last executing test programs:

3.696298329s ago: executing program 0 (id=13625):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x5, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)
close(0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x4003000)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)

2.175636518s ago: executing program 0 (id=13638):
syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
syz_emit_ethernet(0xeb, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @void, {@x25={0x805, {0x1, 0x81, 0x9, "f72f26fa5f9762a563eb3293a514aeb2e87e0d0006e20a8e48452e52b033ce3b16af49d90903d87b1fafbd91f90996cdf8586ee508353c64752278ec01365f6cdd093a2af62b70591bc75633f547d7ec3a8566a73de0a72948cdf30c6b8ff8579a67fa1b757d6e1afac897eed4249aed8fd7f267053457689c40971be5a497771fa2671dab3ddd9ff89a64e6440d6f4bcc29e44fb7eac7c52fcd902baf0d42614a5d1203dce9c8e0231345d547436cd0d9f90765488fafaec030c709a2a7ac86a932cb34e0cbfe6de805c5c33f9b315dd00b06147b61fbcdfa5a"}}}}, &(0x7f0000000000)={0x0, 0x3, [0x1f3, 0xd1e, 0x9c3, 0x268]}) (async)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x220, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, {0xf, 0xf5}, [@INET_DIAG_REQ_BYTECODE={0x66, 0x1, "adc55f52608ff5d70b6ebddd7b929f57fef2da510a858450bc47703cf4be417ef0df41741df1fd6d7314e2dc539473beb697849d4d4d3b81441675ec75659a8f5c8c8a1bc538167754b173d13bb9088fd4d81a9d2512e5aa7915f11c801c1256d9db"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "4c69d85a874bc17a78b64b3692885abd66159ca9bb64ce922c8e0b34131720fc077b69876b3bbd899eb03125d7536e3112698db6778cd8d9a39d775f728b0c10b175398c60287e6fc6b2da87dc0d49df2148ddf326fd57101f38497f80491fccb7e0046737f24721460961563138d57f655196d0ca25d11bf96d"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "112578f799012f182f57ef56e50d95fe3161846d625ea07305936064b9950cee844d84adf5d76804194b6ad1a4a0d650407e18d881fabd6e32f622014c6a1de7f51f32a2cf9ad2f031d85e4e7423d307fcbc5a102f03c842facc46cd76575013fc63c6337e6e6e315c55e5f900ce6d52dcc9d3ebbe3cef68fcb1e154c71b3d550395dc48507564ea4314600a471825b3a39437cb66f2dbbad2131d45520705c9d761de339890896880bc66fe9c194b7765a4bb01a350df5400bd52994382904cd00a04f29cbb99482570c65baf2976d3d6"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "c1d0100fec8ab9f611bf445c22c96e41c4e0f93250e5c8d9cf7b7711cb71da9af3a7f03c2d8b1204d3ed4d565b9409c00279c979ba"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "7f36e424f1383101caed0782"}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

2.027436537s ago: executing program 0 (id=13642):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x17)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000f3", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000700e00000020800020000000000"], 0x24}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$pppl2tp(r6, &(0x7f0000000a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009fdd8600000000000088a8600081"], 0x3a)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYRES8=r8, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000002c0), &(0x7f0000000300)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000640), &(0x7f0000000680)=r10}, 0x20)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000180012800e0b7ec8427aca469c0b7b0001007769726567756172640000000400028008001f0005000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.697361845s ago: executing program 2 (id=13647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010000003a080000000000000000", @ANYRES32=r0, @ANYRES64=r0], 0x5c}}, 0x0)

1.550387915s ago: executing program 3 (id=13650):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x325)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0)
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f00000009c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/183, 0xb7}], 0x7}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="00000000004c00008500fc27c000000095fe4e96888b8eb2c40e00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', r3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r6)

1.387336097s ago: executing program 2 (id=13654):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0x10, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff71}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048010}, 0xc000)

1.310130573s ago: executing program 0 (id=13655):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r2, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmmsg$inet(r0, &(0x7f0000007740)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000000040)='.', 0x1}], 0x1}}, {{&(0x7f0000003780)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000004b40)=[{&(0x7f00000037c0)='(', 0x1}], 0x1}}, {{&(0x7f0000004cc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000007000)=[{&(0x7f0000005e00)="f3", 0x1}], 0x1}}], 0x3, 0x408c4)

1.263218953s ago: executing program 2 (id=13657):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r5, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0)

1.135372672s ago: executing program 0 (id=13659):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r1, 0x8b21, &(0x7f0000000040))
getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f00000008c0)) (async)
getsockopt(r0, 0x1, 0x6, 0x0, &(0x7f00000008c0))
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1.13509657s ago: executing program 2 (id=13660):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @loopback}, 0x8) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe52cf5230000000000000b72ad8628cec41c4a98e7998f6c5e73512055b2d71eebd88d336a07bb5e47ca9692db9a29e2cf27925bc790f34f877b7200eb4f22653c6c583a344d4a9f1ab38eb977edec1debcfe9dc4498", @ANYRES8=r0, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x80, @loopback, 0x7}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x200, 0xd18, 0x2, r4}, &(0x7f0000000380)=0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@empty}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)

1.039586354s ago: executing program 1 (id=13662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dvmrp0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
close(0x3)

950.49219ms ago: executing program 0 (id=13664):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
getpid()
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0x2, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0xa, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x9, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x10000, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x81000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x401, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x4, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x5, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x1, 0x1, 0xffff, 0x7fff, 0x4, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x401, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
socket$kcm(0x2, 0xa, 0x2)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0)

766.843126ms ago: executing program 4 (id=13666):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90)

715.544188ms ago: executing program 1 (id=13667):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket(0x11, 0xa, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

672.550802ms ago: executing program 4 (id=13668):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @broadcast}})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x4, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @multicast2}}]}, 0x290)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'syzkaller1\x00', {0x2ed}, 0x6})
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r5, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x87)

667.473141ms ago: executing program 1 (id=13669):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "f7539c4784660740", "c23dcb069d2fcac23d0f11001145753debfbc4f1a3942a0efa49e8340f462803", "74df9eed", "1e25dff4d9ab52fc"}, 0x38)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040)=0xfff7fffc, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000))
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc)

560.361592ms ago: executing program 4 (id=13670):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000006c0)={{r2}, "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"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000aa0047226ef50000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="3ee97d695791a672ba98a19d9938caae47c4ea0699b7f20126819dc6d1c10e72033b7e26357ee145ea55cefa", 0x2c)

559.76783ms ago: executing program 3 (id=13671):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=<r1=>0xffffffffffffffff, 0x2e, 0x1, 0x100, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], <r2=>0x0}, 0x40)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, r0, 0x2f, 0x8, 0x0, @void, @value=r3, @void, @void, r2}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xad, 0x6})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1500000000200000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="b5885c168f3bdeddae70954322c1704e6a5ae7cbfb4e148dc6775da180ff83612418547c59171ca462c8959cd144198cdd83256bebffdcad6ca3e930f98bedd55b5dd381f3c35a22a3117f463188db2e7201eeea45f3197cbec4388ffe93c89b14403fb4126972ed24591468535d54921eb436f5b0d7632315015dcd550b1fc53cb1d8b0b5", @ANYRES64=r2], 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1500000000200000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="b5885c168f3bdeddae70954322c1704e6a5ae7cbfb4e148dc6775da180ff83612418547c59171ca462c8959cd144198cdd83256bebffdcad6ca3e930f98bedd55b5dd381f3c35a22a3117f463188db2e7201eeea45f3197cbec4388ffe93c89b14403fb4126972ed24591468535d54921eb436f5b0d7632315015dcd550b1fc53cb1d8b0b5", @ANYRES64=r2], 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000002c0)={0x0, @aes256, 0x0, @desc1}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000002c0)={0x0, @aes256, 0x0, @desc1})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000)

558.529089ms ago: executing program 1 (id=13672):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0)
write$nci(r7, &(0x7f00000000c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0xfb, 0x1}, 0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x80) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x80)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
socket$kcm(0x2, 0x5, 0x84) (async)
r8 = socket$kcm(0x2, 0x5, 0x84)
r9 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000)=0xfdfdffff)
sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
r11 = accept$nfc_llcp(r7, &(0x7f0000000300), &(0x7f0000000100)=0x60)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) (async)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=<r15=>0x0)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054)
sendmsg$nfc_llcp(r11, &(0x7f0000000980)={&(0x7f0000000380)={0x27, r15, 0x0, 0x5, 0x3, 0x4, "fa4db1489ae01b004b39504b12649e32f4ff3dccd860571bb5b0534c9b3bbf9c70d8e0eaf2196f4bad226fa777a0d3ab6a39ab390f55593715347c0cf47095", 0x1b}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000400)="cef6035122bb63ad1ca9fc73d2d5f412b35102b04b8cd49e0bfa98c854441a875229842dfb76b9266cc449dd33ec020e289b90dc5e7553e145730c46235623b3396a4f918fe1186544f4bc3cff83368b5141d3af034ea16c3edf3f261f31ba7d5c456081045d35372cc2e580a5a192456d1ecf88b2b6160488b73109017b813868daf88bbc148732803de1428b27eb75345e3ea3ec0498925a21383e2107f54a11de5be6927b16b34c40ae3d191971fd5ed9fdf57ef11047032a9bbfb7b2c6fec5fe3a3d65a2da939cb30ab4948200274ed16cb8cdae14263a9be5914be2a0a64f0471268a5b15c9dcadd3a54ee8d4dbc9837f01ca95", 0xf6}, {&(0x7f0000000500)="e054e6313071539ccacb903eb8546b0df10fa10cfd4fa6205969c1714418082d7fe9b83d1665e2c491179df47ecfc9e75de6b34c7dc6615aa2e9aa5d4fb6fcc47500f80bb767db4d8b87750bf49d3f84553c1b693e725e9c8709401af9ab20017dd6210dd9f8fb9bba83d3fbd4ddafde59c820427078f6ed35de0e94ee91fa056940720022730339352225ea9edb5c9ba3b523ecdc567f3c29f5aa509813b0c15b4e903d6601217376755ee83d3af72ea8cf01653e86799cac53fc1cf9caf6d8b9645c4187f301ed8c11485dc166b54a0e44cf45d386e79efd87114fb683429e837ec15717baa818fa26e7251511b520a153e8c89f4c682f", 0xf8}, {&(0x7f0000000600)="d2bae8f37eeed13e6d51f93be28c7875eb83015b567905802ee8b87ca8f182ce66380606b4a7d22aa15736a0f133be07f3664355d505df40d3f3c7b82f60ccd6396556afb3da7756fffaa03609d142bc55c7896235d3cb5a2f20ece3e842fc1c6c4bd3c573bb6f", 0x67}, {&(0x7f0000000740)="3441559fd82bfb7ea7c7cafdf1a9f701ebab4c9d6ace60cf72e9a976211c645df7cb207162d9854e14febe4e46745f03319b9fca12809a3e7f20cfa7ead879108f90e98bbb848b68fe58a57d974d1473f15263462678ad89aa79d76ecfee3220bbe2bffc2e58595130f7b8be3909fdd3cc601fbc15c3fe73c5ef6d7c17464bc60befc196884425d6e8037f7fc609e8428dee06569d12ebbea86bd659df74f0beea5e468b8622e2e86e34332c2bea57de4f5714df81f666fcca0586f138bc32f5e67e7be32fe77140cba2b9be5c67aca17f84725eeb8bb5088c7ef0ba962b23739916bd", 0xe3}, {&(0x7f0000000840)="324f2e335c877fc53ed4d66ab988d30d5151fb81428abafd8aa17389aeb4d23ad5c0b7e0b7825c7b6b388a559bbe604a701386d446b3b52ec05ce3b03c643a5e4d2f985a46902a6e9a2bbf526e091bbf293b4ad974bf", 0x56}, {&(0x7f0000000240)="c6df7e27263f1d75387e04760cc25316ec6f2b17f2cbd67e3689ffd67b9fa5270c6e8d0de619214d8a3988d2", 0x2c}, {&(0x7f00000006c0)="5eab16a8179d0ac347eb4b3660f9313a2c70", 0x12}], 0x7, &(0x7f0000000940)={0x18, 0x3a, 0x8000, "23a14547"}, 0x18, 0x4000}, 0x4000) (async)
sendmsg$nfc_llcp(r11, &(0x7f0000000980)={&(0x7f0000000380)={0x27, r15, 0x0, 0x5, 0x3, 0x4, "fa4db1489ae01b004b39504b12649e32f4ff3dccd860571bb5b0534c9b3bbf9c70d8e0eaf2196f4bad226fa777a0d3ab6a39ab390f55593715347c0cf47095", 0x1b}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000400)="cef6035122bb63ad1ca9fc73d2d5f412b35102b04b8cd49e0bfa98c854441a875229842dfb76b9266cc449dd33ec020e289b90dc5e7553e145730c46235623b3396a4f918fe1186544f4bc3cff83368b5141d3af034ea16c3edf3f261f31ba7d5c456081045d35372cc2e580a5a192456d1ecf88b2b6160488b73109017b813868daf88bbc148732803de1428b27eb75345e3ea3ec0498925a21383e2107f54a11de5be6927b16b34c40ae3d191971fd5ed9fdf57ef11047032a9bbfb7b2c6fec5fe3a3d65a2da939cb30ab4948200274ed16cb8cdae14263a9be5914be2a0a64f0471268a5b15c9dcadd3a54ee8d4dbc9837f01ca95", 0xf6}, {&(0x7f0000000500)="e054e6313071539ccacb903eb8546b0df10fa10cfd4fa6205969c1714418082d7fe9b83d1665e2c491179df47ecfc9e75de6b34c7dc6615aa2e9aa5d4fb6fcc47500f80bb767db4d8b87750bf49d3f84553c1b693e725e9c8709401af9ab20017dd6210dd9f8fb9bba83d3fbd4ddafde59c820427078f6ed35de0e94ee91fa056940720022730339352225ea9edb5c9ba3b523ecdc567f3c29f5aa509813b0c15b4e903d6601217376755ee83d3af72ea8cf01653e86799cac53fc1cf9caf6d8b9645c4187f301ed8c11485dc166b54a0e44cf45d386e79efd87114fb683429e837ec15717baa818fa26e7251511b520a153e8c89f4c682f", 0xf8}, {&(0x7f0000000600)="d2bae8f37eeed13e6d51f93be28c7875eb83015b567905802ee8b87ca8f182ce66380606b4a7d22aa15736a0f133be07f3664355d505df40d3f3c7b82f60ccd6396556afb3da7756fffaa03609d142bc55c7896235d3cb5a2f20ece3e842fc1c6c4bd3c573bb6f", 0x67}, {&(0x7f0000000740)="3441559fd82bfb7ea7c7cafdf1a9f701ebab4c9d6ace60cf72e9a976211c645df7cb207162d9854e14febe4e46745f03319b9fca12809a3e7f20cfa7ead879108f90e98bbb848b68fe58a57d974d1473f15263462678ad89aa79d76ecfee3220bbe2bffc2e58595130f7b8be3909fdd3cc601fbc15c3fe73c5ef6d7c17464bc60befc196884425d6e8037f7fc609e8428dee06569d12ebbea86bd659df74f0beea5e468b8622e2e86e34332c2bea57de4f5714df81f666fcca0586f138bc32f5e67e7be32fe77140cba2b9be5c67aca17f84725eeb8bb5088c7ef0ba962b23739916bd", 0xe3}, {&(0x7f0000000840)="324f2e335c877fc53ed4d66ab988d30d5151fb81428abafd8aa17389aeb4d23ad5c0b7e0b7825c7b6b388a559bbe604a701386d446b3b52ec05ce3b03c643a5e4d2f985a46902a6e9a2bbf526e091bbf293b4ad974bf", 0x56}, {&(0x7f0000000240)="c6df7e27263f1d75387e04760cc25316ec6f2b17f2cbd67e3689ffd67b9fa5270c6e8d0de619214d8a3988d2", 0x2c}, {&(0x7f00000006c0)="5eab16a8179d0ac347eb4b3660f9313a2c70", 0x12}], 0x7, &(0x7f0000000940)={0x18, 0x3a, 0x8000, "23a14547"}, 0x18, 0x4000}, 0x4000)
sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

