ms ago: executing program 1 (id=10500):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
writev(r3, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f00000008c0)={0xa, 0x4ea0, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xffffffffffffff9a}, 0x40c0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xa}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000045}, 0x40044)

111.60026ms ago: executing program 1 (id=10501):
syz_emit_ethernet(0xda, &(0x7f00000002c0)={@link_local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xa0, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @empty, @loopback, [@hopopts={0x33}, @routing={0x5e, 0xc, 0x1, 0x36, 0x0, [@empty, @mcast1, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00']}]}}}}}}}, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) (rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000440)={r10, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000001300)={r10, 0x1000, "b8cba9195ed3ea346c3a80b0e206b2f065adc7dd93658a5eedc7beada8d58af14a0932d3a5454617be5f2a78ec93734951a2ab978d101e718ff362ca7e66b00b4a9f1c7c86ac565129c79c2c2325268cceb98cc86ddd6b84a18ae50e9381be7fe7e91f4b77f2fa2ee2ab2963b9ff6bbef297c1f95c9767d7cbfa9a958e33770e37dac1904666bb6585027829d9cf4e05bcf941175ef08d87868c8e4fda9adc827591247c7c7953b4ef39dd97a1ea469de43c53a9a00ada2e3858aed8a2727ec1b36e9485561cfc72133c251b415f7f8a8c12970c156d69141afb7f23ce2b6caddfa1ed3aba766623130642c29161b0584762ddafd6ea9be7e012271f7f1e3b890d16fe4475828e8504eadc5d45361d30718255a57debf0b7396bf6f654068ef7ff3199396cc20ec4a66214d6ca3043be8984c2112f5be4627cdc781f419a417e2b9504477d3bc5b6518eb084794ec1d06145c1894ecc311a0c5038c423f758dab35ac881ed9ea5b4d588958f218cd7e102623c2afb7c81be3b325a1d41eb92815c64dcf1f676a453122944fef93006c008bf3ed573c36807f583b697a246d9a6ceca079fcf98e05a64c979fecdc5b1556ec6f76e3f695fc18583f27850d3b99ce4e2239b86f3143be677b8101e37f7f6c06a564468c2202d99da93e7940bde31da06db5aa4675a7cc5403348fd272d5bee7eb868acf28c7abe851678b3ecfde7596104f7ff0c6e9440f2ea12af2926b30440e19d85da345bf08274c57b5ae19062252f9132f25c12704bd183f81c46243ec7a8cdffd66ed3842f7aaaca2f2d27eb03b1087b41b8907cfc8ba50b362cd8e57ff006e82ef806ea3e95b0d4f1c27a9b0b5e205c38009d558c011bcad5e8be877a375ce777fc927b94353d65ac7d22ea3436e27041943f1d66ab46b1b434e42307fc6a0215e8344674f4c264aa3b5160243bc581c91592ce91afdabcc8d3a85f5a92757d3a1d81e549d70c808b44983f8d116e603997416dafe7ac78bc91ab33a5dc8032edcbe036800d474396452fd081fb9daa2327a63011036cb7e3109b2a1b1e3a4a32eee008538f0ee2daaaa3ec12fb34e200a77bb49b1db862fa89e223ad0ba401d93ba7edefca8d842eebd92298c538ba814d4798159db524fbe46da2fa3145fe9c07760df06ea0af64ca26c62b02634366fa82dac6f10b0b7a877489c9b287f2172899a3a31b0bc347c03aeee4c4668876b4fcf1c79cdbe6f12234fdf1b0dc0b4df039094b82552159cce7f021b4a41ef53ca3f58f6b006ea86b07a6ad45653e55a3101b9685ede1f2336079274f7aa6c8cb3ac2f7f96e11267a9d9722ae8991b2e421e30755d2d215a3860227dc801422eff30a7ad9f998576c46fb7cb80cebe1f7d374c7cc28980a3ded100f97d3f6d640dd0a7a7f06774a564dee0f566e60132a1d2ae7a8a6b39089df6532bbedd22a8c52a982515cd394301869e4803a9d41c12cffa7136e8b1c966dc5474891981614221ea5ffe9c47c24ab4478dd2efbdaafe6222bfd31c1032cbf737e54d6ac5918ccb641386cc7ddbfb8a57e93ae55d0e0b907f13fa5f80961e0d68ec0b29461ab698b8eb6cb34e9fbc47ad0824940bdd2a47f658c1835c78184592d82e3ce675f6185dacf7b71687e0aae98eeb47b8dc9c1d36f3a362f9bcf570a57b5c1a6f6e6200ca73b91230ecb18df692e37a89eceb67958a7cd5fd3a116a8f6420bc1925039ade42220a8bad42b003a83c4f811b46a8740b83ea61679577b315e284d7f211539200d7edccdee61f50d7a99e8de0b8652fe3de3b0b39bb77229d4d83875a5f9aedac1656f8639e939f8a83828f0ac729b808ed1e7172d6fa57a52e17434822fdce6538b2a1cc7c913a1c77b7f63f64ba32ced427f0aabf52c3f1588512381e0f82598b415d29e57da91b89e089b392120464f1b477280accaa0b275aefc4c945424a9a1a082eb858ee232c28bd0089858561b3afa20c31e5d40093ccb8d056aba1c1bb1131a35247e8a728180d5de6d51f37a7fe03c8e4436b1fc321a750fa487c57b45b1b7105921bddfa8d9ce8f89c428b2fed9e349bafda4cfb7ae5d9ac07d15338dbf81079e0759d24e58b2cc5985303a447975a1c44cb4dea2ba34b4aafaf24027e7121d2004c1969c7ef1903cabbf0def70102d688844872062b418cd7d4b6c4e0a2b5033d920b2668b1c96890103ad937b120d3c111678bc5b17e3b6ed757a2729545e29eb5d873dc36c08f7f6a80fec96680ad8d9aa74bd52bf4000c62232658dd557990483ad769c7c40abc7a0cc4b459eb10489967f8bc995eee2a371a223b0778ae9904bdb50b670294b3c689234bd37f0b0ccd673cad8a0f2273e573fe0b61fcc07973b6e05167a732795b84eddb43fd9a8a2d3611fda98a195af8960425ca0f434c2c95f5102fb2e1695c76b744f1297e7e7e16f740a84381a177af4e7e8d5a8c38b7fed0f75800219260a2d6955410661cc8a3ca0b5b813513355ababadf780505d3b68592f83f5881934296fc2b7692877ba833d9364119de3e75030fd3c290dd1b77b30be306a91262519cc22ab41f8291b2b74f9db56436d2424554e4f3e0d7694da70cd10826af7a6b3213ea2abda5a4986d4bde48141170426ebb985c9ffe553445d9c5d4692ff0305e218298dcac2d85be5eb4176ef8589063bd27f87ebfc31cfa77b75088a6332438a3bdde63064e32c5085399f05328ff4bd51850003519352f32eceeb95542b9abeeb6114f847adc3c028985b6b4d2d6d63af5396b43a5a7169bb13bac2dbffa5a7b4dc4cbfd5753f0e4e4e90833b3f690bf63a9826c91aa3fb44131d907133b5ef07acf3050494bbb89d7aeabc3641bb40848a6585ec3f0bbd7594266445aed48ce83c3cb6015a6d83cf3e287d4d957ada26d3118be557635c0c23eed5c695e62a1446f726b1a16e2a8d59f0e7a75ab3d84e2a4a4951fb698426c634db74a7689ecaef148ac2553794a582ba7c5d37cd9b335cc2b09bf1e604c54e202d0124f397fce7ed52446d74a611b52bc4de6c51100e685c66ea743fe60281ca77f2321d814edfbb980175ee2abf5e2cf5ffdd5a6cdf9907d18eeb21efbc8d3095ae417c8a265b5edaaec651a4b26fcfb1b78691279442fb187cf5235f3d6944220c1979b3026157204ab9e63afea9f55d337e22551e3fc6dd0ab0c5f57f789accebce742742e6ea64fc3de57c9c363a5be8b0146b0ed3b48a407399d23310a28075841f70805d3308584d5fe6551729d5eea5f0302cdc70fe7f61ab6f7efe55be44b809c9edbebaf86c55cb6de0443e0550bb7ccfffbc0a82a59eb1e3aa907316f1d5c30819558b17d38e9c1f3c39176830205316954a3f72c52aaf66189b0ad4b087a790529d843a6b1e2f7a69d7ec04145255f1d425f5be0abf9d32d77b4751e9f73874bb5061858116e838c158c5389b17886bd18ced312ddce5bb3a41c9239bb3fe980f8a73621b15bfdfd33dcf4899d52d3610f05b442ef223ee01f801ceb5bd69a950210dbdf1d7db0ea1b458caac13554b32894c53521a6161b00634589077085d3305702ac137004a2f1f7ecd5cdf8cc6ad43e93cf84e30134a88cb8e87836fffcd22ccfb370434c26a8e7cf0aee2e8cec317126e63cab61af90fd904d4934da40d799b4573be70fabe0f8191fdaec3ff0385e5841310510f80fdd5af3905aa847bf3c20f1760564e5e954da958ad1547937fdb7756df4b12b3629e5d1605ac3b52d10041cc33ae7ea5411958692a61ce6363286a91ce7a3b9d57adb29afa7c6938cb4ba66079ea2b8bc863efab9cd0879e0699b381ea9a0efef6343adf04b5525ae617af8765718b3ef5bd275a694e32f4d23b0f53021a852ef46ad06c8d6c291dfd439fb2a29834a42cbde03b07cd7712ad87f73130bddd906c2b4bfdc995a32bed224ec8404421c0dcfc3336eae4e8f73ad7ff15e226bdd860b52c0ed96ab2220b1e97034af3e3821a39831518ab0342c83b48f05a64712bafb1890a2795ea301b375d284904b5c4ef6d0d82f7e86be4d357a6f639b4f07358db6c6072d506e5eeeae1c1f88ced46bb59bd5f4e71b8582f7e0282b1338a5f0116c22e781e96a5c78733c5b5c5a12adc388c030636d918c3d080a378a32c7cfbff5e1073f44e8d1e5c95c05d3c5b80db5dfd6d17c97c26424df145115c95bbfedf55c46fa5eadc2a1d6d421d0ad648165e655a331b4b9d9a59dcda36cb8a2649c96eae02f9a1cf790da62d837c835d1af87f22c17e414f12bc4d5f4fd570b0ec7ea6d8737b88c77432090e1a697f3656a5c76285346730191f502baefc7f638a0098e73583f3726b9cf214d5c2fafaa7a84f023c0f7aa27d504d8a2739f4dc84e9ef407ec2fc254f862c1fcb69062684795d9d5f73c8747c6f89778aabb5bcf848fe858b541b7154fe18ddf784e40ff125384cec388249cf2be330f20cd775124ae041ce4d3eda242bb507b6749e18dcf1c5a51747e2adb835eafe7bcfbfb104e10d1f50ab4352b309443f1373613cfd8dfc0cd472f7d372a36fa5116cbd59558a9602189b456fe85265529c5fbb2b09a83703dab73869b7a2744d8e30bd39e673756a076e6d1c9edc260f88b471cb40a232990fd05d04f8e49e75a8be19da0acc937a9e2bb60c9bb91cc6497b613814db2a42a8fb1a8f6127b4f4a82967766a9085cc17d88f4e47c8a7b59c3a3b7421b25b01356777c6ae7af0f52e5bf0ef657714dc6f662d77e61c02ef235cdd20996424f60df6d5a9ad47b75ddda9f97352cf762732039fb697cb38cabcab6b91b92c7ee869734b56485313fb04b45c44c41e3411b79f5a8e67662e2d24d58ef1af9560f9ecd28f07156d1b106b289f4dc965fbed3b0177fde5155d34033193ae1f12630407bc9017a95aff7df403e6ba186aed6fe1db58e6be54656832feb379b213eae473d0f374edebd4168526bebc41cbd7af21705cfff1eb6729122f5a9a7172777ca0e08631ed1e7f9fb3b5316cca9eb3a58d5e5d7c618da4fbb1033ff537073aaa441b52f95a8cff2d23de376017699f99e892d745acce6ad2fe7f717ed5cfeab8e763752aa724a3dd812661843d8f605dfbd737f1d355a87371b1b80ae8e59ad65bb0b54034337b52c5930cc99f3f3c987296be49dcb655d1c65ddf4f181932fc5c9a33b8d5e8f6e6c63b0ef6915113b36b5de6b6f33b68e9bdfeaf04ec142071203142d8deb4f1556618b112db9ed5dfbbe8f7df8d428de77a724e24c626035b610376f46c6f8de7dfb8ee8cf61d97ef58232de416c237f702d813d8e050b7daa763242711a18557740973c5c39254b932b2ab189fa3f38b8b233e9aad0670eef7031e1535dce9e3f9d1e15e7c7f91c727e4323a3a315e931214f12ffac7aa87188532d01fd133b5686f5c9480ce0a5345898b3b4bc0de9b8dde0940084f6d795020fc8fe7201bf802bcb957f24a3af22755801306cd332c92f3f1a1267029702e59db2fd572ca50328b8cc3d77b5f390211bc50f950fac5cd26cb21a4c982e4938d251f7190aafefb2ed349df9de64ad4ebe87a817c9d922101b030a8ec53491be3239431e3309644adee157c01f08fd74ea928f4e1a414b144394a77ff95e3d59091a426459f6a9174e5a1f33d4e355e00b90dbfa43949934b49a7b875060162a47a75382abd3bac5f1cd8f614626e7902f18c8e40cfa92d03fb225b238b408bc2b9c185bbb45fb42b710800a9f3acef6e01032a9210ec158d800070e0839983b8fcdc953aaf5297f9cf099ae7368c62706cf024843a"}, &(0x7f00000003c0)=0x1008)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0)
syz_emit_ethernet(0x26, &(0x7f00000001c0)={@remote, @random="6d6c97eb3a0f", @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x1, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x1, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d858462463cce723"}}}}, &(0x7f0000000200)={0x1, 0x4, [0x735, 0x5b3, 0xdd0, 0x24d]}) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80)

0s ago: executing program 1 (id=10502):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={<r2=>0x0, 0x96, "2bb88cda1e5a2b9699ae02e6a41599e0692fb0655e45296bcebc46434d59c7af3969a6da8e0fd434d6c870c5ceb03b68314ff133daf379d8fcde3626e787577ebed4c9c69f0cd13c0b56d83fb43357ccfff57ac2c4b7c3af093b72eea7a5d59bde97270f19c35fab0e040c6c3c03d24b29adea744a4a99eb6519b4a643cf7c85626c4916d0542fc8dbbe489712ab23acbc6c99b68ee9"}, &(0x7f00000001c0)=0x9e)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r2, 0x2e, 0x3, 0x3, 0x4, 0x800}, 0x14)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x1, 0x1, 0x4, 0x8, 0x10}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffb}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xbc}]}, 0x2c}}, 0x40040c0)
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000380))
r5 = accept(r4, 0x0, &(0x7f00000003c0))
sendmsg$inet_sctp(r5, &(0x7f0000000a00)={&(0x7f0000000400)=@in6={0xa, 0x4e21, 0x649ba7ac, @loopback, 0x9}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000440)="277fad5d8532ab08155edd4a750e9bac826dfdf90c56be5da1d68beed6b9d97ebd79a02d6d7743e4940be291190d17b46d7d738898e2e1fed5414ba2aa3349dc5bc0dcda4ea1cd2a9df0173c5c6bd59aa9ad77b20ff200065ba977067f158269fa1a3812f5a9924434dee4ee80deb20780f0e7d4aa74cfc0c9af0b97ce", 0x7d}, {&(0x7f00000004c0)="ea8b26832ebebe952bc24f9cdfc210512228a85d9a69f287ac188951519da07b545f39f8839f41b37b544107e1ad5d319317729b4854c746a9dc2cec7fa6712ce605eec248e750562e193ec8f5600d69bd5e713cd8116463b52e196c5db8ffe9116fee227a7d55cf93d4de6a6cbed7c5c00d4fb39cfd2c2ff13d5de4e24f1254a77eb9afec739ee6132a59d029bb7fa244c78c7e9a91888347ca9234177503156f4724c0a81692304b497b6189b450008dd73c00d87c7b4f50d10eb5dd42bb0229b8c70d73fdfc95a41911c8270ca092f32c150ca32a5f15c2b09c3b", 0xdc}, {&(0x7f00000005c0)="6f503796cb1687cf6bec3fdc6337a5296279a32f95b206f7a7572a65beef8017e0556a124786c951b6d318c169a36393e2424d8d023f420bf9d1691a79b070a09f717481bc3f311dea1124511490fb322e84b79c287a9599a2d5800e0c2796c1b0279ad6967fe504136388d6de2de150d38ce529e11e22013b37241a18cef9fdb4f5b23c74235cc11a81062d86197a4d4152d390aac9c8dc4881bf61d7a49a629f4348039f9f1e33b2be29bcb5bae17dca930a793099c506e6e5188a8f25079ec0b954080434fb6012881a47e104502015bf6856d45a3166", 0xd8}, {&(0x7f00000006c0)="0500cea89acf416c3e636597a7eafcfa4c2d7840b65fc85fcc3ecd22ea40681dc50f73018ac811a08a9b3e4f3275749ffb114984c55bdc4d30a321d4e57042772db21d1123e7db1ad09d0cf5eb8cb33abb7ecc0735855dc9f2aa2a68c827f71eba6c9cec40efa31f28dba40c6da8eae9a676e5850a494ce82791ae3f377893892bd02913642d49bdca92d10ddacd80b96e8fead99d41a00e6f810b4ea5cec36e1fa5af40be3a5fb36858a0dcb72cfd87c0f9dbdf4a1fdc9e10d6dd16e36d320a587e24baf5a1a08bcc13490b7c589dc2c7428502cbf6b7b6e34cf46665dd8eeb163b5c2b0e64d081ccc217e91b35", 0xee}, {&(0x7f00000007c0)="80ef33715b1f2a90e016985e1541a287a59a043a3185ad8ad051b001faed935971bea66e5adc911fdb6092c6992759de2f7d8a945ddd810fb8b16c08fd6bc1eeeecaf3a3ce8f9d1f242cc7d27a4006d312864d9a34a3000dd9bab40531b9bdd8b7676d12b1be181ba91988453c5ec1ef98c187095e3d25d666a826fd6c4108e7e2793c7e331bb82bcb0504222f5986258f8fbdf45a81e3b43e187dab24b86fed62765275ddd078537c98c9b431f7e6785e0f01b9f3acb356f54b5c0578e685d7c20842230188ecb6a89bacd68996170070697b7ebb945e5a4f08fa00f492841e", 0xe0}, {&(0x7f00000008c0)="e87a593db447a9e3ad52d9acceefd946b2f3918e4c6331f87ac86565ca441dadff9b4afa63ebe4192452591a3caf79ede7660d5b9fb43cd8b3df1c6f28a01fe7458c05155753992ef882ba4f6afe0c2146b1a2df31bf", 0x56}], 0x6, &(0x7f00000009c0), 0x0, 0x8000}, 0x40000dc)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000b80))
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000bc0)={0x1, 0x70}, 0x8)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000c00)={'geneve0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}})
