last executing test programs:

2.930315698s ago: executing program 1 (id=4432):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x109, &(0x7f0000000640)=""/265, 0x41000}, 0x94)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000400000000000019078ac1e0001ac1414aa030490781200183f270000000000fffd00010000e00000017f000001940480009404000000186371ae9b1c03"], 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0xbdc1d0af1494ad1f, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6)

2.85981488s ago: executing program 0 (id=4433):
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000e500fcff00000102850060089db508ff521f12d1da94988c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac14"], 0x78}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async)
sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x3}, 0x18) (async)
socket(0x1d, 0x2, 0x6) (async)
gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$can_j1939(r0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r7, 0xbd4a9000)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006800010026bd86491e6fc8d194177000fddbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x4}, 0x2, 0xfe}], 0xff6f)
r11 = socket(0x11, 0x800, 0x0)
sendmsg$inet(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="90f4a8db16bd11744287b779a52e269a098f3980dc4725fb689c97d765752e76448eff5dbf1b25a078614408dcf4a85538288686b91009d5013e6bc80dd11ce3cc416cff658a37c4f99468a6bc431951836d2796f47179415bd0db5a210c56de6d4125380f4c7ea18dc7df9ecd02766dad79bf347b137e55c59063bd0a6f239c2b9355ff028d61a7b38d234ad0c8a1e262d0b34e49292791aaaee47080558620d8b3b4ee13d848158f9b5e7fd300a18d9dd5307a71eb4d53dc22e0880da09a0cbf34c8533fa0052591ec538a2301f2dc", 0xd0}, {&(0x7f0000000100)="2f8048980e7b2a6bf278d3096c3360bffc44adf37f02150bc8f1048080e52eb2bc6e44d238610e07aad048bb6f07c93b3fdea1d5b77dbae0c56cb47dc25378420a8671ed8644a357ae8274e2b796401e17ad53a0edbd1ea5ea55805032c6b1121f98ed4c198812ebb82eec0ed810c6a45f74ff8c0d986b7b0ab07d7d6d576b3cc35ab462db494ccc63d8d65c319aa3d48f1f37e5d2025f7b3850fa74e254aef134ccf9a1be420e03208a4ef5e9067a210b06769a97aeab5d69f028fa6712bb3354b4a2e23aa6a7e840dbb7ff92ef141b31c4af650d31bf47eab101b4f628698dd6f3bb1e9b6169fab2b1", 0xea}, {&(0x7f0000000840)="2d03e00230c37e8bac842cc026c2d765978d0066bebf23f83ea2c11d01a2f3a9a2d14eda12fca0317fb2525f2940ebd483e2753101271902a2abee8ae146f70a278660182024e994a6f2e5bd2cdee94c0353bff8794b5297f471d9a64308ff5b6d2dfb4083b2381ea022e8442c6dce99aab0eae0dbc7001664a911e8a57df7a0393a841cf1e24d123bf31a708d22d1d8f7d7ceceaf890137ec5d115e81f24e0e61ff4652816c29a56201c67291fe7165c1d424b1d645324d6f9a36e1ad7e70b870540cb150f29a1a208617e01432a42d128c00da1b104b9cd61a746a3b0d0bc6a87fbb98deeb67dbcf0f4da583f509820017ab10a23ef1c0de", 0xf9}, {&(0x7f0000000400)="f608e022384da19c22715cac624107c8b427d89c73ed385c16ae18441c10413630495e03f8ed8d03f41f66d78562ec91e5a384557a561f9703398e4adf6322d2b5b061c38838d088094a3ca89e012bc18b82d395e05800d2046e77c5b7867af25ec7eaa981cca7fe", 0x68}, {&(0x7f0000000580)="e48348fcfda736e5703b575c7b891bc0b3490b14611735d902f969ad2e8dcf46022b6f7203ec26fdddcfecf7f361c41baf20429deab94892d9a23316ac7085417ef1cd227e13ffb5a186a40accc46ff26e48baaf48e674b608a6dfebd1047733f06b15858c62feb1376a8373a59e9c0c", 0x70}, {&(0x7f0000000940)="cb689efc028bc2859bfedadf0a4119b0a61736c7db637837c38276e629b1ee0d0424ed45e8774a857d107ad5818e563bf2e8d3225c89dddbd26130dd5125d24676c4bbd8226c176e134f1e4d1be164e3b43f6bf15af07ac4202d0db2291dcb1326be5267368a15a52a23382925cc228f44ddb48bdfd7ceb23035a0d347e0196168030516eeefd11d71dfaec815348c1a78ea13382670c48427852494fc1273d64ba023f05ade612136a706742ca3886d20", 0xb1}, {&(0x7f0000000640)="230bb4f4b6ec75d9a71ee408512425e8b87a6331e442154c41c7b0279b72267cdf27a326d4a6cb478711f420594469636aeb34d12a826e96c3309fba66619216aa10df1694f83fd2b045c7f07979325f2ab171bf2c4241a5d65a0d7e6ea2c849e535736a9587e4476947c009264ed4d469a6892c150ec34327e59e1198b3dc2c7a7b0198c05b309583f9234ae347a0b4352d8237813365bdbc76af864465fd9f9be088418a326e78294c3f659b6b3ea102095de46f9aae56a6d1e9ad19fa5349e4302563300517174a59c1a1", 0xcc}], 0x7, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x180000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0x30}, 0x1)

2.859433335s ago: executing program 2 (id=4434):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x19}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_timeval(r1, 0x1, 0x3c, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x2f}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, @in={0x2, 0x4e20, @private=0xa010102}], 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket(0x15, 0x80005, 0x0)
getsockopt(r6, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000))
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ec0)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}]}, 0x38}}, 0x8000)

2.501405185s ago: executing program 4 (id=4435):
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x158, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb833}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}]}, 0x158}, 0x1, 0x0, 0x0, 0x200040c0}, 0x45)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x810)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x21}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x9a6b739b9388a9d5}, 0x10000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000600))
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x0, 0x86, 0xffff0000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x84]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x8010)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf40b23af6abe8f20, 0x8}, {0xfff3, 0x7}, {0xfff2, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000a00)={0x6, 'vlan1\x00', {0x5}, 0x2})
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000a40)={0x3, 0x6}, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r10, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008480}, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000bc0)={0x2, 0x58e})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000c00)={0x20000004})
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000f40)={{'\x00', 0x1}, {0xfffffffffffffffa}, 0xca79915a4e1edb2a, 0x0, 0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)="8ad658e7763ab3d119a2c858c5fec65e838a0ebc165f1c5ec814ea644286bee117e8a3fc71ac0622b64f6c8360ac557d6cb870de1a545dc68259616323e73b7b82d8ceff76eb", 0x46, 0x0, &(0x7f0000000d40)={0x2, 0x119, {0x0, 0xc, 0xb9, "5b6cc3fc49f0c379341e1ce03288cf312657bee6ea6030d134dfe8902eb541d90d17f608ccc806f02b6e4c260609017ab58f345b0b20137a6eb0c1b2e09df0c6f39597d231b32c35f92421500ae3243307272f9df5ddc372c948a72cd3ecb793692fce30a8a27c464d56004bf6f2b4d89bc58ec92804262017e5e5784fb75d7000d72a8ae97711fe0a22ba9d2a7740b904223551f3812bf230a28e2a5d4120b52f79db5d41798543e18c632f0094ab9951554f0cac25116572", 0x53, "61be6cdc10fd5e8c6f465d06e6d703bac4a064cef25fab75b15d86e9133e35307b8b6519d2dc2d5484abdcfff94c3eaf23fc73ef6468d0fb67fe446845546d042773894e5ac01c428191a08a563c76b3257c1a"}, 0xc2, "4c7d4bf02eeb9201a99db2aa6d8c93476dfffe795e33851c668204ad223af73e4c9c9aa4625358b7af89b392cf0451aed57a4d6cb5514bda8ec5cebfc99f87b67e844466d0e77bb2145404d6d55dfde83d28370c94af048204d395f08acc9945f056318ca17c03fbf90158e467417de6e6329810eceadc12c9f5688fa90c518ac31016d14611c8e95145d8bd94b1fabe913a3f7a17ac76732edd969ae590a77ea92c1c5ff0bc9e37f47b69944b97b10a83ae8170d30b504a2dd930d5ec212d60adcf"}, 0x1e7})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, 0x4, 0xa, 0x901, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x23, 0xc, "89385319a69ba393c9095315416dad14750b0df4332839ea50fd253bb4c736"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001100)='illinois', 0x8)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x8c, r12, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c2b2b11657e4"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d202c232562aec4a039d9cbe0bf124af"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d3db90caa4aa27744144de4355f0ed76"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xdccb}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x55}, @NL80211_ATTR_PMK={0x14, 0xfe, "70d1ac35c7080a04748f3007977d86c1"}]}, 0x8c}}, 0x20004080)

2.44961963s ago: executing program 2 (id=4436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet(0x2, 0x1, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5)
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r10, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0x1)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x70, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x94}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf8}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4804) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x70, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x94}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf8}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4804)

