last executing test programs:

4.69275802s ago: executing program 3 (id=3993):
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x2000a881) (async)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c841}, 0x2000a881)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2133808b016edea9f0000000180c2000000080045000020000000000011907880000000ac1414aa000037c1"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@loopback, @private=0xa010101, 0x0, 0xa, [@remote, @broadcast, @local, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, 0x38)

4.582598119s ago: executing program 3 (id=3995):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'/12], 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0xfdfdffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8)
ioctl$TUNSETOWNER(r0, 0x400454cc, r8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r10, 0x8b32, &(0x7f0000000040))
r11 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqn(r13, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @initdev}, &(0x7f0000000340)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3cf20000", @ANYRES16=r12, @ANYBLOB="00012abd7000fcdbdf2514000000080017000d00000005000b0000000000080009000200000008000900060000000500190000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040090)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

4.075582145s ago: executing program 3 (id=4002):
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, 0x0, 0x0)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r1, r1, 0x0, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r5], 0x5c}, 0x1, 0x400000000000000}, 0x40000)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x16}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)

4.00267571s ago: executing program 3 (id=4005):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x0, 0x4e, 0x3, 0x2, 0x0, @local, @local, 0x20, 0x0, 0x9, 0x7ff}})
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x3)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x61e5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a", @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

3.362393958s ago: executing program 1 (id=4018):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0xfffffffffffffc51, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xfff4, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x4, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async, rerun: 64)
close(r0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRESDEC=r8, @ANYRES32, @ANYBLOB="c96839116bb7026cb784ed73677c8c93c944e6a334cb6d50e605bfa7f6b06dc3", @ANYRES64=0x0], 0x20) (rerun: 32)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080008000000000008000640000000000500010006010000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r11, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x60}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)

3.30801371s ago: executing program 2 (id=4019):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000400)={0x30, "a0e2c67f00625b028378a16d7c40add24481a9f316e448e07d21364f1e558994e9f99ebce960717322e2a6158d56a2c2ad9daa5d7ec4739bd5667857a4530c02e9f118485b4d704cdaa63efd3ab86094edfbcb0b39fd799ddfd1fec068c820f23fe9f1a1f5378a9f0201b05f3b24c08a1e7ee22719161a6f12a9e78d28eb9910"})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b000100627269646765d3d4758c86d10ffb32c423818857d7d20000040002802000198014000500ded057a36511f1ec5406237dffe090fc0800010005000000"], 0x54}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.992175516s ago: executing program 1 (id=4022):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x21dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x40, 0x4, 0x3, 0x5, 0x5, 0x6, 0x8001, [{0x8, 0xb1, 0x6, 0x7ff}, {0x3000, 0x4bf, 0x5, 0xd}, {0x400, 0x4, 0x4, 0x2}, {0x4efc, 0x1, 0xf285, 0x772f}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x0)

2.865571259s ago: executing program 2 (id=4024):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

2.792050076s ago: executing program 1 (id=4025):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140))
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
listen(r4, 0x4)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@netrom={'nr', 0x0}, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e0, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000021}, 0x84)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x2002044)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x22, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

2.701444584s ago: executing program 2 (id=4027):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x3, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf, 0x0, 0x5, 0x21, @empty, @private1, 0x7, 0x80, 0x9, 0x3c0a}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x90)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff)

2.668464795s ago: executing program 0 (id=4028):
syz_emit_ethernet(0xde, &(0x7f0000000000)={@multicast, @empty, @void, {@mpls_uc={0x8847, {[{0xf3fb}, {0x6}, {0x3}, {0xffffc}, {0x7ff}, {0x1ff, 0x0, 0x1}, {0xc6b}], @ipv6=@udp={0x1, 0x6, "f1406b", 0x8c, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x62, 0x4, 0x0, 0x9, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x43}]}], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "d9d54c91bf5d7a3ceb2ceb41f5deda469a0fcc136ab815dd0f9b06f211a2f6fd", "3aeb1d169550a68bbe1e138f8b976bb9", {"0993531fb489fe7b268b85487de45403", "c91612ae4c13f16b384f0f5f2fd5c831"}}}}}}}}}, 0x0)

2.612340253s ago: executing program 4 (id=4029):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079100800000000001ea000000000000095000000aa000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0)

2.604470189s ago: executing program 0 (id=4030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)

2.53331647s ago: executing program 2 (id=4031):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8da}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.456142694s ago: executing program 4 (id=4032):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880)

2.416914441s ago: executing program 0 (id=4033):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@loopback, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x7, 0x10, 0x9, 0x0, 0x6, 0xe6, 0x5, 0x400}, {0x4, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x44, 0x7, 0x5, 0x1}}, 0xe8)

2.357729156s ago: executing program 2 (id=4034):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x3ff, 0x4, 0xffffffffffffff0c})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.299554108s ago: executing program 4 (id=4035):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
socket(0x1d, 0x2, 0x8)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000)

2.299150161s ago: executing program 1 (id=4036):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r4, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700ac"], 0x44}}, 0x20008884)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {}, {0x5, 0xf}}}, 0x24}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x2}}], 0x48}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r7}, 0x10)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000400)=ANY=[@ANYBLOB="111003020000000000000000000000000000dfff64010101fe880000000000000000000000000101fc01000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafc010000000000000000000000000000fc010000000000000000000000000000fc0200"/136], 0x88)
r11 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r12 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r13 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r13, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)

2.236017365s ago: executing program 0 (id=4037):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xcb5)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
accept(r1, 0x0, &(0x7f00000004c0))
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1)
accept4$unix(r0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}}, &(0x7f0000000480)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.195100932s ago: executing program 4 (id=4038):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) (async)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
listen(r0, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x31}, 0x9, 0xfff7, 0x7, 0x100, 0x3, 0x3000042, r4}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x91)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', r6, 0x2d, 0x6, 0x7f, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x4}, @private2, 0x20, 0x7800, 0x3, 0xe}}) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40879a7c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44005}, 0x4080) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @sched_cls}, 0x94)

2.09544762s ago: executing program 1 (id=4039):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x2, @val=@tcx}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
pipe(&(0x7f0000001f40)={<r5=>0xffffffffffffffff})
ppoll(&(0x7f0000002000)=[{r5, 0x400}], 0x1, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000005ac0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x7, &(0x7f0000001800)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/246, 0xf6}, {&(0x7f00000019c0)=""/133, 0x85}], 0x2, &(0x7f0000001ac0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/117, 0x75}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/172, 0xac}, {&(0x7f0000003d00)=""/29, 0x1d}, {&(0x7f0000003d40)=""/145, 0x91}, {&(0x7f0000003e00)=""/233, 0xe9}], 0x7, &(0x7f0000003f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000005440)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/142, 0x8e}, {&(0x7f00000051c0)=""/12, 0xc}, {&(0x7f0000005200)=""/251, 0xfb}, {&(0x7f0000005300)=""/6, 0x6}, {&(0x7f0000005340)=""/150, 0x96}, {&(0x7f0000005400)=""/11, 0xb}], 0x7, &(0x7f00000054c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000005540)=@abs, 0x6e, &(0x7f0000005840)=[{&(0x7f00000055c0)=""/78, 0x4e}, {&(0x7f0000005640)=""/122, 0x7a}, {&(0x7f00000056c0)=""/246, 0xf6}, {&(0x7f00000057c0)=""/128, 0x80}], 0x4, &(0x7f0000005880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000005900)=""/17, 0x11}, {&(0x7f0000005940)=""/103, 0x67}, {&(0x7f00000059c0)=""/67, 0x43}], 0x3, &(0x7f0000005a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x6, 0x40000040, &(0x7f0000005c40)={0x0, 0x989680})

319.245399ms ago: executing program 4 (id=4040):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
clock_gettime(0xfffffff2, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x20)
r4 = socket(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000a40)={&(0x7f0000000980)=[{&(0x7f0000000080)="2270c3bb643129b243fa39c481dc92f891c56890281805246ebdf7c85b0278b3999a0edf3eb2a373fcc0c332abe21acf403c0c2777b3d4ea5795933c78fb4dcc2d93276f7dfb5ff7d3b7c6c204d4b9d89893572c7d1e13ef9c66b2f8262c11ac1a3572e4a309b7bf8dc5cc08397872c6029215a72e80d45c1c82773104", 0x7d}, {&(0x7f0000000100)}, {&(0x7f00000001c0)="889152682bc7a3012b3e56b297c685bc67da39794ce713a25191cac6e84684346bbb35ae28e695090e27ac39a86f0eba0cd1f87387b3f0e48d046f5f7fa05a38dd298738fc0c5b4830", 0x49}, {&(0x7f0000000300)="03efc7441e98b394f03f976c69a9f0b94d7d36567380d85c61557ed0c4d374ab5f604d2b12455c6c4b6ff53c5b0b097526fd7290825f2b29b12fae6e35d132940fcf96e389e48a5903af12b5b54199f29fe758df0c688e3216019bf3", 0x5c}, {&(0x7f00000004c0)="b83ec2ebe8355220be2dcd27cc46f76b9bb205043a5f8d57c583a937fb65964606bbee84489e1ce55d435dc6f19393101eba9a9c09e2f3c3b5effdf7632e6797d883886a463a4aafea7192041337e43e900c221d85940b970011b1faf734da8edc823f74987ba4db738edfcc293cc9a887bf3b6b5098db394c014545f8b76b9ae93c14cd69febdd50a3c547b6072253d4a3a863f8aa5f474f91d5e5e5153f170434bbf07d55b20d0099b272c038f61108478ed89b166800c3e99b1034b767356a03b1e", 0xc3}, {&(0x7f00000005c0)="ad45542454045c74cf0ed1a9a151a9265abbd609ff5f25c69f68453f9bb19782de447dfe45f1a6613adfc3b6dcd2918c91fbdc1516f9b19ecf4c567c1a658c2cd1f6c89d4dbdd75101b837fa482cb626bca9ffa58a9e9fbb2d5636695904a784358fa17127bf44acc488c3282bb140add04697a03d978b73702509af7f022d31fbf9e824acf5c0bf30e04b721e964a85ecee23e7315536be1aff0ed0492e44fd48e08258a644367030285b091666e3157704d34645a58f2e1082801f539298cdb6ef29e868f73d1fe47c47047286b1", 0xcf}, {&(0x7f00000006c0)="959801218499ea97034dcc9be6b825c8d1169fd590566d73174f59098f67ae89fcd13f295841e514a84bfdaaf18ba0fa5926ac5455dc40393ee6c052c3bf055c6e3aba5e13842109b740b75c5e7b1ecd428af9e3ec2935ffe8e59ad38fc00a17418a598d2188c697e2b27d20f0293f26ec1bac83", 0x74}, {&(0x7f0000000880)="8999d4b270d80c042e571e1c1e81abc5ad189747733ffc8329f56f9bc7faaac5a37c33dbea8707b05f41d11f95f415de589793bf0f3b2437294946b3f34dcd0d63c5f1085f0e95bf2d0feabf9ffd5082e91e0d5d07cc9ca5ab1bf00efe9c2e2ab6b214d5838dd2540d632c8fa2aacdb636e3498e5f04fffad547310d3739223f2f3c1abc5c748b916bde26e0cc25a4", 0x8f}, {&(0x7f0000000940)}], 0x9, 0x7, 0x0, 0x4, 0x401, 0xf, 0x8, 0x9})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
connect$unix(r2, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000ac0)=[@in6={0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0x6, @empty, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x4, @empty, 0x2}, @in6={0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x6}, @in={0x2, 0x4e23, @multicast2}], 0xcc)

259.5923ms ago: executing program 2 (id=4041):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x140, r2, 0x100, 0x70bd27, 0x25d7dc00, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8d85, 0x32}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2f16}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xe5, 0xc5, "fce5a6074c6da2a151ee02c9dd771492238a1d4361080309eea92bda8b7860d5d639559948db58cb30910dae967decc3d8f61c63799774d6fe86aa0eadd83527fc09bfff25acce2ccd63cc281011975972096d5893b80db115ad8739d8b85703d3c3217c4c204bbba1224addf3442aa44cae4eef4396361261a1e309f647e6178d359dd007b5297bfd7b9efc286e9147a9a84d2d0023c10d40cdd2f06414e1722966a37d48e9cc17d36f13823cbbcc9ab86322923abab1667e7e7cb9313922043d23289c8a50414a403600b30135f4af9e8d940031cc1eeaacda7e20a9c1bc170f"}]}, 0x140}, 0x1, 0x0, 0x0, 0x840}, 0x4)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8000) (async)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8000)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) (async)
sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
listen(r3, 0x100)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x2, 0x3, 0x2, 0x2, 0x4}, &(0x7f00000003c0)=0x20)
accept4(r3, 0x0, 0x0, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x0)

211.32957ms ago: executing program 0 (id=4042):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a6970"], 0x58}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x0, 0x8, 0xad0a, 0x30, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x20, 0x2, 0x10001}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008000}, 0x8080) (async)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x48, 0x0, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}}, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}]}}]}, 0x88}}, 0x24040084)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001000390600b800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800b000100697036746e6c000058000280050009000400000014000200fc02000000000000000000000000000114000200fc00000000000000000000000000000014000200000000000000000000000000000000010800080032000000050004000f000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

208.680125ms ago: executing program 1 (id=4043):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x1000d)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0xd8d1, @local, 0x8}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="c231eeadb4ab9840da6ef6731a215370c8bc714b8b221d6958abc403d909995f2db7776888d0cf1a684e7e8603", 0x2d}, {&(0x7f00000000c0)="2a1f4c45c69e016140608aac07b04cd91a6dc8e035a9c4700f98ed2567b477a3d2555f35a63788beabca3ba9453c51844e32b0ac325ebed669eda6f33045dfd5d37d8a11171a68a7cf6801bb48e233bfe118ac2ba1dd7d87a2e0a5774a66f51ece2f49aff002a745c6851f6ff6f6ed", 0x6f}], 0x2, &(0x7f0000000180)=[{0xb8, 0x101, 0xe, "73aab1018fc3de41bf7abcd32b30e6c3e0997ceefebef28cb81a00123eff5c7215a4319b852c60a1d2e4379e4630b49e7792e91070495ea5a2b28396cefe0a329fadb56eebcd36134c09dfa5446c03cfce20fbdceb0ba7b3b83c3f5bccf0ac8df88db31af2d9c91c71fc92910dff24743b1e770ee194ebd16431cef0df8dca4ea0696162b867557885161d46aae80bbfe8c411f338303bfbfa5a29259f0c80a4eccb77ef"}], 0xb8}, 0x840)
socket$kcm(0x10, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x1000d) (async)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0xd8d1, @local, 0x8}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="c231eeadb4ab9840da6ef6731a215370c8bc714b8b221d6958abc403d909995f2db7776888d0cf1a684e7e8603", 0x2d}, {&(0x7f00000000c0)="2a1f4c45c69e016140608aac07b04cd91a6dc8e035a9c4700f98ed2567b477a3d2555f35a63788beabca3ba9453c51844e32b0ac325ebed669eda6f33045dfd5d37d8a11171a68a7cf6801bb48e233bfe118ac2ba1dd7d87a2e0a5774a66f51ece2f49aff002a745c6851f6ff6f6ed", 0x6f}], 0x2, &(0x7f0000000180)=[{0xb8, 0x101, 0xe, "73aab1018fc3de41bf7abcd32b30e6c3e0997ceefebef28cb81a00123eff5c7215a4319b852c60a1d2e4379e4630b49e7792e91070495ea5a2b28396cefe0a329fadb56eebcd36134c09dfa5446c03cfce20fbdceb0ba7b3b83c3f5bccf0ac8df88db31af2d9c91c71fc92910dff24743b1e770ee194ebd16431cef0df8dca4ea0696162b867557885161d46aae80bbfe8c411f338303bfbfa5a29259f0c80a4eccb77ef"}], 0xb8}, 0x840) (async)

