last executing test programs:

10.422980201s ago: executing program 0 (id=3456):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) (async)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0)

9.771075369s ago: executing program 0 (id=3460):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc110}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r5, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x4000080)
bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}, 0x10001}, 0x1c)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x8000001}, 0x8)
close(r7)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xfffc}}]}]}}}]}, 0x64}}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c30100000000000000c0c288a8", 0xe, 0x4004831, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @remote}, 0x14)

6.935617005s ago: executing program 2 (id=3463):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x46, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2}}, 0xb8}}, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000240)=""/55}, 0x20) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20, 0x6c}, {0xfffffffffffffffc, 0x1, 0xfe, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x6}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

6.935159662s ago: executing program 4 (id=3464):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x24, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x1, 0xd, 0x6, 0x7, 0x40, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}], &(0x7f0000000200)='syzkaller\x00', 0x6e8, 0x7, &(0x7f0000000240)=""/7, 0x41000, 0x11, '\x00', r3, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x7, 0x242d0134}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r4, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)

6.895761465s ago: executing program 0 (id=3465):
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000000d06010800000000000000000200000a050001000700000005000100070000000500050001000000050001000700000005000500010000000517050001000000050001000700000013000300686173683a6e65742c696661636500000500010007000000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/248, 0xf8}], 0x1}, 0x1f00)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r4, &(0x7f0000000f00)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb88a845000806000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000ec0)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$inet(0xa, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000640)={'NETMAP\x00'}, &(0x7f0000000680)=0xfffffc2e)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r6, &(0x7f00000000c0)='(\xbb\x00', 0x16e00, &(0x7f0000000100)={@_ha_fsid={[0xbe46, 0xcff2]}, {0x4, 0x1, 0x137b, 0x3}}, 0x7f8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xfff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff04000000dbac10cad210bca71410000000ffffffd0040000000000000d2600fcff0000000a95"], &(0x7f0000000240)='syzkaller\x00', 0x6}, 0x94)
socket$inet6(0xa, 0xa, 0x1)

6.476514705s ago: executing program 2 (id=3467):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@map=r0, 0xffffffffffffffff, 0x36}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)="1f2022e88ac56e88ec410ae9aea525789feac0d2a98946f5a13b5fe9aaff61b25c20d00c4b6c2eb8b7c8c907793bbb42e5eab292d6549bd04bb11170478a750c34a8519227feb77b279c54229336eb307b138d3c282b3bdcc79ee194d98edc2ad006bcfde15272bf0b32dc2bdbfe789373567c10911802a8f44f841b", 0x7c)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4065, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000600090001000d000000000000003c000000090a01040000000000b82a35226b2022eebc4bdc570000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021000000000000"], 0xc4}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004001}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000250001002ebd7000fbdbdf25057c002004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x1)
r11 = socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000500), &(0x7f0000000540)=@tcp=r11, 0x2}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x64, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}}, 0x4000000)

6.475980621s ago: executing program 4 (id=3468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x463}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080))

6.018037548s ago: executing program 2 (id=3469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$nl_audit(0x10, 0x3, 0x9)

5.895438545s ago: executing program 3 (id=3470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@getqdisc={0x28, 0x26, 0x300, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {0xfff1, 0xffff}, {0x2, 0xfff3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
socket$tipc(0x1e, 0x5, 0x0) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000800)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19)
connect$tipc(r6, &(0x7f0000000840)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) (async)
connect$tipc(r6, &(0x7f0000000840)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000540)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f0000000880)="c4739e5bac0503e4fdd3fc140000004788031c09104028", 0x17, 0x4, &(0x7f0000000600)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002000010026bd700002000000010100800c000100020000000000000014000300"], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002000010026bd700002000000010100800c000100020000000000000014000300"], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
mmap(&(0x7f00009de000/0x4000)=nil, 0x4000, 0x1, 0x12, r8, 0xffffe000)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x86, &(0x7f00000001c0)}, 0x10)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

5.720253997s ago: executing program 0 (id=3471):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffaabd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0xe0dce000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffaabd}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0xe0dce000) (async)

3.410032386s ago: executing program 4 (id=3472):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae5af847cf809c4ee3c41512cb02c31c01801b7fdb1", 0x55}], 0x1}, 0x44000)
write(r0, &(0x7f0000000280)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}})
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

3.341419311s ago: executing program 1 (id=3473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
write(0xca, &(0x7f0000000000)="04040614cd5f41b2096afe0002", 0xd)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004)

3.340531913s ago: executing program 2 (id=3474):
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={<r0=>0x2, <r1=>0xffffffffffffffff}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={<r2=>0x2, 0x1, 0x30, 0x5, 0x7f}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={<r3=>r2, 0xd66f, 0x10}, &(0x7f0000000140)=0xc)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000180)=0xff, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r6 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000002c0)=0xe, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r0, <r8=>0xffffffffffffffff, 0x80800}, &(0x7f0000000380)=0xc)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e22, @empty}}, 0x3}, &(0x7f0000000480)=0x90)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f00000005c0)={<r9=>0xffffffffffffffff, &(0x7f00000004c0)='wpan0\x00', 0x10902, &(0x7f0000000500)={@align, {0x7, 0x1, 0x8, 0x5}}, 0x2fed, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x4})
sendmsg$802154_raw(r9, &(0x7f00000006c0)={&(0x7f0000000600), 0x14, &(0x7f0000000680)={&(0x7f0000000640)="50caa40420910bd40d3f9a2796ad3781babe94a014c9924e38c563de6cc49d0fdc14b4d3ef3bccc5e8cad9762c0c8435845489939cf1a704072dcdf2ecd2", 0x3e}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f0000000700)=""/149, 0x95)
setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f00000007c0)={@multicast2, @private=0xa010102, @private=0xa010101}, 0xc)
syz_emit_ethernet(0x51, &(0x7f0000000800)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@generic={0x809b, "e457c671bc7b2504f0291e3c8368a6a6861b1caf46971eded7acaa183348f7b20afa9bfb48c280c3c4fe5fa7de1fe204e2588bf27cde879aa525b6e3fa0994"}}}, &(0x7f0000000880)={0x0, 0x2, [0xaa9, 0x6eb, 0xd1f, 0xc78]})
r10 = accept$inet6(r1, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000900)=0x1c)
ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000940)=0x8000000000000001)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000980)={<r12=>r7, 0x1a, 0x4, 0x8e, 0x8, 0xe8}, &(0x7f00000009c0)=0x14)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000a00)={r12, 0xc, 0x20, 0x800}, &(0x7f0000000a40)=0x18)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r6)
sendmsg$TIPC_NL_LINK_SET(r13, &(0x7f0000000f40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)={0x3d0, r14, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa2e}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "002497e7583382426eab816e7de2abc6fc6e6e5d2e09900f34ce07a1bd0c48d0fdef23feab075a4a265375bd9294869d2f7d21370fd97cf458e21a0ea057b3a64c91aad88af3a0cdb9466b3be13eb9ec9d29f74b3d1c347a021bbc8762847c086084a18daa46d3890afcb5f02311567a2c14c6d1afddb8bd79218a6109c70db9ccaa023e9a89c98367efe23c555561b5d1d398c9c04abcbf868d0c7eccec4d6e16fb7bccebfb0f0d8c8264b266fa93ea601d763ba863ad52b8ed6e63f8e682557b3a"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x849}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x701}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x439}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff3}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x537cf2b1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1250}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x384}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a4e4bb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff758}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7cdc1b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x80}, 0x24414)
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r9)
sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r15, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x409}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x10048041)
write(r13, &(0x7f0000001100)="b831da74d84ab1f160465499731e7385116a3af463eff1d3cbe5b923fb4abdc4c9c93c9dac8d5eb06d46fe5c9f0c23fd8020a9eabef020a943888cdc745c4e5e4d32f9ccb65048886c65e0c4ab464e6dcac75cda63e54591179ba9fedcd5092cb193db4c4cdb572d51f6a78e08ca4a", 0x6f)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r5)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r16, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x4004002)

3.055437494s ago: executing program 3 (id=3475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f00000001c0)=0xfdf4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec779000)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000240)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f00000002c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
sendto$inet6(r3, &(0x7f00000003c0)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0xc4}}, 0x0)

2.945421397s ago: executing program 1 (id=3476):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000793be0341833de75463015488c430000000000000000000018edb3c92744614323c6c51100006e6d9d70e3474cd0ffe4846710cdd111550ab4a0a187d1e1b5d6c9d85f226994921e318d2a600247c18cdc8190ebf0f5dcd395cae53f08c7bc94c007b4b071bd802e27a9be99f27b813ab8", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c2518010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r4, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18)
bind$packet(r1, &(0x7f0000000380)={0x11, 0x3, r4, 0x1, 0xfa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14)

2.890015827s ago: executing program 4 (id=3477):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$inet(0x2, 0x4, 0x7)
socket$inet6(0xa, 0x3, 0x88)
socket$inet(0x2, 0x801, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)

2.654450478s ago: executing program 0 (id=3478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xfffffe5b, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f00000015c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000840)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94)
close(0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r1, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], <r2=>0x0, 0xa9, &(0x7f0000001080)=[{}, {}], 0x10, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xec, 0x8, 0x8, &(0x7f0000001140)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000d40), 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x1}, 0x10, r2}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000016c0)={<r4=>r3, &(0x7f0000000cc0)='\x00', 0x400582, &(0x7f0000001600)={@_ha_fsid={[0x9, 0x6]}, {0x9, 0x0, 0x3, 0x5}}, 0x2, &(0x7f0000001640)={@_ha_fsid}, &(0x7f0000001680)=0xffffffff})
connect$pppl2tp(r4, &(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x4, 0x2, 0x2}}, 0x26)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x0, 0x10ff, 0x300, &(0x7f0000000e40)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000e80)="b8"}, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000500)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xe)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000700)={<r8=>0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0xfffe, @local}]}, &(0x7f0000000780)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000007c0)={r8, 0xa3, 0x4991, 0x7}, &(0x7f0000000800)=0x10)
connect$can_bcm(r6, &(0x7f0000000440), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000400001000000000000000078b4000000f8ca44dfaa000000076623310017fe816e841b4be1aaf184d915f0b8a14b75ebe5aadfe20ff0d7a95ff465fd654b2772ccb07625804e4a03adc409d2b3d05fb2d7eeae80e401b8ebb02beb71e46ce97d1e7e24b1c66ec247124c4ed0e8748d618de1184c012c173873effb6f8c8c8204589a024b3ded183e651e463abff02588"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000300)={<r10=>r9, &(0x7f0000000200)='/[\x00', 0x8840, &(0x7f0000000240)={@_ha_fsid={[0x3ff, 0x7f]}, {0x0, 0xca6, 0x800, 0x9}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x43b5})
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000340)=0x10e0c, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x16c}}, 0x24)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r12, 0xffffffffffffffff, 0x500}, 0x57)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)