2.31167274s ago: executing program 1 (id=4437):
r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xc1, 0x6, 0x3, 0x3, 0xffff}) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="d6376e4e17e43ae13120b8778c14e03d4770280c3b63e55fd1e1e4149d68cb58eea843596dfb5281b7072b81487d72d2407761401e5526a0ba327392bc0a7095f9329527a951ef8bd54568c14a5ad2701cf97b5b848c347d42867b66ad280722f1c76c28779b2c06ae7ef46915d1cae2be7d2f02f19499345c7c429020c1911cd010c969601be2be41c5e84e636378296a2a58961e4efc4e3b6af4a039d5914a3a5d6954aa51fa7af70eac9a933a28120145416386f8ae4607325429921667b0eed95a16b6a1bb9240237a6ede", 0xcd}, {&(0x7f00000001c0)="2e31d3798fa457a95c1cfe1f7b625282017115215de47e69dbcafe033fc90d2ec71fb2777cd8dba474e6e44cb2dc7ba386e23c88ea02219dedbb00fb5d2e834a71c1cd21c6a3c28c228790e4c4f8663744391e49287fa87c6b57cc722b784582", 0x60}], 0x2, 0x0, 0x0, 0x801}, 0x4000005) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r4=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r5)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000004c0)=0x5d0, 0x4) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x44080) (async)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0xd, @void}, 0x10)
poll(&(0x7f0000000740)=[{r0, 0x8}, {r10, 0x3}, {r5, 0x1}, {r5, 0x68}, {0xffffffffffffffff, 0x82}], 0x5, 0x1) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000780)) (async)
r11 = accept$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000840)=0x6e)
connect$unix(r11, &(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e) (async)
socketpair(0x5, 0x6, 0x510, &(0x7f0000000900)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r13, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc8251197aee94f32}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8982, &(0x7f0000000a40)={0x8, 'vlan0\x00', {'dummy0\x00'}, 0xdf2}) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000a80)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000ac0)=0x18)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000dc0)={{'\x00', 0x2}, {0x80}, 0x1, 0x0, 0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)="4b7944f071746b68d787fcf23bce9724f93427f43b7ef02022d727c56d882bd25c1131bada699b6691e105882698cf8f71ed7e69812c8622e824af", 0x3b, 0x0, &(0x7f0000000bc0)={0x2, 0x14c, {0x1, 0xc, 0xfc, "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", 0x43, "d1621b468878e9810cb30bcce0649b8715467f84428138fe593ee3875a48ae23d5135473de4b555353f74c44797a72423eed844ad6fefbe8cd27a49b4cd0c96ab0b7ca"}, 0x91, "5eaf4fe146a8b46715ff3b256aedb90b8b0e133ffe251610316a159d1a0ec2c0fd5df8ae4b6b93651f55631b084c9f63e83eea386d0a5f018153a5e050cbebad82578163b37a16695449f01dff5fcda20ada60660f94a78dafcd2af44422356aa00afd6dd372fef83041b24f0856165c1754d094227187e83dcbb02a1e8a617cd0f2d9b96184ae9cdfbe1812d6ecdeb3a7"}, 0x1e9})
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000e40)={'pim6reg\x00', {0x2, 0x4e24, @broadcast}}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=<r14=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, r7, 0xc00, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}}, 0x20004000)

2.100345784s ago: executing program 2 (id=4439):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000200000000000113d780000000000000000d400004e20000c9078014000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x0, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r5 = epoll_create1(0x0)
unshare(0x2c020400)
epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

1.887358607s ago: executing program 4 (id=4440):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000006500)={0x0, 0x0, &(0x7f00000064c0)={&(0x7f0000006380)={0x2c, 0x2, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x800)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.858189571s ago: executing program 3 (id=4441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@netfilter={0x7, 0x1, 0x7}}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff2}}]}}]}, 0x3c}}, 0x0)

1.785372911s ago: executing program 1 (id=4442):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000100)={@empty, @local, @void, {@generic={0x88f7}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)

1.647302763s ago: executing program 0 (id=4443):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='GPL\x00', 0x5, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket(0x2d, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, 0x0, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc)
close(0x3)

1.507332896s ago: executing program 4 (id=4444):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1.49662233s ago: executing program 0 (id=4445):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x18, 0x4)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25070000000c000600030000000000000008000300", @ANYBLOB="ed8c0eab71973c7fdc52cb629458d7346fd9c47a9641e318533ddbec7842e2b0b5c8a760d8d7113a9e68422f6522f62a87665e5e8fe8eeb8c1a1de", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000064)
socket$nl_audit(0x10, 0x3, 0x9) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x18, 0x4) (async)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25070000000c000600030000000000000008000300", @ANYBLOB="ed8c0eab71973c7fdc52cb629458d7346fd9c47a9641e318533ddbec7842e2b0b5c8a760d8d7113a9e68422f6522f62a87665e5e8fe8eeb8c1a1de", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000064) (async)

1.243396666s ago: executing program 4 (id=4446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8948, &(0x7f00000002c0)={'bond0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xe, '\x00', r3, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x60000000}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xc4}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)

1.135032872s ago: executing program 3 (id=4447):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
socketpair(0x24, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x128}}, 0x40010)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000280)={0x2, 0x1, 0x5, 0x7, 0x2bd8, 0x80000000})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', <r4=>0x0, 0x29, 0x1, 0x1, 0x74, 0xf4a26fd49c17734a, @mcast1, @empty, 0x8e102cb3f1a09781, 0x8000, 0xc, 0x1}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30f7f1a9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff8bc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x61}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xde6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0xe001}, 0x20000004)
recvfrom(0xffffffffffffffff, &(0x7f00000006c0)=""/92, 0x5c, 0x40000080, &(0x7f0000000740)=@x25, 0x80)
r6 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x1403, 0x100, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000001, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r7}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x94, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10000, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x8011}, 0x401d0)
r10 = socket$inet6(0xa, 0x3, 0x61)
tee(0xffffffffffffffff, r10, 0xffffffffffffffa5, 0x8)
socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000c40)={<r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r12, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x19, 0x7, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x20044013}, 0x8010)
ioctl(r0, 0x723, &(0x7f0000000dc0)="86108a6e8caff0738949020aed0c9a888535176bc8c6e1f67389faf20a225d172ab2dfcbad02019530d61f64ec11124c4917f589b60a4a10aea40d8bb6f2dcd8b37c7cbd817022652346379e981f8adac8e8346d619c028396b21a73930b93732a1140b301c93a917226e33036bd5c008e3e933446d2b1edb716f4562fb07ed9bd2f9f51d194e8e71e1895b1a118e0455a3e71b39ec29f5fbc6abc7c6fc7b6b67510d0f805d1c09dd9da0ed4d62d6c")
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000e80)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e21, @broadcast}, 0x1, 0x2, 0x3, 0x1}}, 0x2e)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000ec0)={'veth0\x00'})
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x104, 0x0, 0xc65cad2060f9cd49, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4e114fb5af778e6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc44be45e403f42f7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

1.060688482s ago: executing program 2 (id=4448):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r0=>0x0}) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x107d, <r2=>0x0}, 0x8)
r3 = socket$kcm(0xa, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0) (async)
r5 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27, r6}) (async)
write(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r8}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (rerun: 64)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9609}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0x134}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x5a, '\x00', r0, @lirc_mode2, r1, 0x8, &(0x7f0000000100)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xb, 0x7}, 0x10, r2, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[r9], &(0x7f00000003c0)=[{0x5, 0x5, 0x4, 0x9}, {0x3, 0x4, 0x7, 0x9}, {0x5, 0x5, 0xa, 0x2}], 0x10, 0x3}, 0x94)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r11 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xc8, 0x0, 0xc000000) (async, rerun: 32)
setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async, rerun: 32)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x22, 0x8, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000b719a0c0499e8a7f3c940ded08000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

991.265036ms ago: executing program 3 (id=4449):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
write$rfkill(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100037"], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x103080, 0x0)
write$rfkill(r4, &(0x7f00000002c0)={0x6a8, 0x8, 0x1}, 0x8) (async)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c00", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80040)
preadv(r0, &(0x7f0000002580)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000100)=""/148, 0x94}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/38, 0x26}, {&(0x7f0000001480)=""/46, 0x2e}, {&(0x7f00000014c0)=""/153, 0x99}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x7, 0xffffff29, 0x7)

913.68963ms ago: executing program 3 (id=4450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007"], 0x5c}}, 0x20084884)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe226, 0x1}, 0x20)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0x400c040)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000a7", @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000100000000000000014100000018001700000021000000006574683a6970766c616e3100"], 0x34}}, 0x8000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)

870.653521ms ago: executing program 1 (id=4451):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2aac02, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000180)={0x0, 0x0}, 0x10)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={<r7=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
socket$inet(0x2, 0x4000000000000001, 0x0)

759.470823ms ago: executing program 0 (id=4452):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @extra_flags={0x8, 0x18, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000180)='&') (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002, 0x72260}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2002}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x20000410)

660.743135ms ago: executing program 2 (id=4453):
syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) (async, rerun: 32)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 32)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="fd1c9b09e8db0260", 0x8}], 0x1) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60)
mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)

655.803928ms ago: executing program 3 (id=4454):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x164}}, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

515.07974ms ago: executing program 0 (id=4455):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
close(r3)
close(r4)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="34d20405", @ANYRES16=r2, @ANYBLOB="010001000000fedbdf2503000000200001800c00028008000300af0400000d0001007564703a73797a3000000000"], 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xffffffffffffff6f}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd7295}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004700000085000000d1000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16ba499daf396cce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x5dd, @mcast1, 0x40}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x2007ff, 0x1]}}, 0x5c)
ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x9b39, 0x9, 0x3, 0x7}, {0x0, 0x2, 0x8, 0x4}, {0xa, 0x7, 0x40, 0x5}, {0x2, 0xe, 0xa3, 0x2}, {0x4000, 0x73, 0x9, 0x96}, {0x5, 0x8, 0x16, 0x2}, {0x6, 0x8, 0xa, 0x5}, {0x1000, 0xfc, 0x0, 0x8}]}, 0x10)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f0000000500)={@private2, @loopback})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="9e09e6d0cadf63f416d0792cbbacbd7ae98a63c0ca7270396774f2514f18bac16081ddc50234664dfb69d7e81cd2e5b5270d3c0578332279f8ca32154c73656322d1b10cb6d1d84e53f1bce25e8c7444b0b8592c9455bb2cdb864ff4ecc9213f05514d13403ffe9399998e3a6130468f5ba8a2614d69338ffd060737f09d457b8d2466453f037867afaecdf37990332819ac94f45a344be2b46b75be4fa453ffc6a3d7d6b0457444d1e1fcd83d15", @ANYRES16=r10, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001f00fe8000000000000000000000000000bb"], 0x58}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000180)=""/108, 0x6c, <r11=>0x0, &(0x7f0000000300)=""/202, 0xca}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="89a2d6211c194b19366e7f5bf9298eb1fc5fa4537187fdf7351ff06a109fc6c3c4e9dc815a082cbfd3e1f3e16de92b3b654d417b1915f97f14f046ef610a8f295decb1180451bf2d10fbae92d7cc2ae38636f95602c18796ec17857d0a07f1aeb274cff1dc90fb6fca73d797879a97e69490e90bb46c161e230b413f26d73df926c178e1fd4ef51dcb34f30c1d011bac31f338cc3775acdb4b9e000addf5a7e7e3", @ANYBLOB="d077765915797e7177f5bbed604a93a06df8959f1127e417f62fbd9d7360ba56aa2ace6370c6560a5b3b3226ab96c77258988e9d9585623333222e7d7049aa00", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r12}, 0xc)