ioctl$SIOCNRDECOBS(r1, 0x89e2)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r4)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=<r9=>0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x16c, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_APDU={0x7c, 0x19, "864cf86a124b30e8b8c0b4295c4b27cd6ea2c53d940505a65b80c5057e836bb02d7d4d7f4c7bcd5fd737ae4697cc1da3ebce46af58fa08863a642b036b21cb9a71bc55aa8ba0684f09b5a81484a64abb826a350658f55bb4b74faec30e4713bca9dd704b055beeb09e25dc38da8a7d930d7fa1225f6d3a77"}, @NFC_ATTR_SE_APDU={0x60, 0x19, "67a3438ee223cc19d3840c68604213716b36b3cba88cb5e95d1ea027d7383a1e3d18c3baa9200c20ffe2b6ec466d50a6ef2e2fcdd12e2768b5909f5fbe8b25bd4c6a2229defd5e7a6455108ed60ab9783c9e9480fff816fcd370578c"}, @NFC_ATTR_SE_APDU={0x6a, 0x19, "48943e1b047540cc647fa6c8798ceb4b02e4f42bcf46ea0d0c484742857ac9c61e0724b5a61d956257d34e67681bfd8cb5da6af5e6938df25cfbf75f18c4239fb44060cea0388e980dc10acc1dd9666eb5bd51f2d3b79605d96d0502de06e072bcbc75f8362f"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40040010}, 0x40)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000001040)={r2, 0x200}, 0x8)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800)

kernel console output (not intermixed with test programs):

ater): interface not active
[ 1196.906494][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1196.930737][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1196.978442][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1197.016599][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9101'.
[ 1197.040496][ T9037] lo speed is unknown, defaulting to 1000
[ 1197.091723][ T9121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9102'.
[ 1197.147591][ T7235] IPVS: stop unused estimator thread 0...
[ 1197.208538][ T8910] hsr_slave_0: entered promiscuous mode
[ 1197.215901][ T8910] hsr_slave_1: entered promiscuous mode
[ 1197.222383][ T8910] debugfs: 'hsr0' already exists in 'hsr'
[ 1197.228869][ T8910] Cannot create hsr debugfs directory
[ 1197.356342][ T9135] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1197.998860][ T9165] netlink: 'syz.0.9111': attribute type 1 has an invalid length.
[ 1198.140852][ T9167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9111'.
[ 1198.228106][ T9166] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1198.425445][ T9175] bridge: RTM_NEWNEIGH with invalid state 0x4
[ 1198.879336][ T9198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1198.999721][ T9204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1199.026377][ T9201] syzkaller0: entered promiscuous mode
[ 1199.056134][ T9201] syzkaller0: entered allmulticast mode
[ 1199.173925][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1199.182022][    C0] lec:lec_tx_timeout: lec0
[ 1199.187074][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1199.318477][ T9216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1199.404597][ T8910] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1199.442375][ T8910] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1199.499629][ T8910] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1199.536626][ T8910] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1199.677044][ T9216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1199.845867][ T9216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1199.899174][ T9254] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[ 1200.049791][ T9216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1200.183296][ T9264] ip6_vti0: Caught tx_queue_len zero misconfig
[ 1200.203253][ T9264] __nla_validate_parse: 4 callbacks suppressed
[ 1200.203273][ T9264] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9133'.
[ 1200.251638][ T9264] vlan3: entered promiscuous mode
[ 1200.257219][ T9264] geneve1: entered promiscuous mode
[ 1200.306696][ T7235] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1200.367969][ T7231] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1200.448398][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1200.456317][ T7235] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1200.484123][ T7235] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1200.521368][ T8910] 8021q: adding VLAN 0 to HW filter on device team0
[ 1200.561116][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.568313][ T7235] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1200.692492][ T9293] netlink: 'syz.4.9138': attribute type 1 has an invalid length.
[ 1200.875358][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9140'.
[ 1200.993002][ T9310] netlink: 'syz.1.9141': attribute type 9 has an invalid length.
[ 1201.263828][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1201.293476][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1201.693448][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.700592][ T7235] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1201.716381][ T9293] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[ 1201.719526][ T9306] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1201.784350][ T9306] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1201.806160][ T9306] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1201.916313][ T7230] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1201.948402][ T7230] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1201.979240][ T7230] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1202.001296][ T7230] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.045109][ T7230] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1202.076686][ T7230] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.116831][ T7230] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1202.145210][ T7230] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1202.157994][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9144'.
[ 1202.222034][ T9332] vcan0: Master is either lo or non-ether device
[ 1202.370471][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9147'.
[ 1202.401652][ T9348] geneve1: entered promiscuous mode
[ 1202.776734][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9150'.
[ 1202.847017][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9150'.
[ 1202.917673][ T9361] syzkaller0: entered promiscuous mode
[ 1202.944163][ T9361] syzkaller0: entered allmulticast mode
[ 1203.167250][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9152'.
[ 1203.216312][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1203.225028][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9152'.
[ 1203.252698][ T9369] ÿÿÿÿÿÿ: renamed from vlan0
[ 1203.322139][ T9374] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9153'.
[ 1203.395702][ T9374] netlink: 'syz.4.9153': attribute type 13 has an invalid length.
[ 1203.508875][ T8910] veth0_vlan: entered promiscuous mode
[ 1203.593045][ T8910] veth1_vlan: entered promiscuous mode
[ 1203.619271][ T9381] syz.0.9154 (9381) used obsolete PPPIOCDETACH ioctl
[ 1203.715391][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9155'.
[ 1203.727631][ T8910] veth0_macvtap: entered promiscuous mode
[ 1203.760124][ T8910] veth1_macvtap: entered promiscuous mode
[ 1203.887885][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1203.918882][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1203.969995][ T7231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.003807][ T7231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.034470][ T7231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.050555][ T9395] lo: Caught tx_queue_len zero misconfig
[ 1204.061352][ T7231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.193948][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1204.202014][    C0] lec:lec_tx_timeout: lec0
[ 1204.207202][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1204.384603][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.413530][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.516628][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.529642][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.713442][ T9418] team0 (unregistering): Port device team_slave_0 removed
[ 1204.751053][ T9418] team0 (unregistering): Port device team_slave_1 removed
[ 1204.781620][ T9426] syzkaller1: entered promiscuous mode
[ 1204.787904][ T9426] syzkaller1: entered allmulticast mode
[ 1204.904214][ T9420] lo speed is unknown, defaulting to 1000
[ 1204.920193][ T9429] netlink: 'syz.3.9165': attribute type 10 has an invalid length.
[ 1205.038384][ T9429] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1205.114081][ T9441] netlink: 'syz.0.9166': attribute type 1 has an invalid length.
[ 1205.128522][ T9432] netlink: 'syz.0.9166': attribute type 4 has an invalid length.
[ 1205.259597][ T9444] __nla_validate_parse: 2 callbacks suppressed
[ 1205.259618][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9168'.
[ 1205.301458][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9168'.
[ 1205.485456][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9170'.
[ 1205.523219][ T9447] bond3: option ad_user_port_key: invalid value (65535)
[ 1205.530795][ T9447] bond3: option ad_user_port_key: allowed values 0 - 1023
[ 1205.542824][ T9447] bond3 (unregistering): Released all slaves
[ 1205.584809][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9169'.
[ 1205.706004][ T9420] lo speed is unknown, defaulting to 1000
[ 1206.371045][ T9487] syzkaller1: entered promiscuous mode
[ 1206.385467][ T9487] syzkaller1: entered allmulticast mode
[ 1206.591083][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9181'.
[ 1206.623217][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9181'.
[ 1206.672286][ T9499] geneve0: entered promiscuous mode
[ 1206.694600][ T9499] geneve0: entered allmulticast mode
[ 1206.709036][ T7234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1206.725881][ T7234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1206.742604][ T7234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1206.755974][ T9505] netlink: 'syz.0.9182': attribute type 21 has an invalid length.
[ 1206.764450][ T9505] netlink: 'syz.0.9182': attribute type 1 has an invalid length.
[ 1206.772205][ T9505] netlink: 'syz.0.9182': attribute type 2 has an invalid length.
[ 1206.781768][ T9505] netlink: 8786 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 1206.808006][ T7234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1206.861967][ T9507] bond9: option updelay: invalid value (18446744072924056005)
[ 1206.870258][ T9507] bond9: option updelay: allowed values 0 - 2147483647
[ 1206.883304][ T9512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1206.888129][ T9507] bond9 (unregistering): Released all slaves
[ 1206.897626][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9184'.
[ 1206.995861][ T9521] tc_dump_action: action bad kind
[ 1207.015385][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9187'.
[ 1207.031196][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9187'.
[ 1208.087845][ T9597] macsec1: entered promiscuous mode
[ 1208.097035][ T9597] macsec1: entered allmulticast mode
[ 1209.100572][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1209.147192][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1209.213990][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1209.222028][    C0] lec:lec_tx_timeout: lec0
[ 1209.227169][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1209.507865][ T9605] ipvlan2: left allmulticast mode
[ 1209.512914][ T9605] veth0_vlan: left allmulticast mode
[ 1209.554186][T31473] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.595329][T31473] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.621569][T31473] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.665147][T31473] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.687453][ T9630] lo speed is unknown, defaulting to 1000
[ 1209.979406][ T9659] x_tables: unsorted entry at hook 1
[ 1210.050768][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1210.075694][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.107729][ T9642] lo speed is unknown, defaulting to 1000
[ 1210.277022][ T9673] __nla_validate_parse: 9 callbacks suppressed
[ 1210.277043][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9224'.
[ 1210.327418][ T9673] Unsupported ieee802154 address type: 0
[ 1210.620364][ T9683] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1210.661489][ T9683] bond3 (unregistering): Released all slaves
[ 1210.743640][ T9630] lo speed is unknown, defaulting to 1000
[ 1210.751703][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1210.771789][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1210.781225][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1210.793460][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1210.823510][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1210.950746][ T9693] sctp: [Deprecated]: syz.3.9229 (pid 9693) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1210.950746][ T9693] Use struct sctp_sack_info instead
[ 1211.102704][ T9696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9230'.
[ 1211.131407][ T9690] lo speed is unknown, defaulting to 1000
[ 1211.132735][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9231'.
[ 1211.150342][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9231'.
[ 1211.344635][ T9642] lo speed is unknown, defaulting to 1000
[ 1211.655290][ T9721] netlink: 'syz.2.9234': attribute type 32 has an invalid length.
[ 1211.663193][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9234'.
[ 1211.692764][ T9721] bond1: option coupled_control: invalid value (252)
[ 1211.702082][ T9721] bond1 (unregistering): Released all slaves
[ 1211.800623][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9236'.
[ 1211.817159][ T9724] macvlan2: entered promiscuous mode
[ 1211.833739][ T9724] macvlan2: entered allmulticast mode
[ 1211.839859][ T9724] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode
[ 1211.853541][ T9727] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1211.950020][ T9690] lo speed is unknown, defaulting to 1000
[ 1212.142728][ T9733] tipc: Started in network mode
[ 1212.159473][ T9733] tipc: Node identity 56cfdb1f5377, cluster identity 4711
[ 1212.184924][ T9733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1212.277128][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9238'.