2.519532994s ago: executing program 2 (id=3479):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x45}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8802}, 0x844)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0xb, [@const={0x5, 0x0, 0x0, 0xa, 0x1}, @datasec={0x1, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x39b, 0x9}, {0x2, 0xd8c, 0x3}, {0x1, 0x0, 0x6}, {0x5, 0x8, 0x9}], 'a'}]}, {0x0, [0x5f, 0x3e, 0x2e, 0x5f, 0x0, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/88, 0x6f, 0x58, 0x0, 0x24c, 0x10000, @value=r4}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3c0, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}], @NL80211_ATTR_FRAME={0x217, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4f}, @device_b, @broadcast, @random="fa984e282c7a", {0xf, 0x5ab}}, @void, @val={0x1, 0x3, [{0x3}, {0x50}, {0x2, 0x1}]}, @val={0x3, 0x1, 0xb2}, @void, @void, [{0xdd, 0xfc, "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"}, {0xdd, 0xf3, "1e594394de081127230ab3777c105d6279931a16e3d634d3834f1207efc5ce1b3495d12c12aa4eb24f19867c8d25a8636acd2bbaf9d72abfb55b6aace92be02415f2264d2561fdeb8cd696ea01e2fb15ce0e36ac7c5f78769e010bfb191ca0695f52e379342362d91870c599575e81ec3a48802e202efed8ce029e305ae1d67d50a5cb865dd6811b576d16a0d5e327caa3e3e68ccbee58e9cb325f09bf3d1a92223eda7e447f7416b3a3e579b0ce013a5e978d2b9bb95bca28b0ebfd9febc8f91b31b36f5b99f9217c931cbe5c50dfc96e7ec291692a94142ab1029cdbf40f371bcc80f90150c7517b71d3d7ef5241f63c48c2"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x155, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @broadcast, @initial, {0x5, 0x47}}, 0x0, 0x4, 0x26, @void, [{0xdd, 0xf2, "969651f66f5a3b1508f224d20a1c7cc374eefacd20b9bee36b4a1dd5fbae5a57679be8a7a768abef0499a5e1ee42a378c81eda1701ae875a3a699f01bf09d263d3f3c391bd2d994143a20be680089a0300d05d5bb3fc4159f3c047c97ca942628b90f04c0faf4fdf6dcee34aea30edc1ca0641e02ef2df487cb31753b0e7b8abe5887e9a8c61f9c166461d40e2fc2906902a474bce16c112868eeb21c5a55c7fc4f72465f6e05405e839115fcbf9f2437d6df76e0d82f1faa169db7620a5a66ea81d8bb245e37b7bd754e0d70e329aa434092789f0b69b6394b61866a6078bf112a4e5e928adb19f669f0724fa3c4f91575c"}, {0xdd, 0x3d, "99b6f961f3159654ab3db640c408ae6c623c9e3f6f5e0a01ad780b465e3e0d74bdef29346236b9b1132ea4e67ea272493017205dff6433b8d2e32ddab7"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0xfffd, 0x6, 0x1]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x154, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x40}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x154}, 0x1, 0x0, 0x0, 0x854}, 0x20000000)
recvfrom(r0, &(0x7f0000000b80)=""/253, 0xfd, 0x0, &(0x7f0000000c80)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x99b, 0x2}, 0x80)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000e00)={'nat\x00', 0x0, 0x3, 0x7d, [0x8, 0x4, 0x2d2, 0x1, 0x8], 0x5, &(0x7f0000000d00)=[{}, {}, {}, {}, {}], &(0x7f0000000d80)=""/125}, &(0x7f0000000e80)=0x78)
r7 = openat$cgroup_int(r2, &(0x7f0000000ec0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000f00)=0x73ef, 0x12)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x4, [@enum={0x9, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x37cb}, {0x3, 0x7}, {0xa, 0x4}, {0xc, 0x1}, {0x1, 0xb170}, {0xf, 0x4}, {}]}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xe, 0x5, 0xffffff16}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000001000)=""/50, 0x90, 0x32, 0x1, 0x2}, 0x28)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001080)={r3, r2, 0x1e, 0x0, @void}, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r10, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=<r12=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x78, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x13, 0x1, 'bridge_slave_0\x00'}, {0xa, 0x1, '%@[-\'['}, {0xa, 0x1, 'wlan1\x00'}, {0x9, 0x1, 'IPVS\x00'}, {0x8, 0x1, 'nat\x00'}, {0x7, 0x1, '}%#'}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4d001)
sendfile(r9, r2, &(0x7f00000013c0)=0x56b, 0x1000)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r4)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000016c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x1d4, r13, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x424}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb5}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0xffff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffa}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x21d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x8, 0x9, 0x1, 0x5, 0x80000001, 0x800, 0x1ff, 0x81, 0xfffffffb]}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x75ac}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x648}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x407}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x525}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x107}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0x1, 0x7fffffff, 0x5, 0x4, 0xc57b, 0x1, 0x800000, 0x6, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8000, 0x8]}]}]}, 0x1d4}}, 0x4000081)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000001700)={<r14=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000001780)={'vcan0\x00', @broadcast})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0))
sendmmsg$inet(r14, &(0x7f0000001ec0)=[{{&(0x7f0000001800)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001840)="da70e5a649d0effc1021757aed5dc9382e76d69b73f4ae0c32fdbc01937cd2afdcbc5ef1795ca5cfdfbef6ec9ce0a37bd5374d21d0e38672a1fa2ec28e02239f29e83c0e438cc375f6a4fa027fbad59a57294e2765ac25aada507e61b8018a4f20ba59ef0ffba0f50b7c4c2f45b986e3eb21d8c6cf88662c0fb4cff6228e4b11fd913b85ca215d1688d90a103dec6f69a0f90ce6bbb27aa10fcbfe3a43bd2926ce36b6a3b45f2b2af312463e7f03620add384cd425fc244c271fc82cab660e979e3b082332d71f02", 0xc8}, {&(0x7f0000001940)="f842bc2d84015e9630190ab0c388a798bc011a0a8f0aa72b51c91d6562b94471f8415c7bb55d25accbc2ac4844195f671bea41ce9957ed0f1fd773f98121ce820624cb7ef28f184106010da6a16be607af9a9c4b6529b87f3fcee313b1edf26bdd84d4f8bde3b24172cfec53b787d4c578cc7358649bfb642376756f910365240b7698b15412b207fbf26fc1f43750acf537cda50e979e696bd7329365e334c591a9372821e4eb8cd3a05c7908d799496c6bf7ba9b32ff24ca95fc281b40d48e621d6ef5572f596637fa591236b3d83e1a63e2f68da2f70d35868e166f58e8dda9b3", 0xe2}, {&(0x7f0000001a40)="2dd92c628fa10b9f91e63cb2dfc575b18b9fb1e8fcf946692ebced7c105698b6c79ce6e8596c1fecefde39dfa665f0fd79a7a9bfe792c6ece9c1128eb106de9cceb89bbc9f514b920b4bb70cfee748fac8707240d119fdc537110cef0def89158bf619469291734259a6620271d32391538edeef15257939ef5a5f922584918793a361ae1fc13c6f865a74904dc4ae857bcd656f23dd2e15715118ad9b6e41ff4c565bb3e6861a3e810f1a83", 0xac}, {&(0x7f0000001b00)="8bc4f75950cbe16bd115accb9a530006d4846e39dc5f853ec5629f36580d7be604dd43dd062f452c58c7cd86e64d0e7290d28020f5ae1c6eca166f961d64410e1e406c68a9c4becf08dbaddbbdd5397d4eb7f11f72e1ab38f0c0d74996ab3d4dbc", 0x61}, {&(0x7f0000001b80)="3c5e2f97171cdd15826b65a961d2646680706225561efeb2100b5b6795480322b10ab682a7c5f9ef77cb16cf91f7868e65716133d5b7e7fb564bdb2cadd2855b501cca7b3ea55289370f60f126321545983df56624e5ff3eb8551c872750931a4b1eb29320063c9ea5bf9e5825efe9bef7fac6e901e0881761ad30149b2ebff42bcc8424f6b4f852b5edc97a0caa2799271b6b224875d86c02ef6a0798ed5b753327df073b0d04153e4e5438f0a405fe5b5e7183d7b81c5c65369e662f8c04ad08c073372cb8ce7c", 0xc8}, {&(0x7f0000001c80)="39c9b71fb5ac", 0x6}, {&(0x7f0000001cc0)="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", 0xfc}], 0x7, &(0x7f0000001e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}}], 0x1, 0x40010)

2.289920768s ago: executing program 1 (id=3480):
r0 = socket(0x1a, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000514100029bd7000080001000000000008000300040000000800610000000000080003000100000008000100f5010000080003000400000000000000"], 0x40}}, 0x40081)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xffffffffffffffeb}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000480)=0x10001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x8004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3)
socket$packet(0x11, 0x0, 0x300)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

2.138865738s ago: executing program 0 (id=3481):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050020020000200200002400010020a1070000000000000000000000000000000000000000000022000000000000243c4db562b07ea300090080841e00000f0000000000000000ffffffffffffffff000000000000000000000c0010e407", 0x9c)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r3, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814)

1.831885887s ago: executing program 3 (id=3482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x140, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0xfffffff8}, @TCA_GRED_STAB={0x104}]}}]}, 0x140}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x84000}, 0x20004080)

1.721442201s ago: executing program 4 (id=3483):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000500), 0x3) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f0000000100", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) (async)
writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)}], 0x1)

1.720219677s ago: executing program 1 (id=3484):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20f42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x6132})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
accept(r1, 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000180)=""/134, 0x86}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x2a7209fb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x12, &(0x7f0000001e40)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608fcff00000000180000000000000000000000000000019500000000000000180100002020682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702000008000000b50afdff00000000850000000600000095"], &(0x7f0000001f00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

1.425884862s ago: executing program 4 (id=3485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x4e, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x2a, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xffe0, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x2a, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

1.412243822s ago: executing program 2 (id=3486):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'ip6tnl0\x00', 0x7f})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x31, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, @in6={0xa, 0x4e24, 0xb0, @remote, 0x5}], 0x84)
write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd"}}}}, 0x3f)

953.29478ms ago: executing program 3 (id=3487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="84020000", @ANYRES16=r2, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4004040}, 0x804)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000200)=@raw=[@generic={0x8, 0x9, 0x6, 0x7, 0x80}, @ldst={0x1, 0x0, 0x6, 0x2, 0x4, 0x1, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10)

562.376536ms ago: executing program 3 (id=3488):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f00000003c0), &(0x7f0000000400)=@tcp, 0x1}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

479.268125ms ago: executing program 3 (id=3489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x400e}})
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r2, 0x180000000)
mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

191.779127ms ago: executing program 1 (id=3490):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffff000000000000200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)
getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)={<r2=>0x2}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000140)={r2, 0x9}, 0x8)
listen(r0, 0x80000000)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)

0s ago: executing program 1 (id=3491):
socket(0x2b, 0x1, 0x1) (async)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x12, 0x3, 0x0, 0x3a)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x1, &(0x7f0000000500)=0x4) (async)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=0x1, &(0x7f0000000500)=0x4)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000eae138564a2f000000000000000300000018ee426b6500000000000000000000070000009500", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000140)=[{&(0x7f0000000280)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000002c0)=[{0x1, 0x1, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}, 0xff, 0x106}], 0x20)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x74, r4, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES16, @ANYRES32=r5, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES16, @ANYRES32=r5, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

kernel console output (not intermixed with test programs):

