last executing test programs:

13.878335983s ago: executing program 0 (id=3256):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-arm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1)

13.681803582s ago: executing program 0 (id=3258):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001a000100000000000000000000000000954036ea4fed1716b92b80b2c369265710084ad0d03c6d110d15f08b499b5aa7f94db4884ecb7afe6848b9b0758513bc862dfda9f72bfa30b8d8d9cf198d85768e3e7aebe283ee369aa8485d9c4590f64d0d034776c15076321fa83a8fbad57e2ad6"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000002c00000000000000000000000085129f67867c475e46c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18)
pipe(&(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = socket$kcm(0x21, 0x2, 0x2)
recvmsg$kcm(r10, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000100)="af", 0x1}], 0x1)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNGETVNETHDRSZ(r11, 0x800454d7, &(0x7f0000000040))
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r12, 0xffff0000, 0x10, 0x0, &(0x7f0000000980)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
close(r1)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000008c0)={'gre0\x00', <r14=>0x0, 0x20, 0x40, 0x5, 0xb7e, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x65, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@lsrr={0x83, 0xf, 0xd1, [@remote, @multicast1, @multicast1]}, @ssrr={0x89, 0x1b, 0xbe, [@multicast1, @local, @remote, @multicast1, @rand_addr=0x64010100, @empty]}, @timestamp_addr={0x44, 0x24, 0x56, 0x1, 0x1, [{@broadcast, 0x23}, {@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x3229}]}]}}}}})
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000240)={r14, 0x1, 0x6}, 0x10)
setsockopt$inet_int(r13, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
listen(r13, 0x7)
socket(0x1e, 0x5, 0x73)

13.393870911s ago: executing program 0 (id=3262):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r0, 0x0, 0x8}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})
r3 = socket$inet6(0xa, 0x805, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x5, @empty, 0x9ffb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="f7aee4b2eaaabd1b", 0x8}, {&(0x7f0000000180)="95b55a9190cb9730c93f872b57e77dd07610e7d79e20ba47d7713207e99b82520611b330fbeed2b91fcd085e48eb1d413a4e35f82204c9300e1a5d2e2572c08dffec5cf2ee3ffa50c4501d896ef9f4c2ebfc18ddbd4eaf14f2331cbfd13e189261696091da755de287df8ba252fe8fb63eb8db3ec18c103ce5dc69df49e76f7e72afc43105e6fc66715ce81330fde586346d1e25fb3e28711efdff0c", 0x9c}, {&(0x7f0000000240)="17ea570490fef3dae1d8528ead69c871b926c3a710492e40ebd6a8891db912d05e7ef720915460e7968221aac577b1f197940086ecec62fb0c96b4ae854555c968b8262d5b52648eb8c4b30ab616", 0x4e}, {&(0x7f0000000300)="1e9e8267fcf4efdf674a095f88e57cfee463a1ba6a61b6af45a4e3ccd0ff0fa500e5796a691f659d2dc1d0dcea2909565ab9092958c08b109f4a52ea281094941a", 0x41}], 0x4, &(0x7f00000003c0)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8007, 0x3, 0x6, r5}}], 0x58, 0x54}, 0x840)

2.46538422s ago: executing program 2 (id=3366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040800)

2.154125581s ago: executing program 2 (id=3369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088471b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

2.014179974s ago: executing program 1 (id=3371):
r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg1\x00', 0x4) (async, rerun: 32)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) (rerun: 64)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000001c0), 0x4) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)

1.722134726s ago: executing program 1 (id=3373):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0), 0x4)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f0000000000)="8d", 0x9, 0x3, 0xb57, 0x2, 0xc338, 0x2, 0x7, 'syz0\x00'})
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bind$inet(r2, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) (async)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f0000000000)="8d", 0x9, 0x3, 0xb57, 0x2, 0xc338, 0x2, 0x7, 'syz0\x00'}) (async)

1.673163245s ago: executing program 4 (id=3374):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x1000}}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) (rerun: 64)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000006000a004e220000050002000a00000014000900"], 0x38}}, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64)
recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5010002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x64008005}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}}, 0x20000010) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r9], 0x158}, 0x1, 0xba01}, 0x0)

1.669937912s ago: executing program 2 (id=3375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000001000)={0xa, 0x4e21, 0xa, @empty, 0x85}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000e800002d09a1ffa70881fd3f90abbae3bf7584678d21799bfedb3f79859621c3"], 0x18)
socket$inet_sctp(0x2, 0x5, 0x84)

1.539866207s ago: executing program 3 (id=3376):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0xd, 0x0, 0x9, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x0, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.475865354s ago: executing program 2 (id=3377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x20000855)

1.421500836s ago: executing program 1 (id=3378):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r3, 0x0, 0x0) (async)
r5 = accept(r3, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x6)
setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20)
recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', <r7=>r1, 0x2f, 0x5, 0x5, 0x9d2, 0x2e, @loopback, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10, 0x80, 0x5753, 0x9}})
sendto$packet(r5, &(0x7f0000000180)="551f8ff1ab6dc2285c5b644943a7d57992bbaf22be3a9d83514db3abda2bbfc248dbd6d486c65ca262e16baa18c11ed12672cd19f9c8cddea4608471d70e49e1cfe4e85314d392ec3090e211b9cd566cb932d7ac491f8193b65c95130352b59699c8b560ee5b62fc0aa2d67584807542d5ff18a46b7a3b28e291932892e3a0f6eba402c19b284579757144cbb534ba150d58aab0c087e6a2c6", 0x99, 0x44000, &(0x7f0000000400)={0x11, 0x16, r7, 0x1, 0x3, 0x6, @random="bc7e4fba9f53"}, 0x14) (async)
sendto$packet(r5, &(0x7f0000000180)="551f8ff1ab6dc2285c5b644943a7d57992bbaf22be3a9d83514db3abda2bbfc248dbd6d486c65ca262e16baa18c11ed12672cd19f9c8cddea4608471d70e49e1cfe4e85314d392ec3090e211b9cd566cb932d7ac491f8193b65c95130352b59699c8b560ee5b62fc0aa2d67584807542d5ff18a46b7a3b28e291932892e3a0f6eba402c19b284579757144cbb534ba150d58aab0c087e6a2c6", 0x99, 0x44000, &(0x7f0000000400)={0x11, 0x16, r7, 0x1, 0x3, 0x6, @random="bc7e4fba9f53"}, 0x14)
r8 = socket(0x10, 0x803, 0x0)
bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0)

1.329932128s ago: executing program 3 (id=3379):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)

1.292078864s ago: executing program 2 (id=3380):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
listen(r0, 0x7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x100)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x1)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0x100)
socket$inet(0xa, 0x801, 0x84)
r4 = socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
socket$netlink(0x10, 0x3, 0x13)

1.122323793s ago: executing program 4 (id=3381):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0xffce}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0)

1.040697132s ago: executing program 1 (id=3382):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

979.0014ms ago: executing program 3 (id=3383):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/159, 0x9f}, 0x3}, {{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000240)=""/193, 0xc1}], 0x2, &(0x7f0000000380)=""/48, 0x30}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/19, 0x13}, {&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/249, 0xf9}, {&(0x7f0000001540)=""/222, 0xde}, {&(0x7f0000001640)=""/200, 0xc8}], 0x6, &(0x7f00000017c0)=""/239, 0xef}, 0x4}, {{&(0x7f00000018c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/142, 0x8e}], 0x1}}, {{&(0x7f0000001a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)=""/228, 0xe4}, {&(0x7f0000001bc0)=""/202, 0xca}], 0x2, &(0x7f0000001d00)=""/236, 0xec}, 0x40}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e00)=""/30, 0x1e}], 0x1, &(0x7f0000001e80)=""/201, 0xc9}, 0x4}, {{&(0x7f0000001f80)=@rc={0x1f, @none}, 0x80, &(0x7f0000002080)=[{&(0x7f0000002000)=""/126, 0x7e}], 0x1, &(0x7f00000020c0)=""/255, 0xff}, 0x81}, {{&(0x7f00000021c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002240)=""/28, 0x1c}], 0x1, &(0x7f00000022c0)=""/4096, 0x1000}, 0x101}, {{&(0x7f00000032c0)=@un=@abs, 0x80, &(0x7f0000003840)=[{&(0x7f0000003340)=""/17, 0x11}, {&(0x7f0000003380)=""/99, 0x63}, {&(0x7f0000003400)=""/31, 0x1f}, {&(0x7f0000003440)=""/142, 0x8e}, {&(0x7f0000003500)=""/226, 0xe2}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/136, 0x88}, {&(0x7f00000037c0)=""/74, 0x4a}], 0x8, &(0x7f00000038c0)=""/142, 0x8e}, 0x2}, {{&(0x7f0000003980)=@isdn, 0x80, &(0x7f0000004d40)=[{&(0x7f0000003a00)=""/124, 0x7c}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/160, 0xa0}, {&(0x7f0000004b40)=""/90, 0x5a}, {&(0x7f0000004bc0)=""/126, 0x7e}, {&(0x7f0000004c40)=""/160, 0xa0}, {&(0x7f0000004d00)=""/55, 0x37}], 0x7, &(0x7f0000004dc0)=""/201, 0xc9}, 0x20}], 0xa, 0x2002, &(0x7f0000005140))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000005180)) (async)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000051c0)={0x60000005})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000005200), 0x8)
ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000005240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000052c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000053c0)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async)
gettid() (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000005400)={'wg2\x00', <r5=>0x0}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005540)={@cgroup=<r6=>r2, 0x32, 0x0, 0x10000, &(0x7f0000005440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000005480)=[0x0], &(0x7f00000054c0)=[0x0, 0x0, 0x0], &(0x7f0000005500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000005580)={r2, r5, 0x25, 0x6, @val=@netkit={@void, @value=r2, @void, @void, r7}}, 0x1c) (async)
clock_gettime(0x0, &(0x7f0000005600)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f00000055c0)=[{r1, 0x109}], 0x1, &(0x7f0000005640)={r8, r9+10000000}, &(0x7f0000005680)={[0x92]}, 0x8)
r10 = openat$cgroup_ro(r6, &(0x7f00000056c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
connect$unix(r2, &(0x7f0000005700)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$bt_hci(r2, &(0x7f0000005780)={0x1f, 0x1, 0x3}, 0x6) (async)
r11 = openat$cgroup_ro(r10, &(0x7f00000057c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r12, &(0x7f0000005800)="3a1f45f3f9e312cab859210f772b6a45197f3951ce540e7d4ee208cbb63ff41729d536654130afc3a974a1078e8e795c4ff115e429f8aca87852", 0x3a, 0x0, &(0x7f0000005840)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async)
bind$xdp(r10, &(0x7f0000005880)={0x2c, 0x1, r5, 0x33, r10}, 0x10) (async)
close(r0) (async)
connect$unix(r2, &(0x7f00000058c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
openat$cgroup_ro(r11, &(0x7f0000005940)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000059c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000005ac0)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)={0x60, r13, 0x1, 0x5, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005b00), r1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005b40))

922.793192ms ago: executing program 2 (id=3384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8801)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000b140b0a28bd7001fbdbdfa5080001"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300"], 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x80000001, 0x22a0, r5, 0xe, '\x00', 0x0, r3, 0x5, 0x2, 0x2, 0x8}, 0x50)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r7 = openat$cgroup_int(r4, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r10, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="354c65db", @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf253500000008000300", @ANYRES32=r12, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x24000000)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r14, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)

805.71931ms ago: executing program 4 (id=3385):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0)
splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x6, 0xd)

804.133595ms ago: executing program 3 (id=3386):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket(0x15, 0x5, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x7, 0x5, 0x6, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={<r10=>0x0, 0x48, &(0x7f0000000300)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x80}, @in6={0xa, 0x4e21, 0x400, @mcast1, 0x7}]}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000007c0)={r10, 0xb4, &(0x7f00000006c0)=[@in6={0xa, 0x4e21, 0x0, @mcast2, 0x7fffffff}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0xbf5c, @ipv4={'\x00', '\xff\xff', @remote}, 0x80}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000800)=0x10)
connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20)
pipe(&(0x7f0000000840)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r11, 0x20, &(0x7f0000000a00)={&(0x7f0000000880)=""/160, 0xa0, 0x0, &(0x7f0000000940)=""/183, 0xb7}}, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="56d158cc3b1900b59f973d0b930c6ad8278c2791b46c3d0df73699baf9faf5a7c5ded70fca246fa924ffbccac5a69447f68f20879780c6e54f7498da1a490a3addf3707279ed845452fdbcf5d8aa3eae40d066db4660f296c699a4fec35fa8cf90de26d5b543674acd8b52748a34117f9dbae7ac7c2871463e30197dde72a471b88c267ae395bb706832015e51ddb9c28bfbbca0ef1d590b9f91f379a77941e190a96b9be31638606a092c1ebe5c4dd65a235a46339d9f04bdf0", @ANYRES16=r0, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x4044804}, 0x4000040)

800.130338ms ago: executing program 1 (id=3387):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xff], [], 'pimreg0\x00', 'geneve1\x00', {}, {}, 0x0, 0x4, 0x0, 0x55}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xffffff00, 0x0, 0xffffff00, 0xffffff], 0x4e21, 0xff, 0x2, 0x4e24, 0x20, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x18, "d05511d4053fa80d56e441286224250ca2535f0c8aa13a6276593694a239"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@icmp6={{0x28}, {0x10, "5bbf", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x1, 'b'}, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002cc0)=@newtfilter={0x11b4, 0x2c, 0x4, 0x70bd28, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x1184, 0x2, [@TCA_BASIC_EMATCHES={0x1180, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x113c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc98}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0xfff8, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8f, 0x8, 0x8dd2}, {0x0, 0x6, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0xfeff}, {{0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xa, 0x1, 0x3}, {0x3, 0x2, 0x401, 0x6, 0x9}}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x40}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="32fb2b8532a0e8", @TCF_META_TYPE_VAR="c1521ed7fba8e0", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f9880e75c7e4", @TCF_META_TYPE_VAR="270dcb89b98a1950832c"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3a7, 0xd, 0x2}, {0x6, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="087c7b92668f00903128", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="35b68e"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0x1028}, {0xa, 0x5, 0x1800, 0x2, 0x4, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x4}, {0x6, 0x7fff, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x7, 0x0, 0xffff}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x11, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x800}, {0x0, 0x3, 0x0, 0x4, 0x0, 0x2}}}]}]}]}}]}, 0x11b4}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)

697.439791ms ago: executing program 4 (id=3388):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'lblcr\x00', 0xc, 0xfffffff7}, 0x2c) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r2)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25120000002896d8547c67056e6afddb75ad3eff5f39af814ac11b3e57dee32954df12a4d06d15fdeeafd763a02eeaa60772420836abc484db8278e7380010548f10dd37c1bbd070ad50b0587ea087281cd8b00d44461e3f7cfa53edf486ed6d"], 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00k', @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x410)

486.23963ms ago: executing program 1 (id=3389):
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xbc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="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"], 0x114}}, 0x0)

485.246528ms ago: executing program 0 (id=3266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000200), 0x10)
sendmsg$sock(r3, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x90)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040)
close(r0)