515.35717ms ago: executing program 4 (id=13673):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2b, 0xffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x21}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}}, 0x80)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x130, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @typed={0xe5, 0x12a, 0x0, 0x0, @binary="8ff5bb9427ab70a33426e7c093e686a42f8e8f0d6b0f40cfe60be041b3f1f8cddfe753828af570bd1154423c4208ffbabc2d99757b21b0753a1f09ce362ffbad546905dc09b5bbfb11bf58a4f9dd181af172a96d2f7f1d37f8ae06f9b786ff845b6a3a13a6bcec6a0f6ad18b6334c2a6dac7b5786627490b9c6a04c0c82432ae0d64142b1e1c22814bf47a6a8cb7b0da337e72471875bcbbcd2436abf94b2bdfd70b25c2b7e0d5cf3df1c8adc803ca04bf42a598dc11a2fb686a4d53ab9a15a6958781d01b9c79dfe5de1d6838a3fc320ae6435a4cd7514deff3b1c1202790516f"}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

485.612086ms ago: executing program 3 (id=13674):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d75}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000050000004100000008000300", @ANYRES32=0x0, @ANYBLOB="0500180121000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000400)) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={<r6=>0x0, 0x3, 0x2}, &(0x7f00000001c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000002c0)={0x0, 0x82}, 0x2)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={r6, 0x8}, &(0x7f0000000240)=0x8)
sendmsg$netlink(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0)

363.57579ms ago: executing program 3 (id=13675):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)
socket(0x10, 0x803, 0x0) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
sendmmsg$inet(r3, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) (async)

363.177126ms ago: executing program 4 (id=13676):
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x66}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) (async)
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0)

281.901293ms ago: executing program 3 (id=13677):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

249.684274ms ago: executing program 1 (id=13678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "5be4c363f59e7c4b", "30d60f1b05bf4091252d5f697197af9e", "06bab59c", "69e5b9fd2b0b7483"}, 0x28)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031401002cbd7000f4dbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000f17c21a02c51ec9b5aebfef997516242fc075693808042e6898f6ead6be9af1b31a5be820101b076a0f875663b00408eff86a3c490d7a54868ebafbd63b25dd47ff6d0e0e36442845a331903ef66450bb7dd7c2989af73343a79e78a8ad0880480de7f6bc399125b2a3815d9d7c8a3a29e8cd5024c061b6a0e5b6de7bff6126c46f1088eef257012dc24fc2256c492b70185ae3ee01b5acf"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000080611250000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000010101010000000000000000020000000400018018000a8014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

152.171696ms ago: executing program 2 (id=13679):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
close(r1)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_virt_wifi\x00', 0x10)
ioctl$sock_proto_private(r5, 0x8b01, &(0x7f0000000000))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048f20480440001800c0001007061796c6f6164003400028008000440000000000800054000000000080003400006400000000208000740000000080900012873795830000000000900020073797a320000010000000000dfffffff0200000a00000000000000002951fdf24bbfe4075023bca1a4873225cb0e209b28a52d5f21682ba57fc64804a4c36fe544de734cd3c4a3b3c07a75a0d465942c", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x9c}, 0x1, 0x0, 0x0, 0x3b54b69ccfdcd9b5}, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000)

151.462855ms ago: executing program 4 (id=13680):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, &(0x7f0000001180)) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x4, @loopback, 0xd72e}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r4, 0x4) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="79ee7c2e6d1cbd6fbbbbbbbb86dd6a00000000481100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e20004890780300000001000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"], 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1800000008000010000000"], 0x18}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)

129.012764ms ago: executing program 1 (id=13681):
r0 = socket$netlink(0x10, 0x3, 0x11)
r1 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xfc, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc7}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_STATUS={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x8801)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000003c0)='GPL\x00', 0x8000, 0x45, &(0x7f0000000400)=""/69, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x6, 0x7, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0xb, 0x3}, {0x0, 0x2, 0x9, 0x8}, {0x4, 0x1, 0x7, 0x5}, {0x5, 0x1, 0x9, 0xa}, {0x5, 0x3, 0xf, 0xc}, {0x4, 0x2, 0x8, 0x9}], 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r2, 0x0, 0x83, 0x1000, &(0x7f0000000640)="4c0adbfab1d10af3844b90ba669f2ec951558d55531eda96ab4d4af8c789942e5289732103f59728fc36b4533341727489bb8424396f0b1100b58fddfa6883a0fd20ba9b1ceebe5645efd9c9e5f85f3f0668cc9dc47a2ddc41e9585eb33e6c8545057d358c19fa60b5784541a62bec59c4b1b3b76e57b79e83b8b6d132dce420b1f2aa", &(0x7f00000009c0)=""/4096, 0x3ff, 0x0, 0x9c, 0x69, &(0x7f0000000700)="c4460deb3208f1e8c196ebec923f9103c1076a3ce518ddc420d3139f41cd0852051b0617b9513dfee21104d44095948414ac1952e89fbc64f0d5f2f07bdb2d707d3c019830ee9e93b59689660e6a77ac7440bb2451f10c8d977166d8a21d5f27ea9acade7c3017a8f2a9de4c4d7b894352a079cc79d91eb3541b71687b7bb4094d6f8324f851d6292c0dbe285ebdad87753dc76e5805ff9b5543b9af", &(0x7f0000000900)="ed106112583bb679017d6981486e27b364778183dde04a1c8b9558e8258a2784cd5be169c813e2c7dd07513ff8765c66ac07cd00f466a7b0e5be00e13dbe05cbd5acf6f38cc31098dbed9f9b21074bd645b7c710d8cead874e6a4beb80a45aded2710eaf3f1d2ff91e", 0x1, 0x0, 0x6}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

92.228962ms ago: executing program 3 (id=13682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f80080002400000000008000140ebffffff0700034000000000"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23f}]}})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000283"], 0xfce)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0)

0s ago: executing program 2 (id=13683):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800e5ff01e1ffff7f000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a0000000000000000000000020000b7080000000000007b8af80000000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ff09000000000000000000ff030000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000004000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (async)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000440)={'veth0_to_hsr\x00', 0x400}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="840c000000000000007370c988ca", 0xe}], 0x1) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 64)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) (async, rerun: 64)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

kernel console output (not intermixed with test programs):