[ 1212.395702][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1212.774667][ T9729] tipc: Disabling bearer <eth:syzkaller0>
[ 1212.873212][ T9690] chnl_net:caif_netlink_parms(): no params data found
[ 1212.888177][ T5830] Bluetooth: hci1: command tx timeout
[ 1213.042163][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1213.052966][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1213.062926][ T9690] bridge_slave_0: entered allmulticast mode
[ 1213.080914][ T9690] bridge_slave_0: entered promiscuous mode
[ 1213.089470][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9246'.
[ 1213.114729][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1213.121954][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1213.135271][ T9690] bridge_slave_1: entered allmulticast mode
[ 1213.165837][ T9690] bridge_slave_1: entered promiscuous mode
[ 1213.220322][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1213.239009][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1213.339623][ T9690] team0: Port device team_slave_0 added
[ 1213.401265][ T9690] team0: Port device team_slave_1 added
[ 1213.479275][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9252'.
[ 1213.504938][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1213.512141][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1213.551420][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1213.570713][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1213.578016][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1213.606284][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1213.779558][ T9690] hsr_slave_0: entered promiscuous mode
[ 1213.812318][ T9690] hsr_slave_1: entered promiscuous mode
[ 1213.837120][ T9690] debugfs: 'hsr0' already exists in 'hsr'
[ 1213.870410][ T9690] Cannot create hsr debugfs directory
[ 1213.876557][    T9] hid-generic 0005:10CF:54FE.0001: item fetching failed at offset 0/1
[ 1213.889928][ T9795] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9256'.
[ 1213.911109][    T9] hid-generic 0005:10CF:54FE.0001: probe with driver hid-generic failed with error -22
[ 1213.964068][ T9795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1213.975200][ T9795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1213.986523][ T9795] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1214.011938][ T9795] bond0 (unregistering): Released all slaves
[ 1214.233917][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1214.241993][    C0] lec:lec_tx_timeout: lec0
[ 1214.246653][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1214.376289][ T9809] lo speed is unknown, defaulting to 1000
[ 1214.838024][ T9809] lo speed is unknown, defaulting to 1000
[ 1214.910702][ T9826] syzkaller1: entered promiscuous mode
[ 1214.917018][ T9826] syzkaller1: entered allmulticast mode
[ 1214.964030][ T5830] Bluetooth: hci1: command tx timeout
[ 1215.222219][ T9836] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[ 1215.454697][ T9690] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1215.509512][ T9690] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1215.598646][ T9690] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1215.652776][ T9690] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1215.977378][ T9863] lo speed is unknown, defaulting to 1000
[ 1215.980204][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1216.044959][ T9690] 8021q: adding VLAN 0 to HW filter on device team0
[ 1216.058136][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1216.065317][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1216.124882][ T9869] __nla_validate_parse: 5 callbacks suppressed
[ 1216.124900][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9272'.
[ 1216.156624][ T9869] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1216.200271][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.207469][ T7231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1216.276247][ T9878] netlink: 'syz.1.9273': attribute type 21 has an invalid length.
[ 1216.292936][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9273'.
[ 1216.332106][ T9880] nft_compat: unsupported protocol 0
[ 1216.350972][ T9690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1216.687899][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1216.837690][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9279'.
[ 1216.848142][ T9910] netlink: 'syz.1.9279': attribute type 10 has an invalid length.
[ 1216.859584][ T9910] team0: Failed to send options change via netlink (err -105)
[ 1216.867615][ T9910] team0: Port device 
4
@0Ù added
[ 1216.882028][ T9863] lo speed is unknown, defaulting to 1000
[ 1217.046447][ T5830] Bluetooth: hci1: command tx timeout
[ 1217.278768][ T9690] veth0_vlan: entered promiscuous mode
[ 1217.311792][ T9690] veth1_vlan: entered promiscuous mode
[ 1217.399068][ T9690] veth0_macvtap: entered promiscuous mode
[ 1217.419610][ T9690] veth1_macvtap: entered promiscuous mode
[ 1217.452489][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1217.473222][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1217.550996][ T7237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1217.573237][ T7237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1217.622655][ T7237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1217.632844][ T7237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1219.124783][ T5830] Bluetooth: hci1: command tx timeout
[ 1219.254170][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1219.262814][    C0] lec:lec_tx_timeout: lec0
[ 1219.267560][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1219.507560][ T9896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1219.517170][ T9899] netlink: 'syz.3.9280': attribute type 3 has an invalid length.
[ 1219.536888][ T9899] netlink: 'syz.3.9280': attribute type 1 has an invalid length.
[ 1219.554544][ T9899] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9280'.
[ 1219.564632][ T9899] NCSI netlink: No device for ifindex 808464432
[ 1219.707152][ T7231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1219.735499][ T7231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1219.857416][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1219.869849][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1219.908915][ T9934] netlink: 'syz.2.9287': attribute type 5 has an invalid length.
[ 1220.205233][ T9947] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1220.209694][ T9952] netlink: zone id is out of range
[ 1220.218566][ T9947] 8021q: adding VLAN 0 to HW filter on device team0
[ 1220.223194][ T9958] netlink: zone id is out of range
[ 1220.230559][ T9958] netlink: zone id is out of range
[ 1220.236515][ T9952] netlink: zone id is out of range
[ 1220.241872][ T9958] netlink: zone id is out of range
[ 1220.244526][ T9952] netlink: zone id is out of range
[ 1220.247946][ T9958] netlink: zone id is out of range
[ 1220.259140][ T9958] netlink: zone id is out of range
[ 1220.264730][ T9958] netlink: zone id is out of range
[ 1220.352440][ T9956] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1220.365005][ T9956] bond0 (unregistering): Released all slaves
[ 1220.385237][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9292'.
[ 1220.396591][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9292'.
[ 1220.453726][ T9972] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9295'.
[ 1220.565264][ T9981] netlink: 'syz.4.9298': attribute type 2 has an invalid length.
[ 1220.595348][ T9982] mac80211_hwsim hwsim106 syzkaller0: entered promiscuous mode
[ 1220.605663][ T9982] mac80211_hwsim hwsim106 syzkaller0: entered allmulticast mode
[ 1220.619761][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9299'.
[ 1220.698252][ T9986] bridge0: port 3(macvlan2) entered blocking state
[ 1220.706127][ T9986] bridge0: port 3(macvlan2) entered disabled state
[ 1220.712952][ T9986] macvlan2: entered allmulticast mode
[ 1220.720787][ T9986] macvlan2: left allmulticast mode
[ 1220.739577][ T9982] lo speed is unknown, defaulting to 1000
[ 1221.031261][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9301'.
[ 1221.062649][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9301'.
[ 1221.163457][ T9982] lo speed is unknown, defaulting to 1000
[ 1221.239884][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9304'.
[ 1223.195704][ T9966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1223.293087][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9307'.
[ 1223.322635][T10017] netlink: 1012 bytes leftover after parsing attributes in process `syz.2.9307'.
[ 1223.349739][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9307'.
[ 1223.792729][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9313'.
[ 1224.066088][T10049] net_ratelimit: 640 callbacks suppressed
[ 1224.066109][T10049] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1224.133436][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9316'.
[ 1224.273995][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1224.282281][    C0] lec:lec_tx_timeout: lec0
[ 1224.287119][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1224.316848][T10062] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9320'.
[ 1224.344349][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9320'.
[ 1224.359379][T10061] netlink: 'syz.3.9319': attribute type 1 has an invalid length.
[ 1224.412874][T10064] No such timeout policy "syz1"
[ 1224.423743][T10061] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9319'.
[ 1224.572736][T10083] gretap1: entered promiscuous mode
[ 1224.610633][T10067] lo speed is unknown, defaulting to 1000
[ 1225.190575][    T9] IPVS: starting estimator thread 0...
[ 1225.215912][T10102] netlink: 'syz.3.9329': attribute type 49 has an invalid length.
[ 1225.294247][T10099] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1225.469426][T10113] netlink: 'syz.3.9331': attribute type 39 has an invalid length.
[ 1227.591985][T10067] lo speed is unknown, defaulting to 1000
[ 1227.611249][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9333'.
[ 1227.934334][T10139] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[ 1227.943687][T10139] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9338'.
[ 1227.956212][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1227.966737][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1227.980025][T10137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.003543][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.039999][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.058873][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.103472][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.127775][T10138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9339'.
[ 1228.404177][T10138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.411689][T10138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.773544][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1228.826841][T10138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1229.264644][ T7231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.284522][ T7231] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.293546][ T7231] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.302601][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1229.302633][    C0] lec:lec_tx_timeout: lec0
[ 1229.311095][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1229.351592][ T7231] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.370213][T10159] tipc: Started in network mode
[ 1229.375532][T10159] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[ 1229.386432][T10159] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1229.399269][T10158] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1229.410976][T10158] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.490921][T10158] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1229.519664][T10158] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.739231][T10158] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1229.794407][T10158] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.875755][T10158] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1229.896868][T10158] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.956978][T10179] netlink: 'syz.0.9349': attribute type 13 has an invalid length.
[ 1230.031139][T10179] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1230.054250][T10179] syzkaller0: entered promiscuous mode
[ 1230.061418][T10179] syzkaller0: entered allmulticast mode
[ 1230.097158][T10179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1230.126285][T10178] tipc: Resetting bearer <eth:syzkaller0>
[ 1230.203244][T10178] tipc: Disabling bearer <eth:syzkaller0>
[ 1230.232707][ T7230] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1230.254001][ T7230] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.278011][ T7230] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1230.288757][ T7230] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.313315][T10202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1230.371323][ T7229] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1230.388795][ T7229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.399985][T10207] veth0: entered promiscuous mode
[ 1230.427220][ T7229] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1230.445429][ T7229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.678547][T10211] bond3 (unregistering): Released all slaves
[ 1230.927427][T10214] lo speed is unknown, defaulting to 1000
[ 1231.263080][T10239] lo speed is unknown, defaulting to 1000
[ 1231.510687][T10258] netlink: 'syz.0.9370': attribute type 1 has an invalid length.
[ 1231.542229][T10258] netlink: 'syz.0.9370': attribute type 3 has an invalid length.
[ 1231.579148][T10214] lo speed is unknown, defaulting to 1000
[ 1232.384799][T10269] lo speed is unknown, defaulting to 1000
[ 1232.387528][T10290] syzkaller0: entered promiscuous mode
[ 1232.397239][T10290] syzkaller0: entered allmulticast mode
[ 1232.542933][T10290] netlink: 'syz.2.9381': attribute type 11 has an invalid length.
[ 1232.761974][T10300] netlink: 'syz.2.9384': attribute type 4 has an invalid length.
[ 1232.775107][T10300] __nla_validate_parse: 161 callbacks suppressed
[ 1232.780914][T10300] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.9384'.
[ 1232.866979][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9384'.
[ 1233.040401][T10269] lo speed is unknown, defaulting to 1000
[ 1233.047378][T10318] tap0: tun_chr_ioctl cmd 35111
[ 1233.089786][T10319] lo speed is unknown, defaulting to 1000
[ 1233.628450][ T8913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1233.639867][ T8913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1233.648986][ T8913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1233.681859][ T8913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1233.717574][ T8913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1233.815331][T10327] lo speed is unknown, defaulting to 1000
[ 1234.173400][T10239] lo speed is unknown, defaulting to 1000
[ 1234.456957][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9390'.
[ 1234.596654][T10330] Bluetooth: MGMT ver 1.23
[ 1234.602262][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9390'.
[ 1234.709298][T10330] vlan2: entered promiscuous mode
[ 1234.715544][T10330] bond0: entered promiscuous mode
[ 1234.723518][T10330] bond_slave_0: entered promiscuous mode
[ 1234.729793][T10330] bond_slave_1: entered promiscuous mode
[ 1234.772393][T10319] lo speed is unknown, defaulting to 1000
[ 1235.041154][T10327] lo speed is unknown, defaulting to 1000
[ 1235.123884][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[ 1235.131944][    C0] lec:lec_tx_timeout: lec0
[ 1235.137194][T10338] netlink: 'syz.2.9391': attribute type 3 has an invalid length.
[ 1235.137311][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1235.245746][T10335] lo speed is unknown, defaulting to 1000
[ 1235.249687][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9391'.
[ 1235.495308][T10327] chnl_net:caif_netlink_parms(): no params data found
[ 1235.763396][T10327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1235.775338][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1235.783067][T10327] bridge_slave_0: entered allmulticast mode
[ 1235.807313][T10327] bridge_slave_0: entered promiscuous mode
[ 1235.818658][T10327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1235.826483][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.833777][T10327] bridge_slave_1: entered allmulticast mode
[ 1235.842978][T10327] bridge_slave_1: entered promiscuous mode
[ 1235.851437][ T5830] Bluetooth: hci0: command tx timeout
[ 1235.994944][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1236.008222][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1236.070267][T10327] team0: Port device team_slave_0 added
[ 1236.091135][T10327] team0: Port device team_slave_1 added
[ 1236.156533][T10335] lo speed is unknown, defaulting to 1000
[ 1236.199210][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1236.214768][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1236.272420][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1236.317162][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1236.326957][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1236.353395][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1236.587438][T10327] hsr_slave_0: entered promiscuous mode
[ 1236.625905][T10327] hsr_slave_1: entered promiscuous mode
[ 1236.655874][T10327] debugfs: 'hsr0' already exists in 'hsr'
[ 1236.661651][T10327] Cannot create hsr debugfs directory
[ 1237.022227][T10377] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9400'.
[ 1237.139978][T10381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9401'.
[ 1237.174394][T10381] netlink: 'syz.0.9401': attribute type 1 has an invalid length.
[ 1237.191033][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9401'.
[ 1237.312993][T10327] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.324458][T10327] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.465552][T10327] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.494149][T10327] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.558994][T10327] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.575821][T10327] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.576178][T10410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9411'.
[ 1237.622103][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9412'.
[ 1237.643362][T10327] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1237.653474][T10327] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.852800][T10419] __nla_validate_parse: 1 callbacks suppressed
[ 1237.852820][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9415'.
[ 1237.862235][T10327] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1237.889268][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9415'.
[ 1237.891277][T10327] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1237.911220][T10327] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1237.923012][T10327] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1237.924736][ T5830] Bluetooth: hci0: command tx timeout
[ 1238.079508][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9415'.
[ 1238.128616][T10437] xt_bpf: check failed: parse error
[ 1238.129179][T10327] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1238.186343][T10327] 8021q: adding VLAN 0 to HW filter on device team0
[ 1238.205193][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1238.212380][ T7231] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1238.245437][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1238.252828][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1238.474122][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.496768][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.524668][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.580709][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.624879][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.649105][T10454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1238.670702][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.683310][T10448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9422'.