360.965688ms ago: executing program 3 (id=3391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) (async)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b0006006500"], 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ec0)={0x6d4, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xb4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0xff, 0x6, 0x6, 0x0, 0xfffb, 0x100]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0xa}, {0x4, 0x8}, {}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0x12}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x1}, {0x2, 0x7}, {}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x0, 0x1b, 0xc, 0x5, 0x18, 0x60, 0x24, 0x12, 0x24, 0x16, 0xc, 0xb, 0x12, 0x16, 0xadce21457cc5fa55, 0x18, 0x1b, 0x12, 0xc, 0x0, 0x36, 0x6, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2d, 0x8, 0x401, 0x0, 0x4, 0x23b8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x1ff, 0x11a, 0x3, 0x8, 0xeae9, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x100, 0xfff8, 0x9, 0x0, 0x6, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x1, 0xb, 0x5, 0x5, 0x18, 0x0, 0x4, 0xf, 0x3, 0x18, 0x16, 0x1b, 0xb, 0x30, 0x6c, 0x6, 0x2, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9923, 0x1, 0x1, 0xf928, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x40, 0xc71, 0x5, 0x1, 0x6, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff9a, 0x1, 0x0, 0x7, 0x1ff, 0x3ff, 0x1356, 0x1fa7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x200, 0xfe00, 0xfff9, 0x381, 0x6, 0xdf88]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x24, 0x6c, 0xb, 0x16, 0x6, 0xc, 0x6c, 0x9, 0x5, 0x2, 0x5, 0x48, 0x12, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8, 0x8, 0x7, 0xa, 0x80, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x1, 0x4, 0xc, 0x12, 0x12, 0x12, 0xb, 0x1, 0x14, 0x24, 0x30]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x16, 0x1b, 0x12, 0x36, 0xb, 0x0, 0x6c, 0x3, 0x4, 0xc, 0x6c, 0x6c, 0xb, 0x18, 0x24, 0x4, 0x16, 0x6]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4e1c, 0x7, 0x2, 0x5f0f, 0x400, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6e8, 0x5, 0x3, 0x6, 0x6, 0x7, 0xd, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x4, 0x39, 0x6, 0x5, 0xfffc, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0xb}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x5, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x19}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x3}, {0x1, 0x8}, {}, {0x0, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0x7, 0x8, 0xfff7, 0x5, 0x7c]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0xc, 0x1b, 0x4, 0x30, 0x5, 0x12, 0x60, 0x1, 0x4, 0x21, 0x3, 0x2, 0xb, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8000, 0xa5ca, 0x7, 0x4, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x7}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4d68, 0x3, 0xfff3, 0x5, 0xf, 0x6, 0x8d, 0xffff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x5, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x1b, 0x19, 0x16, 0x36, 0x2, 0x24, 0x90debee3d54e7fcb, 0x1b, 0xc, 0x12, 0x4, 0x60, 0x9, 0x6, 0x48, 0x6, 0xb, 0x56280be4284bd17c, 0x6c, 0x71, 0x0]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x36, 0x3, 0x3, 0x9, 0x36, 0x2, 0x18, 0xb, 0xc, 0x4, 0x16, 0x36, 0x1, 0x1, 0xc, 0xc, 0x30, 0x30, 0x9]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd3b, 0x0, 0xfff, 0x8, 0x9, 0xc0, 0x7, 0x401]}}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x4}, {0x3, 0x9}, {0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x3}, {0x1, 0xa}, {0x4, 0x3}, {}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x7}, {0x7, 0x7}, {0x5, 0x2}, {0x7, 0x6}, {0x6, 0x2}, {0x6, 0xb}, {0x7, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x1a}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0x2}, {0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x401, 0x4, 0xb5, 0x751b, 0xeb01, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3d8a159e80be6d18}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x4}, {0x3, 0xa}, {0x4}, {0x2, 0x9}, {0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x4}, {0x2, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x60, 0x989, 0xfd6, 0x8020, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x18, 0x6, 0x48, 0x6, 0x60, 0x2, 0xc, 0x36, 0x9, 0x30, 0x78, 0x0, 0x16, 0x30, 0xb, 0x6, 0x24, 0xb, 0x36, 0x48, 0x3, 0x77, 0x6, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6f81, 0x2, 0x4000, 0x0, 0x0, 0x1]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x3}, {0x7, 0x3}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x6}, {0x4, 0x8}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x3}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x6}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfddf, 0x1ff, 0x7, 0x3, 0x6, 0x5, 0x8, 0x80]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8532, 0x5, 0x5, 0x8d5a, 0xe7, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x619, 0x7fff, 0xff6f, 0x400, 0x7, 0x881a, 0x5]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x9}, {0x7, 0x1}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x2}, {0x1, 0xa}, {}, {0x1, 0x8}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x3}, {0x5, 0x8}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x7}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x8}, {0x6, 0x7}, {0x5, 0x8}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x6}, {0x2, 0x7}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xc, 0x16, 0x9, 0x5, 0xc, 0x6, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x2, 0x5, 0x1, 0xf000, 0x2, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x16, 0x2, 0x9, 0x12, 0x48, 0x10, 0xb, 0x1, 0x2, 0xc, 0x30, 0x4, 0x3, 0x4, 0x6, 0xc, 0x66, 0x1b, 0x36, 0x1, 0x36, 0x1, 0x6, 0x24, 0x5, 0x6, 0x74, 0x1, 0x36, 0x12, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x5, 0xb, 0x1, 0x2, 0x60, 0x14, 0x48, 0x24, 0x1, 0x6, 0x18, 0x16, 0x6, 0x24, 0x9, 0x60, 0x6c, 0x9, 0x48, 0xc, 0x2, 0x24, 0x0, 0x3, 0xe]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x9, 0x18, 0x60, 0x24, 0x6f, 0x9, 0x5, 0x1b, 0x16, 0x3, 0x24, 0x24, 0x45, 0x5, 0x24, 0x31, 0x6, 0x6, 0x48, 0x9, 0x48, 0x5, 0x9, 0x1b, 0x18, 0x1b, 0x5, 0x18, 0x4, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x400, 0x7, 0xff01, 0x8, 0x3ff, 0x7, 0x1]}}]}]}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000000) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@map=r12, r8, 0x26}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async)
recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
ioctl$TUNSETSNDBUF(r13, 0x400454d4, &(0x7f0000000380)=0x2) (async)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async)
poll(&(0x7f0000000400)=[{r13, 0x40}], 0x1, 0x3)

354.873791ms ago: executing program 4 (id=3392):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x800) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x44000) (async)
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x44000)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000540)=0x14)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="8a4462e8be24e1f9e615b4069f2b380e53f189f6d7cc1afb4d7506843c4146261fd1a3d020eafb6c64a98c3cd32a51dfc6683a85cfd51f10662b9fdfcb2f84033b8b53561b691f0391413786cb6849923a23d975feb68d0d319a8d4947eceaa9680ef65f98", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b009f00000006001100010000000800150080000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0003000000060011003d0000000800150001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000300000006001100eb0000000800150002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x2, 0x400000000000003, 0x0, 0x2, 0x13, 0x0, 0x70bd2d, 0x0, [@sadb_sa={0x2, 0x1, 0x4d6, 0x2, 0x1, 0x71, 0x1, 0xc0000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}, @sadb_x_sec_ctx={0x1, 0x18, 0x10, 0xc3}]}, 0x98}}, 0x0) (async)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x2, 0x400000000000003, 0x0, 0x2, 0x13, 0x0, 0x70bd2d, 0x0, [@sadb_sa={0x2, 0x1, 0x4d6, 0x2, 0x1, 0x71, 0x1, 0xc0000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "7f"}, @sadb_x_sec_ctx={0x1, 0x18, 0x10, 0xc3}]}, 0x98}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0xa4, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}}, 0x40844)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) (async)
sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x26)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xb, 0x7}, {0x0, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x5, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804)
socket$rxrpc(0x21, 0x2, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4bf00203", @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf25150000004c00018008000100", @ANYRES32=r10, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000140002006e696376663000"/28], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x800)
write(0xffffffffffffffff, &(0x7f0000000100)="2f183b4351", 0x5) (async)
write(0xffffffffffffffff, &(0x7f0000000100)="2f183b4351", 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYRESDEC=r10, @ANYRES8=r9, @ANYBLOB="0500000000000000000006000000081e03006b010c93a0e3a2fa3f31bc33de68b92fd19dfdc3474b7330a7bb3190d5442500800000f306a04d885855a9b717d8e226f004c63d4b4a59a20f57e817578aaf45fba6c3e1491e3bcf0e851c8dfd1aa15c4f7ecca52ee0b355a00313eff1b738d37494d8ea6adbccbdae2893f6c34f3853e68f478414bc891f1358b894f843898bae7b13987825215bfb2e7996ad480fbc7a5b578f19cf70bff1e47fe249b40af4bd62a1dfe2bb84fdc83d02e67e504c", @ANYRES64=r7, @ANYBLOB="0800050009000000"], 0x24}}, 0x20000800)

305.92375ms ago: executing program 0 (id=3393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
socket$rds(0x15, 0x5, 0x0)
write$tun(r4, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000906d9a1aa810000000000000a0000000900020073797a310000000105000100070000001c0007800c000180080001400a0101000c0019400004000000008000836681499de94bf333126b02e34a5eb7ea0a0883f81615a639eb5583768a32252fb37dafd91623ebd570ed8db611840d6b9f72852c74cb78be92afea933e49fcf5f671c71ffb508905e1c958c9db83289093d5cab2511b9982806c7f1206ab60a89a50b921af0da09f65af9eaed7141be782"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

61.923497ms ago: executing program 3 (id=3394):
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x800, 0x4) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x61]}}, 0x0, 0x1c}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r3, 0x100000, 0x0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000280), 0x2, 0x0)
read(r5, &(0x7f00000014c0)=""/4125, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

53.446725ms ago: executing program 0 (id=3395):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000280)=0x1, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0}) (async, rerun: 64)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x600088c1) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2)

0s ago: executing program 4 (id=3396):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @remote})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(0x4)

kernel console output (not intermixed with test programs):

