last executing test programs:

15.015209628s ago: executing program 1 (id=3134):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r1, 0x0, 0x33, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast})

14.901805875s ago: executing program 1 (id=3135):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94)

4.35026304s ago: executing program 0 (id=3208):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400d36100050900010071797a300000008ed48b9b96"], 0x24}}, 0x800)

4.099325455s ago: executing program 3 (id=3210):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=<r2=>0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@RTM_NEWNSID={0x1c, 0x58, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x2, 0x2, r2}]}, 0x1c}}, 0x40400)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket$l2tp(0x2, 0x2, 0x73) (async)
r5 = socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1)
getsockname$l2tp(r5, 0x0, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$can_raw(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/38, 0x26}], 0x1, &(0x7f0000000340)=""/191, 0xbf}, 0x2102) (async)
recvmsg$can_raw(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/38, 0x26}], 0x1, &(0x7f0000000340)=""/191, 0xbf}, 0x2102)
sendmsg(r0, &(0x7f0000000d00)={&(0x7f00000004c0)=@isdn={0x22, 0x2, 0x4, 0x0, 0x7}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000005c0)="dd8301b6c8c0e8466721d2132e80fc406f62ba469df739720bab64b131b1c4a5038e8f14d7c782342570da5491534e6636b8332ce3489b200db733ea997f216f3857df445ec1a25be2ef4965246c6de0431d5b1a850c9dff0c815e7c074d8248f44defc6e35ab27084d9a4eb4a76a6c76c094f89acf5e87fb85a924389d850a03a90e5ffdc292f4843087c923a9655162386e760914aa800e02930e3085fba8ade2ccba24aa41c7e7f1211b7134e51e1619a93c5e8f150ef5e9b9358aa0973a27195a2d30ab73b92b6db532b4a5967ad672357af57908b2669cc6b6ecab6f9844a81", 0xe2}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f00000006c0)="f8cc932ff109290e0f472ca02be87043f967332a7f36ab40efe72c5819b149e98c0e5ac54ae7db8a148752aa287893b5c525cd28a1ee0e0eaa85f8c818f660339eced9199ccc3d9814e244d89ac8fc9c0c23bc9316e0fd4a74efcb046fad36931563c5102073d8fcb3951f9e7d703e8a185dccd2df9cc7814a2dd6825703d7330aadaa6413805b35137841289799e9600482e42769c72c88bf002b9997f9892b92d33ed73435d62dd4783760b33153dbab45583487a1a787bc882f03fd32e12870bb63df3ab5ee93a5ec4f2704e87a0c3c240d66d883448828238f1d72e21ffb3d75818c0660f3e1e624314ba7", 0xed}, {&(0x7f00000007c0)="db3672277c1daaadd2f157d06554b54794953951a26b0e1504f0ae7ebe79ba2e7808aaeed6daf033f48bd74171bfdab5008c89a55272f67d1ab82d951fd1b888673f1317e57d812e3174c27a1f2f1e9c5d8dc747fc597c477604d22691b0c27736762faaffe466234b05805f315207e3111a7c3d02f3716b875e7cef436b218338651e64ac52bcb216ead30829668d1bcbcd1b5674f1f330224c", 0x9a}, {&(0x7f0000000880)="e9fc66fbccdf6189eecfbfa1d85d5fda8249da6367d93f44d23ed2fc7263487f308781ab1e38be7f7ea98c06d0c8c02f30e4fae92106938916ccbf7c6f5412cbeadaeba6aa1fb5ef2960649908ac53d8baceabb76fc94f0033a6682ea9a1576b11a66550a01f474667e647c727e7512ae65240a857ce5d68c410db05bb70b4f18d7e695dade078e81591a175dda0e2a5744e21ac2898d46e3526d752acbbd38b732a1229c97b214c9f3441cab386361276523d1d23578fb39c02bf76330c3e5228bc25baaf9daae1dde63f7faeeb07f49b9dba44caa521b428f2766b78a5ab48a196014a4544fc74ae346152b4b796a08c55", 0xf2}, {&(0x7f0000000980)="2b694c88ddd03a6894fb80bc1c524199f6bd4482ff9eb51a14b818531d9b35d5e67c2ec787e4a2e5b1f728d71f56fe20fbf01f411cb2c2c777d2f5b6c49de5712f5831587a5c21266f46306dbafd58b5f4e530519716ec52f1ac15a31de599510e32364a5f74dcda3043edc11ad22d9c9733172cbc65685a433951f43d39398f77537c1c94babfff889a837ec1fe85018c55", 0x92}, {&(0x7f0000000a40)="cd6435be6ee7d2b6ef25c08d1b2ed7a9378ec505a4cb20818a45ba8e7058b3bd4ffae2ca2db5aa6f6888ab5681813f801a66fbff2dd49a102e748f4bd3ad5d4ad4b0ce047192076f50bbf401", 0x4c}, {&(0x7f0000000ac0)="f3eb302e2caa81afc916c3efb87cfba55ce70142ba176b2256968ed3ea966f6b2c4e198049d7675915bceda4aa11e6ceb60e45fce2b32b9f5879e008e1f316c0ca76a28841a569dacb53116480e56094ead2e92245e2492fba30707b5dfde491ada3113fb6ba3e1739fc0303d6dcabed0b9147f52e98adbe8886cb740b68d62481b9638c74e495120919b278b29821060a004d393a0bc5379c7d3a07dbdb0555ffb9d8cba2c36ad975e958714df7d126a99b8b88bfb7cb6878aa1f8c95166bcbcec83cb8478a58c2be5d9944767c448f3b423f3a18dd5e99cc38fa0e0a8fa4fe1becf99c39353f5c0fbf08a7f29ce867", 0xf0}, {&(0x7f0000000bc0)="4e4c291327dbb98542edb397bd394f902183f5ff1171ccfe9b6cea55a79169c8d010d21fcfd0763e5cc327b1227cae94bd16458b9634805f09f43635a3adf6029fb7", 0x42}], 0x9, &(0x7f0000000540)=[{0x40, 0x102, 0x3, "42513b35dbe8c513287db3c2d1fc0049248e90364106950f1db786350d530a554a8fce8d83e0310475b577d2ab"}], 0x40}, 0x40)
listen(r8, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000240)={0x0, 0x18}, 0x2) (async)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000240)={0x0, 0x18}, 0x2)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xc4b6233378c54cf9, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x850)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r12, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040044}, 0x800)

2.441504877s ago: executing program 0 (id=3212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={r6, 0x6e2}, &(0x7f0000001340)=0x8)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=<r9=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}})
bind$nfc_llcp(r10, &(0x7f00000000c0)={0x27, r9, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe1}, {0x10, 0x9}, {0xfff1, 0x6}}}, 0x24}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x5, @mcast1, 0x7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x4}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x74)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002cbd7000feffefff8900000008000300", @ANYRES32=r14, @ANYBLOB="04000000a7b884742d65a2a3f3d47ec5450b04000000c20a04d403df1a91c86d0ea7b404f29888fc6910f1eb7e497820dd83a149e44a683aa3e852e9c62132f300000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={0x0, @phonet={0x23, 0x4, 0xa, 0x2}, @ethernet={0x306, @remote}, @nfc={0x27, r9, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0xfff6, &(0x7f0000000140)='netdevsim0\x00', 0x5e, 0x9, 0x388a})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x50}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={r5, 0x1800, 0x100}, &(0x7f0000000240)=0x8)

2.43845661s ago: executing program 3 (id=3213):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000038000000bca3000000000000550305002dfeffff630af0ff0000000071a400fe000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430200000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a0acf30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478b41d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d859f49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f00960298f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2ccb0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab53080d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f982c91ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f098b6367917888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee1ee17da1900004c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f01ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864eeb6511004c1d44d90da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acccbc48d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d29000000003e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa63264648225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4db8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc351bc8a7c040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9dce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac42218301009bbf61e4bba695a41e2109eba8e40c3702bd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843ff3fd404f535be474f456778b5ef85afb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000003f1c0483706db2cb51a9439c2bf24fce70bb9ef9c150397aa1458d9045e9a066c4c07dcb5d3fd47532e6400d78e799e33dda64665388d543741c7440ebdd551ee967b6e2d14a1cc096f18779bc4e34f7de607ec7cbb28efa359d13683d5ef3adc614110f4d8610ebbb5e2d404be76418a0008f12850c49024211b4ea30dc07a52d95989123702f3caab2060f0dbd693ebcf0d5d32b4b76c473d668d63643a162bb4705764fd5656b033c4e49c28c9df7e20bb73ee59205520ad1e2ad93e22231f8251bba43534818baf226082d7d94e9544fe721af383b271d36a43e429ac976ce49ca182f6fcf5f5d1bc6388247669bb217af8c314cf5df36729c23cbcbab2fc7a2fdff67bf87c2651d0c1d87409d1dbef5457ba659111a23ebf03f9b876a03c00ee6b3e29f85321e9b47702f12e3eba8395cbbf7e5e67acc4d20a78ba87899884be807834578d1f2818140ba9facdb716cc8e744c17e5e66ca54b9a243067f85bf63ab86a7bd3bdc7bfd27a5be263205a1f8e2c650e88495fa4b3b6f7176c21c8dc81c9843479f4b14b9a13d8c0fc238e7500a399195373514c3b82efafcc261cfa53944f187ba7ea751a3437c3d4116399d5b65ddf8a641441086bbd30307adc59be211373873ef0fdb10d2c585e07dfd366f256f4b14f7db958cefc154f46bba0893f51acf2f8dd8a19055ffe12661932ac9a648e50683df90d17809e0bd5ec0e0c43f73e85cdc4912ad91b0753bd4561d79906588f9f5d09f56464cc2f56684d287b262b57c23ec78d2eaf96fb17c64f11ead4430c265c28ec02dca4ba38ecfecd4561855adeb2412430abcfa1e0391d0653567bf10827ccc1961743e096dcf2cc2e380b106491ae16d2a1a668de060f838408fbb60bbf017ad4d8dbd7a762c3c0705839f15a3c9f77ebe36bebbd27d98b519f36b12f5153905ed31453958c8c46cb8f974197eb01c819439fd43f43a15920fc1977f2f2a4bdd5d079283e1d6308251a5ae0461e2bd8190284f93f60244101ef8b6541a717a832ddf8aeed5455ed90bdeb9b03dae5481f6cbbf176321fff5e1aeb29840466177af699e84e49d3f9254e557e31a19bbfe55b62e20439710a75bcfa5c8c5f69f5b6cadddfc811fb73b78477688935b00f2f4971ba8c4c7c930e24d9f2fbcc9dc0bd2bf64294e47f02f69b0a84bdd4c0fedac522c7274d74bf367ca6c5441e177fbfc95a56d9490731b1aa1af08aeebb5a9e56d1b50bad5fc3f3ba8eb3095adba4ac1f236580000000000000000000000000000000000000000002e7ec9df3c71f02bb6d639855e3584aafd546739b880ffac40b1292971abc7faa153f90ec46f8c707fdb5b603ce64c155d76aeb8115f54ac9cb6eca976f8026a8bc56392b233a5a661d2e7ee1bbb330cef4da2ec20a4bc1249e45a3c69742ec706a8924bb3ed655137690e951b66fbafe688d98f898fcd545555ed60b3173dc2600f1c6f025dde0629055074e01f79751ba93da933a503a6b928ee43ced85e63996abd88f535bbd6eb7a1f613d2b1bb278341a9a3ed1f0cc81a2b39213ddad2e1e8e94ef639ec16f1d4ba1b89172e8036529d96cb07b409420b8c523103faeadb52341e2adbee1fc90e82924b64e948aea9bf810eb8623263c1dd4d8cc2eef8464f2554a4494a505ef204232f44665eb41c30ad2305056a89255734b3121849af8f6e7348cc9c13c76d285d701c2c078a7b2a41e0c7b2aded6377380e1454c00000000000000000000009355e100fd97c3214075e1ccb353b3e87c"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

2.393201127s ago: executing program 4 (id=3214):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x41b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x100d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa21}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x375}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x4000800)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x15, 0xa, 0x301, 0x0, 0x0, {0xf}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}}, 0x40000010)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x85)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

2.220398367s ago: executing program 3 (id=3215):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@deltclass={0x24, 0x29, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0x10}, {0x0, 0x6}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400481d}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0)
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="07030000000011000000487900230068000001089078acc4140de00000010183074fac1414bb01000000d69e71"], 0x2d)
r9 = accept4(r0, 0x0, 0x0, 0x800)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200000020000002", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) (async)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x80, 0xc, 0x202}, 0x10, 0x2902a, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r10}, 0x8) (async)
socket$inet(0x2, 0x3, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r11, 0x84, 0xd, &(0x7f0000004180)=""/4114, &(0x7f0000000000)=0x1055) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

1.982144124s ago: executing program 0 (id=3217):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r9, 0x80087601, 0xfffffffffffffffe)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r7}, 0x18)
syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffff0006040001ffffffffffff00fe0000c79094b15e35ac1414aa51e7422b68a8ea04defea677ef53b0b4bab96255f39b258a2175ac594ad8788aa63f33cb580627744a7da97c71fd27e2ac86621b414b7b6d08ca5ea0e771f6c8e90d2b93d74a42ba9ef2f4fffa895d61932d1fab921a70481b2d5cdc0e1f54640a7b728b78371b2d3937906a92e59f63ffa092edf7327be0a1c65fe06e8d264a42dd083575a979a34488233c7efc629b084db805db2e2cb300006b1e63337a00"/201], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ldst={0x3, 0x1, 0x4, 0xa, 0x5, 0x4, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xa, 0x8b, &(0x7f0000000180)=""/139, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)

1.981020129s ago: executing program 4 (id=3218):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

1.803906607s ago: executing program 2 (id=3219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0000400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x282, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x8}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r6)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000426bd7000fddbdf25030000000900010073797a3000000000050004000a00000014000200766c616e3000000000800000000000ec"], 0x3c}}, 0x851)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.766537654s ago: executing program 3 (id=3220):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r5], 0x70}}, 0x0)
sendto$packet(r3, 0x0, 0x0, 0x4050, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r3, 0x0, 0x0, 0x4050, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$kcm(0x2, 0xd, 0x2)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f00000003c0)=0xc)
syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00') (async)
r10 = syz_open_procfs$namespace(r7, &(0x7f0000001780)='ns/ipc\x00')
r11 = getpid()
sendmmsg$unix(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r11, r8}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000040)=@newpolicy={0xcc, 0x13, 0x10, 0x70bd29, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e24, 0x0, 0x4e22, 0x6, 0xa, 0x20, 0x80, 0x3a, r5, r8}, {0x9, 0x1000, 0x70, 0x4, 0x0, 0x56af, 0x4, 0xfffffffffffffe01}, {0x200, 0xcb2d, 0x401, 0x8}, 0x5, 0x6e6bbc, 0x2, 0x1, 0x2, 0x1}, [@srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x2, 0x2e, 0x40, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xb, 0x5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@local}]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x2, 0x2e, 0x40, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0xb, 0x5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@local}]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in=@local, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@lifetime_val={0x24, 0x9, {0x4ddb3317, 0x3, 0x5, 0xfffffffffffffffa}}]}, 0x11c}}, 0x0)
setsockopt(r2, 0x401, 0x6, &(0x7f0000000480)="8507c5c0960dfa8bc931c78c18a4837d909fad8e5a1d20edf2401916dc2681b06162024499bbe473cb59214fd8e82e3683fcded2a386ab1697178334fb0918e12e1b5303ceadac659f14e63b95fb82455b660e4c96f319e81a891a086ffb823df47a4d9b04e6208b57c457480bd0af9e93e4c7bd316d9ed83d83bb016c133a831f3d38f00f2e775200930d46d5e52a6d8ebab62c348337ce", 0x98) (async)
setsockopt(r2, 0x401, 0x6, &(0x7f0000000480)="8507c5c0960dfa8bc931c78c18a4837d909fad8e5a1d20edf2401916dc2681b06162024499bbe473cb59214fd8e82e3683fcded2a386ab1697178334fb0918e12e1b5303ceadac659f14e63b95fb82455b660e4c96f319e81a891a086ffb823df47a4d9b04e6208b57c457480bd0af9e93e4c7bd316d9ed83d83bb016c133a831f3d38f00f2e775200930d46d5e52a6d8ebab62c348337ce", 0x98)

1.706341282s ago: executing program 4 (id=3221):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x50}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008840}, 0x48090)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0xb8e, 0x9, 0x3, 0x1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x24044845)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808)
setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e1e, @empty}, 0x10)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000340)={r8, &(0x7f00000001c0)='police\x00', 0x40280, &(0x7f0000000200)={@_ha_fsid={[0x1c, 0x2]}, {0x4f, 0x1, 0x1, 0x2}}, 0xfffffe2b, &(0x7f0000000240), &(0x7f0000000280)=0xfffffff5})
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a05000a0000090900010073797a3100000010090031000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000000000000000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e736574000028000280080003400000000008000440000000000900010073797a300000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x90}}, 0x0)

1.545260343s ago: executing program 3 (id=3222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0)

1.432500624s ago: executing program 4 (id=3223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

1.335048873s ago: executing program 3 (id=3224):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r7 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10)
recvmsg$can_bcm(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20)

1.128153285s ago: executing program 2 (id=3225):
socket$inet6(0xa, 0x1, 0x100)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)
socket$inet6(0xa, 0x1, 0x100) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async)