514.305968ms ago: executing program 3 (id=4456):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r1, 0x58, &(0x7f00000000c0)}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000240)=""/25, &(0x7f0000000280)=0x19)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="821786d38bcdec66ce36f9b769cadfccc47d54b58d65ba8b580d1afd8d9ba7b9824ee06a140d390985677bb6789329186e3e5eb36a7b4250bb1e50f1b7cbafe18c58f7f387110928ffd31b8d84720abcf36273a46979c25a2fc5ec95b1a5b48817be6308f6fdbcd1fdf6ba", @ANYRES16], 0x48)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x14)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0xc7d30000)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000040)=0x1, 0x4)

252.357778ms ago: executing program 1 (id=4457):
unshare(0x22020600) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x605debe90a07df}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x4, @empty, 0x800d473}, 0x4, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async, rerun: 64)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (rerun: 64)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000940)={{<r5=>r1, &(0x7f0000000000)='GPL\x00', 0x125100, &(0x7f0000000040)={@align=0x3, {0x9474, 0x4, 0xf37, 0x4}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000200)=0x7}, 0x6, &(0x7f0000000880)=[{0x3, 0x1, &(0x7f0000000280)='-{-{$\x00', &(0x7f00000002c0)="bd41579a354b933e81af7b0a9c3bfb9d553036823d2c171ffea71c2c0014d9f43a0ba667d042ad9c52e820ec80060b02c854c9e8ceafa5b116ce132433651b73c73f7c0b5c1e250f9169c9f7031861fcb8c922fcd08f9001543d89724647b2e0c9d7d000286a3dbb3f0f7eba167dc737d2d0208b035565f2fe60521a4397a9273202b6e39910b7df4536929c82bc9d597dde3671421d02559c7f97b0f71e57bb5839cc0b10f016920408a2c74634ccf6627b3ed7d570ca77881f4baf660a65ea1ceaf975af576ebf0798f90cc38d4d98a4eedd4707d03e6cd73df2726cacd5", 0xdf, 0x10}, {0x3, 0x7f, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="93d1e804298cc036432d4d4dfdf0f6d921deff276596ecc7ff6415ffe1294ebdd4840cb4443c1c875f704ee04aa5", 0x2e, 0x2a}, {0x1, 0x0, &(0x7f0000000440)='\x00', &(0x7f0000000540)="2a1bbad7bd7613", 0x7, 0x18}, {0x2, 0x0, &(0x7f0000000580)='bpf\x00', &(0x7f00000005c0)="2448ec9bc8d775a8eb935fce96c72fe648f89315d0416f448c273ccb9a0dc04cbd35578f5c6f079a38ae88355e6bfbe80b6c0eebff88ba11aa36b320e8b3b3f62f85a1b23dec0d10117e55b14829dbd58ddb6197845cb449145aa1eea61928803911950a041ba04b8fb50ea2b6fe53d1c710f5561f9f4bd80c90c29caa263c3b01e90ef044512e294eae4e50a5c06c458b396c61f1cc57ab84b74d5ffe88250b887ca7d24bbdae5bf817b7567eb428c2cd7f2e21ff2431b2bff9b52545486f65d6fb15d8c9fd336c0cab777e4b", 0xcd, 0x20}, {0x3, 0x2, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="82d532af16e9551e42ed1aee4e8fcd3908833b1b9d068c38a49a8a904557499b56da6a0219c3289037ca027aee11f8a350627504bbc77f92d5eba738c2d1d2d64d193a40b1222990300c2d47cd63628a348ce5fc41733e1abe6b14a3a926ab77f3688b34fa90f18309ad4f151ca17cd5f3001532b49229978258c507911101abd5b6", 0x82, 0x22}, {0x3, 0x80, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="d24cb7cae8010ab46121ad3565d5dd758f4c5ff6280572ac43061146e1d0c5da45cda60bfef939519c2982f4f5d41cb752171955610364e25eec7149d4dcf90b5f211c409a9e21377cd69ce006bc2abf828603bee9364cacdecb5444a13a25de79574d540e", 0x65, 0x22}]})
write$nci(r5, &(0x7f00000009c0)=ANY=[@ANYBLOB="4f0040703b67eb3f85a65be783628034f3533808af8a726ea5076fdae61e4656e0afefa818e3c594d0140ebe653237bab392be42ca792283287680e626b66c3241bba5d7c5664ff87e1c62f102f83353903ca634d0aeabece24f966244cd610ebd1f4b88fe"], 0x65)

229.973004ms ago: executing program 0 (id=4458):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000200000000000113d780000000000000000d400004e20000c9078014000"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x0, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r5 = epoll_create1(0x0)
unshare(0x2c020400)
epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

188.227722ms ago: executing program 4 (id=4459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xffff, 0xffffffff, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000000), 0x75)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000940)={r4})

35.152061ms ago: executing program 2 (id=4460):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0000c4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x3f6, 0x20, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x44040)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000002c0)=0x184bace9438f14fe)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
write$ppp(r2, &(0x7f0000000a00)='rI', 0x2)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can})

33.341153ms ago: executing program 1 (id=4461):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008800000000000000c702000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000500009500"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xb1e2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008090)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r0}, 0x38)

0s ago: executing program 4 (id=4462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="f2ca7aa25d7c2afcbd19083ab7426a658779be9c79e35dec9d1c1a59be277e52d183775069b109abe922a3617014e84297edad593ff13b09e02291424cb0db6f3f9c3ae81e991d774f84e0e21388d8652a8edaba84"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1f580}], 0x18}], 0x1, 0x20040800)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2)

kernel console output (not intermixed with test programs):