127.543489ms ago: executing program 4 (id=4044):
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x14) (async)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = epoll_create1(0x0)
epoll_pwait(r6, 0xfffffffffffffffc, 0x0, 0x8000002, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1405}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401, 0x0, 0x80}]}]}, 0xfc}}, 0xc004004)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket(0xa, 0x3, 0xff) (async)
r10 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r10, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003})
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf0081cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a72b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331c7c6168fe63c0d7d53e91293a13e10baf5bddd7d5482f91d63f42883adae0758b6172c22b2f9445fb9c6822db2ea671eff78850a1ff308d2360f950615fd3726da24aee1ea3ff3d5fa24ccf6afe1a5953821b73e2c9fe4f7faef9f59651a700a2067adb32861c7653a02579bb335eb93992c89a4d8d18e2f836062d7406814af128398a14db4d92ce0ef116c44a93b7acf5d6888bb8affb26bb321031c748569aea455d3acb1bdc3bb11d447d6759bd98ee82829c2285b64b2ef3fe0c0ded0ab4aed8eefebd11eb24dcedb3bf", 0x19b}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b3", 0x56}], 0x2}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x19b}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b3", 0x56}], 0x2}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_virt_wifi\x00'})

126.568119ms ago: executing program 3 (id=4045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES64=r0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES64=r0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) (async)

100.95103ms ago: executing program 3 (id=4046):
r0 = socket$kcm(0x29, 0x2, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async)
r2 = socket$kcm(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r3}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f00000003c0)="85ba7f05dc7c0cac6df70ee1220cecaf9265a8", &(0x7f0000000400)=""/15, &(0x7f0000000440)="c00dcc28a37d5054e5619eee2626257be385900740007d07fe35d87a08a19a89a687856026b76e24e19a6cb679218c", &(0x7f0000000480)="cb8f74ac70b2ef87fc25970ce5ab0440d28eb8b6a10d67f320fb96aeb36cf83ebcdb69b417bcb9c69261833c321df2c69b797d0c299809a4207170c1ed410e19a6a1472304603d3776f166a8a770d32e6d020a", 0x7f, r3, 0x4}, 0x38)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)

0s ago: executing program 0 (id=4047):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20)
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80, 0x8)
readv(r2, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1)
r5 = openat$cgroup_ro(r2, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f00000000c0))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r7=>0x0, 0x7, 0x8, 0x9, 0x0, {{0x27, 0x4, 0x3, 0x2f, 0x9c, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast2, @remote, {[@rr={0x7, 0x1b, 0xf0, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @private=0xa010100, @empty]}, @rr={0x7, 0x23, 0xbb, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @empty, @loopback, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xf, 0x7b, [@local, @remote, @local]}, @rr={0x7, 0x17, 0x3f, [@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x8, [{@loopback, 0x4}, {@remote, 0x9}, {@loopback, 0x4d02f0aa}, {@local, 0xfffffffd}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x31, 0xf8, r7}}]}, 0x30}}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaa0591e163b8c25017a9f65daaaaaaaa00000c01000000"], 0x0)

kernel console output (not intermixed with test programs):