1.440480][T17194] SET target dimension over the limit!
[ 1091.447748][T17192] x_tables: duplicate underflow at hook 1
[ 1091.644265][T17207] netlink: 'syz.4.11897': attribute type 1 has an invalid length.
[ 1091.653346][T17207] nbd: error processing sock list
[ 1091.662670][T17207] block nbd6: shutting down sockets
[ 1091.945618][T17221] netlink: 'syz.2.11903': attribute type 1 has an invalid length.
[ 1092.061026][T17223] netlink: 'syz.0.11904': attribute type 8 has an invalid length.
[ 1092.469446][T17260] batadv1: left allmulticast mode
[ 1092.475801][T17260] batadv1: left promiscuous mode
[ 1092.481136][T17260] bridge0: port 4(batadv1) entered disabled state
[ 1092.500541][T17260] team0: left allmulticast mode
[ 1092.507058][T17260] team_slave_0: left allmulticast mode
[ 1092.513557][T17260] team_slave_1: left allmulticast mode
[ 1092.519058][T17260] team0: left promiscuous mode
[ 1092.525188][T17260] team_slave_0: left promiscuous mode
[ 1092.530717][T17260] team_slave_1: left promiscuous mode
[ 1092.540514][T17260] bridge0: port 3(team0) entered disabled state
[ 1092.549793][T17260] bridge_slave_0: left allmulticast mode
[ 1092.556060][T17260] bridge_slave_0: left promiscuous mode
[ 1092.561913][T17260] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.875375][T17279] veth0_to_bridge: entered promiscuous mode
[ 1092.882216][T17278] veth0_to_bridge: left promiscuous mode
[ 1092.932091][T17283] syzkaller0: entered promiscuous mode
[ 1092.939102][T17283] syzkaller0: entered allmulticast mode
[ 1092.951135][T17283] sctp: [Deprecated]: syz.1.11919 (pid 17283) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1092.951135][T17283] Use struct sctp_sack_info instead
[ 1093.165337][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.176885][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.199417][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.497854][T17306] ip6gre1: entered promiscuous mode
[ 1093.689070][T17293] infiniband syz2: set active
[ 1093.694190][T17293] infiniband syz2: added ip6_vti0
[ 1093.699462][  T130] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.740325][T17293] RDS/IB: syz2: added
[ 1093.745044][T17293] smc: adding ib device syz2 with port count 1
[ 1093.751366][T17293] smc:    ib device syz2 port 1 has no pnetid
[ 1093.758198][ T5041] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.765990][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1093.829839][T17330] 8021q: VLANs not supported on vcan0
[ 1094.157825][T17359] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1094.184917][T17360] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1094.298396][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1094.579765][T17381] __nla_validate_parse: 78 callbacks suppressed
[ 1094.579784][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11947'.
[ 1094.668610][T17385] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[ 1094.704972][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1094.720535][T17389] openvswitch: netlink: IP tunnel TTL not specified.
[ 1094.865931][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11953'.
[ 1094.960787][T17399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11954'.
[ 1095.011530][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11955'.
[ 1095.322976][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1095.544469][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[ 1095.757786][T17442] openvswitch: netlink: Missing valid actions attribute.
[ 1095.771545][T17442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1095.901960][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1096.159170][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1096.221507][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11973'.
[ 1096.463794][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1096.651202][T17478] validate_nla: 2 callbacks suppressed
[ 1096.651218][T17478] netlink: 'syz.2.11977': attribute type 17 has an invalid length.
[ 1096.667420][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11977'.
[ 1096.678004][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11977'.
[ 1096.750206][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1096.993689][T12594] lec:lec_start_xmit: lec0:No lecd attached
[ 1097.071523][T17498] syzkaller1: entered promiscuous mode
[ 1097.078088][T17498] syzkaller1: entered allmulticast mode
[ 1097.181125][T17293] ip6_vti0 speed is unknown, defaulting to 1000
[ 1097.181205][T17506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11986'.
[ 1097.591535][T17521] netlink: 'syz.0.11991': attribute type 1 has an invalid length.
[ 1097.620668][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11991'.
[ 1097.763872][T17528] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1097.945723][T12895] Bluetooth: hci3: command 0x0405 tx timeout
[ 1098.098408][T17528] pim6reg: entered allmulticast mode
[ 1098.429784][T17556] netlink: 'syz.3.12003': attribute type 1 has an invalid length.
[ 1098.480974][T17556] netlink: 'syz.3.12003': attribute type 1 has an invalid length.
[ 1098.725969][T17576] syzkaller0: entered promiscuous mode
[ 1098.731597][T17576] syzkaller0: entered allmulticast mode
[ 1098.950340][T17586] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[ 1099.407255][T17606] virt_wifi0 speed is unknown, defaulting to 1000
[ 1099.488267][T17627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12024'.
[ 1099.516010][T17606] ip6_vti0 speed is unknown, defaulting to 1000
[ 1099.736192][T17644] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0
[ 1099.754302][T17643] wg1: entered promiscuous mode
[ 1099.760997][T17643] wg1: entered allmulticast mode
[ 1100.023416][T12895] Bluetooth: hci3: command 0x0405 tx timeout
[ 1100.185646][T17676] x_tables: duplicate underflow at hook 3
[ 1100.193020][   T30] audit: type=1107 audit(1770620831.235:22): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.ÏjûÍ`h})Þ¬¬p9Æ.ûQDžlkô‡æey# "åîÈ@ÖJ-Û=œÜ%¥½/^/‰½m†’ÔZ@;^œ•ä8_�OˆsŽ [/ÏGñõÔÆÊÅlú»4²Œó
¦ó'X®p0‡ ¾­»íëW°–µ3[Ý8æ�²¶õ¶çKج«Ã)³]ÄðaðQÎÄ'
[ 1100.206172][T17679] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1100.253178][T17679] netlink: 6 bytes leftover after parsing attributes in process `syz.2.12038'.
[ 1100.396857][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12041'.
[ 1100.527811][T17688] bond11: entered promiscuous mode
[ 1100.553553][T17688] bond11: entered allmulticast mode
[ 1100.589098][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12041'.
[ 1100.600782][T17688] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1100.699057][T17691] macvlan0: entered promiscuous mode
[ 1100.712529][T17691] macvlan0: entered allmulticast mode
[ 1100.725199][T17691] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1101.160433][T17721] bond14: option miimon: invalid value (18446744073709551585)
[ 1101.169553][T17721] bond14: option miimon: allowed values 0 - 2147483647
[ 1101.180315][T17721] bond14 (unregistering): Released all slaves
[ 1101.332060][T17736] netlink: 'syz.0.12056': attribute type 1 has an invalid length.
[ 1101.378207][T17738] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes.
[ 1101.415459][T17736] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1101.507629][T17736] veth13: entered promiscuous mode
[ 1101.525216][T17736] bond7: (slave veth13): Enslaving as an active interface with a down link
[ 1101.548904][T17741] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1101.555730][T17751] netlink: 'syz.1.12061': attribute type 1 has an invalid length.
[ 1101.748733][T17764] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12065'.
[ 1101.760516][T17762] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12065'.
[ 1101.851485][T17775] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12068'.
[ 1101.926098][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12070'.
[ 1101.997481][T17781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12070'.
[ 1102.009636][T17787] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12071'.
[ 1102.022944][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1102.031057][    C1] lec:lec_tx_timeout: lec0
[ 1102.175615][T17799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12075'.
[ 1102.246839][T17805] netlink: 'syz.4.12076': attribute type 10 has an invalid length.
[ 1102.305323][T17805] team0: Port device dummy0 added
[ 1102.346062][T17811] netlink: 'syz.2.12078': attribute type 1 has an invalid length.
[ 1102.364208][T17811] netlink: 'syz.2.12078': attribute type 1 has an invalid length.
[ 1102.565249][T17832] nbd: must specify a device to reconfigure
[ 1102.810513][T17846] netlink: zone id is out of range
[ 1102.832211][T17843] netlink: set zone limit has 4 unknown bytes
[ 1102.835272][T17846] netlink: zone id is out of range
[ 1102.847115][T17846] netlink: zone id is out of range
[ 1102.855505][T17846] netlink: zone id is out of range
[ 1102.861976][T17846] netlink: zone id is out of range
[ 1102.870084][T17846] netlink: zone id is out of range
[ 1102.877174][T17846] netlink: zone id is out of range
[ 1103.066976][T17857] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1103.109113][T17864] netlink: 'syz.3.12099': attribute type 1 has an invalid length.
[ 1103.140768][T17866] syz.0.12100: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1103.195392][T17866] CPU: 0 UID: 0 PID: 17866 Comm: syz.0.12100 Not tainted syzkaller #0 PREEMPT(full) 
[ 1103.195421][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1103.195434][T17866] Call Trace:
[ 1103.195443][T17866]  <TASK>
[ 1103.195452][T17866]  dump_stack_lvl+0xe8/0x150
[ 1103.195484][T17866]  warn_alloc+0x249/0x340
[ 1103.195506][T17866]  ? stack_trace_save+0xa9/0x100
[ 1103.195533][T17866]  ? __pfx_warn_alloc+0x10/0x10
[ 1103.195560][T17866]  ? kasan_save_track+0x4f/0x80
[ 1103.195595][T17866]  ? kasan_save_track+0x3e/0x80
[ 1103.195612][T17866]  ? __kasan_kmalloc+0x93/0xb0
[ 1103.195630][T17866]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[ 1103.195648][T17866]  ? xskq_create+0x56/0x170
[ 1103.195667][T17866]  ? xsk_setsockopt+0x54c/0x990
[ 1103.195692][T17866]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1103.195716][T17866]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1103.195738][T17866]  ? do_syscall_64+0xe2/0xf80
[ 1103.195763][T17866]  __vmalloc_node_range_noprof+0x132/0x1730
[ 1103.195815][T17866]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1103.195841][T17866]  ? __kasan_kmalloc+0x93/0xb0
[ 1103.195867][T17866]  vmalloc_user_noprof+0xad/0xe0
[ 1103.195887][T17866]  ? xskq_create+0xbf/0x170
[ 1103.195906][T17866]  xskq_create+0xbf/0x170
[ 1103.195928][T17866]  xsk_init_queue+0xad/0x110
[ 1103.195959][T17866]  xsk_setsockopt+0x54c/0x990
[ 1103.195989][T17866]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1103.196017][T17866]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1103.196044][T17866]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1103.196071][T17866]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1103.196092][T17866]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1103.196123][T17866]  do_sock_setsockopt+0x17c/0x1b0
[ 1103.196153][T17866]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1103.196183][T17866]  do_syscall_64+0xe2/0xf80
[ 1103.196203][T17866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.196222][T17866]  ? trace_irq_disable+0x37/0x100
[ 1103.196241][T17866]  ? clear_bhb_loop+0x60/0xb0
[ 1103.196264][T17866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.196283][T17866] RIP: 0033:0x7fc29899aeb9
[ 1103.196302][T17866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1103.196319][T17866] RSP: 002b:00007fc299775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1103.196340][T17866] RAX: ffffffffffffffda RBX: 00007fc298c15fa0 RCX: 00007fc29899aeb9
[ 1103.196355][T17866] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1103.196368][T17866] RBP: 00007fc298a08c1f R08: 0000000000000004 R09: 0000000000000000
[ 1103.196381][T17866] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1103.196394][T17866] R13: 00007fc298c16038 R14: 00007fc298c15fa0 R15: 00007ffebd648468
[ 1103.196432][T17866]  </TASK>
[ 1103.199065][T17866] Mem-Info:
[ 1103.485187][T17866] active_anon:6747 inactive_anon:0 isolated_anon:0
[ 1103.485187][T17866]  active_file:2745 inactive_file:40471 isolated_file:0
[ 1103.485187][T17866]  unevictable:768 dirty:126 writeback:0
[ 1103.485187][T17866]  slab_reclaimable:13427 slab_unreclaimable:132868
[ 1103.485187][T17866]  mapped:29299 shmem:1382 pagetables:1523
[ 1103.485187][T17866]  sec_pagetables:0 bounce:0
[ 1103.485187][T17866]  kernel_misc_reclaimable:0
[ 1103.485187][T17866]  free:1266539 free_pcp:24674 free_cma:0
[ 1103.493137][T17872] : entered promiscuous mode
[ 1103.530655][T17866] Node 0 active_anon:26988kB inactive_anon:0kB active_file:10980kB inactive_file:161680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:27084kB dirty:504kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15252kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1103.530716][T17866] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1103.530767][T17866] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:24kB free_cma:0kB
[ 1103.530829][T17866] lowmem_reserve[]: 0 2494 2495 2495 2495
[ 1103.530883][T17866] Node 0 DMA32 free:1396380kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26988kB inactive_anon:0kB active_file:10980kB inactive_file:161680kB unevictable:1536kB writepending:504kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:37976kB local_pcp:23352kB free_cma:0kB
[ 1103.530944][T17866] lowmem_reserve[]: 0 0 1 1 1
[ 1103.530982][T17866] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1103.531034][T17866] lowmem_reserve[]: 0 0 0 0 0
[ 1103.531076][T17866] Node 1 Normal free:3658564kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60652kB local_pcp:32468kB free_cma:0kB
[ 1103.531137][T17866] lowmem_reserve[]: 0 0 0 0 0
[ 1103.531179][T17866] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11212kB
[ 1103.531345][T17866] Node 0 DMA32: 6661*4kB (UM) 8041*8kB (UME) 4456*16kB (UM) 239*32kB (UME) 1304*64kB (UME) 993*128kB (UME) 446*256kB (UM) 533*512kB (UM) 378*1024kB (UM) 118*2048kB (UM) 0*4096kB = 1396284kB
[ 1103.531539][T17866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1103.531686][T17866] Node 1 Normal: 208*4kB (U) 69*8kB (UME) 53*16kB (UME) 286*32kB (UME) 120*64kB (UME) 28*128kB (UME) 11*256kB (UM) 8*512kB (UME) 4*1024kB (UM) 6*2048kB (UE) 882*4096kB (UM) = 3658616kB
[ 1103.531876][T17866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1103.531895][T17866] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1103.531911][T17866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1103.531926][T17866] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1103.902334][T17866] 44594 total pagecache pages
[ 1103.907146][T17866] 0 pages in swap cache
[ 1103.939859][T17866] Free swap  = 124996kB
[ 1103.945373][T17866] Total swap = 124996kB
[ 1103.955354][T17866] 2097051 pages RAM
[ 1103.980598][T17866] 0 pages HighMem/MovableOnly
[ 1104.004482][T17866] 426623 pages reserved
[ 1104.008685][T17866] 0 pages cma reserved
[ 1104.259586][T17907] virt_wifi0 speed is unknown, defaulting to 1000
[ 1104.276019][T17907] ip6_vti0 speed is unknown, defaulting to 1000
[ 1104.284370][T17912] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1104.550072][T17920] virt_wifi0 speed is unknown, defaulting to 1000
[ 1104.624326][T17920] ip6_vti0 speed is unknown, defaulting to 1000
[ 1104.968813][T17937] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1104.983864][T17937] bond12 (unregistering): Released all slaves
[ 1105.279357][T17949] __nla_validate_parse: 14 callbacks suppressed
[ 1105.279380][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12122'.
[ 1105.385508][T17953] rdma_rxe: rxe_newlink: failed to add syzkaller0
[ 1105.395312][T17954] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 1105.470699][T17957] netlink: 'syz.0.12126': attribute type 1 has an invalid length.
[ 1105.610551][T17957] bond9: entered promiscuous mode
[ 1105.653014][T17957] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1105.678835][T17960] bond9: (slave bridge9): making interface the new active one
[ 1105.686810][T17960] bridge9: entered promiscuous mode
[ 1105.695204][T17960] bond9: (slave bridge9): Enslaving as an active interface with an up link
[ 1105.898404][T17975] Unknown options in mask b7f2
[ 1105.943496][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12132'.
[ 1106.209592][T17989] netlink: 'syz.2.12138': attribute type 6 has an invalid length.
[ 1106.243539][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12138'.
[ 1106.278672][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12138'.
[ 1106.304624][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12138'.
[ 1107.045641][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12152'.
[ 1107.067902][   T11] block nbd4: Possible stuck request ffff8880548d8000: control (read@0,1024B). Runtime 30 seconds
[ 1107.081904][   T11] block nbd4: Possible stuck request ffff8880548d8200: control (read@1024,1024B). Runtime 30 seconds
[ 1107.082747][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12153'.
[ 1107.096820][   T11] block nbd4: Possible stuck request ffff8880548d8400: control (read@2048,1024B). Runtime 30 seconds
[ 1107.113303][   T11] block nbd4: Possible stuck request ffff8880548d8600: control (read@3072,1024B). Runtime 30 seconds
[ 1107.118430][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12152'.
[ 1107.246795][T18026] netlink: 'syz.4.12152': attribute type 2 has an invalid length.
[ 1107.279421][T18031] veth13: entered allmulticast mode
[ 1107.570378][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12160'.
[ 1107.845323][T18085] C: renamed from lo (while UP)
[ 1107.859715][T18085] net_ratelimit: 1 callbacks suppressed
[ 1107.859733][T18085] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1107.873247][T18093] netlink: 'syz.2.12169': attribute type 1 has an invalid length.
[ 1107.889738][T18088] lo: entered allmulticast mode
[ 1107.956695][T18099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1107.987139][T18093] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1108.068449][T18100] vlan1: entered promiscuous mode
[ 1108.081466][T18093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12169'.
[ 1108.082035][T18100] bond14: entered promiscuous mode
[ 1108.100470][T18100] vlan1: entered allmulticast mode
[ 1108.105969][T18100] bond14: entered allmulticast mode
[ 1108.116676][T18088] lo: left allmulticast mode
[ 1108.124535][T18103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.132181][T18103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.850922][T18173] netlink: 'syz.0.12193': attribute type 13 has an invalid length.
[ 1108.902081][T18173] gretap0: refused to change device tx_queue_len
[ 1108.914403][T18173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1109.043195][T18188] netlink: 'syz.3.12197': attribute type 32 has an invalid length.
[ 1109.055904][T18186] netlink: 'syz.3.12197': attribute type 32 has an invalid length.
[ 1109.108573][T18188] bond12: option coupled_control: invalid value (84)
[ 1109.119950][T18188] bond12 (unregistering): Released all slaves
[ 1109.161715][T18186] bond12: option coupled_control: invalid value (84)
[ 1109.188960][T18186] bond12 (unregistering): Released all slaves
[ 1109.434735][T18212] netlink: 'syz.3.12204': attribute type 23 has an invalid length.
[ 1109.463839][T18215] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1109.693953][T18230] netlink: 'syz.1.12211': attribute type 2 has an invalid length.
[ 1109.695864][T18234] netlink: 'syz.4.12213': attribute type 4 has an invalid length.
[ 1109.734309][T18236] netlink: 'syz.2.12214': attribute type 23 has an invalid length.