in process `syz.0.2056'.
[  226.515462][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'.
[  226.615385][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'.
[  226.664222][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'.
[  226.708789][T13677] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  226.847928][T13682] netlink: 'syz.4.2062': attribute type 9 has an invalid length.
[  226.853900][T13684] netlink: 'syz.0.2063': attribute type 1 has an invalid length.
[  226.874622][T13682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  226.951326][T13688] netlink: 'syz.0.2063': attribute type 1 has an invalid length.
[  227.423630][T13719] xt_CT: You must specify a L4 protocol and not use inversions on it
[  227.827220][T13743] sctp: [Deprecated]: syz.3.2075 (pid 13743) Use of struct sctp_assoc_value in delayed_ack socket option.
[  227.827220][T13743] Use struct sctp_sack_info instead
[  228.003956][T13751] netlink: 'syz.2.2076': attribute type 1 has an invalid length.
[  228.091903][T13757] netlink: 'syz.2.2076': attribute type 1 has an invalid length.
[  228.860548][T13810] netlink: 'syz.1.2089': attribute type 4 has an invalid length.
[  228.910395][T13809] block nbd0: not configured, cannot reconfigure
[  229.114371][T13824] xt_l2tp: unknown flags: 43
[  229.594138][T13857] netlink: 'syz.3.2100': attribute type 12 has an invalid length.
[  231.480665][T13974] __nla_validate_parse: 13 callbacks suppressed
[  231.480683][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2128'.
[  231.563052][T13979] bond4: entered promiscuous mode
[  231.563119][T13979] bond4: entered allmulticast mode
[  231.563593][T13979] 8021q: adding VLAN 0 to HW filter on device bond4
[  231.632326][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  231.664709][T13988] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2131'.
[  231.786320][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'.
[  232.407830][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'.
[  232.583192][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'.
[  233.021494][T14133] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes
[  233.356316][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'.
[  233.394347][T14144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  233.395085][T14144] batman_adv: batadv0: Adding interface: gretap0
[  233.395099][T14144] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.402290][T14144] batman_adv: batadv0: Interface activated: gretap0
[  233.551588][T14154] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  233.574986][T14159] netlink: 'syz.3.2158': attribute type 11 has an invalid length.
[  233.575005][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'.
[  233.580269][T14159] netlink: 'syz.3.2158': attribute type 11 has an invalid length.
[  233.580285][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'.
[  233.851876][T14170] x_tables: duplicate entry at hook 4
[  233.931544][T14173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2162'.
[  233.982416][T14179] netlink: 'syz.3.2164': attribute type 16 has an invalid length.
[  233.982447][T14179] veth0_macvtap: entered allmulticast mode
[  234.647532][T14216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.916832][T14235] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  235.293933][T14265] netlink: 'syz.1.2188': attribute type 4 has an invalid length.
[  235.766284][T14295] netlink: 'syz.2.2193': attribute type 2 has an invalid length.
[  235.915137][T14302] vlan2: entered allmulticast mode
[  235.915160][T14302] bond0: entered allmulticast mode
[  235.915174][T14302] bond_slave_0: entered allmulticast mode
[  235.915204][T14302] bond_slave_1: entered allmulticast mode
[  236.126666][T14314] 8021q: adding VLAN 0 to HW filter on device bond6
[  236.241374][T14326] netlink: 'syz.4.2198': attribute type 33 has an invalid length.
[  236.294865][T14326] bond15: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  236.310875][T14326] bond15 (unregistering): Released all slaves
[  236.728651][T14367] smc: net device lo applied user defined pnetid SYZ0
[  236.728806][T14367] smc: smcd device lo applied user defined pnetid SYZ0
[  236.784733][T14372] __nla_validate_parse: 16 callbacks suppressed
[  236.784753][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'.
[  236.810677][T14373] syzkaller0: entered promiscuous mode
[  236.810697][T14373] syzkaller0: entered allmulticast mode
[  236.889579][T14375] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.889703][T14375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.947828][T14378] bond7 (unregistering): Released all slaves
[  237.234584][T14400] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2217'.
[  237.240447][T14404] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2217'.
[  237.413056][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2219'.
[  237.495569][T14411] openvswitch: netlink: Message has -1 unknown bytes.
[  237.913094][T14430] netlink: 'syz.2.2225': attribute type 12 has an invalid length.
[  237.915283][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'.
[  238.011561][T14432] 8021q: adding VLAN 0 to HW filter on device bond7
[  238.043412][T14433] macvlan0: entered promiscuous mode
[  238.043432][T14433] macvlan0: entered allmulticast mode
[  238.045232][T14433] bond7: (slave macvlan0): Error -22 calling dev_set_mtu
[  238.076044][T14444] xt_CT: You must specify a L4 protocol and not use inversions on it
[  238.261259][T14453] netlink: 'syz.0.2232': attribute type 1 has an invalid length.
[  238.348600][T14453] bond6: option mode: invalid value (10)
[  238.352261][T14453] bond6 (unregistering): Released all slaves
[  238.510198][T14453] netlink: 'syz.0.2232': attribute type 10 has an invalid length.
[  238.510221][T14453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2232'.
[  238.659198][T14453] dummy0: entered promiscuous mode
[  238.810621][T14495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.875696][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.882275][T14499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2241'.
[  238.942692][T14495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.343155][T14528] bridge17: entered promiscuous mode
[  239.343217][T14528] bridge17: entered allmulticast mode
[  239.540305][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'.
[  239.695811][T14551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  240.106474][T14577] netlink: 'syz.3.2264': attribute type 1 has an invalid length.
[  240.179721][T14582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  240.257657][T14586] ieee802154 phy0 wpan0: encryption failed: -90
[  240.260627][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2266'.
[  240.312505][ T5648] block nbd0: Receive control failed (result -32)
[  240.413578][T14591] syzkaller0: entered promiscuous mode
[  240.413600][T14591] syzkaller0: entered allmulticast mode
[  240.651380][T14609] sctp: [Deprecated]: syz.0.2271 (pid 14609) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.651380][T14609] Use struct sctp_sack_info instead
[  240.655205][T14611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2270'.
[  240.905590][T14624] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.039594][T14631] netlink: 'syz.3.2274': attribute type 1 has an invalid length.
[  241.039622][T14631] nbd: couldn't find device at index 767
[  241.410083][T14646] ip6gre2: entered promiscuous mode
[  241.932659][T14692] Bluetooth: MGMT ver 1.23
[  241.944255][T14694] syzkaller1: entered promiscuous mode
[  241.944277][T14694] syzkaller1: entered allmulticast mode
[  242.392804][T14719] bond7: (slave bond_slave_0): Device is not bonding slave
[  242.392826][T14719] bond7: option active_slave: invalid value (bond_slave_0)
[  242.394792][T14719] bond7 (unregistering): Released all slaves
[  242.474608][T14726] __nla_validate_parse: 8 callbacks suppressed
[  242.474626][T14726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2299'.
[  242.655536][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2302'.
[  242.655563][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'.
[  242.854318][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  242.856034][T14745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2305'.
[  242.856063][T14745] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2305'.
[  242.856078][T14745] netlink: 'syz.3.2305': attribute type 5 has an invalid length.
[  242.856089][T14745] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2305'.
[  242.859785][T14745] xt_l2tp: v2 tid > 0xffff: 4294967295
[  242.860886][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  242.861200][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'.
[  244.706122][T14671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  244.908736][T14761] netlink: 'syz.3.2312': attribute type 2 has an invalid length.
[  244.909912][T14761] ip_tables: iptables: counters copy to user failed while replacing table
[  244.945577][T14764] netlink: 'syz.0.2313': attribute type 9 has an invalid length.
[  244.945598][T14764] netlink: 'syz.0.2313': attribute type 11 has an invalid length.
[  244.945612][T14764] netlink: 103920 bytes leftover after parsing attributes in process `syz.0.2313'.
[  245.534843][T14802] syzkaller1: entered promiscuous mode
[  245.534874][T14802] syzkaller1: entered allmulticast mode
[  245.536927][T14804] lo: Caught tx_queue_len zero misconfig
[  245.567772][T14805] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  246.654649][T14868] macvtap1: entered promiscuous mode
[  246.654671][T14868] team0: entered promiscuous mode
[  246.654684][T14868] team_slave_0: entered promiscuous mode
[  246.654936][T14868] team_slave_1: entered promiscuous mode
[  246.655644][T14868] macvtap1: entered allmulticast mode
[  246.655660][T14868] team0: entered allmulticast mode
[  246.655672][T14868] team_slave_0: entered allmulticast mode
[  246.655686][T14868] team_slave_1: entered allmulticast mode
[  246.658725][T14868] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  246.659404][T14877] team_slave_1: Caught tx_queue_len zero misconfig
[  246.854198][T14882] netlink: 'syz.0.2340': attribute type 1 has an invalid length.
[  246.912079][T14888] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  246.913242][T14882] 8021q: adding VLAN 0 to HW filter on device bond6
[  246.928097][T14883] bond6: (slave gretap0): making interface the new active one
[  246.935303][T14883] bond6: (slave gretap0): Enslaving as an active interface with an up link
[  246.961890][T14891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.970751][T14891] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  247.096186][T14887] 0ªX¹¦Dö»: entered promiscuous mode
[  247.096210][T14887] 0ªX¹¦Dö»: left allmulticast mode
[  247.103625][T14893] 0ªî{X¹¦: renamed from 
00ªX¹¦Dö»
[  247.109927][T14893] 0ªî{X¹¦: left promiscuous mode
[  247.109945][T14893] 0ªî{X¹¦: entered allmulticast mode
[  247.117985][T14893] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  247.506586][T14922] __nla_validate_parse: 10 callbacks suppressed
[  247.506605][T14922] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2351'.
[  247.736203][T14928] batman_adv: batadv0: Interface deactivated: syz_tun
[  247.736221][T14928] batman_adv: batadv0: Removing interface: syz_tun
[  247.753431][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'.
[  247.772119][T14928] bond0: (slave bond_slave_0): Releasing backup interface
[  247.805885][T14928] bond0: (slave bond_slave_1): Releasing backup interface
[  247.832123][T14928] team0: Port device team_slave_0 removed
[  247.850017][T14938] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2357'.
[  247.890014][T14928] team0: Port device team_slave_1 removed
[  247.908048][T14928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.908071][T14928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.935488][T14928] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  247.935512][T14928] batman_adv: batadv0: Removing interface: virt_wifi0
[  248.023084][T14928] bond6: (slave gretap0): Releasing active interface
[  248.144113][T14934] team0: Port device xfrm0 added
[  248.313798][T14961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2361'.
[  248.398144][T14963] openvswitch: netlink: Port 536870913 exceeds max allowable 65535
[  248.678869][    C0] TC_ACT_REPEAT abuse ?
[  248.888162][T14985] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2369'.
[  248.924460][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2369'.
[  249.014697][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'.
[  249.100837][   T42] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0
[  249.100905][   T42] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0
[  249.117883][ T7463] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0
[  249.207382][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'.
[  249.207800][ T5648] Bluetooth: hci0: unexpected event for opcode 0x2060
[  249.240092][T15002] netlink: 'syz.2.2375': attribute type 1 has an invalid length.
[  249.240112][T15002] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2375'.
[  249.482340][T15003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.759665][T15043] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  249.759687][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'.
[  249.766383][T15045] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  249.982123][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982160][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982184][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982208][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982232][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982256][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982279][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982303][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982327][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982357][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982380][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982403][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982432][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982456][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982480][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982503][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982527][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982549][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982573][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982597][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982621][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982645][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982668][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982691][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982714][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982737][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982760][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982783][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982806][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982829][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982852][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982876][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982899][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982923][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982946][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982970][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.982993][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.983016][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.983048][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.983071][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.983094][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992361][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992390][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992414][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992436][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992459][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992483][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992505][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992528][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992551][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992574][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992596][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992619][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992642][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992665][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992688][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992711][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992734][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992756][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992779][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992802][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992825][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992847][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992870][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  249.992893][T15053] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  250.585612][T15070] 8021q: adding VLAN 0 to HW filter on device bond8
[  250.648359][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.657160][T15079] bridge0: port 3(vlan2) entered blocking state
[  250.657333][T15079] bridge0: port 3(vlan2) entered disabled state
[  250.657471][T15079] vlan2: entered allmulticast mode
[  250.659483][T15079] vlan2: entered promiscuous mode
[  250.671389][T15079] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.724735][T15079] bridge_slave_1: left promiscuous mode
[  250.724970][T15079] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.735472][T15079] vlan2: left promiscuous mode
[  250.735491][T15079] bridge_slave_0: left promiscuous mode
[  250.755526][T15079] bond13: (slave veth0_to_bond): Releasing active interface
[  250.775669][T15079] bond0: (slave bond_slave_0): Releasing backup interface
[  250.795894][T15079] bond0: (slave bond_slave_1): Releasing backup interface
[  250.816282][T15079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  251.530764][T15130] xt_nat: multiple ranges no longer supported
[  251.531514][T15131] xt_nat: multiple ranges no longer supported
[  251.550873][T15131] bond0: entered allmulticast mode
[  251.821560][T15143] 8021q: adding VLAN 0 to HW filter on device bond16
[  251.839287][T15130] bond0: left allmulticast mode
[  252.040878][T15156] xt_hashlimit: overflow, try lower: 3/0
[  252.134474][T15165] openvswitch: netlink: Duplicate or invalid key (type 0).