11859] bond5: entered promiscuous mode
[  211.526824][T11859] 8021q: adding VLAN 0 to HW filter on device bond5
[  211.534867][T11863] syzkaller0: entered promiscuous mode
[  211.540495][T11863] syzkaller0: entered allmulticast mode
[  211.763214][   T30] audit: type=1800 audit(1763039576.875:2): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1677" name="memory.events" dev="tmpfs" ino=1742 res=0 errno=0
[  211.830687][   T30] audit: type=1804 audit(1763039576.915:3): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1677" name="/newroot/339/memory.events" dev="tmpfs" ino=1742 res=1 errno=0
[  211.941506][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  211.950534][ T5847] Bluetooth: hci3: command 0x0406 tx timeout
[  211.956735][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  212.036736][T11901] delete_channel: no stack
[  212.110263][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'.
[  212.185474][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'.
[  212.225444][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'.
[  212.262344][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'.
[  212.733614][T11947] syzkaller0: entered promiscuous mode
[  212.751115][T11947] syzkaller0: entered allmulticast mode
[  212.767169][T11941] lo: entered allmulticast mode
[  213.291772][T11975] syzkaller1: entered promiscuous mode
[  213.298082][T11975] syzkaller1: entered allmulticast mode
[  213.812003][T12000] netlink: 'syz.1.1718': attribute type 1 has an invalid length.
[  213.953071][T12003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.974305][T12003] syzkaller0: entered promiscuous mode
[  213.979841][T12003] syzkaller0: entered allmulticast mode
[  214.037956][T12003] tipc: Resetting bearer <eth:syzkaller0>
[  214.278970][T12027] 8021q: VLANs not supported on ip6tnl0
[  214.306245][T12002] tipc: Resetting bearer <eth:syzkaller0>
[  214.335922][T12002] tipc: Disabling bearer <eth:syzkaller0>
[  214.681270][T12060] netlink: 'syz.4.1730': attribute type 21 has an invalid length.
[  214.704420][T12060] netlink: 'syz.4.1730': attribute type 22 has an invalid length.
[  214.724675][T12060] netlink: 'syz.4.1730': attribute type 23 has an invalid length.
[  214.733120][T12060] netlink: 'syz.4.1730': attribute type 25 has an invalid length.
[  215.835678][T12064] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  215.852938][T12064] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  215.893985][T12064] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  215.932713][T12064] netlink: 'syz.2.1733': attribute type 2 has an invalid length.
[  215.954522][T12064] __nla_validate_parse: 16 callbacks suppressed
[  215.954543][T12064] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1733'.
[  215.986246][T12068] Cannot find del_set index 0 as target
[  216.066321][T12073] openvswitch: netlink: IP tunnel dst address not specified
[  216.224386][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1741'.
[  216.236325][T12088] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1741'.
[  216.467734][T12101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.524738][T12101] syzkaller0: entered promiscuous mode
[  216.530282][T12101] syzkaller0: entered allmulticast mode
[  216.553645][T12101] pim6reg: left allmulticast mode
[  216.643024][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'.
[  216.748163][T12122] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.007384][T12130] sctp: [Deprecated]: syz.1.1752 (pid 12130) Use of int in maxseg socket option.
[  217.007384][T12130] Use struct sctp_assoc_value instead
[  217.103833][T12136] team0: left allmulticast mode
[  217.108948][T12136] team_slave_0: left allmulticast mode
[  217.119033][T12136] team_slave_1: left allmulticast mode
[  217.133695][T12136] team0: left promiscuous mode
[  217.144315][T12136] team_slave_0: left promiscuous mode
[  217.157466][T12136] team_slave_1: left promiscuous mode
[  217.173083][T12136] bridge0: port 3(team0) entered disabled state
[  217.210977][T12136] bridge_slave_0: left allmulticast mode
[  217.222816][T12136] bridge_slave_0: left promiscuous mode
[  217.235572][T12136] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.258555][T12136] bridge_slave_1: left allmulticast mode
[  217.266009][T12136] bridge_slave_1: left promiscuous mode
[  217.278087][T12136] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.326499][T12136] bond0: (slave bond_slave_0): Releasing backup interface
[  217.338797][T12136] bond0: (slave bond_slave_1): Releasing backup interface
[  217.357848][T12136] team0: Port device team_slave_0 removed
[  217.375914][T12136] team0: Port device team_slave_1 removed
[  217.383728][T12136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.391175][T12136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.408559][T12136] bond2: (slave geneve2): Releasing active interface
[  217.426024][T12136] team0: Port device bridge1 removed
[  217.438633][T12136] bond0: (slave bond4): Releasing backup interface
[  217.461906][T12147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1758'.
[  217.474861][T12149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.483647][T12149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.493938][T12149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.501373][T12149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.529380][T12096] tipc: Resetting bearer <eth:syzkaller0>
[  217.555570][T12156] IPv6: NLM_F_CREATE should be specified when creating new route
[  217.563707][T12156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  217.570950][T12156] IPv6: NLM_F_CREATE should be set when creating new route
[  217.584275][T12096] tipc: Disabling bearer <eth:syzkaller0>
[  217.598332][ T2142] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.609843][ T2142] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.619594][ T2142] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.644924][ T2142] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  217.696174][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1762'.
[  217.705946][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1762'.
[  217.739188][T12159] gretap2: entered promiscuous mode
[  217.745000][T12159] gretap2: entered allmulticast mode
[  217.788804][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'.
[  217.805125][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'.
[  217.815358][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'.
[  218.020909][T12180] block nbd0: Unsupported socket: should be TCP or UNIX.
[  218.291547][T12200] bond0: invalid ARP target 0.0.0.0 specified for addition
[  218.299606][T12200] bond0: option arp_ip_target: invalid value (0)
[  218.540562][T12218] SET target dimension over the limit!
[  219.197778][T12266] tc_dump_action: action bad kind
[  219.284501][T12273] wlan0 speed is unknown, defaulting to 1000
[  219.322043][T12274] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  219.345667][T12274] netlink: 'syz.2.1793': attribute type 2 has an invalid length.
[  219.367288][T12274] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  219.379331][T12274] netlink: 'syz.2.1793': attribute type 2 has an invalid length.
[  219.389887][T12277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.393028][T12274] xt_hashlimit: size too large, truncated to 1048576
[  219.409151][T12278] openvswitch: netlink: Missing key (keys=40, expected=80)
[  219.417790][T12277] syzkaller0: entered promiscuous mode
[  219.433503][T12277] syzkaller0: entered allmulticast mode
[  219.491429][T12277] tipc: Resetting bearer <eth:syzkaller0>
[  219.498769][T12277] wg2 speed is unknown, defaulting to 1000
[  219.512749][T12277] wg2 speed is unknown, defaulting to 1000
[  219.527277][T12277] wg2 speed is unknown, defaulting to 1000
[  219.571912][T12277] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  219.636970][T12277] wg2 speed is unknown, defaulting to 1000
[  219.721468][T12277] wg2 speed is unknown, defaulting to 1000
[  219.729456][T12277] wg2 speed is unknown, defaulting to 1000
[  219.754582][T12277] wg2 speed is unknown, defaulting to 1000
[  219.770305][T12277] wg2 speed is unknown, defaulting to 1000
[  219.787851][T12290] netlink: 'syz.2.1798': attribute type 2 has an invalid length.
[  219.789365][T12277] wg2 speed is unknown, defaulting to 1000
[  219.872976][T12293] netlink: 'syz.2.1799': attribute type 5 has an invalid length.
[  219.881014][T12293] netlink: 'syz.2.1799': attribute type 6 has an invalid length.
[  219.894645][T12276] tipc: Resetting bearer <eth:syzkaller0>
[  219.916952][T12276] tipc: Disabling bearer <eth:syzkaller0>
[  220.073469][T12295] sctp: [Deprecated]: syz.3.1800 (pid 12295) Use of int in max_burst socket option.
[  220.073469][T12295] Use struct sctp_assoc_value instead
[  220.446339][T12321] netlink: 'syz.1.1810': attribute type 15 has an invalid length.
[  220.520644][T12326] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.540230][T12326] IPVS: length: 157 != 24
[  220.658480][T12331] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  220.759683][T12340] bond2: (slave gretap0): making interface the new active one
[  220.771208][T12340] bond2: (slave gretap0): Enslaving as an active interface with an up link
[  220.796977][T12342] --map-set only usable from mangle table
[  220.911975][T12346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.920142][T12346] syzkaller0: entered promiscuous mode
[  220.925911][T12346] syzkaller0: entered allmulticast mode
[  220.963029][T12351] bond0: (slave syz_tun): Releasing backup interface
[  220.991335][T12354] __nla_validate_parse: 75 callbacks suppressed
[  220.991366][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1820'.
[  221.008760][T12356] netlink: 'syz.0.1817': attribute type 10 has an invalid length.
[  221.028499][T12351] bond0: (slave bond_slave_0): Releasing backup interface
[  221.046970][T12351] team0: Port device team_slave_0 removed
[  221.059010][T12351] team0: Port device team_slave_1 removed
[  221.067409][T12351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  221.086195][T12346] tipc: Resetting bearer <eth:syzkaller0>
[  221.095828][ T5923] wg2 speed is unknown, defaulting to 1000
[  221.102538][T12345] tipc: Resetting bearer <eth:syzkaller0>
[  221.120907][T12345] tipc: Disabling bearer <eth:syzkaller0>
[  221.231274][T12366] tipc: Trying to set illegal importance in message
[  221.527820][T12382] Cannot find set identified by id 65534 to match
[  221.573145][T12388] xt_TCPMSS: Only works on TCP SYN packets
[  221.674126][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'.
[  221.698560][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  221.961344][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  222.285176][T12416] team0: Port device dummy0 added
[  222.485947][T12431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1841'.
[  222.725454][T12447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1845'.
[  222.785512][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'.
[  222.913672][T12451] syz.2.1847 (12451) used greatest stack depth: 17976 bytes left
[  222.945605][T12455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.999070][T12459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.018996][T12452] syz.2.1847 (12452) used greatest stack depth: 17832 bytes left
[  235.452545][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.056848][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  261.063457][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  261.247250][T12486] syzkaller0: entered promiscuous mode
[  261.252899][T12486] syzkaller0: entered allmulticast mode
[  261.311138][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'.
[  261.640432][T12505] ip6tnl0: Caught tx_queue_len zero misconfig
[  261.810988][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'.
[  261.892048][T12531] bond3: entered promiscuous mode
[  261.907670][T12531] bond3: entered allmulticast mode
[  261.920316][T12531] 8021q: adding VLAN 0 to HW filter on device bond3
[  262.063695][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1866'.
[  262.080402][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'.
[  262.261800][T12545] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  262.277750][T12545] bond6 (unregistering): Released all slaves
[  262.361011][T12555] syz_tun: entered allmulticast mode
[  262.389989][T12556] validate_nla: 2 callbacks suppressed
[  262.390008][T12556] netlink: 'syz.0.1874': attribute type 8 has an invalid length.
[  262.573554][T12574] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1879'.
[  262.598243][T12569] netlink: 'syz.4.1877': attribute type 13 has an invalid length.
[  262.609575][T12569] veth0_macvtap: left promiscuous mode
[  262.614681][T12575] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1878'.
[  262.625492][T12569] macvtap0: entered allmulticast mode
[  262.627723][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'.
[  262.656132][T12569] macvtap0: refused to change device tx_queue_len
[  262.780400][T12583] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1882'.
[  262.839519][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'.
[  262.849118][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'.
[  263.028003][T12600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.060937][T12600] syzkaller0: entered promiscuous mode
[  263.093538][T12600] syzkaller0: entered allmulticast mode
[  263.118872][T12600] tipc: Resetting bearer <eth:syzkaller0>
[  263.132902][T12600] syzkaller1: entered promiscuous mode
[  263.138614][T12600] syzkaller1: entered allmulticast mode
[  263.188270][   T30] audit: type=1800 audit(1763039628.295:4): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1892" name="memory.events" dev="tmpfs" ino=1881 res=0 errno=0
[  263.210755][T12597] tipc: Resetting bearer <eth:syzkaller0>
[  263.220786][   T30] audit: type=1804 audit(1763039628.295:5): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1892" name="/newroot/366/memory.events" dev="tmpfs" ino=1881 res=1 errno=0
[  263.256401][T12597] tipc: Disabling bearer <eth:syzkaller0>
[  263.282735][T12608] macvtap1: entered promiscuous mode
[  263.288256][T12608] vlan0: entered promiscuous mode
[  263.294410][T12608] macvtap1: entered allmulticast mode
[  263.300058][T12608] vlan0: entered allmulticast mode
[  263.305911][T12608] veth0_vlan: entered allmulticast mode
[  263.321822][T12609] macvtap2: entered promiscuous mode
[  263.329504][T12609] macvtap2: entered allmulticast mode
[  263.396603][T12620] netlink: 'syz.1.1896': attribute type 20 has an invalid length.
[  263.473880][T12620] netlink: 'syz.1.1896': attribute type 20 has an invalid length.
[  263.721175][T12637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.737717][T12637] netlink: 'syz.4.1904': attribute type 4 has an invalid length.
[  263.875563][T12648] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  263.927176][T12648] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  264.149621][T12673] netlink: 'syz.1.1914': attribute type 4 has an invalid length.
[  264.159090][T12674] Cannot find add_set index 2 as target
[  264.254232][T12678] netlink: 'syz.1.1914': attribute type 4 has an invalid length.
[  265.143900][T12741] netem: change failed
[  265.441311][T12771] wlan0 speed is unknown, defaulting to 1000
[  265.474936][T12771] wg2 speed is unknown, defaulting to 1000
[  265.530475][T12777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.801484][T12787] xt_ecn: cannot match TCP bits for non-tcp packets
[  266.434055][T12823] x_tables: duplicate underflow at hook 2
[  266.666410][T12844] IPv6: NLM_F_REPLACE set, but no existing node found!
[  266.773313][T12847] bridge0: port 2(batadv1) entered blocking state
[  266.780002][T12847] bridge0: port 2(batadv1) entered disabled state
[  266.782305][T12850] netlink: 'syz.0.1962': attribute type 19 has an invalid length.
[  266.787580][T12847] batadv1: entered allmulticast mode
[  266.801919][T12847] batadv1: entered promiscuous mode
[  267.090738][T12864] __nla_validate_parse: 22 callbacks suppressed
[  267.090760][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'.
[  267.240353][T12881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1970'.
[  267.250178][T12881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1970'.
[  267.262053][T12881] netlink: 'syz.4.1970': attribute type 5 has an invalid length.
[  267.269973][ T3537] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  267.279741][ T3537] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  267.304161][T12880] raw_sendmsg: syz.0.1972 forgot to set AF_INET. Fix it!
[  267.311371][T12881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1970'.
[  267.371149][T12885] ipt_REJECT: TCP_RESET invalid for non-tcp
[  267.410790][T12885] IPv6: sit3: Disabled Multicast RS
[  267.421201][T12885] sit3: entered allmulticast mode
[  267.785411][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'.
[  268.268595][T12933] netlink: 'syz.2.1986': attribute type 4 has an invalid length.
[  268.295243][T12933] netlink: 'syz.2.1986': attribute type 4 has an invalid length.
[  268.310872][T12933] openvswitch: netlink: Key 0 has unexpected len 33 expected 0
[  268.382150][T12937] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1987'.
[  268.627691][T12955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1990'.
[  268.661307][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'.
[  268.737252][T12949] bond3 (unregistering): Released all slaves
[  268.773478][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1995'.
[  268.965932][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'.
[  268.995719][T12977] netlink: 'syz.3.2000': attribute type 2 has an invalid length.
[  269.038348][T12977] �9: entered promiscuous mode
[  269.047073][T12977] delete_channel: no stack
[  269.445351][T13009] netlink: 'syz.3.2012': attribute type 11 has an invalid length.
[  269.553118][T13018] syzkaller0: entered promiscuous mode
[  269.570577][T13018] syzkaller0: entered allmulticast mode
[  269.599849][T13016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.629349][T13018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  269.656649][T13016] tipc: Resetting bearer <eth:syzkaller0>
[  269.690814][T13016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  269.703877][T13016] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  269.711782][T13016] gretap1: entered promiscuous mode
[  269.718708][T13016] gretap1: entered allmulticast mode
[  269.727698][T13023] netlink: 'syz.2.2017': attribute type 26 has an invalid length.
[  269.737287][T13015] tipc: Resetting bearer <eth:syzkaller0>
[  269.780221][T13015] tipc: Disabling bearer <eth:syzkaller0>
[  269.907612][T13031] netlink: 'syz.4.2019': attribute type 13 has an invalid length.
[  269.915700][T13031] netlink: 'syz.4.2019': attribute type 27 has an invalid length.
[  269.994380][T13038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.002730][T13038] syzkaller0: entered promiscuous mode
[  270.008453][T13038] syzkaller0: entered allmulticast mode
[  270.051863][T13038] tipc: Resetting bearer <eth:syzkaller0>
[  270.067094][T13037] tipc: Resetting bearer <eth:syzkaller0>
[  270.111236][T13037] tipc: Disabling bearer <eth:syzkaller0>
[  270.168774][T13049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.176922][T13049] syzkaller0: entered promiscuous mode
[  270.182656][T13049] syzkaller0: entered allmulticast mode
[  270.215302][T13041] tipc: Resetting bearer <eth:syzkaller0>
[  270.307487][T13041] tipc: Disabling bearer <eth:syzkaller0>
[  270.496678][T13073] netlink: 'syz.0.2033': attribute type 2 has an invalid length.
[  270.709895][T13084] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  270.988066][T13107] netlink: 'syz.4.2042': attribute type 13 has an invalid length.
[  271.014321][T13113] vcan0: tx drop: invalid da for name 0x0000000001000000
[  271.215998][T13127] syzkaller0: entered promiscuous mode
[  271.231526][T13127] syzkaller0: entered allmulticast mode
[  271.505681][T13146] syzkaller0: entered promiscuous mode
[  271.550649][T13146] syzkaller0: entered allmulticast mode
[  271.689293][T13147] syz.2.2053: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  271.705533][T13158] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  271.737039][T13147] CPU: 1 UID: 0 PID: 13147 Comm: syz.2.2053 Not tainted syzkaller #0 PREEMPT(full) 
[  271.737070][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  271.737084][T13147] Call Trace:
[  271.737092][T13147]  <TASK>
[  271.737101][T13147]  dump_stack_lvl+0x189/0x250
[  271.737139][T13147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.737167][T13147]  ? __pfx__printk+0x10/0x10
[  271.737188][T13147]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.737217][T13147]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.737259][T13147]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  271.737289][T13147]  warn_alloc+0x214/0x310
[  271.737347][T13147]  ? __pfx_warn_alloc+0x10/0x10
[  271.737388][T13147]  ? __get_vm_area_node+0x28f/0x300
[  271.737417][T13147]  ? nf_tables_newset+0x1330/0x2540
[  271.737448][T13147]  __vmalloc_node_range_noprof+0x690/0x12d0
[  271.737511][T13147]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.737540][T13147]  ? nf_tables_newset+0x1330/0x2540
[  271.737569][T13147]  ? rcu_is_watching+0x15/0xb0
[  271.737594][T13147]  ? nf_tables_newset+0x1330/0x2540
[  271.737620][T13147]  __kvmalloc_node_noprof+0x674/0x910
[  271.737652][T13147]  ? nf_tables_newset+0x1330/0x2540
[  271.737680][T13147]  ? nft_set_lookup+0x128/0x150
[  271.737707][T13147]  ? nft_hash_privsize+0x6f/0xf0
[  271.737740][T13147]  nf_tables_newset+0x1330/0x2540