type 2 family 0 port 6081 - 0
[  468.503530][T20045] ip6gretap1: entered allmulticast mode
[  468.537375][T20045] batman_adv: batadv0: Adding interface: ip6gretap1
[  468.537408][T20045] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.551965][T20045] batman_adv: batadv0: Interface activated: ip6gretap1
[  468.769683][T20045] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  468.816316][T20045] bond2 (unregistering): Released all slaves
[  468.836033][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3163'.
[  469.247438][T20077] ip_tables: iptables: counters copy to user failed while replacing table
[  469.248233][T20078] ip_tables: iptables: counters copy to user failed while replacing table
[  469.493733][T20074] openvswitch: netlink: Duplicate or invalid key (type 0).
[  470.347718][T17509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.347737][T17509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.559705][T20125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3170'.
[  470.644340][T20127] syzkaller1: entered promiscuous mode
[  470.644361][T20127] syzkaller1: entered allmulticast mode
[  470.676277][T20125] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  470.919411][T17509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.919458][T17509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.975978][T20137] gre1: entered promiscuous mode
[  470.976002][T20137] gre1: entered allmulticast mode
[  470.977456][T20140] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  471.372572][T20162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3064'.
[  471.372595][T20162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3064'.
[  472.273864][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.288642][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.294636][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.312304][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.339011][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  472.375088][T20179] bond1 (unregistering): Released all slaves
[  472.761824][T20186] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  472.930978][ T5628] bond6: (slave syz_tun): Removing an active aggregator
[  472.931569][ T5628] bond6: (slave syz_tun): Releasing backup interface
[  473.621821][T20233] netlink: 'syz.3.3187': attribute type 8 has an invalid length.
[  473.648703][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3187'.
[  473.733944][T20227] veth3: entered allmulticast mode
[  474.026347][T20216] syzkaller0: entered promiscuous mode
[  474.026371][T20216] syzkaller0: entered allmulticast mode
[  474.049085][T20244] netlink: 'syz.0.3190': attribute type 1 has an invalid length.
[  474.275786][T20191] lo speed is unknown, defaulting to 1000
[  474.548314][T20260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3193'.
[  474.587022][ T5625] Bluetooth: hci0: command tx timeout
[  475.122113][T20282] syzkaller0: entered promiscuous mode
[  475.122166][T20282] syzkaller0: entered allmulticast mode
[  475.904166][T20309] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  475.904330][T20309] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  475.936086][T20319] nftables ruleset with unbound chain
[  476.269080][T20328] netlink: 'syz.4.3210': attribute type 1 has an invalid length.
[  476.665146][ T5625] Bluetooth: hci0: command tx timeout
[  476.782352][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'.
[  476.797546][T20340] syzkaller0: entered promiscuous mode
[  476.797588][T20340] syzkaller0: entered allmulticast mode
[  476.852563][T20191] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.852792][T20191] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.853133][T20191] bridge_slave_0: entered allmulticast mode
[  476.863935][T20191] bridge_slave_0: entered promiscuous mode
[  476.983648][T20354] wireguard1: entered promiscuous mode
[  476.983706][T20354] wireguard1: entered allmulticast mode
[  476.991184][T20191] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.991378][T20191] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.991642][T20191] bridge_slave_1: entered allmulticast mode
[  477.002790][T20191] bridge_slave_1: entered promiscuous mode
[  478.750562][ T5634] Bluetooth: hci0: command tx timeout
[  479.631573][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  480.201088][T20191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.333237][T20191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.389789][T20191] team0: Port device team_slave_0 added
[  480.392930][T20191] team0: Port device team_slave_1 added
[  480.438184][T20191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.438202][T20191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.438224][T20191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.440145][T20191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.440158][T20191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.440181][T20191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.645988][T20191] hsr_slave_0: entered promiscuous mode
[  480.646961][T20191] hsr_slave_1: entered promiscuous mode
[  480.647690][T20191] debugfs: 'hsr0' already exists in 'hsr'
[  480.647709][T20191] Cannot create hsr debugfs directory
[  480.731924][T20379] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3219'.
[  480.826900][ T5634] Bluetooth: hci0: command tx timeout
[  480.902971][T20191] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.903006][T20191] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.009371][T20389] veth0_macvtap: left promiscuous mode
[  481.025041][T20389] macvtap0: entered promiscuous mode
[  481.146246][T20394] netlink: 'syz.4.3224': attribute type 1 has an invalid length.
[  481.183844][   T31] audit: type=1804 audit(1789955907.986:9): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3222" name="/newroot/64/cgroup.controllers" dev="tmpfs" ino=352 res=1 errno=0
[  481.184048][   T31] audit: type=1800 audit(1789955907.986:10): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3222" name="cgroup.controllers" dev="tmpfs" ino=352 res=0 errno=0
[  481.381518][T20191] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.381540][T20191] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.495135][T20397] syzkaller1: entered promiscuous mode
[  481.495157][T20397] syzkaller1: entered allmulticast mode
[  481.524087][T20191] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.524120][T20191] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.652244][T20405] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  481.902326][T20191] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.902360][T20191] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.986350][T20422] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3229'.
[  482.132510][T20428] netlink: 'syz.2.3232': attribute type 1 has an invalid length.
[  482.173447][T20428] netlink: 'syz.2.3232': attribute type 62 has an invalid length.
[  482.206306][T20428] ipvlan2: entered promiscuous mode
[  482.206354][T20428] ipvlan2: entered allmulticast mode
[  482.206367][T20428] bond1: entered allmulticast mode
[  482.206561][T20428] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  482.206579][T20428] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  482.208346][T20428] bond1: (slave ipvlan2): Error -95 calling set_mac_address
[  482.298384][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'.
[  482.693278][T20439] netlink: 'syz.0.3236': attribute type 2 has an invalid length.
[  482.717608][T20191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  482.718442][T20439] netlink: 'syz.0.3236': attribute type 2 has an invalid length.
[  482.718459][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'.
[  482.721789][T20191] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.722578][T20191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  482.776218][T20191] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.783777][T20191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  482.810212][T20191] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.812563][T20191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  482.849963][T20191] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  483.121285][T20191] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.163608][T20191] 8021q: adding VLAN 0 to HW filter on device team0
[  483.193212][T17476] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.193395][T17476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.241211][T17476] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.241375][T17476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.048914][T20496] netlink: 'syz.3.3246': attribute type 1 has an invalid length.
[  485.155575][T20496] 8021q: adding VLAN 0 to HW filter on device bond2
[  485.339457][T20507] bond2: (slave veth5): Enslaving as an active interface with a down link
[  485.342533][T20502] syzkaller1: entered promiscuous mode
[  485.342553][T20502] syzkaller1: entered allmulticast mode
[  485.663294][T20523] netlink: 'syz.3.3250': attribute type 10 has an invalid length.
[  485.743387][T20529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3252'.
[  485.743424][T20529] vlan0: entered promiscuous mode
[  485.871018][T20529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.947413][T20531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.005692][T20531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.102496][T20191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.131627][T20545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  486.158204][T20546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  486.316187][T20191] veth0_vlan: entered promiscuous mode
[  486.365463][T20191] veth1_vlan: entered promiscuous mode
[  486.461016][T20191] veth0_macvtap: entered promiscuous mode
[  486.468277][T20191] veth1_macvtap: entered promiscuous mode
[  486.487546][T20191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.498463][T20191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.542308][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.542355][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.542390][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.575324][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.693776][T17513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.693797][T17513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.769344][T17513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.769364][T17513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.850318][T20562] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3178'.
[  486.850344][T20562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3178'.
[  501.401814][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  503.232730][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'.
[  503.232955][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'.
[  503.655238][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  503.661958][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  503.663138][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  503.695803][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  503.698257][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  503.769708][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'.
[  503.831496][T20593] syzkaller0: entered promiscuous mode
[  503.831518][T20593] syzkaller0: entered allmulticast mode
[  503.869972][T20590] TC_ACT_REPEAT abuse ?
[  504.302162][T20602] 8021q: adding VLAN 0 to HW filter on device bond3
[  504.307687][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'.
[  504.307706][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'.
[  504.371149][T20615] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3273'.
[  504.371476][T20619] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3273'.
[  504.490603][ T5616] syz_tun (unregistering): left allmulticast mode
[  504.743141][T20631] xt_IDLETIMER: label is empty or not nul-terminated
[  505.020495][T20636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3276'.
[  505.030809][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'.
[  505.330964][T20583] lo speed is unknown, defaulting to 1000
[  505.356982][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3279'.
[  505.785931][ T5625] Bluetooth: hci4: command tx timeout
[  506.016776][T20672] xt_CT: You must specify a L4 protocol and not use inversions on it
[  506.700664][T20583] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.700811][T20583] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.700984][T20583] bridge_slave_0: entered allmulticast mode
[  506.709358][T20583] bridge_slave_0: entered promiscuous mode
[  506.714277][T20583] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.726105][T20583] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.729263][T20583] bridge_slave_1: entered allmulticast mode
[  506.734525][T20583] bridge_slave_1: entered promiscuous mode
[  506.852825][T20583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.868039][T20583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.013139][T20583] team0: Port device team_slave_0 added
[  507.020763][T20583] team0: Port device team_slave_1 added
[  507.182789][T20583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.182807][T20583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.182830][T20583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.202263][T20583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.202279][T20583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.202313][T20583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.282208][T20711] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.282817][T20711] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.285905][T20722] netlink: 'syz.3.3297': attribute type 1 has an invalid length.
[  507.462440][T20728] x_tables: ip_tables: osf match: only valid for protocol 6
[  507.462643][T20727] x_tables: ip_tables: osf match: only valid for protocol 6
[  507.482372][T20583] hsr_slave_0: entered promiscuous mode
[  507.490351][T20583] hsr_slave_1: entered promiscuous mode
[  507.491134][T20583] debugfs: 'hsr0' already exists in 'hsr'
[  507.491153][T20583] Cannot create hsr debugfs directory
[  507.635433][T20736] netlink: 'syz.0.3301': attribute type 1 has an invalid length.
[  507.806382][T20732] netlink: 'syz.1.3300': attribute type 1 has an invalid length.
[  507.864657][ T5625] Bluetooth: hci4: command tx timeout
[  508.032394][T17476] IPVS: starting estimator thread 0...
[  508.049756][T20742] 0·: renamed from hsr0 (while UP)