1100][T14488] veth0_to_bridge: left promiscuous mode
[  433.047545][T14488] bridge0: port 3(veth0_to_bridge) entered disabled state
[  433.082736][T14488] bridge_slave_0: left allmulticast mode
[  433.088494][T14488] bridge_slave_0: left promiscuous mode
[  433.094667][T14488] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.114097][T14488] bridge_slave_1: left allmulticast mode
[  433.121863][T14488] bridge_slave_1: left promiscuous mode
[  433.128694][T14488] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.166149][T14488] bond0: (slave bond_slave_1): Releasing backup interface
[  433.210839][T14488] team0: Port device team_slave_0 removed
[  433.225068][T14488] team0: Port device team_slave_1 removed
[  433.237243][T14488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.264935][T14488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  433.311754][T14482] hsr_slave_0: left promiscuous mode
[  433.319908][T14482] hsr_slave_1: left promiscuous mode
[  433.937536][T14525] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  434.052927][T14539] xt_hashlimit: max too large, truncated to 1048576
[  434.077994][T14539] netlink: 'syz.1.2215': attribute type 1 has an invalid length.
[  434.112895][T14539] netlink: 'syz.1.2215': attribute type 3 has an invalid length.
[  434.131999][T14539] __nla_validate_parse: 5 callbacks suppressed
[  434.132018][T14539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2215'.
[  434.209510][T14545] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2218'.
[  434.279089][T14545] netlink: 'syz.3.2218': attribute type 21 has an invalid length.
[  434.306539][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2218'.
[  434.351031][T14549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'.
[  434.383972][T14552] : entered promiscuous mode
[  434.403359][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'.
[  434.440849][T14558] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2224'.
[  434.534667][T14565] sock: sock_timestamping_bind_phc: sock not bind to device
[  434.565995][T14565] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2225'.
[  435.119361][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'.
[  435.252107][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'.
[  435.466995][T14629] netlink: 208056 bytes leftover after parsing attributes in process `syz.2.2239'.
[  435.541979][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  436.371849][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  436.380067][    C0] lec:lec_tx_timeout: lec0
[  436.384741][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  436.425408][T14666] netlink: 'syz.3.2249': attribute type 3 has an invalid length.
[  436.563720][T14678] bond0: entered promiscuous mode
[  436.616094][T14678] gretap0: entered promiscuous mode
[  436.639194][T14678] hsr1: entered promiscuous mode
[  436.742685][T14681] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  436.782513][T14681] netlink: 'syz.2.2254': attribute type 2 has an invalid length.
[  436.790556][T14681] netlink: 'syz.2.2254': attribute type 2 has an invalid length.
[  436.848876][T14681] netlink: 'syz.2.2254': attribute type 2 has an invalid length.
[  437.409518][T14711] bond3: option fail_over_mac: invalid value (16)
[  437.483747][T14711] bond3 (unregistering): Released all slaves
[  438.069852][T14762] xfrm1: entered allmulticast mode
[  438.153705][T14772] xt_l2tp: v2 doesn't support IP mode
[  438.363547][T14787] netlink: 'syz.0.2279': attribute type 39 has an invalid length.
[  438.511144][T14787] syz_tun (unregistering): left allmulticast mode
[  438.598342][T14795] vlan3: entered allmulticast mode
[  439.618419][T14868] __nla_validate_parse: 9 callbacks suppressed
[  439.618440][T14868] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2297'.
[  439.640555][T14874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2296'.
[  439.690759][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'.
[  439.973386][T14894] netlink: 'syz.1.2303': attribute type 9 has an invalid length.
[  440.070035][T14892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2304'.
[  440.091113][T14899] sch_fq: defrate 0 ignored.
[  440.276025][T14908] syzkaller1: entered promiscuous mode
[  440.292261][T14908] syzkaller1: entered allmulticast mode
[  440.309466][T14915] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  440.344834][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.528418][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'.
[  440.619877][T14930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  441.391831][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  441.399988][    C0] lec:lec_tx_timeout: lec0
[  441.405868][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  441.531416][T14973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2320'.
[  441.637397][T14979] netlink: 'syz.1.2321': attribute type 1 has an invalid length.
[  441.669911][T14979] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2321'.
[  441.706057][T14979] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2321'.
[  441.749499][T14979] netlink: 'syz.1.2321': attribute type 8 has an invalid length.
[  441.764734][T14979] netlink: 630 bytes leftover after parsing attributes in process `syz.1.2321'.
[  441.999400][T14993] bond10: option fail_over_mac: invalid value (16)
[  442.037982][T14995] netlink: 'syz.0.2325': attribute type 2 has an invalid length.
[  442.049059][T14993] bond10 (unregistering): Released all slaves
[  442.314920][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'.
[  443.631187][T15069] bond10: entered allmulticast mode
[  443.700327][T15069] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  443.943877][T15095] netlink: 'syz.4.2349': attribute type 21 has an invalid length.
[  444.687175][T15133] netlink: 'syz.2.2363': attribute type 1 has an invalid length.
[  444.695243][T15134] netlink: 'syz.2.2363': attribute type 1 has an invalid length.
[  444.874862][T15138] syzkaller0: entered promiscuous mode
[  444.882376][T15138] syzkaller0: entered allmulticast mode
[  445.200796][T15165] xt_addrtype: ipv6 does not support BROADCAST matching
[  445.253644][T15167] __nla_validate_parse: 12 callbacks suppressed
[  445.253667][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'.
[  445.362438][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'.
[  445.362849][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2373'.
[  445.410537][T15175] bond11: entered promiscuous mode
[  445.417100][T15175] 8021q: adding VLAN 0 to HW filter on device bond11
[  445.455472][T15175] bridge16: entered promiscuous mode
[  445.479578][T15175] bond11: (slave bridge16): Enslaving as an active interface with an up link
[  445.523058][T15173] gretap1: entered promiscuous mode
[  445.534471][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'.
[  445.548112][T15184] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2374'.
[  445.564271][T15184] netlink: 'syz.4.2374': attribute type 5 has an invalid length.
[  445.619492][T15186] netlink: 'syz.1.2375': attribute type 83 has an invalid length.
[  445.655780][T15184] syzkaller0: entered promiscuous mode
[  445.662669][T15186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.663518][T15184] syzkaller0: entered allmulticast mode
[  445.738278][T14716] tipc: Subscription rejected, illegal request
[  445.815812][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2377'.
[  445.872854][T15208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.924729][T15211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2380'.
[  446.020876][T15218] netlink: 'syz.0.2382': attribute type 4 has an invalid length.
[  446.050456][T15218] netlink: 'syz.0.2382': attribute type 1 has an invalid length.
[  446.058999][T15218] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2382'.
[  446.248684][T15242] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2388'.
[  446.277716][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'.
[  446.788603][T15271] netlink: 'syz.3.2396': attribute type 3 has an invalid length.
[  447.362299][T15312] netlink: 'syz.2.2407': attribute type 4 has an invalid length.
[  447.381816][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms
[  447.389928][    C0] lec:lec_tx_timeout: lec0
[  447.394678][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  447.482389][T15315] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  447.505367][T15315] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0
[  447.533023][T15315] netlink: 'syz.4.2409': attribute type 1 has an invalid length.
[  447.665866][T15323] bond10 (unregistering): Released all slaves
[  447.761445][T15332] xt_hashlimit: size too large, truncated to 1048576
[  448.126501][T15350] bond0: entered promiscuous mode
[  448.146339][T15350] gretap0: entered promiscuous mode
[  448.164734][T15350] bond0: left promiscuous mode
[  448.173631][T15350] gretap0: left promiscuous mode
[  448.576328][T15378] xt_TPROXY: Can be used only with -p tcp or -p udp
[  449.152095][T15418] validate_nla: 2 callbacks suppressed
[  449.152117][T15418] netlink: 'syz.2.2438': attribute type 9 has an invalid length.
[  449.234226][T15420] IPVS: Scheduler module ip_vs_sip not found
[  449.416030][T15432] x_tables: duplicate underflow at hook 3
[  449.429862][T15438] xt_TPROXY: Can be used only with -p tcp or -p udp
[  449.455230][T15443] netlink: 'syz.0.2447': attribute type 1 has an invalid length.
[  449.487496][T15438] bond10: option xmit_hash_policy: invalid value (64)
[  449.619223][T15438] bond10 (unregistering): Released all slaves
[  449.824353][T15455] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20001
[  449.846709][T15455] netlink: 'syz.4.2448': attribute type 1 has an invalid length.
[  450.124200][T15475] 8021q: VLANs not supported on syzkaller1
[  450.219942][T15480] syzkaller0: entered promiscuous mode
[  450.235356][T15480] syzkaller0: entered allmulticast mode
[  450.264374][T15480] __nla_validate_parse: 19 callbacks suppressed
[  450.264397][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'.
[  450.280999][T15480] netlink: 'syz.4.2457': attribute type 5 has an invalid length.
[  450.325348][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2457'.
[  450.360225][T15485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2459'.
[  450.491312][T15492] can: request_module (can-proto-0) failed.
[  450.646757][T15498] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2463'.
[  450.700689][T15512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2466'.
[  450.720384][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2466'.
[  450.930919][T15531] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  451.256875][T15551] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2479'.
[  451.520039][T15569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2483'.
[  452.331291][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'.
[  452.342876][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'.
[  452.424456][T15606] netlink: 'syz.0.2495': attribute type 1 has an invalid length.
[  453.231813][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms
[  453.239934][    C0] lec:lec_tx_timeout: lec0
[  453.245831][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  454.240214][T15697] xt_ipcomp: unknown flags 1D
[  454.572753][T15715] tipc: Enabled bearer <ib:gretap0>, priority 0
[  455.196900][T15754] netlink: 'syz.0.2541': attribute type 61 has an invalid length.
[  455.297919][T15754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.339982][T15750] openvswitch: netlink: IP tunnel dst address not specified
[  455.351072][T15750] __nla_validate_parse: 7 callbacks suppressed
[  455.351093][T15750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'.
[  455.367480][T15750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'.
[  455.383471][T15758] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2542'.
[  455.386348][T15759] xt_hashlimit: size too large, truncated to 1048576
[  455.821279][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  455.990220][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.013563][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.045825][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.072662][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.099187][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.130814][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'.
[  456.412963][T15785] ip6erspan1: entered allmulticast mode
[  456.887678][T15803] netlink: 'syz.3.2558': attribute type 1 has an invalid length.
[  457.154236][T15838] syzkaller0: entered promiscuous mode
[  457.168766][T15838] syzkaller0: entered allmulticast mode
[  458.261987][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  458.270199][    C0] lec:lec_tx_timeout: lec0
[  458.274946][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  459.927779][T15817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  460.181367][T15875] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  460.229964][T15875] 8021q: adding VLAN 0 to HW filter on device bond8
[  460.381067][T15882] __nla_validate_parse: 68 callbacks suppressed
[  460.381090][T15882] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2579'.
[  460.404780][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'.
[  460.432224][T15882] nbd: illegal input index -8454144
[  460.559873][T15900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2583'.
[  460.604270][T15902] rdma_op ffff888054c4e9f0 conn xmit_rdma 0000000000000000
[  460.616797][T15900] netlink: 'syz.1.2583': attribute type 1 has an invalid length.
[  460.663311][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'.
[  460.737355][T15900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2583'.
[  460.779694][T15909] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  460.794696][T15909] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  460.856599][T15900] bond9: (slave bridge6): Enslaving as an active interface with a down link
[  460.891169][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'.
[  460.942659][T15913] macvlan0: entered promiscuous mode
[  460.955168][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'.
[  460.965531][T15913] macvlan0: entered allmulticast mode
[  460.979668][T15913] bond9: entered promiscuous mode
[  460.986476][T15913] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  460.997002][T15913] bond9: left promiscuous mode
[  461.441709][T15951] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2595'.
[  461.459972][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'.
[  461.464882][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'.
[  461.689662][   T82] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.701480][   T82] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  461.734993][   T82] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.759916][   T82] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  461.774128][T15970] openvswitch: netlink: Multiple metadata blocks provided
[  461.823369][T15970] xt_hashlimit: size too large, truncated to 1048576
[  462.185763][T15984] sctp: [Deprecated]: syz.3.2606 (pid 15984) Use of struct sctp_assoc_value in delayed_ack socket option.
[  462.185763][T15984] Use struct sctp_sack_info instead
[  462.405897][T15999] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  462.468156][T16006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  462.563273][T16012] syzkaller0: entered promiscuous mode
[  462.570523][T16012] syzkaller0: entered allmulticast mode
[  463.281854][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  463.291464][    C0] lec:lec_tx_timeout: lec0
[  463.296359][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  463.544483][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.545143][T16029] veth3: entered allmulticast mode
[  463.664057][T16034] bond12: entered promiscuous mode
[  463.669267][T16034] bond12: entered allmulticast mode
[  463.689981][T16034] 8021q: adding VLAN 0 to HW filter on device bond12
[  463.984910][T16057] macsec3: entered promiscuous mode
[  464.313761][T16074] netem: incorrect ge model size
[  464.337445][T16074] netem: change failed
[  464.775603][T16113] netlink: 'syz.4.2642': attribute type 1 has an invalid length.
[  464.834856][T16113] bond13: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  464.877988][   T49] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  464.878269][T16109] 8021q: adding VLAN 0 to HW filter on device bond13
[  465.002898][   T13] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  465.561411][T16151] netlink: 'syz.3.2654': attribute type 1 has an invalid length.
[  465.868809][T16172] __nla_validate_parse: 7 callbacks suppressed
[  465.868831][T16172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2659'.
[  465.899666][T16172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2659'.
[  466.128984][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'.
[  466.367362][T16150] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  466.584472][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2666'.
[  466.718557][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[  466.832669][T16211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2668'.
[  466.850360][T16213] 8021q: VLANs not supported on lo
[  466.871719][T16211] nbd: must specify at least one socket
[  467.165504][T16226] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  467.430212][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'.
[  468.017716][T16272] netlink: 'syz.0.2687': attribute type 39 has an invalid length.
[  468.049160][T16275] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  468.128028][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2691'.
[  468.159320][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2690'.
[  468.173260][T16275] bond11: entered promiscuous mode
[  468.179235][T16275] 8021q: adding VLAN 0 to HW filter on device bond11
[  468.194531][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2688'.
[  468.209102][T16281] ipvlan0: entered allmulticast mode
[  468.215165][T16281] syz_tun: entered allmulticast mode
[  468.247814][T16286] tipc: Cannot configure node identity twice
[  468.260240][T16275] bond11: entered allmulticast mode
[  468.295752][T16284] netlink: 'syz.4.2689': attribute type 12 has an invalid length.
[  468.311890][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  468.320106][    C0] lec:lec_tx_timeout: lec0
[  468.325978][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  468.339201][T16275] bond11: (slave bridge13): making interface the new active one
[  468.358232][T16275] bridge13: entered promiscuous mode
[  468.364810][T16275] bridge13: entered allmulticast mode
[  468.391993][T16275] bond11: (slave bridge13): Enslaving as an active interface with an up link
[  468.563136][T16300] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  468.591974][T16300] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  468.678147][T16307] netlink: 'syz.4.2700': attribute type 1 has an invalid length.
[  469.409060][T16353] bond4: entered promiscuous mode
[  469.427167][T16353] macvlan3: entered promiscuous mode
[  469.432760][T16353] macvlan3: entered allmulticast mode
[  469.439532][T16353] bond4: (slave macvlan3): Opening slave failed
[  469.799071][T16379] netlink: 'syz.3.2720': attribute type 1 has an invalid length.
[  469.990019][T16387] Cannot find add_set index 0 as target
[  470.195681][T16395] block nbd2: Unsupported socket: should be TCP or UNIX.
[  470.541248][T16413] netlink: 'syz.3.2730': attribute type 1 has an invalid length.
[  470.687961][T16413] 8021q: adding VLAN 0 to HW filter on device bond5
[  470.704510][T16426] 8021q: VLANs not supported on gre0
[  471.022145][T16444] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  471.130041][T16455] block nbd0: NBD_DISCONNECT
[  471.151574][T16455] block nbd0: Send disconnect failed -32
[  471.159423][T16455] block nbd0: shutting down sockets
[  471.221976][T16465] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  471.258014][T16465] __nla_validate_parse: 12 callbacks suppressed
[  471.258034][T16465] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2742'.
[  471.355550][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'.
[  471.374978][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'.
[  471.383735][T16470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2743'.
[  471.391982][T16474] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2746'.
[  471.558032][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'.
[  471.583178][T16477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2748'.