[  271.737781][T13147]  ? __pfx_nf_tables_newset+0x10/0x10
[  271.737832][T13147]  ? __nla_parse+0x40/0x60
[  271.737861][T13147]  nfnetlink_rcv+0x11d9/0x2590
[  271.737931][T13147]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  271.737985][T13147]  ? ref_tracker_free+0x63a/0x7d0
[  271.738049][T13147]  ? __netlink_deliver_tap+0x807/0x850
[  271.738069][T13147]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.738128][T13147]  netlink_unicast+0x82f/0x9e0
[  271.738168][T13147]  ? __pfx_netlink_unicast+0x10/0x10
[  271.738201][T13147]  ? netlink_sendmsg+0x642/0xb30
[  271.738219][T13147]  ? skb_put+0x11b/0x210
[  271.738244][T13147]  netlink_sendmsg+0x805/0xb30
[  271.738275][T13147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.738300][T13147]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.738332][T13147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.738352][T13147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.738373][T13147]  __sock_sendmsg+0x21c/0x270
[  271.738406][T13147]  ____sys_sendmsg+0x505/0x830
[  271.738434][T13147]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.738467][T13147]  ? import_iovec+0x74/0xa0
[  271.738498][T13147]  ___sys_sendmsg+0x21f/0x2a0
[  271.738524][T13147]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.738587][T13147]  ? __fget_files+0x2a/0x420
[  271.738606][T13147]  ? __fget_files+0x3a0/0x420
[  271.738637][T13147]  __x64_sys_sendmsg+0x19b/0x260
[  271.738663][T13147]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.738705][T13147]  ? do_syscall_64+0xbe/0xfa0
[  271.738748][T13147]  do_syscall_64+0xfa/0xfa0
[  271.738776][T13147]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.738804][T13147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.738825][T13147]  ? clear_bhb_loop+0x60/0xb0
[  271.738850][T13147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.738869][T13147] RIP: 0033:0x7f1f5d38f6c9
[  271.738900][T13147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.738917][T13147] RSP: 002b:00007f1f5e294038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.738939][T13147] RAX: ffffffffffffffda RBX: 00007f1f5d5e6180 RCX: 00007f1f5d38f6c9
[  271.738955][T13147] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009
[  271.738968][T13147] RBP: 00007f1f5d411f91 R08: 0000000000000000 R09: 0000000000000000
[  271.738981][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.738993][T13147] R13: 00007f1f5d5e6218 R14: 00007f1f5d5e6180 R15: 00007fff8bcaf838
[  271.739028][T13147]  </TASK>
[  271.741348][T13147] Mem-Info:
[  272.174273][T13147] active_anon:4752 inactive_anon:0 isolated_anon:0
[  272.174273][T13147]  active_file:3017 inactive_file:39935 isolated_file:0
[  272.174273][T13147]  unevictable:768 dirty:83 writeback:0
[  272.174273][T13147]  slab_reclaimable:11397 slab_unreclaimable:161382
[  272.174273][T13147]  mapped:28987 shmem:1358 pagetables:1112
[  272.174273][T13147]  sec_pagetables:0 bounce:0
[  272.174273][T13147]  kernel_misc_reclaimable:0
[  272.174273][T13147]  free:1262018 free_pcp:12319 free_cma:0
[  272.254287][T13147] Node 0 active_anon:19108kB inactive_anon:0kB active_file:12068kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116048kB dirty:332kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12680kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  272.329420][T13147] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  272.372351][T13147] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  272.432757][T13147] lowmem_reserve[]: 0 2505 2505 2505 2505
[  272.457474][T13147] Node 0 DMA32 free:1134200kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18808kB inactive_anon:0kB active_file:12068kB inactive_file:159536kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35756kB local_pcp:19044kB free_cma:0kB
[  272.495607][T13147] lowmem_reserve[]: 0 0 0 0 0
[  272.500421][T13147] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  272.540535][T13147] lowmem_reserve[]: 0 0 0 0 0
[  272.550158][T13147] Node 1 Normal free:3898288kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13864kB local_pcp:5864kB free_cma:0kB
[  272.583768][T13147] lowmem_reserve[]: 0 0 0 0 0
[  272.597588][T13147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  272.614408][T13147] Node 0 DMA32: 666*4kB (UME) 410*8kB (UM) 353*16kB (UM) 639*32kB (UME) 126*64kB (UME) 34*128kB (UME) 12*256kB (UM) 4*512kB (ME) 9*1024kB (UME) 5*2048kB (M) 260*4096kB (M) = 1133992kB
[  272.666862][T13147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  272.683906][T13147] Node 1 Normal: 188*4kB (UME) 40*8kB (UME) 36*16kB (UME) 148*32kB (UME) 39*64kB (UME) 8*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898288kB
[  272.711952][T13186] netlink: 'syz.0.2063': attribute type 7 has an invalid length.
[  272.732565][T13147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.753010][T13147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.765654][T13147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  272.778945][T13147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.800675][T13147] 44306 total pagecache pages
[  272.810805][T13147] 0 pages in swap cache
[  272.815204][T13147] Free swap  = 124996kB
[  272.819562][T13147] Total swap = 124996kB
[  272.846917][T13147] 2097051 pages RAM
[  272.851503][T13147] 0 pages HighMem/MovableOnly
[  272.875967][T13147] 424119 pages reserved
[  272.883318][T13147] 0 pages cma reserved
[  272.935674][T13203] __nla_validate_parse: 17 callbacks suppressed
[  272.935695][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2067'.
[  273.245974][T13214] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2070'.
[  273.361218][T13218] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  273.425050][T13222] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2074'.
[  273.679021][T13232] IPv6: sit3: Disabled Multicast RS
[  273.686257][T13232] sit3: entered allmulticast mode
[  273.791533][T13243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2081'.
[  273.866594][T13247] vxcan1: tx address claim with different name
[  274.375199][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'.
[  274.729648][T13291] netlink: 'syz.0.2095': attribute type 10 has an invalid length.
[  274.750396][T13291] team0: Device ipvlan1 failed to register rx_handler
[  274.905932][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'.
[  275.074527][T13314] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  275.281743][T13326] netlink: 'syz.3.2110': attribute type 21 has an invalid length.
[  275.338289][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'.
[  275.477016][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'.
[  275.509025][T13345] netlink: 'syz.3.2115': attribute type 1 has an invalid length.
[  275.534209][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2113'.
[  275.568858][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'.
[  275.578908][T13345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  275.774365][ T5152] Bluetooth: hci4: command 0x0405 tx timeout
[  275.857871][T13368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.010503][T13381] GUP no longer grows the stack in syz.1.2126 (13381): 200000003000-20000000a000 (200000001000)
[  276.024463][T13374] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  276.030969][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.1.2126 Not tainted syzkaller #0 PREEMPT(full) 
[  276.030997][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  276.031011][T13381] Call Trace:
[  276.031019][T13381]  <TASK>
[  276.031027][T13381]  dump_stack_lvl+0x189/0x250
[  276.031062][T13381]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.031091][T13381]  ? __pfx__printk+0x10/0x10
[  276.031110][T13381]  ? find_vma+0xe7/0x160
[  276.031152][T13381]  __get_user_pages+0x2470/0x2a00
[  276.031188][T13381]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  276.031252][T13381]  ? rcu_is_watching+0x15/0xb0
[  276.031283][T13381]  __gup_longterm_locked+0xde4/0x1660
[  276.031318][T13381]  ? try_grab_folio_fast+0x1bf/0x6a0
[  276.031359][T13381]  ? gup_fast_fallback+0x1b86/0x22d0
[  276.031399][T13381]  gup_fast_fallback+0x1d65/0x22d0
[  276.031467][T13381]  ? __pfx_gup_fast_fallback+0x10/0x10
[  276.031493][T13381]  ? __mutex_lock+0x335/0x1350
[  276.031538][T13381]  ? is_valid_gup_args+0x11f/0x200
[  276.031567][T13381]  ? get_user_pages_fast+0x4d/0xb0
[  276.031598][T13381]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  276.031634][T13381]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  276.031656][T13381]  ? wait_for_space+0x248/0x2d0
[  276.031678][T13381]  iov_iter_get_pages2+0x5e/0xa0
[  276.031709][T13381]  __se_sys_vmsplice+0x548/0x10d0
[  276.031741][T13381]  ? futex_private_hash_put+0x4b/0x280
[  276.031776][T13381]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  276.031801][T13381]  ? __pfx_futex_wake+0x10/0x10
[  276.031889][T13381]  ? do_syscall_64+0xbe/0xfa0
[  276.031924][T13381]  do_syscall_64+0xfa/0xfa0
[  276.031953][T13381]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.031982][T13381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.032003][T13381]  ? clear_bhb_loop+0x60/0xb0
[  276.032029][T13381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.032049][T13381] RIP: 0033:0x7f558178f6c9
[  276.032068][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.032085][T13381] RSP: 002b:00007f55826e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  276.032107][T13381] RAX: ffffffffffffffda RBX: 00007f55819e5fa0 RCX: 00007f558178f6c9
[  276.032123][T13381] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  276.032135][T13381] RBP: 00007f5581811f91 R08: 0000000000000000 R09: 0000000000000000
[  276.032148][T13381] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  276.032161][T13381] R13: 00007f55819e6038 R14: 00007f55819e5fa0 R15: 00007ffe1b272518
[  276.032196][T13381]  </TASK>
[  276.469994][T13388] geneve2: entered promiscuous mode
[  276.606922][T13404] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  276.726214][T13407] netlink: 'syz.0.2136': attribute type 2 has an invalid length.
[  276.735245][T13407] netlink: 'syz.0.2136': attribute type 2 has an invalid length.
[  276.765124][T13412] delete_channel: no stack
[  276.834502][T13415] delete_channel: no stack
[  276.914003][T13413] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  277.275846][T13441] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  277.330129][T13445] netlink: 'syz.4.2148': attribute type 1 has an invalid length.
[  277.387704][T13445] bond7: (slave gretap1): making interface the new active one
[  277.413435][T13445] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  277.456316][T13443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.464393][T13443] syzkaller0: entered promiscuous mode
[  277.469901][T13443] syzkaller0: entered allmulticast mode
[  277.496555][T13443] tipc: Resetting bearer <eth:syzkaller0>
[  277.520070][T13443] ksmbd: Unknown IPC event: 3, ignore.
[  277.581141][T13442] tipc: Resetting bearer <eth:syzkaller0>
[  277.605154][T13442] tipc: Disabling bearer <eth:syzkaller0>
[  277.663669][T13464] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  277.690179][T13469] netlink: 'syz.0.2155': attribute type 63 has an invalid length.
[  277.698665][T13466] ªªªªªªZ7nz>RAÌ: renamed from lo
[  277.715995][T13469] netlink: 'syz.0.2155': attribute type 63 has an invalid length.
[  277.835124][T13475] bond0: Caught tx_queue_len zero misconfig
[  278.410135][T13520] netlink: 'syz.0.2167': attribute type 1 has an invalid length.
[  278.442897][T13520] __nla_validate_parse: 18 callbacks suppressed
[  278.442920][T13520] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2167'.
[  278.545237][T13524] netlink: 'syz.3.2172': attribute type 3 has an invalid length.
[  278.558015][T13533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2172'.
[  278.569868][T13524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2172'.
[  278.919651][T13563] syzkaller1: entered promiscuous mode
[  278.926067][T13563] syzkaller1: entered allmulticast mode
[  279.087296][T13571] openvswitch: netlink: IP tunnel dst address not specified
[  279.176540][T13575] IPVS: Unknown mcast interface: veth1_to_batadv
[  279.291367][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'.
[  279.386534][T13589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'.
[  279.475941][ T1336] syzkaller0: tun_net_xmit 76
[  279.481401][ T1336] syzkaller0: tun_net_xmit 48
[  279.497332][T13593] syzkaller0: tun_chr_ioctl cmd 1074025677
[  279.503646][T13593] syzkaller0: Linktype set failed because interface is up
[  279.513568][T13593] xt_hashlimit: size too large, truncated to 1048576
[  279.522539][ T5923] syzkaller0: tun_net_xmit 76
[  279.621412][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'.
[  279.773368][T13606] team0: Device wireguard0 is up. Set it down before adding it as a team port
[  279.783638][ T5902] syzkaller0: tun_net_xmit 76
[  280.142476][ T5923] syzkaller0: tun_net_xmit 76
[  280.383190][T13640] validate_nla: 2 callbacks suppressed
[  280.383209][T13640] netlink: 'syz.2.2202': attribute type 1 has an invalid length.
[  280.398200][T13640] netlink: 'syz.2.2202': attribute type 4 has an invalid length.
[  280.406798][T13640] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.2202'.
[  280.561135][T13654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2205'.
[  281.744441][T13659] sctp: [Deprecated]: syz.4.2208 (pid 13659) Use of int in maxseg socket option.
[  281.744441][T13659] Use struct sctp_assoc_value instead
[  281.807990][T13662] xt_policy: output policy not valid in PREROUTING and INPUT
[  281.939430][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'.
[  281.966330][T13668] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  281.984737][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'.
[  281.988467][T13668] bond6 (unregistering): Released all slaves
[  282.024409][T13677] chnl_net:caif_netlink_parms(): no params data found
[  282.332927][ T3493] syzkaller0: tun_net_xmit 76
[  282.346580][ T3493] syzkaller0: tun_net_xmit 48
[  282.359324][T13694] syzkaller0: tun_chr_ioctl cmd 1074025677
[  282.382504][ T5902] syzkaller0: tun_net_xmit 76
[  282.384869][T13694] syzkaller0: Linktype set failed because interface is up
[  282.434430][T13701] xt_hashlimit: size too large, truncated to 1048576
[  282.600447][ T5902] syzkaller0: tun_net_xmit 76
[  282.738213][T13718] team1: entered promiscuous mode
[  282.747323][T13718] team1: entered allmulticast mode
[  282.914106][T13731] syzkaller1: entered promiscuous mode
[  282.919768][T13731] syzkaller1: entered allmulticast mode
[  282.920913][T13733] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  293.852506][ T5152] Bluetooth: hci4: command 0x0405 tx timeout
[  322.497337][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.503831][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  351.145802][T13750] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  351.186550][T13750] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  351.210345][T13755] __nla_validate_parse: 5 callbacks suppressed
[  351.210365][T13755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2236'.
[  351.247690][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'.
[  351.295447][T13761] netlink: 'syz.4.2237': attribute type 33 has an invalid length.
[  351.391702][T13761] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  351.417324][T13761] bond8 (unregistering): Released all slaves
[  351.461377][T13767] netlink: 'syz.2.2239': attribute type 8 has an invalid length.
[  351.632743][T13770] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  351.640025][T13770] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  351.685905][T13770] xt_hashlimit: size too large, truncated to 1048576
[  352.023151][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.031364][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.039399][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.047391][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.055376][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.063393][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.071372][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.079384][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.087387][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.095420][T13800] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  352.263535][T13815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2252'.
[  352.384792][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2254'.
[  352.491293][T13832] Bluetooth: hci0: Opcode 0x080f failed: -22
[  352.757840][T13844] gtp1: entered promiscuous mode
[  352.764424][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'.
[  352.773883][T13844] gtp1: entered allmulticast mode
[  352.939741][T13855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2266'.
[  352.976287][T13861] netlink: 'syz.0.2267': attribute type 21 has an invalid length.
[  352.999197][T13861] netlink: 'syz.0.2267': attribute type 22 has an invalid length.
[  353.018403][T13863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2268'.
[  353.025191][T13861] netlink: 'syz.0.2267': attribute type 23 has an invalid length.
[  353.063309][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'.
[  353.072738][T13861] netlink: 'syz.0.2267': attribute type 25 has an invalid length.
[  353.102458][T13870] syz.3.2270 (13870) used obsolete PPPIOCDETACH ioctl
[  353.120580][T13861] netlink: 'syz.0.2267': attribute type 26 has an invalid length.
[  353.128675][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2267'.
[  353.141765][T13870] ip6t_srh: unknown srh match flags  5F28
[  353.185582][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2272'.
[  353.202459][T13876] ip6tnl0: Caught tx_queue_len zero misconfig
[  353.222844][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  353.367307][T13890] unsupported nla_type 52263
[  353.413009][T13892] netlink: 'syz.3.2277': attribute type 9 has an invalid length.
[  353.451363][   T30] audit: type=1800 audit(1763039718.535:6): pid=13892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2277" name="memory.events" dev="tmpfs" ino=2449 res=0 errno=0
[  353.676298][T13906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  354.289946][T13946] 0ªî{X¹¦: left allmulticast mode
[  354.494378][ T5843] Bluetooth: hci0: command tx timeout
[  355.434007][T14028] syzkaller0: entered promiscuous mode
[  355.439797][T14028] syzkaller0: entered allmulticast mode
[  355.464755][T14027] block nbd0: not configured, cannot reconfigure
[  355.929052][T14052] bond8: Unable to set peer notification delay as MII monitoring is disabled
[  355.949030][T14052] bond8 (unregistering): Released all slaves
[  356.515699][T14083] xt_policy: too many policy elements
[  356.720135][T14098] __nla_validate_parse: 11 callbacks suppressed
[  356.720156][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'.
[  356.814434][T14098] 8021q: adding VLAN 0 to HW filter on device bond8
[  357.087071][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'.
[  357.387312][T14148] xt_TCPMSS: Only works on TCP SYN packets
[  357.653950][T14157] ip6t_srh: unknown srh invflags 4000
[  357.781885][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'.
[  357.898523][T14174] xt_TPROXY: Can be used only with -p tcp or -p udp
[  358.173091][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2351'.
[  358.189020][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2351'.
[  358.250855][T14190] validate_nla: 9 callbacks suppressed
[  358.250876][T14190] netlink: 'syz.1.2353': attribute type 12 has an invalid length.
[  358.294092][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'.
[  358.307870][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2351'.
[  358.317619][T14190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2353'.
[  358.488075][  T154] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.508356][  T154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.622625][T14016] IPVS: starting estimator thread 0...
[  358.665281][T14226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.717936][T14220] IPVS: using max 25 ests per chain, 60000 per kthread
[  358.770929][T14226] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  358.785954][T14226] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  358.812842][T14226] net_ratelimit: 47 callbacks suppressed
[  358.812876][T14226] openvswitch: netlink: Message has 592 unknown bytes.
[  358.826738][T14226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.840023][T14226] netem: change failed
[  359.036770][T14239] netlink: 'syz.3.2363': attribute type 1 has an invalid length.
[  359.170990][T14250] bond3: (slave ip6gretap1): making interface the new active one
[  359.207414][T14250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  359.219640][T14254] xt_CT: You must specify a L4 protocol and not use inversions on it
[  359.221696][T14250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  359.240266][T14250] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  359.909469][T14293] syzkaller0: entered promiscuous mode
[  359.927768][T14293] syzkaller0: entered allmulticast mode
[  359.941355][T14301] sock: sock_set_timeout: `syz.1.2383' (pid 14301) tries to set negative timeout
[  360.076257][T14305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2382'.
[  360.205264][T14316] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  360.303470][T14320] netlink: 'syz.1.2387': attribute type 28 has an invalid length.
[  360.314859][T14320] netlink: 'syz.1.2387': attribute type 3 has an invalid length.