[  508.071499][T20742] 0·: entered allmulticast mode
[  508.071522][T20742] hsr_slave_0: entered allmulticast mode
[  508.071538][T20742] hsr_slave_1: entered allmulticast mode
[  508.072034][T20742] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  508.124612][T20746] IPVS: using max 33 ests per chain, 79200 per kthread
[  508.132470][T20748] netlink: 'syz.2.3303': attribute type 1 has an invalid length.
[  508.259578][T20759] bond2: (slave geneve2): making interface the new active one
[  508.273376][T20759] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  508.280318][T20748] __nla_validate_parse: 4 callbacks suppressed
[  508.280336][T20748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3303'.
[  508.308338][T20757] ip6gre1: entered promiscuous mode
[  508.318609][T20757] ip6gre1: entered allmulticast mode
[  508.389663][T20748] 8021q: adding VLAN 0 to HW filter on device bond2
[  508.456621][ T6691] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  508.456669][ T6691] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  508.456703][ T6691] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  508.456734][ T6691] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  508.554999][T20770] netlink: 'syz.1.3310': attribute type 9 has an invalid length.
[  508.557476][T20767] vti0: entered promiscuous mode
[  508.557512][T20767] vti0: entered allmulticast mode
[  508.736274][T20583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  508.911401][T20583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  509.051384][T20583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  509.202675][T20583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  509.564015][T20583] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  509.578420][T20583] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.579170][T20583] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  509.590369][T20583] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.591771][T20583] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  509.623375][T20583] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.625743][T20583] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  509.650664][T20583] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.947222][ T5625] Bluetooth: hci4: command tx timeout
[  509.954258][T20583] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.006815][T20583] 8021q: adding VLAN 0 to HW filter on device team0
[  510.007205][T20825] IPVS: length: 189 != 24
[  510.029589][T17476] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.029698][T17476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.040502][T20825] netlink: 'syz.3.3324': attribute type 1 has an invalid length.
[  510.058983][T17476] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.059091][T17476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.137092][T20829] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  510.177107][T20829] syzkaller1: entered promiscuous mode
[  510.177130][T20829] syzkaller1: entered allmulticast mode
[  510.421380][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3325'.
[  510.528081][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3326'.
[  510.563602][T20839] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3326'.
[  510.736880][T20849] syz_tun: entered allmulticast mode
[  510.737721][T20848] syz_tun: left allmulticast mode
[  510.813003][T20847] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.813704][T20847] bridge0: port 3(bond1) entered blocking state
[  510.813876][T20847] bridge0: port 3(bond1) entered disabled state
[  510.813996][T20847] bond1: entered allmulticast mode
[  510.819304][T20847] bond1: entered promiscuous mode
[  510.819938][T20847] bridge0: port 3(bond1) entered blocking state
[  510.820038][T20847] bridge0: port 3(bond1) entered forwarding state
[  510.878212][ T6691] bridge0: port 3(bond1) entered disabled state
[  510.883257][T20852] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3331'.
[  511.133899][T20864] x_tables: duplicate underflow at hook 3
[  511.133977][T20864] x_tables: duplicate underflow at hook 3
[  511.134043][T20864] x_tables: duplicate underflow at hook 3
[  511.134124][T20864] x_tables: duplicate underflow at hook 3
[  511.134192][T20864] x_tables: duplicate underflow at hook 3
[  511.134261][T20864] x_tables: duplicate underflow at hook 3
[  511.134326][T20864] x_tables: duplicate underflow at hook 3
[  511.153106][T20864] x_tables: duplicate underflow at hook 3
[  511.153183][T20864] x_tables: duplicate underflow at hook 3
[  511.153242][T20864] x_tables: duplicate underflow at hook 3
[  511.537754][T20871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3334'.
[  511.537789][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3334'.
[  511.928065][T20871] wg2: entered allmulticast mode
[  512.026154][ T5625] Bluetooth: hci4: command tx timeout
[  512.892194][T20583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.073902][T20900] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3339'.
[  513.215982][T20908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3341'.
[  513.415422][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'.
[  513.417292][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'.
[  513.417317][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'.
[  513.435638][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'.
[  513.733310][T20583] veth0_vlan: entered promiscuous mode
[  513.754264][T20583] veth1_vlan: entered promiscuous mode
[  513.853369][T20583] veth0_macvtap: entered promiscuous mode
[  513.868432][T20583] veth1_macvtap: entered promiscuous mode
[  513.920356][T20583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.938283][T20583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.975213][T17508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.975287][T17508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.975318][T17508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.975349][T17508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.491369][T20954] lo speed is unknown, defaulting to 1000
[  515.655337][T17508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.655375][T17508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.804988][T17476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.805017][T17476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.992010][T20968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3354'.
[  517.595324][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'.
[  517.801904][T21031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3367'.
[  517.805178][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'.
[  518.165977][T21043] openvswitch: netlink: IP tunnel dst address not specified
[  518.241708][T21044] syzkaller1: entered promiscuous mode
[  518.241761][T21044] syzkaller1: entered allmulticast mode
[  519.397040][T21083] Cannot find add_set index 0 as target
[  519.403306][T21086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3380'.
[  519.679987][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'.
[  520.212235][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'.
[  520.216962][T21119] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  520.217826][T21119] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  520.324865][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'.
[  520.450073][T21126] ip6gretap2: entered allmulticast mode
[  520.583963][T21130] syzkaller1: entered promiscuous mode
[  520.583985][T21130] syzkaller1: entered allmulticast mode
[  520.789221][T21134] batman_adv: batadv0: Adding interface: dummy0
[  520.789239][T21134] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.789268][T21134] batman_adv: batadv0: Interface activated: dummy0
[  520.833804][T21134] batadv0: mtu less than device minimum
[  520.835914][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.837225][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.839342][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.840650][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.841963][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.843337][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.844695][T21134] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  520.913165][T21136] netlink: 'syz.3.3395': attribute type 3 has an invalid length.
[  520.913192][T21136] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3395'.
[  523.629314][T21142] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3397'.
[  523.736000][T21146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3397'.
[  523.736023][T21146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3397'.
[  523.776643][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3397'.
[  523.806018][T21151] netlink: 'syz.0.3398': attribute type 1 has an invalid length.
[  523.812053][T21150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3398'.
[  523.812480][T21150] net_ratelimit: 12 callbacks suppressed
[  523.812493][T21150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  524.085831][T21139] syzkaller0: entered promiscuous mode
[  524.085856][T21139] syzkaller0: entered allmulticast mode
[  524.090012][   T31] audit: type=1800 audit(1789955950.896:11): pid=21146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3397" name="memory.events" dev="tmpfs" ino=198 res=0 errno=0
[  524.562256][T21170] __nla_validate_parse: 1 callbacks suppressed
[  524.562275][T21170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3403'.
[  524.562289][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'.
[  524.631237][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3404'.
[  524.631261][T21173] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3404'.
[  528.143269][T21214] SET target dimension over the limit!
[  528.180792][T21214] sctp: [Deprecated]: syz.1.3409 (pid 21214) Use of int in max_burst socket option.
[  528.180792][T21214] Use struct sctp_assoc_value instead
[  528.919406][T21219] syzkaller0: entered promiscuous mode
[  528.919446][T21219] syzkaller0: entered allmulticast mode
[  530.048360][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3429'.
[  530.048426][T21277] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  530.637785][T21302] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  530.835212][T21312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.891115][T21301] lo speed is unknown, defaulting to 1000
[  531.450857][T21339] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  531.452781][T21339] netlink: 'syz.3.3446': attribute type 61 has an invalid length.
[  531.452801][T21339] netlink: 'syz.3.3446': attribute type 62 has an invalid length.
[  531.990734][T21352] syzkaller0: entered promiscuous mode
[  531.990756][T21352] syzkaller0: entered allmulticast mode
[  532.049049][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'.
[  532.937636][T21369] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  532.958898][T21369] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  533.133672][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'.
[  533.157386][T21381] syzkaller0: tun_chr_ioctl cmd 1074025677
[  533.157503][T21381] syzkaller0: linktype set to 8
[  533.196092][T21384] netlink: 'syz.4.3457': attribute type 23 has an invalid length.
[  533.937476][T21409] Bluetooth: MGMT ver 1.23
[  534.184583][ T5634] Bluetooth: hci5: command 0x0406 tx timeout
[  534.340730][T21420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3466'.
[  534.852833][T21438] netlink: 'syz.0.3469': attribute type 1 has an invalid length.
[  534.921472][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'.
[  537.595184][T21438] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  537.869803][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3474'.
[  538.043305][T21459] xt_l2tp: invalid flags combination: 0
[  538.091015][T21459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.095325][T21465] netlink: 'syz.4.3475': attribute type 2 has an invalid length.
[  539.058662][T21504] vcan0: tx drop: invalid da for name 0xffffffffffffffff
[  539.059120][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'.
[  539.059958][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'.
[  539.268711][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'.
[  539.293990][T21512] batadv0: entered promiscuous mode
[  539.303735][T21512] macsec1: entered promiscuous mode
[  539.304204][T21512] macsec1: entered allmulticast mode
[  539.304233][T21512] batadv0: entered allmulticast mode
[  539.324881][T21512] 8021q: adding VLAN 0 to HW filter on device macsec1
[  539.344832][T21512] batadv0: left allmulticast mode
[  539.353716][T21512] batadv0: left promiscuous mode
[  539.699604][T21520] ip6gre1: entered promiscuous mode
[  539.699628][T21520] ip6gre1: entered allmulticast mode
[  539.710408][T21520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  539.822799][T21520] syzkaller1: entered promiscuous mode
[  539.822823][T21520] syzkaller1: entered allmulticast mode
[  539.978190][T21528] openvswitch: netlink: EtherType 2 is less than min 600
[  540.191892][T21536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3497'.
[  540.690527][T21547] ip_tables: iptables: counters copy to user failed while replacing table
[  541.797403][T21496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.037312][T21573] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  542.058967][T21569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3506'.
[  542.135566][T21573] tc action pedit offset must be on 32 bit boundaries
[  542.166669][T21577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3509'.
[  542.232286][T21580] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3509'.
[  542.250903][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'.
[  542.310452][T19641] hid-generic 0005:15C2:0009.0001: item fetching failed at offset 0/2
[  542.316729][T19641] hid-generic 0005:15C2:0009.0001: probe with driver hid-generic failed with error -22
[  542.432882][T21589] veth1_to_bond: entered allmulticast mode
[  542.656558][T21596] netlink: 'syz.0.3513': attribute type 4 has an invalid length.
[  542.828663][T21588] veth1_to_bond: left allmulticast mode
[  543.103102][T21598] syzkaller0: entered promiscuous mode
[  543.103165][T21598] syzkaller0: entered allmulticast mode
[  543.152802][T21609] netlink: 'syz.2.3516': attribute type 1 has an invalid length.
[  543.270468][T21621] ieee802154 phy1 wpan1: encryption failed: -22
[  543.438455][T21627] IPv6: addrconf: prefix option has invalid lifetime
[  543.490035][T21629] ip_tables: iptables: counters copy to user failed while replacing table