[  252.134508][T15165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.246500][T15170] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  252.822014][T15205] tipc: Started in network mode
[  252.822043][T15205] tipc: Node identity ac1414aa, cluster identity 4711
[  252.822679][T15205] tipc: New replicast peer: 172.20.20.187
[  252.823049][T15205] tipc: Enabled bearer <udp:syz0>, priority 10
[  252.842481][T15202] syzkaller0: entered promiscuous mode
[  252.842499][T15202] syzkaller0: entered allmulticast mode
[  252.975587][T15213] __nla_validate_parse: 15 callbacks suppressed
[  252.975606][T15213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2432'.
[  253.002847][T15217] rdma_op ffff88807b2e0a38 conn xmit_rdma 0000000000000000
[  253.226393][T15233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.226411][T15233] IPv6: NLM_F_CREATE should be set when creating new route
[  253.226440][T15233] IPv6: NLM_F_CREATE should be set when creating new route
[  253.382264][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'.
[  253.442892][T15246] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  253.459330][T15246] lo: entered allmulticast mode
[  253.463182][T15245] lo: left allmulticast mode
[  253.525560][T15253] sctp: [Deprecated]: syz.4.2447 (pid 15253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  253.525560][T15253] Use struct sctp_sack_info instead
[  253.936848][ T6618] tipc: Node number set to 2886997162
[  254.035584][T15288] netlink: 'syz.0.2460': attribute type 83 has an invalid length.
[  254.126665][T15295] syzkaller0: left promiscuous mode
[  254.128107][T15295] syzkaller0: left allmulticast mode
[  254.334311][T15309] netlink: 'syz.0.2465': attribute type 1 has an invalid length.
[  254.335124][T15310] netlink: 'syz.0.2465': attribute type 1 has an invalid length.
[  254.413273][T15309] bond7: entered promiscuous mode
[  254.425225][T15309] 8021q: adding VLAN 0 to HW filter on device bond7
[  254.465009][T15309] 8021q: adding VLAN 0 to HW filter on device bond7
[  254.465357][T15309] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address
[  254.465376][T15309] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  254.485202][T15309] bond7: (slave xfrm1): making interface the new active one
[  254.485220][T15309] xfrm1: entered promiscuous mode
[  254.513160][T15309] xfrm1: left promiscuous mode
[  254.604249][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2469'.
[  254.604320][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  254.605825][T15323] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  254.606150][T15314] netlink: 19332 bytes leftover after parsing attributes in process `syz.1.2466'.
[  254.611353][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'.
[  254.611377][T15319] block nbd1: Unsupported socket: should be TCP or UNIX.
[  254.911805][T15341] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2473'.
[  254.911828][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'.
[  254.911841][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'.
[  255.010662][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'.
[  255.073628][T15353] v: renamed from vlan1 (while UP)
[  255.096299][T15353] tipc: Disabling bearer <eth:vlan1>
[  255.150333][T15353] netlink: 'syz.1.2477': attribute type 2 has an invalid length.
[  255.503823][T15382] ip_tables: iptables: counters copy to user failed while replacing table
[  255.521474][T15385] x_tables: duplicate underflow at hook 2
[  255.683963][T15393] tipc: Resetting bearer <eth:syz_tun>
[  255.695915][T15393] tipc: Resetting bearer <eth:team0>
[  255.702298][T15393] 8021q: adding VLAN 0 to HW filter on device team0
[  255.702864][T15393] tipc: Resetting bearer <eth:team0>
[  256.044782][T15423] lo speed is unknown, defaulting to 1000
[  256.044841][T15423] lo speed is unknown, defaulting to 1000
[  256.045424][T15423] lo speed is unknown, defaulting to 1000
[  256.077513][T15423] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  256.077547][T15423] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  256.077582][T15423] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  256.188500][T15423] lo speed is unknown, defaulting to 1000
[  256.193182][T15423] lo speed is unknown, defaulting to 1000
[  256.200725][T15423] lo speed is unknown, defaulting to 1000
[  256.205609][T15423] lo speed is unknown, defaulting to 1000
[  256.219540][T15423] lo speed is unknown, defaulting to 1000
[  256.291525][T15447] Cannot find set identified by id 4 to match
[  259.015449][T15425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.295982][T15480] Cannot find add_set index 34 as target
[  259.725386][T15506] __nla_validate_parse: 7 callbacks suppressed
[  259.725406][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2513'.
[  259.790510][T15509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2514'.
[  259.815468][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2502'.
[  260.395577][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'.
[  260.438090][T15545] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2524'.
[  260.765508][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2528'.
[  260.802616][T15559] geneve0: entered allmulticast mode
[  260.855684][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2528'.
[  260.893932][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2531'.
[  260.933626][T15575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2530'.
[  260.933648][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'.
[  261.334202][T15595] openvswitch: netlink: Key type 8708 is out of range max 32
[  261.341727][T15595] tipc: Enabling of bearer <ib:veth0_vlan> rejected, no device for the media
[  261.430676][T15600] 8021q: adding VLAN 0 to HW filter on device bond7
[  261.462377][T15600] bond0: left allmulticast mode
[  261.484625][T15600] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.505158][T15600] bond7: (slave bond0): Enslaving as an active interface with a down link
[  261.545399][T15602] bond7 (unregistering): (slave bond0): Releasing active interface
[  261.565707][T15602] bond7 (unregistering): Released all slaves
[  261.641643][T15615] syzkaller0: Caught tx_queue_len zero misconfig
[  261.759699][T15618] syzkaller0: entered promiscuous mode
[  261.759731][T15618] syzkaller0: entered allmulticast mode
[  261.775269][    C1] TC_ACT_REPEAT abuse ?
[  261.792334][T15628] netlink: 'syz.0.2546': attribute type 6 has an invalid length.
[  261.792795][    C1] TC_ACT_REPEAT abuse ?
[  261.991949][T15643] veth1_macvtap: Caught tx_queue_len zero misconfig
[  262.019172][T15639] xt_IDLETIMER: timeout value is zero
[  262.323031][T15670] veth1_to_bridge: left allmulticast mode
[  262.323076][T15670] veth1_to_bridge: left promiscuous mode
[  262.324591][T15670] bridge0: port 1(veth1_to_bridge) entered disabled state
[  262.354029][    C1] TC_ACT_REPEAT abuse ?
[  262.379751][T15661] bond8: entered promiscuous mode
[  262.379773][T15661] bond8: entered allmulticast mode
[  262.521716][    C1] TC_ACT_REPEAT abuse ?
[  262.525666][    C1] TC_ACT_REPEAT abuse ?
[  262.773994][T15696] netlink: 'syz.2.2562': attribute type 1 has an invalid length.
[  262.838940][T15696] 8021q: adding VLAN 0 to HW filter on device bond7
[  262.881356][T15707] netlink: ct family unspecified
[  263.173267][T15723] netlink: 'syz.3.2570': attribute type 21 has an invalid length.
[  263.211158][T15722] syzkaller0: entered promiscuous mode
[  263.211180][T15722] syzkaller0: entered allmulticast mode
[  263.561625][    C1] TC_ACT_REPEAT abuse ?
[  263.631964][T15748] bond9: option arp_all_targets: invalid value (18446744073709551613)
[  263.820102][T15748] bond9 (unregistering): Released all slaves
[  263.930851][T15762] syzkaller1: entered promiscuous mode
[  263.930876][T15762] syzkaller1: entered allmulticast mode
[  264.117115][ T5648] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  264.117159][ T5648] Bluetooth: hci0: command 0x0c3a tx timeout
[  264.127343][T15781] netlink: 'syz.1.2590': attribute type 10 has an invalid length.
[  264.154696][T15781] veth1_macvtap: left promiscuous mode
[  264.161146][T15781] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  264.175802][T15784] netlink: 'syz.1.2590': attribute type 10 has an invalid length.
[  264.175969][T15784] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  264.235151][T15788] ip6erspan0: entered promiscuous mode
[  264.244673][T15788] sit0: entered promiscuous mode
[  264.255833][T15788] netlink: 'syz.2.2591': attribute type 1 has an invalid length.
[  264.366481][T15790] Bluetooth: hci0: unsupported parameter 5135
[  264.366504][T15790] Bluetooth: hci0: unsupported parameter 8192
[  264.366517][T15790] Bluetooth: hci0: unsupported parameter 5135
[  264.366530][T15790] Bluetooth: hci0: unsupported parameter 8192
[  264.565209][T15805] syzkaller0: entered promiscuous mode
[  264.565233][T15805] syzkaller0: entered allmulticast mode
[  265.215594][T15939] pimreg3: entered allmulticast mode
[  265.330237][T15939] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  266.278459][    C1] TC_ACT_REPEAT abuse ?
[  267.403201][T15809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.668527][T16061] netlink: 'syz.4.2609': attribute type 1 has an invalid length.
[  267.731274][T16068] netlink: 'syz.2.2608': attribute type 4 has an invalid length.
[  267.731295][T16068] __nla_validate_parse: 16 callbacks suppressed
[  267.731308][T16068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2608'.
[  267.748838][T16061] 8021q: adding VLAN 0 to HW filter on device bond17
[  267.783995][T16061] netlink: 'syz.4.2609': attribute type 10 has an invalid length.
[  267.784014][T16061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2609'.
[  267.931362][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2611'.
[  268.676291][T16084] bond8: Unable to set up delay as MII monitoring is disabled
[  268.697790][T16084] bond8 (unregistering): Released all slaves
[  270.628037][T16059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.822634][T16095] 0ªî{X¹¦: left allmulticast mode
[  270.896641][T16104] netlink: 'syz.3.2619': attribute type 1 has an invalid length.
[  270.907608][T16103] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2617'.
[  270.916035][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'.
[  270.947980][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'.
[  271.158416][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'.
[  271.160592][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2620'.
[  271.160619][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2620'.
[  271.232689][T16124] gre1: entered promiscuous mode
[  271.296275][T16129] gre1: entered promiscuous mode
[  271.327891][T16132] netlink: 'syz.0.2624': attribute type 10 has an invalid length.
[  271.365858][T16132] team0: Port device wg2 added
[  271.925410][T16169] policy can only be matched on NF_INET_PRE_ROUTING
[  271.925425][T16169] unable to load match
[  271.926108][T16169] netlink: 'syz.3.2635': attribute type 2 has an invalid length.
[  271.969639][T16172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2634'.
[  272.154109][T16186] smc: net device lo erased user defined pnetid SYZ0
[  272.154331][T16186] smc: smcd device lo erased user defined pnetid SYZ0
[  272.212047][ T5636] Bluetooth: hci1: unexpected event for opcode 0x2060
[  272.302704][ T5636] Bluetooth: hci1: unexpected event for opcode 0x2060
[  273.125342][T16258] __nla_validate_parse: 2 callbacks suppressed
[  273.125363][T16258] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2657'.
[  273.125386][T16258] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2657'.
[  273.125839][T16258] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  273.264172][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'.
[  273.426328][T16264] SET target dimension over the limit!
[  273.510744][T16264] syzkaller0: entered promiscuous mode
[  273.510769][T16264] syzkaller0: entered allmulticast mode
[  273.515362][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'.
[  273.516214][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'.
[  273.516424][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'.
[  273.639209][    C1] TC_ACT_REPEAT abuse ?
[  274.928108][T16305] netlink: 'syz.4.2670': attribute type 10 has an invalid length.
[  275.222969][T16304] bond18: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  275.322535][T16305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  275.344604][T16305] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  275.351497][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'.
[  275.351517][T16318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'.
[  275.843769][T16353] netlink: 'syz.3.2679': attribute type 3 has an invalid length.
[  278.299537][T16310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.323726][T16354] netlink: 'syz.3.2679': attribute type 1 has an invalid length.
[  278.392804][T16357] netlink: 'syz.0.2681': attribute type 7 has an invalid length.
[  278.392825][T16357] netlink: 'syz.0.2681': attribute type 5 has an invalid length.
[  278.392839][T16357] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2681'.
[  278.584678][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'.
[  278.623994][T16373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2686'.
[  278.624028][T16373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2686'.
[  278.675260][T16381] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  278.675609][T16381] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  278.710288][T16380] gre3: entered promiscuous mode
[  278.710311][T16380] gre3: entered allmulticast mode
[  278.865797][T16386] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  278.887530][T16392] ip6tnl0: Caught tx_queue_len zero misconfig
[  278.964789][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'.
[  279.073724][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'.
[  279.535038][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2700'.
[  279.564558][T16431] xt_l2tp: unknown flags: 43
[  279.794850][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'.
[  280.430846][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2702'.
[  280.431135][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2702'.
[  280.690792][T16453] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  280.948816][T16472] netlink: 'syz.2.2712': attribute type 4 has an invalid length.
[  280.965936][T16472] netlink: 'syz.2.2712': attribute type 4 has an invalid length.
[  280.985428][T16478] trusted_key: syz.0.2713 sent an empty control message without MSG_MORE.
[  281.069023][T16482] xt_IDLETIMER: timeout value is zero
[  309.278672][ T5636] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  309.278707][T16496] __nla_validate_parse: 3 callbacks suppressed
[  309.278720][T16496] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2717'.
[  309.569888][T16518] geneve3: entered promiscuous mode
[  309.569913][T16518] geneve3: entered allmulticast mode
[  310.673628][T16577] netlink: 'syz.4.2740': attribute type 21 has an invalid length.
[  310.673703][T16577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2740'.
[  310.853406][T16588] netlink: 'syz.4.2743': attribute type 1 has an invalid length.
[  310.887432][T16588] 8021q: adding VLAN 0 to HW filter on device bond19
[  310.893283][T16588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2743'.
[  310.923019][T16588] bond19: (slave bridge20): making interface the new active one
[  310.925042][T16588] bond19: (slave bridge20): Enslaving as an active interface with an up link
[  311.103960][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'.
[  311.295922][T16612] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  311.355338][T16618] netlink: 'syz.1.2749': attribute type 2 has an invalid length.
[  311.485872][T16634] netlink: 'syz.4.2753': attribute type 3 has an invalid length.
[  311.596664][T16625] batman_adv: batadv0: Adding interface: veth0
[  311.597015][T16625] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.597255][T16625] batman_adv: batadv0: Interface activated: veth0
[  311.605254][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2751'.
[  311.661613][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2756'.
[  311.841497][T16657] x_tables: duplicate underflow at hook 1
[  311.842503][T16658] x_tables: duplicate underflow at hook 1
[  311.896658][T16657] Cannot find set identified by id 4 to match
[  311.898608][T16658] Cannot find set identified by id 4 to match
[  312.122748][T16675] netlink: 'syz.3.2767': attribute type 1 has an invalid length.
[  312.122769][T16675] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2767'.
[  312.340176][T16692] syzkaller1: entered promiscuous mode
[  312.340200][T16692] syzkaller1: entered allmulticast mode
[  312.372028][T16692] pimreg: left allmulticast mode
[  312.680948][T16711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2779'.
[  312.866663][T16718] tipc: Enabling of bearer <if:i> rejected, media not registered
[  313.210462][T16734] veth0_vlan: left promiscuous mode
[  313.214617][T16734] vlan0: entered promiscuous mode
[  313.214636][T16734] veth0_vlan: entered promiscuous mode
[  313.377790][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'.
[  313.432394][T16736] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2787'.
[  313.889348][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.891305][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.895117][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.904717][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.935795][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.179783][T16769] netlink: 'syz.2.2793': attribute type 1 has an invalid length.
[  314.240264][T16772] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  314.612148][  T169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.612182][  T169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.872469][  T169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  314.872505][  T169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.895836][T16796] __nla_validate_parse: 1 callbacks suppressed
[  314.895854][T16796] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2800'.
[  315.096416][  T169] bond0: (slave netdevsim1): Releasing backup interface
[  315.144771][  T169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.144807][  T169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.299023][  T169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.302744][  T169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.392110][T16813] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2805'.
[  315.401542][T16813] ip_tables: iptables: counters copy to user failed while replacing table