[ 1238.741564][T10448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1238.749348][T10448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1238.840826][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1238.855979][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1238.978509][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1238.993392][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1239.077801][T10463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1239.086503][ T7234] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.101326][ T7234] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.137359][T10456] lo speed is unknown, defaulting to 1000
[ 1239.155878][ T7234] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.166395][ T7234] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.239038][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1239.251911][ T7234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.290207][ T7234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.320074][ T7234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.352205][ T7234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.400115][T10484] vlan2: entered promiscuous mode
[ 1239.412542][T10484] vlan2: entered allmulticast mode
[ 1239.424934][T10484] hsr_slave_1: entered allmulticast mode
[ 1239.633617][T10453] lo speed is unknown, defaulting to 1000
[ 1239.651780][T10327] veth0_vlan: entered promiscuous mode
[ 1239.679921][T10327] veth1_vlan: entered promiscuous mode
[ 1239.744539][T10327] veth0_macvtap: entered promiscuous mode
[ 1239.760113][T10327] veth1_macvtap: entered promiscuous mode
[ 1239.789574][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1239.808864][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1239.834700][ T7236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.856059][ T7236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.881885][ T7236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.896777][ T7236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1239.915778][T10502] openvswitch: netlink: Key type 195 is out of range max 32
[ 1239.962773][T10502] dvmrp6: entered allmulticast mode
[ 1240.004145][ T5830] Bluetooth: hci0: command tx timeout
[ 1240.057928][ T7225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.073904][ T7225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.147557][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.153929][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1240.163492][    C0] lec:lec_tx_timeout: lec0
[ 1240.167410][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.168398][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1240.205077][T30047] tipc: Node number set to 4269801494
[ 1240.317859][T10456] lo speed is unknown, defaulting to 1000
[ 1240.444384][T10515] syzkaller0: entered promiscuous mode
[ 1240.454489][T10515] syzkaller0: entered allmulticast mode
[ 1240.768708][T10453] lo speed is unknown, defaulting to 1000
[ 1241.023317][T10529] netlink: 'syz.2.9444': attribute type 1 has an invalid length.
[ 1241.131236][ T7231] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1241.150487][ T7231] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1241.178757][ T7231] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1241.197055][ T7231] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1241.668422][T10564] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1241.809779][T10572] bond0: Unable to set up delay as MII monitoring is disabled
[ 1241.828568][T10572] bond0 (unregistering): Released all slaves
[ 1241.921125][T10584] x_tables: ip6_tables: mh match: only valid for protocol 135
[ 1242.091012][ T5830] Bluetooth: hci0: command tx timeout
[ 1242.460241][T10616] vlan2: entered promiscuous mode
[ 1242.468031][T10620] netlink: 'syz.1.9465': attribute type 21 has an invalid length.
[ 1242.475018][T10616] bond0: entered promiscuous mode
[ 1242.493177][T10620] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1242.498074][T10616] bond_slave_0: entered promiscuous mode
[ 1242.506220][T10620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1242.506283][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[ 1242.506333][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[ 1242.528710][T10616] bond_slave_1: entered promiscuous mode
[ 1242.533661][T10620] IPv6: NLM_F_CREATE should be set when creating new route
[ 1242.788952][T10636] netlink: 'syz.4.9472': attribute type 1 has an invalid length.
[ 1242.876182][T10642] __nla_validate_parse: 150 callbacks suppressed
[ 1242.876203][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9472'.
[ 1242.914853][T10642] nbd: illegal input index -1113835520
[ 1243.066051][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9475'.
[ 1243.106456][T10646] erspan0: entered promiscuous mode
[ 1243.116753][T10646] erspan0: left promiscuous mode
[ 1243.341187][T10651] lo speed is unknown, defaulting to 1000
[ 1243.442681][T30047] IPVS: starting estimator thread 0...
[ 1243.494982][T10657] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9478'.
[ 1243.504818][T10657] netlink: 'syz.2.9478': attribute type 1 has an invalid length.
[ 1243.515387][    T9] IPVS: starting estimator thread 0...
[ 1243.526360][T10668] xt_TCPMSS: Only works on TCP SYN packets
[ 1243.564028][T10664] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1243.586275][T10672] x_tables: duplicate underflow at hook 2
[ 1243.605711][T10669] IPVS: using max 34 ests per chain, 81600 per kthread
[ 1243.615248][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9481'.
[ 1243.624636][T10673] veth1_to_batadv: entered promiscuous mode
[ 1243.630575][T10673] veth1_to_batadv: entered allmulticast mode
[ 1243.686681][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9482'.
[ 1243.697552][T10674] netlink: 'syz.3.9482': attribute type 21 has an invalid length.
[ 1243.754917][T10674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9482'.
[ 1243.806634][T10677] tipc: Started in network mode
[ 1243.821789][T10677] tipc: Node identity ffe5, cluster identity 4711
[ 1243.848859][T10677] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1243.926466][T10677] netlink: 'syz.2.9483': attribute type 16 has an invalid length.
[ 1243.944130][T10677] netlink: 'syz.2.9483': attribute type 17 has an invalid length.
[ 1243.988341][T10681] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9484'.
[ 1244.048157][T10677] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1244.058476][T10677] 8021q: adding VLAN 0 to HW filter on device team0
[ 1244.076915][T10677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1244.353157][T10688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9485'.
[ 1244.461872][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9486'.
[ 1244.558893][T10694] netlink: 'syz.3.9488': attribute type 1 has an invalid length.
[ 1244.649273][T10694] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1244.674576][T10694] bond0: (slave batadv1): making interface the new active one
[ 1244.683143][T10694] bond0: (slave batadv1): Enslaving as an active interface with an up link
[ 1245.183946][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1245.192001][    C0] lec:lec_tx_timeout: lec0
[ 1245.196750][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1245.353752][T10651] lo speed is unknown, defaulting to 1000
[ 1245.518527][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9495'.
[ 1245.706094][T10760] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1245.715942][T10760] team0: Port device bond1 added
[ 1245.720977][T10763] pim6reg1: tun_chr_ioctl cmd 1074025677
[ 1245.730066][T10763] pim6reg1: linktype set to 774
[ 1245.973354][T10778] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[ 1246.189894][T10787] delete_channel: no stack
[ 1246.208301][T10783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1246.245033][T10782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1246.359492][T10782] tipc: Disabling bearer <eth:syzkaller0>
[ 1246.598554][T10813] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1246.964742][T10834] netlink: 'syz.2.9520': attribute type 13 has an invalid length.
[ 1246.973237][T10834] netlink: 'syz.2.9520': attribute type 17 has an invalid length.
[ 1247.110875][T10834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1247.192944][ T7236] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.213982][ T7236] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.265799][ T7236] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.305222][ T7236] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.362496][T10851] lo speed is unknown, defaulting to 1000
[ 1247.472034][T10874] netlink: 'syz.2.9530': attribute type 3 has an invalid length.
[ 1248.105122][T10898] __nla_validate_parse: 8 callbacks suppressed
[ 1248.105142][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9539'.
[ 1248.141958][T10898] 8021q: VLANs not supported on vxcan0
[ 1248.349163][T10913] geneve2: entered promiscuous mode
[ 1248.356758][ T7234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1248.366024][ T7234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1248.378623][ T7234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1248.388292][T10851] lo speed is unknown, defaulting to 1000
[ 1248.400623][ T7234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1248.522746][T10916] netlink: 'syz.2.9545': attribute type 1 has an invalid length.
[ 1248.604464][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9545'.
[ 1248.620256][T10916] bond2: entered promiscuous mode
[ 1248.625942][T10916] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1248.644366][T10926] bond2: entered allmulticast mode
[ 1248.730164][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9549'.
[ 1248.778100][T10916] bond2: (slave bridge3): making interface the new active one
[ 1248.795554][T10916] bridge3: entered promiscuous mode
[ 1248.821502][T10916] bridge3: entered allmulticast mode
[ 1248.831487][T10916] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1248.876670][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9552'.
[ 1248.913219][T10938] ip6gretap1: entered promiscuous mode
[ 1248.949040][T10938] ip6gretap1: entered allmulticast mode
[ 1248.992441][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9553'.
[ 1249.337903][T10955] vlan2: entered promiscuous mode
[ 1249.342973][T10955] geneve1: entered promiscuous mode
[ 1249.384966][T10955] vlan2: entered allmulticast mode
[ 1249.390286][T10955] geneve1: entered allmulticast mode
[ 1249.722829][T10979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9563'.
[ 1249.736194][T10979] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9563'.
[ 1249.839287][T10979] bond2: option resend_igmp: invalid value (2878)
[ 1249.852307][T10979] bond2: option resend_igmp: allowed values 0 - 255
[ 1249.886418][T10979] bond2 (unregistering): Released all slaves
[ 1250.062218][T10997] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9570'.
[ 1250.070704][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9571'.
[ 1250.090450][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9570'.
[ 1250.203970][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1250.212064][    C0] lec:lec_tx_timeout: lec0
[ 1250.216951][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1250.401381][T11015] lo speed is unknown, defaulting to 1000
[ 1251.125801][ T8913] Bluetooth: hci0: command 0x0405 tx timeout
[ 1251.293777][T11024] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1251.486682][T11031] lo speed is unknown, defaulting to 1000
[ 1251.495458][T11026] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1251.667108][T11015] lo speed is unknown, defaulting to 1000
[ 1252.570734][T11031] lo speed is unknown, defaulting to 1000
[ 1254.339481][ T7231] veth11: left allmulticast mode
[ 1254.353915][ T7231] veth11: left promiscuous mode
[ 1254.358931][ T7231] bridge5: port 3(veth11) entered disabled state
[ 1254.387746][ T7231] veth0_to_bond: left allmulticast mode
[ 1254.393804][ T7231] veth0_to_bond: left promiscuous mode
[ 1254.401047][ T7231] bridge5: port 2(veth0_to_bond) entered disabled state
[ 1254.411057][ T7231] veth9: left allmulticast mode
[ 1254.417729][ T7231] veth9: left promiscuous mode
[ 1254.422911][ T7231] bridge5: port 1(veth9) entered disabled state
[ 1254.767445][ T7231] dvmrp6 (unregistering): left allmulticast mode
[ 1254.789192][ T7231] dvmrp1 (unregistering): left allmulticast mode
[ 1254.875361][T11056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1254.887848][T11089] __nla_validate_parse: 9 callbacks suppressed
[ 1254.887867][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9593'.
[ 1255.208478][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9603'.
[ 1255.229156][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1255.237233][    C0] lec:lec_tx_timeout: lec0
[ 1255.243163][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1255.579009][ T7231] bond0 (unregistering): (slave 
3
2
): Releasing backup interface
[ 1255.588542][ T7231] 
: left promiscuous mode
[ 1255.595495][ T7231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1255.607117][ T7231] bond_slave_1: left promiscuous mode
[ 1255.613065][ T7231] bond0 (unregistering): Released all slaves
[ 1255.737670][ T7231] bond1 (unregistering): Released all slaves
[ 1255.750500][ T7231] bond2 (unregistering): Released all slaves
[ 1255.775327][ T7231] bond3 (unregistering): Released all slaves
[ 1255.921618][ T7231] bond4 (unregistering): Released all slaves
[ 1256.103309][ T7231] bond5 (unregistering): Released all slaves
[ 1256.116556][ T7231] bond6 (unregistering): Released all slaves
[ 1256.241991][ T7231] bond7 (unregistering): (slave bond8): Releasing backup interface
[ 1256.251431][ T7231] bond8 (unregistering): left promiscuous mode
[ 1256.257895][ T7231] bond8 (unregistering): left allmulticast mode
[ 1256.264634][ T7231] bond7 (unregistering): Released all slaves
[ 1256.382632][ T7231] bond8 (unregistering): Released all slaves
[ 1256.536373][T11144] tipc: Resetting bearer <eth:syzkaller0>
[ 1256.628373][T11144] mac80211_hwsim hwsim106 syzkaller0: left promiscuous mode
[ 1256.638553][T11144] mac80211_hwsim hwsim106 syzkaller0: left allmulticast mode
[ 1256.696197][T11158] netlink: 'syz.2.9610': attribute type 1 has an invalid length.
[ 1256.708310][T11144] geneve2: left promiscuous mode
[ 1256.724318][T11144] ip6gretap1: left promiscuous mode
[ 1256.729677][T11144] ip6gretap1: left allmulticast mode
[ 1256.738206][T11144] vlan2: left promiscuous mode
[ 1256.743012][T11144] geneve1: left promiscuous mode
[ 1256.749218][T11144] vlan2: left allmulticast mode
[ 1256.754378][T11144] geneve1: left allmulticast mode
[ 1256.827571][T11166] xt_socket: unknown flags 0x50
[ 1256.832866][T11166] xt_socket: unknown flags 0x50
[ 1256.842043][T11166] xt_socket: unknown flags 0x50
[ 1256.847456][T11166] xt_socket: unknown flags 0x50
[ 1256.852766][T11166] xt_socket: unknown flags 0x50
[ 1256.859442][T11166] xt_socket: unknown flags 0x50
[ 1256.865117][T11166] xt_socket: unknown flags 0x50
[ 1256.870326][T11166] xt_socket: unknown flags 0x50
[ 1256.876290][T11166] xt_socket: unknown flags 0x50
[ 1256.882497][T11166] xt_socket: unknown flags 0x50
[ 1256.887739][ T7231] : left promiscuous mode
[ 1256.916971][T11156] netlink: 'syz.0.9609': attribute type 29 has an invalid length.
[ 1256.944516][T11158] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1256.974201][ T7236] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.001327][ T7236] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.027601][T11163] bond3: (slave gretap1): making interface the new active one
[ 1257.046554][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9613'.
[ 1257.046782][T11163] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1257.068505][ T7231] tipc: Left network mode
[ 1257.072959][ T7236] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.118486][ T7236] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.383673][T11186] syzkaller0: entered promiscuous mode
[ 1257.389814][T11186] syzkaller0: entered allmulticast mode
[ 1257.534397][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9621'.
[ 1257.606642][T11193] lo speed is unknown, defaulting to 1000
[ 1257.667358][T11200] netlink: 'syz.0.9622': attribute type 83 has an invalid length.
[ 1258.192845][T11206] lo speed is unknown, defaulting to 1000
[ 1258.287522][T11215] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.9626'.
[ 1258.381530][T11207] netlink: 'syz.3.9624': attribute type 2 has an invalid length.
[ 1258.659563][T11224] bond2: option lp_interval: invalid value (0)
[ 1258.665998][T11224] bond2: option lp_interval: allowed values 1 - 2147483647
[ 1258.708297][T11224] bond2 (unregistering): Released all slaves
[ 1258.753594][T11231] netlink: 'syz.1.9630': attribute type 1 has an invalid length.
[ 1258.773170][T11231] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9630'.
[ 1258.785274][T11231] netlink: 658 bytes leftover after parsing attributes in process `syz.1.9630'.
[ 1258.802598][T11231] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9630'.
[ 1258.855154][T11231] netlink: 'syz.1.9630': attribute type 1 has an invalid length.
[ 1258.948941][T11231] bond2: entered promiscuous mode
[ 1258.974469][T11231] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1259.102256][T11211] lo speed is unknown, defaulting to 1000
[ 1259.109051][T11206] lo speed is unknown, defaulting to 1000
[ 1259.223528][T11247] SET target dimension over the limit!
[ 1259.615263][T11263] netlink: 'syz.1.9637': attribute type 1 has an invalid length.