[  546.681025][T21610] syzkaller1: entered promiscuous mode
[  546.681054][T21610] syzkaller1: entered allmulticast mode
[  547.465285][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  548.198029][T21692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3532'.
[  548.402701][T21706] netlink: 'syz.4.3537': attribute type 1 has an invalid length.
[  548.402722][T21706] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3537'.
[  548.486014][T21707] syzkaller0: entered promiscuous mode
[  548.486036][T21707] syzkaller0: entered allmulticast mode
[  548.501771][T21717] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  548.561210][T21707] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  549.154656][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3545'.
[  549.366778][T21750] syzkaller0: entered promiscuous mode
[  549.366821][T21750] syzkaller0: entered allmulticast mode
[  549.394789][T21741] tipc: Started in network mode
[  549.394851][T21741] tipc: Node identity 3a883d37dd04, cluster identity 4711
[  549.395178][T21741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.840536][T21766] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.083714][T21779] bridge2: entered allmulticast mode
[  550.516661][ T5714] tipc: Node number set to 3884727607
[  551.378644][T21844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'.
[  551.379178][T21845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3566'.
[  551.761350][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3571'.
[  553.041096][T21890] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3578'.
[  553.614274][T21859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.663671][T21859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.154706][T17512] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.154738][T17512] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  554.157925][T21858] syzkaller1: entered promiscuous mode
[  554.157944][T21858] syzkaller1: entered allmulticast mode
[  554.324618][T17512] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.324652][T17512] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  554.330548][T17476] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.330579][T17476] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  554.330612][T17476] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.330634][T17476] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  554.511277][T21904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3581'.
[  554.673903][ T5634] Bluetooth: hci1: command 0x0405 tx timeout
[  554.855942][T21915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3585'.
[  554.857313][T21916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3585'.
[  555.078050][T21924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3589'.
[  555.183065][T21927] Cannot find set identified by id 0 to match
[  555.473666][T21945] syzkaller1: entered promiscuous mode
[  555.473689][T21945] syzkaller1: entered allmulticast mode
[  555.513912][T21946] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  555.555411][T21954] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  555.847614][    C0] af_packet: tpacket_rcv: packet too big, clamped from 64983 to 3952. macoff=96
[  555.848734][T21958] syzkaller0: entered promiscuous mode
[  555.848754][T21958] syzkaller0: entered allmulticast mode
[  556.538396][T21979] team_slave_1: entered promiscuous mode
[  556.538850][T21979] team_slave_1: left promiscuous mode
[  556.683230][T21992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3602'.
[  556.742406][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'.
[  556.742446][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'.
[  556.770687][T21995] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  556.903734][T22004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3605'.
[  557.432599][T22011] xfrm1: entered allmulticast mode
[  557.707161][T22024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3611'.
[  557.724890][T22024] ieee802154 phy1 wpan1: encryption failed: -22
[  557.733110][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3610'.
[  557.997625][T22035] tipc: Started in network mode
[  557.997688][T22035] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  558.059793][T22035] tipc: Enabled bearer <udp:syz0>, priority 10
[  558.071394][T22041] netlink: 'syz.1.3617': attribute type 1 has an invalid length.
[  558.179512][T22041] bond2: entered promiscuous mode
[  558.181118][T22041] 8021q: adding VLAN 0 to HW filter on device bond2
[  558.720579][T22050] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.721292][T22050] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.860608][T22050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.877564][T22050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.026014][T17526] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.026635][T17512] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.026734][T17512] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.026798][T17512] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.026903][ T6910] tipc: Node number set to 4269801488
[  559.655841][T22083] __nla_validate_parse: 1 callbacks suppressed
[  559.655893][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'.
[  559.963169][T22095] netlink: 'syz.1.3630': attribute type 7 has an invalid length.
[  559.983968][T22092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3629'.
[  559.995708][T22095] netlink: 'syz.1.3630': attribute type 7 has an invalid length.
[  560.238643][T22100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3631'.
[  560.238675][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3631'.
[  560.448839][T22110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3632'.
[  560.687066][T22105] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.706666][T22105] 8021q: adding VLAN 0 to HW filter on device team0
[  560.767778][T22105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.079538][T22105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.094230][T22105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.140313][T22105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  561.140556][T22105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  561.209248][T22105] veth1_vlan: left promiscuous mode
[  561.222447][T22105] veth0_vlan: left promiscuous mode
[  561.237103][T22105] veth0_vlan: entered promiscuous mode
[  561.289833][T22105] veth1_vlan: entered promiscuous mode
[  561.367560][T22105] veth1_macvtap: left promiscuous mode
[  561.379948][T22105] veth0_macvtap: left promiscuous mode
[  561.386814][T22105] veth0_macvtap: entered promiscuous mode
[  561.391106][T22105] veth1_macvtap: entered promiscuous mode
[  561.483530][T22105] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  561.490575][T22105] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  561.500951][T22105] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  561.512822][T22105] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  561.551514][T22105] 8021q: adding VLAN 0 to HW filter on device bond1
[  561.595503][T22112] tc_dump_action: action bad kind
[  561.654705][T17476] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.654899][T17476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.671394][T17476] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.671553][T17476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.920419][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'.
[  561.927256][T17526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.927536][T17526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.944058][T17526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.956544][T17526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.137561][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'.
[  562.144215][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'.
[  562.839703][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  563.229323][T22159] Cannot find add_set index 0 as target
[  563.317175][T22159] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode
[  563.317218][T22159] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[  563.317568][T22159] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  563.411775][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3650'.
[  563.500547][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3650'.
[  563.577717][T22165] netlink: 'syz.1.3649': attribute type 16 has an invalid length.
[  563.577756][T22165] netlink: 'syz.1.3649': attribute type 17 has an invalid length.
[  563.593097][T22165] lo: entered promiscuous mode
[  563.593150][T22165] lo: entered allmulticast mode
[  563.600427][T22165] tunl0: entered promiscuous mode
[  563.600463][T22165] tunl0: entered allmulticast mode
[  563.609186][T22165] gre0: entered promiscuous mode
[  563.609240][T22165] gre0: entered allmulticast mode
[  563.617859][T22165] gretap0: entered promiscuous mode
[  563.617896][T22165] gretap0: entered allmulticast mode
[  563.631494][T22165] erspan0: entered promiscuous mode
[  563.631532][T22165] erspan0: entered allmulticast mode
[  563.651162][T22165] ip_vti0: entered promiscuous mode
[  563.651200][T22165] ip_vti0: entered allmulticast mode
[  563.668845][T22165] ip6_vti0: entered promiscuous mode
[  563.668860][T22165] ip6_vti0: entered allmulticast mode
[  563.669774][T22165] sit0: entered promiscuous mode
[  563.669796][T22165] sit0: entered allmulticast mode
[  563.670496][T22165] ip6tnl0: entered promiscuous mode
[  563.670516][T22165] ip6tnl0: entered allmulticast mode
[  563.683204][T22165] ip6gre0: entered promiscuous mode
[  563.683240][T22165] ip6gre0: entered allmulticast mode
[  563.692744][T22165] syz_tun: entered promiscuous mode
[  563.692783][T22165] syz_tun: entered allmulticast mode
[  563.719481][T22165] ip6gretap0: entered promiscuous mode
[  563.719520][T22165] ip6gretap0: entered allmulticast mode
[  563.738551][T22165] bridge0: entered promiscuous mode
[  563.738591][T22165] bridge0: entered allmulticast mode
[  563.753042][T22165] vcan0: entered promiscuous mode
[  563.753068][T22165] vcan0: entered allmulticast mode
[  563.759272][T22165] bond0: entered promiscuous mode
[  563.759325][T22165] bond_slave_0: entered promiscuous mode
[  563.759764][T22165] bond_slave_1: entered promiscuous mode
[  563.762830][T22165] bond0: entered allmulticast mode
[  563.762865][T22165] bond_slave_0: entered allmulticast mode
[  563.762896][T22165] bond_slave_1: entered allmulticast mode
[  563.781116][T22165] team0: entered promiscuous mode
[  563.781154][T22165] team_slave_0: entered promiscuous mode
[  563.781456][T22165] team_slave_1: entered promiscuous mode
[  563.781769][T22165] team0: entered allmulticast mode
[  563.781781][T22165] team_slave_0: entered allmulticast mode
[  563.781809][T22165] team_slave_1: entered allmulticast mode
[  563.805537][T22165] dummy0: entered promiscuous mode
[  563.805592][T22165] dummy0: entered allmulticast mode
[  563.819989][T22165] nlmon0: entered promiscuous mode
[  563.820044][T22165] nlmon0: entered allmulticast mode
[  563.836368][T22165] batadv0: entered promiscuous mode
[  563.836404][T22165] batadv0: entered allmulticast mode
[  563.873787][T22165] veth0: entered promiscuous mode
[  563.873825][T22165] veth0: entered allmulticast mode
[  563.880373][T22165] veth1: entered promiscuous mode
[  563.880408][T22165] veth1: entered allmulticast mode
[  563.888731][T22165] wg0: entered promiscuous mode
[  563.888767][T22165] wg0: entered allmulticast mode
[  563.911472][T22165] wg1: entered promiscuous mode
[  563.911505][T22165] wg1: entered allmulticast mode
[  563.936668][T22165] wg2: entered promiscuous mode
[  563.936706][T22165] wg2: entered allmulticast mode
[  563.953297][T22165] veth0_to_bridge: entered promiscuous mode
[  563.953351][T22165] veth0_to_bridge: entered allmulticast mode
[  563.993106][T22165] veth1_to_bridge: entered promiscuous mode
[  563.993163][T22165] veth1_to_bridge: entered allmulticast mode
[  564.045857][T22165] veth0_to_bond: entered promiscuous mode
[  564.045897][T22165] veth0_to_bond: entered allmulticast mode
[  564.090537][T22165] veth1_to_bond: entered promiscuous mode
[  564.090622][T22165] veth1_to_bond: entered allmulticast mode
[  564.125827][T22165] veth0_to_team: entered promiscuous mode
[  564.125886][T22165] veth0_to_team: entered allmulticast mode
[  564.180702][T22165] veth1_to_team: entered promiscuous mode
[  564.180742][T22165] veth1_to_team: entered allmulticast mode
[  564.210297][T22165] veth0_to_batadv: entered promiscuous mode
[  564.210359][T22165] veth0_to_batadv: entered allmulticast mode
[  564.239407][T22165] batadv_slave_0: entered promiscuous mode
[  564.239430][T22165] batadv_slave_0: entered allmulticast mode
[  564.240245][T22165] veth1_to_batadv: entered promiscuous mode
[  564.240261][T22165] veth1_to_batadv: entered allmulticast mode
[  564.259218][T22165] batadv_slave_1: entered promiscuous mode
[  564.259255][T22165] batadv_slave_1: entered allmulticast mode
[  564.286911][T22165] xfrm0: entered promiscuous mode
[  564.286971][T22165] xfrm0: entered allmulticast mode
[  564.287799][T22165] veth0_to_hsr: entered promiscuous mode
[  564.287819][T22165] veth0_to_hsr: entered allmulticast mode
[  564.300279][T22165] veth1_to_hsr: entered promiscuous mode
[  564.300319][T22165] veth1_to_hsr: entered allmulticast mode
[  564.302578][T22165] 0·: entered promiscuous mode
[  564.303846][T22165] veth1_virt_wifi: entered promiscuous mode
[  564.303877][T22165] veth1_virt_wifi: entered allmulticast mode
[  564.327505][T22165] veth0_virt_wifi: entered promiscuous mode
[  564.327541][T22165] veth0_virt_wifi: entered allmulticast mode
[  564.343444][T22165] virt_wifi0: entered promiscuous mode
[  564.343496][T22165] virt_wifi0: entered allmulticast mode
[  564.363660][T22165] veth1_vlan: entered allmulticast mode
[  564.370072][T22165] veth0_vlan: entered allmulticast mode
[  564.377023][T22165] vlan0: entered promiscuous mode
[  564.377971][T22165] vlan0: entered allmulticast mode
[  564.382035][T22165] vlan1: entered promiscuous mode
[  564.382334][T22165] vlan1: entered allmulticast mode
[  564.389734][T22165] macvlan0: entered promiscuous mode
[  564.390133][T22165] macvlan0: entered allmulticast mode
[  564.394157][T22165] macvlan1: entered promiscuous mode
[  564.395806][T22165] macvlan1: entered allmulticast mode
[  564.404263][T22165] ipvlan0: entered promiscuous mode
[  564.404317][T22165] ipvlan0: entered allmulticast mode
[  564.444096][T22165] ipvlan1: entered promiscuous mode