[  360.366752][T14320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2387'.
[  360.546603][T14332] netlink: 'syz.2.2391': attribute type 1 has an invalid length.
[  360.666730][T14332] 8021q: adding VLAN 0 to HW filter on device bond4
[  360.711379][T14330] bond4: (slave veth7): Enslaving as an active interface with a down link
[  361.699557][T14368] netlink: 'syz.3.2401': attribute type 1 has an invalid length.
[  361.738239][T14368] 8021q: adding VLAN 0 to HW filter on device bond4
[  361.791376][T14368] bond4: (slave veth5): Enslaving as an active interface with a down link
[  361.863245][T14371] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  362.016609][T14391] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2406'.
[  362.037624][T14391] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  362.044636][T14392] atomic_op ffff88807cbf4198 conn xmit_atomic 0000000000000000
[  362.053791][T14391] netlink: 'syz.1.2406': attribute type 21 has an invalid length.
[  362.061699][T14391] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2406'.
[  362.280311][ T3493] syzkaller0: tun_net_xmit 76
[  362.285630][ T3493] syzkaller0: tun_net_xmit 48
[  362.302462][T14008] syzkaller0: tun_net_xmit 76
[  362.328530][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2414'.
[  362.352983][T14413] xt_hashlimit: size too large, truncated to 1048576
[  362.359932][T14008] syzkaller0: tun_net_xmit 76
[  362.393497][T14398] syzkaller0: tun_chr_ioctl cmd 1074025677
[  362.419897][T14398] syzkaller0: Linktype set failed because interface is up
[  362.631518][T14428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.847741][T14452] syzkaller0: entered promiscuous mode
[  362.913111][T14452] syzkaller0: entered allmulticast mode
[  363.036249][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'.
[  363.048869][T14468] openvswitch: netlink: Unknown nsh attribute 0
[  363.261162][T14476] netlink: 'syz.3.2424': attribute type 1 has an invalid length.
[  363.269700][T14476] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2424'.
[  364.567401][T14484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.586111][T14484] syzkaller0: entered promiscuous mode
[  364.602970][T14484] syzkaller0: entered allmulticast mode
[  364.624275][T14479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.634869][T14479] syzkaller0: entered promiscuous mode
[  364.640519][T14486] syz.0.2428 uses old SIOCAX25GETINFO
[  364.647754][T14479] syzkaller0: entered allmulticast mode
[  364.701643][T14478] tipc: Resetting bearer <eth:syzkaller0>
[  364.744118][T14478] tipc: Disabling bearer <eth:syzkaller0>
[  364.774534][T14484] tipc: Resetting bearer <eth:syzkaller0>
[  364.785517][T14493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2432'.
[  364.859599][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'.
[  364.880313][T14483] tipc: Resetting bearer <eth:syzkaller0>
[  364.922554][T14483] tipc: Disabling bearer <eth:syzkaller0>
[  364.931402][T14501] netlink: 'syz.1.2434': attribute type 10 has an invalid length.
[  364.952965][T14501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2434'.
[  365.174372][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2439'.
[  365.616635][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2449'.
[  366.048829][T14567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.089496][T14567] xt_addrtype: ipv6 does not support BROADCAST matching
[  366.097678][T14569] netlink: 'syz.3.2456': attribute type 4 has an invalid length.
[  366.133128][T14569] netlink: 'syz.3.2456': attribute type 4 has an invalid length.
[  366.304775][T14586] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[  366.480325][T14567] tipc: Disabling bearer <eth:syzkaller0>
[  367.019010][T14638] bond9: option arp_all_targets: invalid value (18446744073709551613)
[  367.069956][T14638] bond9 (unregistering): Released all slaves
[  367.181126][T14644] veth1_vlan: left promiscuous mode
[  367.259294][T14644] netlink: 'syz.4.2471': attribute type 2 has an invalid length.
[  367.336392][T14657] IPv6: NLM_F_CREATE should be specified when creating new route
[  367.451582][T14662] __nla_validate_parse: 3 callbacks suppressed
[  367.451602][T14662] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2477'.
[  367.456320][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'.
[  367.639911][T14669] netlink: 'syz.0.2478': attribute type 1 has an invalid length.
[  367.649591][T14669] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2478'.
[  367.661845][T14669] netlink: 'syz.0.2478': attribute type 1 has an invalid length.
[  367.682734][T14669] ieee802154 phy1 wpan1: encryption failed: -22
[  367.996818][T14693] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2487'.
[  368.006423][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'.
[  368.203556][T14704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.327535][T14720] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  368.331619][T14704] syzkaller0: entered promiscuous mode
[  368.349390][T14704] syzkaller0: entered allmulticast mode
[  368.357404][T14704] tipc: Resetting bearer <eth:syzkaller0>
[  368.364101][T14712] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  368.724129][ T3493] tipc: Resetting bearer <eth:syzkaller0>
[  368.941937][T14752] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2504'.
[  369.014627][T14703] tipc: Resetting bearer <eth:syzkaller0>
[  369.085955][T14758] openvswitch: netlink: nsh attribute has 996 unknown bytes.
[  369.093678][T14758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.571973][T14703] tipc: Disabling bearer <eth:syzkaller0>
[  370.583285][T14757] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2
[  370.612999][T14770] batadv_slave_0: Caught tx_queue_len zero misconfig
[  370.616311][T14757] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter
[  370.673167][T14713] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  370.710901][T14776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.735833][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'.
[  370.740749][T14776] syzkaller0: mtu less than device minimum
[  370.766090][T14778] chnl_net:caif_netlink_parms(): no params data found
[  370.966368][T14796] xt_TPROXY: Can be used only with -p tcp or -p udp
[  371.013439][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'.
[  371.616212][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'.
[  371.625406][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2532'.
[  371.990319][T14858] xt_l2tp: missing protocol rule (udp|l2tpip)
[  372.226689][T14874] vlan1: entered allmulticast mode
[  372.231872][T14874] erspan0: entered allmulticast mode
[  372.727638][T14906] __nla_validate_parse: 4 callbacks suppressed
[  372.727657][T14906] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2551'.
[  372.756380][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'.
[  372.778061][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'.
[  372.792068][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'.
[  372.961914][T14918] netlink: 'syz.0.2556': attribute type 2 has an invalid length.
[  373.051015][T14924] xt_l2tp: missing protocol rule (udp|l2tpip)
[  373.068079][T14919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.086478][T14919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.098886][T14924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2555'.
[  373.184156][T14930] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2559'.
[  373.296749][T14919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.308124][T14919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.435515][T14940] veth9: entered allmulticast mode
[  373.530435][T14919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.559392][T14919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.578979][T14948] tunl0: Caught tx_queue_len zero misconfig
[  373.619525][T14947] tipc: New replicast peer: 255.255.255.255
[  373.654276][T14947] tipc: Enabled bearer <udp:syz0>, priority 10
[  374.025797][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'.
[  374.091772][T14972] netlink: 'syz.4.2575': attribute type 2 has an invalid length.
[  374.357744][  T154] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.372484][  T154] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.429885][   T37] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.440077][   T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.487877][  T154] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.508765][  T154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.535051][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'.
[  374.566816][  T154] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.577778][  T154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.608264][T14977] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2576'.
[  374.643851][T14985] ipt_rpfilter: unknown options
[  374.905933][T14998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.055891][T15014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2589'.
[  375.188030][T15019] ªªªªªªZ7nz>RAÌ: Caught tx_queue_len zero misconfig
[  375.241289][T15023] 8021q: VLANs not supported on vcan0
[  375.330408][T15025] netlink: 'syz.3.2593': attribute type 10 has an invalid length.
[  375.373781][T15030] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  375.431742][T15027] syzkaller1: entered promiscuous mode
[  375.445367][T15027] syzkaller1: entered allmulticast mode
[  375.488286][T15031] 8021q: VLANs not supported on ip6_vti0
[  375.937591][T15059] netlink: 'syz.4.2604': attribute type 13 has an invalid length.
[  376.225522][T15059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.576453][T15081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.587976][T15081] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  377.088426][T15115] netlink: 'syz.4.2622': attribute type 3 has an invalid length.
[  377.244948][T15123] lo: entered promiscuous mode
[  377.274205][T15123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.452475][ T5843] Bluetooth: hci0: command tx timeout
[  377.533116][T15133] syzkaller0: entered promiscuous mode
[  377.538865][T15133] syzkaller0: entered allmulticast mode
[  377.565219][T15141] netlink: 'syz.3.2632': attribute type 11 has an invalid length.
[  377.836511][T15154] __nla_validate_parse: 13 callbacks suppressed
[  377.836535][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2634'.
[  377.854543][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'.
[  379.536488][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2639'.
[  379.639255][T15188] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2638'.
[  379.685567][T15183] bond6 (unregistering): Released all slaves
[  379.790636][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2641'.
[  379.863604][T15194] netlink: 'syz.1.2641': attribute type 1 has an invalid length.
[  380.106194][T15212] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  380.332781][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'.
[  380.438837][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'.
[  380.462428][T15239] netlink: 'syz.2.2656': attribute type 11 has an invalid length.
[  380.470444][T15242] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2653'.
[  380.481685][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'.
[  380.502099][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'.
[  380.543157][T15239] netlink: 'syz.2.2656': attribute type 11 has an invalid length.
[  380.829089][T15266] netlink: 'syz.2.2662': attribute type 1 has an invalid length.
[  381.006252][T15278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.017557][T15278] syzkaller0: entered promiscuous mode
[  381.023240][T15278] syzkaller0: entered allmulticast mode
[  381.058311][T15278] tipc: Resetting bearer <eth:syzkaller0>
[  381.076309][T15277] tipc: Resetting bearer <eth:syzkaller0>
[  381.139260][T15277] tipc: Disabling bearer <eth:syzkaller0>
[  381.170889][T15283] geneve2: entered promiscuous mode
[  381.176452][T15283] geneve2: entered allmulticast mode
[  381.510674][T15305] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  381.519824][T15305] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  382.053971][T15338] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004
[  382.184612][ T5843] Bluetooth: hci0: command tx timeout
[  383.278254][T15419] __nla_validate_parse: 3 callbacks suppressed
[  383.278274][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2702'.
[  383.489316][T15423] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2
[  383.525168][T15423] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€
[  383.590602][T15435] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2706'.
[  383.616528][T15436] IPv6: sit3: Disabled Multicast RS
[  383.639599][T15436] sit3: entered allmulticast mode
[  383.730811][T15438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'.
[  383.941888][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  384.255545][T15460] bridge5: entered promiscuous mode
[  384.260854][T15460] bridge5: entered allmulticast mode
[  384.286005][T15460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.346341][T15460] syzkaller0: entered promiscuous mode
[  384.353995][T15460] syzkaller0: entered allmulticast mode
[  384.366907][T15463] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  384.436625][T15460] tipc: Resetting bearer <eth:syzkaller0>
[  384.478284][T15459] tipc: Resetting bearer <eth:syzkaller0>
[  384.581966][T15484] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2721'.
[  385.831910][T15459] tipc: Disabling bearer <eth:syzkaller0>
[  385.858228][T15488] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2718'.
[  385.895274][T15488] A link change request failed with some changes committed already. Interface ªªªªªªZ7nz>RAÌ may have been left with an inconsistent configuration, please check.
[  385.991529][T15497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2725'.
[  386.067489][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'.
[  386.093061][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'.
[  386.169846][T15508] af_packet: tpacket_rcv: packet too big, clamped from 4064 to 3952. macoff=96
[  386.204495][T15510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.234056][T15515] xt_hashlimit: size too large, truncated to 1048576
[  386.243450][T15516] xt_hashlimit: size too large, truncated to 1048576
[  386.292287][T15518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2732'.
[  386.307605][T15518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.625604][T15524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2733'.
[  386.743858][T15532] 8021q: adding VLAN 0 to HW filter on device bond6
[  386.782965][T15532] bond0: (slave bond6): Enslaving as an active interface with an up link
[  387.001121][T15548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  387.066718][T15555] netlink: 'syz.1.2741': attribute type 1 has an invalid length.
[  387.092697][T15557] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  387.231936][T15563] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  387.270946][T15563] netlink: 'syz.4.2744': attribute type 10 has an invalid length.
[  387.280022][T15565] gretap2: entered promiscuous mode
[  387.289298][T15565] bond7: (slave gretap2): making interface the new active one
[  387.299522][T15565] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  387.318907][T15555] bond7: entered promiscuous mode
[  387.348398][T15555] macvlan0: entered promiscuous mode
[  387.360850][T15555] macvlan0: entered allmulticast mode
[  387.369894][T15555] bond7: entered allmulticast mode
[  387.377212][T15555] gretap2: entered allmulticast mode
[  387.387038][T15555] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  387.396180][T15555] bond7: left promiscuous mode
[  387.534564][T15585] batadv_slave_1: entered promiscuous mode
[  387.545967][T15584] batadv_slave_1: left promiscuous mode
[  387.648517][T15596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.770946][T15604] netlink: 'syz.1.2756': attribute type 1 has an invalid length.
[  387.856797][T15604] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.078373][T15627] $Hÿ: renamed from bond0 (while UP)
[  388.107002][T15627] $Hÿ: entered promiscuous mode
[  388.117583][T15627] bond_slave_0: entered promiscuous mode
[  388.146481][T15627] bond_slave_1: entered promiscuous mode
[  388.476209][T15648] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  388.502715][T15655] __nla_validate_parse: 9 callbacks suppressed
[  388.502735][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'.
[  388.519459][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'.
[  388.561617][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2776'.
[  388.602555][T15655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2776'.
[  388.678636][T15669] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  388.703789][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'.
[  389.057911][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'.
[  389.068427][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'.
[  389.126369][T15700] syzkaller1: entered promiscuous mode
[  389.135678][T15700] syzkaller1: entered allmulticast mode
[  389.142279][ T3537] nci: nci_rx_work: unknown MT 0x6
[  389.459192][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'.
[  389.474043][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'.
[  389.595241][T15739] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2798'.
[  389.721420][T15742] 8021q: adding VLAN 0 to HW filter on device bond6
[  389.730302][T15742] bond0: (slave bond6): Enslaving as an active interface with a down link
[  389.743243][T15742] xt_bpf: check failed: parse error
[  389.836945][T15708] netlink: 'syz.0.2790': attribute type 1 has an invalid length.
[  390.125139][T15757] netlink: 'syz.1.2805': attribute type 12 has an invalid length.
[  390.218848][T15761] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  391.020316][T15811] tipc: Enabled bearer <eth:ip6tnl0>, priority 10
[  392.016845][T14016] tipc: Node number set to 2415791066
[  393.706887][T15852] netlink: 'syz.0.2835': attribute type 2 has an invalid length.
[  393.725526][T15852] __nla_validate_parse: 11 callbacks suppressed
[  393.725547][T15852] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2835'.
[  393.749778][T15854] pimreg3: entered allmulticast mode
[  394.079406][T15867] netlink: 'syz.4.2837': attribute type 16 has an invalid length.
[  394.115826][T15867] netlink: 'syz.4.2837': attribute type 17 has an invalid length.
[  394.384764][T15867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.535785][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2842'.
[  394.730213][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2844'.
[  394.747660][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2842'.
[  394.815353][T15908] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2845'.
[  395.115197][T15917] bpq0: entered allmulticast mode
[  395.159577][T15919] tipc: Enabled bearer <ib:caif0>, priority 13
[  395.464261][T15944] netlink: 'syz.2.2855': attribute type 11 has an invalid length.
[  395.648397][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2861'.
[  395.761174][T15955] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  395.818389][T15955] bond9 (unregistering): Released all slaves
[  395.904571][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'.
[  395.914117][T15956] C: renamed from team_slave_0
[  395.924217][T15956] netlink: 'syz.1.2859': attribute type 1 has an invalid length.
[  395.952944][T15956] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  396.180480][T15982] netlink: 'syz.4.2871': attribute type 13 has an invalid length.
[  396.191101][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2871'.
[  396.360615][T16007] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  397.104181][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'.
[  397.166209][T16038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.816248][T16054] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  462.860976][T16063] rdma_op ffff88802fa349f0 conn xmit_rdma 0000000000000000
[  462.869270][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'.
[  463.042215][T16059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2890'.
[  463.441597][T16097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2899'.
[  463.464718][T16095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2898'.
[  463.650105][T16111] netlink: 'syz.1.2903': attribute type 21 has an invalid length.
[  463.690011][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'.
[  463.788799][T16123] netlink: 'syz.4.2907': attribute type 2 has an invalid length.
[  463.980837][T16126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.052999][T16126] syzkaller0: entered promiscuous mode
[  464.065832][T16126] syzkaller0: entered allmulticast mode
[  464.073336][T16126] tipc: Resetting bearer <eth:syzkaller0>
[  464.155350][ T2142] tipc: Resetting bearer <eth:syzkaller0>
[  464.172659][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[  464.181591][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'.
[  464.191129][T16125] tipc: Resetting bearer <eth:syzkaller0>
[  465.353478][T16125] tipc: Disabling bearer <eth:syzkaller0>
[  465.404195][T14016] tipc: Node number set to 784071549
[  465.558271][T16150] netlink: 'syz.4.2915': attribute type 4 has an invalid length.
[  465.612609][T16150] netlink: 'syz.4.2915': attribute type 4 has an invalid length.
[  465.629627][T16156] veth7: entered allmulticast mode
[  465.872030][T16178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2921'.