[ 1259.623263][T11263] netlink: 'syz.1.9637': attribute type 8 has an invalid length.
[ 1259.644178][T11263] netlink: 'syz.1.9637': attribute type 9 has an invalid length.
[ 1259.652042][T11263] netlink: 'syz.1.9637': attribute type 10 has an invalid length.
[ 1259.694065][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9637'.
[ 1259.747562][T11263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9637'.
[ 1259.784689][T11271] dvmrp12: entered allmulticast mode
[ 1259.794723][T11193] lo speed is unknown, defaulting to 1000
[ 1259.815172][T11272] dvmrp12: left allmulticast mode
[ 1260.150219][ T7231] hsr_slave_0: left promiscuous mode
[ 1260.175131][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1260.183714][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1260.192128][ T7231] batman_adv: batadv0: Removing interface: ipvlan0
[ 1260.254099][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1260.262305][    C0] lec:lec_tx_timeout: lec0
[ 1260.267283][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1260.481244][T11285] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9642'.
[ 1260.490753][T11285] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1260.854555][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9643'.
[ 1261.753000][ T7231] team0 (unregistering): Port device team_slave_1 removed
[ 1261.798286][ T7231] team0 (unregistering): Port device team_slave_0 removed
[ 1262.094597][ T7231] team0 (unregistering): Port device 
4
@0Ù removed
[ 1262.126720][T11279] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1262.156262][T11280] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1262.172117][T11280] bond0: (slave hsr0): Error -95 calling set_mac_address
[ 1262.200315][T11211] lo speed is unknown, defaulting to 1000
[ 1262.878847][T11307] gretap2: entered allmulticast mode
[ 1263.048616][ T7231] IPVS: stop unused estimator thread 0...
[ 1263.402204][T11327] validate_nla: 2 callbacks suppressed
[ 1263.402222][T11327] netlink: 'syz.3.9652': attribute type 2 has an invalid length.
[ 1263.418474][T11327] netlink: 'syz.3.9652': attribute type 1 has an invalid length.
[ 1263.426507][T11327] netlink: 'syz.3.9652': attribute type 1 has an invalid length.
[ 1263.648308][T11340] : entered promiscuous mode
[ 1264.916072][T11385] netlink: 'syz.1.9667': attribute type 1 has an invalid length.
[ 1264.991007][T11385] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1265.049874][T11395] bond3: (slave geneve2): making interface the new active one
[ 1265.085361][T11395] bond3: (slave geneve2): Enslaving as an active interface with an up link
[ 1265.219438][T11413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1265.273941][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1265.282093][    C0] lec:lec_tx_timeout: lec0
[ 1265.286975][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1265.327516][T11422] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[ 1265.331771][T11419] netlink: 'syz.4.9674': attribute type 1 has an invalid length.
[ 1265.398975][T11419] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1265.679285][T11443] macsec1: left promiscuous mode
[ 1265.688024][T11443] bond2: left promiscuous mode
[ 1265.692935][T11443] bridge3: left promiscuous mode
[ 1265.784719][T11450] batman_adv: batadv0: Adding interface: dummy0
[ 1265.798367][T11449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9682'.
[ 1265.804303][T11450] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1265.835769][T11450] batman_adv: batadv0: Interface activated: dummy0
[ 1265.846975][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9683'.
[ 1265.854858][T11443] batadv0: mtu less than device minimum
[ 1265.863269][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.875068][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.886813][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.898566][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.909765][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.920962][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.932067][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.943787][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1265.955544][T11443] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1266.241169][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9691'.
[ 1266.447246][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9693'.
[ 1267.144919][   T30] audit: type=1800 audit(1770322038.222:33): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9694" name="memory.events" dev="tmpfs" ino=765 res=0 errno=0
[ 1269.138746][T11465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1269.406325][T11510] lo speed is unknown, defaulting to 1000
[ 1269.416444][T11515] netlink: 'syz.0.9699': attribute type 2 has an invalid length.
[ 1269.424923][T11515] netlink: 'syz.0.9699': attribute type 1 has an invalid length.
[ 1269.502547][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9700'.
[ 1269.553543][T11517] bond3: option lacp_active: invalid value (8)
[ 1269.589167][T11517] bond3 (unregistering): Released all slaves
[ 1269.644197][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9700'.
[ 1269.683279][T11521] macvtap1: entered promiscuous mode
[ 1269.717970][T11521] mac80211_hwsim hwsim109 wlan1: entered promiscuous mode
[ 1269.811805][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9704'.
[ 1269.858183][T11533] macsec1: entered promiscuous mode
[ 1269.863436][T11533] dummy0: entered promiscuous mode
[ 1269.869598][T11533] macsec1: entered allmulticast mode
[ 1269.875436][T11533] dummy0: entered allmulticast mode
[ 1269.883703][T11533] dummy0: left allmulticast mode
[ 1269.889832][T11533] dummy0: left promiscuous mode
[ 1269.967024][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9705'.
[ 1269.981297][T11528] lo speed is unknown, defaulting to 1000
[ 1270.018608][T11539] netlink: 'syz.2.9705': attribute type 10 has an invalid length.
[ 1270.294102][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1270.302185][    C0] lec:lec_tx_timeout: lec0
[ 1270.306924][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1270.603787][T11555] lo speed is unknown, defaulting to 1000
[ 1270.613718][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9710'.
[ 1270.653927][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9710'.
[ 1270.765824][T11557] netlink: 'syz.0.9709': attribute type 3 has an invalid length.
[ 1270.882078][T11574] netlink: 'syz.3.9714': attribute type 1 has an invalid length.
[ 1270.950706][T11577] __nla_validate_parse: 2 callbacks suppressed
[ 1270.950725][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9714'.
[ 1271.035141][T11574] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1271.062352][T11574] netlink: 'syz.3.9714': attribute type 12 has an invalid length.
[ 1271.104022][T11574] netlink: 'syz.3.9714': attribute type 5 has an invalid length.
[ 1271.112595][T11574] netlink: 'syz.3.9714': attribute type 2 has an invalid length.
[ 1271.123926][T11574] netlink: 'syz.3.9714': attribute type 7 has an invalid length.
[ 1271.131938][T11574] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9714'.
[ 1271.593049][T11605] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9723'.
[ 1272.163299][T11634] netlink: 'syz.2.9726': attribute type 4 has an invalid length.
[ 1272.308757][T11629] bond4: (slave netdevsim1): Device is not bonding slave
[ 1272.330986][T11629] bond4: option active_slave: invalid value (netdevsim1)
[ 1272.342102][T11629] bond4 (unregistering): Released all slaves
[ 1272.582355][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9727'.
[ 1272.616282][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9728'.
[ 1272.682917][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9728'.
[ 1272.761940][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9729'.
[ 1272.839019][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9731'.
[ 1272.890684][T11652] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1273.368700][T11683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9735'.
[ 1273.515939][T11683] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1273.876332][T11703] bond2 (unregistering): Released all slaves
[ 1273.957269][T11701] lo speed is unknown, defaulting to 1000
[ 1274.295062][T11718] lo speed is unknown, defaulting to 1000
[ 1274.323646][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9744'.
[ 1274.416086][T11731] net_ratelimit: 12 callbacks suppressed
[ 1274.416106][T11731] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1274.786028][T11745] validate_nla: 2 callbacks suppressed
[ 1274.786047][T11745] netlink: 'syz.3.9749': attribute type 1 has an invalid length.
[ 1274.875612][T11745] bond2: entered promiscuous mode
[ 1274.924140][T11745] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1275.002314][T11747] bond2: (slave bridge1): making interface the new active one
[ 1275.011031][T11747] bridge1: entered promiscuous mode
[ 1275.017399][T11747] bond2: (slave bridge1): Enslaving as an active interface with an up link
[ 1275.053399][T11752] netlink: 'syz.2.9751': attribute type 50 has an invalid length.
[ 1276.083890][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms
[ 1276.091941][    C0] lec:lec_tx_timeout: lec0
[ 1276.097240][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1276.599385][T11800] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1276.633255][T11791] __nla_validate_parse: 3 callbacks suppressed
[ 1276.633276][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9761'.
[ 1276.660916][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9761'.
[ 1276.719652][T11793] lo speed is unknown, defaulting to 1000
[ 1276.729915][T11808] lo: Caught tx_queue_len zero misconfig
[ 1276.756481][T11791] GUP no longer grows the stack in syz.3.9761 (11791): 200000008000-200000800000 (200000007000)
[ 1276.784211][T11791] CPU: 0 UID: 0 PID: 11791 Comm: syz.3.9761 Not tainted syzkaller #0 PREEMPT(full) 
[ 1276.784251][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1276.784263][T11791] Call Trace:
[ 1276.784272][T11791]  <TASK>
[ 1276.784280][T11791]  dump_stack_lvl+0xe8/0x150
[ 1276.784312][T11791]  __get_user_pages+0x2453/0x29d0
[ 1276.784360][T11791]  ? __gup_longterm_locked+0xc4e/0x1630
[ 1276.784388][T11791]  ? down_read_killable+0x1bb/0x340
[ 1276.784424][T11791]  __gup_longterm_locked+0xdcf/0x1630
[ 1276.784463][T11791]  ? sanity_check_pinned_pages+0x1212/0x12d0
[ 1276.784497][T11791]  gup_fast_fallback+0x1d82/0x22e0
[ 1276.784556][T11791]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 1276.784587][T11791]  ? pin_user_pages_fast+0x4d/0xb0
[ 1276.784614][T11791]  iov_iter_extract_pages+0x37b/0x5f0
[ 1276.784648][T11791]  extract_iter_to_sg+0xe62/0x2520
[ 1276.784686][T11791]  ? __pfx_extract_iter_to_sg+0x10/0x10
[ 1276.784740][T11791]  ? __asan_memset+0x22/0x50
[ 1276.784771][T11791]  af_alg_get_rsgl+0x436/0x810
[ 1276.784817][T11791]  skcipher_recvmsg+0x3a3/0x1140
[ 1276.784865][T11791]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1276.784891][T11791]  ? __local_bh_enable_ip+0xd0/0x130
[ 1276.784911][T11791]  ? skcipher_check_key+0x173/0x1e0
[ 1276.784929][T11791]  ? __pfx_skcipher_recvmsg_nokey+0x10/0x10
[ 1276.784958][T11791]  ? __pfx_skcipher_recvmsg_nokey+0x10/0x10
[ 1276.784984][T11791]  sock_recvmsg+0x22c/0x270
[ 1276.785009][T11791]  __sys_recvfrom+0x240/0x3c0
[ 1276.785040][T11791]  ? __pfx___sys_recvfrom+0x10/0x10
[ 1276.785062][T11791]  ? do_futex+0x333/0x420
[ 1276.785118][T11791]  ? __pfx___se_sys_futex+0x10/0x10
[ 1276.785145][T11791]  ? rcu_is_watching+0x15/0xb0
[ 1276.785170][T11791]  __x64_sys_recvfrom+0xde/0x100
[ 1276.785205][T11791]  do_syscall_64+0xe2/0xf80
[ 1276.785231][T11791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.785249][T11791]  ? trace_irq_disable+0x37/0x100
[ 1276.785268][T11791]  ? clear_bhb_loop+0x60/0xb0
[ 1276.785291][T11791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.785310][T11791] RIP: 0033:0x7f865019aeb9
[ 1276.785330][T11791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1276.785346][T11791] RSP: 002b:00007f8651039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 1276.785369][T11791] RAX: ffffffffffffffda RBX: 00007f8650415fa0 RCX: 00007f865019aeb9
[ 1276.785385][T11791] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000005
[ 1276.785398][T11791] RBP: 00007f8650208c1f R08: 0000000000000000 R09: ffffffffffffffb5
[ 1276.785412][T11791] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1276.785425][T11791] R13: 00007f8650416038 R14: 00007f8650415fa0 R15: 00007fff8a288428
[ 1276.785459][T11791]  </TASK>
[ 1277.186463][T11791] lo speed is unknown, defaulting to 1000
[ 1277.334705][ T7225] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1277.350908][ T7225] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1277.360959][ T7225] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1277.376184][T11821] netlink: 'syz.0.9771': attribute type 9 has an invalid length.
[ 1277.485664][ T7225] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1277.689289][T11828] netlink: 'syz.0.9774': attribute type 10 has an invalid length.
[ 1278.160151][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9777'.
[ 1278.169738][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9777'.
[ 1278.232279][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9778'.
[ 1278.342723][T11843] block nbd9: Unsupported socket: should be TCP or UNIX.
[ 1278.437512][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9778'.
[ 1278.464072][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9778'.
[ 1278.689597][T11856] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[ 1278.728390][T11857] bridge3: entered promiscuous mode
[ 1278.736974][T11857] bridge3: entered allmulticast mode
[ 1278.949220][T11877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9791'.
[ 1278.959368][T11880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9791'.
[ 1279.009379][T11878] netlink: 136 bytes leftover after parsing attributes in process `syz.1.9789'.
[ 1279.026374][T11878] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1279.063375][T11881] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[ 1279.210104][T11901] netlink: 'syz.3.9793': attribute type 66 has an invalid length.
[ 1279.569782][T11920] 
: renamed from bond_slave_0
[ 1280.264698][T11959] netlink: 'syz.2.9807': attribute type 6 has an invalid length.
[ 1280.370925][T11965] netlink: 'syz.0.9809': attribute type 21 has an invalid length.
[ 1280.379239][T11965] netlink: 'syz.0.9809': attribute type 5 has an invalid length.
[ 1280.387643][T11965] netlink: 'syz.0.9809': attribute type 6 has an invalid length.
[ 1280.501227][T11967] tipc: Started in network mode
[ 1280.509664][T11967] tipc: Node identity 223ef4766cb8, cluster identity 4711
[ 1280.521706][T11967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1280.538671][T11968] lo speed is unknown, defaulting to 1000
[ 1280.619747][T11966] tipc: Disabling bearer <eth:syzkaller0>
[ 1281.123936][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[ 1281.131997][    C0] lec:lec_tx_timeout: lec0
[ 1281.432159][T12021] lo speed is unknown, defaulting to 1000
[ 1282.564003][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1283.320184][T12071] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1283.426256][T12077] netlink: 'syz.4.9843': attribute type 1 has an invalid length.
[ 1283.477521][T12078] __nla_validate_parse: 11 callbacks suppressed
[ 1283.477539][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9843'.
[ 1283.645308][T12091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9847'.
[ 1283.748518][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9849'.
[ 1283.758060][T12096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9849'.
[ 1283.865890][T12100] syzkaller1: entered promiscuous mode
[ 1283.884450][T12100] syzkaller1: entered allmulticast mode
[ 1283.891515][T12100] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[ 1284.002162][T12115] netlink: 136 bytes leftover after parsing attributes in process `syz.4.9856'.
[ 1284.029740][T12115] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1284.070503][T12119] ip6erspan0: entered promiscuous mode
[ 1284.113770][T12124] netlink: 'syz.2.9857': attribute type 1 has an invalid length.
[ 1284.232033][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9860'.