[  564.444124][T22165] ipvlan1: entered allmulticast mode
[  564.463240][T22165] veth1_macvtap: entered allmulticast mode
[  564.470939][T22165] veth0_macvtap: entered allmulticast mode
[  564.472477][T22165] macvtap0: entered promiscuous mode
[  564.472783][T22165] macvtap0: entered allmulticast mode
[  564.476228][T22165] macsec0: entered promiscuous mode
[  564.476544][T22165] macsec0: entered allmulticast mode
[  564.481628][T22165] geneve0: entered promiscuous mode
[  564.481661][T22165] geneve0: entered allmulticast mode
[  564.485487][T22165] geneve1: entered promiscuous mode
[  564.485519][T22165] geneve1: entered allmulticast mode
[  564.490499][T22165] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  564.502729][T22165] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  564.502785][T22165] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  564.507577][T22165] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  564.507616][T22165] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  564.512390][T22165] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  564.512429][T22165] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  564.532412][T22165] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode
[  564.532509][T22165] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode
[  564.553059][T22165] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode
[  564.553119][T22165] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode
[  564.593827][T22165] macvlan2: entered promiscuous mode
[  564.598351][T22165] macvlan2: entered allmulticast mode
[  564.625608][T22165] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  564.626968][T22165] vti60: entered promiscuous mode
[  564.626987][T22165] vti60: entered allmulticast mode
[  564.629853][T22165] gre1: entered promiscuous mode
[  564.629880][T22165] gre1: entered allmulticast mode
[  564.631181][T22165] syztnl1: entered promiscuous mode
[  564.631196][T22165] syztnl1: entered allmulticast mode
[  564.632781][T22165] sit1: entered promiscuous mode
[  564.632796][T22165] sit1: entered allmulticast mode
[  564.653498][T22165] mac80211_hwsim hwsim64 wlan2: entered promiscuous mode
[  564.653626][T22165] mac80211_hwsim hwsim64 wlan2: entered allmulticast mode
[  564.659620][T22165] gretap1: entered promiscuous mode
[  564.659660][T22165] gretap1: entered allmulticast mode
[  564.668799][T22165] bond2: entered allmulticast mode
[  564.676211][T22165] bond3: entered promiscuous mode
[  564.676271][T22165] bond3: entered allmulticast mode
[  564.677230][T22165] 8021q: adding VLAN 0 to HW filter on device bond3
[  564.679607][T22165] syzkaller0: entered promiscuous mode
[  564.679640][T22165] syzkaller0: entered allmulticast mode
[  564.852442][T22192] __nla_validate_parse: 3 callbacks suppressed
[  564.852496][T22192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'.
[  564.874649][T22192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'.
[  564.874690][T22192] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  565.370836][T22205] openvswitch: netlink: Message has 8 unknown bytes.
[  565.370909][T22205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.319043][T22248] veth0_to_bond: left promiscuous mode
[  566.531681][T22252] bond3: option mode: unable to set because the bond device is up
[  566.537964][T22252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'.
[  566.537985][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'.
[  566.540463][T22252] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.551978][T22252] bond3: (slave bond0): Enslaving as an active interface with a down link
[  566.563782][T22252] netlink: 'syz.3.3669': attribute type 4 has an invalid length.
[  566.563801][T22252] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3669'.
[  566.565312][T22252] .`: renamed from bond0 (while UP)
[  566.608023][T22252] bond3: Primary slave changed to .`, reselecting active slave
[  566.822749][T22270] syzkaller1: entered promiscuous mode
[  566.822771][T22270] syzkaller1: entered allmulticast mode
[  566.923039][T22269] ovs-s!: entered promiscuous mode
[  567.037176][T22278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3676'.
[  567.376868][T22290] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  567.402148][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  567.403008][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  567.453385][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3680'.
[  567.499932][T22295] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  567.534054][T22296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3681'.
[  567.770081][T22306] netlink: 'syz.2.3685': attribute type 30 has an invalid length.
[  567.841362][T22306] bond4: option arp_missed_max: invalid value (0)
[  567.841400][T22306] bond4: option arp_missed_max: allowed values 1 - 255
[  567.864274][T22306] bond4 (unregistering): Released all slaves
[  568.095071][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.603212][T22335] team0: No ports can be present during mode change
[  570.034177][ T5625] Bluetooth: hci2: command 0x0406 tx timeout
[  570.636482][T22388] __nla_validate_parse: 4 callbacks suppressed
[  570.636503][T22388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3699'.
[  570.636516][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3699'.
[  570.678930][T22386] C: renamed from veth1_to_team (while UP)
[  570.692197][T22386] netlink: 'syz.1.3698': attribute type 1 has an invalid length.
[  570.692232][T22386] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3698'.
[  570.703140][T22386] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  570.820295][T22394] bridge0: port 3(bond0) entered blocking state
[  570.822303][T22394] bridge0: port 3(bond0) entered disabled state
[  570.822502][T22394] bond0: entered allmulticast mode
[  570.822518][T22394] bond_slave_0: entered allmulticast mode
[  570.822533][T22394] bond_slave_1: entered allmulticast mode
[  570.859865][T22394] bond0: entered promiscuous mode
[  570.859886][T22394] bond_slave_0: entered promiscuous mode
[  570.860517][T22394] bond_slave_1: entered promiscuous mode
[  570.862291][T22394] bridge0: port 3(bond0) entered blocking state
[  570.862378][T22394] bridge0: port 3(bond0) entered forwarding state
[  571.019065][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'.
[  571.109800][T22403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'.
[  571.290786][T22405] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  571.371931][T22411] netlink: 'syz.3.3703': attribute type 10 has an invalid length.
[  571.901011][T22433] syzkaller0: entered promiscuous mode
[  571.901048][T22433] syzkaller0: entered allmulticast mode
[  571.933356][T22433] tipc: Started in network mode
[  571.933387][T22433] tipc: Node identity 929bcc3d4be4, cluster identity 4711
[  571.933659][T22433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.992298][T22433] tipc: Resetting bearer <eth:syzkaller0>
[  572.043626][T22432] tipc: Resetting bearer <eth:syzkaller0>
[  572.118685][T22441] netlink: 'syz.0.3713': attribute type 6 has an invalid length.
[  572.148285][T22432] tipc: Disabling bearer <eth:syzkaller0>
[  572.181544][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'.
[  572.213803][T22444] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  572.293591][T22444] syzkaller1: entered promiscuous mode
[  572.293646][T22444] syzkaller1: entered allmulticast mode
[  572.402365][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'.
[  572.502320][T22456] bridge0: port 3(bond0) entered disabled state
[  572.503183][T22456] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.504582][T22456] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.532315][T22456] bridge0: entered promiscuous mode
[  572.581928][T22459] bridge0: left promiscuous mode
[  572.648206][T22460] xt_esp: unknown flags DD
[  572.699330][T22458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3716'.
[  572.720683][T22462] sctp: [Deprecated]: syz.2.3717 (pid 22462) Use of struct sctp_assoc_value in delayed_ack socket option.
[  572.720683][T22462] Use struct sctp_sack_info instead
[  572.859534][T22468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3720'.
[  573.002166][T22470] netlink: 'syz.2.3720': attribute type 4 has an invalid length.
[  573.002188][T22470] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3720'.
[  573.163992][T22481] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.164094][T22481] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.164268][T22481] bridge_slave_0: entered allmulticast mode
[  573.192323][T22481] bridge_slave_0: entered promiscuous mode
[  573.639772][T22491] netlink: 'syz.0.3724': attribute type 4 has an invalid length.
[  573.656769][T22491] netlink: 'syz.0.3724': attribute type 4 has an invalid length.
[  574.136182][T22517] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20003
[  575.049879][T22541] syzkaller0: left promiscuous mode
[  575.049919][T22541] syzkaller0: left allmulticast mode
[  575.183620][T22550] sctp: [Deprecated]: syz.2.3742 (pid 22550) Use of int in maxseg socket option.
[  575.183620][T22550] Use struct sctp_assoc_value instead
[  575.213824][T22550] xt_check_table_hooks: 55 callbacks suppressed
[  575.213944][T22550] x_tables: duplicate underflow at hook 1
[  576.045375][T22556] batman_adv: batadv0: Interface deactivated: dummy0
[  577.335703][T22556] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  577.674619][T17511] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0
[  577.674653][T17511] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  577.675032][T17511] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0
[  577.675057][T17511] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  577.675088][T17511] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0
[  577.675110][T17511] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  577.675140][T17511] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0
[  577.675161][T17511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  577.921124][T22592] __nla_validate_parse: 9 callbacks suppressed
[  577.921145][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'.
[  577.922214][T22592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.008561][T22594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3756'.
[  578.032949][T22594] syzkaller1: entered promiscuous mode
[  578.032972][T22594] syzkaller1: entered allmulticast mode
[  578.046531][T22594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3756'.
[  578.111921][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'.
[  578.206620][T22600] netlink: 'syz.1.3756': attribute type 10 has an invalid length.
[  578.550348][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'.
[  578.550372][T22620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'.
[  578.764685][T19626] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  579.595177][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3765'.
[  579.705130][T19639] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  579.713593][T17506] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  579.727696][T22641] lo speed is unknown, defaulting to 1000
[  579.754550][T22646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.828960][T22646] 8021q: adding VLAN 0 to HW filter on device bond2
[  579.839437][T22652] netlink: 'syz.2.3768': attribute type 1 has an invalid length.
[  579.843075][T22653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3767'.
[  579.972434][   T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  580.134696][T22649] veth5: entered allmulticast mode
[  580.178144][T22649] bond4: (slave veth5): Enslaving as an active interface with a down link
[  580.208360][T22652] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  580.229426][T22646] netlink: 'syz.0.3766': attribute type 3 has an invalid length.
[  580.229651][T22646] netlink: 'syz.0.3766': attribute type 3 has an invalid length.
[  580.353940][T22649] macvlan3: entered promiscuous mode
[  580.353980][T22649] macvlan3: entered allmulticast mode
[  580.369212][T22649] bond4: entered promiscuous mode
[  580.396597][T22649] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  580.401223][T22649] bond4: left promiscuous mode
[  580.624756][T22658] syzkaller0: entered promiscuous mode
[  580.624782][T22658] syzkaller0: entered allmulticast mode
[  580.868348][T22679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3772'.
[  581.857868][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'.
[  584.354701][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  584.656463][   T50] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  584.656690][   T50] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  584.932231][T22715] __nla_validate_parse: 1 callbacks suppressed
[  584.932285][T22715] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.3781'.
[  585.225316][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'.
[  585.225665][T22728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3783'.
[  585.361073][T22733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3785'.
[  585.544912][T19639] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  585.775486][T22748] bond0: entered promiscuous mode
[  585.775508][T22748] bond0: entered allmulticast mode
[  585.874896][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'.
[  586.105023][T22760] netlink: 'syz.3.3794': attribute type 1 has an invalid length.
[  586.140087][T22760] 8021q: adding VLAN 0 to HW filter on device bond4
[  586.343921][T22760] bond4: entered allmulticast mode
[  586.398142][T22760] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3794'.
[  586.456883][T22763] bond4: (slave ip6gretap4): making interface the new active one
[  586.456908][T22763] ip6gretap4: entered allmulticast mode
[  586.458949][T22763] bond4: (slave ip6gretap4): Enslaving as an active interface with an up link
[  586.498644][T22767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3795'.
[  586.499240][T22767] 8021q: VLANs not supported on vcan0
[  586.499993][T22768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3795'.
[  586.501823][T22768] 8021q: VLANs not supported on vcan0
[  586.857348][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'.
[  586.858059][T22779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3798'.
[  587.426017][T22814] IPVS: set_ctl: invalid protocol: 43 172.20.20.56:20004
[  587.451372][T22825] IPVS: set_ctl: invalid protocol: 43 172.20.20.56:20004
[  587.554972][T22830] netlink: 'syz.1.3810': attribute type 12 has an invalid length.