1.12747032s ago: executing program 1 (id=3139):
socket$kcm(0x29, 0x7, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048004)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{<r2=>r0, &(0x7f0000000140)='\\\x00', 0x400, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x2]}, {0x3, 0x6, 0x5f5}}, 0x90, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}, 0x2, &(0x7f00000003c0)=[{0x2, 0x5, &(0x7f0000000240)='&}\xf8\x00', &(0x7f0000000280)="0f535baf304ed6cb78a4fec9f388215cb1beb1e76b223b2ee1118bdc48e6eba62b5ea6c31e183bb2c0592675c2b84d2dd761236fac751ff2bf987556fce5e7cb8f6e520e3406d3b032973f3d116592f1c5033d5c9718a5baeb6112b62be644fd7f2715535aea71c59e2a4e512d927a33ce3fa9354228407f70d16d783f336e4f9f46b01282c57b3c745a31471633d37ebab74ed2b0c7c5", 0x97, 0x10}, {0x2, 0x5, &(0x7f0000000340)='\x00', &(0x7f0000000380)}]})
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000480)=0x1, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x59}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x20000000)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000640)={@private0, <r5=>0x0}, &(0x7f0000000680)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r7, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x840)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r7, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xee9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x300000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}]]}, 0x94}, 0x1, 0x0, 0x0, 0x841}, 0x2000c090)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000009c0)={0x3, 'gre0\x00', {}, 0xb0bd})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000a00), 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x6288}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8f5e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7f}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@newneigh={0x24, 0x1c, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, r5, 0x10, 0xb7, 0xa}, [@NDA_PROBES={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r2)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xdc, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x443}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24040010}, 0x44804)
shutdown(r6, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r2, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f40)=[0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000f80)=[0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000001000)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001040), &(0x7f0000001080), 0x8, 0xbb, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f00000014c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)=@getae={0x210, 0x1f, 0x200, 0x70bd2a, 0x25dfdbfb, {{@in=@broadcast, 0x4d5, 0xa, 0x33}, @in6=@private0, 0x4, 0x3507}, [@algo_auth={0x8a, 0x1, {{'sha3-224-generic\x00'}, 0x210, "1421d0253f213d62e46784c81cfa26398bb8e3053502eac26659b8493805f7f8f3e6c52f4f9c96a3a936a1e441575c7758514bd8704753869383dab87592c5b18386"}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd28, 0x70bd27, 0x70bd29, 0x70bd25, 0x7, [0x7fffffff, 0x3, 0x7d, 0x7, 0x6, 0x5]}}, @policy={0xac, 0x7, {{@in6=@private0, @in=@local, 0x4e20, 0x9, 0x4e20, 0x0, 0x2, 0x80, 0x80, 0x1d, r10}, {0x9, 0x1, 0x81, 0x5, 0xa01, 0x62702c13, 0x100, 0x3}, {0x8ab1, 0x9, 0x3, 0x1ff}, 0x80, 0x0, 0x0, 0x0, 0x1, 0x2}}, @sec_ctx={0x62, 0x8, {0x5e, 0x8, 0x1, 0x10, 0x56, "8c3ac3a05f060e5b170f5626ee2c2a51b843201fce37e910bd15955a9cfd18a7a8e9cfeaf2050676ab3d90261595f05f717a975caebaa6a68c3ba3779aa9e3710aa4e2e77d733a345c55179aa0a9fbef039063c8ecae"}}]}, 0x210}, 0x1, 0x0, 0x0, 0x11}, 0x4020)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xe4, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "4bc313d9a7177d0319cb5c8966dc280937d9295f4f0f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x169e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x240}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3c92}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe4}}, 0x40800)
sendto$rxrpc(r2, &(0x7f00000016c0)="4ba6a90c54563d05022b462f1f9978bf5773168ec283adf57e8621e157769bc7c0374ca4311d7665feba46fddcb4073337d741e7a7010daee398da72", 0x3c, 0x10, 0x0, 0x0)
connect$llc(r2, &(0x7f0000001700)={0x1a, 0x0, 0x81, 0x63, 0x7f, 0x9, @local}, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xe0, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_IE={0xaf, 0x2a, [@ssid={0x0, 0x1, @random='w'}, @peer_mgmt={0x75, 0x16, {0x0, 0xfffb, @void, @val=0x34, @val="9368434ea905e0c759488759f655ce3b"}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @dsss={0x3, 0x1, 0x6c}, @perr={0x84, 0x42, {0xc, 0x4, [{{}, @device_a, 0x80, @void, 0x4}, {{0x0, 0x1}, @device_b, 0x80000000, @value=@broadcast, 0x21}, {{}, @device_a, 0x731, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x41}]}}, @prep={0x83, 0x1f, {{}, 0x0, 0x9, @broadcast, 0x0, @void, 0x8, 0x5, @device_b}}, @link_id={0x65, 0x12, {@random="4b2eb38bc727", @device_b, @device_b}}]}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x1, 0x1}}, @dsss={0x3, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x7c, r7, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d157cd4b1f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17f78e5974ab087897f66fc32d"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "cd6a"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x90)
socket$inet_udplite(0x2, 0x2, 0x88)

1.126919593s ago: executing program 1 (id=3226):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001bffffe10000000000010000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r1, 0x4000, r1}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0x0, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff, 0xff], 'macsec0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8e, 0x0, 0x7, 0x7}, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)

1.12612397s ago: executing program 4 (id=3227):
r0 = socket(0x2b, 0x80801, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), 0x4)
getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080))
r2 = socket$caif_stream(0x25, 0x1, 0x2)
connect$caif(r2, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
listen(r0, 0x3d9)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
unshare(0x26020480)
r6 = socket(0x22, 0x3, 0x0)
bind$vsock_stream(r6, &(0x7f0000000740), 0x10)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="eb"], 0x30}}, 0x880)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000001200), &(0x7f0000001240)=0x4)
ioctl$sock_bt_hci(r7, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000200)={{r7}, "3171d7978b47cb1b6f5893e686dded366499f43eaaa204f8143b86ff0a2d4613efce59a9dc64a50ddc054ddab18b04d9d996cb5db98c98a8618b466ba3367c35960390b588687a9df89f6fbfc23097f910510791648de15d9bc21ad06a002560e0579e2545cf5c77eadb35d1183e3b6bf2ec9d001ba7bb8ce6566bec7fc18cccdce07940c2f3e8cb2b8d345acb42d3e10014f2031978cc1ae7ff8780624ab1708126412dd6620f712203c97a5f6abe60efe4b5b3a3f9133069bf36b463c76f29e8b796efa4d9624b495400cc5bfb21caee895e12af7f76a6e72e5b352d1c89f4e3b79c1d2a3a873c0e78dc90a8960117d3511ae38dd6aa1b0286b97f6b7635e18ec4ae1fdc2e42475268c5862a13aef0a539d6a8f426a65f46737eac4d0bb435a14d017f0da9d5641d5742e1e411ff347e163eafda15773e7d73fb1959ff0e97cd10edba44eca1e08d066355a38452f5d05bdac5e9f72951b223c049f1dcc0852ee1d1e75e62506f1104ba592221b396eda97cb93118b4fc4b1ff4d53a75fd6947ced37ea45ddd21c3c2fcac0a4cd76199f8c3916f223782c335d5266743f63fce1e76b1966feea8454ffc72b7b0e4cc9c84ac178f2eb9402eaa52c3b8967c80ab43f2701cb327ad6438313ef848649737189ce9011cad7a081d41b5d67891b1d2b9f59e39c33f0879cb695a92525f32a10edfedded9985340fa5850c6ab6876e5415b774c79f1e3d4fc7be7f93e7692d52c6291a2e441d1384a0f57b0f6524d9b739b7d720418b662f515a4e883d8509e914a9027d8c3078f353d0dc99d6c43ad970fbdffd5ed7ec6cf90740dce7ec34ed5698129b73b9c38af26e2d03d148466a7f2650cb41298aa450a4726de12241e23207b8a635a64ab9704c4876835a3644752581ed626910298faa5613e4fd700122c8d0b3c053ead092d9fe387826d652aae4bf9e9bf2f2233f49856ff3c0790d5b0db3f77cd8a6b601f6772dd10c4243aa9f1e6eba5a41c637b6b02f4016e6c49430e18d83f0e04d024b10085154078b0585edceae7d8073d770df8a95a92c6c5bc0f1605de2708014ccba543c2e159e23cb550ee4bbb560974b7ba840b585a9af5ff705faa5aa30bb0dfaf68675e4a6b1c076b052f8b2639176b52d1c140d6fa854bfce8aaffe4be2b42c17178bb073aaf75cbae15d17f6bc6e5a3cab53f95c87a9d93aaf1f005804ffbea43af0d87fcf445af6bfe8e04fe3550f67e2db9be3c50e68cb314580b28f25753da13b47220a22d2560c778bced79e8d6869cb3b9a2f62d6e9514a305fdb253a56fd61de8edcd7079ac1d9344105fd124357c52c93fef9742233b7152e27de67416846ae962bc0e3d8fe7de8e25b942882673fe6da0f4db099be8f1c31039b6e0ff5e493d40c7e76bf6f903d0007c2ffdd8e7ae393b42c881136cab0edd63df50efe828b03c77527f04ae23760573037b89105e6505f9cbe40a2e7966a9cc2d4e3705b79b4d0b12b2980d0f93d549a82713009f77e6541e23188037a867efede3e48394f9cb98bf0e3cf124ca4d18bd9421a419cae6288e4e640255ccd7bb8c900b409a80f040c616858ec6ec8168483961d6843aea8e9729f13d37d81455e64648cbc92c5abac2eaa469764e21cddadb2b2bb246bdb1c906e86757adf9fa428642ca4a4ac960f6025c14db729571bf22243325f2516ff728b54955426bf32f0e38bae3fabba5fc4c55bbe5b75c2aa3c4863ba38d09de477198f4927593ea40aabec9d745bff912b12f2dea89bdb59af530d65e5c6acdd3247134a60dfda060b67f464cd9e7863cb140428ede0275b9de8df779fd6017b7ca4c8f1984966ce6e18c4d34980ff7e0b78aae4adde215cf2150a67100de5b23eaf2a711dfb8874a2e3c54784fd04531080bf187742075e7973d764959b6dbaec4ec63f9251719bd015702fdfb069c787c991f595f408f76119c639b3475efb126c0e032d19d6017b1a1bf20f056f2f99c597c6370ef80a8b80788a2c3b2a5b6ab95a34d347a638e4c54e632ecf6327c771bbae6c373df9d0d3b815f13c566f3a1f44c195cc2915c02d131bb22e6971f6326434d5378bbe9ae3cf278204aa231af60aec70da9b47d7ed83baec3303703a73910b17fef7bc1c74771837a3bed68a8c6d332e73b115b0acc4dbf4c2adb477f420479b66ccfc49533d20f8cc97fc95fecb295715be8e9cf63f8e0dcba6f5547b12a1d3f3ed8f50c548abbd58dea007c9f7b725b1698f6ce7f99e4b2c8c6c619e3f577115ce7842315eb8db39198c64575b6ff65d7ffc5d780662686d1095ab37310dafe981b954711b66803f5d28183ab1386022c6eddae1653fee84087a24a33cf74081b46882ab2403707457515121c9124cb5fdc648c3b9b826d5c71b4f39cb96e9b4d37f8aff16db119158480e17a7086be7fff70a84dd50250548b7d7930bb389bc40acabdd8566ca5b17dc110a15d1b62a95e02327a051fd2da0d8dd619d7fce8db8490a8a98a826b74f93eec0e90beab793101039292bb4dda32f0c4bda246c859fb337f3df23f10bb2203fcc99847e4a99cddfc4f17cccb31c5cb1e1bd269f29bffad700b0686eaba01e0ed3c44a0b02a7e83b3d62ccf7acf9f9c30a989052f11b08e26a5def64e7f9beb384e8a0375b2bc9e046961c5753acd4a0788049501da91dd52cef963879d88d3a6428c95706b7ffc2294464f78fad6890b31f6f06817fb8f2d548754dd43637295f144af2c8f6674c57f2a8f074c777d2103a40645404774a20285f538480b36a15696df85b40a3950b2ee69b8b58d001a01d3d0c74df6110c0ce90a774006b23e5a628cd5fbdcbc6c7df947c297aa1a1a8d05ce0ae251160abb1cc9d17791b9237a660c764c69d1e48fdc77789df17159a6f554318b173e3c84f1a680b3ced3e410d7fe0859b5fe05b1f91526a8db85294016ecbfa0934a1aefc837176e63752ccce2df13a6197e85acb9cab622bea81afeedc38f2ceb46ca245aa60b6837486203dc7140416cbb5b74642a2029c61a2e3cc8406f447652d1d779ed8ef4042d37ba1d76f1eac461404bafd61df7f3d085d060ccd349608b50ac4f1bdc63fb522987a45107010dc90fc639391ca40a7d558b69560b13148989b10dde219f13bcf3d80309de44061ff408290bc741a2bfa9b1319577a04a514a061af25f8a3710ac2d87d6fc352aa427600bd14bffe250e50ece6ba81c84076eacb4018c38adbd36acb2d02ee746de52a63d8a25432c8456dde80259ae4519c25240f58cfc1ed2ebca2db3d331fbc08c128741fa0c3147039f4972c2132473d65b1d9fc6a469ec27875c79951ea2c5c5200e9a1225fb398e04c9cbba9837c1280f2e253faf60aab7abbc993cc12defd85de0a7803d58fb050449a4ca3c74ecf94eb475e6422dc3e3c684adea0c2273a1e9a4441f54c0234809240f12f197356c47d19a901fd8e00cc97111f652cc13627d7ccaea7bff2cfcb28cd462b78f346fedbd88b9b78f43cce08ede09c8b219f2eb768219efe91b44f76d05e46f2259eeee6bb1a8501549023647a200f79d6ce6905593ed35144242a21eefeef7c557f9aeb4e815af7278422abdfafa0e904a86993cbc4e03b5cec1dbb2f711755be8e1d79b76d33179cddbedbc6eb764e795ccb1bcf9ab1afd39d4bf9af400ca4208cc751dff8200be6fa1662c1f6e9fcf90f0d0a2e03671be84792c55665ce735ac81e1e9df12a3de1fb4f510401824691c510587a7c33021ba50acffee2453006a74ca03615b4e103c0bdc0352fe7f3a799df263da1dc2c85603fab2434d7d573c626920bbb282caedf02ae837b62b701de1261187bd4ec8f2defa8c013de2999738bc23883221c46230d924cd15ce73eba8d318ddb27fd2bd7f9521fe237f1a84f06bd905771d1c20d5626d5fefa9d063a49dc489a89c209a1a62021aeb6182ee1936ac31f6e8873dcae7f325f0fcc1d41e32e8d08d202cc703ab80c90e0e9719fb93775d5b61c0a9a6c4e5903c189550f10ae263b776f0237f0d82340f01b6329ce7a31b83e22ba9675b9696292b6e6a68d74768fe6551a47d6fd1d43bf2a63e3ca5d12f18e42ef5302bfd834ea3c58752bf6b0f233e2835fc9cf769ef5d3e2c6e92fa13a3e2030d857d5fd32020138d7dfb0cfe6d8c9614dc544ec66522f211d5bb91297e87aeefde5f744862f0431c5d710432e1aebc58f1b9f6a3d0edec982d104b50371ef87f9d9b93c9c26bd171f41864a4c58a1cc9677a7eee0989bb6c395c48fe20df43b68403430b0a45f3bc6d94b0f85a38406429f9717f5087de3daa753855a8807c2c648b74f96cb874e56b950096adf51584f056bb55dd803130c2dcbba1881c63f9a891898991c0288a047216904d457c05a014cac9005e71833e5cbc8bb3cdbff259c6af832bac6e9cc3f17a915098256d4b854a858eef8368181dc05d1870dd93ce3b6acbe2cb3d2cd778611f33ceb3f0d0e3230ef9aa8ca65fee353e419d0b0422b80baecdd6f30add2a8ba62da11bd7cc1f72609d6328e0039bfa8eff2cfc377a0973bc6535b2e3e1779bc89a3c0b271b34c6d02f989cc5fd475117d6bfcd704e01fa0ec83a0a3d9db4b70e8158d9492c9c89b81dc3d6453cf879bff2d6c728a56acc7c6e4303595e9c3766c0e83647b136479089618256268d50637a2425308f123128aac0a5c063bcfcf5a471725b27f18cb2db054fada18e1d33b87158455d1424d024506bd904dab96d215adae38fc98fac09ab4418f5de788ead6a6651670d73ba73d1c2162103e56427d467d9555be19ae4ae9a87d26f227079d8d5ef543fab3a814fc4a29b01ee4e7d4438e03e4e0478da7ae538c04ed6bd81f3775ab5b5745f278efa7db14151edb431c08b11a4ec1bb083098ff181460e89584a833363b69c8b0ccd91b84a04f9f350d07aa74bddaeaf0b73ef88b3a7b4acc9323c5318b81574f520ee8469567456fef4c90d466be96c066678cf98c75bf085655ec78c6faad83150534148f7e74b88eba47df430319e6054d814f0c5b5ed6ed814a7257faa80cd7ddfc72ac03112367d17ea85b601169759d2d1af0d34149cf110f7baba4f1ead7744c60532e3bed43abfbfdb022d5adfbca4364dd8da4c65105ee7d2d499f2fd67b2ada6d6d2c6eece904bd98dc441520e6d8b59588ee5a401cc65ca554e525993051dd305cf668e5dc5460f9588bab280867e56a3766ae13ee172c8d896380204eaabd6df2403fdf8176e7f7f74be981139d96dcc05ba74231951c02817c71e20cc806b1296a7aec696097de8448b0f74e6ae79a81c69d0e49eb51117c07aec374a68ead2da8360b902207627b1bf009c7fddb9a797116103178218f439c05f1044a35a3ff5fd0c5d327d39ec0d0d001253ee3bd6f61347c065adf1b1956651443650b0b860f2f996f3486ef6af421d927b26184296f1dfa7cb19e4947e3b20d4f78789be8f8cede61dac8173d813f4f3b33d3fc525ba86fde0298b5770715e381b416db399c382acc1952e635efb74538d3ffe0951f6ec1e5ea37c013785e7137229884ffcff580028bdf27c3154a20735943a07bd40bed4bada6ae0b9d9268c846038c3c4d045c4ceaa0175e2417d1bfac823658d8e694f5f25e239f24680af323cbfd2f4d9224e7875325b0dc662a6f23ba3db8c6f7c9e1bd5b4b86a944fb10fe79cc72561a2b123edba8af13a5f25f8993fa754cdfaba6eb894d54f40ba7e4dc12ea75cc9d2ed14bb6e33a5bcc9ef01c5ea69c84d4790909534d578"})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c)