[  315.479022][T16759] rxe_eth0 speed is unknown, defaulting to 1000
[  315.873870][  T169] vlan2: left allmulticast mode
[  315.873892][  T169] bridge_slave_0: left allmulticast mode
[  315.874869][  T169] bridge0: port 3(vlan2) entered disabled state
[  315.900281][T16838] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  316.038314][ T5648] Bluetooth: hci5: command tx timeout
[  316.090849][T16850] Bluetooth: hci0: unsupported parameter 5135
[  316.090869][T16850] Bluetooth: hci0: unsupported parameter 8192
[  316.090883][T16850] Bluetooth: hci0: unsupported parameter 5135
[  316.090896][T16850] Bluetooth: hci0: unsupported parameter 8192
[  316.318863][  T169] pim6reg: left allmulticast mode
[  316.652308][T16879] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2816'.
[  316.878525][  T169] bond1 (unregistering): (slave gretap0): Releasing active interface
[  316.908414][  T169] bond11 (unregistering): (slave gretap3): Releasing backup interface
[  316.986473][T16885] netlink: 'syz.2.2817': attribute type 2 has an invalid length.
[  316.986495][T16885] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2817'.
[  317.124797][  T169] bond19 (unregistering): (slave bridge20): Releasing active interface
[  317.141502][  T169] bond0 (unregistering): Released all slaves
[  317.145738][  T169] bond1 (unregistering): Released all slaves
[  317.172060][  T169] bond2 (unregistering): Released all slaves
[  317.187771][  T169] bond3 (unregistering): Released all slaves
[  317.198704][  T169] bond4 (unregistering): Released all slaves
[  317.213622][  T169] bond5 (unregistering): Released all slaves
[  317.224298][  T169] bond6 (unregistering): Released all slaves
[  317.240456][  T169] bond7 (unregistering): Released all slaves
[  317.254538][  T169] bond8 (unregistering): Released all slaves
[  317.265877][  T169] bond9 (unregistering): Released all slaves
[  317.279717][  T169] bond10 (unregistering): Released all slaves
[  317.294806][  T169] bond11 (unregistering): (slave bond12): Releasing backup interface
[  317.295514][  T169] bond11 (unregistering): Released all slaves
[  317.320898][  T169] bond12 (unregistering): Released all slaves
[  317.335149][  T169] bond13 (unregistering): Released all slaves
[  317.349978][  T169] bond14 (unregistering): Released all slaves
[  317.379917][  T169] bond15 (unregistering): Released all slaves
[  317.393934][  T169] bond16 (unregistering): Released all slaves
[  317.414523][  T169] bond17 (unregistering): Released all slaves
[  317.429407][  T169] bond18 (unregistering): Released all slaves
[  317.455426][  T169] bond19 (unregistering): Released all slaves
[  317.472642][T16838] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  317.474579][T16759] virt_wifi0 speed is unknown, defaulting to 1000
[  317.503693][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2
[  317.521454][T16759] wlan1 speed is unknown, defaulting to 1000
[  317.527835][T16759] lo speed is unknown, defaulting to 1000
[  317.645267][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  317.813180][  T169] tipc: Disabling bearer <udp:syz0>
[  317.813414][  T169] tipc: Left network mode
[  318.118694][ T5648] Bluetooth: hci5: command tx timeout
[  318.643736][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'.
[  318.697936][T16945] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  318.988850][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'.
[  318.988874][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'.
[  319.232755][T16965] ipt_REJECT: TCP_RESET invalid for non-tcp
[  319.267255][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3
[  319.345311][T16975] ipt_REJECT: TCP_RESET invalid for non-tcp
[  319.413459][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'.
[  319.604378][  T169] hsr0: left allmulticast mode
[  319.604775][  T169] veth1_macvtap: left promiscuous mode
[  319.604876][  T169] veth0_macvtap: left promiscuous mode
[  319.605044][  T169] veth1_vlan: left promiscuous mode
[  319.705419][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'.
[  319.900160][T17005] netlink: 'syz.2.2844': attribute type 1 has an invalid length.
[  319.954704][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'.
[  320.199619][ T5648] Bluetooth: hci5: command tx timeout
[  320.237176][T17006] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  320.241182][T17007] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.276490][T16759] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.279448][T16759] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.279576][T16759] bridge_slave_0: entered allmulticast mode
[  320.286521][T16759] bridge_slave_0: entered promiscuous mode
[  320.304872][T16759] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.309507][T16759] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.309660][T16759] bridge_slave_1: entered allmulticast mode
[  320.319703][T16759] bridge_slave_1: entered promiscuous mode
[  320.388306][T16759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.394019][T16759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.453248][T16759] team0: Port device team_slave_0 added
[  320.456149][T16759] team0: Port device team_slave_1 added
[  320.497732][T16759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.497747][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.497773][T16759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.505390][T16759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.505404][T16759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.505428][T16759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.638391][T16759] hsr_slave_0: entered promiscuous mode
[  320.639378][T16759] hsr_slave_1: entered promiscuous mode
[  320.640100][T16759] debugfs: 'hsr0' already exists in 'hsr'
[  320.640119][T16759] Cannot create hsr debugfs directory
[  320.709677][T17019] netlink: 'syz.1.2847': attribute type 1 has an invalid length.
[  320.709698][T17019] netlink: 'syz.1.2847': attribute type 2 has an invalid length.
[  320.799365][T17027] syzkaller1: entered promiscuous mode
[  320.799388][T17027] syzkaller1: entered allmulticast mode
[  320.910449][  T169] IPVS: stop unused estimator thread 0...
[  321.740140][T17072] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  322.005856][T17081] Bluetooth: hci0: unsupported parameter 5161
[  322.005879][T17081] Bluetooth: hci0: unsupported parameter 8192
[  322.005892][T17081] Bluetooth: hci0: unsupported parameter 5161
[  322.005904][T17081] Bluetooth: hci0: unsupported parameter 8192
[  322.059040][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'.
[  322.059421][T17081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.161642][T17081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.245052][T17088] geneve4: entered allmulticast mode
[  322.281499][ T5648] Bluetooth: hci5: command tx timeout
[  322.669933][T17108] bond8: invalid ARP target 0.0.0.0 specified for addition
[  322.669973][T17108] bond8: option arp_ip_target: invalid value (0)
[  322.674177][T17108] bond8 (unregistering): Released all slaves
[  322.780098][T17111] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2869'.
[  322.842087][T17104] bond8: invalid ARP target 0.0.0.0 specified for addition
[  322.842113][T17104] bond8: option arp_ip_target: invalid value (0)
[  322.847272][T17104] bond8 (unregistering): Released all slaves
[  322.929093][T16759] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.945054][T16759] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  322.950586][T16759] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.964538][T16759] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  322.971520][T16759] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.995302][T16759] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  323.003220][T16759] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  323.025308][T16759] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  323.143681][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2873'.
[  323.349788][T16759] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.382718][T16759] 8021q: adding VLAN 0 to HW filter on device team0
[  323.395771][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.395924][ T7463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.408542][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.408641][ T7463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.861525][T17186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2883'.
[  323.899994][T17187] batman_adv: batadv0: Interface deactivated: gretap0
[  323.900608][T17187] gretap0: entered allmulticast mode
[  324.592767][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'.
[  324.677140][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'.
[  324.757935][ T5636] Bluetooth: hci0: command 0x0c3a tx timeout
[  324.759235][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  324.768572][T16759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.853293][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'.
[  324.853315][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'.
[  325.010964][T17244] syzkaller0: entered promiscuous mode
[  325.010985][T17244] syzkaller0: entered allmulticast mode
[  325.551830][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'.
[  325.603487][T16759] veth0_vlan: entered promiscuous mode
[  325.633537][T16759] veth1_vlan: entered promiscuous mode
[  325.784618][T17273] bond9: option min_links: invalid value (18446744073709551614)
[  325.784643][T17273] bond9: option min_links: allowed values 0 - 2147483647
[  325.787880][T17273] bond9 (unregistering): Released all slaves
[  325.825072][T16759] veth0_macvtap: entered promiscuous mode
[  325.838573][T16759] veth1_macvtap: entered promiscuous mode
[  325.866436][T16759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.907274][T16759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.949450][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'.
[  325.969398][  T169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.969556][  T169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.969590][  T169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.008693][  T169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.078055][T17292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2905'.
[  326.315140][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.315161][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.415069][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.415114][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.583403][T17310] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.583427][T17310] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  326.653988][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.654182][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.654354][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.654531][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.654702][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.654870][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  326.837728][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  326.838433][ T5636] Bluetooth: hci0: command 0x0c3a tx timeout
[  326.838519][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  326.986187][ T5653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  326.999935][ T5653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  327.005178][ T5653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  327.015854][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  327.017476][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.254394][T17343] team0: Port device wg2 removed
[  327.336620][T17343] team0: Port device xfrm0 removed
[  327.483584][T17346] ip6gre1: entered promiscuous mode
[  327.504439][T17348] team0: Port device xfrm0 added
[  327.506123][T17351] tipc: Started in network mode
[  327.506148][T17351] tipc: Node identity 420192ccbc6f, cluster identity 4711
[  327.506291][T17351] tipc: Enabled bearer <eth:team0>, priority 0
[  327.632025][ T5631] tipc: Resetting bearer <eth:syz_tun>
[  327.710682][ T5631] tipc: Disabling bearer <eth:syz_tun>
[  328.243676][T17402] ip_tables: iptables: counters copy to user failed while replacing table
[  328.306167][T17334] rxe_eth0 speed is unknown, defaulting to 1000
[  328.616845][ T2260] tipc: Node number set to 4268659404
[  328.714293][T17414] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  328.916938][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  328.919044][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  328.939722][T17414] netlink: 'syz.4.2929': attribute type 1 has an invalid length.
[  328.941385][T17334] virt_wifi0 speed is unknown, defaulting to 1000
[  329.077708][ T5653] Bluetooth: hci3: command tx timeout
[  329.521058][T17334] wlan1 speed is unknown, defaulting to 1000
[  329.524743][T17334] lo speed is unknown, defaulting to 1000
[  330.215035][T17435] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  330.215058][T17435] netlink: 'syz.1.2935': attribute type 3 has an invalid length.
[  330.680916][T17334] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.681039][T17334] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.681206][T17334] bridge_slave_0: entered allmulticast mode
[  330.683818][T17334] bridge_slave_0: entered promiscuous mode
[  330.691008][T17334] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.691111][T17334] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.691502][T17334] bridge_slave_1: entered allmulticast mode
[  330.693132][T17334] bridge_slave_1: entered promiscuous mode
[  330.753753][T17334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.760536][T17334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.812584][T17334] team0: Port device team_slave_0 added
[  330.815765][T17334] team0: Port device team_slave_1 added
[  330.843940][T17479] __nla_validate_parse: 66 callbacks suppressed
[  330.843957][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'.
[  330.866584][T17334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.866600][T17334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.866625][T17334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.870984][T17334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.870997][T17334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.871022][T17334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.965883][T17334] hsr_slave_0: entered promiscuous mode
[  330.966532][T17334] hsr_slave_1: entered promiscuous mode
[  330.971549][T17334] debugfs: 'hsr0' already exists in 'hsr'
[  330.971568][T17334] Cannot create hsr debugfs directory
[  330.997591][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  330.999085][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  331.021104][T17483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2947'.
[  331.157926][ T5653] Bluetooth: hci3: command tx timeout
[  331.232500][T17334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.232535][T17334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  331.232560][T17334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.232583][T17334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  331.324883][T17334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.324919][T17334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  331.324946][T17334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.324972][T17334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  331.463978][T17334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.464014][T17334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  331.464038][T17334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.464063][T17334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  331.714707][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'.
[  331.714707][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'.
[  331.735238][T17502] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  331.736390][T17502] bond8 (unregistering): Released all slaves
[  331.779331][T17501] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  331.782714][T17501] bond8 (unregistering): Released all slaves
[  333.076939][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  333.077156][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  333.077243][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  333.237092][ T5653] Bluetooth: hci3: command tx timeout
[  333.565308][T17462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.603757][T17334] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  333.638879][T17334] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  333.641715][T17334] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  333.664216][T17334] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  333.666619][T17334] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  333.689605][T17334] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  333.690947][T17334] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.714243][T17334] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  333.802866][T17517] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2953'.
[  333.950539][T17531] netlink: 'syz.1.2956': attribute type 7 has an invalid length.
[  333.980074][T17334] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.056829][T17535] netlink: 'syz.4.2958': attribute type 4 has an invalid length.
[  334.056850][T17535] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2958'.
[  334.110181][T17334] 8021q: adding VLAN 0 to HW filter on device team0
[  334.125976][T17541] netlink: 'syz.2.2957': attribute type 1 has an invalid length.
[  334.193498][T17541] bond9: entered promiscuous mode
[  334.195336][T17541] 8021q: adding VLAN 0 to HW filter on device bond9
[  334.212342][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2959'.
[  334.307644][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.307754][ T7463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.315637][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.315760][ T7463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.413610][T17334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  334.472406][T17549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2961'.
[  334.494101][T17552] netlink: 'syz.4.2962': attribute type 3 has an invalid length.
[  334.494123][T17552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2962'.
[  334.543816][T17549] bond_slave_0: entered promiscuous mode
[  334.543854][T17549] bond_slave_0: entered allmulticast mode
[  334.872393][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'.
[  335.156952][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  335.157046][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  335.225959][T17595] x_tables: duplicate underflow at hook 2