[ 1284.275589][T12124] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1284.312618][T12132] bond4: (slave veth1): Enslaving as an active interface with a down link
[ 1284.404240][ T9635] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1284.498557][T12148] lo speed is unknown, defaulting to 1000
[ 1284.609232][T12157] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1284.654212][ T9635] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1284.709932][T12164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1284.800815][T12164] syzkaller0: entered promiscuous mode
[ 1284.814969][T12164] syzkaller0: entered allmulticast mode
[ 1284.825865][T12164] tipc: Resetting bearer <eth:syzkaller0>
[ 1284.903452][T12162] tipc: Resetting bearer <eth:syzkaller0>
[ 1285.042944][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9870'.
[ 1286.828605][T12162] tipc: Disabling bearer <eth:syzkaller0>
[ 1286.885520][ T7236] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1286.923198][T30047] tipc: Node number set to 1317467254
[ 1287.079466][T12183] lo speed is unknown, defaulting to 1000
[ 1287.398395][T12202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9878'.
[ 1287.630642][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9877'.
[ 1287.722788][T12210] lo speed is unknown, defaulting to 1000
[ 1287.935605][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9881'.
[ 1287.972013][ T7235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1287.994026][ T7235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1288.484873][   T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1288.670760][T12255] __nla_validate_parse: 1 callbacks suppressed
[ 1288.670778][T12255] netlink: 760 bytes leftover after parsing attributes in process `syz.2.9892'.
[ 1288.689608][T12254] netlink: 760 bytes leftover after parsing attributes in process `syz.2.9892'.
[ 1288.723345][T12254] pimreg: entered allmulticast mode
[ 1288.735304][T12254] pimreg: left allmulticast mode
[ 1288.846544][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9893'.
[ 1288.856304][T12259] nbd: illegal input index -1113835520
[ 1289.010317][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.091547][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.214193][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.227597][T12271] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1289.245178][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.246937][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9897'.
[ 1289.271156][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.292578][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'.
[ 1289.351900][T12271] netlink: set zone limit has 4 unknown bytes
[ 1289.477432][T12275] lo speed is unknown, defaulting to 1000
[ 1290.255873][T12303] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1290.289971][T12303] bond4: (slave ip6gretap2): making interface the new active one
[ 1290.300718][T12303] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 1290.460207][T12315] netlink: 'syz.2.9911': attribute type 12 has an invalid length.
[ 1290.490421][T12322] netlink: 'syz.1.9913': attribute type 6 has an invalid length.
[ 1290.632992][T12334] nbd: must specify a size in bytes for the device
[ 1290.652669][T12336] xt_policy: neither incoming nor outgoing policy selected
[ 1290.688424][T12336] netlink: 'syz.4.9917': attribute type 1 has an invalid length.
[ 1290.697003][T12336] netlink: 'syz.4.9917': attribute type 2 has an invalid length.
[ 1290.724835][T12336] netlink: 'syz.4.9917': attribute type 1 has an invalid length.
[ 1290.732625][T12336] netlink: 'syz.4.9917': attribute type 3 has an invalid length.
[ 1290.796344][   T30] audit: type=1107 audit(1770322061.862:34): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1291.606907][T12393] SET target dimension over the limit!
[ 1291.735543][T12393] SET target dimension over the limit!
[ 1291.741643][T12393] SET target dimension over the limit!
[ 1291.752703][T12393] SET target dimension over the limit!
[ 1291.758828][T12393] SET target dimension over the limit!
[ 1291.765069][T12393] SET target dimension over the limit!
[ 1291.772258][T12393] SET target dimension over the limit!
[ 1291.785292][T12393] SET target dimension over the limit!
[ 1291.791216][T12393] SET target dimension over the limit!
[ 1291.799689][T12393] SET target dimension over the limit!
[ 1291.988651][T12415] netlink: 'syz.3.9938': attribute type 6 has an invalid length.
[ 1291.998321][T12415] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1292.052923][T12417] lo speed is unknown, defaulting to 1000
[ 1292.084200][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1292.306743][T12433] netlink: 'syz.0.9942': attribute type 1 has an invalid length.
[ 1292.365282][T12433] bridge0: left allmulticast mode
[ 1292.847622][T12446] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1292.864617][T12446] team0: Port device bond3 added
[ 1297.364060][ T8913] Bluetooth: hci2: command 0x0406 tx timeout
[ 1300.408184][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1300.408346][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1300.420003][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1300.430998][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[ 1302.484136][ T8913] Bluetooth: hci4: command 0x0419 tx timeout
[ 1306.084403][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms
[ 1306.092426][    C0] lec:lec_tx_timeout: lec0
[ 1306.097124][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1311.123952][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[ 1311.131990][    C0] lec:lec_tx_timeout: lec0
[ 1312.724513][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[ 1318.324201][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1339.787101][T12472] __nla_validate_parse: 76 callbacks suppressed
[ 1339.787119][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9951'.
[ 1339.804476][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9951'.
[ 1339.804717][T12466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9948'.
[ 1339.837053][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9952'.
[ 1339.927340][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9954'.
[ 1340.356765][T12503] mac80211_hwsim hwsim109 wlan1: vlans aren't supported yet for dev_uc|mc_add()
[ 1340.680190][T12513] IPVS: Scheduler module ip_vs_ not found
[ 1340.721442][T12512] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[ 1340.736728][T12512] team0 (unregistering): Port device team_slave_0 removed
[ 1340.756313][T12512] team0 (unregistering): Failed to send options change via netlink (err -105)
[ 1340.767903][T12512] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[ 1340.779938][T12512] team0 (unregistering): Port device team_slave_1 removed
[ 1340.828491][T12517] lo speed is unknown, defaulting to 1000
[ 1340.977880][   T30] audit: type=1804 audit(1770322112.052:35): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9971" name="/newroot/131/cgroup.controllers" dev="tmpfs" ino=691 res=1 errno=0
[ 1341.041934][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9972'.
[ 1341.054313][   T30] audit: type=1800 audit(1770322112.052:36): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9971" name="cgroup.controllers" dev="tmpfs" ino=691 res=0 errno=0
[ 1341.078043][T12539] syzkaller0: entered promiscuous mode
[ 1341.083576][T12539] syzkaller0: entered allmulticast mode
[ 1341.096584][T12539] netlink: 'syz.2.9970': attribute type 6 has an invalid length.
[ 1341.107132][T12539] netlink: 'syz.2.9970': attribute type 30 has an invalid length.
[ 1341.358802][T12553] netlink: 'syz.0.9975': attribute type 10 has an invalid length.
[ 1341.388472][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9977'.
[ 1341.398164][T12564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9977'.
[ 1341.408687][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9977'.
[ 1341.411822][T12553] team0: Device ipvlan1 failed to register rx_handler
[ 1341.486885][T12564] geneve2: entered promiscuous mode
[ 1341.502228][ T7235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.511429][ T7235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.557217][ T7235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.567223][ T7235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.637036][T12577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9981'.
[ 1341.730038][T12582] netlink: 'syz.2.9983': attribute type 9 has an invalid length.
[ 1341.738456][T12582] netlink: 'syz.2.9983': attribute type 11 has an invalid length.
[ 1341.748025][T12582] netlink: 'syz.2.9983': attribute type 12 has an invalid length.
[ 1341.798720][T12587] x_tables: duplicate underflow at hook 1
[ 1341.888112][T12592] erspan0: entered promiscuous mode
[ 1341.930411][T12594] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1341.950057][T12594] macvlan2: entered allmulticast mode
[ 1341.958423][T12594] veth0_to_bond: entered allmulticast mode
[ 1341.970369][T12594] bond5: (slave macvlan2): Enslaving as an active interface with an up link
[ 1342.031876][T12597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1342.052033][T12601] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0
[ 1342.879535][T12640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1342.998374][T12640] tipc: Disabling bearer <eth:syzkaller0>
[ 1343.068810][T12647] 8021q: VLANs not supported on caif0
[ 1343.094199][T12647] 8021q: VLANs not supported on caif0
[ 1343.103605][T12647] 8021q: VLANs not supported on caif0
[ 1343.220111][T12656] syzkaller0: entered promiscuous mode
[ 1343.240079][T12656] syzkaller0: entered allmulticast mode
[ 1343.291314][T12660] blkio.reset_stats is deprecated
[ 1343.545938][T12679] lo speed is unknown, defaulting to 1000
[ 1343.829191][T12695] lo speed is unknown, defaulting to 1000
[ 1343.855578][T12693] netlink: 'syz.0.10014': attribute type 1 has an invalid length.
[ 1344.303972][T12700] veth1: entered promiscuous mode
[ 1344.317520][T12700] bond4: (slave veth1): Enslaving as a backup interface with a down link
[ 1344.370334][T12701] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1344.509156][T12685] lo speed is unknown, defaulting to 1000
[ 1344.664622][T12706] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[ 1344.685175][T12706] bond4 (unregistering): Released all slaves
[ 1344.899528][T12720] mac80211_hwsim hwsim106 syzkaller0: entered promiscuous mode
[ 1344.922216][T12720] mac80211_hwsim hwsim106 syzkaller0: entered allmulticast mode
[ 1344.947139][T12720] tipc: Resetting bearer <eth:syzkaller0>
[ 1344.960691][T12720] __nla_validate_parse: 52 callbacks suppressed
[ 1344.960710][T12720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10021'.
[ 1345.221026][T12732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10024'.
[ 1345.311414][T12730] block nbd9: Unsupported socket: should be TCP or UNIX.
[ 1345.325142][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10025'.
[ 1345.393441][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10025'.
[ 1345.402909][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10025'.
[ 1346.030741][T12751] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1346.090772][T12751] bond4 (unregistering): Released all slaves
[ 1346.498887][T12768] syzkaller1: entered promiscuous mode
[ 1346.524057][T12768] syzkaller1: entered allmulticast mode
[ 1346.918075][T12794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10042'.
[ 1347.007650][T12795] lo speed is unknown, defaulting to 1000
[ 1347.224740][T12806] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10046'.
[ 1347.384819][T12814] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1347.404125][T12814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1347.545125][T12819] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10050'.
[ 1347.630858][T12817] batman_adv: batadv0: Interface deactivated: dummy0
[ 1347.719577][T12817] mac80211_hwsim hwsim109 wlan1: left promiscuous mode
[ 1347.756902][T12817] veth0_to_bond: left allmulticast mode
[ 1347.766223][T12819] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1347.774170][T12819] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1347.813445][ T7230] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.824447][ T7230] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.854053][ T7230] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.863137][ T7230] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.885111][ T7230] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.904221][ T7230] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.996136][ T7230] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1348.010374][ T7230] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.319357][T12861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1348.327254][T12861] syzkaller0: entered promiscuous mode
[ 1348.333113][T12861] syzkaller0: entered allmulticast mode
[ 1348.358015][T12855] syzkaller0: entered promiscuous mode
[ 1348.363734][T12855] syzkaller0: entered allmulticast mode
[ 1348.379887][T12858] lo speed is unknown, defaulting to 1000
[ 1348.402336][T12861] tipc: Resetting bearer <eth:syzkaller0>
[ 1348.434398][T12859] tipc: Resetting bearer <eth:syzkaller0>
[ 1348.507280][T12859] tipc: Disabling bearer <eth:syzkaller0>
[ 1348.767311][T12876] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1348.864458][T12881] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10065'.
[ 1348.910003][T12880] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10065'.
[ 1349.161392][T12895] netlink: 'syz.2.10068': attribute type 1 has an invalid length.
[ 1349.185516][T12895] team_slave_1: mtu greater than device maximum
[ 1349.191805][T12895] team0: Device team_slave_1 failed to change mtu
[ 1349.269717][T12899] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1349.500303][T12913] pim6reg: entered allmulticast mode
[ 1349.505308][T12919] netlink: 'syz.3.10077': attribute type 10 has an invalid length.
[ 1349.511846][T12922] netlink: 'syz.2.10076': attribute type 1 has an invalid length.
[ 1349.595957][T12926] netlink: 'syz.3.10077': attribute type 10 has an invalid length.
[ 1349.668535][T12922] bond6: entered promiscuous mode
[ 1349.693391][T12922] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1349.801043][T12927] bond6: entered allmulticast mode
[ 1349.928433][T12913] pim6reg: left allmulticast mode
[ 1350.097913][T12948] __nla_validate_parse: 1 callbacks suppressed
[ 1350.097933][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10083'.
[ 1350.617029][T12962] syzkaller0: entered promiscuous mode
[ 1350.622693][T12962] syzkaller0: entered allmulticast mode
[ 1350.721136][T12964] pim6reg1: entered promiscuous mode
[ 1350.732247][T12964] pim6reg1: entered allmulticast mode
[ 1351.183032][T12997] netlink: 'syz.4.10097': attribute type 1 has an invalid length.
[ 1351.258608][T12999] netlink: 'syz.1.10098': attribute type 1 has an invalid length.
[ 1351.270261][T12999] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10098'.
[ 1353.529504][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1354.015748][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10116'.
[ 1354.411134][T13085] netlink: 'syz.4.10120': attribute type 1 has an invalid length.
[ 1354.438050][T13088] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10118'.
[ 1354.446066][T13085] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1354.458780][T13085] bond5: (slave vxcan3): Error -95 calling set_mac_address
[ 1354.484679][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10120'.
[ 1354.503714][T13089] bond5: (slave bridge1): Enslaving as an active interface with a down link
[ 1354.528575][T13085] bond5: (slave bridge2): Enslaving as an active interface with a down link
[ 1354.545253][T13085] macvlan2: entered allmulticast mode
[ 1354.551411][T13085] bond5: entered promiscuous mode
[ 1354.557502][T13085] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1354.566733][T13085] bond5: left promiscuous mode
[ 1354.739798][T13097] pimreg: entered allmulticast mode
[ 1355.039236][T13044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1355.246313][T13105] xt_hashlimit: size too large, truncated to 1048576
[ 1355.265209][T13105] xt_hashlimit: max too large, truncated to 1048576
[ 1355.461452][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10131'.
[ 1355.605130][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10135'.
[ 1355.614499][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10135'.
[ 1355.659399][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10135'.
[ 1355.710069][T13129] bridge3: the hash_elasticity option has been deprecated and is always 16
[ 1355.747306][T13129] bridge3: entered allmulticast mode
[ 1355.828040][ T9634] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1355.856618][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10140'.
[ 1355.869923][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10140'.
[ 1355.959395][T13138] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1355.964190][  T980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1355.986212][T13138] 8021q: adding VLAN 0 to HW filter on device team0
[ 1356.004838][T13138] batman_adv: batadv0: Interface activated: dummy0
[ 1356.011391][T13138] batadv0: mtu less than device minimum
[ 1356.023761][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.035494][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.047267][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.058937][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.070608][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.083204][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.094974][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.106647][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.115455][T13153] netlink: 'syz.4.10141': attribute type 2 has an invalid length.
[ 1356.118311][T13138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1356.235787][T31473] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1356.369156][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10144'.
[ 1356.530468][T13163] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10145'.
[ 1356.821548][T13171] dvmrp0: entered allmulticast mode
[ 1357.030342][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10151'.
[ 1357.071827][T13179] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10150'.