[ 1109.858184][T18244] netlink: 'syz.1.12215': attribute type 6 has an invalid length.
[ 1109.899883][   T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1109.903838][T18244] netlink: 'syz.1.12215': attribute type 6 has an invalid length.
[ 1109.911577][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1109.943372][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1109.988671][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1110.384470][T18275] __nla_validate_parse: 19 callbacks suppressed
[ 1110.384488][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12225'.
[ 1110.407268][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12225'.
[ 1110.420586][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12225'.
[ 1110.479251][T18283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12228'.
[ 1110.492902][T18283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12228'.
[ 1110.585255][T18288] dvmrp0: left allmulticast mode
[ 1110.779784][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12229'.
[ 1111.608004][T12895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1111.620079][T12895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1111.631846][T12895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1111.646784][T12895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1111.655132][T12895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1111.707779][T18330] virt_wifi0 speed is unknown, defaulting to 1000
[ 1111.734024][T18330] ip6_vti0 speed is unknown, defaulting to 1000
[ 1112.093852][T18354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1112.289102][T10379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1112.307633][T10379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.333284][T10379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1112.347355][T10379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[ 1112.387681][T18371] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1112.445957][T18376] netlink: 'syz.3.12252': attribute type 11 has an invalid length.
[ 1112.458848][T18376] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.12252'.
[ 1112.492202][T18377] netlink: 476 bytes leftover after parsing attributes in process `syz.0.12249'.
[ 1112.503856][T18377] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.12249'.
[ 1112.518790][T10379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1112.546384][T10379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.574960][T10379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1112.591332][T10379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[ 1112.652845][T10379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1112.666405][T10379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.680430][T10379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1112.711813][T10379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[ 1112.746093][T18390] team0: Caught tx_queue_len zero misconfig
[ 1112.794662][T10379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1112.813648][T10379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.836581][T10379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1112.847596][T10379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[ 1112.873041][T18394] syzkaller0: entered promiscuous mode
[ 1112.879394][T18394] syzkaller0: entered allmulticast mode
[ 1113.101265][T18409] openvswitch: netlink: IP tunnel dst address not specified
[ 1113.155369][T18330] chnl_net:caif_netlink_parms(): no params data found
[ 1113.325123][T18415] IPVS: persistence engine module ip_vs_pe_À
 not found
[ 1113.704960][ T5828] Bluetooth: hci4: command tx timeout
[ 1113.960187][T10379] erspan0 (unregistering): left promiscuous mode
[ 1113.987855][T10379] gretap0 (unregistering): left promiscuous mode
[ 1114.191245][T10379] bond4 (unregistering): (slave geneve2): Releasing active interface
[ 1114.619176][T10379] bond7 (unregistering): (slave bridge7): Releasing active interface
[ 1114.627405][T10379] bridge7 (unregistering): left promiscuous mode
[ 1114.634238][T10379] bridge7 (unregistering): left allmulticast mode
[ 1114.885722][T10379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1114.897387][T10379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1114.909040][T10379] bond0 (unregistering): Released all slaves
[ 1115.065817][T10379] bond1 (unregistering): Released all slaves
[ 1115.223297][T10379] bond2 (unregistering): Released all slaves
[ 1115.384259][T10379] bond3 (unregistering): Released all slaves
[ 1115.398270][T10379] bond4 (unregistering): Released all slaves
[ 1115.565405][T10379] bond5 (unregistering): Released all slaves
[ 1115.578154][T10379] bond6 (unregistering): Released all slaves
[ 1115.758660][T10379] bond7 (unregistering): Released all slaves
[ 1115.770674][T10379] bond8 (unregistering): Released all slaves
[ 1115.783647][ T5828] Bluetooth: hci4: command tx timeout
[ 1115.939437][T10379] bond9 (unregistering): Released all slaves
[ 1115.951928][T10379] bond10 (unregistering): Released all slaves
[ 1115.965825][T10379] bond11 (unregistering): Released all slaves
[ 1115.978844][T10379] bond12 (unregistering): Released all slaves
[ 1116.036083][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1116.155600][T10379] bond13 (unregistering): Released all slaves
[ 1116.326790][T10379] bond14 (unregistering): Released all slaves
[ 1116.369054][T18430] validate_nla: 3 callbacks suppressed
[ 1116.369077][T18430] netlink: 'syz.0.12262': attribute type 29 has an invalid length.
[ 1116.413274][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12262'.
[ 1116.588671][T18432] team0 (unregistering): Port device team_slave_0 removed
[ 1116.625692][T18432] team0 (unregistering): Port device team_slave_1 removed
[ 1116.732809][T18463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12268'.
[ 1116.741991][T10379] tipc: Disabling bearer <udp:syz2>
[ 1116.750007][T10379] tipc: Left network mode
[ 1116.868413][T10379] IPVS: stopping master sync thread 17644 ...
[ 1116.951582][T18475] netlink: 'syz.0.12271': attribute type 4 has an invalid length.
[ 1117.250405][T18492] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12274'.
[ 1117.275508][T18499] pimreg3: entered allmulticast mode
[ 1117.392688][T18330] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.399857][T18330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.441785][T18330] bridge_slave_0: entered allmulticast mode
[ 1117.450332][T18330] bridge_slave_0: entered promiscuous mode
[ 1117.461432][T18512] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[ 1117.481739][T18330] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.502141][T18330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.526737][T18330] bridge_slave_1: entered allmulticast mode
[ 1117.554003][T18330] bridge_slave_1: entered promiscuous mode
[ 1117.609072][T18506] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[ 1117.807919][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12284'.
[ 1117.866518][ T5828] Bluetooth: hci4: command tx timeout
[ 1117.931191][T18330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1118.036399][T18330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1118.240490][T18561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12289'.
[ 1118.268940][T18561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1118.390000][T18330] team0: Port device team_slave_0 added
[ 1118.419851][T18330] team0: Port device team_slave_1 added
[ 1118.456458][T18570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12293'.
[ 1118.629166][T18330] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1118.648414][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1118.726621][T18330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1118.760111][T18330] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1118.782838][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1118.815393][T18330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1118.859552][T10379] hsr_slave_0: left promiscuous mode
[ 1118.873397][T10379] hsr_slave_1: left promiscuous mode
[ 1118.883465][T10379] batman_adv: batadv0: Interface deactivated: dummy0
[ 1118.890278][T10379] batman_adv: batadv0: Removing interface: dummy0
[ 1118.928907][T10379] veth0_macvtap: left allmulticast mode
[ 1118.934929][T10379] veth1_macvtap: left promiscuous mode
[ 1119.150102][T10379] pim6reg527 (unregistering): left allmulticast mode
[ 1119.505638][T10379] team0 (unregistering): Port device team_slave_1 removed
[ 1119.559703][T10379] team0 (unregistering): Port device team_slave_0 removed
[ 1119.949549][ T5828] Bluetooth: hci4: command tx timeout
[ 1120.029661][T18571] mac80211_hwsim hwsim104 syzkaller0: left promiscuous mode
[ 1120.037640][T18571] mac80211_hwsim hwsim104 syzkaller0: left allmulticast mode
[ 1120.055250][T18597] syzkaller1: entered allmulticast mode
[ 1120.229226][T18330] hsr_slave_0: entered promiscuous mode
[ 1120.246700][T18330] hsr_slave_1: entered promiscuous mode
[ 1120.266947][T18330] debugfs: 'hsr0' already exists in 'hsr'
[ 1120.284425][T18330] Cannot create hsr debugfs directory
[ 1120.769543][T18641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12309'.
[ 1120.809958][T10379] IPVS: stop unused estimator thread 0...
[ 1120.830967][T18641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12309'.
[ 1121.042356][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[ 1121.050605][    C1] lec:lec_tx_timeout: lec0
[ 1121.374657][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12313'.
[ 1121.447758][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12313'.
[ 1121.571956][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12316'.
[ 1121.791989][T18330] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1121.821975][T18330] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1121.882817][T18330] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1121.910196][T18330] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1121.918576][T18698] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1121.928828][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12319'.
[ 1121.974818][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12321'.
[ 1122.046123][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12321'.
[ 1122.133393][T18716] netlink: 196 bytes leftover after parsing attributes in process `syz.0.12323'.
[ 1122.281319][T18726] syzkaller0: entered promiscuous mode
[ 1122.306476][T18726] syzkaller0: entered allmulticast mode
[ 1122.345502][T18330] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1122.389602][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12326'.
[ 1122.753400][T18740] netlink: 'syz.0.12330': attribute type 29 has an invalid length.
[ 1122.763004][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12330'.
[ 1122.845214][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12331'.
[ 1122.864389][T18330] 8021q: adding VLAN 0 to HW filter on device team0
[ 1122.996604][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.004005][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.082520][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.089947][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1123.319636][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12336'.
[ 1123.721024][T18771] netlink: 'syz.0.12332': attribute type 9 has an invalid length.
[ 1123.860178][T18800] tipc: Started in network mode
[ 1123.901347][T18800] tipc: Node identity ac14140f, cluster identity 4711
[ 1123.932136][T18800] tipc: New replicast peer: 255.255.255.255
[ 1123.964155][T18800] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1124.043523][T18330] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1124.140726][T18817] netlink: 'syz.3.12341': attribute type 4 has an invalid length.
[ 1124.173269][T18817] netlink: 'syz.3.12341': attribute type 1 has an invalid length.
[ 1124.206235][T18330] veth0_vlan: entered promiscuous mode
[ 1124.230302][T18822] veth0_to_bond: entered allmulticast mode
[ 1124.255503][T18330] veth1_vlan: entered promiscuous mode
[ 1124.355909][T18330] veth0_macvtap: entered promiscuous mode
[ 1124.396148][T18330] veth1_macvtap: entered promiscuous mode
[ 1124.406530][T18830] netlink: 'syz.3.12344': attribute type 33 has an invalid length.
[ 1124.549889][T18830] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1124.570655][T18844] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1124.616000][T18830] bond12 (unregistering): Released all slaves
[ 1124.776832][T18330] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1124.797586][T18330] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1124.881468][T10377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.942605][T10377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.951465][T10377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1125.046102][T10377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1125.157721][   T10] tipc: Node number set to 2886997007
[ 1125.298910][T18888] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[ 1125.355110][T10358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1125.384271][T10358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1125.470376][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1125.479813][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1125.605186][T18898] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[ 1125.651608][T18898] bond1 (unregistering): Released all slaves
[ 1125.771417][T18917] netlink: 'syz.2.12363': attribute type 1 has an invalid length.
[ 1125.822768][T18919] syz_tun: entered promiscuous mode
[ 1125.829675][T18919] syz_tun: left promiscuous mode
[ 1126.044126][T18936] ip6t_REJECT: ECHOREPLY is not supported
[ 1126.529216][T18965] __nla_validate_parse: 9 callbacks suppressed
[ 1126.529234][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12377'.
[ 1126.553027][T12895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1126.571748][T12895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1126.580538][T12895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1126.595536][T12895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1126.603441][T12895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1126.735057][T18973] netlink: 'syz.0.12379': attribute type 1 has an invalid length.
[ 1126.749045][T18973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1126.867728][T18966] virt_wifi0 speed is unknown, defaulting to 1000
[ 1126.910636][T18966] ip6_vti0 speed is unknown, defaulting to 1000
[ 1126.927730][T18981] netlink: 'syz.4.12381': attribute type 1 has an invalid length.
[ 1126.963266][T18981] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12381'.
[ 1126.995340][T18981] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12381'.
[ 1127.013882][T18981] netlink: 'syz.4.12381': attribute type 1 has an invalid length.
[ 1127.033882][T18981] netlink: 'syz.4.12381': attribute type 8 has an invalid length.
[ 1127.065104][T18981] netlink: 582 bytes leftover after parsing attributes in process `syz.4.12381'.
[ 1127.710943][ T8202] IPVS: starting estimator thread 0...
[ 1127.817687][T19008] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1127.870627][T19018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12392'.
[ 1127.906464][T18966] chnl_net:caif_netlink_parms(): no params data found
[ 1128.017628][T19022] netlink: 'syz.2.12393': attribute type 1 has an invalid length.
[ 1128.032044][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12394'.
[ 1128.042058][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12394'.
[ 1128.147038][T19022] bond1 (unregistering): Released all slaves
[ 1128.174457][T19034] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12397'.
[ 1128.249862][T19037] xt_hashlimit: size too large, truncated to 1048576
[ 1128.344074][T19044] netlink: 'syz.4.12397': attribute type 9 has an invalid length.
[ 1128.435812][T18966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1128.453040][T19050] netlink: 'syz.2.12400': attribute type 1 has an invalid length.
[ 1128.466282][T18966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.474882][T18966] bridge_slave_0: entered allmulticast mode
[ 1128.495839][T18966] bridge_slave_0: entered promiscuous mode
[ 1128.539627][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12401'.
[ 1128.583691][T19057] netlink: 'syz.4.12402': attribute type 1 has an invalid length.
[ 1128.595019][T19057] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12402'.
[ 1128.605426][T18966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1128.614040][T18966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1128.631860][T18966] bridge_slave_1: entered allmulticast mode
[ 1128.640583][T18966] bridge_slave_1: entered promiscuous mode
[ 1128.650103][T19052] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[ 1128.662411][T12895] Bluetooth: hci1: command tx timeout
[ 1128.808053][T18966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1128.893437][T18966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1128.944997][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1128.994687][T18966] team0: Port device team_slave_0 added
[ 1129.000340][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1129.018807][T18966] team0: Port device team_slave_1 added
[ 1129.025009][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1129.034328][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1129.058084][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1129.084467][T19070] netlink: 'syz.0.12407': attribute type 29 has an invalid length.
[ 1129.096861][T18966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1129.112544][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1129.154547][T18966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1129.180880][T18966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1129.191843][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1129.220139][T18966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1129.359492][T18966] hsr_slave_0: entered promiscuous mode
[ 1129.367814][T18966] hsr_slave_1: entered promiscuous mode
[ 1129.380034][T18966] debugfs: 'hsr0' already exists in 'hsr'
[ 1129.394099][T18966] Cannot create hsr debugfs directory
[ 1129.785800][T18966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1129.812023][T19115] openvswitch: netlink: IP tunnel dst address not specified
[ 1129.830524][T18966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1129.854608][T18966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1130.051591][T18966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1130.074332][T18966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.099046][T18966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1130.174594][T19141] veth2: entered allmulticast mode
[ 1130.327887][T19153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1130.339402][T18966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1130.372409][T18966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.414339][T18966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1130.587955][T19167] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[ 1130.730923][T18966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1130.753172][T12895] Bluetooth: hci1: command tx timeout
[ 1130.788784][T18966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.800791][T18966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1131.134155][T19193] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1131.339876][T18966] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1131.361497][T18966] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1131.376749][T18966] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1131.394185][T18966] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1131.566600][T19230] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20064