[  335.318700][ T5653] Bluetooth: hci3: command tx timeout
[  335.653504][T17616] bond8: entered promiscuous mode
[  335.654129][T17616] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.663132][T17624] netlink: 'syz.4.2973': attribute type 3 has an invalid length.
[  335.884687][T17334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.053271][T17334] veth0_vlan: entered promiscuous mode
[  336.055572][T17630] ip_tables: iptables: counters copy to user failed while replacing table
[  336.074342][T17630] netlink: 'syz.0.2974': attribute type 2 has an invalid length.
[  336.095008][T17334] veth1_vlan: entered promiscuous mode
[  336.182684][T17334] veth0_macvtap: entered promiscuous mode
[  336.219265][T17334] veth1_macvtap: entered promiscuous mode
[  336.314667][T17334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.364811][T17334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.417081][T13492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.418774][T17650] __nla_validate_parse: 5 callbacks suppressed
[  336.418792][T17650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2977'.
[  336.438880][ T7463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.439199][ T7463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.439564][ T7463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.772687][T13492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.772735][T13492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.892219][T13492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.892240][T13492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.011372][T13492] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82
[  337.237283][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  337.238055][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  338.047495][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'.
[  338.061630][T17718] vlan2: entered promiscuous mode
[  338.061648][T17718] hsr0: entered promiscuous mode
[  338.077685][T17719] hsr_slave_0: left promiscuous mode
[  338.083350][T17719] hsr_slave_1: left promiscuous mode
[  338.206062][T17729] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  338.338293][T17735] 0ªX¹¦Dö»: left allmulticast mode
[  338.701288][T17753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.974167][T17755] netlink: 'syz.1.3004': attribute type 11 has an invalid length.
[  338.974702][T17755] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3004'.
[  339.078365][T17756] IPv6: sit4: Disabled Multicast RS
[  339.327622][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  339.327715][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  339.935066][T17678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.092766][T17762] netlink: 'syz.3.3005': attribute type 1 has an invalid length.
[  340.149181][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3005'.
[  340.256342][T17762] bridge1: entered promiscuous mode
[  340.494689][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  340.508577][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  340.516299][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  340.526384][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  340.535934][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  340.675352][T17786] netlink: 'syz.0.3010': attribute type 12 has an invalid length.
[  340.675375][T17786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3010'.
[  340.873662][T17797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3013'.
[  341.276421][ T7454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  341.276458][ T7454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.397994][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  341.398115][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  341.422738][ T7454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  341.422771][ T7454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.578980][ T7454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  341.579017][ T7454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.781647][T17778] rxe_eth0 speed is unknown, defaulting to 1000
[  341.910091][T17839] ip_tables: iptables: counters copy to user failed while replacing table
[  342.023040][ T7463] IPVS: starting estimator thread 0...
[  342.106905][T17853] IPVS: using max 26 ests per chain, 62400 per kthread
[  342.369568][T17867] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  342.372806][T17868] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  342.373509][T17867] netlink: 'syz.4.3026': attribute type 1 has an invalid length.
[  342.373526][T17867] nbd: error processing sock list
[  342.597129][ T5653] Bluetooth: hci1: command tx timeout
[  342.899731][ T7454] bond4 (unregistering): (slave ip6gre1): Releasing backup interface
[  342.899750][ T7454] ip6gre1 (unregistering): left promiscuous mode
[  343.042324][ T7454] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  343.098098][ T7454] team0: Port device bridge3 removed
[  343.159246][ T7454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  343.159489][ T7454] bond_slave_0: left allmulticast mode
[  343.161171][ T7454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  343.161587][ T7454] bond_slave_1: left allmulticast mode
[  343.162402][ T7454] bond0 (unregistering): Released all slaves
[  343.172854][ T7454] bond1 (unregistering): Released all slaves
[  343.187644][ T7454] bond2 (unregistering): Released all slaves
[  343.219178][ T7454] bond3 (unregistering): (slave wireguard1): Releasing backup interface
[  343.219194][ T7454] wireguard1: left promiscuous mode
[  343.220379][ T7454] bond3 (unregistering): Released all slaves
[  343.248539][ T7454] bond4 (unregistering): Released all slaves
[  343.257095][ T7454] bond5 (unregistering): Released all slaves
[  343.271073][ T7454] bond6 (unregistering): Released all slaves
[  343.286482][ T7454] bond7 (unregistering): Released all slaves
[  343.304839][ T7454] bond8 (unregistering): Released all slaves
[  343.334403][T17864] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  343.353576][T17778] virt_wifi0 speed is unknown, defaulting to 1000
[  343.366878][T17778] wlan1 speed is unknown, defaulting to 1000
[  343.375846][T17778] lo speed is unknown, defaulting to 1000
[  343.482029][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  343.482246][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  343.482329][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  343.549910][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'.
[  343.598952][ T7454] tipc: Disabling bearer <eth:team0>
[  343.599206][ T7454] tipc: Left network mode
[  344.041746][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'.
[  344.060627][T17909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'.
[  344.325327][T17923] macvlan0: entered promiscuous mode
[  344.340307][T17927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'.
[  344.677526][ T5653] Bluetooth: hci1: command tx timeout
[  345.006653][T17948] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  345.173446][T17778] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.175284][T17778] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.175430][T17778] bridge_slave_0: entered allmulticast mode
[  345.183308][T17778] bridge_slave_0: entered promiscuous mode
[  345.196536][T17778] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.196635][T17778] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.196903][T17778] bridge_slave_1: entered allmulticast mode
[  345.200158][T17778] bridge_slave_1: entered promiscuous mode
[  345.355323][ T7454] hsr_slave_0: left promiscuous mode
[  345.356268][ T7454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.356316][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.366936][ T7454] batman_adv: batadv0: Interface deactivated: ipvlan2
[  345.366954][ T7454] batman_adv: batadv0: Removing interface: ipvlan2
[  345.399659][ T7454] batman_adv: batadv0: Interface deactivated: ipvlan3
[  345.399680][ T7454] batman_adv: batadv0: Removing interface: ipvlan3
[  345.403380][ T7454] batman_adv: batadv0: Interface deactivated: ipvlan4
[  345.403397][ T7454] batman_adv: batadv0: Removing interface: ipvlan4
[  345.412840][ T7454] batman_adv: batadv0: Interface deactivated: ipvlan5
[  345.412857][ T7454] batman_adv: batadv0: Removing interface: ipvlan5
[  345.515049][ T7454] team0: left allmulticast mode
[  345.515070][ T7454] team_slave_0: left allmulticast mode
[  345.515087][ T7454] team_slave_1: left allmulticast mode
[  345.515167][ T7454] team0: left promiscuous mode
[  345.541271][ T7454] batadv0: left promiscuous mode
[  345.543171][ T7454] veth0_macvtap: left promiscuous mode
[  345.543334][ T7454] veth1_vlan: left promiscuous mode
[  345.567616][ T5653] Bluetooth: hci0: command 0x0c3a tx timeout
[  345.567708][ T5648] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  346.391383][   T13] smbdirect: ib_dev[ÿ] removed
[  346.434542][ T7454] team0 (unregistering): Port device team_slave_1 removed
[  346.448791][ T7454] team0 (unregistering): Port device team_slave_0 removed
[  346.582900][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.583168][T17974] veth0: entered promiscuous mode
[  346.586266][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.605860][T17972] gretap1: entered promiscuous mode
[  346.608214][T17972] batman_adv: batadv0: Adding interface: gretap1
[  346.608227][T17972] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  346.608249][T17972] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  346.614791][T17978] veth0: left promiscuous mode
[  346.730477][T17778] team0: Port device team_slave_0 added
[  346.735367][T17778] team0: Port device team_slave_1 added
[  346.757633][ T5648] Bluetooth: hci1: command tx timeout
[  346.797233][T17778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.797250][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.797275][T17778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.803904][T17778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.803918][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.803944][T17778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.960031][T17778] hsr_slave_0: entered promiscuous mode
[  346.964524][T17778] hsr_slave_1: entered promiscuous mode
[  346.967049][T17778] debugfs: 'hsr0' already exists in 'hsr'
[  346.967068][T17778] Cannot create hsr debugfs directory
[  347.304172][T18031] x_tables: duplicate underflow at hook 1
[  347.707181][T18047] ªªªªª»: renamed from dummy0 (while UP)
[  347.811392][T18057] netlink: 'syz.0.3061': attribute type 16 has an invalid length.
[  347.811412][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3061'.
[  347.855778][ T7454] IPVS: stop unused estimator thread 0...
[  347.975748][T18055] veth3: entered allmulticast mode
[  348.256124][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3063'.
[  348.333187][T18079] xt_hashlimit: size too large, truncated to 1048576
[  348.535212][ T7454] pimreg3: left allmulticast mode
[  348.688199][T18104] sctp: [Deprecated]: syz.0.3067 (pid 18104) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.688199][T18104] Use struct sctp_sack_info instead
[  348.837290][ T5648] Bluetooth: hci1: command tx timeout
[  349.142382][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'.
[  349.164790][ T7454] team0: Port device xfrm0 removed
[  349.189429][ T7454] bond2 (unregistering): (slave xfrm1): Releasing backup interface
[  349.189455][ T7454] xfrm1 (unregistering): left promiscuous mode
[  349.248064][ T7454] bond5 (unregistering): (slave gretap3): Releasing backup interface
[  349.355788][ T7454] bond0 (unregistering): Released all slaves
[  349.361959][ T7454] bond1 (unregistering): Released all slaves
[  349.374325][ T7454] bond2 (unregistering): Released all slaves
[  349.392585][ T7454] bond3 (unregistering): Released all slaves
[  349.412188][ T7454] bond4 (unregistering): Released all slaves
[  349.428492][ T7454] bond5 (unregistering): Released all slaves
[  349.435838][ T7454] bond6 (unregistering): Released all slaves
[  349.459211][ T7454] bond7 (unregistering): Released all slaves
[  349.476863][ T7454] bond8 (unregistering): Released all slaves
[  349.497832][ T7454] bond9 (unregistering): Released all slaves
[  349.645999][ T7454] tipc: Disabling bearer <eth:team0>
[  349.659574][ T7454] tipc: Left network mode
[  349.907946][ T7454] IPVS: stopping backup sync thread 8143 ...
[  350.018182][T18139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3073'.
[  350.018207][T18139] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3073'.
[  350.217631][T17778] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  350.245114][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  350.267166][T17778] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  350.285307][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  350.359160][T17778] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  350.409214][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  350.410040][T17778] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  350.454974][T17778] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  350.652936][T17887] smbdirect: ib_dev[syz2] removed
[  350.669864][ T6622] infiniband syz2: ib_query_port failed (-19)
[  351.057329][T18193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'.
[  351.057367][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'.
[  351.252774][T17778] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.315138][T17778] 8021q: adding VLAN 0 to HW filter on device team0
[  351.345053][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.345167][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.376381][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.376514][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.593679][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3085'.
[  352.092324][T18231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3086'.
[  352.227577][ T7454] hsr_slave_0: left promiscuous mode
[  352.251301][ T7454] hsr_slave_1: left promiscuous mode
[  352.253508][ T7454] batman_adv: batadv0: Interface deactivated: veth0
[  352.253528][ T7454] batman_adv: batadv0: Removing interface: veth0
[  352.311200][ T7454] veth0_macvtap: left promiscuous mode
[  352.489373][T18244] netlink: 'syz.4.3089': attribute type 1 has an invalid length.
[  352.575775][T18254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3091'.
[  353.036357][ T7463] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  353.131538][T18244] 8021q: adding VLAN 0 to HW filter on device bond1
[  353.132125][ T5761] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19)
[  353.143526][T18251] bond1: (slave gretap2): making interface the new active one
[  353.153510][T18251] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  353.289298][T18274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'.
[  353.290631][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'.
[  353.616348][T17778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.700514][ T7454] IPVS: stop unused estimator thread 0...
[  353.846203][T17778] veth0_vlan: entered promiscuous mode
[  353.889557][T17778] veth1_vlan: entered promiscuous mode
[  354.042471][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.327010][T18300] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.328111][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.328326][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.328531][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.344048][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.422141][T18301] bond2: (slave erspan1): making interface the new active one
[  354.434539][T18301] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  354.455958][T17778] veth0_macvtap: entered promiscuous mode
[  354.531667][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.531907][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.532117][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.532320][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.532530][T18300] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  354.604171][T17778] veth1_macvtap: entered promiscuous mode
[  354.723488][T17778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.773532][T17778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.828499][ T7463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.829531][T17888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.829684][T17888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.829718][T17888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.041022][T18341] __nla_validate_parse: 1 callbacks suppressed
[  355.041125][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3105'.
[  355.158821][ T7461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.158843][ T7461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.221479][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.221500][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.999358][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'.
[  356.017953][T18390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'.
[  356.017988][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'.
[  356.079705][T18397] xt_policy: too many policy elements
[  356.360177][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'.
[  356.825654][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  356.840910][ T5653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.843144][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.855138][ T5653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.866906][ T5653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.592645][T18413] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  357.592682][T18413] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  357.592722][T18413] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  358.030876][T18459] 8021q: adding VLAN 0 to HW filter on device bond3
[  358.158248][T18421] rxe_eth0 speed is unknown, defaulting to 1000
[  358.368680][T18474] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3130'.
[  358.368709][T18474] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3130'.
[  358.918427][ T5648] Bluetooth: hci2: command tx timeout
[  359.452514][T18509] bond0: (slave ip6tnl0): refused to change device type
[  359.588885][T18421] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.589001][T18421] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.589123][T18521] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  359.589125][T18421] bridge_slave_0: entered allmulticast mode
[  359.590856][T18421] bridge_slave_0: entered promiscuous mode