[  466.511238][T16150] vlan0: left allmulticast mode
[  466.517344][T16150] veth0_vlan: left allmulticast mode
[  466.523190][T16150] vlan0: left promiscuous mode
[  466.610238][ T3493] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  466.650105][ T3493] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.672247][ T3493] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  466.683465][ T3493] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.692480][ T3493] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  466.752333][ T3493] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.802887][ T3493] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  466.811839][ T3493] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  466.942495][T16209] Cannot find del_set index 49151 as target
[  467.408608][T16208] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  467.431158][T16208] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  467.547968][T16208] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  467.570233][T16208] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  467.627864][T16208] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  467.642681][T16208] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  467.683466][T16208] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  467.720904][T16208] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  467.772011][ T2142] syzkaller0: tun_net_xmit 76
[  467.779081][ T2142] syzkaller0: tun_net_xmit 48
[  467.792511][T16168] syzkaller0: tun_net_xmit 76
[  467.823611][T16168] syzkaller0: tun_net_xmit 76
[  467.840167][T16227] syzkaller0: tun_chr_ioctl cmd 1074025677
[  467.849040][T16227] syzkaller0: Linktype set failed because interface is up
[  467.863410][T16168] syzkaller0: tun_net_xmit 76
[  467.925807][T16227] xt_hashlimit: size too large, truncated to 1048576
[  468.152498][T16168] syzkaller0: tun_net_xmit 76
[  468.196063][T16241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.457259][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  468.457739][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2938'.
[  468.467696][T16246] syzkaller0: entered promiscuous mode
[  468.481293][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  468.490924][T16246] syzkaller0: entered allmulticast mode
[  468.498940][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  468.573310][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  468.583764][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  468.611506][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  468.621261][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  468.647129][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  468.666610][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  468.682712][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  468.742632][T16168] syzkaller0: tun_net_xmit 76
[  468.784916][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2941'.
[  470.733062][ T5843] Bluetooth: hci3: command tx timeout
[  471.309714][T16250] wlan0 speed is unknown, defaulting to 1000
[  471.321682][T16276] syzkaller0: entered promiscuous mode
[  471.327440][T16276] syzkaller0: entered allmulticast mode
[  471.348188][T16250] wg2 speed is unknown, defaulting to 1000
[  471.354370][T16276] netlink: 212352 bytes leftover after parsing attributes in process `syz.4.2945'.
[  471.549579][T16292] netlink: 'syz.2.2946': attribute type 1 has an invalid length.
[  471.643003][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2949'.
[  471.676539][T16286] wlan0 speed is unknown, defaulting to 1000
[  471.703663][T16286] wg2 speed is unknown, defaulting to 1000
[  471.831069][T16308] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2949'.
[  471.951686][T16316] netlink: 'syz.2.2952': attribute type 23 has an invalid length.
[  471.991889][T16313] syz_tun: entered allmulticast mode
[  472.101602][T16314] syz_tun: left allmulticast mode
[  472.124797][T16250] chnl_net:caif_netlink_parms(): no params data found
[  472.141373][T16316] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2952'.
[  472.335456][T16250] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.361593][T16250] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.383009][T16250] bridge_slave_0: entered allmulticast mode
[  472.390995][T16250] bridge_slave_0: entered promiscuous mode
[  472.419769][T16250] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.437907][T16250] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.454181][T16250] bridge_slave_1: entered allmulticast mode
[  472.476947][T16250] bridge_slave_1: entered promiscuous mode
[  472.676615][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.730249][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.756907][T16348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.812477][ T5843] Bluetooth: hci3: command tx timeout
[  472.824125][T16355] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  472.865368][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2967'.
[  472.873262][T16348] syzkaller0: entered promiscuous mode
[  472.879977][T16348] syzkaller0: entered allmulticast mode
[  472.886739][T16348] tipc: Resetting bearer <eth:syzkaller0>
[  472.938203][T16347] tipc: Resetting bearer <eth:syzkaller0>
[  473.161637][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2969'.
[  474.296417][T16347] tipc: Disabling bearer <eth:syzkaller0>
[  474.357355][T16371] bond9: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  474.370078][T16372] team_slave_1: Caught tx_queue_len zero misconfig
[  474.406600][T16392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.416328][T16250] team0: Port device team_slave_0 added
[  474.436502][T16250] team0: Port device team_slave_1 added
[  474.495998][T16392] tipc: Disabling bearer <eth:syzkaller0>
[  474.668195][T16402] 8021q: adding VLAN 0 to HW filter on device bond10
[  474.679350][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.687228][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.714861][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.728073][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.735361][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.762693][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.891693][T16250] hsr_slave_0: entered promiscuous mode
[  474.897924][ T5843] Bluetooth: hci3: command tx timeout
[  474.960916][T16250] hsr_slave_1: entered promiscuous mode
[  474.968904][T16250] debugfs: 'hsr0' already exists in 'hsr'
[  474.982219][T16250] Cannot create hsr debugfs directory
[  475.213700][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'.
[  475.371226][T16429] chnl_net:caif_netlink_parms(): no params data found
[  475.629748][T16250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.668209][T16250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.729246][T16439] netlink: 'syz.4.2989': attribute type 11 has an invalid length.
[  475.825855][T16250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.842639][T16250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.959974][T16250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.997778][T16250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.179813][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'.
[  476.189326][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'.
[  476.327154][T16479] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3000'.
[  476.375679][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'.
[  476.402482][T16481] x_tables: ip_tables: icmp match: only valid for protocol 1
[  476.437780][T16250] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  476.468967][T16250] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  476.476982][T16483] sctp: [Deprecated]: syz.0.3003 (pid 16483) Use of int in maxseg socket option.
[  476.476982][T16483] Use struct sctp_assoc_value instead
[  476.481319][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'.
[  476.516808][T16250] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  476.539906][T16250] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  476.761643][T16250] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.809857][T16250] 8021q: adding VLAN 0 to HW filter on device team0
[  476.831059][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.838350][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.866031][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.873278][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.972650][ T5152] Bluetooth: hci3: command tx timeout
[  477.129382][T16518] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3010'.
[  477.346310][T16250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.435078][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'.
[  477.759383][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3013'.
[  479.004190][T16528] syzkaller0: entered promiscuous mode
[  479.009732][T16528] syzkaller0: entered allmulticast mode
[  479.161600][T16250] veth0_vlan: entered promiscuous mode
[  479.201252][T16250] veth1_vlan: entered promiscuous mode
[  479.259766][T16556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.273124][T16556] syzkaller0: entered promiscuous mode
[  479.278668][T16556] syzkaller0: entered allmulticast mode
[  479.329429][T16556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3018'.
[  479.376026][T16569] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  479.396383][T16556] tipc: Resetting bearer <eth:syzkaller0>
[  479.436468][T16562] bond0: entered allmulticast mode
[  479.442604][T16562] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.450250][T16562] bridge0: port 3(bond0) entered blocking state
[  479.456902][T16562] bridge0: port 3(bond0) entered disabled state
[  479.466543][T16562] bond0: entered promiscuous mode
[  479.472675][T16562] bridge0: port 3(bond0) entered blocking state
[  479.479117][T16562] bridge0: port 3(bond0) entered forwarding state
[  479.496438][ T3493] bridge0: port 3(bond0) entered disabled state
[  479.506615][T16250] veth0_macvtap: entered promiscuous mode
[  479.515943][T16554] tipc: Resetting bearer <eth:syzkaller0>
[  479.544819][T16554] tipc: Disabling bearer <eth:syzkaller0>
[  479.564923][T16570] geneve3: entered promiscuous mode
[  479.570289][T16570] geneve3: entered allmulticast mode
[  479.591221][T16250] veth1_macvtap: entered promiscuous mode
[  479.601040][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.613391][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.635321][T16577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.766640][T16573] syzkaller0: entered promiscuous mode
[  479.772838][T16573] syzkaller0: entered allmulticast mode
[  479.779327][T16573] tipc: Resetting bearer <eth:syzkaller0>
[  479.788388][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.798384][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.828391][T16250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.839276][T16584] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  479.875071][T16572] tipc: Resetting bearer <eth:syzkaller0>
[  481.389729][T16572] tipc: Disabling bearer <eth:syzkaller0>
[  481.403502][T16250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.411005][T16591] __nla_validate_parse: 5 callbacks suppressed
[  481.411023][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'.
[  481.521522][ T2972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.564445][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'.
[  481.588552][ T2972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.599161][T16608] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3033'.
[  481.608533][ T2972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.608581][ T2972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.691073][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'.
[  481.738574][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'.
[  481.840566][T16619] netlink: 'syz.2.3037': attribute type 1 has an invalid length.
[  481.854710][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.866762][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.890333][T16621] xt_l2tp: invalid flags combination: 0
[  481.909413][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3038'.
[  481.928939][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.943361][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.996814][T16623] nbd0: detected capacity change from 0 to 127
[  482.098454][T16623] bond9: entered promiscuous mode
[  482.139263][T16623] bond9: entered allmulticast mode
[  482.161951][T16623] 8021q: adding VLAN 0 to HW filter on device bond9
[  482.363549][ T5843] block nbd0: Receive control failed (result -32)
[  482.501297][T16658] Cannot find add_set index 1 as target
[  482.771414][T16677] sctp: [Deprecated]: syz.0.3051 (pid 16677) Use of struct sctp_assoc_value in delayed_ack socket option.
[  482.771414][T16677] Use struct sctp_sack_info instead
[  483.128879][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  483.140285][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  483.149062][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  483.172476][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  483.185147][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  483.451655][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.549177][T16690] wlan0 speed is unknown, defaulting to 1000
[  483.586259][T16690] wg2 speed is unknown, defaulting to 1000
[  483.628796][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.820140][ T2972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.899199][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'.
[  484.360829][ T2972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.569313][T16741] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3066'.
[  484.733080][T16737] syzkaller0: entered promiscuous mode
[  484.738638][T16737] syzkaller0: entered allmulticast mode
[  484.747797][T16741] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  485.078042][T16690] chnl_net:caif_netlink_parms(): no params data found
[  485.100889][T16763] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  485.113479][T16760] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  485.121377][T16760] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3071'.
[  485.293674][ T5843] Bluetooth: hci5: command tx timeout
[  485.780554][ T2972] bond7 (unregistering): (slave gretap1): Releasing active interface
[  486.175595][ T2972] bond0 (unregistering): Released all slaves
[  486.191498][ T2972] bond1 (unregistering): Released all slaves
[  486.286322][ T2972] bond2 (unregistering): Released all slaves
[  486.301833][ T2972] bond3 (unregistering): Released all slaves
[  486.316793][ T2972] bond4 (unregistering): Released all slaves
[  486.414575][ T2972] bond5 (unregistering): Released all slaves
[  486.507435][ T2972] bond6 (unregistering): Released all slaves
[  486.521986][ T2972] bond7 (unregistering): Released all slaves
[  486.611687][ T2972] bond8 (unregistering): Released all slaves
[  486.626354][ T2972] bond9 (unregistering): Released all slaves
[  486.720081][ T2972] bond10 (unregistering): Released all slaves
[  486.751814][T16787] tipc: Started in network mode
[  486.757197][T16787] tipc: Node identity 5aa2628cc7ab, cluster identity 4711
[  486.764598][T16787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.892766][T16787] tipc: Disabling bearer <eth:syzkaller0>
[  486.947560][T16690] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.956558][T16690] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.968494][T16690] bridge_slave_0: entered allmulticast mode
[  486.984831][T16690] bridge_slave_0: entered promiscuous mode
[  487.003054][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'.
[  487.013097][ T2972] tipc: Disabling bearer <udp:s>
[  487.025100][ T2972] tipc: Disabling bearer <udp:syz2>
[  487.039359][ T2972] tipc: Disabling bearer <ib:caif0>
[  487.077334][ T2972] tipc: Left network mode
[  487.093845][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'.
[  487.135337][T16690] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.143981][T16690] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.153629][T16690] bridge_slave_1: entered allmulticast mode
[  487.161401][T16690] bridge_slave_1: entered promiscuous mode
[  487.169179][T16813] bridge_slave_1: left allmulticast mode
[  487.176311][T16813] bridge_slave_1: left promiscuous mode
[  487.192787][T16813] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.225094][T16813] bridge_slave_0: left allmulticast mode
[  487.230826][T16813] bridge_slave_0: left promiscuous mode
[  487.244012][T16813] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.375029][ T5843] Bluetooth: hci5: command tx timeout
[  487.582415][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.597225][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.660728][T16842] netlink: 'syz.2.3092': attribute type 1 has an invalid length.
[  487.670595][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3092'.
[  487.796825][T16842] vxcan1 speed is unknown, defaulting to 1000
[  487.835594][T16690] team0: Port device team_slave_0 added
[  487.845716][T16690] team0: Port device team_slave_1 added
[  487.856195][T16842] vxcan1 speed is unknown, defaulting to 1000
[  487.895394][ T2972] hsr_slave_0: left promiscuous mode
[  487.925773][ T2972] pimreg3 (unregistering): left allmulticast mode
[  487.934759][T16853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3096'.
[  487.948302][T16853] netlink: 'syz.3.3096': attribute type 1 has an invalid length.
[  487.956604][T16853] netlink: 'syz.3.3096': attribute type 2 has an invalid length.
[  488.020351][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'.
[  488.111648][T16855] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3097'.
[  488.174182][T16864] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3097'.
[  489.030977][ T2972] ªªªªªªZ7nz>RAÌ (unregistering): left allmulticast mode
[  489.061274][T16842] vxcan1 speed is unknown, defaulting to 1000
[  489.087234][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.115826][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.212388][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.241257][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.258605][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.321094][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.442651][T16884] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3100'.
[  489.452314][ T5843] Bluetooth: hci5: command tx timeout
[  489.461556][T16872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3100'.
[  489.629801][T16690] hsr_slave_0: entered promiscuous mode
[  489.659725][T16690] hsr_slave_1: entered promiscuous mode
[  489.676813][T16690] debugfs: 'hsr0' already exists in 'hsr'
[  489.696205][T16690] Cannot create hsr debugfs directory
[  489.711505][T16893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  489.729115][T16842] infiniband syz2: set active
[  489.744388][T16842] infiniband syz2: added vxcan1
[  489.760757][T16842] syz2: rxe_create_cq: returned err = -12
[  489.780099][T16842] infiniband syz2: Couldn't create ib_mad CQ
[  489.789104][T16842] infiniband syz2: Couldn't open port 1
[  489.807528][T14014] vxcan1 speed is unknown, defaulting to 1000
[  489.926966][T16842] RDS/IB: syz2: added
[  489.944876][T16842] smc: adding ib device syz2 with port count 1
[  489.974327][T16842] smc:    ib device syz2 port 1 has no pnetid
[  490.028885][T14014] vxcan1 speed is unknown, defaulting to 1000
[  490.053629][T16842] vxcan1 speed is unknown, defaulting to 1000
[  490.311341][ T2972] IPVS: stop unused estimator thread 0...
[  490.767695][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'.
[  490.964903][T16842] vxcan1 speed is unknown, defaulting to 1000
[  491.337408][T16690] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  491.358688][T16690] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  491.416440][T16690] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  491.480457][T16690] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  491.532795][ T5843] Bluetooth: hci5: command tx timeout
[  491.570993][T16949] netlink: 'syz.0.3116': attribute type 19 has an invalid length.
[  491.600117][T16842] vxcan1 speed is unknown, defaulting to 1000
[  491.735455][T16954] bond_slave_0: Caught tx_queue_len zero misconfig
[  491.761336][T16956] netlink: 'syz.1.3119': attribute type 11 has an invalid length.
[  491.912000][T16690] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.981649][T16690] 8021q: adding VLAN 0 to HW filter on device team0
[  492.077245][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.084515][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.111217][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.118473][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.212064][T16842] vxcan1 speed is unknown, defaulting to 1000
[  492.434439][T16987] __nla_validate_parse: 5 callbacks suppressed
[  492.434460][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'.
[  492.480143][T16987] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  492.627601][T16995] netlink: 'syz.1.3128': attribute type 32 has an invalid length.
[  492.646176][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'.
[  492.696524][T16995] bond10: Setting coupled_control to off (0)
[  492.749331][T16842] vxcan1 speed is unknown, defaulting to 1000
[  492.777462][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.924618][T17001] syzkaller0: entered promiscuous mode
[  492.930258][T17001] syzkaller0: entered allmulticast mode
[  492.993989][T17001] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3129'.