[ 1131.668741][T18966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1131.692892][T18966] 8021q: adding VLAN 0 to HW filter on device team0
[ 1131.706766][T10377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1131.713981][T10377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1131.767617][T10379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1131.774956][T10379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1131.873572][T19247] __nla_validate_parse: 3 callbacks suppressed
[ 1131.873591][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12445'.
[ 1131.884377][T18966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1131.944430][T19247] : entered promiscuous mode
[ 1132.207343][T18966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1132.280737][T18966] veth0_vlan: entered promiscuous mode
[ 1132.298262][T18966] veth1_vlan: entered promiscuous mode
[ 1132.340933][T18966] veth0_macvtap: entered promiscuous mode
[ 1132.358402][T18966] veth1_macvtap: entered promiscuous mode
[ 1132.379823][T18966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1132.401831][T18966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1132.431745][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.442544][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.467587][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.479287][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.823070][T12895] Bluetooth: hci1: command tx timeout
[ 1134.485656][T19227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1134.643055][T10358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1134.675855][T10358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1134.720802][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1134.765889][T19278] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12451'.
[ 1134.772307][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1134.820964][T19279] syzkaller0: entered promiscuous mode
[ 1134.832958][T19279] syzkaller0: entered allmulticast mode
[ 1134.875777][T19279] tipc: Started in network mode
[ 1134.885136][T19288] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12453'.
[ 1134.903991][T12895] Bluetooth: hci1: command tx timeout
[ 1134.925330][T19279] tipc: Node identity ce4844342a99, cluster identity 4711
[ 1134.932790][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12453'.
[ 1134.970551][T19279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1135.111480][T19271] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.148415][T19271] tipc: Disabling bearer <eth:syzkaller0>
[ 1135.259506][T19309] netlink: zone id is out of range
[ 1135.270443][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12458'.
[ 1135.271780][T19309] netlink: zone id is out of range
[ 1135.290725][T19311] validate_nla: 1 callbacks suppressed
[ 1135.290743][T19311] netlink: 'syz.3.12458': attribute type 5 has an invalid length.
[ 1135.310054][T19309] netlink: zone id is out of range
[ 1135.315732][T19309] netlink: zone id is out of range
[ 1135.324581][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12458'.
[ 1135.325025][T19309] netlink: zone id is out of range
[ 1135.357640][T19309] netlink: zone id is out of range
[ 1135.380902][T19309] netlink: zone id is out of range
[ 1135.382832][T19311] geneve2: entered promiscuous mode
[ 1135.400786][T19309] netlink: set zone limit has 4 unknown bytes
[ 1135.412291][T19311] geneve2: entered allmulticast mode
[ 1135.432134][T10358] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1135.443620][T19318] xt_l2tp: v2 doesn't support IP mode
[ 1135.449498][T10358] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1135.453909][T19321] netlink: 'syz.2.12461': attribute type 2 has an invalid length.
[ 1135.471118][T10358] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1135.483298][T10358] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1135.497762][T19321] �9: entered promiscuous mode
[ 1135.531304][T19323] tipc: Started in network mode
[ 1135.536619][T19323] tipc: Node identity fea2149b98a9, cluster identity 4711
[ 1135.546686][T19323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1135.635872][T19323] syzkaller0: entered promiscuous mode
[ 1135.641384][T19323] syzkaller0: entered allmulticast mode
[ 1135.653941][T19323] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.686323][T19329] netlink: 'syz.0.12464': attribute type 3 has an invalid length.
[ 1135.764987][T10358] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.819655][T19322] tipc: Resetting bearer <eth:syzkaller0>
[ 1137.148783][   T11] block nbd4: Possible stuck request ffff8880548d8000: control (read@0,1024B). Runtime 60 seconds
[ 1137.159825][   T11] block nbd4: Possible stuck request ffff8880548d8200: control (read@1024,1024B). Runtime 60 seconds
[ 1137.183973][   T11] block nbd4: Possible stuck request ffff8880548d8400: control (read@2048,1024B). Runtime 60 seconds
[ 1137.195245][   T11] block nbd4: Possible stuck request ffff8880548d8600: control (read@3072,1024B). Runtime 60 seconds
[ 1137.701108][ T5194] udevd[5194]: worker [15940] /devices/virtual/block/nbd4 is taking a long time
[ 1138.934430][T19322] tipc: Disabling bearer <eth:syzkaller0>
[ 1138.974713][ T5827] tipc: Node number set to 1712002203
[ 1139.121649][T19359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12472'.
[ 1139.136478][T19365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12472'.
[ 1139.148791][T19369] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12476'.
[ 1139.165313][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12475'.
[ 1139.202428][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12475'.
[ 1139.226638][T19373] netlink: 'syz.3.12477': attribute type 28 has an invalid length.
[ 1139.232838][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12475'.
[ 1139.247198][T19375] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1139.260518][T19373] netlink: 'syz.3.12477': attribute type 3 has an invalid length.
[ 1139.278531][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12479'.
[ 1139.289074][T19373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12477'.
[ 1139.564242][T19399] netlink: 'syz.1.12485': attribute type 1 has an invalid length.
[ 1139.642521][T19399] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1139.671633][T19407] bond1: (slave geneve2): making interface the new active one
[ 1139.684666][T19407] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1139.746035][T19409] netlink: 112 bytes leftover after parsing attributes in process `syz.3.12487'.
[ 1139.890851][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12488'.
[ 1140.594593][T19453] mac80211_hwsim hwsim127 wlan0: entered promiscuous mode
[ 1140.807537][T19463] syzkaller0: entered promiscuous mode
[ 1140.824233][T19463] syzkaller0: entered allmulticast mode
[ 1141.020542][T19484] x_tables: duplicate underflow at hook 3
[ 1141.028680][T19484] x_tables: duplicate underflow at hook 3
[ 1143.431311][T19492] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1143.516693][T19452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1143.627093][T19507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1143.653381][T19515] openvswitch: netlink: Flow key attr not present in new flow.
[ 1143.752131][T19507] syzkaller0: entered promiscuous mode
[ 1143.826325][T19507] syzkaller0: entered allmulticast mode
[ 1143.849092][T19507] tipc: Resetting bearer <eth:syzkaller0>
[ 1143.981468][T19524] team0 (unregistering): Port device team_slave_0 removed
[ 1143.999714][T19524] team0 (unregistering): Port device team_slave_1 removed
[ 1144.023247][T19536] ipvlan2: entered allmulticast mode
[ 1144.028685][T19536] batadv_slave_1: entered allmulticast mode
[ 1144.038050][T19536] batman_adv: batadv0: Adding interface: ipvlan2
[ 1144.045762][T19536] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.074409][T19536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1144.086000][T19536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1144.115409][T19536] batman_adv: batadv0: Interface activated: ipvlan2
[ 1144.129140][T19507] tipc: Resetting bearer <eth:syzkaller0>
[ 1145.784439][T12895] Bluetooth: hci1: command tx timeout
[ 1146.453713][T19507] tipc: Disabling bearer <eth:syzkaller0>
[ 1146.575046][T19561] netlink: 'syz.0.12519': attribute type 1 has an invalid length.
[ 1146.784697][T19570] syzkaller0: entered promiscuous mode
[ 1146.790226][T19570] syzkaller0: entered allmulticast mode
[ 1146.906888][T19580] __nla_validate_parse: 6 callbacks suppressed
[ 1146.906908][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12524'.
[ 1147.024509][T19589] netlink: 'syz.2.12525': attribute type 10 has an invalid length.
[ 1147.183223][T19597] netlink: 'syz.3.12527': attribute type 5 has an invalid length.
[ 1147.409731][T19610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12530'.
[ 1147.624892][T19618] netlink: 'syz.2.12533': attribute type 13 has an invalid length.
[ 1147.633232][T19618] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12533'.
[ 1147.677565][T19622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12534'.
[ 1148.161952][T19651] delete_channel: no stack
[ 1148.329213][T19669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1148.361351][T19669] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12551'.
[ 1148.411931][T19676] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12548'.
[ 1148.489587][T19682] netlink: 'syz.4.12554': attribute type 1 has an invalid length.
[ 1148.515417][T19682] netlink: 'syz.4.12554': attribute type 1 has an invalid length.
[ 1148.532646][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12555'.
[ 1148.541192][T19676] syzkaller0: entered promiscuous mode
[ 1148.565228][T19676] syzkaller0: entered allmulticast mode
[ 1148.614618][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12557'.
[ 1148.823428][T19699] netlink: 'syz.3.12559': attribute type 4 has an invalid length.
[ 1148.831447][T19699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12559'.
[ 1151.008354][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1151.593016][T19739] delete_channel: no stack
[ 1151.689215][T19750] netlink: 'syz.2.12576': attribute type 1 has an invalid length.
[ 1151.979632][T19768] netlink: 'syz.0.12580': attribute type 1 has an invalid length.
[ 1152.010387][T19768] __nla_validate_parse: 1 callbacks suppressed
[ 1152.010404][T19768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12580'.
[ 1152.084800][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12580'.
[ 1152.171977][T19768] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12580'.
[ 1153.655467][T19848] Cannot find add_set index 65532 as target
[ 1153.800957][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12601'.
[ 1155.176263][T19788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1155.317540][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12602'.
[ 1155.514564][T19872] netlink: 'syz.2.12608': attribute type 1 has an invalid length.
[ 1155.525383][T19872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12608'.
[ 1155.677980][T19884] netlink: 'syz.4.12613': attribute type 19 has an invalid length.
[ 1155.724226][T19884] netlink: 'syz.4.12613': attribute type 2 has an invalid length.
[ 1155.831480][T19895] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12615'.
[ 1156.306106][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1156.316451][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1156.325673][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1156.334522][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1156.338565][T19914] netlink: 'syz.2.12620': attribute type 2 has an invalid length.
[ 1156.406702][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1156.471371][T19914] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12620'.
[ 1156.555514][T19917] xt_hashlimit: size too large, truncated to 1048576
[ 1156.568399][T19911] virt_wifi0 speed is unknown, defaulting to 1000
[ 1156.585458][T19924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12624'.
[ 1156.611105][T19924] syzkaller0: entered promiscuous mode
[ 1156.621188][T19924] syzkaller0: entered allmulticast mode
[ 1156.635296][T19911] ip6_vti0 speed is unknown, defaulting to 1000
[ 1156.868085][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1156.878459][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12625'.
[ 1156.991037][T19932] bridge0: entered promiscuous mode
[ 1156.997113][T19932] macsec1: entered promiscuous mode
[ 1157.002894][T19932] macsec1: entered allmulticast mode
[ 1157.009186][T19932] bridge0: entered allmulticast mode
[ 1157.017249][T19932] bridge0: port 3(macsec1) entered blocking state
[ 1157.023931][T19932] bridge0: port 3(macsec1) entered disabled state
[ 1157.057688][T19932] bridge0: left allmulticast mode
[ 1157.082733][T19932] bridge0: left promiscuous mode
[ 1157.153279][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12628'.
[ 1157.168790][T19939] block nbd6: Unsupported socket: should be TCP or UNIX.
[ 1157.213325][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1157.381664][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1157.422587][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12631'.
[ 1157.427427][T19947] syzkaller0: entered promiscuous mode
[ 1157.437373][T19947] syzkaller0: entered allmulticast mode
[ 1157.449311][T19951] netlink: 'syz.3.12631': attribute type 24 has an invalid length.
[ 1157.479034][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1157.490779][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12632'.
[ 1157.667120][T19911] chnl_net:caif_netlink_parms(): no params data found
[ 1157.846983][   T36] bridge_slave_1: left allmulticast mode
[ 1157.865397][   T36] bridge_slave_1: left promiscuous mode
[ 1157.865813][T19967] xt_TCPMSS: Only works on TCP SYN packets
[ 1157.876126][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1157.901113][   T36] ¾x9ÿ: left allmulticast mode
[ 1157.906421][   T36] ¾x9ÿ: left promiscuous mode
[ 1157.911416][   T36] bridge0: port 1(
1¾x9ÿ) entered disabled state
[ 1157.956089][   T36] tipc: Resetting bearer <ib:gretap0>
[ 1158.008529][T19974] netlink: 'syz.2.12636': attribute type 1 has an invalid length.
[ 1158.151357][   T36] bond4 (unregistering): (slave ip6gretap1): Releasing active interface
[ 1158.426818][   T36] tipc: Disabling bearer <ib:gretap0>
[ 1158.502723][T12895] Bluetooth: hci2: command tx timeout
[ 1159.047046][   T36] bond9 (unregistering): (slave bridge9): Releasing backup interface
[ 1159.056096][   T36] bridge9 (unregistering): left promiscuous mode
[ 1159.247713][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1159.260763][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1159.276015][   T36] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1159.288583][   T36] bond0 (unregistering): Released all slaves
[ 1159.450794][   T36] bond1 (unregistering): Released all slaves
[ 1159.465632][   T36] bond2 (unregistering): (slave veth3): Releasing active interface
[ 1159.476530][   T36] bond2 (unregistering): (slave veth5): Releasing active interface
[ 1159.486330][   T36] bond2 (unregistering): Released all slaves
[ 1159.654982][   T36] bond3 (unregistering): (slave vlan3): Releasing active interface
[ 1159.665100][   T36] bond3 (unregistering): Released all slaves
[ 1159.678363][   T36] bond4 (unregistering): Released all slaves
[ 1159.691107][   T36] bond5 (unregistering): Released all slaves
[ 1159.853914][   T36] bond6 (unregistering): Released all slaves
[ 1160.017803][   T36] bond7 (unregistering): (slave veth13): Releasing active interface
[ 1160.028220][   T36] bond7 (unregistering): Released all slaves
[ 1160.045647][   T36] bond8 (unregistering): Released all slaves
[ 1160.210066][   T36] bond9 (unregistering): Released all slaves
[ 1160.261470][T19974] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1160.276987][T19986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1160.402042][T19992] xt_HMARK: spi-set and port-set can't be combined
[ 1160.422666][T19911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1160.429816][T19911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1160.465751][T19911] bridge_slave_0: entered allmulticast mode
[ 1160.500485][T19911] bridge_slave_0: entered promiscuous mode
[ 1160.510967][T19911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1160.518732][T19911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1160.526926][T19911] bridge_slave_1: entered allmulticast mode
[ 1160.535966][T19911] bridge_slave_1: entered promiscuous mode
[ 1160.545709][   T36] tipc: Disabling bearer <udp:syz2>
[ 1160.553226][T20001] nbd: couldn't find a device at index 0
[ 1160.563118][   T36] tipc: Left network mode
[ 1160.584715][T12895] Bluetooth: hci2: command tx timeout
[ 1160.815861][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1160.893221][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1161.197655][T19911] team0: Port device team_slave_0 added
[ 1161.224837][T19911] team0: Port device team_slave_1 added
[ 1161.287102][T20047] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12654'.
[ 1161.314901][T20048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12654'.
[ 1161.540837][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1161.582666][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1161.624944][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1161.680507][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1161.690337][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1161.722569][T12594] lec:lec_start_xmit: lec0:No lecd attached
[ 1161.729099][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1161.980342][T20069] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1162.100885][T19911] hsr_slave_0: entered promiscuous mode
[ 1162.129340][T20094] sock: sock_set_timeout: `syz.4.12668' (pid 20094) tries to set negative timeout
[ 1162.140152][T19911] hsr_slave_1: entered promiscuous mode
[ 1162.157857][T19911] debugfs: 'hsr0' already exists in 'hsr'
[ 1162.171755][T19911] Cannot create hsr debugfs directory
[ 1162.280702][T20106] syzkaller0: entered promiscuous mode
[ 1162.288332][T20106] syzkaller0: entered allmulticast mode
[ 1162.547746][T20120] pimreg: entered allmulticast mode
[ 1162.664148][T12895] Bluetooth: hci2: command tx timeout
[ 1162.891675][T20144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1162.990623][T20142] syzkaller0: entered promiscuous mode
[ 1163.002076][T20142] syzkaller0: entered allmulticast mode
[ 1163.083638][T20163] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1163.128754][T20145] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[ 1163.337517][   T36] hsr_slave_1: left promiscuous mode
[ 1163.348732][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.361502][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1163.383169][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1163.402285][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1163.429481][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12687'.
[ 1163.441484][   T36] veth1_vlan: left allmulticast mode
[ 1163.447711][   T36] veth0_macvtap: left promiscuous mode
[ 1163.453484][   T36] veth1_vlan: left promiscuous mode
[ 1163.459358][   T36] veth0_vlan: left promiscuous mode
[ 1164.215783][   T36] team0 (unregistering): Port device team_slave_1 removed
[ 1164.271831][   T36] team0 (unregistering): Port device team_slave_0 removed
[ 1164.742539][T12895] Bluetooth: hci2: command tx timeout
[ 1164.749920][   T36] team0 (unregistering): Port device dummy0 removed
[ 1164.935418][T20142] tipc: Resetting bearer <eth:syzkaller0>
[ 1164.941691][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12689'.
[ 1164.976045][T20142] tipc: Disabling bearer <eth:syzkaller0>
[ 1164.984374][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12689'.