[  359.596877][T18421] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.597094][T18421] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.597216][T18421] bridge_slave_1: entered allmulticast mode
[  359.600424][T18421] bridge_slave_1: entered promiscuous mode
[  359.648832][T18520] validate_nla: 6 callbacks suppressed
[  359.648849][T18520] netlink: 'syz.2.3139': attribute type 1 has an invalid length.
[  359.708774][T18520] bond10: entered promiscuous mode
[  359.709184][T18520] 8021q: adding VLAN 0 to HW filter on device bond10
[  359.721433][T18421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.735702][T18421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.828007][T18530] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  359.828036][T18530] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  359.828052][T18530] bond10: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  359.929696][T18421] team0: Port device team_slave_0 added
[  359.936076][T18421] team0: Port device team_slave_1 added
[  360.016220][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'.
[  360.131745][T18421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.131762][T18421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.131788][T18421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.144111][T18421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.144125][T18421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  360.144150][T18421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.381286][T18421] hsr_slave_0: entered promiscuous mode
[  360.384002][T18421] hsr_slave_1: entered promiscuous mode
[  360.444759][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'.
[  360.444784][T18528] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3140'.
[  360.562625][T18548] netlink: 'syz.4.3145': attribute type 1 has an invalid length.
[  360.669136][T18557] netlink: 'syz.3.3147': attribute type 64 has an invalid length.
[  360.669159][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'.
[  360.796323][T18563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3145'.
[  360.850006][T18553] 8021q: adding VLAN 0 to HW filter on device bond4
[  360.863478][T18553] bond3: (slave bond4): making interface the new active one
[  360.864032][T18553] bond3: (slave bond4): Enslaving as an active interface with an up link
[  360.923474][T18553] netlink: 'syz.4.3145': attribute type 11 has an invalid length.
[  360.945051][T18559] bond3: (slave gretap3): Enslaving as a backup interface with an up link
[  360.996812][ T5648] Bluetooth: hci2: command tx timeout
[  361.127949][   T13] IPVS: starting estimator thread 0...
[  361.138793][T18567] IPVS: twos: UDP 127.0.0.1:20001 - no destination available
[  361.201987][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3148'.
[  361.216798][T18569] IPVS: using max 28 ests per chain, 67200 per kthread
[  361.255547][T18571] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3149'.
[  361.255576][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'.
[  361.548555][T18421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.548590][T18421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.777108][T18421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  361.777145][T18421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.015520][T18421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.015555][T18421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.192845][T18598] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3158'.
[  362.230832][T18421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.230866][T18421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.276461][T18598] 0·: renamed from hsr0 (while UP)
[  362.287427][T18598] 0·: entered allmulticast mode
[  362.287451][T18598] hsr_slave_0: entered allmulticast mode
[  362.287469][T18598] hsr_slave_1: entered allmulticast mode
[  362.287918][T18598] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  362.600686][T18611] netlink: 'syz.4.3163': attribute type 1 has an invalid length.
[  362.699805][T18611] bond5: entered promiscuous mode
[  362.700204][T18611] 8021q: adding VLAN 0 to HW filter on device bond5
[  362.734159][T18610] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3162'.
[  362.811328][T18615] bond5: (slave bridge1): making interface the new active one
[  362.811351][T18615] bridge1: entered promiscuous mode
[  362.831817][T18615] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  363.078502][ T5648] Bluetooth: hci2: command tx timeout
[  363.121675][T18421] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  363.143221][T18421] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  363.147741][T18421] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  363.193313][T18421] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  363.194950][T18421] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  363.229263][T18421] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  363.231570][T18421] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  363.285799][T18421] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  363.573816][T18663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3169'.
[  363.725017][T18666] bond4: Unable to set up delay as MII monitoring is disabled
[  363.735851][T18666] bond4 (unregistering): Released all slaves
[  363.848201][T18421] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.894196][T18666] netlink: 'syz.3.3170': attribute type 4 has an invalid length.
[  363.985858][T18421] 8021q: adding VLAN 0 to HW filter on device team0
[  364.013137][T13496] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.013250][T13496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.048118][T13496] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.048224][T13496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.421213][T18693] veth1_macvtap: left promiscuous mode
[  364.421242][T18693] macsec0: entered promiscuous mode
[  364.497799][T18697] netlink: 'syz.3.3180': attribute type 12 has an invalid length.
[  364.497823][T18697] netlink: 'syz.3.3180': attribute type 29 has an invalid length.
[  364.563247][T18701] netlink: 'syz.2.3181': attribute type 1 has an invalid length.
[  364.822837][T18716] netlink: 'syz.1.3185': attribute type 1 has an invalid length.
[  364.842845][T18716] IPv6: sit1: Disabled Multicast RS
[  365.170883][ T5648] Bluetooth: hci2: command tx timeout
[  365.316828][ T5648] Bluetooth: hci4: command 0x0406 tx timeout
[  365.486374][T18421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.602212][T18421] veth0_vlan: entered promiscuous mode
[  365.636184][T18421] veth1_vlan: entered promiscuous mode
[  365.710795][T18761] __nla_validate_parse: 5 callbacks suppressed
[  365.710815][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3193'.
[  365.782310][T18760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3195'.
[  365.965440][T18421] veth0_macvtap: entered promiscuous mode
[  365.982055][T18421] veth1_macvtap: entered promiscuous mode
[  366.072494][T18421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.118515][T18421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.174955][T18773] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  366.180463][T18770] netlink: 'syz.3.3197': attribute type 1 has an invalid length.
[  366.205598][T18776] ip_tables: iptables: counters copy to user failed while replacing table
[  366.228987][ T7463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.229147][ T7463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.229182][ T7463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.229215][ T7463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.280229][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3200'.
[  366.575519][T17887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.575566][T17887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.606531][T18793] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  366.611265][T18790] netlink: 'syz.4.3201': attribute type 30 has an invalid length.
[  366.715596][T18786] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3200'.
[  366.732602][T17887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.732622][T17887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.735126][T18795] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3200'.
[  366.836619][T18803] netlink: get zone limit has 4 unknown bytes
[  366.843819][T18803] netlink: 'syz.1.3204': attribute type 11 has an invalid length.
[  366.843838][T18803] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3204'.
[  367.111144][T18810] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3207'.
[  367.111172][T18810] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3207'.
[  367.111188][T18810] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3207'.
[  367.277048][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3207'.
[  367.459266][T18826] xt_l2tp: wrong L2TP version: 255
[  367.662886][T18836] netlink: 'syz.3.3214': attribute type 49 has an invalid length.
[  367.787290][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.790840][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.791591][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.793326][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.795453][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.885447][T18836] ip6gretap0: entered promiscuous mode
[  367.885472][T18836] ip6gretap0: entered allmulticast mode
[  368.213171][T18854] syzkaller0: entered promiscuous mode
[  368.213196][T18854] syzkaller0: entered allmulticast mode
[  368.779475][T18878] erspan0: entered promiscuous mode
[  368.779627][T18878] vlan2: entered promiscuous mode
[  369.093192][T18837] rxe_eth0 speed is unknown, defaulting to 1000
[  369.876859][ T5648] Bluetooth: hci0: command tx timeout
[  369.886081][T18932] Cannot find set identified by id 0 to match
[  369.915063][T18932] ip_tables: iptables: counters copy to user failed while replacing table
[  370.071281][T18932] xt_hashlimit: size too large, truncated to 1048576
[  370.363444][T18949] syzkaller0: entered promiscuous mode
[  370.363475][T18949] syzkaller0: entered allmulticast mode
[  370.482098][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.482268][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.482407][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.482775][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.482908][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.483060][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.483430][T18954] Dead loop on virtual device lo (net 330), fix it urgently!
[  370.938398][T18973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  370.938424][T18973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.945614][T18973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  370.945636][T18973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  371.300021][T18988] xt_MASQUERADE: bad rangesize 2147483646
[  371.333444][T18988] netlink: 'syz.3.3244': attribute type 3 has an invalid length.
[  371.361323][T18988] net_ratelimit: 44 callbacks suppressed
[  371.361419][T18988] ip_tables: iptables: counters copy to user failed while replacing table
[  371.415136][T18986] netlink: 'syz.1.3243': attribute type 2 has an invalid length.
[  371.415882][T18986] netlink: 'syz.1.3243': attribute type 2 has an invalid length.
[  371.415898][T18986] __nla_validate_parse: 9 callbacks suppressed
[  371.415908][T18986] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3243'.
[  371.457109][T18988] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3244'.
[  371.767846][T18837] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.768002][T18837] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.768160][T18837] bridge_slave_0: entered allmulticast mode
[  371.773438][T18837] bridge_slave_0: entered promiscuous mode
[  371.812706][T18837] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.814403][T18837] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.814529][T18837] bridge_slave_1: entered allmulticast mode
[  371.820982][T18837] bridge_slave_1: entered promiscuous mode
[  371.865470][T19018] netlink: 'syz.0.3248': attribute type 1 has an invalid length.
[  371.956931][ T5648] Bluetooth: hci0: command tx timeout
[  371.975470][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3248'.
[  372.011664][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'.
[  372.025553][T18837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.131875][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3249'.
[  372.193535][T18837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.271237][T19031] pim6reg: entered allmulticast mode
[  372.320862][T18837] team0: Port device team_slave_0 added
[  372.322356][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3251'.
[  372.324042][T18837] team0: Port device team_slave_1 added
[  372.370989][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'.
[  372.451720][T18837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.451737][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.451764][T18837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.453740][T18837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.453754][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.453778][T18837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.482647][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3250'.
[  372.672080][T18837] hsr_slave_0: entered promiscuous mode
[  372.673163][T18837] hsr_slave_1: entered promiscuous mode
[  372.673863][T18837] debugfs: 'hsr0' already exists in 'hsr'
[  372.673882][T18837] Cannot create hsr debugfs directory
[  372.823165][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'.
[  372.926234][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'.
[  373.009854][T19064] Bluetooth: MGMT ver 1.23
[  373.118283][T17887] IPVS: starting estimator thread 0...
[  373.206819][T19072] IPVS: using max 28 ests per chain, 67200 per kthread
[  373.528221][T18837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.528258][T18837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.749548][T18837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.749584][T18837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.944634][T18837] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  373.949458][T18837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.949490][T18837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.036889][ T5648] Bluetooth: hci0: command tx timeout
[  374.356316][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356338][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356350][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356361][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356372][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356384][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356395][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356407][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356417][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356429][T19111] tc action pedit unable to extract header offset for header type (0x4)
[  374.356451][T19111] 0: reclassify loop, rule prio 0, protocol 800
[  375.040783][T19141] bond7: option resend_igmp: invalid value (32767)
[  375.040809][T19141] bond7: option resend_igmp: allowed values 0 - 255
[  375.077548][T19141] bond7 (unregistering): Released all slaves
[  375.333020][T19141] geneve2: entered promiscuous mode
[  375.333045][T19141] geneve2: entered allmulticast mode
[  375.452004][T18837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  375.477127][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.478869][T18837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  375.494066][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.500681][T18837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  375.523514][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.528697][T18837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  375.555940][T18837] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.885684][T19166] veth5: entered allmulticast mode
[  375.988774][T19180] netlink: 'syz.3.3281': attribute type 3 has an invalid length.
[  376.117824][ T5648] Bluetooth: hci0: command tx timeout
[  376.135650][T18837] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.172848][T18837] 8021q: adding VLAN 0 to HW filter on device team0
[  376.201793][T17888] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.201899][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.235359][T17888] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.235490][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.497331][T19202] __nla_validate_parse: 7 callbacks suppressed
[  376.497351][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3285'.
[  376.499967][T19203] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.686253][T19205] bond2: entered promiscuous mode
[  376.686277][T19205] bond2: entered allmulticast mode
[  376.837483][T19221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3291'.
[  377.372029][T19248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.372056][T19248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.372220][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.372237][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.372723][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.372742][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3293'.
[  377.422855][T19253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3295'.
[  377.679706][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.798952][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'.
[  377.947008][T13496] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  377.947056][T13496] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  377.947091][T13496] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  377.947125][T13496] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.122731][T18837] veth0_vlan: entered promiscuous mode
[  378.185486][T18837] veth1_vlan: entered promiscuous mode
[  378.330817][T18837] veth0_macvtap: entered promiscuous mode
[  378.339599][T18837] veth1_macvtap: entered promiscuous mode
[  378.404298][T18837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.438676][T18837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.647344][T17887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.648131][T17887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.648170][T17887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.648204][T17887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.949076][T17888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.949097][T17888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.193019][T19303] netlink: 'syz.3.3308': attribute type 8 has an invalid length.