[  471.615145][T16481] bond0: entered promiscuous mode
[  471.649660][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'.
[  471.667489][T16477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2748'.
[  471.701608][T16490] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2751'.
[  471.746412][T16488] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  471.747173][T16489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  471.784562][T16488] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  471.832054][T16489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  472.033022][T16510] batadv_slave_0: Caught tx_queue_len zero misconfig
[  472.261255][T16537] netlink: 'syz.1.2762': attribute type 6 has an invalid length.
[  472.371732][T16541] netlink: 'syz.2.2765': attribute type 1 has an invalid length.
[  472.442560][T16541] bond13: entered promiscuous mode
[  472.448097][T16541] 8021q: adding VLAN 0 to HW filter on device bond13
[  472.480942][T16541] bond13: (slave bridge14): making interface the new active one
[  472.489588][T16541] bridge14: entered promiscuous mode
[  472.497044][T16541] bond13: (slave bridge14): Enslaving as an active interface with an up link
[  472.828370][T16569] netlink: 'syz.1.2770': attribute type 25 has an invalid length.
[  472.849529][   T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  472.859041][T16569] netlink: 'syz.1.2770': attribute type 25 has an invalid length.
[  472.867770][   T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  472.876886][   T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  472.886138][   T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  472.938603][T16576] syzkaller1: entered promiscuous mode
[  472.944783][T16576] syzkaller1: entered allmulticast mode
[  473.150285][T16583] tun0: tun_chr_ioctl cmd 1074025675
[  473.156285][T16583] tun0: persist disabled
[  473.161395][T16583] openvswitch: netlink: IP tunnel TTL not specified.
[  473.342001][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  473.350114][    C0] lec:lec_tx_timeout: lec0
[  473.355175][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  473.600847][T16566] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  473.928472][T16621] tipc: Started in network mode
[  473.943259][T16621] tipc: Node identity 080211, cluster identity 4711
[  473.954790][T16621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.977031][T16621] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  473.995477][T16621] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  474.015586][T16623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  474.144249][T16631] syzkaller1: entered promiscuous mode
[  474.173768][T16631] syzkaller1: entered allmulticast mode
[  474.236353][T16639] netlink: 'syz.0.2794': attribute type 5 has an invalid length.
[  474.718287][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  474.729464][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  474.738986][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  474.747617][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  474.755520][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  474.822750][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  475.119766][ T5831] tipc: Node number set to 134353152
[  475.224739][T16675] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  475.232285][T16647] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  475.930676][T16661] chnl_net:caif_netlink_parms(): no params data found
[  476.125103][T16661] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.152303][T16661] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.159738][T16661] bridge_slave_0: entered allmulticast mode
[  476.169337][T16661] bridge_slave_0: entered promiscuous mode
[  476.189741][T16661] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.198084][T16661] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.206111][T16729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.215943][T16661] bridge_slave_1: entered allmulticast mode
[  476.226503][T16661] bridge_slave_1: entered promiscuous mode
[  476.343649][T16661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.373392][T16661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.422501][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  476.426188][T16661] team0: Port device team_slave_0 added
[  476.438442][T16661] team0: Port device team_slave_1 added
[  476.494848][T16735] netlink: 'syz.3.2819': attribute type 1 has an invalid length.
[  476.521192][T16735] __nla_validate_parse: 21 callbacks suppressed
[  476.521213][T16735] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2819'.
[  476.555381][T16661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.581876][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.621108][T16661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.634893][T16661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.644324][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.687911][T16661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.822989][ T5830] Bluetooth: hci5: command tx timeout
[  476.838812][T16758] Cannot find add_set index 65532 as target
[  477.345880][T16780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.408686][T16775] netlink: 'syz.3.2830': attribute type 4 has an invalid length.
[  477.504593][T16661] hsr_slave_0: entered promiscuous mode
[  477.538806][T16661] hsr_slave_1: entered promiscuous mode
[  477.552460][T16661] debugfs: 'hsr0' already exists in 'hsr'
[  477.558265][T16661] Cannot create hsr debugfs directory
[  477.841165][T16791] syzkaller0: entered promiscuous mode
[  477.853885][T16791] syzkaller0: entered allmulticast mode
[  477.910973][T16661] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.923555][T16661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  477.935373][T16661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  477.945787][T16661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  478.092924][T16799] netlink: 'syz.3.2839': attribute type 3 has an invalid length.
[  478.130894][T16661] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.176223][T16661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  478.214573][T16661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  478.251967][T16661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  478.361878][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  478.370078][    C0] lec:lec_tx_timeout: lec0
[  478.375037][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  478.449343][T16661] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.470926][T16661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  478.486910][T16661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  478.502273][T16661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  478.518032][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'.
[  478.600583][T16661] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.641954][T16661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  478.661451][T16661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  478.676170][T16661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  478.888591][T16855] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2853'.
[  478.903191][ T5830] Bluetooth: hci5: command tx timeout
[  478.908238][T16855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2853'.
[  479.047823][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'.
[  479.089294][T16661] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  479.116180][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  479.134085][T16661] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  479.186355][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  479.219747][T16661] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  479.241598][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  479.258727][T16874] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2862'.
[  479.274392][T16661] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  479.285092][T16874] netlink: 'syz.3.2862': attribute type 12 has an invalid length.
[  479.296653][T16661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  479.362846][T16874] bond6: option primary_reselect: invalid value (255)
[  479.371367][T16874] bond6 (unregistering): Released all slaves
[  479.414724][T16886] veth0: entered promiscuous mode
[  479.498688][T16878] veth0: left promiscuous mode
[  479.617993][T16890] dvmrp0: entered allmulticast mode
[  479.805529][T16901] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  479.865563][T16661] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.937421][T16661] 8021q: adding VLAN 0 to HW filter on device team0
[  479.983661][T14714] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.990863][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.058101][T14714] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.065360][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.288982][T16935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2876'.
[  480.322687][T16935] xt_hashlimit: size too large, truncated to 1048576
[  480.453478][T16944] bond10: option fail_over_mac: invalid value (16)
[  480.492987][T16944] bond10 (unregistering): Released all slaves
[  480.572226][T16952] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  480.744013][T16959] netlink: 'syz.0.2883': attribute type 10 has an invalid length.
[  480.761279][T16959] bond0: (slave wlan1): Opening slave failed
[  480.867386][T16661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.899278][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'.
[  480.983961][ T5830] Bluetooth: hci5: command tx timeout
[  481.033376][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'.
[  481.045775][T16962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2884'.
[  481.551240][T16984] batadv0: left allmulticast mode
[  481.556367][T16992] __nla_validate_parse: 1 callbacks suppressed
[  481.556389][T16992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2893'.
[  481.582701][T16984] veth0: left allmulticast mode
[  481.588035][T16984] veth1: left allmulticast mode
[  481.596330][T16984] wg0: left allmulticast mode
[  481.601441][T16984] wg1: left allmulticast mode
[  481.608266][T16984] wg2: left allmulticast mode
[  481.614496][T16984] veth0_to_bridge: left allmulticast mode
[  481.620653][T16984] bridge_slave_0: left allmulticast mode
[  481.630017][T16984] veth1_to_bridge: left allmulticast mode
[  481.639217][T16995] netlink: 'syz.0.2894': attribute type 10 has an invalid length.
[  481.648088][T16984] bridge_slave_1: left allmulticast mode
[  481.654783][T16984] veth0_to_bond: left allmulticast mode
[  481.660650][T16984] bond_slave_0: left allmulticast mode
[  481.666985][T16984] veth1_to_bond: left allmulticast mode
[  481.673668][T16984] bond_slave_1: left allmulticast mode
[  481.679633][T16984] veth0_to_team: left allmulticast mode
[  481.685908][T16984] team_slave_0: left allmulticast mode
[  481.692418][T16984] veth1_to_team: left allmulticast mode
[  481.700346][T16984] team_slave_1: left allmulticast mode
[  481.715897][T16984] veth0_to_batadv: left allmulticast mode
[  481.722331][T16984] batadv_slave_0: left allmulticast mode
[  481.728339][T16984] veth1_to_batadv: left allmulticast mode
[  481.737061][T16984] batadv_slave_1: left allmulticast mode
[  481.743460][T16984] xfrm0: left allmulticast mode
[  481.748733][T16984] veth0_to_hsr: left allmulticast mode
[  481.755356][T16984] veth1_to_hsr: left allmulticast mode
[  481.761444][T16984] hsr0: left allmulticast mode
[  481.767306][T16984] hsr_slave_0: left allmulticast mode
[  481.773251][T16984] hsr_slave_1: left allmulticast mode
[  481.775201][T16998] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2895'.
[  481.778970][T16984] veth1_virt_wifi: left allmulticast mode
[  481.795293][T16984] veth0_virt_wifi: left allmulticast mode
[  481.795806][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'.
[  481.801294][T16984] veth1_macvtap: left allmulticast mode
[  481.810414][T16998] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2895'.
[  481.816926][T16984] veth0_macvtap: left allmulticast mode
[  481.826090][T16998] netlink: 'syz.2.2895': attribute type 3 has an invalid length.
[  481.826133][T16998] netlink: 'syz.2.2895': attribute type 2 has an invalid length.
[  481.826148][T16998] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2895'.
[  481.859349][T16984] macvtap0: left allmulticast mode
[  481.866688][T16984] macsec0: left allmulticast mode
[  481.872026][T16984] geneve0: left allmulticast mode
[  481.877517][T16984] geneve1: left allmulticast mode
[  481.914275][T16984] macsec1: left allmulticast mode
[  481.919902][T16984] vxlan0: left allmulticast mode
[  481.932695][T16984] bond1: left allmulticast mode
[  481.938192][T16984] geneve2: left allmulticast mode
[  481.951987][T16984] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  482.165605][T16661] veth0_vlan: entered promiscuous mode
[  482.227272][T16661] veth1_vlan: entered promiscuous mode
[  482.285625][T16661] veth0_macvtap: entered promiscuous mode
[  482.297757][T16661] veth1_macvtap: entered promiscuous mode
[  482.322119][T16661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.337667][T16661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.357115][T14716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.366622][T14716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.385711][T14716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.394862][T14716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.736409][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'.
[  482.759665][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.781957][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.870290][T14714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.882380][T14714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.978742][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2902'.
[  483.064677][ T5830] Bluetooth: hci5: command tx timeout
[  483.102907][T17026] 8021q: adding VLAN 0 to HW filter on device bond6
[  483.136975][T17039] sctp: [Deprecated]: syz.1.2906 (pid 17039) Use of int in maxseg socket option.
[  483.136975][T17039] Use struct sctp_assoc_value instead
[  483.198499][T17038] sctp: [Deprecated]: syz.1.2906 (pid 17038) Use of int in maxseg socket option.
[  483.198499][T17038] Use struct sctp_assoc_value instead
[  483.234583][T17034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.351501][T17034] netlink: 'syz.4.2798': attribute type 10 has an invalid length.
[  483.382280][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  483.390478][    C0] lec:lec_tx_timeout: lec0
[  483.570915][T17034] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  483.651333][T17070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2914'.
[  484.048158][T17092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  484.188890][T17100] bond10: option fail_over_mac: invalid value (16)
[  484.209638][T17100] bond10 (unregistering): Released all slaves
[  484.339908][T17108] xt_CT: No such helper "pptp"
[  484.438553][T17118] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  484.446571][T17117] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  484.463493][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'.
[  484.500084][T17120] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.510578][T17120] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2928'.
[  484.522732][T17120] netlink: ct family unspecified
[  484.578732][T17126] netlink: 'syz.4.2931': attribute type 29 has an invalid length.
[  484.670552][T17081] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  484.677192][T17081] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  484.709128][T17081] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  484.723288][T17081] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  484.787339][T17081] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  484.796638][T17081] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  484.819115][T17138] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.849480][T17081] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  484.861228][T17081] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  485.464265][T17184] netlink: 'syz.0.2949': attribute type 2 has an invalid length.
[  485.884181][T17207] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003
[  486.216369][    C0] vcan0: j1939_tp_rxtimer: 0xffff88809dd7ec00: rx timeout, send abort
[  486.488113][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  486.504916][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  486.515216][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  486.533892][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  486.552507][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  486.598164][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  486.617043][T17248] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  486.645831][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  486.650827][T17248] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  486.660485][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  486.676363][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  486.685151][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  486.690601][T17248] __nla_validate_parse: 13 callbacks suppressed
[  486.690619][T17248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2966'.
[  486.726071][    C0] vcan0: j1939_tp_rxtimer: 0xffff88809dd7ec00: abort rx timeout. Force session deactivation
[  487.040970][T17260] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  487.065217][ T1113] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.152773][ T1113] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.367891][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'.
[  487.380149][ T1113] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.490836][ T1113] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.723697][T17291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2983'.
[  487.739539][T17296] netlink: 'syz.1.2985': attribute type 1 has an invalid length.
[  488.085979][T17243] chnl_net:caif_netlink_parms(): no params data found
[  488.385932][ T1113] bond8: left allmulticast mode
[  488.391286][ T1113] bond8: left promiscuous mode
[  488.398796][ T1113] bridge12: port 1(bond8) entered disabled state
[  488.822975][   T51] Bluetooth: hci1: command tx timeout
[  488.888222][ T1113] bond3 (unregistering): (slave gretap1): Releasing active interface
[  489.487346][ T1113] bond9 (unregistering): (slave bridge13): Removing an active aggregator
[  489.498126][ T1113] bond9 (unregistering): (slave bridge13): Releasing backup interface
[  489.506461][ T1113] bond9 (unregistering): (slave bridge13): the permanent HWaddr of slave - aa:9a:9b:3a:35:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  489.528071][ T1113] bridge13 (unregistering): left promiscuous mode
[  489.535246][ T1113] bridge13 (unregistering): left allmulticast mode
[  489.585880][ T1113] bond9 (unregistering): (slave bridge14): Releasing backup interface
[  489.594612][ T1113] bridge14 (unregistering): left promiscuous mode
[  489.601048][ T1113] bridge14 (unregistering): left allmulticast mode
[  489.685805][ T1113] bond11 (unregistering): (slave bridge16): Releasing backup interface
[  489.694948][ T1113] bridge16 (unregistering): left promiscuous mode
[  489.747340][ T1113] bond0 (unregistering): Released all slaves
[  489.757871][ T1113] bond1 (unregistering): Released all slaves
[  489.771396][ T1113] bond2 (unregistering): Released all slaves
[  489.785607][ T1113] bond3 (unregistering): Released all slaves
[  489.801256][ T1113] bond4 (unregistering): Released all slaves
[  489.818222][ T1113] bond5 (unregistering): Released all slaves
[  489.835136][ T1113] bond6 (unregistering): Released all slaves
[  489.852705][ T1113] bond7 (unregistering): Released all slaves
[  489.869919][ T1113] bond8 (unregistering): Released all slaves
[  489.889291][ T1113] bond9 (unregistering): Released all slaves
[  489.916627][ T1113] bond10 (unregistering): Released all slaves
[  489.929961][ T1113] bond11 (unregistering): Released all slaves
[  489.943537][ T1113] bond12 (unregistering): Released all slaves
[  489.971391][T17337] vcan1: entered promiscuous mode
[  489.980207][T17337] vcan1: entered allmulticast mode
[  490.087858][T17243] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.110693][T17243] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.137463][T17243] bridge_slave_0: entered allmulticast mode
[  490.150954][T17243] bridge_slave_0: entered promiscuous mode