1.125537698s ago: executing program 2 (id=3228):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140a5014}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x328, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x50}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x20000000}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xec, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe2, 0x1, "8a87f60bad237093cf562060570bc51a53b348ffc9625a285574502c5e40e4d272b32d69fff537f908304e744ff1a5c38b53688a6899602f4422a060663e7fc76174d48a37a0b0eec451d6bdc1d363861210a9528a305e786942d420f47a5efe7688957f474be0f59132d3a376b3b3ce81d3db77f241761f4fc5761605f11c566121d70dd68cc9771a86c24938b197fc4266356824adbc39e7bb9959d05b301b4ad8724d6a204bfaaf10c1383676b4eb7c88db82267e35c468a95d748684374a6f4104ebca3d2d21f1516ad33c1a8aad954bb2ef58a2f858268502073f06"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f0, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x90, 0x2, "d70f70d10467af2d87c39b1d2185220f0bcb36595fab30134be86025559ccb840991d61717d4ec8b97021fd894041283e720ca45f256357694f6eadbc51cd88a5a98c4360899c35040c90b91ef7eea2e88e5d7e83fff033de510208c7e6e2e0a12a3cfe9b855b74e6904d2999012aa42472719b198051834bcb6990c5e982ff7e4eb21962eb056da6443a3d0"}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x96, 0x1, "bf4d61ddeed4cf930dc3fd89b76992c58ad5e11c5876c4cd8ad8d6076e8f9b0709a17132e4d8a71b07e8dfc54acc1acb167c83f2f80ae39489e9055471cdd60791c712a065ba66d05c9df6376522c2f31029b358f9d5135473371ad3c2a0758ee42148dcb300d52af385ec6316c0d0d23d6d003ce61792e01ac7ed81ab372fd51bcd16490f4b15d9ece08145f02387426758"}}, {0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb7, 0x1, "1f18f626daca8b9a9903ac2c4c1f974d46bf7f1967731df8aaae323f34a7801b6798ef94e9a5747b188190fb378087caaf344c580ec5ddf8b68e210b605cf8b6011e51f25a4b250e6fc95cdd5eaa655e8a46f17c0cc05b8d85e815daf0300be3244eeb17ce28b88629d9929476017e023444344637c2046f013d55134f5a6f37d213ee0a43b44e27b8da1a4a27539ce88059f8c0fa8073e44652d953061a7e7074449118fbc0a7ae57956ebe96630abce1cb64"}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000005) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f00000007c0)=""/77, 0x4d}], 0x3}, 0x40010003) (async)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000009c0)=0x7a51dcd1, 0x4)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000a40)) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r5) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%+9llu \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'syztnl0\x00', <r7=>0x0, 0x4, 0xff, 0x1, 0x1, 0x32, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x8000, 0x8, 0x5, 0x40000}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x5, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000d40)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xe11, r5, 0x4, &(0x7f0000000d80)=[r5, r5], &(0x7f0000000dc0)=[{0x2, 0x2, 0xd, 0x1}, {0x2, 0x1, 0x10}, {0x0, 0x2, 0x8, 0x6}, {0x5, 0x4, 0x10}], 0x10, 0x6}, 0x94) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x40004001)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r10, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}}, 0x8000080)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r9) (async)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000011c0)={'wpan4\x00', <r12=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001200)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x34, r11, 0xce8cd911261fca3e, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000001300)={0x4, 0x7, 0x0, 0x3, 0x8, 0x4, 0x4}, 0xc) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd0, 0x2d, 0x10, 0x70bd25, 0x25dfdbfb, {0x13}, [@nested={0xbc, 0x80, 0x0, 0x1, [@typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@mcast2}, @generic="49549d7b1cf46f130725fc619074b2720db762606e3314d2faf5b39e1124a58d6d840086da63cf32232d2b983a70f29456cf60c995de55184402d1ea7b212591572aec0ffd4e0647e479e718870b3eff8389e387c02f3c4dba48c3f70f3fc65e1aab43a696350e9fdaef9b6a2b843b433fed7e8c5d3c5f45ad47e6ec0561221b874fc76a362de3b743aba6653f7b76633f916e96ab0cee8ecb1a604fc8232c3f", @nested={0x4, 0x8c}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4841)

993.476459ms ago: executing program 1 (id=3230):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x232003, 0x0)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

949.481528ms ago: executing program 0 (id=3231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4(r3, 0x0, &(0x7f00000000c0), 0x80000)
ioctl$sock_proto_private(r5, 0x89e9, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x1c0, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x5, 0x0, 0x0, 0x4, 0xce, 0x3}}, {0xa, 0x2, [0x3, 0x55, 0xf]}}, {{0x1c, 0x1, {0x4c, 0x7, 0x4, 0x81d4, 0x1, 0x4, 0x48, 0x3}}, {0xa, 0x2, [0x80, 0x2, 0x8]}}, {{0x1c, 0x1, {0xf2, 0x1, 0x8, 0x800, 0x1, 0x7f, 0x4af, 0x8}}, {0x14, 0x2, [0x6, 0x1, 0x3, 0x3, 0x1ff, 0x9, 0x1, 0x7]}}, {{0x1c, 0x1, {0x8, 0x0, 0x0, 0xc438, 0x2, 0x8, 0x837, 0x3}}, {0xa, 0x2, [0x628a, 0x4, 0x6]}}, {{0x1c, 0x1, {0xa, 0x6, 0x7, 0x42c, 0x0, 0xc58, 0xf727, 0x8}}, {0x14, 0x2, [0x1, 0x8001, 0x965, 0x7, 0x0, 0x1, 0x4, 0x200]}}, {{0x1c, 0x1, {0xf5, 0x1, 0x3ff, 0x9, 0x1, 0x560b, 0xe3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xfc, 0xd5, 0x8, 0xc4, 0x0, 0x9, 0x1, 0x9}}, {0x16, 0x2, [0xabdf, 0x5, 0x9df, 0xdc38, 0x8, 0x2, 0x4, 0x7fff, 0x9]}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

869.791059ms ago: executing program 2 (id=3232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000"], 0x64}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40080c0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000001c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x46c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_IE={0x1eb, 0x2a, [@ht={0x2d, 0x1a, {0x4, 0x1, 0x5, 0x0, {0x6d82, 0x3, 0x0, 0x3, 0x0, 0x1}, 0x6, 0xe04, 0x3}}, @ssid={0x0, 0x5, @random="ec2de4bb21"}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x5, 0x9, 0x0, 0x28c, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x806, 0x7, 0xc}}, @random={0x9, 0xce, "6fc846ab1b282071126636aada451bdf6c0c31e4b2b34bf8f9c89345091f49b2263833d56dd0e225b13f6d529a2820fce269e539e701edb02a9921d4518083b132bb4b1e569da86429bcb62961e73f64806e19a85461a9a9df7d0ccec8920427aa8f716a1ee37a5f8fbc2c6dfc124526e187f44852918d152e1b7a8fabf67791e22b5ab51d47abb5c42b3f398edf0c6665fa799c2adb936af07bcff23f434efaa1418acbb70d8745b70020e9a09f186a1dd9e6880ced46d4a1987e766321dcd41ed4fa9fe7aee2aeb8368e60c12e"}, @challenge={0x10, 0x1, 0xce}, @peer_mgmt={0x75, 0x18, {0x1, 0x3fee, @val=0x436, @val=0x3a, @val="6672754dccc53494646c1a12753827fa"}}, @fast_bss_trans={0x37, 0x9f, {0x7, 0x4, "76ba6c5ea7ba281b285d587e2f82b9b6", "9d3a6044b04bd6eff5000039ac6e1dbeb717198e6acad84d6ce10c2a802bf3a5", "5e94b60fb9e60f3ca4d2ba0f2c8f87c5f7be5f6dda4f030693616edba02a04f9", [{0x3, 0x1a, "86ad447a53c652a16d1a25d99b520c1bc9c9df6b68e52e9d8421"}, {0x3, 0x4, "90c842b8"}, {0x2, 0x2, "cb8d"}, {0x2, 0x25, "6b55312f9a3de3f6fee248e0541c7b467fdee1aecea82f359e40fd2b52e694e40fe14aab8b"}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x10, {0x312, "8f6e24296de0", @short="389e8bfdf37b852d"}}]}, @NL80211_ATTR_IE={0x162, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0xb, @void, @val="e0530ee5c57aa33ab23c925f69cf8b41"}}, @preq={0x82, 0x78, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x1d, 0x101, @broadcast, 0xfaa6, @value, 0x2, 0x732, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x390}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x1000}, {{}, @device_a, 0x54}, {{0x1, 0x0, 0x1}, @broadcast, 0xffffffff}, {{0x1}, @broadcast, 0xbf5}]}}, @random_vendor={0xdd, 0xc7, "a25b8102847feaf41cac24fd5dc86cc26a430b7bc03d2d2991cfd55aeb819ad7ff84ca793e7c4df1237d1ce112f42a6673c0b337eeee7b2740143cf264ced12f72127efa88437a9eba3fb36eee8afd89dfce025d7ef914ff0f54b2ff07a2da411ddaa7e04be6db9dd37f03f8d91ed6f9878073858db7bd915d6554219c7a02950bb15fe0af3cc5c575c3912cd3825a6149c24f1055b332fbc5511f20b9676be01f72854ab45d5ba01f905e8629ba7294d41320783e94c099e26cde434daecdf9a28987b2959282"}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x7e, 0x2a, [@perr={0x84, 0x48, {0x1, 0x4, [{{0x0, 0x1}, @device_b, 0x1000, @value=@broadcast, 0x22}, {{}, @device_a, 0x80000001, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x12}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x27}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x6, 0x0, {0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0xb06, 0x80000001, 0x81}}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd}, @NL80211_ATTR_IE={0x1a, 0x2a, [@mesh_chsw={0x76, 0x6, {0xf8, 0x59, 0x11, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x96, 0xad, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x45, 0x2a, [@supported_rates, @random={0x5, 0x1b, "a144481060a8932d13e323064f281e25656ff342696b16be7a469e"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0x870, "dcbdfd6b923f", @short="743a52b9c810e6a8"}}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x40000}, 0x3e98abecb27fe1ba) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x43, 0x7c, &(0x7f0000000900)="01de3bc525d27384e7f35c3a3d7e56ab78484dccc195eb8b53c945e5ca86026fbbedfb1bdf76628957160eedd327be2173b74c19f1b605fc9163757ef016c32c25cab6", &(0x7f0000000980)=""/124, 0x23, 0x0, 0x1000, 0x96, &(0x7f0000000a00)="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", &(0x7f0000001a00)="78c06bec54971ec089e83732bd04329e29f9b02278b55112c41cb0e24f106afd8be056b013427201f99214014fa66bbc5d2802a3f584daa670d7d4ad5ec626b8f5becc9c09c78b70b088e354bc2705a7b1a736f6a591cf9f14be2ca087754c199e923531fff6a0a74259f9fac8869aaed96db1c0988845be47b357c94fff0fa044e39ea062f6c87700d7667b0788c2340c0781eb8bb3", 0x1, 0x0, 0x8001}, 0x50)

790.928032ms ago: executing program 4 (id=3233):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f00000000c0)=0x80, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)

528.104865ms ago: executing program 2 (id=3234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

387.948356ms ago: executing program 0 (id=3235):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c3e4cd886c99f1f8e9b154ee818c9ed2f5520a0eda54a071df740be224f924c3f76894220000317277a5337660134dcf44cb9222f1f62eaa", @ANYRES16=r2, @ANYBLOB="01002cbd70000e00000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

74.880952ms ago: executing program 2 (id=3236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r1, 0xc252d000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004300)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

6.672422ms ago: executing program 1 (id=3237):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xbc, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xb}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x10000}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x5, 0x6, 0x3, 0x6, 0x7, 0xe, 0x9, 0xc, 0x10, 0x2, 0x7, 0x8, 0xf, 0xf, 0x2, 0x10], 0x0, [0xfff1, 0x0, 0x9, 0x0, 0xed, 0x8, 0x2, 0x7fff, 0x6, 0x35b, 0xd, 0x1000, 0x7, 0x6, 0x6], [0x5901, 0x0, 0x80, 0x8001, 0x400, 0x0, 0xff, 0x0, 0x432, 0x3, 0x200, 0xf2, 0x2, 0x9c13, 0xa591, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xf0}]}}]}, 0xbc}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

0s ago: executing program 0 (id=3238):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000700ffffff046600"/42], 0x30}}, 0x0) (async, rerun: 32)
r2 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{0x0}, 0x0, 0x71}, 0x20)

kernel console output (not intermixed with test programs):