[  379.207772][T17888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.207790][T17888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.281579][T19297] tap0: tun_chr_ioctl cmd 1074025672
[  379.281599][T19297] tap0: ignored: set checksum disabled
[  379.968915][T19317] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  379.990860][T19317] bond1 (unregistering): Released all slaves
[  380.599084][T19345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.626025][T19345] netlink: 'syz.1.3315': attribute type 6 has an invalid length.
[  380.876308][T19350] unsupported nlmsg_type 40
[  381.583698][T19376] __nla_validate_parse: 134 callbacks suppressed
[  381.583719][T19376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3324'.
[  381.596345][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'.
[  382.333568][T19404] bond1: Removing last arp target with arp_interval on
[  383.042467][T19455] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3342'.
[  383.276413][T19460] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3341'.
[  383.276606][T19460] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3341'.
[  383.440950][T19467] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3344'.
[  383.454988][T19467] netlink: 'syz.2.3344': attribute type 9 has an invalid length.
[  383.511821][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3347'.
[  383.659286][T19480] sctp: [Deprecated]: syz.3.3348 (pid 19480) Use of struct sctp_assoc_value in delayed_ack socket option.
[  383.659286][T19480] Use struct sctp_sack_info instead
[  383.698966][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3348'.
[  384.161359][T19506] netlink: 'syz.0.3355': attribute type 1 has an invalid length.
[  384.162951][T19503] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.186631][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  384.291696][T19506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3355'.
[  384.461955][T19522] x_tables: duplicate underflow at hook 2
[  384.551036][T19525] xt_l2tp: missing protocol rule (udp|l2tpip)
[  385.527330][T19570] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  385.551369][T19570] syzkaller1: entered promiscuous mode
[  385.551391][T19570] syzkaller1: entered allmulticast mode
[  385.942324][T19584] IPv6: NLM_F_REPLACE set, but no existing node found!
[  387.439741][T19532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.852265][T19619] __nla_validate_parse: 2 callbacks suppressed
[  387.852285][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'.
[  387.860464][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'.
[  388.014287][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'.
[  388.027095][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3394'.
[  388.035816][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'.
[  388.187612][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'.
[  388.436356][T19652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3400'.
[  388.781466][T19628] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  388.793087][T13494] IPVS: starting estimator thread 0...
[  388.793694][T19667] IPVS: ip_vs_edit_dest(): server weight less than zero
[  388.881796][T19669] IPVS: using max 26 ests per chain, 62400 per kthread
[  389.024386][T19671] Bluetooth: hci0: unsupported parameter 5135
[  389.024400][T19671] Bluetooth: hci0: unsupported parameter 8192
[  389.024407][T19671] Bluetooth: hci0: unsupported parameter 5135
[  389.024414][T19671] Bluetooth: hci0: unsupported parameter 8192
[  389.219638][T19685] netlink: 'syz.4.3409': attribute type 1 has an invalid length.
[  389.343410][T19691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3409'.
[  389.393165][T19685] 8021q: adding VLAN 0 to HW filter on device bond7
[  389.408723][T19691] veth0_to_bond: entered allmulticast mode
[  389.521597][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'.
[  389.521621][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3412'.
[  389.793036][T19709] ip_tables: iptables: counters copy to user failed while replacing table
[  390.300964][T19728] bridge0: port 3(veth1_to_bridge) entered blocking state
[  390.301591][T19728] bridge0: port 3(veth1_to_bridge) entered disabled state
[  390.301769][T19728] veth1_to_bridge: entered allmulticast mode
[  390.304652][T19728] veth1_to_bridge: entered promiscuous mode
[  390.304803][T19728] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  390.306579][T19728] bridge0: port 3(veth1_to_bridge) entered blocking state
[  390.306779][T19728] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  390.407275][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.407939][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.408393][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.408866][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.409294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.409716][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.410137][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.410560][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.536956][    C0] net_ratelimit: 165 callbacks suppressed
[  390.536976][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.537369][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.537759][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.538162][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.538555][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.538940][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.539346][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.539732][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.540172][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.540561][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  390.726953][ T5648] Bluetooth: hci0: command 0x0401 tx timeout
[  392.678098][T19701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  393.096479][T19755] __nla_validate_parse: 5 callbacks suppressed
[  393.096499][T19755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3427'.
[  393.365150][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3431'.
[  394.226711][    C0] sched: DL replenish lagged too much
[  394.563437][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'.
[  394.592668][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'.
[  394.700063][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'.
[  395.546848][    C0] net_ratelimit: 7943 callbacks suppressed
[  395.546868][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  395.548262][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.548711][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.549124][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  395.549539][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  395.550872][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.551277][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  395.551694][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  395.552163][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  395.553548][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  396.378365][T17886] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  396.378458][T17886] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  396.378495][T17886] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  396.378530][T17886] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.379283][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3435'.
[  396.462196][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3435'.
[  396.816610][T19826] netlink: 'syz.4.3442': attribute type 1 has an invalid length.
[  396.816632][T19826] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3442'.
[  397.104272][T19837] team0: Device gtp0 is up. Set it down before adding it as a team port
[  397.255788][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'.
[  397.867856][T19857] erspan0: entered promiscuous mode
[  397.883216][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'.
[  397.883239][T19858] erspan0: left promiscuous mode
[  398.190713][T19862] sctp: [Deprecated]: syz.4.3455 (pid 19862) Use of int in max_burst socket option.
[  398.190713][T19862] Use struct sctp_assoc_value instead
[  398.919678][T19877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3460'.
[  400.559073][    C0] net_ratelimit: 7287 callbacks suppressed
[  400.559097][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.559556][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.560064][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  400.560518][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  400.562075][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.562519][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.562987][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  400.563441][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  400.565043][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.565499][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  401.779849][T19895] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3463'.
[  401.957716][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3465'.
[  402.472377][T19905] bond8: (slave bond_slave_0): Device is not our slave
[  402.472402][T19905] bond8: option active_slave: invalid value (bond_slave_0)
[  402.563041][T19915] netlink: 'syz.2.3469': attribute type 8 has an invalid length.
[  403.129967][T19937] netlink: 'syz.3.3470': attribute type 1 has an invalid length.
[  403.129989][T19937] netlink: 'syz.3.3470': attribute type 3 has an invalid length.
[  403.130001][T19937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3470'.
[  403.175082][T19944] netlink: 'syz.3.3470': attribute type 1 has an invalid length.
[  403.175101][T19944] netlink: 'syz.3.3470': attribute type 3 has an invalid length.
[  403.175114][T19944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3470'.
[  404.819123][T19905] bond8 (unregistering): Released all slaves
[  405.225368][T19949] netlink: 'syz.4.3472': attribute type 4 has an invalid length.
[  405.225390][T19949] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3472'.
[  405.340294][ T5648] Bluetooth: hci1: connection err: -111
[  405.567931][    C0] net_ratelimit: 7748 callbacks suppressed
[  405.567953][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.568349][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.568770][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  405.570396][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  405.571805][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.572216][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.572582][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  405.572978][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  405.574307][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.574721][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  406.108799][T19968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3478'.
[  406.422787][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'.
[  406.444003][T19981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3481'.
[  407.201402][T19981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.585057][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'.
[  408.638081][T20023] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3491'.
[  408.640125][T20024] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3491'.
[  408.833497][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c12000: rx timeout, send abort
[  409.333628][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c12000: abort rx timeout. Force session deactivation
[  409.334732][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c10c00: rx timeout, send abort
[  409.834775][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888055c10c00: abort rx timeout. Force session deactivation
[  410.576857][    C0] net_ratelimit: 7880 callbacks suppressed
[  410.576880][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  410.577294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  410.578651][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.579090][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.579495][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  410.579889][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  410.581244][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.581651][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.582042][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  410.582448][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:41:a2:e0:00:1d, vlan:0)
[  414.001543][ T7454] ------------[ cut here ]------------
[  414.001559][ T7454] conntrack cleanup blocked for 60s
[  414.001574][ T7454] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x21a/0x370, CPU#0: kworker/u8:13/7454
[  414.075507][ T7454] Modules linked in:
[  414.112529][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  414.138814][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  414.167908][ T7454] Workqueue: netns cleanup_net
[  414.190267][ T7454] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370
[  414.214689][ T7454] Code: 4c 89 ef e8 a8 6e 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 91 ae f7 45 31 e4 e9 aa fe ff ff e8 fd 90 ae f7 48 8d 3d b6 b2 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff
[  414.251734][ T7454] RSP: 0018:ffffc9000fb4f8b0 EFLAGS: 00010293
[  414.275772][ T7454] RAX: ffffffff8a1a84d3 RBX: dffffc0000000000 RCX: ffff888079511f40
[  414.302203][ T7454] RDX: 0000000000000000 RSI: fffffffffffffff0 RDI: ffffffff91ad3790
[  414.327026][ T7454] RBP: 0000000000000001 R08: ffff888032cc8803 R09: 1ffff11006599100
[  414.335024][ T7454] R10: dffffc0000000000 R11: ffffed1006599101 R12: 0000000100002bc4
[  414.360989][ T7454] R13: ffffc9000fb4fa50 R14: ffffc9000fb4fa50 R15: 0000000100002bd4
[  414.386607][ T7454] FS:  0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000
[  414.412667][ T7454] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.436062][ T7454] CR2: 000000110c361af8 CR3: 000000005937c000 CR4: 00000000003526f0
[  414.462497][ T7454] Call Trace:
[  414.465858][ T7454]  <TASK>
[  414.486735][ T7454]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  414.492947][ T7454]  ops_undo_list+0x4d7/0x8f0
[  414.514230][ T7454]  ? __pfx_ops_undo_list+0x10/0x10
[  414.535754][ T7454]  ? idr_destroy+0x218/0x290
[  414.557202][ T7454]  ? do_raw_spin_unlock+0xf5/0x200
[  414.562391][ T7454]  cleanup_net+0x572/0x810
[  414.584482][ T7454]  ? __pfx_cleanup_net+0x10/0x10
[  414.606577][ T7454]  ? rcu_is_watching+0x16/0xb0
[  414.628227][ T7454]  ? process_scheduled_works+0x97a/0x1630
[  414.634018][ T7454]  process_scheduled_works+0xc3d/0x1630
[  414.656189][ T7454]  ? __pfx_process_scheduled_works+0x10/0x10
[  414.679555][ T7454]  ? assign_work+0x3cf/0x5d0
[  414.684184][ T7454]  worker_thread+0xa47/0xfb0
[  414.706115][ T7454]  kthread+0x38b/0x480
[  414.726636][ T7454]  ? __pfx_worker_thread+0x10/0x10
[  414.765574][ T7454]  ? __pfx_kthread+0x10/0x10
[  414.787547][ T7454]  ret_from_fork+0x514/0xb70
[  414.792208][ T7454]  ? save_fpregs_to_fpstate+0x176/0x200
[  414.814332][ T7454]  ? __pfx_ret_from_fork+0x10/0x10
[  414.835784][ T7454]  ? __switch_to+0xc78/0x1410
[  414.857136][ T7454]  ? __pfx_kthread+0x10/0x10
[  414.861753][ T7454]  ret_from_fork_asm+0x1a/0x30
[  414.866572][ T7454]  </TASK>
[  414.887229][ T7454] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  414.894523][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  414.904067][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  414.914125][ T7454] Workqueue: netns cleanup_net
[  414.918901][ T7454] Call Trace:
[  414.922179][ T7454]  <TASK>
[  414.925111][ T7454]  vpanic+0x26f/0x710
[  414.929132][ T7454]  panic+0xc5/0xd0
[  414.932859][ T7454]  ? __pfx_panic+0x10/0x10
[  414.937298][ T7454]  ? ret_from_fork_asm+0x1a/0x30
[  414.942246][ T7454]  __warn+0x315/0x4c0
[  414.946235][ T7454]  ? nf_conntrack_cleanup_net_list+0x21a/0x370
[  414.952405][ T7454]  ? nf_conntrack_cleanup_net_list+0x21a/0x370
[  414.958574][ T7454]  __report_bug+0x276/0x570
[  414.963157][ T7454]  ? nf_conntrack_cleanup_net_list+0x21a/0x370
[  414.969340][ T7454]  ? __pfx___report_bug+0x10/0x10
[  414.974389][ T7454]  ? nf_conntrack_cleanup_net_list+0x131/0x370
[  414.980558][ T7454]  report_bug_entry+0x19b/0x290
[  414.985421][ T7454]  ? nf_conntrack_cleanup_net_list+0x21a/0x370
[  414.991584][ T7454]  ? nf_conntrack_cleanup_net_list+0x21f/0x370
[  414.997751][ T7454]  handle_bug+0xce/0x200
[  415.002079][ T7454]  exc_invalid_op+0x1a/0x50
[  415.006599][ T7454]  asm_exc_invalid_op+0x1a/0x20
[  415.011482][ T7454] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370
[  415.018257][ T7454] Code: 4c 89 ef e8 a8 6e 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 91 ae f7 45 31 e4 e9 aa fe ff ff e8 fd 90 ae f7 48 8d 3d b6 b2 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff
[  415.037868][ T7454] RSP: 0018:ffffc9000fb4f8b0 EFLAGS: 00010293
[  415.043938][ T7454] RAX: ffffffff8a1a84d3 RBX: dffffc0000000000 RCX: ffff888079511f40
[  415.051923][ T7454] RDX: 0000000000000000 RSI: fffffffffffffff0 RDI: ffffffff91ad3790
[  415.059895][ T7454] RBP: 0000000000000001 R08: ffff888032cc8803 R09: 1ffff11006599100
[  415.067877][ T7454] R10: dffffc0000000000 R11: ffffed1006599101 R12: 0000000100002bc4
[  415.075850][ T7454] R13: ffffc9000fb4fa50 R14: ffffc9000fb4fa50 R15: 0000000100002bd4
[  415.083840][ T7454]  ? nf_conntrack_cleanup_net_list+0x213/0x370
[  415.090033][ T7454]  ? __pfx_nf_conntrack_pernet_exit+0x10/0x10
[  415.096115][ T7454]  ops_undo_list+0x4d7/0x8f0
[  415.100730][ T7454]  ? __pfx_ops_undo_list+0x10/0x10
[  415.105865][ T7454]  ? idr_destroy+0x218/0x290
[  415.110462][ T7454]  ? do_raw_spin_unlock+0xf5/0x200
[  415.115585][ T7454]  cleanup_net+0x572/0x810
[  415.120012][ T7454]  ? __pfx_cleanup_net+0x10/0x10
[  415.124961][ T7454]  ? rcu_is_watching+0x16/0xb0
[  415.129741][ T7454]  ? process_scheduled_works+0x97a/0x1630
[  415.135482][ T7454]  process_scheduled_works+0xc3d/0x1630
[  415.141077][ T7454]  ? __pfx_process_scheduled_works+0x10/0x10
[  415.147077][ T7454]  ? assign_work+0x3cf/0x5d0
[  415.151691][ T7454]  worker_thread+0xa47/0xfb0
[  415.156328][ T7454]  kthread+0x38b/0x480
[  415.160406][ T7454]  ? __pfx_worker_thread+0x10/0x10
[  415.165526][ T7454]  ? __pfx_kthread+0x10/0x10
[  415.170126][ T7454]  ret_from_fork+0x514/0xb70
[  415.174721][ T7454]  ? save_fpregs_to_fpstate+0x176/0x200
[  415.180276][ T7454]  ? __pfx_ret_from_fork+0x10/0x10
[  415.185393][ T7454]  ? __switch_to+0xc78/0x1410
[  415.190088][ T7454]  ? __pfx_kthread+0x10/0x10
[  415.194690][ T7454]  ret_from_fork_asm+0x1a/0x30
[  415.199483][ T7454]  </TASK>
[  415.202646][ T7454] Kernel Offset: disabled
[  415.206969][ T7454] Rebooting in 86400 seconds..