[  490.237583][ T1113] tipc: Left network mode
[  490.243555][T17243] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.257627][T17243] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.265906][T17243] bridge_slave_1: entered allmulticast mode
[  490.278002][T17243] bridge_slave_1: entered promiscuous mode
[  490.447980][T17359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3001'.
[  490.454036][T17361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.489001][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.520299][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.520584][T17361] netlink: 'syz.2.3002': attribute type 10 has an invalid length.
[  490.886302][T17358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.904990][   T51] Bluetooth: hci1: command tx timeout
[  490.942596][T17243] team0: Port device team_slave_0 added
[  490.993712][T17243] team0: Port device team_slave_1 added
[  491.338296][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.356362][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.404992][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.490818][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.506062][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.550302][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.681212][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'.
[  491.711954][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'.
[  491.717645][T17425] delete_channel: no stack
[  491.741172][T17422] netlink: 'syz.2.3012': attribute type 3 has an invalid length.
[  492.057689][T17243] hsr_slave_0: entered promiscuous mode
[  492.088965][T17243] hsr_slave_1: entered promiscuous mode
[  492.140406][T17243] debugfs: 'hsr0' already exists in 'hsr'
[  492.158610][T17243] Cannot create hsr debugfs directory
[  492.273871][ T1113] hsr_slave_0: left promiscuous mode
[  492.776306][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1
[  492.786112][T17448] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  492.794850][T17448] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  492.982943][   T51] Bluetooth: hci1: command tx timeout
[  493.050122][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[  493.173274][ T5831] IPVS: starting estimator thread 0...
[  493.242567][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'.
[  493.251514][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'.
[  493.263723][T17500] IPVS: using max 29 ests per chain, 69600 per kthread
[  493.300202][ T1113] IPVS: stop unused estimator thread 0...
[  493.363746][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'.
[  493.374162][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'.
[  493.547556][T17506] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  493.558753][T17506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.345643][T17508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3031'.
[  494.355676][T17508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3031'.
[  494.480226][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3031'.
[  495.062052][   T51] Bluetooth: hci1: command tx timeout
[  495.527072][T17468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.554142][T17243] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  495.607925][T17243] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  495.634059][T17243] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  495.685917][T17243] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  495.704635][T17243] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  495.725058][T17243] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  495.755496][T17243] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  495.805680][T17243] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  495.818323][T17514] sctp: [Deprecated]: syz.3.3033 (pid 17514) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.818323][T17514] Use struct sctp_sack_info instead
[  496.070657][T17541] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3039'.
[  496.075291][T17243] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.173112][T17243] 8021q: adding VLAN 0 to HW filter on device team0
[  496.220262][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.227544][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.289618][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.296902][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.386943][T17549] syzkaller0: entered promiscuous mode
[  496.393633][T17549] syzkaller0: entered allmulticast mode
[  496.446386][T17553] netlink: 'syz.3.3042': attribute type 39 has an invalid length.
[  496.501415][T17562] raw_sendmsg: syz.3.3042 forgot to set AF_INET. Fix it!
[  496.738905][T17567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3044'.
[  497.231585][T17590] veth1_macvtap: left promiscuous mode
[  497.273817][T17590] macsec0: entered promiscuous mode
[  497.286186][T17593] xt_hashlimit: size too large, truncated to 1048576
[  497.292433][T17590] macsec0: entered allmulticast mode
[  497.325831][T17586] veth1_macvtap: entered promiscuous mode
[  497.343014][T17586] veth1_macvtap: entered allmulticast mode
[  497.345111][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'.
[  497.365176][T17586] macsec0: left promiscuous mode
[  497.387732][T17586] macsec0: left allmulticast mode
[  497.408044][T17586] veth1_macvtap: left allmulticast mode
[  497.434093][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.650781][T17243] veth0_vlan: entered promiscuous mode
[  497.675761][T17607] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3053'.
[  497.703079][T17243] veth1_vlan: entered promiscuous mode
[  497.721274][T17606] nbd: must specify a device to reconfigure
[  497.733817][T17609] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  497.757178][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'.
[  497.826880][T17243] veth0_macvtap: entered promiscuous mode
[  497.873162][T17243] veth1_macvtap: entered promiscuous mode
[  497.943692][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.984757][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.996120][T17617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3055'.
[  498.056148][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.074235][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.107103][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.117148][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.234252][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3059'.
[  498.266471][T17631] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  498.357408][T17631] bond7: (slave lo): Enslaving as an active interface with an up link
[  498.395930][T17631] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  498.674564][T17654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3063'.
[  498.684068][T17656] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3064'.
[  498.685422][T14716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.710273][T17658] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  498.718910][T17658] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  498.751480][T14716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.866601][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3066'.
[  498.900779][T14716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.915962][T14716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.138189][T17672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.219487][T17673] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3071'.
[  499.645426][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  499.656582][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  499.702451][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  499.744993][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  499.754252][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  500.205051][T17725] tipc: New replicast peer: 255.255.255.255
[  500.223062][T17725] tipc: Enabled bearer <udp:syz2>, priority 10
[  500.710224][ T5828] syz_tun (unregistering): left allmulticast mode
[  500.751500][ T5828] syz_tun (unregistering): left promiscuous mode
[  500.782718][ T5828] bridge0: port 1(syz_tun) entered disabled state
[  500.866073][T17760] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  501.056556][   T29] audit: type=1800 audit(1775955817.130:5): pid=17768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3087" name="memory.events" dev="tmpfs" ino=3192 res=0 errno=0
[  501.148049][T17757] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.155996][T17757] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.380649][T17757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.408154][T17757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.588234][T17786] netlink: 'syz.0.3091': attribute type 3 has an invalid length.
[  501.747291][T17790] __nla_validate_parse: 6 callbacks suppressed
[  501.747311][T17790] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.3092'.
[  501.766147][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.789287][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  501.807177][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.863390][   T51] Bluetooth: hci0: command tx timeout
[  501.878036][T17794] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3094'.
[  501.892601][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  501.900925][T17797] IPv6: NLM_F_CREATE should be specified when creating new route
[  501.909823][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'.
[  501.947375][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.988732][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.003392][T17801] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  502.013582][T17801] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3096'.
[  502.033636][T17801] tc_dump_action: action bad kind
[  502.172992][T17805] vlan4: entered allmulticast mode
[  502.178196][T17805] hsr0: entered allmulticast mode
[  502.192087][T17805] hsr_slave_0: entered allmulticast mode
[  502.200434][T17805] hsr_slave_1: entered allmulticast mode
[  502.456641][T17831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3104'.
[  502.525894][T17707] chnl_net:caif_netlink_parms(): no params data found
[  502.608516][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'.
[  502.638036][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'.
[  502.880369][T17859] Bluetooth: hci2: Opcode 0x0c1a failed: -22
[  502.901034][T17707] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.923769][T17707] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.931192][T17707] bridge_slave_0: entered allmulticast mode
[  502.951700][T17707] bridge_slave_0: entered promiscuous mode
[  502.983110][T17707] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.994946][T17707] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.022275][T17707] bridge_slave_1: entered allmulticast mode
[  503.029999][T17707] bridge_slave_1: entered promiscuous mode
[  503.125000][T17707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.146190][T17707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.239483][T17707] team0: Port device team_slave_0 added
[  503.265552][T17707] team0: Port device team_slave_1 added
[  503.335855][T17707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.353837][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.390608][T17707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.409994][T17707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.417967][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.460401][T17707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.474974][T17890] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3120'.
[  503.502130][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3122'.
[  503.522758][T17890] block nbd0: not configured, cannot reconfigure
[  503.575682][T17892] ipvlan2: entered allmulticast mode
[  503.595083][T17892] syz_tun: entered allmulticast mode
[  503.774422][T17707] hsr_slave_0: entered promiscuous mode
[  503.789243][T17707] hsr_slave_1: entered promiscuous mode
[  503.814221][T17707] debugfs: 'hsr0' already exists in 'hsr'
[  503.830084][T17707] Cannot create hsr debugfs directory
[  503.943400][   T51] Bluetooth: hci0: command tx timeout
[  504.234704][T17923] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.242523][T17923] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.419219][T17707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.433321][T17707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.500936][T17938] bond1: entered allmulticast mode
[  504.533328][T17707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.546545][T17707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.594953][T17930] geneve3: entered promiscuous mode
[  504.600320][T17930] geneve3: entered allmulticast mode
[  504.622880][T14716] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  504.631470][T14716] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  504.646819][T14716] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  504.697083][T17707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.719917][T17707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.771986][T14710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  504.852130][T17707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.875112][T17707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.103439][T17967] netlink: 'syz.2.3145': attribute type 1 has an invalid length.
[  505.165494][T17707] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  505.189399][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.202768][T17707] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  505.221633][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.231632][T17707] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  505.255213][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.273724][T17707] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  505.295768][T17707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  505.481179][T17991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  505.531711][T17707] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.554656][T17991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  505.566361][T17991] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  505.574260][T17991] gretap1: entered promiscuous mode
[  505.579810][T17991] gretap1: entered allmulticast mode
[  505.646107][T17707] 8021q: adding VLAN 0 to HW filter on device team0
[  505.654304][T17995] bond14: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  505.686506][T17995] bond14: (slave C): Enslaving as an active interface with an up link
[  505.696169][T17995] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  505.719450][T14710] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.726760][T14710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.763621][T14714] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.770835][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.022464][   T51] Bluetooth: hci0: command tx timeout
[  506.116870][T18025] netlink: 'syz.1.3159': attribute type 39 has an invalid length.
[  506.444978][T17707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.576496][T17707] veth0_vlan: entered promiscuous mode
[  506.636422][T17707] veth1_vlan: entered promiscuous mode
[  506.746365][T17707] veth0_macvtap: entered promiscuous mode
[  506.786178][T17707] veth1_macvtap: entered promiscuous mode
[  506.799987][T18049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.847283][T17707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.878665][T18046] syzkaller1: entered promiscuous mode
[  506.903918][T18046] syzkaller1: entered allmulticast mode
[  506.938676][T17707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.021731][T14716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.094979][T18057] syzkaller0: entered promiscuous mode
[  507.100653][T18057] syzkaller0: entered allmulticast mode
[  507.122114][T14716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.131510][T14716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.221947][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  507.230072][    C0] lec:lec_tx_timeout: lec0
[  507.235207][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  508.112480][   T51] Bluetooth: hci0: command tx timeout
[  508.922813][T14716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.072642][T18092] __nla_validate_parse: 10 callbacks suppressed
[  509.072662][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3179'.
[  509.102149][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.136958][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.222812][T14716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.252549][T14716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.415973][T18108] netlink: 'syz.4.3184': attribute type 3 has an invalid length.
[  509.545706][T18115] geneve2: entered promiscuous mode
[  509.561541][T18115] geneve2: entered allmulticast mode
[  510.082397][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  510.104855][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  510.119520][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  510.137840][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  510.154914][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  510.257495][T18143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3192'.
[  510.745170][T18167] netlink: 'syz.0.3198': attribute type 11 has an invalid length.
[  510.754828][T18167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3198'.
[  510.907922][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3199'.
[  510.934131][T18172] ip6t_REJECT: ECHOREPLY is not supported
[  511.018527][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3202'.
[  511.428714][T18192] only policy match revision 0 supported
[  511.428738][T18192] unable to load match
[  511.585517][T18137] chnl_net:caif_netlink_parms(): no params data found
[  511.883810][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'.
[  512.029631][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'.
[  512.049362][T18228] bond_slave_1: Device is already in use.
[  512.076676][T18230] bond_slave_1: Device is already in use.
[  512.175219][T18137] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.231131][T18137] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.241816][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  512.250126][    C0] lec:lec_tx_timeout: lec0
[  512.274754][   T51] Bluetooth: hci3: command tx timeout
[  512.291544][T18137] bridge_slave_0: entered allmulticast mode
[  512.326992][T18137] bridge_slave_0: entered promiscuous mode
[  512.355803][T18244] netlink: 'syz.3.3217': attribute type 10 has an invalid length.
[  512.379756][T18243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3216'.
[  512.392998][T18137] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.407146][T18137] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.425746][T18137] bridge_slave_1: entered allmulticast mode
[  512.449194][T18137] bridge_slave_1: entered promiscuous mode
[  512.506671][T18244] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  512.528867][T18241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.588141][T18137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.621269][T18137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.745654][T18137] team0: Port device team_slave_0 added
[  512.778939][T18137] team0: Port device team_slave_1 added
[  512.854836][T18137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.873991][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.902092][T18137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.943869][T18137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.950882][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.985184][T18137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.020263][T18272] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3226'.
[  513.089453][T18137] hsr_slave_0: entered promiscuous mode
[  513.133277][T18137] hsr_slave_1: entered promiscuous mode
[  513.140056][T18137] debugfs: 'hsr0' already exists in 'hsr'
[  513.152020][T18137] Cannot create hsr debugfs directory
[  513.200735][T18276] netlink: 'syz.2.3228': attribute type 12 has an invalid length.
[  513.219303][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3231'.