[ 1165.024502][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12689'.
[ 1165.204511][T20215] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12692'.
[ 1165.470253][T20227] virt_wifi0 speed is unknown, defaulting to 1000
[ 1165.479098][T20227] ip6_vti0 speed is unknown, defaulting to 1000
[ 1165.581971][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12698'.
[ 1165.770594][T20241] bridge1: port 1(veth3) entered blocking state
[ 1165.790841][T20241] bridge1: port 1(veth3) entered disabled state
[ 1165.797954][T20241] veth3: entered allmulticast mode
[ 1165.818348][T20241] veth3: entered promiscuous mode
[ 1165.845411][T20237] bridge1: port 2(veth0_to_bond) entered blocking state
[ 1165.852997][T20237] bridge1: port 2(veth0_to_bond) entered disabled state
[ 1165.865983][T20237] veth0_to_bond: entered allmulticast mode
[ 1165.885649][T20245] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12700'.
[ 1165.905060][T20237] veth0_to_bond: entered promiscuous mode
[ 1166.016374][T20248] xt_hashlimit: size too large, truncated to 1048576
[ 1166.446248][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12703'.
[ 1166.456841][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12703'.
[ 1166.584564][T19911] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1166.658681][T19911] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1166.705270][T19911] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1166.737710][T19911] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1166.875166][T20281] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1166.982257][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[ 1166.990362][    C1] lec:lec_tx_timeout: lec0
[ 1167.196752][T19911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1167.225432][   T11] block nbd4: Possible stuck request ffff8880548d8000: control (read@0,1024B). Runtime 90 seconds
[ 1167.237355][   T11] block nbd4: Possible stuck request ffff8880548d8200: control (read@1024,1024B). Runtime 90 seconds
[ 1167.249158][   T11] block nbd4: Possible stuck request ffff8880548d8400: control (read@2048,1024B). Runtime 90 seconds
[ 1167.260364][   T11] block nbd4: Possible stuck request ffff8880548d8600: control (read@3072,1024B). Runtime 90 seconds
[ 1167.283422][T19911] 8021q: adding VLAN 0 to HW filter on device team0
[ 1167.297625][T10379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1167.304807][T10379] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1167.400371][T10379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1167.407792][T10379] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1167.455877][T20316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12715'.
[ 1168.060577][T19911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1168.217958][T19911] veth0_vlan: entered promiscuous mode
[ 1168.261742][T19911] veth1_vlan: entered promiscuous mode
[ 1168.389222][T19911] veth0_macvtap: entered promiscuous mode
[ 1168.409118][T19911] veth1_macvtap: entered promiscuous mode
[ 1168.532060][T19911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1168.560493][T20371] x_tables: duplicate underflow at hook 3
[ 1168.592818][T20371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12726'.
[ 1168.594366][T19911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1168.739044][T10378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.784519][T10378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.836248][T10378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.863617][T10378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1169.141438][ T6665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.175437][ T6665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.285561][T10378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.304230][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[ 1169.306532][T10378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.360029][T20411] xt_hashlimit: size too large, truncated to 1048576
[ 1169.648351][T20424] netlink: 'syz.2.12738': attribute type 1 has an invalid length.
[ 1169.774460][T20430] netlink: 'syz.1.12741': attribute type 1 has an invalid length.
[ 1169.821873][T20424] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1169.836761][T20433] vlan2: entered promiscuous mode
[ 1169.860648][T20433] bond2: entered promiscuous mode
[ 1169.879643][T20433] vlan2: entered allmulticast mode
[ 1169.885766][T20433] bond2: entered allmulticast mode
[ 1169.946472][T20438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1169.964146][T20438] bridge_slave_1: left allmulticast mode
[ 1169.970274][T20438] bridge_slave_1: left promiscuous mode
[ 1169.977214][T20438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.013283][T20440] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[ 1170.055918][T20424] bond2: (slave bridge1): making interface the new active one
[ 1170.084946][T20424] bridge1: entered promiscuous mode
[ 1170.101079][T20424] bridge1: entered allmulticast mode
[ 1170.126706][T20424] bond2: (slave bridge1): Enslaving as an active interface with an up link
[ 1170.157793][T20442] syzkaller1: entered promiscuous mode
[ 1170.165926][T20442] syzkaller1: entered allmulticast mode
[ 1170.199810][T20455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1170.395789][T20464] netlink: 'syz.3.12746': attribute type 10 has an invalid length.
[ 1170.427308][T20464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12746'.
[ 1170.434988][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12747'.
[ 1170.446630][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12747'.
[ 1170.472851][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12747'.
[ 1170.473755][T20464] dummy0: entered promiscuous mode
[ 1170.534233][T20464] bridge0: port 2(dummy0) entered blocking state
[ 1170.547230][T20464] bridge0: port 2(dummy0) entered disabled state
[ 1170.569068][T20464] dummy0: entered allmulticast mode
[ 1170.596179][T20464] bridge0: port 2(dummy0) entered blocking state
[ 1170.602760][T20464] bridge0: port 2(dummy0) entered forwarding state
[ 1170.876953][T20476] bond3: entered promiscuous mode
[ 1170.882034][T20476] bond3: entered allmulticast mode
[ 1170.945378][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1170.964899][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1170.975208][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1170.997549][T20476] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1171.015301][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1171.023515][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1171.173931][T20489] virt_wifi0 speed is unknown, defaulting to 1000
[ 1171.201638][T20489] ip6_vti0 speed is unknown, defaulting to 1000
[ 1171.413317][T20514] netlink: 'syz.1.12757': attribute type 3 has an invalid length.
[ 1171.590896][T20521] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12758'.
[ 1171.633012][T20523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1171.686039][T20527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1171.714444][T20524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1171.771374][T20521] gretap0: entered promiscuous mode
[ 1171.920550][T20523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1172.154505][T20556] netlink: 'syz.2.12763': attribute type 10 has an invalid length.
[ 1172.192989][T20489] chnl_net:caif_netlink_parms(): no params data found
[ 1172.267863][T20560] tipc: Started in network mode
[ 1172.283427][T20560] tipc: Node identity ac1414aa, cluster identity 4711
[ 1172.318133][T20560] tipc: Enabled bearer <udp:s>, priority 10
[ 1172.318895][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12764'.
[ 1172.334513][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12764'.
[ 1172.701438][T20489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1172.714072][T20489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.721562][T20489] bridge_slave_0: entered allmulticast mode
[ 1172.733443][T20489] bridge_slave_0: entered promiscuous mode
[ 1172.744902][T20489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1172.771236][T20489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.779230][T20489] bridge_slave_1: entered allmulticast mode
[ 1172.804288][T20489] bridge_slave_1: entered promiscuous mode
[ 1172.829750][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12773'.
[ 1172.895563][T20489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1172.911312][T20489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1172.940756][T20601] xt_bpf: check failed: parse error
[ 1172.965698][T20489] team0: Port device team_slave_0 added
[ 1172.975593][T20489] team0: Port device team_slave_1 added
[ 1173.108075][T20489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1173.125250][T20489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1173.163008][T12895] Bluetooth: hci5: command tx timeout
[ 1173.185027][T20489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1173.199870][T20489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1173.207829][T20489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1173.238260][T20489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1173.254266][T20611] netlink: 'syz.3.12778': attribute type 39 has an invalid length.
[ 1173.433985][ T5827] tipc: Node number set to 2886997162
[ 1173.463734][T20489] hsr_slave_0: entered promiscuous mode
[ 1173.470912][T20489] hsr_slave_1: entered promiscuous mode
[ 1173.478859][T20489] debugfs: 'hsr0' already exists in 'hsr'
[ 1173.485859][T20489] Cannot create hsr debugfs directory
[ 1173.644599][T20628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12783'.
[ 1173.890163][ T6665] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[ 1174.069057][T20633] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12785'.
[ 1174.097098][T20633] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[ 1174.121747][T20633] 0ªX¹¦Dö»: entered allmulticast mode
[ 1174.295740][T20643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1174.441584][T20489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.475424][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12791'.
[ 1174.490036][T20658] syzkaller0: entered promiscuous mode
[ 1174.499673][T20658] syzkaller0: entered allmulticast mode
[ 1174.551010][T20489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.588281][T20665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1174.664573][T20489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.683943][T20667] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12794'.
[ 1174.767566][T20489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.788024][T20669] macvlan0: entered promiscuous mode
[ 1175.015086][T20489] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1175.037407][T20489] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1175.042012][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12800'.
[ 1175.060449][T20489] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1175.087222][T20489] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1175.146405][T20700] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12802'.
[ 1175.171344][T20700] xt_policy: neither incoming nor outgoing policy selected
[ 1175.222779][T12895] Bluetooth: hci5: command tx timeout
[ 1175.323968][T20489] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1175.408825][T20489] 8021q: adding VLAN 0 to HW filter on device team0
[ 1175.442525][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.449698][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.505878][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.513096][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1175.584686][T20724] netlink: 'syz.2.12810': attribute type 3 has an invalid length.
[ 1175.638686][T20718] syzkaller0: entered promiscuous mode
[ 1175.645301][T20718] syzkaller0: entered allmulticast mode
[ 1175.927022][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12813'.
[ 1176.109141][T20748] pimreg: left allmulticast mode
[ 1176.266945][T20489] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.539031][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12822'.
[ 1176.596903][T10378] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.659791][T10378] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.703680][T10378] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.734451][T10378] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.858174][T20802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12827'.
[ 1176.913381][T20803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12827'.
[ 1177.000782][T20489] veth0_vlan: entered promiscuous mode
[ 1177.007168][T20807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1177.036757][T20489] veth1_vlan: entered promiscuous mode
[ 1177.100076][T20814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7
[ 1177.119197][T20489] veth0_macvtap: entered promiscuous mode
[ 1177.130915][T20489] veth1_macvtap: entered promiscuous mode
[ 1177.141639][T20813] batadv_slave_1: entered promiscuous mode
[ 1177.191906][T20489] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1177.241370][T20489] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1177.276180][ T6665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.288193][ T6665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.300587][ T6665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.313015][T12895] Bluetooth: hci5: command tx timeout
[ 1177.315291][ T6665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.407193][T10379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1177.421936][T10379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1177.461553][ T6665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1177.479068][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[ 1177.489197][ T6665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1177.830296][T20806] batadv_slave_1: left promiscuous mode
[ 1177.859310][T20851] netlink: 'syz.1.12836': attribute type 1 has an invalid length.
[ 1178.090475][T20860] syzkaller0: entered promiscuous mode
[ 1178.098869][T20860] syzkaller0: entered allmulticast mode
[ 1179.389172][T12895] Bluetooth: hci5: command tx timeout
[ 1180.415806][T20898] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[ 1180.429580][T20898] x_tables: duplicate underflow at hook 1
[ 1180.581517][T20882] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[ 1180.594750][T20882] bond0: (slave gre0): Error -95 calling set_mac_address
[ 1180.855297][T20923] x_tables: duplicate underflow at hook 1
[ 1180.945280][T20929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1180.952606][T20929] IPv6: NLM_F_CREATE should be set when creating new route
[ 1180.960028][T20929] IPv6: NLM_F_CREATE should be set when creating new route
[ 1180.967326][T20929] IPv6: NLM_F_CREATE should be set when creating new route
[ 1180.988505][T20929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1181.075320][T19988] IPVS: starting estimator thread 0...
[ 1181.081770][T20929] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1181.115464][T20944] __nla_validate_parse: 3 callbacks suppressed
[ 1181.115483][T20944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12859'.
[ 1181.137492][T20929] sctp: [Deprecated]: syz.4.12856 (pid 20929) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1181.137492][T20929] Use struct sctp_sack_info instead
[ 1181.175278][T20942] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1181.239115][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12861'.
[ 1181.341249][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12863'.
[ 1181.351293][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12863'.
[ 1181.366593][T20955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12862'.
[ 1181.368803][T20957] syzkaller0: entered promiscuous mode
[ 1181.390449][T20957] syzkaller0: entered allmulticast mode
[ 1181.734509][T20976] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1181.801945][T20976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12869'.
[ 1181.881690][T20979] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1181.890501][T20986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12874'.
[ 1181.901319][T20986] netlink: 'syz.0.12874': attribute type 7 has an invalid length.
[ 1181.911304][T20986] netlink: 'syz.0.12874': attribute type 8 has an invalid length.
[ 1181.911888][T20979] bond3 (unregistering): Released all slaves
[ 1181.919660][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12874'.
[ 1181.946324][T20988] delete_channel: no stack
[ 1181.953627][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12873'.
[ 1181.963898][T20988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12873'.
[ 1181.985933][T20986] team0: entered promiscuous mode
[ 1181.991140][T20986] team_slave_0: entered promiscuous mode
[ 1182.014799][T20986] team_slave_1: entered promiscuous mode
[ 1182.036473][T20986] bond0: entered promiscuous mode
[ 1182.041654][T20986] bond_slave_0: entered promiscuous mode
[ 1182.064368][T20986] bond_slave_1: entered promiscuous mode
[ 1182.096757][T20986] gretap0: entered promiscuous mode
[ 1182.117932][T20986] debugfs: 'hsr1' already exists in 'hsr'
[ 1182.143473][T20986] Cannot create hsr debugfs directory
[ 1182.149800][T20986] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1182.398006][T21012] netlink: 'syz.3.12881': attribute type 10 has an invalid length.
[ 1182.427312][T21012] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[ 1182.494075][T21022] openvswitch: netlink: IP tunnel dst address not specified
[ 1182.537817][T21026] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[ 1182.578374][T21028] --map-set only usable from mangle table
[ 1182.610457][T21028] netlink: 'syz.2.12885': attribute type 10 has an invalid length.
[ 1182.982288][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[ 1182.990521][    C1] lec:lec_tx_timeout: lec0
[ 1183.013767][T21052] geneve3: entered promiscuous mode
[ 1183.208926][T21070] delete_channel: no stack
[ 1183.560781][T21093] ip6gre0: Master is either lo or non-ether device
[ 1183.570136][T21095] block nbd6: Unsupported socket: should be TCP or UNIX.
[ 1184.161294][T21134] ip6gre1: entered allmulticast mode
[ 1184.274395][T21143] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1184.408944][T21157] netlink: 'syz.1.12925': attribute type 83 has an invalid length.
[ 1187.471069][T21172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1187.653587][T21196] x_tables: duplicate entry at hook 3
[ 1187.933352][T21215] syzkaller0: entered promiscuous mode
[ 1187.938964][T21215] syzkaller0: entered allmulticast mode
[ 1188.082440][T21229] __nla_validate_parse: 18 callbacks suppressed
[ 1188.082459][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12948'.
[ 1188.133058][T21229] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1188.239156][T21229] bond1: (slave veth3): Enslaving as a backup interface with a down link
[ 1188.415795][T21242] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12952'.
[ 1188.430705][T21246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12952'.
[ 1188.434389][T21243] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 1188.454790][T21243] bond3: entered promiscuous mode
[ 1188.476950][T21243] bond3: entered allmulticast mode
[ 1188.494424][T21243] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1188.522158][T21253] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12955'.
[ 1188.532790][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12954'.
[ 1188.562773][T21242] netlink: 'syz.4.12952': attribute type 2 has an invalid length.
[ 1188.585737][T21248] netlink: 'syz.3.12954': attribute type 30 has an invalid length.
[ 1188.825232][T21263] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12959'.
[ 1188.862931][T21263] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12959'.