[  493.197361][T17015] !
: renamed from dummy0 (while UP)
[  493.367451][T16690] veth0_vlan: entered promiscuous mode
[  493.379841][T16842] vxcan1 speed is unknown, defaulting to 1000
[  493.407773][T16690] veth1_vlan: entered promiscuous mode
[  493.495101][T16690] veth0_macvtap: entered promiscuous mode
[  493.517303][T16690] veth1_macvtap: entered promiscuous mode
[  493.585788][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.625062][T17027] bpq0: left allmulticast mode
[  493.658294][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.725532][  T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.761730][  T154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.790129][  T154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.816963][  T154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.005487][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.021693][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.056243][T17043] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3140'.
[  494.106955][T17048] netlink: 'syz.0.3141': attribute type 4 has an invalid length.
[  494.124799][T17043] bond6 (unregistering): Released all slaves
[  494.166332][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.178198][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.280208][T17055] netlink: 'syz.0.3142': attribute type 4 has an invalid length.
[  494.316961][T17055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3142'.
[  494.892854][T17072] Bluetooth: MGMT ver 1.23
[  494.954960][T17074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3150'.
[  495.015416][ T5834] syz_tun (unregistering): left allmulticast mode
[  495.273006][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  495.284529][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  495.308698][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  495.317862][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  495.325701][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  495.333087][T17097] netlink: 'syz.1.3159': attribute type 1 has an invalid length.
[  495.419921][ T3493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.432938][ T3493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.496989][T17097] 8021q: adding VLAN 0 to HW filter on device bond11
[  495.507358][T17099] bridge0: Caught tx_queue_len zero misconfig
[  495.515606][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3159'.
[  495.534616][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'.
[  495.627964][T17100] bond11: (slave veth9): Enslaving as an active interface with a down link
[  495.661626][T17102] veth11: entered promiscuous mode
[  495.671499][T17102] bond11: (slave veth11): Enslaving as an active interface with a down link
[  495.727209][ T3493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.738237][ T3493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.865406][ T3493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.892287][ T3493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.967693][T17114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.101765][T17114] syzkaller0: entered promiscuous mode
[  496.107641][T17114] syzkaller0: entered allmulticast mode
[  496.131273][ T3493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.144911][ T3493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.161840][T17094] wlan0 speed is unknown, defaulting to 1000
[  497.386810][ T5844] Bluetooth: hci2: command tx timeout
[  497.540915][T17140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3168'.
[  497.550107][T17094] wg2 speed is unknown, defaulting to 1000
[  497.564005][T17123] tipc: Resetting bearer <eth:syzkaller0>
[  497.644399][T17113] tipc: Resetting bearer <eth:syzkaller0>
[  497.697542][T17113] tipc: Disabling bearer <eth:syzkaller0>
[  497.732817][T17094] vxcan1 speed is unknown, defaulting to 1000
[  498.064309][ T3493] bond0: left promiscuous mode
[  498.081603][ T3493] bridge0: port 3(bond0) entered disabled state
[  498.159594][T17171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3177'.
[  498.578179][ T3493] bridge_slave_1: left allmulticast mode
[  498.592791][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.638822][ T3493] bridge_slave_0: left allmulticast mode
[  498.648916][ T3493] bridge_slave_0: left promiscuous mode
[  498.661191][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.456237][ T5844] Bluetooth: hci2: command tx timeout
[  499.641774][T17204] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3183'.
[  499.651360][T17204] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  499.720450][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'.
[  499.740282][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'.
[  499.793214][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3184'.
[  499.993147][ T3493] bond2 (unregistering): (slave gretap0): Releasing active interface
[  500.424091][ T3493] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.433181][ T3493] bond_slave_0: left promiscuous mode
[  500.441683][ T3493] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.451021][ T3493] bond_slave_1: left promiscuous mode
[  500.458202][ T3493] $Hÿ (unregistering): Released all slaves
[  500.473318][ T3493] bond1 (unregistering): Released all slaves
[  500.488636][ T3493] bond2 (unregistering): Released all slaves
[  500.587178][ T3493] bond3 (unregistering): Released all slaves
[  500.686737][ T3493] bond4 (unregistering): (slave veth7): Releasing active interface
[  500.696772][ T3493] bond4 (unregistering): Released all slaves
[  500.711075][ T3493] bond5 (unregistering): Released all slaves
[  500.804330][ T3493] bond0 (unregistering): Released all slaves
[  501.011996][ T3493] : left promiscuous mode
[  501.171247][ T3493] tipc: Left network mode
[  501.345309][T17094] chnl_net:caif_netlink_parms(): no params data found
[  501.398474][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'.
[  501.532305][ T5844] Bluetooth: hci2: command tx timeout
[  501.760900][T17254] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3193'.
[  501.851722][T17094] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.861474][T17094] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.868924][T17094] bridge_slave_0: entered allmulticast mode
[  501.878015][T17094] bridge_slave_0: entered promiscuous mode
[  501.886988][T17094] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.896850][T17094] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.904782][T17094] bridge_slave_1: entered allmulticast mode
[  501.916962][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'.
[  501.917068][T17094] bridge_slave_1: entered promiscuous mode
[  502.283162][T17277] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  502.291603][T17277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.351141][T17277] lo speed is unknown, defaulting to 1000
[  502.380451][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.440016][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.469634][T17277] lo speed is unknown, defaulting to 1000
[  502.561365][T17277] lo speed is unknown, defaulting to 1000
[  502.593603][ T3493] hsr_slave_0: left promiscuous mode
[  502.618556][ T3493] hsr_slave_1: left promiscuous mode
[  502.685109][ T3493] veth1_macvtap: left promiscuous mode
[  502.691136][ T3493] veth0_macvtap: left promiscuous mode
[  502.701699][ T3493] veth1_vlan: left promiscuous mode
[  502.707812][ T3493] veth0_vlan: left promiscuous mode
[  502.890268][T17277] infiniband s
z1: set down
[  502.895413][T17277] infiniband s
z1: added lo
[  502.981752][T17277] RDS/IB: s
z1: added
[  502.986566][T17277] smc: adding ib device s
z1 with port count 1
[  502.993266][T17277] smc:    ib device s
z1 port 1 has no pnetid
[  503.408190][ T3493] team0 (unregistering): Port device team_slave_1 removed
[  503.448208][ T3493] team0 (unregistering): Port device team_slave_0 removed
[  503.617425][ T5844] Bluetooth: hci2: command tx timeout
[  503.853342][T17094] team0: Port device team_slave_0 added
[  503.859968][T17292] syzkaller0: entered promiscuous mode
[  503.873679][T17292] syzkaller0: entered allmulticast mode
[  503.890781][T16170] vxcan1 speed is unknown, defaulting to 1000
[  503.890818][T14016] lo speed is unknown, defaulting to 1000
[  503.902531][T16170] syz2: Port: 1 Link DOWN
[  503.984965][T17094] team0: Port device team_slave_1 added
[  503.995795][T14011] lo speed is unknown, defaulting to 1000
[  503.997274][T16170] vxcan1 speed is unknown, defaulting to 1000
[  504.009353][T17277] lo speed is unknown, defaulting to 1000
[  504.096907][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.123462][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.170997][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.204461][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.211883][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.261919][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.338621][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'.
[  504.352535][T17312] netlink: 'syz.1.3207': attribute type 15 has an invalid length.
[  504.360649][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'.
[  504.401727][T17277] lo speed is unknown, defaulting to 1000
[  504.407816][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'.
[  504.425610][T17094] hsr_slave_0: entered promiscuous mode
[  504.433755][T17094] hsr_slave_1: entered promiscuous mode
[  504.440253][T17094] debugfs: 'hsr0' already exists in 'hsr'
[  504.447635][T17312] netlink: 'syz.1.3207': attribute type 15 has an invalid length.
[  504.456145][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'.
[  504.465819][T17094] Cannot create hsr debugfs directory
[  504.504710][ T1336] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  504.519073][T17315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.556056][ T1336] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  504.572731][ T1336] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  504.603673][ T1336] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  504.629999][T17317] pim6reg: entered allmulticast mode
[  504.754625][T17321] netlink: 'syz.1.3211': attribute type 11 has an invalid length.
[  504.763833][T17321] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3211'.
[  504.829303][T17321] x_tables: unsorted entry at hook 2
[  504.920833][T17277] lo speed is unknown, defaulting to 1000
[  505.213247][T17277] lo speed is unknown, defaulting to 1000
[  505.415008][T17277] lo speed is unknown, defaulting to 1000
[  505.596743][T17277] lo speed is unknown, defaulting to 1000
[  505.769530][  T154] smc: removing ib device syz2
[  506.196914][T17363] netlink: 'syz.3.3218': attribute type 1 has an invalid length.
[  506.232376][T17363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3218'.
[  506.327295][T17369] netlink: 'syz.1.3220': attribute type 1 has an invalid length.
[  506.338061][T17369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3220'.
[  506.357607][T17370] Cannot find set identified by id 1 to match
[  506.697841][T17378] netlink: 'syz.1.3223': attribute type 1 has an invalid length.
[  506.959683][T17388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3227'.
[  508.785060][T17384] lo: entered promiscuous mode
[  508.795597][T17384] tunl0: entered promiscuous mode
[  508.806356][T17384] gre0: entered promiscuous mode
[  508.833657][T17384] gretap0: entered promiscuous mode
[  508.849882][T17384] erspan0: entered promiscuous mode
[  508.863839][T17384] ip_vti0: entered promiscuous mode
[  508.867678][T17408] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3231'.
[  509.038830][   T13] syzkaller0: tun_net_xmit 76
[  509.050730][   T13] syzkaller0: tun_net_xmit 48
[  509.054014][T17410] xt_hashlimit: size too large, truncated to 1048576
[  509.076019][T16167] syzkaller0: tun_net_xmit 76
[  509.171102][T17094] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  509.211203][T17094] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  509.279853][T17416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  509.307375][T16167] lo speed is unknown, defaulting to 1000
[  509.307403][T17094] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  509.313362][T16167] s
z1: Port: 1 Link ACTIVE
[  509.333835][T16168] syzkaller0: tun_net_xmit 76
[  509.384570][T17426] bridge0: entered promiscuous mode
[  509.390081][T17426] bridge0: entered allmulticast mode
[  509.401283][T16167] lo speed is unknown, defaulting to 1000
[  509.411018][T17094] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  509.428534][ T3493] IPVS: stop unused estimator thread 0...
[  511.146058][T17455] syz_tun: entered allmulticast mode
[  511.194802][T17094] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.209272][T17457] syz_tun: left allmulticast mode
[  511.236195][T17094] 8021q: adding VLAN 0 to HW filter on device team0
[  511.259132][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.266387][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.301126][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.308388][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.353830][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'.
[  511.383317][T17463] netlink: 'syz.3.3246': attribute type 2 has an invalid length.
[  511.415116][T17461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3245'.
[  511.416530][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'.
[  511.445540][T17465] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3247'.
[  511.879027][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.951844][T17491] syzkaller0: entered promiscuous mode
[  511.970246][T17491] syzkaller0: entered allmulticast mode
[  512.048151][T17094] veth0_vlan: entered promiscuous mode
[  512.105147][T17094] veth1_vlan: entered promiscuous mode
[  512.159292][T17094] veth0_macvtap: entered promiscuous mode
[  512.184747][T17094] veth1_macvtap: entered promiscuous mode
[  512.244281][T17505] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  512.250214][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.281432][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.298879][ T3493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.309516][ T3493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.335922][ T3493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.346612][ T3493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.446376][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.460381][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.541669][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.569898][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.452029][T17530] infiniband !yz!: set active
[  513.457262][T17530] infiniband !yz!: added team_slave_0
[  513.508992][T17530] RDS/IB: !yz!: added
[  513.514657][T17530] smc: adding ib device !yz! with port count 1
[  513.535501][T17530] smc:    ib device !yz! port 1 has no pnetid
[  513.794088][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  513.803897][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  513.815586][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  513.835235][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  513.851190][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  513.981380][T17558] wlan0 speed is unknown, defaulting to 1000
[  514.005805][T17558] wg2 speed is unknown, defaulting to 1000
[  514.015900][T17558] lo speed is unknown, defaulting to 1000
[  514.225092][T17573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3281'.
[  514.241268][T17576] netlink: 'syz.3.3282': attribute type 21 has an invalid length.
[  514.253753][T17576] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3282'.
[  514.268213][T17576] netlink: 'syz.3.3282': attribute type 5 has an invalid length.
[  514.276499][T17576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3282'.
[  514.289012][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3281'.
[  514.626490][T17591] IPVS: set_ctl: invalid protocol: 92 172.30.0.2:20003
[  514.826326][T17595] xt_CT: No such helper "snmp_trap"
[  514.988905][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'.
[  515.055412][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3292'.
[  515.934665][ T5843] Bluetooth: hci1: command tx timeout
[  516.094851][T17635] bridge1: entered promiscuous mode
[  516.100141][T17635] bridge1: entered allmulticast mode
[  516.338950][T17641] syzkaller0: entered promiscuous mode
[  516.344728][T17641] syzkaller0: entered allmulticast mode
[  516.380098][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3303'.
[  516.425248][T17654] netlink: 'syz.2.3303': attribute type 11 has an invalid length.
[  518.022342][ T5843] Bluetooth: hci1: command tx timeout
[  518.185464][T17558] chnl_net:caif_netlink_parms(): no params data found
[  518.209166][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3303'.
[  518.226277][ T2142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  518.248541][ T2142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  518.262325][T17654] netlink: 'syz.2.3303': attribute type 11 has an invalid length.
[  518.271834][ T2142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  518.291633][ T2142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  518.338124][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'.
[  518.436299][T17674] netlink: 'syz.3.3309': attribute type 29 has an invalid length.
[  518.451247][T17674] netlink: 'syz.3.3309': attribute type 29 has an invalid length.
[  518.475431][T17674] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3309'.
[  518.645370][T17558] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.674941][T17558] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.707896][T17558] bridge_slave_0: entered allmulticast mode
[  518.747863][T17558] bridge_slave_0: entered promiscuous mode
[  518.779736][T17558] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.799868][T17558] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.814805][T17558] bridge_slave_1: entered allmulticast mode
[  518.847178][T17558] bridge_slave_1: entered promiscuous mode
[  518.868210][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'.
[  518.983421][T17704] SET target dimension over the limit!
[  518.997636][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'.
[  519.015396][T17558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.040030][T17558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.052924][T17705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.069809][T17705] syzkaller0: entered promiscuous mode
[  519.113238][T17705] syzkaller0: entered allmulticast mode
[  519.246666][T17558] team0: Port device team_slave_0 added
[  519.289211][T17708] tipc: Resetting bearer <eth:syzkaller0>
[  519.307347][T17558] team0: Port device team_slave_1 added
[  519.322978][T17702] tipc: Resetting bearer <eth:syzkaller0>
[  519.363394][T17702] tipc: Disabling bearer <eth:syzkaller0>
[  519.443828][T17558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.450986][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.502287][T17558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.568986][T17558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.585387][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.627136][T17558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.886880][T17558] hsr_slave_0: entered promiscuous mode
[  519.895365][T17558] hsr_slave_1: entered promiscuous mode
[  519.902015][T17558] debugfs: 'hsr0' already exists in 'hsr'
[  519.908392][T17558] Cannot create hsr debugfs directory
[  519.975641][T17759] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3333'.
[  519.995444][T17755] syzkaller0: entered promiscuous mode
[  520.001050][T17755] syzkaller0: entered allmulticast mode
[  520.092558][ T5843] Bluetooth: hci1: command tx timeout
[  520.156372][T17765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3334'.
[  520.165769][T17765] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  521.789182][T17783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3340'.
[  521.824197][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'.
[  521.848880][T17783] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3340'.
[  521.858603][T17783] netlink: 'syz.1.3340': attribute type 3 has an invalid length.
[  521.867816][T17783] netlink: 'syz.1.3340': attribute type 2 has an invalid length.
[  521.875808][T17783] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3340'.
[  521.891927][T17558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  521.906710][T17558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.146174][T17558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.167501][T17558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.181973][ T5843] Bluetooth: hci1: command tx timeout
[  522.236582][T17809] netlink: 'syz.2.3345': attribute type 1 has an invalid length.
[  522.327842][T17558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.344404][T17558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.403944][T17809] bond1 (unregistering): Released all slaves
[  522.482060][T17558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  522.498664][T17558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.799871][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3354'.
[  522.820432][T17558] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  522.874968][T17558] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  522.903023][T17558] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  522.925293][T17558] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  522.939087][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'.