cast mode
[  537.345878][T10236] bond5: left promiscuous mode
[  537.375674][T10244] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  537.388498][T10244] bond3: entered promiscuous mode
[  537.394150][T10244] bond3: entered allmulticast mode
[  537.399995][T10244] 8021q: adding VLAN 0 to HW filter on device bond3
[  537.466843][ T5891] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  537.500288][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.509192][ T5891] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.521362][ T5891] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  537.532590][ T5891] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.541627][ T5891] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  537.602154][ T5891] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.627222][ T5891] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  537.650872][ T5891] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.717444][T10261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1135'.
[  537.727522][T10263] sctp: [Deprecated]: syz.2.1134 (pid 10263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  537.727522][T10263] Use struct sctp_sack_info instead
[  538.109930][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'.
[  538.125803][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.134306][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.144190][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.158437][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.473524][T10301] bond0: entered promiscuous mode
[  538.495765][T10301] bond_slave_0: entered promiscuous mode
[  538.501694][T10301] bond_slave_1: entered promiscuous mode
[  538.518281][T10301] bridge_slave_1: entered promiscuous mode
[  539.003320][T10321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1151'.
[  539.042073][T10321] IPVS: ip_vs_add_dest(): server weight less than zero
[  539.699872][T10366] netlink: 'syz.3.1165': attribute type 1 has an invalid length.
[  539.726225][T10367] netlink: 'syz.3.1165': attribute type 1 has an invalid length.
[  540.123263][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.276663][T10359] lec:lec_atm_close: lec0: Shut down!
[  540.533988][T10406] __nla_validate_parse: 8 callbacks suppressed
[  540.534010][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'.
[  540.581206][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  540.639417][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  540.707870][T10410] netlink: 'syz.1.1177': attribute type 1 has an invalid length.
[  540.720211][T10410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1177'.
[  540.731958][T10404] bridge1: port 1(veth5) entered blocking state
[  540.739593][T10404] bridge1: port 1(veth5) entered disabled state
[  540.746981][T10404] veth5: entered allmulticast mode
[  540.757111][T10404] veth5: entered promiscuous mode
[  540.817789][T10408] bridge1: port 2(veth0_to_bond) entered blocking state
[  540.835697][T10408] bridge1: port 2(veth0_to_bond) entered disabled state
[  540.856220][T10408] veth0_to_bond: entered allmulticast mode
[  540.877264][T10408] veth0_to_bond: entered promiscuous mode
[  541.067919][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'.
[  541.336823][T10444] netlink: 'syz.4.1185': attribute type 1 has an invalid length.
[  541.348968][T10445] netlink: 'syz.2.1184': attribute type 8 has an invalid length.
[  541.555508][T10461] netlink: 'syz.0.1186': attribute type 24 has an invalid length.
[  542.588527][T10509] syzkaller1: entered promiscuous mode
[  542.624123][T10509] syzkaller1: entered allmulticast mode
[  542.785745][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'.
[  542.843518][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.852794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.937604][T10524] bond0: entered promiscuous mode
[  542.949920][T10524] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.072766][T10524] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.081266][T10524] bond0: (slave sit1): The slave device specified does not support setting the MAC address
[  543.095989][T10524] bond0: (slave sit1): Error -95 calling set_mac_address
[  543.339341][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'.
[  543.382363][T10565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1214'.
[  543.583924][T10581] netlink: 'syz.1.1214': attribute type 83 has an invalid length.
[  543.835088][T10591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1223'.
[  543.883743][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.892026][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.901337][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.911471][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.928565][T10591] netlink: 'syz.3.1223': attribute type 58 has an invalid length.
[  543.963161][T10591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1223'.
[  544.416610][T10631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.425375][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.757084][T10652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  544.902271][T10662] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  544.952792][T10662] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  544.979651][T10665] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  545.154653][T10676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.286695][T10689] veth0: entered promiscuous mode
[  545.393405][T10689] bond_slave_0: entered promiscuous mode
[  545.399439][T10689] bond_slave_1: entered promiscuous mode
[  545.405270][T10689] bridge_slave_1: entered promiscuous mode
[  545.437967][T10688] bond_slave_0: left promiscuous mode
[  545.443842][T10688] bond_slave_1: left promiscuous mode
[  545.449322][T10688] bridge_slave_1: left promiscuous mode
[  545.458046][T10688] veth0: left promiscuous mode
[  545.617679][T10704] openvswitch: netlink: Missing valid actions attribute.
[  545.704796][T10709] __nla_validate_parse: 2 callbacks suppressed
[  545.704816][T10709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1249'.
[  545.738407][T10709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1249'.
[  545.874857][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'.
[  546.043028][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  546.051236][    C1] lec:lec_tx_timeout: lec0
[  546.056470][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  546.245207][T10734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'.
[  546.363382][T10741] xt_hashlimit: size too large, truncated to 1048576
[  546.556095][T10754] block nbd0: not configured, cannot reconfigure
[  546.885504][T10763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  546.893197][T10763] IPv6: NLM_F_CREATE should be set when creating new route
[  546.914344][T10766] syzkaller0: entered promiscuous mode
[  546.919894][T10766] syzkaller0: entered allmulticast mode
[  546.928271][T10766] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1269'.
[  546.978412][T10769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1268'.
[  547.040219][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'.
[  547.079176][T10770] 8021q: adding VLAN 0 to HW filter on device batadv1
[  547.104834][T10770] team0: Port device batadv1 added
[  547.139825][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'.
[  547.265791][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'.
[  547.311028][T10773] netlink: 'syz.0.1270': attribute type 7 has an invalid length.
[  547.333269][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1270'.
[  547.370760][T10773] gretap0: entered promiscuous mode
[  547.519575][T10773] gretap0: left promiscuous mode
[  547.622428][T10761] Bluetooth: hci0: Opcode 0x080f failed: -4
[  547.897378][T10814] net_ratelimit: 4 callbacks suppressed
[  547.897401][T10814] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  547.925278][T10814] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  548.470622][T10842] netlink: 'syz.4.1288': attribute type 3 has an invalid length.
[  548.796175][T10858] IPv6: addrconf: prefix option has invalid lifetime
[  548.897194][   T29] audit: type=1800 audit(1772222379.345:3): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1295" name="memory.events" dev="tmpfs" ino=1308 res=0 errno=0
[  548.926757][ T5873] Bluetooth: hci0: command 0x0406 tx timeout
[  549.003306][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.012424][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.073233][T10876] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  549.470420][T10884] team0: No ports can be present during mode change
[  549.495290][T10896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.503869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.645727][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.654006][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.664412][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.674653][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.718216][T10909] 8021q: VLANs not supported on gre0
[  550.276309][T10632] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  550.287044][T10632] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  550.295427][T10632] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  550.304513][ T5960] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  550.871133][T10976] __nla_validate_parse: 10 callbacks suppressed
[  550.871153][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  550.887763][T10976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1328'.
[  550.900424][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  551.063035][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  551.071331][    C1] lec:lec_tx_timeout: lec0
[  551.076098][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  551.096320][T10979] syzkaller0: entered promiscuous mode
[  551.102592][T10979] syzkaller0: entered allmulticast mode
[  551.225032][T10986] netlink: 'syz.1.1334': attribute type 10 has an invalid length.
[  551.242839][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'.
[  551.405457][T10986] team0: Port device dummy0 added
[  551.479995][T10996] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1335'.
[  551.547871][T10996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1335'.
[  551.585849][T10989] syzkaller0: entered promiscuous mode
[  551.599672][T10989] syzkaller0: entered allmulticast mode
[  551.651648][T11005] nft_compat: unsupported protocol 0
[  551.782273][T11012] Cannot find add_set index 1 as target
[  551.821633][T11019] Cannot find add_set index 1 as target
[  552.112682][T11042] netlink: 'syz.2.1347': attribute type 1 has an invalid length.
[  552.147865][T11044] netlink: 'syz.4.1346': attribute type 15 has an invalid length.
[  552.203652][T11046] netlink: 'syz.4.1346': attribute type 1 has an invalid length.
[  552.211842][T11046] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1346'.
[  552.222183][T11046] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1346'.
[  552.351440][T11048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'.
[  553.404471][T11042] 8021q: adding VLAN 0 to HW filter on device bond4
[  553.433548][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'.
[  553.580370][T11057] gretap0: entered promiscuous mode
[  553.797824][T11077] net_ratelimit: 7 callbacks suppressed
[  553.797845][T11077] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  554.209213][T11100] bond7: entered promiscuous mode
[  554.215988][T11100] bond7: entered allmulticast mode
[  554.221678][T11100] 8021q: adding VLAN 0 to HW filter on device bond7
[  555.261770][T11158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.270474][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.418093][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.423264][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.427059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.434660][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.460443][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.471751][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.969675][T10642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.083148][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  556.091438][    C1] lec:lec_tx_timeout: lec0
[  556.096156][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  556.596648][T11155] erspan0: entered promiscuous mode
[  556.886737][T11178] IPv6: NLM_F_CREATE should be specified when creating new route
[  556.913894][T11179] __nla_validate_parse: 8 callbacks suppressed
[  556.913922][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'.
[  556.987807][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1386'.
[  557.255920][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1388'.
[  557.271093][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1391'.
[  557.305048][T11201] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  557.479175][T11211] erspan1: entered allmulticast mode
[  557.536864][T11214] xt_CT: You must specify a L4 protocol and not use inversions on it
[  557.657657][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1397'.
[  558.060098][T11242] netlink: 'syz.1.1408': attribute type 1 has an invalid length.
[  558.082701][T11242] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1408'.
[  558.114980][T11242] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1408'.
[  558.170035][T11251] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1410'.
[  558.173731][T11245] netlink: 'syz.4.1407': attribute type 33 has an invalid length.
[  558.264809][T11245] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  558.302737][T11245] bond8 (unregistering): Released all slaves
[  558.329301][T11261] netlink: 'syz.1.1411': attribute type 39 has an invalid length.
[  558.509100][T11273] syzkaller0: entered promiscuous mode
[  558.530341][T11273] syzkaller0: entered allmulticast mode
[  558.697934][T11281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1419'.
[  558.770287][   T29] audit: type=1800 audit(1772222389.215:4): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1420" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1458 res=0 errno=0
[  558.933836][T11298] nbd: must specify a device to reconfigure
[  558.948430][T11294] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  559.344569][ T5873] net_ratelimit: 3 callbacks suppressed
[  559.344588][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.358936][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.392412][T11317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.401242][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.638580][T11333] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1
[  559.849668][T11348] netlink: 'syz.1.1436': attribute type 1 has an invalid length.
[  560.157993][T11365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1444'.
[  560.278916][T11373] erspan0: entered promiscuous mode
[  560.523757][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.576991][T11392] netlink: 'syz.3.1454': attribute type 1 has an invalid length.
[  560.585210][T11392] netlink: 'syz.3.1454': attribute type 2 has an invalid length.
[  560.606704][T11392] syzkaller1: entered promiscuous mode
[  560.661892][T11392] syzkaller1: entered allmulticast mode
[  560.812497][T11410] netlink: 'syz.2.1458': attribute type 11 has an invalid length.
[  560.954760][T11411] "syz.3.1459" (11411) uses obsolete ecb(arc4) skcipher
[  561.047015][T11371] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  561.103023][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  561.111992][    C1] lec:lec_tx_timeout: lec0
[  561.116959][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  561.164415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.173128][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.182464][T10623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.190985][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.253375][T11384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.500780][T11449] syzkaller1: entered promiscuous mode
[  561.507398][T11449] syzkaller1: entered allmulticast mode
[  562.094753][T11485] __nla_validate_parse: 8 callbacks suppressed
[  562.094773][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'.
[  562.185795][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'.
[  562.209173][T11491] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1482'.
[  562.284608][ T5873] Bluetooth: hci2: command 0x0406 tx timeout
[  562.426509][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1484'.
[  562.664610][T11517] º
: renamed from veth1_vlan (while UP)
[  562.799481][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1490'.
[  562.980688][T11535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1492'.
[  563.055488][T11541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.790463][T11583] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  563.909612][T11583] 8021q: adding VLAN 0 to HW filter on device bond11
[  563.938631][T11591] bond11: (slave geneve2): making interface the new active one
[  563.949979][T11591] bond11: (slave geneve2): Enslaving as an active interface with an up link
[  564.021790][T11596] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  564.061534][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'.
[  564.087528][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'.
[  564.291280][T11616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1509'.
[  564.341160][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'.
[  564.384302][T11612] net_ratelimit: 3 callbacks suppressed
[  564.384320][T11612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.685462][T11640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.723299][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.750268][T11643] netlink: 'syz.4.1518': attribute type 16 has an invalid length.
[  564.760577][T11643] netlink: 'syz.4.1518': attribute type 17 has an invalid length.
[  564.820551][T11643] erspan0: left promiscuous mode
[  564.830377][   T29] audit: type=1804 audit(1772222395.275:5): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1518" name="/newroot/289/cgroup.controllers" dev="tmpfs" ino=1495 res=1 errno=0
[  564.865143][   T29] audit: type=1800 audit(1772222395.275:6): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1518" name="cgroup.controllers" dev="tmpfs" ino=1495 res=0 errno=0
[  564.905781][T11643] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.916002][T11643] 8021q: adding VLAN 0 to HW filter on device team0
[  564.930111][T11643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  565.009185][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.018747][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.027354][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.163269][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.469839][T11677] xt_recent: Unsupported userspace flags (000000b1)
[  565.564188][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.635604][T11685] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  565.651621][T11684] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  565.854561][T11691] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  565.918312][T11691] bond4 (unregistering): Released all slaves
[  565.975349][T11698] block nbd0: server does not support multiple connections per device.
[  565.995902][T11698] block nbd0: shutting down sockets
[  566.133039][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  566.141260][    C1] lec:lec_tx_timeout: lec0
[  566.146364][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  566.261784][T11711] netlink: 'syz.4.1536': attribute type 1 has an invalid length.
[  566.493935][T11732] sctp: [Deprecated]: syz.1.1540 (pid 11732) Use of int in maxseg socket option.
[  566.493935][T11732] Use struct sctp_assoc_value instead
[  566.676308][T11752] openvswitch: netlink: Unknown nsh attribute 0
[  566.825005][T11776] netlink: 'syz.4.1547': attribute type 1 has an invalid length.
[  566.861947][T11750] can: request_module (can-proto-0) failed.
[  567.038104][T11784] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  567.220814][T11794] __nla_validate_parse: 14 callbacks suppressed
[  567.220830][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  567.238839][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'.
[  567.249826][T11794] netlink: 'syz.1.1554': attribute type 15 has an invalid length.
[  567.298958][T11789] dvmrp6: entered allmulticast mode
[  567.322775][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  567.323343][T11768] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  567.337829][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'.
[  567.353710][T11794] netlink: 'syz.1.1554': attribute type 15 has an invalid length.
[  567.380681][T11768] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  567.399551][T11768] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  567.418679][T11768] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  567.561355][T11808] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  567.787556][T11816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1561'.
[  567.867685][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'.
[  568.157099][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'.
[  568.238193][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1566'.
[  568.707007][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  568.731616][T11868] bridge_slave_1: left allmulticast mode
[  568.753170][T11868] bridge_slave_1: left promiscuous mode
[  568.767981][T11868] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.826205][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1579'.
[  568.838705][T11868] bridge_slave_0: left promiscuous mode
[  568.853928][T11868] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.227033][T11900] netlink: 'syz.4.1584': attribute type 1 has an invalid length.
[  569.360248][T11901] xt_hashlimit: invalid interval
[  569.497216][    C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  569.513633][T11912] xt_TPROXY: Can be used only with -p tcp or -p udp
[  569.673004][T11914] veth0_macvtap: left promiscuous mode
[  570.039295][T11941] net_ratelimit: 24 callbacks suppressed
[  570.039321][T11941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.481756][T11973] openvswitch: netlink: IP tunnel dst address not specified
[  570.678723][T11977] IPVS: length: 24 != 12312
[  571.153065][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  571.161227][    C1] lec:lec_tx_timeout: lec0
[  571.166191][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  571.220462][T12005] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  571.652254][T12019] ip6gre3: entered allmulticast mode
[  571.778930][T12022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  572.169507][T12037] netlink: 'syz.4.1628': attribute type 1 has an invalid length.
[  572.246809][T12040] __nla_validate_parse: 12 callbacks suppressed
[  572.246833][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'.
[  572.693685][T12061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1636'.
[  572.766798][T12061] netlink: 'syz.1.1636': attribute type 4 has an invalid length.
[  572.962942][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'.
[  572.986891][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'.
[  573.049226][T12072] xt_bpf: check failed: parse error