[  513.585254][T18137] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.622604][T18137] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  513.795425][T18137] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.814742][T18137] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  513.945710][T18137] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.957896][T18137] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  514.040644][T18137] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  514.065039][T18137] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  514.134212][T18329] __nla_validate_parse: 7 callbacks suppressed
[  514.134234][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'.
[  514.286917][T18337] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3244'.
[  514.344527][   T51] Bluetooth: hci3: command tx timeout
[  514.623334][T18137] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  514.674842][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  514.696932][T18137] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  514.722579][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  514.740460][T18137] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  514.821311][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  514.888525][T18137] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  515.020534][T18137] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  515.281531][T18137] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.340105][T18391] x_tables: duplicate entry at hook 1
[  515.352640][T18137] 8021q: adding VLAN 0 to HW filter on device team0
[  515.386144][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.393434][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.426100][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.433366][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.463160][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'.
[  515.544057][T18137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.584348][T18399] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3258'.
[  515.750969][T18404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3260'.
[  515.803164][T18404] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig
[  515.814569][T18404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3260'.
[  515.863781][T18404] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3260'.
[  515.992062][T18412] netlink: 'syz.0.3261': attribute type 8 has an invalid length.
[  516.023387][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'.
[  516.160470][T18412] bond0: entered promiscuous mode
[  516.168337][T18412] bond_slave_0: entered promiscuous mode
[  516.175008][T18412] bond_slave_1: entered promiscuous mode
[  516.186902][T18412] gretap0: entered promiscuous mode
[  516.195629][T18412] ip6gretap0: entered promiscuous mode
[  516.211968][T18412] debugfs: 'hsr1' already exists in 'hsr'
[  516.225517][T18412] Cannot create hsr debugfs directory
[  516.231334][T18412] hsr1: entered promiscuous mode
[  516.310869][T18137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.359592][T18420] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  516.424467][   T51] Bluetooth: hci3: command tx timeout
[  516.508430][T18137] veth0_vlan: entered promiscuous mode
[  516.555598][T18137] veth1_vlan: entered promiscuous mode
[  516.658040][T18137] veth0_macvtap: entered promiscuous mode
[  516.702394][T18137] veth1_macvtap: entered promiscuous mode
[  516.766938][T18137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.777380][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'.
[  516.813525][T18137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.857181][T14710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.891282][T14710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.921206][T14710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.961457][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3273'.
[  516.981035][T14710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.327836][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.351933][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.528364][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.562307][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.843183][T18482] Bluetooth: MGMT ver 1.23
[  517.888662][T18482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.096541][T18489] netlink: 'syz.0.3284': attribute type 10 has an invalid length.
[  518.188350][T18495] netlink: 'syz.1.3287': attribute type 3 has an invalid length.
[  518.313579][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  518.323810][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  518.337693][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  518.347964][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  518.372970][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  518.503417][   T51] Bluetooth: hci3: command tx timeout
[  518.752869][T18514] syzkaller0: entered promiscuous mode
[  518.758764][T18514] syzkaller0: entered allmulticast mode
[  519.184758][T18538] __nla_validate_parse: 6 callbacks suppressed
[  519.184781][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3298'.
[  519.219991][T18499] chnl_net:caif_netlink_parms(): no params data found
[  519.347140][T18544] IPv6: sit1: Disabled Multicast RS
[  519.353505][T18544] sit1: entered allmulticast mode
[  519.394132][T18499] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.401452][T18499] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.410973][T18499] bridge_slave_0: entered allmulticast mode
[  519.419575][T18499] bridge_slave_0: entered promiscuous mode
[  519.441516][T18499] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.449055][T18499] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.457058][T18499] bridge_slave_1: entered allmulticast mode
[  519.464983][T18499] bridge_slave_1: entered promiscuous mode
[  519.553026][T18499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.566509][T18499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.660196][T18499] team0: Port device team_slave_0 added
[  519.675240][T18499] team0: Port device team_slave_1 added
[  519.756919][T18499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.764479][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.826610][T18499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.837511][T18558] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3303'.
[  519.874604][T18499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.886266][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.897791][T18558] netlink: 'syz.0.3303': attribute type 64 has an invalid length.
[  519.914871][T18499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.046285][T18562] syzkaller0: entered promiscuous mode
[  520.053771][T18562] syzkaller0: entered allmulticast mode
[  520.071232][T18499] hsr_slave_0: entered promiscuous mode
[  520.078620][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3305'.
[  520.087955][T18565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3305'.
[  520.099476][T18499] hsr_slave_1: entered promiscuous mode
[  520.106974][T18499] debugfs: 'hsr0' already exists in 'hsr'
[  520.113374][T18499] Cannot create hsr debugfs directory
[  520.215356][T18563] syz_tun: entered promiscuous mode
[  520.422116][   T51] Bluetooth: hci4: command tx timeout
[  520.498651][T18583] syzkaller1: entered promiscuous mode
[  520.505569][T18583] syzkaller1: entered allmulticast mode
[  520.536342][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3309'.
[  521.052579][T18613] x_tables: duplicate underflow at hook 1
[  521.205013][T18620] macsec1: entered promiscuous mode
[  521.210409][T18620] bridge0: entered promiscuous mode
[  521.216620][T18620] macsec1: entered allmulticast mode
[  521.223750][T18620] bridge0: entered allmulticast mode
[  521.229944][T18620] bridge0: port 3(macsec1) entered blocking state
[  521.242258][T18620] bridge0: port 3(macsec1) entered disabled state
[  521.261346][T18620] bridge0: left allmulticast mode
[  521.275416][T18628] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  521.282247][T18620] bridge0: left promiscuous mode
[  521.434378][T18499] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  521.467132][T18499] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  521.486045][T18499] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  521.546419][T18499] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  521.571229][T18640] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3324'.
[  521.581113][T18499] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  521.598558][T18499] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  521.616998][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'.
[  521.635674][T18640] 0�: renamed from hsr_slave_1
[  521.648205][T18640] 0�: entered allmulticast mode
[  521.659455][T18640] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  521.711594][T18499] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  521.749432][T18499] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  522.020465][T18662] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3328'.
[  522.142660][T18665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  522.235148][T18499] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.375369][T14719] tipc: Resetting bearer <ib:gretap0>
[  522.513256][   T51] Bluetooth: hci4: command tx timeout
[  522.709381][T14719] bond13 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  522.731117][T14719] bond13 (unregistering): (slave ip6gretap1): Releasing backup interface
[  522.837140][T18691] netlink: 'syz.0.3336': attribute type 8 has an invalid length.
[  522.845361][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'.
[  522.925333][T14719] tipc: Disabling bearer <ib:gretap0>
[  522.941544][T14719] gretap0 (unregistering): left promiscuous mode
[  523.017139][T14719] bond6 (unregistering): (slave geneve3): Releasing active interface
[  523.224220][T14719] bond10 (unregistering): (slave bridge4): Removing an active aggregator
[  523.233697][T14719] bond10 (unregistering): (slave bridge4): Releasing backup interface
[  523.260961][T14719] bond10 (unregistering): (slave bridge4): the permanent HWaddr of slave - 5a:95:69:57:f4:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  523.281164][T14719] bridge4 (unregistering): left promiscuous mode
[  523.288068][T14719] bridge4 (unregistering): left allmulticast mode
[  523.338982][T14719] bond10 (unregistering): (slave bridge5): Releasing backup interface
[  523.348332][T14719] bridge5 (unregistering): left promiscuous mode
[  523.356700][T14719] bridge5 (unregistering): left allmulticast mode
[  523.438326][T14719] .` (unregistering): Released all slaves
[  523.453270][T14719] bond1 (unregistering): Released all slaves
[  523.475852][T14719] bond2 (unregistering): Released all slaves
[  523.504468][T14719] bond3 (unregistering): Released all slaves
[  523.534570][T14719] bond4 (unregistering): Released all slaves
[  523.560505][T14719] bond5 (unregistering): Released all slaves
[  523.587407][T14719] bond6 (unregistering): Released all slaves
[  523.610618][T14719] bond7 (unregistering): Released all slaves
[  523.648448][T14719] bond8 (unregistering): Released all slaves
[  523.671729][T14719] bond9 (unregistering): Released all slaves
[  523.701117][T14719] bond10 (unregistering): Released all slaves
[  523.729754][T14719] bond0 (unregistering): left promiscuous mode
[  523.745588][T14719] bond0 (unregistering): Released all slaves
[  523.769674][T14719] bond11 (unregistering): Released all slaves
[  523.775064][T18723] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3338'.
[  523.788702][T14719] bond12 (unregistering): Released all slaves
[  523.790537][T18722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  523.814325][T14719] bond13 (unregistering): Released all slaves
[  523.873137][T18499] 8021q: adding VLAN 0 to HW filter on device team0
[  523.906296][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.913553][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.943487][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.950780][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.021265][T14719] �9: left promiscuous mode
[  524.215115][T14719] tipc: Left network mode
[  524.305154][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'.
[  524.409160][T18742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3344'.
[  524.491405][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  524.518592][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  524.581989][   T51] Bluetooth: hci4: command tx timeout
[  524.608758][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  524.639875][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3347'.
[  524.653502][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3347'.
[  524.692040][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  524.726247][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  524.836118][T18741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'.
[  525.004904][T18499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.200797][T18499] veth0_vlan: entered promiscuous mode
[  525.238390][T18499] veth1_vlan: entered promiscuous mode
[  525.444634][T14719] hsr_slave_0: left promiscuous mode
[  525.474075][T14719] hsr_slave_1: left promiscuous mode
[  525.506153][T14719] veth0_macvtap: left promiscuous mode
[  525.517091][T14719] veth1_vlan: left promiscuous mode
[  526.662212][   T51] Bluetooth: hci4: command tx timeout
[  526.807324][T18499] veth0_macvtap: entered promiscuous mode
[  526.844558][T18499] veth1_macvtap: entered promiscuous mode
[  526.901318][T18499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.960905][T18824] netlink: 'syz.3.3362': attribute type 12 has an invalid length.
[  526.962038][T18499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.030281][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.082339][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.094174][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.177297][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.525096][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.542575][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.609946][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.630842][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.765749][T14719] IPVS: stop unused estimator thread 0...
[  528.299279][T18897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.529499][T18911] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  528.895184][T18936] netlink: 'syz.1.3390': attribute type 1 has an invalid length.
[  528.929940][T18929] syzkaller0: entered promiscuous mode
[  528.942177][T18929] syzkaller0: entered allmulticast mode
[  529.005370][T18937] tipc: Started in network mode
[  529.016587][T18937] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  529.026708][T18937] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  529.275437][T18957] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  529.313045][T18961] xt_hashlimit: size too large, truncated to 1048576
[  529.872623][T18987] netlink: 'syz.3.3402': attribute type 1 has an invalid length.
[  529.884386][T18987] __nla_validate_parse: 13 callbacks suppressed
[  529.884408][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3402'.
[  531.502066][T15200] tipc: Node number set to 10136234
[  531.550773][T19001] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  531.880880][T19015] syzkaller0: entered promiscuous mode
[  531.886894][T19015] syzkaller0: entered allmulticast mode
[  531.898231][T19030] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  531.912637][T19030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.974535][T19032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3415'.
[  532.381012][T19053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3421'.
[  532.381140][T19051] set match dimension is over the limit!
[  532.405672][T19051] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3422'.
[  533.835259][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'.
[  533.848717][T19052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.083729][T19065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3425'.
[  534.094485][T19067] ��: renamed from team_slave_1
[  534.462117][T19092] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  534.525001][T19077] syzkaller0: entered promiscuous mode
[  534.537807][T19077] syzkaller0: entered allmulticast mode
[  534.928837][T19111] IPv6: NLM_F_CREATE should be specified when creating new route
[  534.996693][T19116] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3440'.
[  536.275526][T19121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3441'.
[  536.556441][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.801646][T19152] netlink: 'syz.2.3451': attribute type 1 has an invalid length.
[  536.851100][T19157] netlink: 'syz.2.3451': attribute type 1 has an invalid length.
[  536.948618][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'.
[  537.006658][T19164] netlink: 604 bytes leftover after parsing attributes in process `syz.2.3455'.
[  537.137530][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'.
[  537.174808][T19171] bond2 (unregistering): Released all slaves
[  537.260997][T19173] wg1: entered promiscuous mode
[  537.274167][T19173] wg1: entered allmulticast mode
[  537.473203][T19195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3463'.
[  537.593691][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3468'.
[  537.672364][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'.
[  537.776340][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'.
[  537.811916][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3471'.
[  537.901329][ T1113] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  537.927000][T19226] unsupported nlmsg_type 40
[  537.931832][ T1113] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  537.931883][ T1113] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  537.986516][ T1113] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  538.176763][T19248] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  538.206210][T19246] blkio.reset_stats is deprecated
[  538.345886][T19252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.464119][T19266] netlink: 'syz.4.3487': attribute type 1 has an invalid length.
[  538.501206][T19266] netlink: 'syz.4.3487': attribute type 1 has an invalid length.
[  538.614806][T19282] sctp: [Deprecated]: syz.0.3489 (pid 19282) Use of int in max_burst socket option.
[  538.614806][T19282] Use struct sctp_assoc_value instead
[  539.443161][T19343] netlink: 'syz.1.3505': attribute type 1 has an invalid length.
[  539.503971][T19343] netlink: 'syz.1.3505': attribute type 4 has an invalid length.
[  539.567443][T19344] bond2 (unregistering): Released all slaves
[  539.664046][T19349] netlink: 'syz.2.3507': attribute type 20 has an invalid length.
[  539.765668][T19349] netlink: 'syz.2.3507': attribute type 20 has an invalid length.
[  539.850040][T19363] macsec1: entered promiscuous mode
[  539.856905][T19363] bridge0: entered promiscuous mode
[  539.862633][T19363] macsec1: entered allmulticast mode
[  539.867979][T19363] bridge0: entered allmulticast mode
[  539.874544][T19363] bridge0: port 3(macsec1) entered blocking state
[  539.881295][T19363] bridge0: port 3(macsec1) entered disabled state
[  539.894527][T19363] bridge0: left allmulticast mode
[  539.899619][T19363] bridge0: left promiscuous mode
[  540.068525][T19370] __nla_validate_parse: 17 callbacks suppressed
[  540.068546][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3517'.
[  540.216659][T19377] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3518'.
[  540.630072][T19412] xt_TPROXY: Can be used only with -p tcp or -p udp
[  540.955144][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'.
[  540.994246][T19439] syzkaller1: entered promiscuous mode
[  541.030317][T19439] syzkaller1: entered allmulticast mode
[  541.270505][T19452] syzkaller0: entered promiscuous mode
[  541.276619][T19452] syzkaller0: entered allmulticast mode
[  541.728145][T19483] wg1 speed is unknown, defaulting to 1000
[  541.745924][T19483] wg1 speed is unknown, defaulting to 1000
[  541.768382][T19483] wg1 speed is unknown, defaulting to 1000
[  541.831430][T19483] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  541.859673][T19483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  541.887598][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3548'.
[  541.985445][T19483] wg1 speed is unknown, defaulting to 1000
[  542.050921][T19493] netlink: 276 bytes leftover after parsing attributes in process `syz.4.3550'.
[  542.094969][T19496] openvswitch: netlink: Multiple metadata blocks provided
[  542.106321][T19483] wg1 speed is unknown, defaulting to 1000