[ 1188.872670][T21263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12959'.
[ 1188.961892][T21281] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[ 1189.265475][T21303] openvswitch: netlink: Message has 52 unknown bytes.
[ 1189.273743][T21303] openvswitch: netlink: Message has 52 unknown bytes.
[ 1189.419536][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12969'.
[ 1189.429274][T21307] tipc: New replicast peer: 255.255.255.255
[ 1189.443996][T21307] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1189.533700][T21298] nbd6: detected capacity change from 0 to 128
[ 1189.574254][T12895] block nbd6: Receive control failed (result -32)
[ 1189.586686][T17003] block nbd6: Dead connection, failed to find a fallback
[ 1189.649422][T17003] block nbd6: shutting down sockets
[ 1189.703200][T17003] blk_print_req_error: 136 callbacks suppressed
[ 1189.703218][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1189.782105][T17003] buffer_io_error: 138 callbacks suppressed
[ 1189.782120][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1189.804835][T21331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12972'.
[ 1189.823925][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1189.843502][T21333] netlink: 'syz.0.12975': attribute type 16 has an invalid length.
[ 1189.863194][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1189.871042][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1189.890977][T21333] netlink: 'syz.0.12975': attribute type 3 has an invalid length.
[ 1189.911902][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1189.926016][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1189.951763][T21331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1189.969734][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.037664][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.074551][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.151294][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.222543][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.265550][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.299749][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.336329][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.402714][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.449925][T17003] ldm_validate_partition_table(): Disk read failed.
[ 1190.495295][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.555401][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.585665][T17003] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1190.619368][T17003] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 1190.646780][T17003] Dev nbd6: unable to read RDB block 0
[ 1190.664252][T21379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1190.673977][T17003]  nbd6: unable to read partition table
[ 1190.743866][T17003] ldm_validate_partition_table(): Disk read failed.
[ 1190.750668][T17003] Dev nbd6: unable to read RDB block 0
[ 1190.799937][T17003]  nbd6: unable to read partition table
[ 1191.017432][T21400] netlink: 'syz.3.12988': attribute type 10 has an invalid length.
[ 1191.066974][T21405] netlink: 'syz.4.12989': attribute type 1 has an invalid length.
[ 1191.619501][T21440] openvswitch: netlink: Duplicate key (type 32).
[ 1191.842154][T21449] netlink: 'syz.4.13002': attribute type 39 has an invalid length.
[ 1192.955054][T21498] netlink: 'syz.2.13018': attribute type 21 has an invalid length.
[ 1192.956294][T21497] netlink: 'syz.2.13018': attribute type 21 has an invalid length.
[ 1193.079058][T21498] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[ 1193.105744][T21492] netlink: set zone limit has 4 unknown bytes
[ 1193.118182][T21498] bond4 (unregistering): Released all slaves
[ 1193.261500][T21497] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[ 1193.285467][T21497] bond4 (unregistering): Released all slaves
[ 1193.670724][T21542] lo: entered promiscuous mode
[ 1193.677902][T21542] netlink: 'syz.1.13028': attribute type 2 has an invalid length.
[ 1193.686716][T21542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1193.704980][T21545] __nla_validate_parse: 10 callbacks suppressed
[ 1193.704995][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13029'.
[ 1194.089442][T21573] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001
[ 1194.119128][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13036'.
[ 1194.139137][ T5489] veth0_vlan: left promiscuous mode
[ 1194.180483][ T5489] veth0_vlan: entered promiscuous mode
[ 1194.336372][T21581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13039'.
[ 1194.364524][T21581] netlink: 43 bytes leftover after parsing attributes in process `syz.4.13039'.
[ 1194.408932][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13039'.
[ 1194.415977][T21581] netlink: 'syz.4.13039': attribute type 5 has an invalid length.
[ 1194.482345][T21581] netlink: 43 bytes leftover after parsing attributes in process `syz.4.13039'.
[ 1194.551388][T21599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1194.610568][T21599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13044'.
[ 1194.732141][T21608] netlink: 'syz.2.13046': attribute type 4 has an invalid length.
[ 1194.878037][T21615] syzkaller1: entered promiscuous mode
[ 1194.887662][T21615] syzkaller1: entered allmulticast mode
[ 1194.901311][T21612] netlink: 'syz.2.13046': attribute type 4 has an invalid length.
[ 1195.398307][T21646] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.13053'.
[ 1195.421774][T21646] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.13053'.
[ 1195.552434][T21649] can: request_module (can-proto-5) failed.
[ 1195.558835][T21624] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1195.566619][T21624] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1195.878391][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1195.909773][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1196.304137][T10378] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.337997][ T1333] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.372734][ T1333] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.381660][ T1333] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.453501][T21667] openvswitch: netlink: Multiple metadata blocks provided
[ 1196.479502][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13058'.
[ 1196.559509][T21670] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1196.586669][T21673] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1196.680783][T21681] vlan2: entered promiscuous mode
[ 1196.695751][T21681] vlan2: entered allmulticast mode
[ 1196.702077][T21681] hsr_slave_1: entered allmulticast mode
[ 1196.776006][T21690] veth0: entered promiscuous mode
[ 1196.970440][T21683] veth0: left promiscuous mode
[ 1196.999688][T12895] Bluetooth: hci1: link tx timeout
[ 1197.007651][T12895] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1197.024174][T12895] Bluetooth: hci1: link tx timeout
[ 1197.029647][T12895] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1197.310940][   T11] block nbd4: Possible stuck request ffff8880548d8000: control (read@0,1024B). Runtime 120 seconds
[ 1197.325624][   T11] block nbd4: Possible stuck request ffff8880548d8200: control (read@1024,1024B). Runtime 120 seconds
[ 1197.338026][   T11] block nbd4: Possible stuck request ffff8880548d8400: control (read@2048,1024B). Runtime 120 seconds
[ 1197.349707][   T11] block nbd4: Possible stuck request ffff8880548d8600: control (read@3072,1024B). Runtime 120 seconds
[ 1198.426964][T21766] gretap0: left promiscuous mode
[ 1198.454290][T21766] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1198.470359][T21766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1198.731829][T21790] __nla_validate_parse: 9 callbacks suppressed
[ 1198.731848][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13095'.
[ 1198.777248][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13096'.
[ 1198.795662][T21790] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13095'.
[ 1199.063026][T12895] Bluetooth: hci1: command 0x0406 tx timeout
[ 1199.283619][T21823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1199.415321][T21832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13105'.
[ 1199.517400][T21845] netlink: 'syz.1.13109': attribute type 16 has an invalid length.
[ 1199.526072][T21845] netlink: 'syz.1.13109': attribute type 17 has an invalid length.
[ 1199.534976][T21845] lo: left promiscuous mode
[ 1199.636316][T21853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13109'.
[ 1199.639022][T21845] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.652862][T21845] bridge0: port 2(bridge_slave_1) entered listening state
[ 1199.660276][T21845] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1199.667490][T21845] bridge0: port 1(bridge_slave_0) entered listening state
[ 1199.700680][T21854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13110'.
[ 1199.711970][T21845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1199.773234][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[ 1199.777348][T21858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13110'.
[ 1199.824682][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13112'.
[ 1199.860680][T21862] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[ 1199.968426][T21868] netlink: 'syz.0.13115': attribute type 1 has an invalid length.
[ 1199.984460][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13115'.
[ 1200.006423][T21866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1200.097823][T21870] netlink: 'syz.2.13116': attribute type 1 has an invalid length.
[ 1200.115880][T21870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13116'.
[ 1200.216271][T21885] virt_wifi0 speed is unknown, defaulting to 1000
[ 1200.234343][T21885] ip6_vti0 speed is unknown, defaulting to 1000
[ 1200.806227][T21912] syzkaller0: entered allmulticast mode
[ 1201.157149][T12895] Bluetooth: hci1: command 0x0406 tx timeout
[ 1201.188087][T21945] macvlan0: entered promiscuous mode
[ 1201.825818][T21972] syzkaller1: entered promiscuous mode
[ 1201.831406][T21972] syzkaller1: entered allmulticast mode
[ 1202.130419][T21992] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[ 1202.178632][T21992] bond4 (unregistering): Released all slaves
[ 1202.680650][T22028] netlink: 'syz.1.13153': attribute type 2 has an invalid length.
[ 1202.729056][T22030] bridge0: port 2(dummy0) entered disabled state
[ 1202.735792][T22030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.376670][T22077] netlink: 'syz.3.13167': attribute type 21 has an invalid length.
[ 1203.387608][T22077] netlink: 'syz.3.13167': attribute type 22 has an invalid length.
[ 1203.401135][T22077] netlink: 'syz.3.13167': attribute type 23 has an invalid length.
[ 1203.428947][T22077] netlink: 'syz.3.13167': attribute type 25 has an invalid length.
[ 1203.776517][T22112] __nla_validate_parse: 9 callbacks suppressed
[ 1203.776533][T22112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13178'.
[ 1203.832523][T22112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13178'.
[ 1203.955494][T22112] gretap1: entered promiscuous mode
[ 1203.961403][T22112] gretap1: entered allmulticast mode
[ 1204.056731][T22125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13181'.
[ 1204.078151][T22125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13181'.
[ 1204.078481][T10378] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1204.124772][T22129] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13181'.
[ 1204.134594][T10378] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1204.134638][T10378] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1204.134683][T10378] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1204.204732][T22135] netlink: 'syz.0.13184': attribute type 12 has an invalid length.
[ 1204.248085][T22128] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[ 1204.305089][T22142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13185'.
[ 1204.637402][T22165] syzkaller0: entered promiscuous mode
[ 1204.643064][T22165] syzkaller0: entered allmulticast mode
[ 1204.729303][T22170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13191'.
[ 1205.038582][T22193] sock: sock_set_timeout: `syz.0.13195' (pid 22193) tries to set negative timeout
[ 1205.136178][T22196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13196'.
[ 1205.246402][T22200] SET target dimension over the limit!
[ 1205.696929][T22222] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1205.775853][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13203'.
[ 1206.007571][T22239] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13206'.
[ 1206.190134][T22249] bond4: entered promiscuous mode
[ 1206.230411][T22258] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1206.257458][T22249] macvlan2: entered promiscuous mode
[ 1206.275061][T22249] macvlan2: entered allmulticast mode
[ 1206.281749][T22249] bond4: (slave macvlan2): Opening slave failed
[ 1206.556520][T10358] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1206.589915][T10358] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1206.614535][T10358] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1206.626798][T10358] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1207.255617][T22312] netlink: 'syz.4.13223': attribute type 1 has an invalid length.
[ 1207.497591][T22329] netlink: 'syz.3.13228': attribute type 1 has an invalid length.
[ 1207.524331][T22329] netlink: 'syz.3.13228': attribute type 1 has an invalid length.
[ 1207.556679][T22329] netlink: 'syz.3.13228': attribute type 8 has an invalid length.
[ 1207.908500][T22356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1207.916691][T22356] syzkaller0: entered promiscuous mode
[ 1207.922669][T22356] syzkaller0: entered allmulticast mode
[ 1207.936305][T22356] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1207.988078][T22353] tipc: Resetting bearer <eth:syzkaller0>
[ 1208.041106][T22353] tipc: Disabling bearer <eth:syzkaller0>
[ 1208.265721][T22374] Cannot find set identified by id 0 to match
[ 1208.273002][T22374] netlink: 'syz.2.13238': attribute type 9 has an invalid length.
[ 1208.461280][T22389] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1208.647387][T22395] bond4: invalid ARP target 0.0.0.0 specified for addition
[ 1208.655537][T22395] bond4: option arp_ip_target: invalid value (0)
[ 1208.667964][T22395] bond4 (unregistering): Released all slaves
[ 1208.703579][T22390] bond5: (slave dummy0): Enslaving as an active interface with an up link
[ 1208.816455][T22415] __nla_validate_parse: 13 callbacks suppressed
[ 1208.816474][T22415] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13250'.
[ 1208.983959][T22426] netlink: 'syz.0.13253': attribute type 1 has an invalid length.
[ 1208.992661][T22426] netlink: 'syz.0.13253': attribute type 3 has an invalid length.
[ 1209.000618][T22426] netlink: 'syz.0.13253': attribute type 7 has an invalid length.
[ 1209.019851][T22426] netlink: 'syz.0.13253': attribute type 8 has an invalid length.
[ 1209.028790][T22426] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13253'.
[ 1209.029612][T22389] bond5 (unregistering): (slave dummy0): Releasing backup interface
[ 1209.039442][T22426] NCSI netlink: No device for ifindex 131092
[ 1209.056695][T22389] bond5 (unregistering): Released all slaves
[ 1209.163691][T22430] netlink: 'syz.3.13254': attribute type 1 has an invalid length.
[ 1209.184704][T22430] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.13254'.
[ 1209.234685][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13256'.
[ 1209.251316][T22432] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1209.474282][T22456] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.13263'.
[ 1209.491921][T22456] netlink: Unknown conntrack attr (0)
[ 1209.543352][T22456] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.13263'.
[ 1209.554983][T22456] netlink: Unknown conntrack attr (0)
[ 1209.809214][T22482] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1209.890930][T22486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1209.900024][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1209.955033][T22490] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13274'.
[ 1209.969843][T22486] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1209.997610][T22492] netlink: 388 bytes leftover after parsing attributes in process `syz.0.13272'.
[ 1210.076937][T22498] sctp: [Deprecated]: syz.4.13276 (pid 22498) Use of int in maxseg socket option.
[ 1210.076937][T22498] Use struct sctp_assoc_value instead
[ 1210.221952][T22508] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13280'.
[ 1210.232137][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13280'.
[ 1210.407762][T22527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1210.687271][T22550] netlink: ct family unspecified
[ 1210.882063][T22566] openvswitch: netlink: IP tunnel dst address not specified
[ 1211.357006][T22592] bond5: entered promiscuous mode
[ 1211.373934][T22592] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1211.480204][T22592] bond5: (slave bridge3): making interface the new active one
[ 1211.503240][T22592] bridge3: entered promiscuous mode
[ 1211.516009][T22592] bond5: (slave bridge3): Enslaving as an active interface with an up link
[ 1212.044366][T22637] delete_channel: no stack
[ 1212.049092][T22637] delete_channel: no stack
[ 1212.067878][T22637] delete_channel: no stack
[ 1212.096046][T22637] delete_channel: no stack
[ 1212.100913][T22637] delete_channel: no stack
[ 1212.132497][T22637] delete_channel: no stack
[ 1212.137131][T22637] delete_channel: no stack
[ 1212.141677][T22637] delete_channel: no stack
[ 1212.155181][T22637] delete_channel: no stack
[ 1212.164687][T22637] delete_channel: no stack
[ 1212.170642][T22637] delete_channel: no stack
[ 1212.175853][T22637] delete_channel: no stack
[ 1212.183460][T22637] delete_channel: no stack
[ 1212.188104][T22637] delete_channel: no stack
[ 1212.222673][T22637] delete_channel: no stack
[ 1212.228006][T22637] delete_channel: no stack
[ 1212.251542][T22637] delete_channel: no stack
[ 1212.260366][T22647] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1212.277390][T22637] delete_channel: no stack
[ 1212.285833][T22637] delete_channel: no stack
[ 1212.291673][T22637] delete_channel: no stack
[ 1212.296849][T22637] delete_channel: no stack
[ 1212.322801][T22637] delete_channel: no stack
[ 1212.335596][T22637] delete_channel: no stack
[ 1212.348062][T22666] Bluetooth: MGMT ver 1.23
[ 1212.375833][T22647] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1212.411045][T22640] delete_channel: no stack
[ 1212.415557][T22647] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1212.425516][T22640] delete_channel: no stack
[ 1212.430305][T22640] delete_channel: no stack
[ 1212.447000][T22640] delete_channel: no stack
[ 1212.451757][T22640] delete_channel: no stack
[ 1212.457628][T22640] delete_channel: no stack
[ 1212.488954][T22647] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1212.522553][T22647] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1212.559979][T22647] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1212.595343][T22647] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1212.622927][T22640] delete_channel: no stack
[ 1212.627788][T22640] delete_channel: no stack
[ 1212.660921][T22640] delete_channel: no stack
[ 1212.678519][T22640] delete_channel: no stack
[ 1212.725276][T22647] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1212.834437][T22647] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1212.868482][T22696] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1212.892975][T22697] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1212.918529][T22647] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[ 1213.156448][T22723] syzkaller0: entered promiscuous mode