[  573.098248][T12079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.642370][T12097] bond5: Unable to set down delay as MII monitoring is disabled
[  573.665013][T12097] bond5 (unregistering): Released all slaves
[  573.800747][T12095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  574.191924][T12124] netlink: 'syz.4.1655': attribute type 5 has an invalid length.
[  574.310402][T12130] bond0: entered promiscuous mode
[  574.328394][T12130] macvlan3: entered promiscuous mode
[  574.335736][T12130] macvlan3: entered allmulticast mode
[  574.342520][T12130] bond0: (slave macvlan3): Opening slave failed
[  575.150291][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'.
[  575.222210][T12181] netlink: 'syz.3.1673': attribute type 2 has an invalid length.
[  575.738410][T12197] delete_channel: no stack
[  575.864380][T12197] netlink: 'syz.2.1679': attribute type 21 has an invalid length.
[  576.055122][T12206] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1683'.
[  576.076918][T12206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1683'.
[  576.098010][T12206] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1683'.
[  576.173059][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  576.181240][    C1] lec:lec_tx_timeout: lec0
[  576.186145][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  576.295755][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'.
[  576.305670][T12216] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1686'.
[  576.694329][T12247] bond12: entered promiscuous mode
[  576.707426][T12254] netlink: 'syz.3.1695': attribute type 11 has an invalid length.
[  576.891996][T12270] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000
[  576.950107][T12270] x_tables: duplicate underflow at hook 2
[  577.183471][T12282] tipc: Enabling of bearer <eth:pim6reg> rejected, failed to enable media
[  577.260596][T12286] __nla_validate_parse: 3 callbacks suppressed
[  577.260617][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  577.305685][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  577.615114][T12305] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  577.769792][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  577.782091][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  577.793408][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  577.860853][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  577.923662][T12321] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  577.981479][T12326] 8021q: adding VLAN 0 to HW filter on device bond8
[  577.990774][T12321] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  578.007551][T12330] netlink: 'syz.4.1716': attribute type 1 has an invalid length.
[  578.007586][T12326] netlink: 'syz.4.1716': attribute type 1 has an invalid length.
[  578.233405][T12338] xt_TPROXY: Can be used only with -p tcp or -p udp
[  578.257145][T12338] sctp: [Deprecated]: syz.1.1719 (pid 12338) Use of int in max_burst socket option.
[  578.257145][T12338] Use struct sctp_assoc_value instead
[  578.279222][T12340] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1721'.
[  578.345694][T12342] syzkaller0: entered promiscuous mode
[  578.369265][T12342] syzkaller0: entered allmulticast mode
[  578.369781][T12344] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1723'.
[  578.408941][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1722'.
[  578.499879][T12349] delete_channel: no stack
[  578.534841][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'.
[  579.120051][T12380] xt_limit: Overflow, try lower: 604147548/4200216962
[  579.671039][T12408] netlink: 'syz.0.1742': attribute type 9 has an invalid length.
[  579.693080][T12408] netlink: 'syz.0.1742': attribute type 11 has an invalid length.
[  579.711220][T12408] netlink: 'syz.0.1742': attribute type 12 has an invalid length.
[  579.864675][T12415] pim6reg: entered allmulticast mode
[  580.106533][T12433] xt_hashlimit: size too large, truncated to 1048576
[  580.876549][T12464] netlink: 'syz.3.1757': attribute type 2 has an invalid length.
[  581.193082][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  581.201247][    C1] lec:lec_tx_timeout: lec0
[  581.207397][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  581.216173][T12486] netlink: 'syz.4.1761': attribute type 1 has an invalid length.
[  581.419807][T12497] bridge0: port 2(gretap0) entered blocking state
[  581.426658][T12497] bridge0: port 2(gretap0) entered disabled state
[  581.434017][T12497] gretap0: entered allmulticast mode
[  581.442541][T12497] gretap0: entered promiscuous mode
[  581.449903][T12497] bridge0: port 2(gretap0) entered blocking state
[  581.456646][T12497] bridge0: port 2(gretap0) entered forwarding state
[  582.335180][T12500] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  582.394958][T12559] netlink: 'syz.1.1785': attribute type 1 has an invalid length.
[  582.490148][T12564] __nla_validate_parse: 18 callbacks suppressed
[  582.490265][T12564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1787'.
[  582.664898][T12569] netlink: 524 bytes leftover after parsing attributes in process `syz.1.1790'.
[  582.671686][T12573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1792'.
[  582.708107][T12569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1790'.
[  582.720041][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'.
[  582.730526][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'.
[  583.086127][T12586] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 1, id = 0
[  583.306133][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  583.437796][T12606] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  583.448081][T12606] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1802'.
[  583.564576][ T5873] Bluetooth: hci4: command 0x0401 tx timeout
[  583.629989][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'.
[  583.639495][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'.
[  583.651681][T12620] netlink: 'syz.4.1805': attribute type 14 has an invalid length.
[  583.660310][T12620] netlink: 'syz.4.1805': attribute type 13 has an invalid length.
[  584.100826][T12649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.279893][T12662] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  584.299280][T12662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  585.432747][T12737] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  585.538257][T12746] netlink: 'syz.4.1842': attribute type 11 has an invalid length.
[  585.656425][ T5873] Bluetooth: hci4: command 0x0401 tx timeout
[  585.734557][T12755] openvswitch: netlink: Flow key attr not present in new flow.
[  585.767314][T12758] block nbd0: Unsupported socket: should be TCP or UNIX.
[  585.790647][T12758] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  585.808611][T12760] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  585.863820][T12760] team1: entered promiscuous mode
[  585.869851][T12760] team1: entered allmulticast mode
[  586.046134][T12775] veth0: entered promiscuous mode
[  586.057659][T12771] veth0: left promiscuous mode
[  586.190472][T12780] team0: Device gtp1 is up. Set it down before adding it as a team port
[  586.223035][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  586.231168][    C1] lec:lec_tx_timeout: lec0
[  586.235998][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  586.641073][T12794] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  586.696979][T12794] 8021q: adding VLAN 0 to HW filter on device bond4
[  586.726251][T12799] ipt_ECN: cannot use operation on non-tcp rule
[  586.838312][T12802] x_tables: duplicate underflow at hook 2
[  587.638211][T12854] netlink: 'syz.2.1880': attribute type 39 has an invalid length.
[  587.648255][T12858] netlink: 'syz.0.1881': attribute type 3 has an invalid length.
[  587.702420][T12860] geneve3: entered promiscuous mode
[  587.710446][T12860] geneve3: entered allmulticast mode
[  587.717908][T11747] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  587.735147][T11747] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  587.746340][T11747] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  587.755147][T11747] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  587.869263][T12866] syzkaller1: entered promiscuous mode
[  587.875183][T12866] syzkaller1: entered allmulticast mode
[  588.006501][T12873] netlink: 'syz.2.1887': attribute type 3 has an invalid length.
[  588.305281][T12899] __nla_validate_parse: 16 callbacks suppressed
[  588.305305][T12899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1895'.
[  588.376364][T12904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.388936][T12904] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  588.422631][T12904] 8021q: adding VLAN 0 to HW filter on device bond6
[  588.519927][T12916] netlink: 'syz.2.1899': attribute type 1 has an invalid length.
[  588.585874][T12916] bond7: entered promiscuous mode
[  588.591451][T12916] 8021q: adding VLAN 0 to HW filter on device bond7
[  588.864019][T12937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  589.164144][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  589.296221][T12956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1909'.
[  589.306520][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1909'.
[  589.495344][T12962] bond8: Unable to set down delay as MII monitoring is disabled
[  589.506343][T12962] bond8 (unregistering): Released all slaves
[  589.531674][T12968] netlink: 'syz.4.1913': attribute type 4 has an invalid length.
[  589.539891][T12968] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1913'.
[  589.677821][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1915'.
[  589.788744][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'.
[  590.030162][T12993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'.
[  590.128313][T12999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  590.477698][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'.
[  590.543554][T13027] netlink: 'syz.4.1930': attribute type 12 has an invalid length.
[  590.551762][T13026] netlink: 'syz.4.1930': attribute type 12 has an invalid length.
[  590.573691][T13027] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1930'.
[  591.781116][T13116] IPv6: sit1: Disabled Multicast RS
[  591.802669][T13116] sit1: entered allmulticast mode
[  592.125361][T13126] 8021q: adding VLAN 0 to HW filter on device bond3
[  592.182424][T13126] 8021q: adding VLAN 0 to HW filter on device bond3
[  592.245931][T13126] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  592.260315][T13126] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  592.523009][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6290 ms
[  592.531188][    C1] lec:lec_tx_timeout: lec0
[  592.536785][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  592.878728][T13173] netlink: 'syz.4.1971': attribute type 2 has an invalid length.
[  592.916670][T13175] netlink: 'syz.4.1971': attribute type 2 has an invalid length.
[  592.986871][T13177] openvswitch: netlink: IP tunnel dst address not specified
[  593.198971][T13193] netlink: 'syz.2.1976': attribute type 21 has an invalid length.
[  593.285559][T13203] netlink: 'syz.3.1979': attribute type 1 has an invalid length.
[  593.294708][T13204] netlink: 'syz.3.1979': attribute type 1 has an invalid length.
[  593.346165][T13206] __nla_validate_parse: 10 callbacks suppressed
[  593.346186][T13206] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1979'.
[  593.621764][T13217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1982'.
[  593.664359][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'.
[  594.155784][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'.
[  594.240525][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  594.475461][T13279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2005'.
[  594.508104][T13279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2005'.
[  594.601506][T13285] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2007'.
[  594.698736][T13290] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2006'.
[  594.718473][T13289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.725909][T13289] IPv6: NLM_F_CREATE should be set when creating new route
[  594.925682][T13303] team0: Port device team_slave_0 removed
[  595.019265][T13313] 8021q: VLANs not supported on ip_vti0
[  595.086932][T13318] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2016'.
[  595.142185][T13321] bridge11: the hash_elasticity option has been deprecated and is always 16
[  595.255374][T13330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.349276][T13384] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  596.445406][T13390] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  596.455121][T13390] team0: Device macvlan3 is already an upper device of the team interface
[  596.487517][T13395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.517638][T13397] xt_l2tp: invalid flags combination: 0
[  596.575895][T13393] geneve2: entered promiscuous mode
[  596.581496][T13393] geneve2: entered allmulticast mode
[  596.604353][T13400] dvmrp6: entered allmulticast mode
[  596.616562][T11765] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  596.626491][T11765] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  596.783186][T11765] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  596.822276][T11765] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  597.258610][T13438] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  597.509179][T13448] netlink: 'syz.0.2058': attribute type 10 has an invalid length.
[  597.518301][T13448] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.526157][T13448] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.649418][T13460] netlink: 'syz.4.2062': attribute type 1 has an invalid length.
[  597.743616][T13467] 8021q: VLANs not supported on sit0
[  597.771455][T13469] syz_tun: entered allmulticast mode
[  597.837431][T13466] syz_tun: left allmulticast mode
[  597.976058][T13481] netlink: 'syz.1.2070': attribute type 21 has an invalid length.
[  597.988874][T13481] IPv6: NLM_F_CREATE should be specified when creating new route
[  598.177374][T13498] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  598.283005][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  598.291097][    C1] lec:lec_tx_timeout: lec0
[  598.480653][T13515] netlink: 'syz.4.2077': attribute type 1 has an invalid length.
[  598.497662][T13516] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  598.520110][T13516] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  598.531197][T13516] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  598.541303][T13516] netlink: 'syz.1.2078': attribute type 2 has an invalid length.
[  598.550218][T13516] __nla_validate_parse: 19 callbacks suppressed
[  598.550244][T13516] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2078'.
[  598.737873][T13529] netlink: 210796 bytes leftover after parsing attributes in process `syz.0.2080'.
[  598.802025][T13533] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  599.007942][T13545] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2089'.
[  599.091493][T13551] openvswitch: netlink: Missing key (keys=40, expected=100)
[  599.157385][T13553] syzkaller0: entered promiscuous mode
[  599.163814][T13553] syzkaller0: entered allmulticast mode
[  599.422204][T13565] netlink: 4108 bytes leftover after parsing attributes in process `syz.2.2095'.
[  599.449558][T13565] openvswitch: netlink: Flow key attr not present in new flow.
[  599.654251][T13575] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2099'.
[  599.683088][T13575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2099'.
[  600.435000][T13623] netlink: 'syz.1.2107': attribute type 1 has an invalid length.
[  600.456009][T13625] netlink: 'syz.0.2108': attribute type 16 has an invalid length.
[  600.465584][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2108'.
[  600.634949][T13632] netlink: 'syz.1.2109': attribute type 11 has an invalid length.
[  600.643861][T13632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2109'.
[  600.744892][T13636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2110'.
[  600.757643][T13636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2110'.
[  600.914347][T13650] netlink: 'syz.4.2115': attribute type 2 has an invalid length.
[  600.945349][T13650] tipc: Started in network mode
[  600.953362][T13650] tipc: Node identity 1340008, cluster identity 4711
[  600.960653][T13650] tipc: Node number set to 20185096
[  601.012805][T13651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  601.124233][T13650] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  601.156438][T13650] bond10 (unregistering): Released all slaves
[  601.329157][T13672] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004
[  601.507819][T13685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  601.542144][T13687] ipvlan0: entered allmulticast mode
[  601.554402][T13687] batadv_slave_1: entered allmulticast mode
[  601.600127][T13687] ipvlan1: entered allmulticast mode
[  601.926159][T13713] atomic_op ffff8880552c9998 conn xmit_atomic 0000000000000000
[  601.958263][T13714] vlan2: entered allmulticast mode
[  601.968041][T13714] hsr0: entered allmulticast mode
[  601.974106][T13714] hsr_slave_0: entered allmulticast mode
[  601.980444][T13714] hsr_slave_1: entered allmulticast mode
[  602.866003][T13751] netlink: 'syz.2.2146': attribute type 11 has an invalid length.
[  603.112112][T13764] validate_nla: 8 callbacks suppressed
[  603.112137][T13764] netlink: 'syz.2.2150': attribute type 14 has an invalid length.
[  603.140061][T13761] syzkaller1: entered promiscuous mode
[  603.149629][T13761] syzkaller1: entered allmulticast mode
[  603.155896][T13764] netlink: 'syz.2.2150': attribute type 13 has an invalid length.
[  603.468761][T13784] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  603.855964][T13808] __nla_validate_parse: 13 callbacks suppressed
[  603.855985][T13808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2165'.
[  604.309588][T13828] bond7 (unregistering): Released all slaves
[  604.402539][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2179'.
[  604.533925][T13849] veth0_to_team: entered promiscuous mode
[  604.553049][T13849] veth0_to_team: left promiscuous mode
[  604.947361][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'.
[  606.634654][ T8032] lec:lec_start_xmit: lec0:No lecd attached
[  606.663690][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'.
[  606.871049][T13937] syzkaller1: entered promiscuous mode
[  606.903012][T13937] syzkaller1: entered allmulticast mode
[  607.603772][T13978] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  607.922873][T13995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2217'.
[  608.249077][T14009] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  608.317727][T14009] bond5 (unregistering): Released all slaves
[  608.394360][T14017] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  608.552651][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2223'.
[  608.596187][T14034] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2224'.
[  608.615663][T14034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2224'.
[  608.740081][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'.
[  609.020241][T14062] syzkaller0: entered promiscuous mode
[  609.026762][T14062] syzkaller0: entered allmulticast mode
[  609.707460][T14100] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2244'.
[  609.801369][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'.
[  609.874339][T14107] 8021q: VLANs not supported on tunl0
[  609.955906][T14113] netlink: 'syz.2.2247': attribute type 15 has an invalid length.
[  610.006023][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'.
[  610.230472][T14135] netlink: 'syz.3.2254': attribute type 4 has an invalid length.
[  611.006595][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2265'.
[  611.016356][T14196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2265'.
[  611.096076][T14200] netlink: 'syz.3.2267': attribute type 1 has an invalid length.
[  611.149258][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'.
[  611.199914][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'.
[  611.222247][T14200] 8021q: adding VLAN 0 to HW filter on device bond5
[  611.309857][T14208] veth9: entered promiscuous mode
[  611.321976][T14208] bond5: (slave veth9): Enslaving as an active interface with a down link
[  611.336531][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'.
[  611.348380][T14200] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2267'.
[  611.646613][T14226] netlink: 'syz.2.2274': attribute type 1 has an invalid length.
[  611.655303][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'.
[  611.757175][T14225] netlink: 'syz.4.2272': attribute type 39 has an invalid length.
[  611.761013][T14226] 8021q: adding VLAN 0 to HW filter on device bond8
[  611.828085][T14233] bond8: (slave veth9): Enslaving as an active interface with a down link
[  611.876415][T14226] 8021q: adding VLAN 0 to HW filter on device batadv2
[  611.898997][T14226] bond8: (slave batadv2): making interface the new active one
[  611.915250][T14226] batadv2: entered promiscuous mode
[  611.921262][T14226] bond8: (slave batadv2): Enslaving as an active interface with an up link
[  612.043023][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms
[  612.051137][    C1] lec:lec_tx_timeout: lec0
[  612.096860][T14249] openvswitch: netlink: Flow actions attr not present in new flow.
[  612.847565][T14295] syzkaller0: entered promiscuous mode
[  612.875938][T14295] syzkaller0: entered allmulticast mode
[  613.075636][T14313] netlink: 'syz.0.2299': attribute type 1 has an invalid length.
[  613.195954][T14313] 8021q: adding VLAN 0 to HW filter on device bond13
[  613.317707][T14313] 8021q: adding VLAN 0 to HW filter on device bond13
[  613.334030][T14313] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  613.360532][T14313] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  613.529668][T14320] veth13: entered promiscuous mode
[  613.541213][T14333] netlink: 'syz.1.2304': attribute type 1 has an invalid length.
[  613.561163][T14320] bond13: (slave veth13): Enslaving as an active interface with a down link
[  613.599403][T14321] vlan3: entered allmulticast mode
[  613.605068][T14321] bond13: entered allmulticast mode
[  613.671602][T14337] : entered promiscuous mode
[  613.703725][T14344] sctp: [Deprecated]: syz.3.2308 (pid 14344) Use of int in maxseg socket option.
[  613.703725][T14344] Use struct sctp_assoc_value instead
[  613.805879][T14346] hsr_slave_0: left promiscuous mode
[  613.824022][T14346] hsr_slave_1: left promiscuous mode
[  613.875570][T14337] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  613.883229][T14354] vcan0: entered allmulticast mode
[  614.155408][T14375] hsr_slave_0: left promiscuous mode
[  614.166967][T14375] hsr_slave_1: left promiscuous mode
[  614.224356][T14379] delete_channel: no stack
[  614.286681][T14380] syzkaller0: entered promiscuous mode
[  614.292307][T14380] syzkaller0: entered allmulticast mode
[  614.662650][T14404] netlink: 'syz.3.2324': attribute type 1 has an invalid length.
[  614.716287][T14406] __nla_validate_parse: 9 callbacks suppressed
[  614.716308][T14406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2324'.
[  615.980241][T14404] 8021q: adding VLAN 0 to HW filter on device bond6
[  616.065170][T14415] netlink: 'syz.4.2326': attribute type 1 has an invalid length.