[  542.165411][T19483] wg1 speed is unknown, defaulting to 1000
[  542.184872][T19483] wg1 speed is unknown, defaulting to 1000
[  542.198417][T19483] wg1 speed is unknown, defaulting to 1000
[  542.209047][T19483] wg1 speed is unknown, defaulting to 1000
[  542.218800][T19483] wg1 speed is unknown, defaulting to 1000
[  542.231413][T19483] wg1 speed is unknown, defaulting to 1000
[  542.363585][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'.
[  542.616591][T19523] netlink: 'syz.3.3559': attribute type 9 has an invalid length.
[  542.684235][T19529] xt_hashlimit: size too large, truncated to 1048576
[  542.745039][T19533] netlink: 'syz.4.3563': attribute type 1 has an invalid length.
[  542.797449][T19533] 8021q: adding VLAN 0 to HW filter on device bond2
[  542.860670][T19533] bond2: entered allmulticast mode
[  542.919936][T19533] bond2: (slave ip6gretap1): making interface the new active one
[  542.965654][T19548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.981873][T19533] ip6gretap1: entered allmulticast mode
[  542.998524][T19533] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  543.031275][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'.
[  543.033058][T19548] syzkaller1: entered promiscuous mode
[  543.040556][T19550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3567'.
[  543.066133][T19548] syzkaller1: entered allmulticast mode
[  543.172351][T19557] netlink: 150860 bytes leftover after parsing attributes in process `syz.0.3569'.
[  543.430684][T19571] syzkaller1: entered promiscuous mode
[  543.481363][T19571] syzkaller1: entered allmulticast mode
[  543.634350][T19587] syzkaller0: entered promiscuous mode
[  543.644755][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'.
[  543.674329][T19587] netlink: 'syz.4.3579': attribute type 10 has an invalid length.
[  543.685441][T19587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.700102][T19587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  543.737089][T19594] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[  544.081219][T19602] xt_bpf: check failed: parse error
[  544.176758][T19609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.317534][T19614] bond3: entered promiscuous mode
[  544.334207][T19614] macvlan4: entered promiscuous mode
[  544.339708][T19614] macvlan4: entered allmulticast mode
[  544.346901][T19614] bond3: (slave macvlan4): Opening slave failed
[  545.244159][T19632] netlink: 'syz.3.3591': attribute type 29 has an invalid length.
[  545.253002][T19632] netlink: 'syz.3.3591': attribute type 29 has an invalid length.
[  545.261481][T19632] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3591'.
[  546.335747][T19571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.503701][T19637] syzkaller0: entered promiscuous mode
[  546.537519][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.539099][T19637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3593'.
[  546.556189][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.558441][T19637] syzkaller0: entered allmulticast mode
[  546.581649][T19645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  546.618910][T19643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  546.679028][T19643] ip6t_srh: unknown srh invflags 4000
[  546.768314][T19643] netlink: 'syz.4.3595': attribute type 11 has an invalid length.
[  546.802135][T19643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3595'.
[  546.985718][T19669] netlink: 'syz.2.3602': attribute type 21 has an invalid length.
[  546.999529][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3601'.
[  547.019332][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3602'.
[  547.104771][T19681] netlink: 'syz.2.3602': attribute type 21 has an invalid length.
[  547.113841][T19681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3602'.
[  547.401595][T19699] netlink: 'syz.3.3609': attribute type 21 has an invalid length.
[  547.428030][T19699] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3609'.
[  547.452668][T19699] netlink: 'syz.3.3609': attribute type 4 has an invalid length.
[  547.509669][T19699] netlink: 'syz.3.3609': attribute type 5 has an invalid length.
[  547.543744][T19699] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3609'.
[  547.984836][T19730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3619'.
[  549.827648][T19753] netlink: 'syz.3.3620': attribute type 1 has an invalid length.
[  549.964547][T19757] 8021q: adding VLAN 0 to HW filter on device bond3
[  549.973689][T19757] bond2: (slave bond3): making interface the new active one
[  549.999120][T19757] bond2: (slave bond3): Enslaving as an active interface with an up link
[  550.055204][T19757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3620'.
[  550.687895][T19753] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  550.736363][T19757] 8021q: adding VLAN 0 to HW filter on device bond2
[  550.914985][T19817] netlink: 'syz.1.3628': attribute type 19 has an invalid length.
[  550.933946][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'.
[  550.996870][  T196] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  551.029941][  T196] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  551.068690][  T196] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  551.113831][  T196] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  551.180846][T19833] netlink: 'syz.3.3634': attribute type 42 has an invalid length.
[  551.520086][T19854] syzkaller0: entered promiscuous mode
[  551.573776][T19854] syzkaller0: entered allmulticast mode
[  551.686158][T19869] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3642'.
[  551.768325][T19871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'.
[  551.876068][T19871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.292456][T19909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3655'.
[  552.307830][T19906] bridge0: port 3(syz_tun) entered blocking state
[  552.338621][T19906] bridge0: port 3(syz_tun) entered disabled state
[  552.364862][T19906] syz_tun: entered allmulticast mode
[  552.388208][T19906] syz_tun: entered promiscuous mode
[  552.404296][T19903] netlink: 'syz.1.3652': attribute type 5 has an invalid length.
[  552.510824][T19923] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3657'.
[  552.593010][T19926] Bluetooth: MGMT ver 1.23
[  552.607798][T19926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.743287][T19937] xt_hashlimit: size too large, truncated to 1048576
[  552.743504][T19938] xt_hashlimit: size too large, truncated to 1048576
[  552.766062][T19939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.861080][T19952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3664'.
[  552.923057][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3665'.
[  552.977861][T19944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3665'.
[  552.999375][T19944] netlink: 'syz.4.3665': attribute type 1 has an invalid length.
[  553.019202][T19944] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3665'.
[  553.265819][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'.
[  553.324372][T19966] x_tables: duplicate underflow at hook 2
[  553.332290][T19966] ipt_REJECT: TCP_RESET invalid for non-tcp
[  553.371416][T19965] netlink: 'syz.4.3670': attribute type 1 has an invalid length.
[  553.461081][T19973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.485790][T19973] syzkaller0: entered promiscuous mode
[  553.491388][T19973] syzkaller0: entered allmulticast mode
[  553.519253][T19977] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  553.543382][T19973] tipc: Resetting bearer <eth:syzkaller0>
[  553.592094][T19971] tipc: Resetting bearer <eth:syzkaller0>
[  553.665598][T19971] tipc: Disabling bearer <eth:syzkaller0>
[  553.726329][T19987] netlink: 'syz.0.3677': attribute type 1 has an invalid length.
[  553.783953][T19984] bond4 (unregistering): Released all slaves
[  553.901232][T19993] veth6: entered promiscuous mode
[  553.930987][T19992] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.938884][T19992] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.026097][T19999] 8021q: adding VLAN 0 to HW filter on device bond1
[  554.389052][T20028] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  554.448009][T20028] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  554.460363][T20028] gretap1: entered promiscuous mode
[  554.473851][T20028] gretap1: entered allmulticast mode
[  554.724855][T20054] netlink: 'syz.4.3694': attribute type 1 has an invalid length.
[  554.824120][T20054] bond4: entered promiscuous mode
[  554.829855][T20054] 8021q: adding VLAN 0 to HW filter on device bond4
[  554.839437][T20066] openvswitch: netlink: Flow actions attr not present in new flow.
[  554.936648][T20054] bond4: (slave bridge1): making interface the new active one
[  554.961616][T20054] bridge1: entered promiscuous mode
[  554.981124][T20054] bridge1: left promiscuous mode
[  555.792783][T20125] netlink: 'syz.2.3714': attribute type 2 has an invalid length.
[  555.943237][T20137] netlink: 'syz.2.3720': attribute type 39 has an invalid length.
[  556.012183][T20144] netlink: 'syz.2.3720': attribute type 39 has an invalid length.
[  556.648339][T20183] netlink: 'syz.3.3730': attribute type 4 has an invalid length.
[  556.650341][T20184] netlink: 'syz.3.3730': attribute type 4 has an invalid length.
[  556.661853][T20183] __nla_validate_parse: 17 callbacks suppressed
[  556.661870][T20183] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3730'.
[  556.691571][T20184] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3730'.
[  556.887294][T20156] syzkaller1: entered promiscuous mode
[  556.892981][T20156] syzkaller1: entered allmulticast mode
[  557.157058][T20208] xt_hashlimit: size too large, truncated to 1048576
[  557.232201][T20209] �: renamed from vxcan1 (while UP)
[  557.832314][T20236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3740'.
[  558.028011][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3742'.
[  558.052437][T20243] wireguard0: entered promiscuous mode
[  558.090000][T20243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.192264][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'.
[  558.250453][T20256] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  558.264254][   T51] Bluetooth: hci4: command tx timeout
[  558.315593][T20265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3749'.
[  558.329413][T20256] 8021q: adding VLAN 0 to HW filter on device macsec1
[  558.445816][T20274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3750'.
[  559.069514][ T5490] veth1_macvtap: left promiscuous mode
[  559.144271][ T5490] veth1_macvtap: entered promiscuous mode
[  559.573669][T20323] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3762'.
[  559.632365][T20323] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3762'.
[  559.644184][T20323] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3762'.
[  559.759235][T20340] netlink: zone id is out of range
[  559.771715][T20340] netlink: zone id is out of range
[  559.777348][T20340] netlink: zone id is out of range
[  559.813815][T20340] netlink: zone id is out of range
[  559.840759][T20340] netlink: zone id is out of range
[  559.911905][T20340] netlink: zone id is out of range
[  559.917689][T20340] netlink: zone id is out of range
[  559.930692][T20340] netlink: zone id is out of range
[  559.956137][T20340] netlink: zone id is out of range
[  560.796204][T20398] syzkaller0: entered promiscuous mode
[  560.805107][T20398] syzkaller0: entered allmulticast mode
[  562.621936][T20410] netlink: 'syz.0.3783': attribute type 4 has an invalid length.
[  562.631221][T20416] netlink: 'syz.2.3785': attribute type 4 has an invalid length.
[  563.239978][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  563.409590][T20462] __nla_validate_parse: 8 callbacks suppressed
[  563.409609][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'.
[  564.617958][T20432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3788'.
[  564.627914][T20432] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3788'.
[  564.822988][T20466] macvlan0: entered promiscuous mode
[  564.847490][T20466] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3795'.
[  564.893393][T20470] syzkaller0: entered promiscuous mode
[  564.977792][T20475] net_ratelimit: 135 callbacks suppressed
[  564.977816][T20475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  565.019318][T20476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3796'.
[  565.163345][T20435] wg1 speed is unknown, defaulting to 1000
[  565.331112][T20492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3803'.
[  565.475250][T20501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3806'.
[  565.594707][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3807'.
[  565.607212][T20506] gre0: entered promiscuous mode
[  565.629032][T20506] gre0: entered allmulticast mode
[  565.657394][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3807'.
[  565.820851][T20517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  566.018105][T20526] SET target dimension over the limit!
[  566.038073][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'.
[  566.206477][T20537] netlink: 'syz.0.3817': attribute type 1 has an invalid length.
[  566.237984][T20543] nbd: must specify a device to reconfigure
[  566.293619][T20537] bond2: entered promiscuous mode
[  566.303601][T20537] 8021q: adding VLAN 0 to HW filter on device bond2
[  566.353443][T20537] 8021q: adding VLAN 0 to HW filter on device bond2
[  566.366784][T20537] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  566.377875][T20537] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  566.394891][T20537] bond2: (slave ip6gre1): making interface the new active one
[  566.403522][T20537] ip6gre1: entered promiscuous mode
[  566.413917][T20537] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  566.513848][T20562] rdma_rxe: rxe_newlink: failed to add bond0
[  566.548190][T20562] bond0: entered promiscuous mode
[  566.562008][T20562] bond_slave_0: entered promiscuous mode
[  566.567917][T20562] bond_slave_1: entered promiscuous mode
[  566.593366][T20562] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode
[  566.607161][T20562] batadv0: entered promiscuous mode
[  566.616853][T20562] 8021q: adding VLAN 0 to HW filter on device hsr1
[  566.625702][T20562] bond0: left promiscuous mode
[  566.630532][T20562] bond_slave_0: left promiscuous mode
[  566.637895][T20562] bond_slave_1: left promiscuous mode
[  566.646463][T20562] mac80211_hwsim hwsim31 wlan1: left promiscuous mode
[  566.673417][T20562] batadv0: left promiscuous mode
[  566.821124][T20575] tipc: Started in network mode
[  566.839967][T20575] tipc: Node identity 010000000000000001, cluster identity 4711
[  566.907812][T20584] syzkaller1: entered promiscuous mode
[  566.913780][T20584] syzkaller1: entered allmulticast mode
[  566.932374][T20584] netlink: 'syz.4.3829': attribute type 21 has an invalid length.
[  567.060717][T20590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.167043][T20593] syzkaller0: entered promiscuous mode
[  567.176467][T20593] syzkaller0: entered allmulticast mode
[  567.183179][T20593] tipc: Resetting bearer <eth:syzkaller0>
[  567.246598][T20593] tipc: Resetting bearer <eth:syzkaller0>
[  568.253362][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  568.261435][    C0] lec:lec_tx_timeout: lec0
[  569.045280][T20593] tipc: Disabling bearer <eth:syzkaller0>
[  569.152114][ T5964] tipc: Node number set to 16777216
[  569.186481][T20624] syzkaller0: entered promiscuous mode
[  569.214879][T20624] syzkaller0: entered allmulticast mode
[  569.284400][T20631] netlink: 'syz.0.3841': attribute type 5 has an invalid length.
[  569.353459][T20636] __nla_validate_parse: 8 callbacks suppressed
[  569.353481][T20636] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3843'.
[  569.370145][T20631] netlink: 'syz.0.3841': attribute type 8 has an invalid length.
[  569.537775][T20638] syzkaller0: entered promiscuous mode
[  569.544132][T20638] syzkaller0: entered allmulticast mode
[  569.573997][T20642] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3845'.
[  569.585603][T20650] netlink: 'syz.0.3848': attribute type 1 has an invalid length.
[  569.602539][T20650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3848'.
[  569.752524][T20649] netlink: 'syz.0.3848': attribute type 1 has an invalid length.
[  569.792185][T20649] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3848'.
[  569.838999][T20657] pim6reg1: entered promiscuous mode
[  569.847352][T20657] pim6reg1: entered allmulticast mode
[  570.186678][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.195457][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.303632][T10904] lec:lec_start_xmit: lec0:No lecd attached
[  570.394431][T15196] IPVS: starting estimator thread 0...
[  570.400304][T20702] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3857'.
[  570.427805][T20702] IPVS: sh: FWM 3 0x00000003 - no destination available
[  570.481946][T20704] IPVS: using max 25 ests per chain, 60000 per kthread
[  570.575471][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'.
[  570.595550][T20710] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3861'.
[  570.661532][T20719] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2
[  570.692256][T20719] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @
[  570.919902][T20735] netlink: 'syz.2.3868': attribute type 1 has an invalid length.
[  570.956420][T20735] bond1: entered promiscuous mode
[  570.970342][T20735] 8021q: adding VLAN 0 to HW filter on device bond1
[  571.002538][T20737] 8021q: adding VLAN 0 to HW filter on device bond1
[  571.009805][T20737] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  571.022048][T20737] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  571.036967][T20737] bond1: (slave ip6gre1): making interface the new active one
[  571.044775][T20737] ip6gre1: entered promiscuous mode
[  571.072464][T20737] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  571.123296][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a5cf400: rx timeout, send abort
[  571.244103][T20741] sctp: [Deprecated]: syz.3.3870 (pid 20741) Use of struct sctp_assoc_value in delayed_ack socket option.
[  571.244103][T20741] Use struct sctp_sack_info instead
[  571.363318][T20743] netlink: 'syz.1.3871': attribute type 9 has an invalid length.
[  571.623628][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077702800: rx timeout, send abort
[  571.633396][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a5cf400: abort rx timeout. Force session deactivation
[  571.854743][T20777] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3879'.
[  571.912310][T20781] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3879'.
[  572.131936][    C0] vcan0: j1939_tp_rxtimer: 0xffff888077702800: abort rx timeout. Force session deactivation
[  572.222523][T20799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3886'.
[  572.514681][T20821] gretap2: entered promiscuous mode
[  572.537863][T20821] batman_adv: batadv0: Adding interface: gretap2
[  572.550248][T20821] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.579732][T20821] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  572.714719][T20828] tipc: Started in network mode
[  572.720691][T20828] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  572.731170][T20828] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  572.942309][T20851] ipt_REJECT: TCP_RESET invalid for non-tcp
[  573.035747][T20855] netdevsim netdevsim1 
: renamed from netdevsim0 (while UP)
[  573.936855][T20885] netlink: 'syz.4.3907': attribute type 1 has an invalid length.
[  573.974246][T20885] bond5: entered promiscuous mode
[  573.979470][T20885] bond5: entered allmulticast mode
[  573.988311][T20885] 8021q: adding VLAN 0 to HW filter on device bond5
[  574.006272][T20885] netlink: 'syz.4.3907': attribute type 23 has an invalid length.
[  574.354759][T20911] netlink: 'syz.2.3915': attribute type 1 has an invalid length.
[  574.404429][T20911] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  574.493397][T20923] syzkaller0: entered promiscuous mode
[  574.509719][T20923] syzkaller0: entered allmulticast mode
[  574.586337][T20933] __nla_validate_parse: 5 callbacks suppressed
[  574.586360][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'.
[  574.692749][T20934] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) !
[  574.841311][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3923'.
[  574.900796][T20947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3924'.
[  574.915812][T20947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3924'.