[ 1357.110896][T13183] syzkaller0: entered promiscuous mode
[ 1357.117555][T13183] syzkaller0: entered allmulticast mode
[ 1357.349625][ T7231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1357.353309][T13197] syz.3.10157 uses old SIOCAX25GETINFO
[ 1357.365409][ T7231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1357.388216][T13195] lo speed is unknown, defaulting to 1000
[ 1357.516069][T13205] xfrm0: entered allmulticast mode
[ 1357.675081][   T48] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1358.007003][T13222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1358.016271][T13220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1358.319700][T13237] lo speed is unknown, defaulting to 1000
[ 1358.443146][T13245] netlink: 'syz.0.10167': attribute type 2 has an invalid length.
[ 1358.489799][T13249] xt_TCPMSS: Only works on TCP SYN packets
[ 1358.522582][T13249] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1358.537883][T13249] bond4 (unregistering): Released all slaves
[ 1359.517993][T13274] bond6 (unregistering): Released all slaves
[ 1359.740257][T13276] lo speed is unknown, defaulting to 1000
[ 1360.819369][T13332] xt_hashlimit: max too large, truncated to 1048576
[ 1360.840182][T13332] netlink: 'syz.4.10189': attribute type 4 has an invalid length.
[ 1361.044218][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1361.305767][T13345] ip6erspan0: entered allmulticast mode
[ 1361.318535][T13345] netlink: 'syz.4.10192': attribute type 2 has an invalid length.
[ 1361.419062][T13355] netlink: 'syz.1.10194': attribute type 1 has an invalid length.
[ 1361.492583][T13355] __nla_validate_parse: 31 callbacks suppressed
[ 1361.492603][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10194'.
[ 1361.655720][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10194'.
[ 1361.723099][T13361] nbd: device at index 64 is going down
[ 1361.739758][T13375] netlink: 'syz.3.10200': attribute type 10 has an invalid length.
[ 1361.783454][T13020] udevd[13020]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1361.805508][T13376] netlink: 'syz.3.10200': attribute type 10 has an invalid length.
[ 1361.851300][ T1303] net_ratelimit: 11 callbacks suppressed
[ 1361.851322][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1361.869116][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL
[ 1361.876329][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[ 1361.940430][T13383] lo speed is unknown, defaulting to 1000
[ 1362.710757][T13407] lo speed is unknown, defaulting to 1000
[ 1362.807168][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10207'.
[ 1364.891932][T13384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1364.924324][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10206'.
[ 1365.118738][T13428] netlink: 'syz.2.10215': attribute type 49 has an invalid length.
[ 1365.261882][T13439] netlink: 'syz.0.10211': attribute type 12 has an invalid length.
[ 1365.280224][T13439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10211'.
[ 1365.307438][T13437] lo speed is unknown, defaulting to 1000
[ 1365.331509][T13441] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10217'.
[ 1365.350911][T13444] tipc: Resetting bearer <eth:syzkaller0>
[ 1365.659250][T13456] lo speed is unknown, defaulting to 1000
[ 1365.909655][T13446] netlink: 'syz.1.10216': attribute type 6 has an invalid length.
[ 1366.107043][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10221'.
[ 1366.763809][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10226'.
[ 1366.875680][T13490] netlink: 'syz.1.10229': attribute type 10 has an invalid length.
[ 1366.904086][T13490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10229'.
[ 1367.124097][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms
[ 1367.132156][    C0] lec:lec_tx_timeout: lec0
[ 1367.137414][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1367.161688][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10232'.
[ 1367.268140][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10235'.
[ 1367.368577][T13515] tipc: Resetting bearer <eth:syzkaller0>
[ 1368.244067][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1368.345866][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10243'.
[ 1368.765404][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10247'.
[ 1368.800060][T13568] erspan0: entered promiscuous mode
[ 1368.834117][T13568] erspan0: left promiscuous mode
[ 1368.956932][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10242'.
[ 1368.976958][T13583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10248'.
[ 1369.411462][T13600] delete_channel: no stack
[ 1369.522848][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10252'.
[ 1369.642562][T13607] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1369.698225][T13607] bond5 (unregistering): Released all slaves
[ 1370.540415][T13642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10260'.
[ 1370.779144][T13654] syzkaller0: left promiscuous mode
[ 1370.784604][T13654] syzkaller0: left allmulticast mode
[ 1371.094585][T13677] team0: Port device dummy0 removed
[ 1371.121145][T13677] bridge_slave_0: left allmulticast mode
[ 1371.135970][T13677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1371.162583][T13677] bridge_slave_1: left allmulticast mode
[ 1371.179775][T13677] bridge_slave_1: left promiscuous mode
[ 1371.200316][T13677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1371.237748][T13677] bond0: (slave bond_slave_0): Releasing backup interface
[ 1371.270796][T13677] bond0: (slave bond_slave_1): Releasing backup interface
[ 1371.313063][T13677] team0: Port device team_slave_0 removed
[ 1371.322947][T13677] team0: Port device team_slave_1 removed
[ 1371.332260][T13677] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1371.349289][T13677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1371.582560][T13705] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1371.608114][T13695] geneve3: entered promiscuous mode
[ 1371.619184][T13703] bridge0: port 3(erspan0) entered blocking state
[ 1371.629651][T13703] bridge0: port 3(erspan0) entered disabled state
[ 1371.639066][T13703] erspan0: entered allmulticast mode
[ 1371.647658][T13703] erspan0: entered promiscuous mode
[ 1371.810942][T13719] __nla_validate_parse: 8 callbacks suppressed
[ 1371.810962][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10277'.
[ 1372.063719][T13727] netlink: 'syz.3.10281': attribute type 10 has an invalid length.
[ 1372.072912][T13727] netlink: 'syz.3.10281': attribute type 10 has an invalid length.
[ 1372.130920][T13737] lo speed is unknown, defaulting to 1000
[ 1372.153923][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[ 1372.161983][    C0] lec:lec_tx_timeout: lec0
[ 1372.250321][T13744] netlink: 'syz.4.10283': attribute type 3 has an invalid length.
[ 1372.450957][T13749] syz.2.10285: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1372.489118][T13749] CPU: 0 UID: 0 PID: 13749 Comm: syz.2.10285 Not tainted syzkaller #0 PREEMPT(full) 
[ 1372.489173][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1372.489202][T13749] Call Trace:
[ 1372.489210][T13749]  <TASK>
[ 1372.489219][T13749]  dump_stack_lvl+0xe8/0x150
[ 1372.489252][T13749]  warn_alloc+0x249/0x340
[ 1372.489277][T13749]  ? stack_trace_save+0xa9/0x100
[ 1372.489305][T13749]  ? __pfx_warn_alloc+0x10/0x10
[ 1372.489339][T13749]  ? kasan_save_track+0x4f/0x80
[ 1372.489356][T13749]  ? kasan_save_track+0x3e/0x80
[ 1372.489372][T13749]  ? __kasan_kmalloc+0x93/0xb0
[ 1372.489390][T13749]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 1372.489408][T13749]  ? xskq_create+0x56/0x170
[ 1372.489430][T13749]  ? xsk_setsockopt+0x54c/0x990
[ 1372.489449][T13749]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1372.489473][T13749]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1372.489496][T13749]  ? do_syscall_64+0xe2/0xf80
[ 1372.489524][T13749]  __vmalloc_node_range_noprof+0x132/0x1730
[ 1372.489583][T13749]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1372.489610][T13749]  ? __kasan_kmalloc+0x93/0xb0
[ 1372.489636][T13749]  vmalloc_user_noprof+0xad/0xe0
[ 1372.489657][T13749]  ? xskq_create+0xbf/0x170
[ 1372.489680][T13749]  xskq_create+0xbf/0x170
[ 1372.489707][T13749]  xsk_init_queue+0xad/0x110
[ 1372.489738][T13749]  xsk_setsockopt+0x54c/0x990
[ 1372.489774][T13749]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1372.489800][T13749]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1372.489830][T13749]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1372.489858][T13749]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1372.489878][T13749]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1372.489902][T13749]  do_sock_setsockopt+0x17c/0x1b0
[ 1372.489932][T13749]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1372.489964][T13749]  do_syscall_64+0xe2/0xf80
[ 1372.489993][T13749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.490011][T13749]  ? trace_irq_disable+0x37/0x100
[ 1372.490030][T13749]  ? clear_bhb_loop+0x60/0xb0
[ 1372.490054][T13749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.490074][T13749] RIP: 0033:0x7f5573b9aeb9
[ 1372.490093][T13749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1372.490110][T13749] RSP: 002b:00007f5574a22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1372.490131][T13749] RAX: ffffffffffffffda RBX: 00007f5573e15fa0 RCX: 00007f5573b9aeb9
[ 1372.490146][T13749] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1372.490158][T13749] RBP: 00007f5573c08c1f R08: 0000000000000004 R09: 0000000000000000
[ 1372.490171][T13749] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1372.490184][T13749] R13: 00007f5573e16038 R14: 00007f5573e15fa0 R15: 00007ffeb48b6dd8
[ 1372.490219][T13749]  </TASK>
[ 1372.490296][T13749] Mem-Info:
[ 1372.774418][T13749] active_anon:8006 inactive_anon:0 isolated_anon:0
[ 1372.774418][T13749]  active_file:3714 inactive_file:40454 isolated_file:0
[ 1372.774418][T13749]  unevictable:769 dirty:45 writeback:25
[ 1372.774418][T13749]  slab_reclaimable:14847 slab_unreclaimable:174271
[ 1372.774418][T13749]  mapped:29903 shmem:3062 pagetables:1397
[ 1372.774418][T13749]  sec_pagetables:0 bounce:0
[ 1372.774418][T13749]  kernel_misc_reclaimable:0
[ 1372.774418][T13749]  free:1226835 free_pcp:22000 free_cma:0
[ 1372.829666][T13749] Node 0 active_anon:32024kB inactive_anon:0kB active_file:14856kB inactive_file:161612kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:25404kB dirty:180kB writeback:100kB shmem:10712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18120kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1372.888195][T13756] netlink: 'syz.4.10287': attribute type 1 has an invalid length.
[ 1372.896548][T13756] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10287'.
[ 1372.934202][T13749] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98208kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1372.983334][T13749] Node 0 DMA free:15276kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:80kB free_cma:0kB
[ 1373.020319][T13749] lowmem_reserve[]: 0 2494 2495 2495 2495
[ 1373.029711][T13749] Node 0 DMA32 free:1314068kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27824kB inactive_anon:0kB active_file:14856kB inactive_file:161612kB unevictable:1540kB writepending:180kB zspages:0kB present:3129332kB managed:2553976kB mlocked:4kB bounce:0kB free_pcp:40716kB local_pcp:21136kB free_cma:0kB
[ 1373.066048][T13749] lowmem_reserve[]: 0 0 1 1 1
[ 1373.070871][T13749] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1373.124379][T13749] lowmem_reserve[]: 0 0 0 0 0
[ 1373.129313][T13749] Node 1 Normal free:3577988kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51352kB local_pcp:22356kB free_cma:0kB
[ 1373.184098][T13749] lowmem_reserve[]: 0 0 0 0 0
[ 1373.197399][T13749] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15276kB
[ 1373.216675][T13762] ip6t_srh: unknown srh match flags  4000
[ 1373.234229][T13749] Node 0 DMA32: 7807*4kB (UME) 9479*8kB (UME) 6081*16kB (UME) 824*32kB (UME) 596*64kB (UME) 256*128kB (UM) 461*256kB (UM) 447*512kB (UM) 313*1024kB (UM) 170*2048kB (UM) 0*4096kB = 1317188kB
[ 1373.254173][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10289'.
[ 1373.276145][T13764] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1373.294090][T13749] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1373.304488][T13764] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[ 1373.306307][T13749] Node 1 Normal: 184*4kB (UE) 73*8kB (UME) 51*16kB (UME) 89*32kB (UME) 43*64kB (UME) 23*128kB (UME) 13*256kB (UME) 13*512kB (UME) 12*1024kB (UM) 11*2048kB (UE) 860*4096kB (UM) = 3578040kB
[ 1373.328593][T13764] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[ 1373.371883][T13749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1373.412734][T13749] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1373.442578][T13749] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1373.480714][T13749] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1373.514107][T13749] 45552 total pagecache pages
[ 1373.524624][T13749] 0 pages in swap cache
[ 1373.528815][T13749] Free swap  = 124996kB
[ 1373.532970][T13749] Total swap = 124996kB
[ 1373.607183][T13772] lo speed is unknown, defaulting to 1000
[ 1373.636239][T13749] 2097051 pages RAM
[ 1373.644451][T13749] 0 pages HighMem/MovableOnly
[ 1373.659482][T13749] 426659 pages reserved
[ 1373.681960][T13749] 0 pages cma reserved
[ 1374.983948][T13807] netlink: 'syz.1.10303': attribute type 4 has an invalid length.
[ 1375.003127][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10304'.
[ 1375.014054][T13807] netlink: 'syz.1.10303': attribute type 1 has an invalid length.
[ 1375.021890][T13807] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10303'.
[ 1375.022890][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10304'.
[ 1375.109726][T13810] geneve4: entered promiscuous mode
[ 1375.125682][T13810] geneve4: entered allmulticast mode
[ 1375.239786][T13812] sctp: [Deprecated]: syz.0.10305 (pid 13812) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1375.239786][T13812] Use struct sctp_sack_info instead
[ 1375.359951][T13832] netlink: 'syz.2.10311': attribute type 8 has an invalid length.
[ 1375.394210][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10311'.
[ 1375.412155][T13838] bond0: option min_links: invalid value (18446744071562067976)
[ 1375.431607][T13841] netlink: 'syz.2.10311': attribute type 8 has an invalid length.
[ 1375.437547][T13838] bond0: option min_links: allowed values 0 - 2147483647
[ 1375.446258][T13840] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.10314'.
[ 1375.462253][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10311'.
[ 1375.551435][T13832] gretap0: entered promiscuous mode
[ 1375.588035][T13832] hsr1: entered promiscuous mode
[ 1375.699789][T13845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10314'.
[ 1375.772025][T13865] netlink: 'syz.0.10319': attribute type 3 has an invalid length.
[ 1375.862746][T13872] openvswitch: netlink: ct_state flags 010000e0 unsupported
[ 1375.903256][T13865] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1375.933319][T13865] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1375.948403][T13865] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1375.965113][T13865] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1375.985799][T13865] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1375.992013][T13865] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1376.048089][T13865] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1376.060390][T13865] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1377.064786][T13921] bond6 (unregistering): Released all slaves
[ 1377.574564][T13938] geneve2: left promiscuous mode
[ 1377.576334][T13939] __nla_validate_parse: 2 callbacks suppressed
[ 1377.576351][T13939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10331'.
[ 1377.649352][T13938] geneve3: left promiscuous mode
[ 1377.754969][T13938] geneve4: left promiscuous mode
[ 1377.763289][ T7230] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.796403][ T7230] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.890661][ T7230] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.899514][ T7230] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1377.990198][T13947] syzkaller0: entered promiscuous mode
[ 1378.017334][T13947] syzkaller0: entered allmulticast mode
[ 1378.082172][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10345'.
[ 1378.187597][T13966] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1378.306980][T13953] lo speed is unknown, defaulting to 1000
[ 1378.347981][T13977] erspan0: left allmulticast mode
[ 1378.355897][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10348'.