[  616.147015][T14416] netlink: 'syz.0.2325': attribute type 23 has an invalid length.
[  616.162313][T14423] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  616.188721][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'.
[  616.217275][T14423] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  616.230872][T14423] bond11: (slave ip6gre2): making interface the new active one
[  616.240195][T14423] bond11: (slave ip6gre2): Enslaving as an active interface with an up link
[  616.245711][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'.
[  616.262175][T14413] delete_channel: no stack
[  616.273522][T14426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'.
[  616.306027][T14420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2328'.
[  616.337737][T14431] syzkaller0: entered promiscuous mode
[  616.347782][T14431] syzkaller0: entered allmulticast mode
[  616.360197][T14420] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2328'.
[  616.369717][T14420] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  616.557551][T14442] openvswitch: netlink: Multiple metadata blocks provided
[  616.575296][T14440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2333'.
[  616.611567][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'.
[  616.662148][T14452] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2334'.
[  616.703461][T14452] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2334'.
[  616.984376][T14469] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002
[  617.205151][T14484] netlink: 'syz.3.2346': attribute type 10 has an invalid length.
[  617.299968][T14488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.377111][T14492] netlink: 'syz.3.2349': attribute type 1 has an invalid length.
[  617.520938][T14492] 8021q: adding VLAN 0 to HW filter on device bond7
[  617.538409][T14496] bond7: entered allmulticast mode
[  617.929753][T14527] syzkaller0: entered promiscuous mode
[  617.935423][T14527] syzkaller0: entered allmulticast mode
[  618.800171][T14574] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  618.808630][T14574] netlink: 'syz.0.2370': attribute type 2 has an invalid length.
[  618.821047][T14574] netlink: 'syz.0.2370': attribute type 2 has an invalid length.
[  618.830201][T14574] netlink: 'syz.0.2370': attribute type 2 has an invalid length.
[  618.875309][T14576] block nbd3: not configured, cannot reconfigure
[  619.114916][T14586] bond8: entered promiscuous mode
[  619.135122][T14592] netlink: 'syz.2.2375': attribute type 1 has an invalid length.
[  619.300981][T14607] netlink: 'syz.0.2378': attribute type 33 has an invalid length.
[  619.917583][T14643] __nla_validate_parse: 12 callbacks suppressed
[  619.917605][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'.
[  619.994247][T14648] netlink: 476 bytes leftover after parsing attributes in process `syz.0.2387'.
[  620.003449][T14648] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2387'.
[  620.027460][T14643] 8021q: adding VLAN 0 to HW filter on device bond12
[  620.052593][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'.
[  620.100147][T14662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2394'.
[  620.689851][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.698346][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.706961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.838216][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'.
[  620.918383][T14719] 8021q: adding VLAN 0 to HW filter on device bond14
[  621.143571][T14741] bond8: (slave gretap1): making interface the new active one
[  621.183663][T14741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.224751][T14741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.236820][T14741] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  621.356681][T14741] syz.1.2417 (14741) used greatest stack depth: 16192 bytes left
[  621.383438][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2424'.
[  621.461740][T14760] veth0_to_team: entered promiscuous mode
[  621.474925][T14760] veth0_to_team: left promiscuous mode
[  621.637367][T14779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.646511][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.706716][T14767] team0: Device batadv1 failed to change mtu
[  621.832438][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'.
[  621.860496][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2433'.
[  621.866735][T14797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'.
[  622.142452][T14818] validate_nla: 3 callbacks suppressed
[  622.142472][T14818] netlink: 'syz.4.2439': attribute type 1 has an invalid length.
[  622.191779][T14818] netlink: 'syz.4.2439': attribute type 7 has an invalid length.
[  622.218303][T14818] netlink: 'syz.4.2439': attribute type 8 has an invalid length.
[  622.494956][T14835] netlink: 'syz.3.2442': attribute type 5 has an invalid length.
[  622.895936][T14879] sch_fq: defrate 0 ignored.
[  622.975723][T11771] batadv2: left promiscuous mode
[  623.061529][T14883] netlink: 'syz.3.2454': attribute type 33 has an invalid length.
[  623.197024][T14893] syzkaller0: entered promiscuous mode
[  623.210512][T14893] syzkaller0: entered allmulticast mode
[  623.305071][T14886] syzkaller0: left promiscuous mode
[  623.319706][T14886] syzkaller0: left allmulticast mode
[  623.963735][T14939] openvswitch: netlink: IP tunnel dst address not specified
[  624.198702][T14949] netlink: 'syz.0.2471': attribute type 3 has an invalid length.
[  624.530261][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  624.770327][T14982] xt_TPROXY: Can be used only with -p tcp or -p udp
[  625.327441][T15018] __nla_validate_parse: 12 callbacks suppressed
[  625.327461][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2492'.
[  625.465510][T15018] 8021q: adding VLAN 0 to HW filter on device bond9
[  625.806026][T11771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.064500][T15059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.073871][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.224745][T15063] geneve2: entered promiscuous mode
[  626.238342][T15063] geneve2: entered allmulticast mode
[  626.254005][T11753] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  626.276845][T11753] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  626.305292][T15065] sctp: [Deprecated]: syz.0.2505 (pid 15065) Use of struct sctp_assoc_value in delayed_ack socket option.
[  626.305292][T15065] Use struct sctp_sack_info instead
[  626.333438][T11753] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  626.344530][T11753] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  626.443662][T11753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.452413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.465219][T11764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.708587][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'.
[  626.800889][T15095] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.810296][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.939080][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2517'.
[  626.975556][T15104] FAULT_INJECTION: forcing a failure.
[  626.975556][T15104] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  626.994357][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.1.2518 Not tainted syzkaller #0 PREEMPT(full) 
[  626.994388][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  626.994403][T15104] Call Trace:
[  626.994411][T15104]  <TASK>
[  626.994421][T15104]  dump_stack_lvl+0xe8/0x150
[  626.994460][T15104]  should_fail_ex+0x412/0x560
[  626.994493][T15104]  _copy_from_user+0x2d/0xb0
[  626.994528][T15104]  kstrtouint_from_user+0xd6/0x180
[  626.994559][T15104]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  626.994606][T15104]  proc_fail_nth_write+0x8e/0x210
[  626.994638][T15104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  626.994676][T15104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  626.994709][T15104]  vfs_write+0x29a/0xb90
[  626.994749][T15104]  ? __pfx_vfs_write+0x10/0x10
[  626.994774][T15104]  ? __fget_files+0x2a/0x420
[  626.994818][T15104]  ? __fget_files+0x3a0/0x420
[  626.994849][T15104]  ? __fget_files+0x2a/0x420
[  626.994891][T15104]  ksys_write+0x150/0x270
[  626.994917][T15104]  ? __pfx_ksys_write+0x10/0x10
[  626.994954][T15104]  do_syscall_64+0x14d/0xf80
[  626.994989][T15104]  ? trace_irq_disable+0x3b/0x150
[  626.995023][T15104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.995045][T15104]  ? clear_bhb_loop+0x40/0x90
[  626.995074][T15104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.995096][T15104] RIP: 0033:0x7f1e4835cfce
[  626.995118][T15104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  626.995137][T15104] RSP: 002b:00007f1e4924bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  626.995161][T15104] RAX: ffffffffffffffda RBX: 00007f1e4924c6c0 RCX: 00007f1e4835cfce
[  626.995178][T15104] RDX: 0000000000000001 RSI: 00007f1e4924c0a0 RDI: 0000000000000006
[  626.995191][T15104] RBP: 00007f1e4924c090 R08: 0000000000000000 R09: 0000000000000000
[  626.995205][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.995217][T15104] R13: 00007f1e48616038 R14: 00007f1e48615fa0 R15: 00007ffff6aebd58
[  626.995253][T15104]  </TASK>
[  627.208503][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.831463][T15145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2525'.
[  627.968973][T15157] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2533'.
[  630.043216][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms
[  630.051433][    C1] lec:lec_tx_timeout: lec0
[  630.630785][T15124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  630.943328][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'.
[  631.019642][T15200] net_ratelimit: 1 callbacks suppressed
[  631.019662][T15200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.041307][T15196] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2542'.
[  631.089851][T15200] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2543'.
[  631.451759][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'.
[  631.488877][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2549'.
[  631.565050][T11771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.654580][T15235] syzkaller0: entered promiscuous mode
[  631.660125][T15235] syzkaller0: entered allmulticast mode
[  631.694837][T15239] syz_tun: entered allmulticast mode
[  631.705831][T15242] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  632.169735][T15238] syz_tun: left allmulticast mode
[  632.204449][T11765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.212930][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.222800][T11764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.368555][T15285] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2568'.
[  632.381150][T15280] syzkaller1: entered promiscuous mode
[  632.387109][T15280] syzkaller1: entered allmulticast mode
[  632.400058][T15286] netlink: 'syz.4.2569': attribute type 3 has an invalid length.
[  632.405116][T15280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2566'.
[  632.698671][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'.
[  632.708676][T15296] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  632.781367][T15307] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2573'.
[  633.085235][T15321] syzkaller0: entered promiscuous mode
[  633.104231][T15321] syzkaller0: entered allmulticast mode
[  633.240655][T15332] pim6reg1: entered promiscuous mode
[  633.246885][T15332] pim6reg1: entered allmulticast mode
[  633.495596][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'.
[  635.514301][T15289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.745434][T15360] tipc: New replicast peer: 255.255.255.255
[  635.752227][T15360] tipc: Enabled bearer <udp:syz2>, priority 10
[  635.834162][T15368] netlink: 'syz.2.2591': attribute type 2 has an invalid length.
[  635.841134][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.851178][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.864985][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.884693][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.895604][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.928413][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.950267][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  635.991942][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  637.323691][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.964205][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.972431][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.981828][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.715114][T15365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.724622][T15360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  638.919008][T15403] __nla_validate_parse: 1 callbacks suppressed
[  638.919028][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'.
[  638.955968][T15405] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2602'.
[  639.024441][T15404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2601'.
[  639.074955][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2604'.
[  639.088020][T15410] veth0_macvtap: left promiscuous mode
[  639.135005][T15412] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2605'.
[  639.176036][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'.
[  639.186104][T15412] 8021q: VLANs not supported on ip_vti0
[  639.199444][T15420] netlink: 'syz.0.2604': attribute type 10 has an invalid length.
[  639.221019][T15422] netlink: 'syz.1.2607': attribute type 10 has an invalid length.
[  639.254893][T15410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2604'.
[  639.346573][T15418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2603'.
[  639.777512][T15448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2614'.
[  639.881883][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'.
[  639.893315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.893508][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.923043][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.932039][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.084189][T15452] 8021q: adding VLAN 0 to HW filter on device bond15
[  640.393116][T15489] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  641.058996][T15515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.069544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.161876][T15526] bond14: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  641.175319][T15526] bond14: entered promiscuous mode
[  641.180601][T15526] bond14: entered allmulticast mode
[  641.186473][T15526] 8021q: adding VLAN 0 to HW filter on device bond14
[  641.516549][T15551] netlink: 'syz.3.2638': attribute type 83 has an invalid length.
[  641.859923][T15577] netlink: 'syz.4.2646': attribute type 9 has an invalid length.
[  642.854294][T15640] ip6t_srh: unknown srh invflags 4000
[  643.085241][T11764] net_ratelimit: 6 callbacks suppressed
[  643.085263][T11764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.154409][T15663] netlink: 'syz.0.2672': attribute type 8 has an invalid length.
[  643.501287][T15695] netlink: 'syz.1.2680': attribute type 24 has an invalid length.
[  643.571104][T15679] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  643.728515][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.747774][T11753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.756275][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.984398][T15720] netlink: 'syz.3.2688': attribute type 10 has an invalid length.
[  644.039532][T15725] netlink: 'syz.3.2688': attribute type 10 has an invalid length.
[  644.064895][T15727] netlink: 'syz.0.2687': attribute type 32 has an invalid length.
[  644.131149][T15726] netlink: 'syz.0.2687': attribute type 32 has an invalid length.
[  644.269182][T15720] 
: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  644.380550][T15739] netlink: 'syz.1.2690': attribute type 2 has an invalid length.
[  644.784033][T15758] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  644.797199][T15759] netlink: 'syz.3.2697': attribute type 12 has an invalid length.
[  644.845019][T15759] netlink: 'syz.3.2697': attribute type 8 has an invalid length.
[  644.850046][T15756] netlink: 'syz.4.2696': attribute type 1 has an invalid length.
[  644.926066][T15764] gretap2: entered promiscuous mode
[  644.961241][T15764] bond15: (slave gretap2): making interface the new active one
[  644.971640][T15764] bond15: (slave gretap2): Enslaving as an active interface with an up link
[  644.995509][T15756] macvlan3: entered promiscuous mode
[  645.000884][T15756] macvlan3: entered allmulticast mode
[  645.016001][T15756] bond15: entered promiscuous mode
[  645.031429][T15756] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  645.039261][T15766] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001
[  645.067982][T15756] bond15: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  645.094569][T15756] bond15: left promiscuous mode
[  645.357954][T15784] IPVS: length: 8 != 1152
[  645.639882][T15793] ip6t_REJECT: ECHOREPLY is not supported
[  645.925263][T15808] bridge14: entered promiscuous mode
[  645.930969][T15808] bridge14: entered allmulticast mode
[  645.943486][T15808] team0: Port device bridge14 added
[  646.257558][T15822] xt_NFQUEUE: number of total queues is 0
[  646.331162][T15824] netlink: 'syz.4.2717': attribute type 9 has an invalid length.
[  646.467794][T15833] netlink: 'syz.0.2719': attribute type 1 has an invalid length.
[  646.960064][T15853] __nla_validate_parse: 11 callbacks suppressed
[  646.960088][T15853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'.
[  647.009073][T15858] ip6t_srh: unknown srh invflags 4000
[  647.110553][T15864] IPv6: Can't replace route, no match found
[  647.121907][T15864] IPv6: Can't replace route, no match found
[  647.331232][T15861] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2730'.
[  647.433917][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2737'.
[  647.444226][T15890] netlink: 'syz.0.2737': attribute type 7 has an invalid length.
[  647.452005][T15890] netlink: 'syz.0.2737': attribute type 8 has an invalid length.
[  647.473739][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'.
[  647.600475][T15898] netlink: 'syz.1.2739': attribute type 3 has an invalid length.
[  647.699282][T15909] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2739'.
[  647.709753][T15898] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2739'.
[  647.719846][T15910] netlink: 'syz.0.2741': attribute type 3 has an invalid length.
[  647.740719][T15909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.854211][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'.
[  647.864962][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'.
[  648.005144][T15918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2744'.
[  648.320558][T15947] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  648.351880][T15950] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2755'.
[  648.846137][T11746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.916982][T15994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  648.987547][T16000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.141035][T16009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.150413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.172250][T16008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.182258][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.483694][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.493333][T11764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.502232][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.681746][T16034] validate_nla: 2 callbacks suppressed
[  649.681767][T16034] netlink: 'syz.2.2782': attribute type 1 has an invalid length.
[  649.723261][T16019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.014388][T16043] bond16: option arp_all_targets: invalid value (18446744073709551613)
[  650.094351][T16043] bond16 (unregistering): Released all slaves
[  650.528521][T16067] netlink: 'syz.4.2791': attribute type 1 has an invalid length.
[  650.537996][T16067] netlink: 'syz.4.2791': attribute type 1 has an invalid length.
[  650.962395][T16097] x_tables: duplicate underflow at hook 1
[  651.490252][T16125] netlink: 'syz.2.2808': attribute type 1 has an invalid length.
[  651.580946][T16127] sock: sock_timestamping_bind_phc: sock not bind to device
[  651.673537][T16132] netlink: 'syz.3.2813': attribute type 17 has an invalid length.
[  651.713585][T16136] netlink: 'syz.2.2814': attribute type 11 has an invalid length.
[  651.895691][T16144] netlink: 'syz.1.2815': attribute type 1 has an invalid length.
[  651.946038][T16144] bond11: entered promiscuous mode
[  651.952523][T16144] 8021q: adding VLAN 0 to HW filter on device bond11
[  652.020284][T16144] bond11: (slave bridge10): making interface the new active one
[  652.031346][T16144] bridge10: entered promiscuous mode
[  652.040320][T16161] __nla_validate_parse: 20 callbacks suppressed
[  652.040355][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'.
[  652.066356][T16144] bond11: (slave bridge10): Enslaving as an active interface with an up link
[  652.131029][T16168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2821'.
[  652.135426][T16144] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  652.154612][T16144] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  652.304676][T16174] netlink: 'syz.2.2823': attribute type 24 has an invalid length.
[  652.347004][T16176] ipt_REJECT: ECHOREPLY no longer supported.
[  652.366189][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'.
[  652.376373][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2824'.
[  652.974559][T16173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.306317][T16178] geneve3: entered promiscuous mode
[  653.311792][T16178] geneve3: entered allmulticast mode
[  653.352333][T11763] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.393148][T11763] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  653.413966][T11763] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.422490][T11763] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  653.483612][T11763] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.492053][T11763] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  653.528731][T11763] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.571793][T16213] IPVS: Scheduler module ip_vs_sip not found
[  653.573308][T11763] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  653.632566][T16217] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2830'.
[  653.807513][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2834'.
[  653.910890][T16244] netlink: 5036 bytes leftover after parsing attributes in process `syz.2.2837'.
[  653.922131][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2837'.
[  654.142272][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2841'.
[  654.549779][T16284] syzkaller0: entered promiscuous mode
[  654.555550][T16284] syzkaller0: entered allmulticast mode
[  654.604285][T11771] net_ratelimit: 4 callbacks suppressed
[  654.604306][T11771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.618310][T11771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.627657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.933327][ T5873] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  654.943110][ T5875] Bluetooth: hci0: command 0x0406 tx timeout