[  575.118909][T20960] netlink: 'syz.2.3931': attribute type 3 has an invalid length.
[  575.149350][T20960] netlink: 'syz.2.3931': attribute type 1 has an invalid length.
[  575.171154][T20961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3929'.
[  575.207975][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'.
[  575.311799][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  575.320254][    C0] lec:lec_tx_timeout: lec0
[  575.332884][T20960] team1: entered promiscuous mode
[  575.343809][T20960] team1: entered allmulticast mode
[  575.490648][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'.
[  575.571569][T20991] FAULT_INJECTION: forcing a failure.
[  575.571569][T20991] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  575.581224][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'.
[  575.600460][T20984] netlink: 'syz.1.3939': attribute type 3 has an invalid length.
[  575.650719][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.4.3940 Not tainted syzkaller #0 PREEMPT(full) 
[  575.650748][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  575.650761][T20991] Call Trace:
[  575.650769][T20991]  <TASK>
[  575.650778][T20991]  dump_stack_lvl+0xe8/0x150
[  575.650814][T20991]  should_fail_ex+0x412/0x560
[  575.650863][T20991]  _copy_from_iter+0x1d3/0x1670
[  575.650886][T20991]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  575.650918][T20991]  ? __pfx_policy_nodemask+0x10/0x10
[  575.650949][T20991]  ? __pfx__copy_from_iter+0x10/0x10
[  575.650979][T20991]  ? set_page_refcounted+0xa0/0x1e0
[  575.651006][T20991]  ? page_copy_sane+0x4e/0x270
[  575.651029][T20991]  copy_page_from_iter+0xdd/0x170
[  575.651056][T20991]  tun_get_user+0x1d4b/0x3dd0
[  575.651079][T20991]  ? tun_get_user+0x6ff/0x3dd0
[  575.651117][T20991]  ? aa_file_perm+0x50e/0x15e0
[  575.651138][T20991]  ? __pfx_tun_get_user+0x10/0x10
[  575.651158][T20991]  ? aa_file_perm+0x192/0x15e0
[  575.651196][T20991]  ? ref_tracker_alloc+0x35c/0x4c0
[  575.651220][T20991]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  575.651245][T20991]  ? tun_get+0x1c/0x2f0
[  575.651274][T20991]  ? tun_get+0x1c/0x2f0
[  575.651296][T20991]  ? tun_get+0x1c/0x2f0
[  575.651323][T20991]  tun_chr_write_iter+0x113/0x200
[  575.651349][T20991]  vfs_write+0x61d/0xb90
[  575.651382][T20991]  ? __pfx_vfs_write+0x10/0x10
[  575.651416][T20991]  ? __fget_files+0x2a/0x420
[  575.651444][T20991]  ksys_write+0x150/0x270
[  575.651470][T20991]  ? __pfx_ksys_write+0x10/0x10
[  575.651505][T20991]  do_syscall_64+0x14d/0xf80
[  575.651533][T20991]  ? trace_irq_disable+0x3b/0x150
[  575.651550][T20991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.651571][T20991]  ? clear_bhb_loop+0x40/0x90
[  575.651595][T20991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.651615][T20991] RIP: 0033:0x7fe4d335d04e
[  575.651634][T20991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  575.651652][T20991] RSP: 002b:00007fe4d41bcfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  575.651675][T20991] RAX: ffffffffffffffda RBX: 00007fe4d41bd6c0 RCX: 00007fe4d335d04e
[  575.651690][T20991] RDX: 000000000000002e RSI: 0000200000000000 RDI: 00000000000000c8
[  575.651703][T20991] RBP: 00007fe4d41bd090 R08: 0000000000000000 R09: 0000000000000000
[  575.651714][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.651731][T20991] R13: 00007fe4d3616038 R14: 00007fe4d3615fa0 R15: 00007ffef568e358
[  575.651764][T20991]  </TASK>
[  575.910701][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'.
[  576.093917][T20998] syzkaller0: entered promiscuous mode
[  576.140002][T21006] netlink: 'syz.2.3946': attribute type 21 has an invalid length.
[  576.186036][T21006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3946'.
[  577.162830][T21051] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  577.195944][T21064] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  577.216885][T21064] bond2 (unregistering): Released all slaves
[  578.433245][T21149] nbd0: detected capacity change from 0 to 63
[  578.465327][   T51] block nbd0: Receive control failed (result -104)
[  578.465587][ T5830] block nbd0: Receive control failed (result -32)
[  578.709893][T21177] netlink: 'syz.4.3981': attribute type 15 has an invalid length.
[  578.744928][T21181] lo speed is unknown, defaulting to 1000
[  578.761989][T21181] lo speed is unknown, defaulting to 1000
[  578.762478][T21182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.829409][T21181] lo speed is unknown, defaulting to 1000
[  578.835871][T21180] lo: entered allmulticast mode
[  578.878289][T21181] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  578.984796][T21181] lo speed is unknown, defaulting to 1000
[  579.025089][T21181] lo speed is unknown, defaulting to 1000
[  579.034525][T21190] netlink: 'syz.4.3985': attribute type 11 has an invalid length.
[  579.042661][T21190] netlink: 'syz.4.3985': attribute type 4 has an invalid length.
[  579.085386][T21181] lo speed is unknown, defaulting to 1000
[  579.123953][T21181] lo speed is unknown, defaulting to 1000
[  579.144491][T21181] lo speed is unknown, defaulting to 1000
[  579.164268][T21181] lo speed is unknown, defaulting to 1000
[  579.182592][T21181] lo speed is unknown, defaulting to 1000
[  579.203329][T21181] lo speed is unknown, defaulting to 1000
[  579.739917][T21213] netlink: 'syz.0.3990': attribute type 12 has an invalid length.
[  579.758640][T21213] netlink: 'syz.0.3990': attribute type 29 has an invalid length.
[  579.802133][T21213] __nla_validate_parse: 12 callbacks suppressed
[  579.802157][T21213] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3990'.
[  579.829802][T21213] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3990'.
[  579.843503][T21203] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3988'.
[  580.245751][T21232] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3997'.
[  580.368554][T21232] netlink: 'syz.1.3997': attribute type 7 has an invalid length.
[  580.401108][   T13] tipc: Subscription rejected, illegal request
[  580.439700][T21249] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4002'.
[  580.449714][T21249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.780384][T21267] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4008'.
[  581.018453][T21279] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4013'.
[  581.224796][T21298] netlink: 'syz.2.4019': attribute type 1 has an invalid length.
[  581.312075][T21264] wg1 speed is unknown, defaulting to 1000
[  581.319406][T21307] bond2: entered promiscuous mode
[  581.358471][T21307] bond2: entered allmulticast mode
[  581.365684][T21307] 8021q: adding VLAN 0 to HW filter on device bond2
[  581.368770][T21298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4019'.
[  581.373118][T21264] lo speed is unknown, defaulting to 1000
[  581.435844][T21307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4019'.
[  581.445608][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'.
[  581.514185][T21315] netlink: 'syz.0.4021': attribute type 153 has an invalid length.
[  581.813305][T21315] syz.0.4021 (21315) used greatest stack depth: 17472 bytes left
[  581.986213][T21338] netlink: 'syz.0.4030': attribute type 1 has an invalid length.
[  582.064899][T21341] netlink: 'syz.4.4032': attribute type 83 has an invalid length.
[  582.309018][T21349] SET target dimension over the limit!
[  582.413874][T21347] syzkaller0: entered promiscuous mode
[  582.419516][T21347] syzkaller0: entered allmulticast mode
[  582.438996][T21362] netlink: 'syz.1.4039': attribute type 2 has an invalid length.
[  582.450326][T21353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  584.151501][T21353] team0: No ports can be present during mode change
[  584.163537][T21367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  584.457621][   T13] 
[  584.460316][   T13] ======================================================
[  584.467459][   T13] WARNING: possible circular locking dependency detected
[  584.474502][   T13] syzkaller #0 Not tainted
[  584.479055][   T13] ------------------------------------------------------
[  584.486115][   T13] kworker/u8:1/13 is trying to acquire lock:
[  584.492284][   T13] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  584.502279][   T13] 
[  584.502279][   T13] but task is already holding lock:
[  584.509648][   T13] ffff888053ec1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  584.518713][   T13] 
[  584.518713][   T13] which lock already depends on the new lock.
[  584.518713][   T13] 
[  584.529407][   T13] 
[  584.529407][   T13] the existing dependency chain (in reverse order) is:
[  584.538603][   T13] 
[  584.538603][   T13] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  584.546617][   T13]        lock_sock_nested+0x48/0x100
[  584.551934][   T13]        mptcp_connect+0x4c3/0x830
[  584.557063][   T13]        __inet_stream_connect+0x25a/0xdd0
[  584.562981][   T13]        inet_stream_connect+0x66/0xa0
[  584.568452][   T13]        __sys_connect+0x312/0x450
[  584.573575][   T13]        __x64_sys_connect+0x7a/0x90
[  584.579068][   T13]        do_syscall_64+0x14d/0xf80
[  584.584195][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.590789][   T13] 
[  584.590789][   T13] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  584.598643][   T13]        lock_sock_nested+0x48/0x100
[  584.604108][   T13]        inet_shutdown+0x6a/0x390
[  584.609231][   T13]        nbd_mark_nsock_dead+0x2e9/0x560
[  584.614871][   T13]        recv_work+0x1c7f/0x1d90
[  584.620265][   T13]        process_scheduled_works+0xb6e/0x18c0
[  584.626360][   T13]        worker_thread+0xa53/0xfc0
[  584.631484][   T13]        kthread+0x388/0x470
[  584.636083][   T13]        ret_from_fork+0x51e/0xb90
[  584.641316][   T13]        ret_from_fork_asm+0x1a/0x30
[  584.646618][   T13] 
[  584.646618][   T13] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  584.654364][   T13]        __mutex_lock+0x19f/0x1300
[  584.659487][   T13]        nbd_queue_rq+0x37b/0x1100
[  584.664865][   T13]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  584.670945][   T13]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  584.677851][   T13]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  584.684373][   T13]        blk_mq_run_hw_queue+0x348/0x4f0
[  584.690056][   T13]        blk_mq_dispatch_list+0xd16/0xe10
[  584.695788][   T13]        blk_mq_flush_plug_list+0x48d/0x570
[  584.701784][   T13]        __blk_flush_plug+0x3ed/0x4d0
[  584.707172][   T13]        __submit_bio+0x28d/0x580
[  584.712222][   T13]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  584.718470][   T13]        block_read_full_folio+0x599/0x830
[  584.724399][   T13]        filemap_read_folio+0x137/0x3b0
[  584.730044][   T13]        do_read_cache_folio+0x358/0x590
[  584.735774][   T13]        read_part_sector+0xb6/0x2b0
[  584.741075][   T13]        adfspart_check_ICS+0xa5/0xa40
[  584.746549][   T13]        bdev_disk_changed+0x7ba/0x1550
[  584.752283][   T13]        blkdev_get_whole+0x380/0x510
[  584.757665][   T13]        bdev_open+0x31e/0xd30
[  584.762437][   T13]        blkdev_open+0x470/0x610
[  584.767383][   T13]        do_dentry_open+0x785/0x14e0
[  584.772677][   T13]        vfs_open+0x3b/0x340
[  584.777275][   T13]        path_openat+0x2e08/0x3860
[  584.782397][   T13]        do_file_open+0x23e/0x4a0
[  584.787435][   T13]        do_sys_openat2+0x113/0x200
[  584.792643][   T13]        __x64_sys_openat+0x138/0x170
[  584.798110][   T13]        do_syscall_64+0x14d/0xf80
[  584.803327][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.809840][   T13] 
[  584.809840][   T13] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  584.817063][   T13]        __mutex_lock+0x19f/0x1300
[  584.822187][   T13]        nbd_queue_rq+0xc6/0x1100
[  584.827308][   T13]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  584.833380][   T13]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  584.840326][   T13]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  584.846860][   T13]        blk_mq_run_hw_queue+0x348/0x4f0
[  584.852508][   T13]        blk_mq_dispatch_list+0xd16/0xe10
[  584.858325][   T13]        blk_mq_flush_plug_list+0x48d/0x570
[  584.864319][   T13]        __blk_flush_plug+0x3ed/0x4d0
[  584.869719][   T13]        __submit_bio+0x28d/0x580
[  584.874842][   T13]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  584.881004][   T13]        block_read_full_folio+0x599/0x830
[  584.886829][   T13]        filemap_read_folio+0x137/0x3b0
[  584.892744][   T13]        do_read_cache_folio+0x358/0x590
[  584.898385][   T13]        read_part_sector+0xb6/0x2b0
[  584.903689][   T13]        adfspart_check_ICS+0xa5/0xa40
[  584.909333][   T13]        bdev_disk_changed+0x7ba/0x1550
[  584.914974][   T13]        blkdev_get_whole+0x380/0x510
[  584.920703][   T13]        bdev_open+0x31e/0xd30
[  584.925485][   T13]        blkdev_open+0x470/0x610
[  584.930523][   T13]        do_dentry_open+0x785/0x14e0
[  584.935829][   T13]        vfs_open+0x3b/0x340
[  584.940445][   T13]        path_openat+0x2e08/0x3860
[  584.945567][   T13]        do_file_open+0x23e/0x4a0
[  584.950599][   T13]        do_sys_openat2+0x113/0x200
[  584.955808][   T13]        __x64_sys_openat+0x138/0x170
[  584.961376][   T13]        do_syscall_64+0x14d/0xf80
[  584.966504][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.972928][   T13] 
[  584.972928][   T13] -> #3 (set->srcu){.+.+}-{0:0}:
[  584.980077][   T13]        __synchronize_srcu+0xca/0x300
[  584.985638][   T13]        elevator_switch+0x1e8/0x7a0
[  584.991113][   T13]        elevator_change+0x2cc/0x450
[  584.996507][   T13]        elevator_set_default+0x36c/0x430
[  585.002238][   T13]        blk_register_queue+0x366/0x430
[  585.007994][   T13]        __add_disk+0x677/0xd50
[  585.012865][   T13]        add_disk_fwnode+0xfb/0x480
[  585.018075][   T13]        nbd_dev_add+0x72c/0xb50
[  585.023105][   T13]        nbd_init+0x168/0x1f0
[  585.027794][   T13]        do_one_initcall+0x250/0x8d0
[  585.033098][   T13]        do_initcall_level+0x104/0x190
[  585.038675][   T13]        do_initcalls+0x59/0xa0
[  585.043529][   T13]        kernel_init_freeable+0x2a6/0x3e0
[  585.049260][   T13]        kernel_init+0x1d/0x1d0
[  585.054128][   T13]        ret_from_fork+0x51e/0xb90
[  585.059246][   T13]        ret_from_fork_asm+0x1a/0x30
[  585.064630][   T13] 
[  585.064630][   T13] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  585.072859][   T13]        __mutex_lock+0x19f/0x1300
[  585.077981][   T13]        elevator_change+0x1b3/0x450
[  585.083275][   T13]        elevator_set_none+0xb5/0x140
[  585.088651][   T13]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  585.094994][   T13]        nbd_start_device+0x17f/0xb10
[  585.100419][   T13]        nbd_genl_connect+0x165b/0x1cf0
[  585.106058][   T13]        genl_family_rcv_msg_doit+0x22a/0x330
[  585.112229][   T13]        genl_rcv_msg+0x61c/0x7a0
[  585.117439][   T13]        netlink_rcv_skb+0x232/0x4b0
[  585.122727][   T13]        genl_rcv+0x28/0x40
[  585.127244][   T13]        netlink_unicast+0x80f/0x9b0
[  585.132617][   T13]        netlink_sendmsg+0x813/0xb40
[  585.137906][   T13]        ____sys_sendmsg+0x972/0x9f0
[  585.143204][   T13]        ___sys_sendmsg+0x2a5/0x360
[  585.148761][   T13]        __x64_sys_sendmsg+0x1bd/0x2a0
[  585.154239][   T13]        do_syscall_64+0x14d/0xf80
[  585.159500][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.165929][   T13] 
[  585.165929][   T13] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  585.174545][   T13]        blk_alloc_queue+0x546/0x680
[  585.180112][   T13]        __blk_mq_alloc_disk+0x197/0x390
[  585.185755][   T13]        nbd_dev_add+0x499/0xb50
[  585.190786][   T13]        nbd_init+0x168/0x1f0
[  585.195475][   T13]        do_one_initcall+0x250/0x8d0
[  585.200797][   T13]        do_initcall_level+0x104/0x190
[  585.206273][   T13]        do_initcalls+0x59/0xa0
[  585.211388][   T13]        kernel_init_freeable+0x2a6/0x3e0
[  585.217109][   T13]        kernel_init+0x1d/0x1d0
[  585.222053][   T13]        ret_from_fork+0x51e/0xb90
[  585.227356][   T13]        ret_from_fork_asm+0x1a/0x30
[  585.232842][   T13] 
[  585.232842][   T13] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  585.240264][   T13]        __lock_acquire+0x15a5/0x2cf0
[  585.245670][   T13]        lock_acquire+0xf0/0x2e0
[  585.250727][   T13]        fs_reclaim_acquire+0x71/0x100
[  585.256232][   T13]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  585.262583][   T13]        __alloc_skb+0x27d/0x7d0
[  585.267533][   T13]        tcp_send_active_reset+0x8a/0x5d0
[  585.273270][   T13]        __tcp_close+0x4c5/0xfe0
[  585.278210][   T13]        tcp_close+0x28/0x110
[  585.282910][   T13]        inet_release+0x143/0x190
[  585.287945][   T13]        sock_release+0x85/0x150
[  585.292889][   T13]        rds_tcp_accept_one+0x64f/0xd50
[  585.298454][   T13]        rds_tcp_accept_worker+0x1d/0x70
[  585.304187][   T13]        process_scheduled_works+0xb6e/0x18c0
[  585.310352][   T13]        worker_thread+0xa53/0xfc0
[  585.315477][   T13]        kthread+0x388/0x470
[  585.320095][   T13]        ret_from_fork+0x51e/0xb90
[  585.325215][   T13]        ret_from_fork_asm+0x1a/0x30
[  585.330871][   T13] 
[  585.330871][   T13] other info that might help us debug this:
[  585.330871][   T13] 
[  585.341286][   T13] Chain exists of:
[  585.341286][   T13]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  585.341286][   T13] 
[  585.354350][   T13]  Possible unsafe locking scenario:
[  585.354350][   T13] 
[  585.361895][   T13]        CPU0                    CPU1
[  585.367262][   T13]        ----                    ----
[  585.372732][   T13]   lock(k-sk_lock-AF_INET6);
[  585.377439][   T13]                                lock(sk_lock-AF_INET6);
[  585.384661][   T13]                                lock(k-sk_lock-AF_INET6);
[  585.391872][   T13]   lock(fs_reclaim);
[  585.395860][   T13] 
[  585.395860][   T13]  *** DEADLOCK ***
[  585.395860][   T13] 
[  585.404002][   T13] 4 locks held by kworker/u8:1/13:
[  585.409210][   T13]  #0: ffff8880327b8148 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  585.420105][   T13]  #1: ffffc90000127c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  585.433003][   T13]  #2: ffff888051c73068 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xae/0xd50
[  585.443730][   T13]  #3: ffff888053ec1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  585.453334][   T13] 
[  585.453334][   T13] stack backtrace:
[  585.459321][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  585.459343][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  585.459354][   T13] Workqueue: krdsd rds_tcp_accept_worker
[  585.459384][   T13] Call Trace:
[  585.459391][   T13]  <TASK>
[  585.459397][   T13]  dump_stack_lvl+0xe8/0x150
[  585.459420][   T13]  print_circular_bug+0x2e1/0x300
[  585.459447][   T13]  check_noncircular+0x12e/0x150
[  585.459472][   T13]  __lock_acquire+0x15a5/0x2cf0
[  585.459501][   T13]  lock_acquire+0xf0/0x2e0
[  585.459519][   T13]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  585.459540][   T13]  fs_reclaim_acquire+0x71/0x100
[  585.459559][   T13]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  585.459575][   T13]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  585.459592][   T13]  ? __alloc_skb+0x27d/0x7d0
[  585.459610][   T13]  ? __alloc_skb+0x186/0x7d0
[  585.459628][   T13]  __alloc_skb+0x27d/0x7d0
[  585.459647][   T13]  tcp_send_active_reset+0x8a/0x5d0
[  585.459667][   T13]  ? __sk_mem_reduce_allocated+0x270/0x3f0
[  585.459692][   T13]  __tcp_close+0x4c5/0xfe0
[  585.459710][   T13]  tcp_close+0x28/0x110
[  585.459723][   T13]  inet_release+0x143/0x190
[  585.459745][   T13]  sock_release+0x85/0x150
[  585.459759][   T13]  rds_tcp_accept_one+0x64f/0xd50
[  585.459775][   T13]  ? __pfx_rds_tcp_accept_one+0x10/0x10
[  585.459794][   T13]  rds_tcp_accept_worker+0x1d/0x70
[  585.459838][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  585.459858][   T13]  process_scheduled_works+0xb6e/0x18c0
[  585.460030][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  585.460064][   T13]  ? assign_work+0x3d5/0x5e0
[  585.460086][   T13]  worker_thread+0xa53/0xfc0
[  585.460132][   T13]  kthread+0x388/0x470
[  585.460148][   T13]  ? __pfx_worker_thread+0x10/0x10
[  585.460167][   T13]  ? __pfx_kthread+0x10/0x10
[  585.460182][   T13]  ret_from_fork+0x51e/0xb90
[  585.460204][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  585.460224][   T13]  ? __switch_to+0xc7d/0x1450
[  585.460242][   T13]  ? __pfx_kthread+0x10/0x10
[  585.460257][   T13]  ret_from_fork_asm+0x1a/0x30
[  585.460286][   T13]  </TASK>