[  522.979241][T17852] netlink: 'syz.1.3358': attribute type 2 has an invalid length.
[  522.983507][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3355'.
[  523.196485][T17558] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.251523][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3363'.
[  523.259302][T17558] 8021q: adding VLAN 0 to HW filter on device team0
[  523.291662][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.298919][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.345668][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.352918][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.412553][T17876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.591317][T17891] delete_channel: no stack
[  523.676700][T17558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  523.835255][T17901] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  523.864726][T17901] bond1 (unregistering): Released all slaves
[  524.122380][T17558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.205573][T14011] hid-generic 0005:0B57:0002.0001: item fetching failed at offset 0/1
[  524.217486][T17558] veth0_vlan: entered promiscuous mode
[  524.232575][T17558] veth1_vlan: entered promiscuous mode
[  524.276368][T14011] hid-generic 0005:0B57:0002.0001: probe with driver hid-generic failed with error -22
[  524.340870][T17558] veth0_macvtap: entered promiscuous mode
[  524.375266][T17558] veth1_macvtap: entered promiscuous mode
[  524.394656][T17930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3376'.
[  524.439539][T17558] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.495880][T17558] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.592003][T17937] 8021q: adding VLAN 0 to HW filter on device bond12
[  524.655280][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.682639][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.711103][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.753200][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.800176][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3381'.
[  525.037651][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.050527][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.120124][T17965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.151501][T17965] syzkaller0: entered promiscuous mode
[  525.151857][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.157696][T17965] syzkaller0: entered allmulticast mode
[  525.166683][T16170] IPVS: starting estimator thread 0...
[  525.177406][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.233626][T17965] tipc: Resetting bearer <eth:syzkaller0>
[  525.254505][T17964] tipc: Resetting bearer <eth:syzkaller0>
[  525.279316][T17964] tipc: Disabling bearer <eth:syzkaller0>
[  525.305098][T17974] IPVS: using max 27 ests per chain, 64800 per kthread
[  525.836324][T17995] 
[  525.838724][T17995] ======================================================
[  525.845867][T17995] WARNING: possible circular locking dependency detected
[  525.852933][T17995] syzkaller #0 Not tainted
[  525.857387][T17995] ------------------------------------------------------
[  525.864518][T17995] syz.3.3394/17995 is trying to acquire lock:
[  525.870628][T17995] ffff88801dae9218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50
[  525.883037][T17995] 
[  525.883037][T17995] but task is already holding lock:
[  525.890521][T17995] ffff888055960958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  525.900508][T17995] 
[  525.900508][T17995] which lock already depends on the new lock.
[  525.900508][T17995] 
[  525.910945][T17995] 
[  525.910945][T17995] the existing dependency chain (in reverse order) is:
[  525.920007][T17995] 
[  525.920007][T17995] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  525.928299][T17995]        lock_acquire+0x120/0x360
[  525.933379][T17995]        _raw_spin_lock+0x2e/0x40
[  525.938418][T17995]        sch_direct_xmit+0x153/0x4b0
[  525.943728][T17995]        __dev_queue_xmit+0x1857/0x3b50
[  525.949368][T17995]        ip6_finish_output2+0xfb3/0x1480
[  525.955018][T17995]        ip6_output+0x340/0x550
[  525.959879][T17995]        NF_HOOK+0x9e/0x380
[  525.964396][T17995]        mld_sendpack+0x8d4/0xe60
[  525.969445][T17995]        mld_ifc_work+0x83e/0xd60
[  525.974501][T17995]        process_scheduled_works+0xae1/0x17b0
[  525.980634][T17995]        worker_thread+0x8a0/0xda0
[  525.985774][T17995]        kthread+0x711/0x8a0
[  525.990531][T17995]        ret_from_fork+0x4bc/0x870
[  525.995669][T17995]        ret_from_fork_asm+0x1a/0x30
[  526.001401][T17995] 
[  526.001401][T17995] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}:
[  526.011764][T17995]        validate_chain+0xb9b/0x2140
[  526.017079][T17995]        __lock_acquire+0xab9/0xd20
[  526.022298][T17995]        lock_acquire+0x120/0x360
[  526.027428][T17995]        _raw_spin_lock+0x2e/0x40
[  526.032472][T17995]        __dev_queue_xmit+0x22b7/0x3b50
[  526.038027][T17995]        ip6_finish_output2+0xfb3/0x1480
[  526.043671][T17995]        ip6_output+0x340/0x550
[  526.048536][T17995]        ndisc_send_skb+0xbce/0x1510
[  526.053851][T17995]        ndisc_solicit+0x444/0x610
[  526.059015][T17995]        __neigh_event_send+0xf70/0x1560
[  526.064676][T17995]        neigh_resolve_output+0x198/0x750
[  526.070440][T17995]        ip6_finish_output2+0xfb3/0x1480
[  526.076089][T17995]        ip6_output+0x340/0x550
[  526.080976][T17995]        ip6_send_skb+0x1d5/0x390
[  526.086020][T17995]        icmp6_send+0x12c6/0x1940
[  526.091071][T17995]        ip6_link_failure+0x3b/0x4c0
[  526.096375][T17995]        ip_tunnel_xmit+0x175b/0x2390
[  526.101773][T17995]        __gre_xmit+0x19a/0x240
[  526.106641][T17995]        erspan_xmit+0xa04/0x1220
[  526.111688][T17995]        dev_hard_start_xmit+0x2d7/0x830
[  526.117352][T17995]        sch_direct_xmit+0x241/0x4b0
[  526.122649][T17995]        __qdisc_run+0xaa0/0x1540
[  526.127693][T17995]        __dev_queue_xmit+0x1056/0x3b50
[  526.133257][T17995]        ip6_finish_output2+0xfb3/0x1480
[  526.138908][T17995]        ip6_output+0x340/0x550
[  526.143774][T17995]        ip6_mr_output+0x4e9/0x1100
[  526.148990][T17995]        rawv6_send_hdrinc+0xe16/0x17a0
[  526.154540][T17995]        rawv6_sendmsg+0x12ee/0x1830
[  526.159827][T17995]        __sock_sendmsg+0x19c/0x270
[  526.165033][T17995]        ____sys_sendmsg+0x505/0x830
[  526.170324][T17995]        ___sys_sendmsg+0x21f/0x2a0
[  526.175526][T17995]        __x64_sys_sendmsg+0x19b/0x260
[  526.181013][T17995]        do_syscall_64+0xfa/0xfa0
[  526.186053][T17995]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.192470][T17995] 
[  526.192470][T17995] other info that might help us debug this:
[  526.192470][T17995] 
[  526.202703][T17995]  Possible unsafe locking scenario:
[  526.202703][T17995] 
[  526.210152][T17995]        CPU0                    CPU1
[  526.215569][T17995]        ----                    ----
[  526.220960][T17995]   lock(&qdisc_xmit_lock_key#4);
[  526.226358][T17995]                                lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  526.236005][T17995]                                lock(&qdisc_xmit_lock_key#4);
[  526.243566][T17995]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  526.250695][T17995] 
[  526.250695][T17995]  *** DEADLOCK ***
[  526.250695][T17995] 
[  526.258839][T17995] 12 locks held by syz.3.3394/17995:
[  526.264135][T17995]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0
[  526.273915][T17995]  #1: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100
[  526.283428][T17995]  #2: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  526.292521][T17995]  #3: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  526.302486][T17995]  #4: ffff888055960958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  526.312888][T17995]  #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940
[  526.322043][T17995]  #6: ffff88802eec8a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940
[  526.331921][T17995]  #7: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390
[  526.341176][T17995]  #8: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  526.350338][T17995]  #9: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510
[  526.359876][T17995]  #10: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  526.369056][T17995]  #11: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  526.379101][T17995] 
[  526.379101][T17995] stack backtrace:
[  526.385031][T17995] CPU: 1 UID: 0 PID: 17995 Comm: syz.3.3394 Not tainted syzkaller #0 PREEMPT(full) 
[  526.385054][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  526.385071][T17995] Call Trace:
[  526.385080][T17995]  <TASK>
[  526.385089][T17995]  dump_stack_lvl+0x189/0x250
[  526.385117][T17995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  526.385139][T17995]  ? __pfx__printk+0x10/0x10
[  526.385157][T17995]  ? print_lock_name+0xde/0x100
[  526.385174][T17995]  print_circular_bug+0x2ee/0x310
[  526.385197][T17995]  check_noncircular+0x134/0x160
[  526.385219][T17995]  validate_chain+0xb9b/0x2140
[  526.385248][T17995]  __lock_acquire+0xab9/0xd20
[  526.385265][T17995]  ? __dev_queue_xmit+0x22b7/0x3b50
[  526.385284][T17995]  lock_acquire+0x120/0x360
[  526.385298][T17995]  ? __dev_queue_xmit+0x22b7/0x3b50
[  526.385318][T17995]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  526.385339][T17995]  ? check_noncircular+0xe0/0x160
[  526.385360][T17995]  _raw_spin_lock+0x2e/0x40
[  526.385380][T17995]  ? __dev_queue_xmit+0x22b7/0x3b50
[  526.385398][T17995]  __dev_queue_xmit+0x22b7/0x3b50
[  526.385422][T17995]  ? __dev_queue_xmit+0x27b/0x3b50
[  526.385444][T17995]  ? neigh_resolve_output+0x438/0x750
[  526.385469][T17995]  ? __pfx___dev_queue_xmit+0x10/0x10
[  526.385487][T17995]  ? read_seqbegin+0x122/0x250
[  526.385509][T17995]  ? neigh_resolve_output+0x438/0x750
[  526.385532][T17995]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.385556][T17995]  ? read_seqbegin+0x1ac/0x250
[  526.385578][T17995]  ? __pfx_read_seqbegin+0x10/0x10
[  526.385600][T17995]  ? __local_bh_enable_ip+0x12d/0x1c0
[  526.385617][T17995]  ? eth_header+0x11b/0x200
[  526.385634][T17995]  ? __asan_memcpy+0x40/0x70
[  526.385666][T17995]  ip6_finish_output2+0xfb3/0x1480
[  526.385697][T17995]  ? __pfx_ip6_finish_output2+0x10/0x10
[  526.385723][T17995]  ? ip6_mtu+0x7d/0x490
[  526.385749][T17995]  ? ip6_mtu+0x38c/0x490
[  526.385770][T17995]  ? ip6_finish_output+0x2ef/0x4e0
[  526.385792][T17995]  ? ip6_output+0x126/0x550
[  526.385813][T17995]  ip6_output+0x340/0x550
[  526.385836][T17995]  ndisc_send_skb+0xbce/0x1510
[  526.385855][T17995]  ? ndisc_send_skb+0x1e4/0x1510
[  526.385875][T17995]  ? __pfx_ndisc_send_skb+0x10/0x10
[  526.385893][T17995]  ? __pfx_dst_output+0x10/0x10
[  526.385919][T17995]  ndisc_solicit+0x444/0x610
[  526.385940][T17995]  ? __pfx_ndisc_solicit+0x10/0x10
[  526.385962][T17995]  ? __neigh_event_send+0xf08/0x1560
[  526.385987][T17995]  ? __pfx_ndisc_solicit+0x10/0x10
[  526.386005][T17995]  __neigh_event_send+0xf70/0x1560
[  526.386031][T17995]  ? ___neigh_create+0x1c83/0x2260
[  526.386055][T17995]  neigh_resolve_output+0x198/0x750
[  526.386085][T17995]  ip6_finish_output2+0xfb3/0x1480
[  526.386114][T17995]  ? __pfx_ip6_finish_output2+0x10/0x10
[  526.386140][T17995]  ? ip6_mtu+0x7d/0x490
[  526.386159][T17995]  ? ip6_mtu+0x38c/0x490
[  526.386181][T17995]  ? ip6_finish_output+0x2ef/0x4e0
[  526.386202][T17995]  ? ip6_output+0x126/0x550
[  526.386223][T17995]  ip6_output+0x340/0x550
[  526.386244][T17995]  ? ip6_send_skb+0x10f/0x390
[  526.386267][T17995]  ip6_send_skb+0x1d5/0x390
[  526.386292][T17995]  icmp6_send+0x12c6/0x1940
[  526.386309][T17995]  ? icmp6_send+0x1e9/0x1940
[  526.386333][T17995]  ? __pfx_icmp6_send+0x10/0x10
[  526.386349][T17995]  ? __lock_acquire+0xab9/0xd20
[  526.386371][T17995]  ? ip6_neigh_lookup+0x14e/0x470
[  526.386390][T17995]  ? ip6_neigh_lookup+0x14e/0x470
[  526.386407][T17995]  ? ip6_neigh_lookup+0x397/0x470
[  526.386424][T17995]  ? ip6_neigh_lookup+0x14e/0x470
[  526.386441][T17995]  ? __pfx_ip6_neigh_lookup+0x10/0x10
[  526.386457][T17995]  ? ___sys_sendmsg+0x21f/0x2a0
[  526.386473][T17995]  ? do_syscall_64+0xfa/0xfa0
[  526.386499][T17995]  ip6_link_failure+0x3b/0x4c0
[  526.386519][T17995]  ip_tunnel_xmit+0x175b/0x2390
[  526.386546][T17995]  ? ip_tunnel_xmit+0x110/0x2390
[  526.386576][T17995]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  526.386599][T17995]  ? gre_build_header+0x31c/0xa40
[  526.386624][T17995]  ? __pfx_gre_build_header+0x10/0x10
[  526.386650][T17995]  __gre_xmit+0x19a/0x240
[  526.386672][T17995]  ? __pfx___gre_xmit+0x10/0x10
[  526.386693][T17995]  ? __asan_memset+0x22/0x50
[  526.386713][T17995]  ? erspan_build_header+0x19c/0x370
[  526.386745][T17995]  erspan_xmit+0xa04/0x1220
[  526.386772][T17995]  ? __pfx_erspan_xmit+0x10/0x10
[  526.386795][T17995]  ? __lock_acquire+0xab9/0xd20
[  526.386814][T17995]  dev_hard_start_xmit+0x2d7/0x830
[  526.386838][T17995]  sch_direct_xmit+0x241/0x4b0
[  526.386863][T17995]  ? __pfx_sch_direct_xmit+0x10/0x10
[  526.386890][T17995]  __qdisc_run+0xaa0/0x1540
[  526.386920][T17995]  __dev_queue_xmit+0x1056/0x3b50
[  526.386939][T17995]  ? register_lock_class+0x51/0x320
[  526.386957][T17995]  ? __dev_queue_xmit+0x27b/0x3b50
[  526.386982][T17995]  ? __pfx___dev_queue_xmit+0x10/0x10
[  526.387002][T17995]  ? read_seqbegin+0x122/0x250
[  526.387024][T17995]  ? neigh_resolve_output+0x438/0x750
[  526.387046][T17995]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.387069][T17995]  ? read_seqbegin+0x1ac/0x250
[  526.387092][T17995]  ? __pfx_read_seqbegin+0x10/0x10
[  526.387113][T17995]  ? __local_bh_enable_ip+0x12d/0x1c0
[  526.387129][T17995]  ? eth_header+0x11b/0x200
[  526.387146][T17995]  ? __asan_memcpy+0x40/0x70
[  526.387176][T17995]  ip6_finish_output2+0xfb3/0x1480
[  526.387206][T17995]  ? __pfx_ip6_finish_output2+0x10/0x10
[  526.387230][T17995]  ? ip6_mtu+0x7d/0x490
[  526.387251][T17995]  ? ip6_mtu+0x38c/0x490
[  526.387272][T17995]  ? ip6_finish_output+0x2ef/0x4e0
[  526.387293][T17995]  ? ip6_output+0x126/0x550
[  526.387314][T17995]  ip6_output+0x340/0x550
[  526.387337][T17995]  ip6_mr_output+0x4e9/0x1100
[  526.387365][T17995]  ? ip6_mr_output+0x1ca/0x1100
[  526.387390][T17995]  ? __pfx_ip6_mr_output+0x10/0x10
[  526.387418][T17995]  ? ip6t_do_table+0x1db/0x1560
[  526.387443][T17995]  ? __pfx_ip6t_do_table+0x10/0x10
[  526.387472][T17995]  ? skb_dst+0x4f/0xd0
[  526.387487][T17995]  ? dst_output+0x17b/0x1c0
[  526.387502][T17995]  ? rawv6_send_hdrinc+0xc9f/0x17a0
[  526.387519][T17995]  rawv6_send_hdrinc+0xe16/0x17a0
[  526.387542][T17995]  ? __pfx_rawv6_send_hdrinc+0x10/0x10
[  526.387558][T17995]  ? txopt_get+0x335/0x3f0
[  526.387574][T17995]  ? __pfx_dst_output+0x10/0x10
[  526.387589][T17995]  ? __pfx_txopt_get+0x10/0x10
[  526.387608][T17995]  rawv6_sendmsg+0x12ee/0x1830
[  526.387631][T17995]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  526.387656][T17995]  ? __pfx_aa_sk_perm+0x10/0x10
[  526.387680][T17995]  ? sock_rps_record_flow+0x19/0x410
[  526.387707][T17995]  ? inet_sendmsg+0x2f4/0x370
[  526.387719][T17995]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  526.387743][T17995]  __sock_sendmsg+0x19c/0x270
[  526.387766][T17995]  ____sys_sendmsg+0x505/0x830
[  526.387785][T17995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.387805][T17995]  ? import_iovec+0x74/0xa0
[  526.387827][T17995]  ___sys_sendmsg+0x21f/0x2a0
[  526.387844][T17995]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.387875][T17995]  ? __fget_files+0x2a/0x420
[  526.387889][T17995]  ? __fget_files+0x3a0/0x420
[  526.387908][T17995]  __x64_sys_sendmsg+0x19b/0x260
[  526.387925][T17995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.387949][T17995]  ? do_syscall_64+0xbe/0xfa0
[  526.387973][T17995]  do_syscall_64+0xfa/0xfa0
[  526.387997][T17995]  ? lockdep_hardirqs_on+0x9c/0x150
[  526.388019][T17995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.388035][T17995]  ? clear_bhb_loop+0x60/0xb0
[  526.388053][T17995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.388074][T17995] RIP: 0033:0x7f54d2b8f6c9
[  526.388091][T17995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.388105][T17995] RSP: 002b:00007f54d3ae5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.388122][T17995] RAX: ffffffffffffffda RBX: 00007f54d2de5fa0 RCX: 00007f54d2b8f6c9
[  526.388135][T17995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  526.388145][T17995] RBP: 00007f54d2c11f91 R08: 0000000000000000 R09: 0000000000000000
[  526.388155][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.388165][T17995] R13: 00007f54d2de6038 R14: 00007f54d2de5fa0 R15: 00007ffccda67f68
[  526.388184][T17995]  </TASK>
[  527.289683][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  527.300200][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  527.308298][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  527.310875][T18006] syzkaller0: entered allmulticast mode
[  527.322934][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  527.330618][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  527.357254][T18009] wlan0 speed is unknown, defaulting to 1000
[  527.365143][T18009] wg2 speed is unknown, defaulting to 1000
[  527.371642][T18009] lo speed is unknown, defaulting to 1000
[  527.600687][T18009] chnl_net:caif_netlink_parms(): no params data found
[  527.655345][T18009] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.663085][T18009] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.670425][T18009] bridge_slave_0: entered allmulticast mode
[  527.677723][T18009] bridge_slave_0: entered promiscuous mode
[  527.685506][T18009] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.693219][T18009] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.700464][T18009] bridge_slave_1: entered allmulticast mode
[  527.707674][T18009] bridge_slave_1: entered promiscuous mode
[  527.733236][T18009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.744558][T18009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.771087][T18009] team0: Port device team_slave_0 added
[  527.779139][T18009] team0: Port device team_slave_1 added
[  527.800789][T18009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.808024][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.835202][T18009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.848363][T18009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.856148][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.883267][T18009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.916998][T18009] hsr_slave_0: entered promiscuous mode
[  527.923930][T18009] hsr_slave_1: entered promiscuous mode
[  527.930032][T18009] debugfs: 'hsr0' already exists in 'hsr'
[  527.936364][T18009] Cannot create hsr debugfs directory
[  528.008107][T18009] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.018650][T18009] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  528.028817][T18009] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.085873][T18009] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.095913][T18009] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  528.105977][T18009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.145365][T18009] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.155265][T18009] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  528.165800][T18009] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.205364][T18009] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.215659][T18009] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  528.225539][T18009] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.311915][T18009] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  528.321365][T18009] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  528.331647][T18009] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  528.349321][T18009] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  528.408616][T18009] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.427955][T18009] 8021q: adding VLAN 0 to HW filter on device team0
[  528.438893][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.446141][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.459542][ T2142] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.466784][ T2142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.599610][T18009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.633591][T18009] veth0_vlan: entered promiscuous mode
[  528.644377][T18009] veth1_vlan: entered promiscuous mode
[  528.665496][T18009] veth0_macvtap: entered promiscuous mode
[  528.674583][T18009] veth1_macvtap: entered promiscuous mode
[  528.689732][T18009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.703124][T18009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.715260][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.724814][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.738567][ T3537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.747684][ T3537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.770866][T18009] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[  528.796106][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.798369][T18009] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht'
[  528.804445][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.832900][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.840965][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.372955][ T5844] Bluetooth: hci0: command tx timeout
[  531.462361][ T5844] Bluetooth: hci0: command tx timeout
[  533.532566][ T5844] Bluetooth: hci0: command tx timeout
[  535.612479][ T5844] Bluetooth: hci0: command tx timeout