[  655.025638][T16279] Bluetooth: hci0: Opcode 0x0c03 failed: -22
[  655.251533][T11753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.317833][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'.
[  656.296332][T16294] syzkaller0: entered promiscuous mode
[  656.302046][T16294] syzkaller0: entered allmulticast mode
[  656.450029][T16317] netlink: 'syz.4.2854': attribute type 17 has an invalid length.
[  656.546026][T16317] gretap0: entered promiscuous mode
[  656.587729][T16317] gretap0: left promiscuous mode
[  656.912271][T16355] x_tables: unsorted underflow at hook 3
[  657.149123][T16379] batadv_slave_1: default FDB implementation only supports local addresses
[  657.230577][T16385] __nla_validate_parse: 4 callbacks suppressed
[  657.230599][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'.
[  657.287772][T16387] xt_l2tp: missing protocol rule (udp|l2tpip)
[  657.776447][T16413] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2885'.
[  657.797197][T16413] vlan2: entered allmulticast mode
[  658.193786][T16420] syzkaller0: entered promiscuous mode
[  658.208575][T16420] syzkaller0: entered allmulticast mode
[  660.236100][T16476] syzkaller0: create flow: hash 3625538494 index 1
[  660.322730][T16470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2900'.
[  660.369300][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.377554][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.385808][T11763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.394642][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.496308][T11764] syzkaller0: tun_net_xmit 76
[  660.501818][T11764] syzkaller0: tun_net_xmit 48
[  660.523525][T16187] syzkaller0: tun_net_xmit 76
[  660.620815][T16494] netlink: 'syz.1.2903': attribute type 39 has an invalid length.
[  660.704413][T16465] syzkaller0: delete flow: hash 3625538494 index 1
[  660.936335][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  660.955376][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  660.974649][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  660.982888][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  660.997518][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  662.509768][T16507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2907'.
[  662.542273][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'.
[  662.665322][T16513] netlink: 'syz.0.2909': attribute type 10 has an invalid length.
[  662.888886][T16526] tipc: New replicast peer: 255.255.255.255
[  662.917768][T16526] tipc: Enabled bearer <udp:syz2>, priority 10
[  662.958301][T11753] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.983106][T11753] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.016945][T11753] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  663.088510][ T5875] Bluetooth: hci5: command tx timeout
[  663.215455][T11753] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.226772][T11753] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.237579][T11753] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  663.284365][T16549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'.
[  663.297362][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'.
[  663.325653][T11753] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.373209][T16553] block nbd0: not configured, cannot reconfigure
[  663.382798][T11753] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.408908][T11753] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  663.474161][T16504] chnl_net:caif_netlink_parms(): no params data found
[  663.508984][T11753] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.532035][T16555] Cannot find del_set index 4 as target
[  663.538657][T16555] Cannot find del_set index 4 as target
[  663.543228][T11753] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.545963][T16555] Cannot find del_set index 4 as target
[  663.593586][T11753] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  663.857477][T16579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'.
[  664.057205][T16504] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.070357][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  664.073819][T16504] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.084934][T16589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2931'.
[  664.133323][T16504] bridge_slave_0: entered allmulticast mode
[  664.147908][T16504] bridge_slave_0: entered promiscuous mode
[  664.162872][T16504] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.181986][T16504] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.196644][T16504] bridge_slave_1: entered allmulticast mode
[  664.217703][T16504] bridge_slave_1: entered promiscuous mode
[  664.243679][T16589] geneve3: entered promiscuous mode
[  664.259052][T16589] geneve3: entered allmulticast mode
[  664.322179][T16601] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2934'.
[  664.444902][T16601] bond2: (slave lo): Releasing backup interface
[  664.454576][T16601] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  664.478851][T16601] team0: Port device dummy0 removed
[  664.497170][T16601] 
: (slave bridge_slave_1): Releasing backup interface
[  664.517478][T16601] 
: (slave bond_slave_0): Releasing backup interface
[  664.554920][T16601] 
: (slave bond_slave_1): Releasing backup interface
[  664.560425][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'.
[  664.581294][T16601] team0: Port device team_slave_0 removed
[  664.589731][T16601] team0: Port device team_slave_1 removed
[  664.596941][T16601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.608634][T16601] bond1: (slave veth3): Releasing active interface
[  664.620772][T16601] team0: Port device batadv1 removed
[  664.632225][T16601] bond5: (slave veth9): Releasing active interface
[  664.724796][T16622] 8021q: adding VLAN 0 to HW filter on device bond16
[  664.761683][T16504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.811285][T16504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.850924][T16634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.864320][T11753] ¾x9ÿ: left allmulticast mode
[  664.869575][T11753] ¾x9ÿ: left promiscuous mode
[  664.896936][T11753] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  664.952795][T11753] veth0_to_bond: left allmulticast mode
[  664.979938][T11753] veth0_to_bond: left promiscuous mode
[  664.993359][T16644] sctp: [Deprecated]: syz.0.2944 (pid 16644) Use of int in maxseg socket option.
[  664.993359][T16644] Use struct sctp_assoc_value instead
[  665.000320][T11753] bridge1: port 2(veth0_to_bond) entered disabled state
[  665.053743][T11753] veth5: left allmulticast mode
[  665.070067][T11753] veth5: left promiscuous mode
[  665.115318][T11753] bridge1: port 1(veth5) entered disabled state
[  665.164885][ T5875] Bluetooth: hci5: command tx timeout
[  665.187494][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'.
[  665.822884][T16686] netlink: 'syz.3.2949': attribute type 13 has an invalid length.
[  666.001094][T11753] dvmrp6 (unregistering): left allmulticast mode
[  667.243888][ T5875] Bluetooth: hci5: command tx timeout
[  668.099146][T11753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.111519][T11753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.123963][T11753] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  668.136823][T11753] bond0 (unregistering): Released all slaves
[  668.148409][T11753] bond1 (unregistering): Released all slaves
[  668.162878][T11753] bond2 (unregistering): Released all slaves
[  668.178374][T11753] bond3 (unregistering): Released all slaves
[  668.200205][T11753] bond4 (unregistering): Released all slaves
[  668.215781][T11753] bond5 (unregistering): Released all slaves
[  668.231756][T11753] bond6 (unregistering): Released all slaves
[  668.247920][T11753] bond7 (unregistering): Released all slaves
[  668.269129][T11753] bond8 (unregistering): (slave veth9): Releasing active interface
[  668.280731][T11753] batadv2: entered promiscuous mode
[  668.291107][T11753] bond8 (unregistering): (slave batadv2): Releasing active interface
[  668.303622][T11753] bond8 (unregistering): Released all slaves
[  668.319735][T16504] team0: Port device team_slave_0 added
[  668.328845][T16504] team0: Port device team_slave_1 added
[  668.385548][T16681] netlink: 'syz.0.2945': attribute type 12 has an invalid length.
[  668.415612][T16681] netlink: 'syz.0.2945': attribute type 29 has an invalid length.
[  668.447161][T16681] __nla_validate_parse: 1 callbacks suppressed
[  668.447184][T16681] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2945'.
[  668.470054][T16681] netlink: 'syz.0.2945': attribute type 1 has an invalid length.
[  668.485800][T16681] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2945'.
[  668.668704][T11753] : left promiscuous mode
[  668.781756][T16504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.797942][T16504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.840796][T16504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.856388][T16504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.878570][T16504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.893400][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'.
[  668.936459][T16504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.991899][T16707] IPv6: Can't replace route, no match found
[  669.005413][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'.
[  669.022107][T16707] IPv6: Can't replace route, no match found
[  669.103620][T16504] hsr_slave_0: entered promiscuous mode
[  669.146307][T16504] hsr_slave_1: entered promiscuous mode
[  669.325879][ T5875] Bluetooth: hci5: command tx timeout
[  669.503978][T16724] syzkaller0: entered promiscuous mode
[  669.509655][T16724] syzkaller0: entered allmulticast mode
[  669.590796][T16724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.762720][T16722] tipc: Resetting bearer <eth:syzkaller0>
[  669.831589][T16722] tipc: Disabling bearer <eth:syzkaller0>
[  670.167854][T11753] hsr_slave_0: left promiscuous mode
[  670.193974][T11753] hsr_slave_1: left promiscuous mode
[  670.206463][T11753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  670.246431][T11753] batman_adv: batadv0: Removing interface: batadv_slave_0
[  670.268181][T11753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  670.292237][T11753] batman_adv: batadv0: Removing interface: batadv_slave_1
[  670.350700][T11753] veth0_macvtap: left promiscuous mode
[  670.623604][T11753] pim6reg (unregistering): left allmulticast mode
[  670.670504][T11753] team0 (unregistering): Port device batadv1 removed
[  670.934905][T11753] team0 (unregistering): Port device team_slave_1 removed
[  670.960761][T11753] team0 (unregistering): Port device team_slave_0 removed
[  671.164079][ T8032] lec:lec_start_xmit: lec0:No lecd attached
[  671.185647][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'.
[  671.306683][T16791] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  671.378476][T16790] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  671.528340][T16797] syzkaller1: entered promiscuous mode
[  671.556531][T16797] syzkaller1: entered allmulticast mode
[  671.868752][T16822] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2984'.
[  671.940309][T11753] IPVS: stop unused estimator thread 0...
[  672.289466][T16504] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  672.321081][T16504] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  672.380171][T16504] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  672.433674][T16504] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  672.596858][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'.
[  672.677412][T16881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2996'.
[  672.749552][T16881] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2996'.
[  672.762711][T16879] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2996'.
[  672.792054][T16881] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  672.814256][T16879] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  672.847652][T16504] 8021q: adding VLAN 0 to HW filter on device bond0
[  672.887009][T16891] netlink: 'syz.1.2997': attribute type 1 has an invalid length.
[  672.900300][T16891] netlink: 'syz.1.2997': attribute type 1 has an invalid length.
[  672.920073][T16891] netlink: 'syz.1.2997': attribute type 8 has an invalid length.
[  672.932344][T16504] 8021q: adding VLAN 0 to HW filter on device team0
[  672.990822][T11746] bridge0: port 1(bridge_slave_0) entered blocking state
[  672.998205][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.053759][T11763] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.061218][T11763] bridge0: port 2(bridge_slave_1) entered forwarding state
[  673.473865][T16912] __nla_validate_parse: 4 callbacks suppressed
[  673.473889][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3001'.
[  673.523872][T16912] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3001'.
[  673.548835][T16917] block nbd0: not configured, cannot reconfigure
[  673.585080][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'.
[  673.629140][T16925] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  673.638226][T16925] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  673.638895][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'.
[  673.670506][T16925] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3003'.
[  673.755758][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'.
[  673.911617][T16937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3005'.
[  673.990692][T16504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  674.189082][T16951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3008'.
[  674.211828][T16504] veth0_vlan: entered promiscuous mode
[  674.244294][T16504] veth1_vlan: entered promiscuous mode
[  674.354900][T16504] veth0_macvtap: entered promiscuous mode
[  674.397131][T16504] veth1_macvtap: entered promiscuous mode
[  674.460452][T16504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  674.509354][T16504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.550832][T11746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.572327][T11746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.598952][T11746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.618193][T11746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.645237][T16965] tipc: Enabled bearer <udp:syz1>, priority 10
[  674.691894][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'.
[  674.876427][T16974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3013'.
[  674.896033][T11771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  674.926462][T11771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.035458][T11763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.065791][T11763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.222881][T16995] syzkaller0: entered promiscuous mode
[  675.234194][T16995] syzkaller0: entered allmulticast mode
[  675.283867][T16995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  675.387027][T17001] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  675.444024][T16987] tipc: Resetting bearer <eth:syzkaller0>
[  675.566664][T16987] tipc: Disabling bearer <eth:syzkaller0>
[  675.908005][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  675.923314][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  675.935313][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  675.945038][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  675.954948][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  676.173474][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  676.181709][    C1] lec:lec_tx_timeout: lec0
[  676.556852][ T5891] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  676.601348][ T5891] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  676.791455][ T5891] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  676.811327][ T5891] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  676.840540][T17065] xt_l2tp: unknown flags: 10
[  676.891529][T17069] sctp: [Deprecated]: syz.3.3033 (pid 17069) Use of int in max_burst socket option.
[  676.891529][T17069] Use struct sctp_assoc_value instead
[  676.925105][T17070] xt_bpf: check failed: parse error
[  676.976701][ T5891] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  677.024665][ T5891] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  677.121399][T17028] chnl_net:caif_netlink_parms(): no params data found
[  677.238517][ T5891] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  677.301526][ T5891] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  677.446676][T17090] bridge_slave_0: left allmulticast mode
[  677.452400][T17090] bridge_slave_0: left promiscuous mode
[  677.516265][T17090] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.554841][T17090] bridge_slave_1: left allmulticast mode
[  677.597062][T17090] bridge_slave_1: left promiscuous mode
[  677.643599][T17090] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.687793][T17090] bond10: (slave veth0_to_bond): Releasing active interface
[  677.739731][T17090] team0: Port device team_slave_0 removed
[  677.803671][T17090] team0: Port device team_slave_1 removed
[  677.829989][T17090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  677.841991][T17090] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.854696][T17090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  677.865744][T17117] netlink: 'syz.2.3045': attribute type 1 has an invalid length.
[  677.880688][T17090] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.895526][T17090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  678.028548][T17120] vlan2: entered promiscuous mode
[  678.043901][T17120] vlan2: entered allmulticast mode
[  678.051464][ T5875] Bluetooth: hci3: command tx timeout
[  678.274614][T17137] netlink: zone id is out of range
[  678.289555][T17137] netlink: zone id is out of range
[  678.319876][T17137] netlink: zone id is out of range
[  678.351924][T17137] netlink: zone id is out of range
[  678.369926][T17137] netlink: zone id is out of range
[  678.375827][T17137] netlink: zone id is out of range
[  678.381115][T17137] netlink: zone id is out of range
[  678.387529][T17137] netlink: zone id is out of range
[  678.392839][T17137] netlink: zone id is out of range
[  678.500935][T17148] xt_hashlimit: max too large, truncated to 1048576
[  678.521905][T17148] xt_hashlimit: size too large, truncated to 1048576
[  678.628143][T17028] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.658806][T17028] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.699835][T17028] bridge_slave_0: entered allmulticast mode
[  678.747001][T17028] bridge_slave_0: entered promiscuous mode
[  678.798792][T17164] netlink: 'syz.1.3052': attribute type 1 has an invalid length.
[  678.809388][T17164] __nla_validate_parse: 7 callbacks suppressed
[  678.809409][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3052'.
[  678.979003][ T5891] bond11 (unregistering): (slave ip6gre2): Releasing backup interface
[  679.038649][T17166] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3055'.
[  679.086559][ T5891] tipc: Disabling bearer <eth:xfrm0>
[  679.162894][ T5891] bond15 (unregistering): (slave gretap2): Releasing active interface
[  679.183982][ T5891] dvmrp6 (unregistering): left allmulticast mode
[  679.473180][ T5891] bond0 (unregistering): Released all slaves
[  679.484600][ T5891] bond1 (unregistering): Released all slaves
[  679.501878][ T5891] bond2 (unregistering): Released all slaves
[  679.522467][ T5891] bond3 (unregistering): Released all slaves
[  679.538391][ T5891] bond4 (unregistering): Released all slaves
[  679.558971][ T5891] bond5 (unregistering): Released all slaves
[  679.575267][ T5891] bond6 (unregistering): Released all slaves
[  679.590282][ T5891] bond7 (unregistering): Released all slaves
[  679.607733][ T5891] bond8 (unregistering): Released all slaves
[  679.633891][ T5891] bond9 (unregistering): Released all slaves
[  679.649240][ T5891] bond10 (unregistering): Released all slaves
[  679.671428][ T5891] bond11 (unregistering): Released all slaves
[  679.686999][ T5891] bond12 (unregistering): Released all slaves
[  679.701748][ T5891] bond13 (unregistering): Released all slaves
[  679.717448][ T5891] bond14 (unregistering): Released all slaves
[  679.735780][ T5891] bond15 (unregistering): Released all slaves
[  679.766756][T17156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.808769][T17028] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.837249][T17028] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.845377][T17028] bridge_slave_1: entered allmulticast mode
[  679.885450][T17028] bridge_slave_1: entered promiscuous mode
[  679.986526][T17156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.072755][ T5891] : left promiscuous mode
[  680.109958][T17180] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3059'.
[  680.128724][ T5875] Bluetooth: hci3: command tx timeout
[  680.143570][T17156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.300807][ T5891] tipc: Left network mode
[  680.337027][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.394613][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.429708][T17156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.672662][T17028] team0: Port device team_slave_0 added
[  680.749137][T17208] syzkaller0: entered promiscuous mode
[  680.779114][T17208] syzkaller0: entered allmulticast mode
[  680.798027][T17028] team0: Port device team_slave_1 added
[  680.979476][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.989508][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.035431][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.050379][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.057778][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.086130][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.101491][T11771] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.209365][T11771] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.343690][T11746] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.351997][T11746] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.460686][T17226] syzkaller1: entered promiscuous mode
[  681.476816][T17226] syzkaller1: entered allmulticast mode
[  681.515842][T17028] hsr_slave_0: entered promiscuous mode
[  681.533304][T17233] xt_connbytes: Forcing CT accounting to be enabled
[  681.543381][T17028] hsr_slave_1: entered promiscuous mode
[  681.550241][T17028] debugfs: 'hsr0' already exists in 'hsr'
[  681.564816][T17028] Cannot create hsr debugfs directory
[  681.594983][T17238] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3071'.
[  681.882497][T17250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3074'.
[  681.935797][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'.
[  681.996821][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'.
[  682.066352][ T5891] hsr_slave_0: left promiscuous mode
[  682.088918][ T5891] hsr_slave_1: left promiscuous mode
[  682.094330][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'.
[  682.213860][ T5875] Bluetooth: hci3: command tx timeout
[  682.936717][T17279] syzkaller0: entered promiscuous mode
[  682.942439][T17279] syzkaller0: entered allmulticast mode
[  682.958228][T17279] IPv6: Can't replace route, no match found
[  682.977733][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3085'.
[  682.990086][T17279] IPv6: Can't replace route, no match found
[  682.997992][T17286] netlink: 'syz.1.3083': attribute type 1 has an invalid length.