[ 1378.363743][T13977] erspan0: left promiscuous mode
[ 1378.380673][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10350'.
[ 1378.380878][T13977] bridge0: port 3(erspan0) entered disabled state
[ 1378.425994][T13977] bridge_slave_1: left allmulticast mode
[ 1378.444126][T13977] bridge_slave_1: left promiscuous mode
[ 1378.462482][T13977] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1378.497242][T13977] bridge_slave_0: left allmulticast mode
[ 1378.502973][T13977] bridge_slave_0: left promiscuous mode
[ 1378.509330][T13977] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1378.549820][T13989] sctp: [Deprecated]: syz.4.10351 (pid 13989) Use of int in max_burst socket option deprecated.
[ 1378.549820][T13989] Use struct sctp_assoc_value instead
[ 1378.596717][T13989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10351'.
[ 1378.628203][T13956] lo speed is unknown, defaulting to 1000
[ 1378.925557][T13979] lo speed is unknown, defaulting to 1000
[ 1379.224720][T13986] lo speed is unknown, defaulting to 1000
[ 1379.664878][T14006] delete_channel: no stack
[ 1379.669432][T14006] delete_channel: no stack
[ 1379.774751][T14011] netlink: 'syz.3.10358': attribute type 4 has an invalid length.
[ 1379.848360][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10358'.
[ 1380.227957][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 1380.246712][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 1380.286526][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 1380.297882][T14026] atomic_op ffff8880566b4998 conn xmit_atomic 0000000000000000
[ 1380.306354][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10362'.
[ 1380.316808][T14024] netlink: 'syz.3.10362': attribute type 6 has an invalid length.
[ 1380.698392][ T9286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1380.707162][ T9286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1380.734595][ T9635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1380.855362][T14035] netlink: 'syz.3.10364': attribute type 1 has an invalid length.
[ 1380.982063][T14033] delete_channel: no stack
[ 1380.999024][   T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1381.589665][T14057] xt_hashlimit: max too large, truncated to 1048576
[ 1381.604926][T14057] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1381.692247][T14057] netlink: 'syz.4.10370': attribute type 4 has an invalid length.
[ 1381.712606][T14057] netlink: 'syz.4.10370': attribute type 4 has an invalid length.
[ 1381.774953][   T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1381.899549][T14069] netlink: 'syz.0.10374': attribute type 4 has an invalid length.
[ 1382.324795][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1382.752777][T14080] lo speed is unknown, defaulting to 1000
[ 1383.363562][T14086] netlink: 'syz.1.10377': attribute type 1 has an invalid length.
[ 1383.414607][T14089] __nla_validate_parse: 3 callbacks suppressed
[ 1383.414625][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.431478][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.442547][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.453239][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.463422][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.473635][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.483975][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.494241][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.504352][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1383.515114][T14089] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.10378'.
[ 1384.071444][T14039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1384.083064][T14071] netlink: 'syz.2.10373': attribute type 1 has an invalid length.
[ 1384.092875][T14071] workqueue: Failed to create a rescuer kthread for wq "phy8": -EINTR
[ 1384.331412][ T9286] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[ 1384.342238][T14115] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[ 1384.402836][T14111] macvtap0: entered allmulticast mode
[ 1384.481522][T14111] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[ 1384.603151][T14128] lo speed is unknown, defaulting to 1000
[ 1384.645394][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1384.813269][T14139] pimreg: entered allmulticast mode
[ 1384.829265][T14142] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1385.350152][T14175] bond5 (unregistering): Released all slaves
[ 1386.501968][T14225] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1386.515727][T14225] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1386.761560][T14233] netlink: 'syz.3.10415': attribute type 1 has an invalid length.
[ 1386.843252][T14237] syzkaller0: entered promiscuous mode
[ 1386.857076][T14237] syzkaller0: entered allmulticast mode
[ 1387.298637][T14259] lo speed is unknown, defaulting to 1000
[ 1387.605257][T14255] lo speed is unknown, defaulting to 1000
[ 1387.773033][T14280] bond0: entered promiscuous mode
[ 1387.782944][T14280] batadv1: entered promiscuous mode
[ 1387.796026][T14280] gretap0: entered promiscuous mode
[ 1387.842615][T14280] debugfs: 'hsr1' already exists in 'hsr'
[ 1387.904260][T14280] Cannot create hsr debugfs directory
[ 1387.968532][T14280] hsr1: entered promiscuous mode
[ 1388.259091][T14262] lo speed is unknown, defaulting to 1000
[ 1388.290781][T14299] x_tables: duplicate underflow at hook 4
[ 1388.640731][T14317] __nla_validate_parse: 39 callbacks suppressed
[ 1388.640751][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10434'.
[ 1388.773295][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10437'.
[ 1388.784109][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10437'.
[ 1389.099785][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10440'.
[ 1389.195126][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10440'.
[ 1389.634803][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10445'.
[ 1389.947975][T14366] batman_adv: batadv0: Interface deactivated: dummy0
[ 1389.979645][T14366] macsec1: left allmulticast mode
[ 1389.997998][T14366] bond2: left allmulticast mode
[ 1390.011470][T14366] bridge3: left allmulticast mode
[ 1390.024702][T14366] macvtap1: left promiscuous mode
[ 1390.039207][T14366] macvlan2: left allmulticast mode
[ 1390.050914][T14366] bond6: left promiscuous mode
[ 1390.056302][T14366] bond6: left allmulticast mode
[ 1390.066624][T14366] hsr1: left promiscuous mode
[ 1390.898580][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10460'.
[ 1391.097792][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10464'.
[ 1391.130835][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10463'.
[ 1391.146030][T14426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10464'.
[ 1391.290212][T14430] bridge5: port 1(veth7) entered blocking state
[ 1391.325895][T14430] bridge5: port 1(veth7) entered disabled state
[ 1391.332384][T14430] veth7: entered allmulticast mode
[ 1391.346222][T14430] veth7: entered promiscuous mode
[ 1391.352719][T14430] bridge5: port 1(veth7) entered blocking state
[ 1391.359143][T14430] bridge5: port 1(veth7) entered forwarding state
[ 1391.456847][T14440] netlink: 'syz.0.10469': attribute type 49 has an invalid length.
[ 1391.536189][T14448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1391.545131][T14448] syzkaller0: entered promiscuous mode
[ 1391.550691][T14448] syzkaller0: entered allmulticast mode
[ 1391.633474][T14449] lo speed is unknown, defaulting to 1000
[ 1391.647888][T14448] tipc: Resetting bearer <eth:syzkaller0>
[ 1391.720693][T14448] tipc: Disabling bearer <eth:syzkaller0>
[ 1391.874433][T14462] lo speed is unknown, defaulting to 1000
[ 1392.176107][ T9777] bridge5: port 1(veth7) entered disabled state
[ 1392.563624][T14493] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1806) !
[ 1393.205251][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1393.212046][T14513] x_tables: duplicate underflow at hook 2
[ 1393.707229][T14528] __nla_validate_parse: 8 callbacks suppressed
[ 1393.707247][T14528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10492'.
[ 1393.852053][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10495'.
[ 1394.188628][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10500'.
[ 1394.444650][T14558] 
[ 1394.446990][T14558] ======================================================
[ 1394.453997][T14558] WARNING: possible circular locking dependency detected
[ 1394.461010][T14558] syzkaller #0 Not tainted
[ 1394.465409][T14558] ------------------------------------------------------
[ 1394.472413][T14558] syz.1.10502/14558 is trying to acquire lock:
[ 1394.478608][T14558] ffffffff8fb29758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[ 1394.487750][T14558] 
[ 1394.487750][T14558] but task is already holding lock:
[ 1394.495132][T14558] ffff888087681670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[ 1394.504470][T14558] 
[ 1394.504470][T14558] which lock already depends on the new lock.
[ 1394.504470][T14558] 
[ 1394.514859][T14558] 
[ 1394.514859][T14558] the existing dependency chain (in reverse order) is:
[ 1394.523860][T14558] 
[ 1394.523860][T14558] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1394.531862][T14558]        _raw_spin_lock_bh+0x36/0x50
[ 1394.537145][T14558]        nr_rt_device_down+0x153/0x860
[ 1394.542624][T14558]        nr_device_event+0x137/0x150
[ 1394.547910][T14558]        notifier_call_chain+0x19d/0x3a0
[ 1394.553557][T14558]        __dev_notify_flags+0x16d/0x310
[ 1394.559097][T14558]        netif_change_flags+0xe8/0x1a0
[ 1394.564554][T14558]        dev_change_flags+0x130/0x260
[ 1394.569932][T14558]        dev_ioctl+0x7b4/0x1150
[ 1394.574777][T14558]        sock_do_ioctl+0x23e/0x320
[ 1394.579873][T14558]        sock_ioctl+0x5c6/0x7f0
[ 1394.584707][T14558]        __se_sys_ioctl+0xfc/0x170
[ 1394.589807][T14558]        do_syscall_64+0xe2/0xf80
[ 1394.594832][T14558]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.601240][T14558] 
[ 1394.601240][T14558] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1394.609083][T14558]        _raw_spin_lock_bh+0x36/0x50
[ 1394.614362][T14558]        nr_rt_device_down+0xbe/0x860
[ 1394.619732][T14558]        nr_device_event+0x137/0x150
[ 1394.625097][T14558]        notifier_call_chain+0x19d/0x3a0
[ 1394.630730][T14558]        __dev_notify_flags+0x16d/0x310
[ 1394.636264][T14558]        netif_change_flags+0xe8/0x1a0
[ 1394.641713][T14558]        dev_change_flags+0x130/0x260
[ 1394.647098][T14558]        dev_ioctl+0x7b4/0x1150
[ 1394.651951][T14558]        sock_do_ioctl+0x23e/0x320
[ 1394.657066][T14558]        sock_ioctl+0x5c6/0x7f0
[ 1394.661953][T14558]        __se_sys_ioctl+0xfc/0x170
[ 1394.667143][T14558]        do_syscall_64+0xe2/0xf80
[ 1394.672159][T14558]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.678560][T14558] 
[ 1394.678560][T14558] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1394.686457][T14558]        __lock_acquire+0x15a5/0x2cf0
[ 1394.691837][T14558]        lock_acquire+0x106/0x330
[ 1394.696857][T14558]        _raw_spin_lock_bh+0x36/0x50
[ 1394.702572][T14558]        nr_rt_ioctl+0x40c/0xf90
[ 1394.707580][T14558]        sock_do_ioctl+0x101/0x320
[ 1394.712678][T14558]        sock_ioctl+0x5c6/0x7f0
[ 1394.717540][T14558]        __se_sys_ioctl+0xfc/0x170
[ 1394.722673][T14558]        do_syscall_64+0xe2/0xf80
[ 1394.728487][T14558]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.734893][T14558] 
[ 1394.734893][T14558] other info that might help us debug this:
[ 1394.734893][T14558] 
[ 1394.745119][T14558] Chain exists of:
[ 1394.745119][T14558]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1394.745119][T14558] 
[ 1394.758929][T14558]  Possible unsafe locking scenario:
[ 1394.758929][T14558] 
[ 1394.766407][T14558]        CPU0                    CPU1
[ 1394.771780][T14558]        ----                    ----
[ 1394.777136][T14558]   lock(&nr_node->node_lock);
[ 1394.781982][T14558]                                lock(nr_node_list_lock);
[ 1394.789087][T14558]                                lock(&nr_node->node_lock);
[ 1394.796360][T14558]   lock(nr_neigh_list_lock);
[ 1394.801030][T14558] 
[ 1394.801030][T14558]  *** DEADLOCK ***
[ 1394.801030][T14558] 
[ 1394.809199][T14558] 2 locks held by syz.1.10502/14558:
[ 1394.814469][T14558]  #0: ffffffff8fb297b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[ 1394.823944][T14558]  #1: ffff888087681670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[ 1394.833611][T14558] 
[ 1394.833611][T14558] stack backtrace:
[ 1394.839488][T14558] CPU: 1 UID: 0 PID: 14558 Comm: syz.1.10502 Not tainted syzkaller #0 PREEMPT(full) 
[ 1394.839504][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1394.839511][T14558] Call Trace:
[ 1394.839517][T14558]  <TASK>
[ 1394.839523][T14558]  dump_stack_lvl+0xe8/0x150
[ 1394.839540][T14558]  print_circular_bug+0x2e1/0x300
[ 1394.839553][T14558]  check_noncircular+0x12e/0x150
[ 1394.839565][T14558]  __lock_acquire+0x15a5/0x2cf0
[ 1394.839585][T14558]  ? nr_rt_ioctl+0x40c/0xf90
[ 1394.839594][T14558]  lock_acquire+0x106/0x330
[ 1394.839607][T14558]  ? nr_rt_ioctl+0x40c/0xf90
[ 1394.839617][T14558]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1394.839629][T14558]  ? nr_rt_ioctl+0x40c/0xf90
[ 1394.839638][T14558]  _raw_spin_lock_bh+0x36/0x50
[ 1394.839650][T14558]  ? nr_rt_ioctl+0x40c/0xf90
[ 1394.839659][T14558]  nr_rt_ioctl+0x40c/0xf90
[ 1394.839670][T14558]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1394.839688][T14558]  ? apparmor_capable+0x137/0x1a0
[ 1394.839705][T14558]  ? capable+0x88/0xe0
[ 1394.839714][T14558]  ? nr_ioctl+0x1b1/0x3b0
[ 1394.839728][T14558]  sock_do_ioctl+0x101/0x320
[ 1394.839740][T14558]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1394.839749][T14558]  ? do_futex+0x333/0x420
[ 1394.839767][T14558]  sock_ioctl+0x5c6/0x7f0
[ 1394.839777][T14558]  ? __pfx_sock_ioctl+0x10/0x10
[ 1394.839787][T14558]  ? __fget_files+0x2a/0x420
[ 1394.839798][T14558]  ? __fget_files+0x3a0/0x420
[ 1394.839808][T14558]  ? __fget_files+0x2a/0x420
[ 1394.839819][T14558]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1394.839831][T14558]  ? __pfx_sock_ioctl+0x10/0x10
[ 1394.839840][T14558]  __se_sys_ioctl+0xfc/0x170
[ 1394.839856][T14558]  do_syscall_64+0xe2/0xf80
[ 1394.839870][T14558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.839880][T14558]  ? trace_irq_disable+0x37/0x100
[ 1394.839891][T14558]  ? clear_bhb_loop+0x60/0xb0
[ 1394.839907][T14558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.839926][T14558] RIP: 0033:0x7fc394d9aeb9
[ 1394.839942][T14558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1394.839959][T14558] RSP: 002b:00007fc395bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1394.839980][T14558] RAX: ffffffffffffffda RBX: 00007fc395016090 RCX: 00007fc394d9aeb9
[ 1394.839995][T14558] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005
[ 1394.840006][T14558] RBP: 00007fc394e08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1394.840013][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1394.840020][T14558] R13: 00007fc395016128 R14: 00007fc395016090 R15: 00007ffe53ef8f08
[ 1394.840032][T14558]  </TASK>
[ 1396.572237][T14522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512