[ 1213.171519][T22723] syzkaller0: entered allmulticast mode
[ 1213.263548][T22720] virt_wifi0 speed is unknown, defaulting to 1000
[ 1213.271819][T22720] ip6_vti0 speed is unknown, defaulting to 1000
[ 1213.723192][T22752] xt_l2tp: v2 tid > 0xffff: 1114244
[ 1213.758937][T22749] virt_wifi0 speed is unknown, defaulting to 1000
[ 1213.795312][T22753] IPVS: Unknown mcast interface: vcan0
[ 1213.803838][T22749] ip6_vti0 speed is unknown, defaulting to 1000
[ 1213.916666][T22757] __nla_validate_parse: 96 callbacks suppressed
[ 1213.916688][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13340'.
[ 1214.063611][T22727] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13326'.
[ 1214.113700][T22769] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13341'.
[ 1216.928269][T22762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1217.208730][T22827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13355'.
[ 1217.275965][T22832] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1217.370393][T22835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1217.411248][T22837] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1217.651751][T22842] syzkaller1: entered promiscuous mode
[ 1217.661953][T22842] syzkaller1: entered allmulticast mode
[ 1217.678012][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13364'.
[ 1217.730296][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13364'.
[ 1217.738481][T22859] netlink: 220 bytes leftover after parsing attributes in process `syz.2.13365'.
[ 1217.750953][T22859] validate_nla: 8 callbacks suppressed
[ 1217.750973][T22859] netlink: 'syz.2.13365': attribute type 2 has an invalid length.
[ 1217.860981][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13367'.
[ 1218.065208][T22879] netlink: 'syz.1.13373': attribute type 1 has an invalid length.
[ 1218.083340][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13373'.
[ 1218.135116][T22884] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.13376'.
[ 1218.160714][T22884] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[ 1218.205120][T22887] x_tables: duplicate underflow at hook 1
[ 1218.523253][T22902] netlink: 'syz.3.13382': attribute type 2 has an invalid length.
[ 1218.559351][T22904] syzkaller0: entered promiscuous mode
[ 1218.579753][T22904] syzkaller0: entered allmulticast mode
[ 1218.600297][T22904] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1218.624984][T22904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1218.632383][T22904] IPv6: NLM_F_CREATE should be set when creating new route
[ 1219.047333][T22944] __nla_validate_parse: 6 callbacks suppressed
[ 1219.047352][T22944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13395'.
[ 1219.091174][T22950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13399'.
[ 1219.106506][T22950] netlink: 'syz.3.13399': attribute type 21 has an invalid length.
[ 1219.144211][T22950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13399'.
[ 1219.165259][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13395'.
[ 1219.487831][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13408'.
[ 1219.953494][T22967] lec:lec_atm_close: lec0: Shut down!
[ 1220.224342][T23021] netlink: 'syz.3.13419': attribute type 1 has an invalid length.
[ 1220.358873][T23032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1220.527435][T23047] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.13425'.
[ 1220.717453][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13431'.
[ 1220.906813][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13434'.
[ 1220.921670][T23072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1220.965182][T23075] "syz.4.13435" (23075) uses obsolete ecb(arc4) skcipher
[ 1221.109223][T23082] dvmrp0: entered allmulticast mode
[ 1221.159514][T23084] dvmrp0: left allmulticast mode
[ 1221.411240][T23106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1221.590118][T23130] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1221.757121][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13456'.
[ 1221.830622][T23154] netlink: 'syz.2.13458': attribute type 1 has an invalid length.
[ 1221.919297][T23162] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1222.070600][T23169] netlink: 'syz.2.13462': attribute type 1 has an invalid length.
[ 1222.080055][T23169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13462'.
[ 1222.287185][T23183] syzkaller1: entered promiscuous mode
[ 1222.293005][T23183] syzkaller1: entered allmulticast mode
[ 1222.518803][T23205] netlink: 'syz.3.13473': attribute type 1 has an invalid length.
[ 1222.582093][T23205] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1222.693299][T23215] veth0: entered promiscuous mode
[ 1222.700103][T23213] veth0: left promiscuous mode
[ 1222.790931][T23219] bridge3: entered promiscuous mode
[ 1222.805417][T23219] bridge3: entered allmulticast mode
[ 1222.826764][T23219] team0: Port device bridge3 added
[ 1222.844642][T23217] bridge0: port 3(team0) entered blocking state
[ 1222.853627][T23217] bridge0: port 3(team0) entered disabled state
[ 1222.867149][T23217] team0: entered allmulticast mode
[ 1222.874442][T23217] team_slave_0: entered allmulticast mode
[ 1222.880501][T23217] team_slave_1: entered allmulticast mode
[ 1222.891049][T23217] team0: entered promiscuous mode
[ 1222.897751][T23217] team_slave_0: entered promiscuous mode
[ 1222.909401][T23217] team_slave_1: entered promiscuous mode
[ 1222.969663][T23232] ip6gre1: entered promiscuous mode
[ 1222.990024][T23232] team0: Device ip6gre1 is of different type
[ 1224.142671][T23309] netlink: 'syz.1.13501': attribute type 75 has an invalid length.
[ 1224.396480][T23319] netlink: 'syz.1.13503': attribute type 3 has an invalid length.
[ 1224.548794][T23329] __nla_validate_parse: 12 callbacks suppressed
[ 1224.548813][T23329] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13508'.
[ 1224.578516][T23330] netlink: 'syz.0.13507': attribute type 1 has an invalid length.
[ 1224.595388][T23334] xt_l2tp: invalid flags combination: 0
[ 1224.612505][T23332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1224.640558][T23332] syzkaller0: entered promiscuous mode
[ 1224.646955][T23332] syzkaller0: entered allmulticast mode
[ 1224.718834][T23343] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1224.727204][T23344] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1224.736857][T23332] tipc: Resetting bearer <eth:syzkaller0>
[ 1224.753749][T23343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1224.755724][T23344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1224.776795][T23331] tipc: Resetting bearer <eth:syzkaller0>
[ 1224.798048][T23331] tipc: Disabling bearer <eth:syzkaller0>
[ 1224.804923][T23342] x_tables: duplicate underflow at hook 2
[ 1224.811734][T23342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13512'.
[ 1224.982732][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[ 1224.990771][    C1] lec:lec_tx_timeout: lec0
[ 1225.009401][T23362] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13519'.
[ 1225.014229][T23358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13516'.
[ 1225.135009][T23370] IPVS: Scheduler module ip_vs_sip not found
[ 1225.156131][T23372] IPVS: Scheduler module ip_vs_sip not found
[ 1225.244043][T23378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13521'.
[ 1225.474502][T23391] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.13523'.
[ 1226.127675][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13530'.
[ 1226.141127][T23411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13529'.
[ 1226.219548][T12594] lec:lec_start_xmit: lec0:No lecd attached
[ 1226.465795][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13540'.
[ 1226.835218][T23460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1226.842540][T23460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1226.959641][T23470] netlink: 'syz.1.13550': attribute type 1 has an invalid length.
[ 1226.997168][T23470] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1227.010908][T23473] netlink: 'syz.0.13551': attribute type 1 has an invalid length.
[ 1227.058039][T23473] bond3: entered promiscuous mode
[ 1227.064875][T23473] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1227.076636][T23470] bond4: (slave dummy0): Device is not bonding slave
[ 1227.084970][T23470] bond4: option active_slave: invalid value (dummy0)
[ 1227.133204][T23473] bond3: (slave bridge2): making interface the new active one
[ 1227.149001][T23473] bridge2: entered promiscuous mode
[ 1227.156941][T23473] bond3: (slave bridge2): Enslaving as an active interface with an up link
[ 1227.386876][   T11] block nbd4: Possible stuck request ffff8880548d8000: control (read@0,1024B). Runtime 150 seconds
[ 1227.399502][   T11] block nbd4: Possible stuck request ffff8880548d8200: control (read@1024,1024B). Runtime 150 seconds
[ 1227.411540][   T11] block nbd4: Possible stuck request ffff8880548d8400: control (read@2048,1024B). Runtime 150 seconds
[ 1227.423581][   T11] block nbd4: Possible stuck request ffff8880548d8600: control (read@3072,1024B). Runtime 150 seconds
[ 1227.632143][T23512] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1227.697254][T23522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13568'.
[ 1228.153697][T23558] netlink: 'syz.3.13579': attribute type 11 has an invalid length.
[ 1228.409367][T23571] macvtap1: entered promiscuous mode
[ 1228.416039][T23571] vlan0: entered promiscuous mode
[ 1228.421561][T23571] macvtap1: entered allmulticast mode
[ 1228.427350][T23571] vlan0: entered allmulticast mode
[ 1228.432745][T23571] veth0_vlan: entered allmulticast mode
[ 1228.963359][T23617] mac80211_hwsim hwsim141 wlan0: entered promiscuous mode
[ 1229.004079][T23618] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1229.064864][T23625] netlink: 'syz.0.13599': attribute type 3 has an invalid length.
[ 1229.197462][T23637] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004
[ 1229.208591][T23635] lo: entered promiscuous mode
[ 1229.227379][T23639] netlink: 'syz.2.13604': attribute type 3 has an invalid length.
[ 1229.236413][T23635] tunl0: entered promiscuous mode
[ 1229.271672][T23635] gre0: entered promiscuous mode
[ 1229.301477][T23635] 0ªX¹¦Dö»: entered promiscuous mode
[ 1229.332311][T23635] 0ªX¹¦Dö»: left allmulticast mode
[ 1229.380900][T23635] erspan0: entered promiscuous mode
[ 1229.388079][T23647] netlink: 'syz.4.13606': attribute type 7 has an invalid length.
[ 1229.395932][T23635] ip_vti0: entered promiscuous mode
[ 1229.525250][T23655] gtp0: entered promiscuous mode
[ 1229.560768][T23655] gtp0: entered allmulticast mode
[ 1229.657586][T23664] netlink: 'syz.2.13611': attribute type 1 has an invalid length.
[ 1229.676313][T23664] __nla_validate_parse: 16 callbacks suppressed
[ 1229.676444][T23664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13611'.
[ 1229.810049][T23675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13614'.
[ 1230.052487][T23691] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13618'.
[ 1230.413700][T23723] nbd: couldn't find a device at index 2
[ 1230.747681][T12895] Bluetooth: hci3: command 0x0405 tx timeout
[ 1230.810616][T23719] vlan0 (unregistering): left allmulticast mode
[ 1230.822882][T23719] veth0_vlan (unregistering): left allmulticast mode
[ 1230.829723][T23719] vlan0 (unregistering): left promiscuous mode
[ 1231.563071][T23731] syzkaller0: entered promiscuous mode
[ 1231.572082][T23731] syzkaller0: entered allmulticast mode
[ 1231.591141][T23747] netem: change failed
[ 1231.825123][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13637'.
[ 1232.022736][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms
[ 1232.030806][    C1] lec:lec_tx_timeout: lec0
[ 1232.050954][T23788] syzkaller0: entered promiscuous mode
[ 1232.068422][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13642'.
[ 1232.089037][T23788] syzkaller0: entered allmulticast mode
[ 1232.099914][T23793] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13643'.
[ 1232.118454][T23791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13642'.
[ 1232.135464][T23794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13643'.
[ 1232.277347][T23805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13646'.
[ 1232.342666][T23816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13647'.
[ 1232.611018][T23836] netlink: 'syz.2.13654': attribute type 1 has an invalid length.
[ 1232.926663][T23862] gre2: entered promiscuous mode
[ 1232.932060][T23862] gre2: entered allmulticast mode
[ 1233.084618][T23873] syzkaller0: entered promiscuous mode
[ 1233.096094][T23873] syzkaller0: entered allmulticast mode
[ 1233.209723][T23878] netlink: 'syz.1.13667': attribute type 21 has an invalid length.
[ 1233.219883][T23878] netlink: 'syz.1.13667': attribute type 21 has an invalid length.
[ 1233.220248][T23880] lo: entered allmulticast mode
[ 1233.325728][T23884] pim6reg527: entered allmulticast mode
[ 1233.420245][T23891] nbd: nbd1 already in use
[ 1233.436722][T23891] block nbd1: NBD_DISCONNECT
[ 1233.447865][T23891] block nbd1: Send disconnect failed -32
[ 1233.455518][T23891] block nbd1: shutting down sockets
[ 1233.483464][T23894] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 1233.551559][T23891] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1233.707568][T23917] ip6gre2: entered allmulticast mode
[ 1233.744072][T23919] siw: device registration error -23
[ 1233.906658][T23927] netlink: 'syz.3.13682': attribute type 3 has an invalid length.
[ 1233.945448][T23927] 
[ 1233.947886][T23927] ============================================
[ 1233.954029][T23927] WARNING: possible recursive locking detected
[ 1233.960199][T23927] syzkaller #0 Not tainted
[ 1233.964616][T23927] --------------------------------------------
[ 1233.970766][T23927] syz.3.13682/23927 is trying to acquire lock:
[ 1233.976921][T23927] ffff88805d530d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: __netdev_update_features+0xcdc/0x1de0
[ 1233.988014][T23927] 
[ 1233.988014][T23927] but task is already holding lock:
[ 1233.995385][T23927] ffff88805d530d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0
[ 1234.005312][T23927] and the lock comparison function returns 0:
[ 1234.011363][T23927] 
[ 1234.011363][T23927] other info that might help us debug this:
[ 1234.019411][T23927]  Possible unsafe locking scenario:
[ 1234.019411][T23927] 
[ 1234.026863][T23927]        CPU0
[ 1234.030140][T23927]        ----
[ 1234.033401][T23927]   lock(&dev_instance_lock_key#24);
[ 1234.038683][T23927]   lock(&dev_instance_lock_key#24);
[ 1234.043961][T23927] 
[ 1234.043961][T23927]  *** DEADLOCK ***
[ 1234.043961][T23927] 
[ 1234.052090][T23927]  May be due to missing lock nesting notation
[ 1234.052090][T23927] 
[ 1234.060407][T23927] 2 locks held by syz.3.13682/23927:
[ 1234.065709][T23927]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0
[ 1234.074696][T23927]  #1: ffff88805d530d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0
[ 1234.084993][T23927] 
[ 1234.084993][T23927] stack backtrace:
[ 1234.090875][T23927] CPU: 1 UID: 0 PID: 23927 Comm: syz.3.13682 Not tainted syzkaller #0 PREEMPT(full) 
[ 1234.090896][T23927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1234.090913][T23927] Call Trace:
[ 1234.090920][T23927]  <TASK>
[ 1234.090929][T23927]  dump_stack_lvl+0xe8/0x150
[ 1234.090952][T23927]  print_deadlock_bug+0x279/0x290
[ 1234.090971][T23927]  __lock_acquire+0x253f/0x2cf0
[ 1234.090995][T23927]  ? is_bpf_text_address+0x292/0x2b0
[ 1234.091013][T23927]  ? is_bpf_text_address+0x26/0x2b0
[ 1234.091030][T23927]  ? kernel_text_address+0xa5/0xe0
[ 1234.091048][T23927]  ? __kernel_text_address+0xd/0x30
[ 1234.091066][T23927]  ? __netdev_update_features+0xcdc/0x1de0
[ 1234.091087][T23927]  lock_acquire+0x106/0x330
[ 1234.091105][T23927]  ? __netdev_update_features+0xcdc/0x1de0
[ 1234.091130][T23927]  __mutex_lock+0x19f/0x1300
[ 1234.091147][T23927]  ? __netdev_update_features+0xcdc/0x1de0
[ 1234.091167][T23927]  ? stack_depot_save_flags+0x33/0x810
[ 1234.091192][T23927]  ? kasan_save_track+0x3e/0x80
[ 1234.091206][T23927]  ? kasan_save_free_info+0x46/0x50
[ 1234.091225][T23927]  ? __kasan_slab_free+0x5c/0x80
[ 1234.091240][T23927]  ? __netdev_update_features+0xcdc/0x1de0
[ 1234.091260][T23927]  ? netlink_broadcast_filtered+0xee4/0x1020
[ 1234.091282][T23927]  ? ethnl_default_notify+0x95a/0xbe0
[ 1234.091299][T23927]  ? ethnl_netdev_event+0xe2/0x160
[ 1234.091317][T23927]  ? __pfx___mutex_lock+0x10/0x10
[ 1234.091334][T23927]  ? bond_fix_features+0x19b/0x1e0
[ 1234.091349][T23927]  ? __pfx_bond_fix_features+0x10/0x10
[ 1234.091367][T23927]  __netdev_update_features+0xcdc/0x1de0
[ 1234.091392][T23927]  ? __pfx___netdev_update_features+0x10/0x10
[ 1234.091411][T23927]  ? cfg80211_netdev_notifier_call+0xd59/0x13c0
[ 1234.091430][T23927]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1234.091444][T23927]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1234.091459][T23927]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[ 1234.091476][T23927]  ? __wake_up_common_lock+0x190/0x1f0
[ 1234.091495][T23927]  ? consume_skb+0x89/0xb0
[ 1234.091512][T23927]  ? netlink_broadcast_filtered+0xf72/0x1020
[ 1234.091540][T23927]  netdev_compute_master_upper_features+0x8eb/0xac0
[ 1234.091560][T23927]  ? __pfx_netdev_compute_master_upper_features+0x10/0x10
[ 1234.091578][T23927]  bond_netdev_event+0x71f/0xfc0
[ 1234.091596][T23927]  ? __pfx_bond_netdev_event+0x10/0x10
[ 1234.091612][T23927]  ? inetdev_event+0x483/0x1610
[ 1234.091631][T23927]  ? igmp_netdev_event+0x7c/0x750
[ 1234.091649][T23927]  ? ipmr_device_event+0x1d0/0x200
[ 1234.091668][T23927]  notifier_call_chain+0x19d/0x3a0
[ 1234.091687][T23927]  netdev_features_change+0x8d/0xd0
[ 1234.091703][T23927]  ? __pfx_netdev_features_change+0x10/0x10
[ 1234.091719][T23927]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1234.091734][T23927]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1234.091749][T23927]  dev_ethtool+0x162c/0x1ae0
[ 1234.091771][T23927]  ? __pfx_dev_ethtool+0x10/0x10
[ 1234.091787][T23927]  ? dev_load+0x21/0x1f0
[ 1234.091807][T23927]  ? dev_load+0x21/0x1f0
[ 1234.091822][T23927]  dev_ioctl+0x392/0x1150
[ 1234.091840][T23927]  sock_do_ioctl+0x23e/0x320
[ 1234.091854][T23927]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1234.091867][T23927]  ? do_futex+0x395/0x420
[ 1234.091892][T23927]  sock_ioctl+0x5c6/0x7f0
[ 1234.091913][T23927]  ? __pfx_sock_ioctl+0x10/0x10
[ 1234.091933][T23927]  ? __fget_files+0x2a/0x420
[ 1234.091948][T23927]  ? __fget_files+0x3a0/0x420
[ 1234.091963][T23927]  ? __fget_files+0x2a/0x420
[ 1234.091979][T23927]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1234.091996][T23927]  ? __pfx_sock_ioctl+0x10/0x10
[ 1234.092015][T23927]  __se_sys_ioctl+0xfc/0x170
[ 1234.092036][T23927]  do_syscall_64+0xe2/0xf80
[ 1234.092051][T23927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.092066][T23927]  ? trace_irq_disable+0x37/0x100
[ 1234.092080][T23927]  ? clear_bhb_loop+0x60/0xb0
[ 1234.092096][T23927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1234.092110][T23927] RIP: 0033:0x7f8a4dd9aeb9
[ 1234.092127][T23927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1234.092141][T23927] RSP: 002b:00007f8a4ed27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1234.092158][T23927] RAX: ffffffffffffffda RBX: 00007f8a4e015fa0 RCX: 00007f8a4dd9aeb9
[ 1234.092170][T23927] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006
[ 1234.092187][T23927] RBP: 00007f8a4de08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1234.092198][T23927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1234.092208][T23927] R13: 00007f8a4e016038 R14: 00007f8a4e015fa0 R15: 00007fff26ccbc08
[ 1234.092227][T23927]  </TASK>
[ 1235.872334][ T5828] Bluetooth: hci4: command 0x0406 tx timeout
[ 1238.906341][ T1299] lec:lec_start_xmit: lec0:No lecd attached