[  683.023108][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'.
[  683.063922][T17286] netlink: 'syz.1.3083': attribute type 2 has an invalid length.
[  683.086492][T17286] netlink: 'syz.1.3083': attribute type 2 has an invalid length.
[  683.095620][T17286] netlink: 'syz.1.3083': attribute type 2 has an invalid length.
[  683.140507][T17300] IPv6: NLM_F_CREATE should be specified when creating new route
[  683.301594][ T5891] IPVS: stop unused estimator thread 0...
[  683.498041][T17321] netlink: 'syz.3.3091': attribute type 10 has an invalid length.
[  683.542286][T17319] syzkaller0: entered promiscuous mode
[  683.578617][T17319] syzkaller0: entered allmulticast mode
[  683.937909][T17339] bond0: left promiscuous mode
[  683.942777][T17339] bond_slave_0: left promiscuous mode
[  683.971019][T17339] bond_slave_1: left promiscuous mode
[  683.977242][T17339] bridge_slave_1: left promiscuous mode
[  684.002251][T17339] net_ratelimit: 137 callbacks suppressed
[  684.002263][T17339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  684.034664][T17348] netlink: 'syz.3.3097': attribute type 32 has an invalid length.
[  684.042685][T17348] __nla_validate_parse: 3 callbacks suppressed
[  684.042705][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'.
[  684.201598][T17348] bond9: Setting coupled_control to off (0)
[  684.226416][T17354] ip6tnl0: entered allmulticast mode
[  684.283525][ T5875] Bluetooth: hci3: command tx timeout
[  684.311034][T17357] geneve2: entered promiscuous mode
[  684.325223][T17357] geneve2: entered allmulticast mode
[  684.332436][T11764] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  684.356776][T17357] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3100'.
[  684.366285][T11764] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  684.394904][T11764] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  684.424279][T11764] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  684.529781][T17370] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3101'.
[  684.650520][T17028] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  684.692439][T17028] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  684.794964][T17028] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  684.825553][T17028] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  685.031415][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3107'.
[  685.210591][T17028] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.219978][T17406] syzkaller0: entered promiscuous mode
[  685.227277][T17406] syzkaller0: entered allmulticast mode
[  685.325454][T17028] 8021q: adding VLAN 0 to HW filter on device team0
[  685.384747][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.392051][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state
[  685.424570][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.431825][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state
[  685.824461][T17426] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3114'.
[  685.845952][T17430] lo: Caught tx_queue_len zero misconfig
[  685.880556][T17426] netlink: Unknown conntrack attr (0)
[  685.975339][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  685.991512][T17441] IPv6: NLM_F_CREATE should be specified when creating new route
[  686.126383][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  686.140347][T17444] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3119'.
[  686.176041][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'.
[  686.452847][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3124'.
[  686.748322][T17488] sctp: [Deprecated]: syz.1.3127 (pid 17488) Use of struct sctp_assoc_value in delayed_ack socket option.
[  686.748322][T17488] Use struct sctp_sack_info instead
[  686.802102][T17499] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3130'.
[  686.831208][T17499] netlink: 'syz.0.3130': attribute type 1 has an invalid length.
[  686.903535][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'.
[  686.983113][T17028] veth0_vlan: entered promiscuous mode
[  687.016562][T17028] veth1_vlan: entered promiscuous mode
[  687.086650][T17028] veth0_macvtap: entered promiscuous mode
[  687.106376][T17028] veth1_macvtap: entered promiscuous mode
[  687.156560][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.182192][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.206314][T11746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.228620][T11746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.267080][T11746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.277990][T11746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.318530][T17518] syzkaller1: entered promiscuous mode
[  687.338452][T17518] syzkaller1: entered allmulticast mode
[  687.475389][T11769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.489929][T11769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.545001][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.555423][T17524] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  687.567432][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.696196][T17527] netlink: 'syz.3.3136': attribute type 1 has an invalid length.
[  687.912200][T17539] SET target dimension over the limit!
[  688.304295][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  688.316925][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  688.327608][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  688.340672][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  688.349201][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  688.678166][T17568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  689.075790][T17556] chnl_net:caif_netlink_parms(): no params data found
[  689.201598][T17589] __nla_validate_parse: 8 callbacks suppressed
[  689.201618][T17589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3150'.
[  689.374932][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3150'.
[  689.399492][T17556] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.412586][T17556] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.422283][T17556] bridge_slave_0: entered allmulticast mode
[  689.438746][T17556] bridge_slave_0: entered promiscuous mode
[  689.450096][T17556] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.457787][T17556] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.466415][T17556] bridge_slave_1: entered allmulticast mode
[  689.474909][T17556] bridge_slave_1: entered promiscuous mode
[  689.588905][T17556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.632693][T17556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.656947][T17601] wg1: entered promiscuous mode
[  689.661894][T17601] wg1: entered allmulticast mode
[  689.839404][T17556] team0: Port device team_slave_0 added
[  689.859200][T17556] team0: Port device team_slave_1 added
[  689.886599][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3156'.
[  690.030252][T17556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.042067][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.072586][T17556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.085924][T17556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.093376][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.120007][T17556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.179987][T17623] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3158'.
[  690.400220][T17556] hsr_slave_0: entered promiscuous mode
[  690.437260][T17556] hsr_slave_1: entered promiscuous mode
[  690.456693][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3162'.
[  690.463425][ T5873] Bluetooth: hci2: command tx timeout
[  690.493617][T17556] debugfs: 'hsr0' already exists in 'hsr'
[  690.499423][T17556] Cannot create hsr debugfs directory
[  690.529687][T16802] udevd[16802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
Stopping sshd: [  690.910699][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'.
[  690.920769][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3166'.
[  690.956017][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'.
[  690.993703][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3166'.
[  691.003265][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  691.011312][    C1] lec:lec_tx_timeout: lec0
[  691.025110][T17657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3166'.
stopped /usr/sbin/sshd (pid 5578)
OK
[  691.276556][T17671] netlink: 'syz.3.3171': attribute type 10 has an invalid length.
Stopping crond: [  691.427848][T17556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  691.491480][T17556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
stopped /usr/sbin/crond (pid 5563)
OK
[  692.103353][T17556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
Stopping dhcpcd...
[  692.389180][T17697] syzkaller0: entered promiscuous mode
[  692.413953][T17697] syzkaller0: entered allmulticast mode
[  692.477804][T17556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
stopped /sbin/dhcpcd (pid 5485)
[  692.504437][T17556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.525142][ T5873] Bluetooth: hci2: command tx timeout
[  692.537628][T17556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
Stopping network: [  694.606323][ T5873] Bluetooth: hci2: command tx timeout
[  694.810721][T17556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  694.821311][T17556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.836360][T17556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  694.868963][T17729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  695.094730][T17556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  695.114538][T17556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.148150][T17556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  695.159712][T17746] __nla_validate_parse: 2 callbacks suppressed
[  695.159732][T17746] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3180'.
[  695.587444][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'.
OK
Stopping iptables: [  695.953458][T17556] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  695.968879][T17556] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  695.994047][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  696.031248][T17556] netdevsim netdevsim1 netdevsim2: renamed from eth2
OK
[  696.086142][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'.
[  696.087538][T17556] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  696.240933][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'.
Stopping system message bus: [  696.285185][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'.
[  696.315221][T17800] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3191'.
[  696.391667][T17556] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.422243][T17804] netlink: 'syz.4.3192': attribute type 1 has an invalid length.
[  696.472487][T17556] 8021q: adding VLAN 0 to HW filter on device team0
[  696.499884][T11764] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.507248][T11764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.574133][T11746] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.581628][T11746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  696.611066][T17806] netlink: 'syz.3.3193': attribute type 1 has an invalid length.
[  696.620692][T17806] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3193'.
[  696.630996][T17806] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3193'.
[  696.645734][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'.
[  696.657253][T17808] netlink: 'syz.4.3194': attribute type 10 has an invalid length.
[  696.681433][T17808] batman_adv: batadv0: Adding interface: netdevsim0
[  696.694267][T17808] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.703444][ T5873] Bluetooth: hci2: command tx timeout
[  696.735568][T17808] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  696.884360][T17808] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.949208][T17808] bond0: (slave rose0): Enslaving as an active interface with an up link
[  697.288510][T17830] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  697.305836][T17556] 8021q: adding VLAN 0 to HW filter on device batadv0
done
[  697.524533][T17556] veth0_vlan: entered promiscuous mode
[  697.590220][T17556] veth1_vlan: entered promiscuous mode
[  697.622209][T17835] tipc: Started in network mode
[  697.633799][T17835] tipc: Node identity eec0cdac94fc, cluster identity 4711
[  697.656044][T17835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  697.834834][T17839] syzkaller0: entered promiscuous mode
[  697.840394][T17839] syzkaller0: entered allmulticast mode
[  697.864340][T17839] tipc: Resetting bearer <eth:syzkaller0>
[  697.948473][T17833] tipc: Resetting bearer <eth:syzkaller0>
[  698.446901][T17875] netlink: 'syz.3.3210': attribute type 64 has an invalid length.
[  698.456315][T17874] netlink: 'syz.3.3210': attribute type 64 has an invalid length.
Stopping klogd: OK
Stopping acpid: [  699.954706][T17833] tipc: Disabling bearer <eth:syzkaller0>
[  699.982413][T16198] tipc: Node number set to 2050805164
[  700.031359][T17886] netlink: 'syz.2.3211': attribute type 1 has an invalid length.
[  700.048801][T17556] veth0_macvtap: entered promiscuous mode
[  700.109378][T17886] bond1: entered promiscuous mode
[  700.115515][T17886] 8021q: adding VLAN 0 to HW filter on device bond1
[  700.135765][T17556] veth1_macvtap: entered promiscuous mode
OK
[  700.184927][T17888] 8021q: adding VLAN 0 to HW filter on device bond1
[  700.192327][T17888] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  700.216164][T17888] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  700.229019][T17888] bond1: (slave vcan1): making interface the new active one
[  700.237283][T17888] vcan1: entered promiscuous mode
[  700.244553][T17888] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  700.301710][T17891] __nla_validate_parse: 5 callbacks suppressed
[  700.301731][T17891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3212'.
[  700.322693][T17556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  700.335713][T17898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3214'.
[  700.402499][T17556] batman_adv: batadv0: Interface activated: batadv_slave_1
Stopping syslogd: [  700.483423][T11765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.492220][T11765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.552376][T11765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
stopped /sbin/syslogd (pid 5173)
OK
[  700.692603][T11765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.794302][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3219'.
[  700.821414][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3219'.
[  700.842259][T17922] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3220'.
[  700.871390][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3220'.
[  700.882758][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'.
[  700.892250][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3219'.
[  700.932662][T11769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.942055][T11769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.970284][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3221'.
[  701.011257][T17920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  701.044609][T11765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.070305][T11765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
umount: can't remount debugfs read-only
[  701.793865][T17963] netlink: 'syz.2.3232': attribute type 1 has an invalid length.
[  702.055883][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  702.083517][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  702.104470][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  702.120275][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  702.139484][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  702.218103][T17969] vlan2: entered allmulticast mode
[  702.237297][T17973] netlink: 'syz.2.3234': attribute type 83 has an invalid length.
[  702.259671][T17969] hsr0: entered allmulticast mode
[  702.277602][T17969] hsr_slave_0: entered allmulticast mode
[  702.284019][T17969] hsr_slave_1: entered allmulticast mode
[  702.729617][T17970] chnl_net:caif_netlink_parms(): no params data found
[  702.782774][ T8235] ==================================================================
[  702.790914][ T8235] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  702.798058][ T8235] Read of size 8 at addr ffff88807faa00a8 by task khidpd_00031012/8235
[  702.806338][ T8235] 
[  702.808704][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: khidpd_00031012 Not tainted syzkaller #0 PREEMPT(full) 
[  702.808727][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  702.808739][ T8235] Call Trace:
[  702.808748][ T8235]  <TASK>
[  702.808758][ T8235]  dump_stack_lvl+0xe8/0x150
[  702.808786][ T8235]  print_report+0xba/0x230
[  702.808809][ T8235]  ? __mutex_lock+0x812/0x1300
[  702.808825][ T8235]  kasan_report+0x117/0x150
[  702.808847][ T8235]  ? __mutex_lock+0x812/0x1300
[  702.808865][ T8235]  __mutex_lock+0x812/0x1300
[  702.808884][ T8235]  ? __mutex_lock+0x5ac/0x1300
[  702.808902][ T8235]  ? l2cap_unregister_user+0x6a/0x1b0
[  702.808921][ T8235]  ? __pfx___mutex_lock+0x10/0x10
[  702.808942][ T8235]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  702.808968][ T8235]  ? lockdep_hardirqs_on+0x7a/0x110
[  702.808996][ T8235]  l2cap_unregister_user+0x6a/0x1b0
[  702.809014][ T8235]  hidp_session_thread+0x3cb/0x440
[  702.809036][ T8235]  ? __pfx_hidp_session_thread+0x10/0x10
[  702.809056][ T8235]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  702.809078][ T8235]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  702.809099][ T8235]  ? __kthread_parkme+0x7a/0x1f0
[  702.809125][ T8235]  ? __kthread_parkme+0x19c/0x1f0
[  702.809152][ T8235]  kthread+0x388/0x470
[  702.809168][ T8235]  ? __pfx_hidp_session_thread+0x10/0x10
[  702.809192][ T8235]  ? __pfx_kthread+0x10/0x10
[  702.809208][ T8235]  ret_from_fork+0x51e/0xb90
[  702.809233][ T8235]  ? __pfx_ret_from_fork+0x10/0x10
[  702.809255][ T8235]  ? __switch_to+0xc7d/0x1450
[  702.809276][ T8235]  ? __pfx_kthread+0x10/0x10
[  702.809292][ T8235]  ret_from_fork_asm+0x1a/0x30
[  702.809326][ T8235]  </TASK>
[  702.809333][ T8235] 
[  702.973193][ T8235] The buggy address belongs to the physical page:
[  702.979728][ T8235] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807faa1000 pfn:0x7faa0
[  702.989991][ T8235] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  702.997493][ T8235] raw: 00fff00000000000 ffffea00015c4108 ffff8880b8640c40 0000000000000000
[  703.006235][ T8235] raw: ffff88807faa1000 0000000000000000 00000000ffffffff 0000000000000000
[  703.014918][ T8235] page dumped because: kasan: bad access detected
[  703.021891][ T8235] page_owner tracks the page as freed
[  703.027272][ T8235] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5881, tgid 5881 (syz-executor), ts 401340758102, free_ts 702770495907
[  703.045627][ T8235]  post_alloc_hook+0x231/0x280
[  703.050463][ T8235]  get_page_from_freelist+0x24dc/0x2580
[  703.056134][ T8235]  __alloc_frozen_pages_noprof+0x18d/0x380
[  703.062024][ T8235]  alloc_pages_mpol+0x232/0x4a0
[  703.066920][ T8235]  ___kmalloc_large_node+0x4e/0x150
[  703.072150][ T8235]  __kmalloc_large_node_noprof+0x18/0x90
[  703.077828][ T8235]  __kmalloc_noprof+0x3e8/0x760
[  703.082818][ T8235]  hci_alloc_dev_priv+0x28/0x2060
[  703.088266][ T8235]  vhci_create_device+0x120/0x650
[  703.093332][ T8235]  vhci_write+0x3ce/0x4a0
[  703.097697][ T8235]  vfs_write+0x61d/0xb90
[  703.101961][ T8235]  ksys_write+0x150/0x270
[  703.106311][ T8235]  do_syscall_64+0x14d/0xf80
[  703.110937][ T8235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.116857][ T8235] page last free pid 5881 tgid 5881 stack trace:
[  703.123324][ T8235]  __free_frozen_pages+0xc2b/0xdb0
[  703.128459][ T8235]  bt_host_release+0x82/0x90
[  703.133092][ T8235]  device_release+0x9e/0x1d0
[  703.137716][ T8235]  kobject_put+0x228/0x560
[  703.142165][ T8235]  vhci_release+0x15a/0x1a0
[  703.146792][ T8235]  __fput+0x44f/0xa70
[  703.150988][ T8235]  task_work_run+0x1d9/0x270
[  703.155599][ T8235]  do_exit+0x69b/0x2320
[  703.159777][ T8235]  do_group_exit+0x21b/0x2d0
[  703.164470][ T8235]  get_signal+0x1284/0x1330
[  703.169177][ T8235]  arch_do_signal_or_restart+0xbc/0x830
[  703.174750][ T8235]  exit_to_user_mode_loop+0x86/0x480
[  703.180066][ T8235]  do_syscall_64+0x32d/0xf80
[  703.184788][ T8235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.191263][ T8235] 
[  703.193655][ T8235] Memory state around the buggy address:
[  703.199322][ T8235]  ffff88807fa9ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  703.207431][ T8235]  ffff88807faa0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  703.215613][ T8235] >ffff88807faa0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  703.223710][ T8235]                                   ^
[  703.229116][ T8235]  ffff88807faa0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  703.237299][ T8235]  ffff88807faa0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  703.245375][ T8235] ==================================================================
[  703.255558][ T8235] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  703.262827][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: khidpd_00031012 Not tainted syzkaller #0 PREEMPT(full) 
[  703.272601][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  703.282878][ T8235] Call Trace:
[  703.286199][ T8235]  <TASK>
[  703.289175][ T8235]  vpanic+0x56c/0xa60
[  703.293383][ T8235]  ? __pfx_vpanic+0x10/0x10
[  703.297987][ T8235]  panic+0xc5/0xd0
[  703.301776][ T8235]  ? __pfx_panic+0x10/0x10
[  703.306242][ T8235]  ? __mutex_lock+0x812/0x1300
[  703.311056][ T8235]  ? __mutex_lock+0x812/0x1300
[  703.315859][ T8235]  check_panic_on_warn+0x89/0xb0
[  703.320863][ T8235]  ? __mutex_lock+0x812/0x1300
[  703.325692][ T8235]  end_report+0x73/0x180
[  703.330129][ T8235]  ? __mutex_lock+0x812/0x1300
[  703.334924][ T8235]  kasan_report+0x128/0x150
[  703.339637][ T8235]  ? __mutex_lock+0x812/0x1300
[  703.344629][ T8235]  __mutex_lock+0x812/0x1300
[  703.349430][ T8235]  ? __mutex_lock+0x5ac/0x1300
[  703.354413][ T8235]  ? l2cap_unregister_user+0x6a/0x1b0
[  703.359832][ T8235]  ? __pfx___mutex_lock+0x10/0x10
[  703.364988][ T8235]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  703.370859][ T8235]  ? lockdep_hardirqs_on+0x7a/0x110
[  703.376162][ T8235]  l2cap_unregister_user+0x6a/0x1b0
[  703.381417][ T8235]  hidp_session_thread+0x3cb/0x440
[  703.386684][ T8235]  ? __pfx_hidp_session_thread+0x10/0x10
[  703.392371][ T8235]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  703.398684][ T8235]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  703.404979][ T8235]  ? __kthread_parkme+0x7a/0x1f0
[  703.409973][ T8235]  ? __kthread_parkme+0x19c/0x1f0
[  703.415059][ T8235]  kthread+0x388/0x470
[  703.419175][ T8235]  ? __pfx_hidp_session_thread+0x10/0x10
[  703.424848][ T8235]  ? __pfx_kthread+0x10/0x10
[  703.429490][ T8235]  ret_from_fork+0x51e/0xb90
[  703.434135][ T8235]  ? __pfx_ret_from_fork+0x10/0x10
[  703.439292][ T8235]  ? __switch_to+0xc7d/0x1450
[  703.444030][ T8235]  ? __pfx_kthread+0x10/0x10
[  703.448666][ T8235]  ret_from_fork_asm+0x1a/0x30
[  703.453495][ T8235]  </TASK>
[  703.457154][ T8235] Kernel Offset: disabled
[  703.461491][ T8235] Rebooting in 86400 seconds..