[  588.551628][T22834] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  588.668713][ T5625] Bluetooth: hci0: command 0x0c13 tx timeout
[  588.670396][ T5634] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  588.744786][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  589.597787][T22900] x_tables: unsorted underflow at hook 1
[  589.652066][T22900] bond1 (unregistering): Released all slaves
[  590.008005][T22907] __nla_validate_parse: 8 callbacks suppressed
[  590.008042][T22907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3828'.
[  590.009746][T22907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3828'.
[  590.366404][T22918] lo: left promiscuous mode
[  590.366425][T22918] lo: left allmulticast mode
[  590.387996][T22918] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3831'.
[  590.388021][T22918] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3831'.
[  590.396373][T22918] netlink: 'syz.1.3831': attribute type 1 has an invalid length.
[  590.399071][T22919] netlink: 'syz.1.3831': attribute type 1 has an invalid length.
[  590.469782][T22925] TC_ACT_REPEAT abuse ?
[  590.526245][T22918] bond4: entered promiscuous mode
[  590.527039][T22918] 8021q: adding VLAN 0 to HW filter on device bond4
[  590.597097][T22930] 8021q: adding VLAN 0 to HW filter on device bond4
[  590.597825][T22930] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  590.597859][T22930] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  590.715631][T22930] bond4: (slave wireguard0): making interface the new active one
[  590.715659][T22930] wireguard0: entered promiscuous mode
[  590.734209][T22930] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  590.815808][T22919] netlink: 'syz.1.3831': attribute type 15 has an invalid length.
[  590.916200][T22938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3835'.
[  590.916291][T22938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3835'.
[  590.937116][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'.
[  590.937137][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'.
[  590.974887][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'.
[  590.974928][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'.
[  591.187808][T17517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  591.189071][T17517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.189126][T17517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.189159][T17517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.295433][T22944] lo speed is unknown, defaulting to 1000
[  591.359504][T22948] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  592.904696][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  594.318744][T23007] ip_tables: iptables: counters copy to user failed while replacing table
[  594.328083][T23008] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  595.170844][T23024] __nla_validate_parse: 7 callbacks suppressed
[  595.170864][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'.
[  595.170877][T23024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3857'.
[  595.171095][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'.
[  595.171109][T23024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3857'.
[  595.224797][T23026] netlink: 'syz.3.3858': attribute type 1 has an invalid length.
[  595.344993][T23031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3859'.
[  595.463198][T23034] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3860'.
[  595.480683][T23035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3860'.
[  595.631700][ T5634] Bluetooth: hci0: command 0x0c13 tx timeout
[  595.692058][T23042] xt_hashlimit: size too large, truncated to 1048576
[  595.723803][T23045] netlink: 'syz.1.3864': attribute type 5 has an invalid length.
[  595.746624][T23046] 
@0Ù: renamed from bond_slave_1
[  596.293963][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'.
[  596.321083][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'.
[  596.392490][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'.
[  596.679028][T23084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  597.144966][T23099] netlink: 'syz.2.3877': attribute type 1 has an invalid length.
[  597.144988][T23099] netlink: 'syz.2.3877': attribute type 2 has an invalid length.
[  597.384571][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  597.668740][T23117] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  598.411491][T23143] netlink: 'syz.0.3890': attribute type 21 has an invalid length.
[  598.411805][T23143] netlink: 'syz.0.3890': attribute type 1 has an invalid length.
[  598.550474][T23143] geneve1: entered promiscuous mode
[  598.641756][T23148] syzkaller0: entered promiscuous mode
[  598.641814][T23148] syzkaller0: entered allmulticast mode
[  598.749544][T23147] wireguard0: entered promiscuous mode
[  598.749567][T23147] wireguard0: entered allmulticast mode
[  599.120839][T23172] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  599.459788][T23183] netlink: 'syz.3.3897': attribute type 1 has an invalid length.
[  599.598719][T23182] netlink: 'syz.3.3897': attribute type 10 has an invalid length.
[  599.748339][T23183] 8021q: adding VLAN 0 to HW filter on device bond5
[  599.749341][T23181] batman_adv: batadv0: Removing interface: dummy0
[  599.775118][T23182] dummy0: entered promiscuous mode
[  599.795560][T17513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0
[  599.795924][T17513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0
[  599.795991][T17513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0
[  599.796025][T17513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0
[  600.028635][T23200] netlink: 'syz.1.3900': attribute type 1 has an invalid length.
[  600.082608][T23198] netlink: 'syz.3.3902': attribute type 1 has an invalid length.
[  600.112612][T23204] xt_hashlimit: size too large, truncated to 1048576
[  600.226939][T23199] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  600.241373][ T6691] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  600.245786][T23200] 8021q: adding VLAN 0 to HW filter on device bond5
[  600.258115][T23211] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20004
[  600.383186][ T6691] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  600.848837][T23231] syzkaller1: entered promiscuous mode
[  600.848862][T23231] syzkaller1: entered allmulticast mode
[  600.854300][T23224] syzkaller0: entered promiscuous mode
[  600.872530][T23224] syzkaller0: entered allmulticast mode
[  601.108049][T23237] xt_IDLETIMER: label is empty or not nul-terminated
[  601.179935][T23248] nbd6: detected capacity change from 0 to 63
[  601.606261][ T5625] block nbd6: Receive control failed (result -104)
[  601.839053][T23269] __nla_validate_parse: 13 callbacks suppressed
[  601.839119][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'.
[  602.272704][T23291] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002
[  602.314958][T23291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  602.314988][T23291] IPv6: NLM_F_CREATE should be set when creating new route
[  602.315053][T23291] IPv6: NLM_F_CREATE should be set when creating new route
[  602.712228][T23305] x_tables: duplicate underflow at hook 1
[  602.735877][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3926'.
[  602.918899][T23302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.563913][T23302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.768107][T23302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.847754][T23335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3933'.
[  604.042982][T23302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.307609][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'.
[  604.329244][T17526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.475837][T23348] ovs-s!: entered promiscuous mode
[  604.490212][T17517] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.496431][T17517] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.496495][T17517] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.876076][T23367] netlink: 9300 bytes leftover after parsing attributes in process `syz.3.3945'.
[  604.915755][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'.
[  605.415965][T23383] syzkaller0: entered promiscuous mode
[  605.415986][T23383] syzkaller0: entered allmulticast mode
[  605.604973][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'.
[  606.032471][T23399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'.
[  606.311579][T23385] bond4: entered allmulticast mode
[  606.311604][T23385] wireguard0: entered allmulticast mode
[  606.380062][T23385] dvmrp8: entered allmulticast mode
[  606.420866][T23384] bond4: left allmulticast mode
[  606.420888][T23384] wireguard0: left allmulticast mode
[  606.567121][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'.
[  606.740638][T23415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3956'.
[  607.067911][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3959'.
[  607.067933][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'.
[  607.067957][T23421] netlink: 'syz.0.3959': attribute type 14 has an invalid length.
[  607.130238][T23424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3959'.
[  607.275790][T23434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3964'.
[  607.275813][T23434] openvswitch: netlink: Flow actions attr not present in new flow.
[  607.329765][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'.
[  607.329820][T23432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3962'.
[  607.340681][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'.
[  607.340732][T23432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3962'.
[  607.568731][T23451] netlink: 'syz.0.3969': attribute type 17 has an invalid length.
[  607.592732][T23451] batman_adv: batadv0: Adding interface: gretap2
[  607.592748][T23451] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.592774][T23451] batman_adv: batadv0: Interface activated: gretap2
[  607.755327][T23459] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  607.931545][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'.
[  608.365762][T23483] netlink: 'syz.0.3976': attribute type 16 has an invalid length.
[  608.365785][T23483] netlink: 'syz.0.3976': attribute type 17 has an invalid length.
[  608.442691][T23483] geneve1: left promiscuous mode
[  608.484089][T23491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.493680][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'.
[  608.575714][T17508] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  608.730702][T23506] netlink: 'syz.4.3983': attribute type 2 has an invalid length.
[  608.730725][T23506] netlink: 'syz.4.3983': attribute type 8 has an invalid length.
[  608.731541][T23504] netlink: 'syz.3.3982': attribute type 3 has an invalid length.
[  608.797036][T23511] netlink: 'syz.3.3982': attribute type 12 has an invalid length.
[  608.882784][T17508] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  608.887334][T17508] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  608.892025][T17508] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  608.910858][T17508] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  608.911224][T17508] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  608.920538][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  609.325418][ T5714] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  609.368874][T23520] openvswitch: netlink: Unknown key attributes 2
[  609.423739][T23520] netlink: 'syz.3.3985': attribute type 10 has an invalid length.
[  609.560136][T23528] nbd: must specify a size in bytes for the device
[  609.633451][ T5714] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  609.916323][   T31] audit: type=1804 audit(1789956036.726:12): pid=23542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3992" name="/newroot/161/memory.events" dev="tmpfs" ino=848 res=1 errno=0
[  609.916437][   T31] audit: type=1800 audit(1789956036.726:13): pid=23542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3992" name="memory.events" dev="tmpfs" ino=848 res=0 errno=0
[  609.987559][T23542] netlink: 'syz.0.3992': attribute type 1 has an invalid length.
[  610.091278][T23546] bond5: Unable to set up delay as MII monitoring is disabled
[  610.093229][T23546] bond5 (unregistering): Released all slaves
[  610.150707][   T31] audit: type=1804 audit(1789956036.956:14): pid=23548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3992" name="/newroot/161/memory.events" dev="tmpfs" ino=848 res=1 errno=0
[  610.296067][T23542] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  610.301362][T23542] team0: Device macvlan0 is up. Set it down before adding it as a team port
[  610.556622][T23558] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.581176][T23558] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.657173][T23558] bond0: (slave bond_slave_0): Releasing backup interface
[  610.740920][T23558] bond0: (slave bond_slave_1): Releasing backup interface
[  610.849409][T23558] team0: Port device team_slave_0 removed
[  610.881895][T23558] team0: Port device team_slave_1 removed
[  610.888284][T23558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  610.895981][T23558] batman_adv: batadv0: Removing interface: batadv_slave_0
[  610.905350][T23558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  610.905386][T23558] batman_adv: batadv0: Removing interface: batadv_slave_1
[  610.932778][T23558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  611.006087][T23559] team0: Mode changed to "loadbalance"
[  611.154585][T23566] syzkaller1: entered promiscuous mode
[  611.154609][T23566] syzkaller1: entered allmulticast mode
[  611.351212][T23577] syzkaller0: entered promiscuous mode
[  611.351235][T23577] syzkaller0: entered allmulticast mode
[  611.529328][T23583] veth0: entered promiscuous mode
[  611.540455][T23583] veth0: left promiscuous mode
[  612.295835][T23610] __nla_validate_parse: 8 callbacks suppressed
[  612.295854][T23610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4012'.
[  612.857394][T23617] netlink: 'syz.3.4014': attribute type 16 has an invalid length.
[  612.857432][T23617] netlink: 'syz.3.4014': attribute type 17 has an invalid length.
[  612.984742][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  613.154586][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4014'.
[  613.277527][T23617] 8021q: adding VLAN 0 to HW filter on device .`
[  613.282381][T23617] dummy0: left promiscuous mode
[  613.322625][T23617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.434511][T23617] wg2: left allmulticast mode
[  613.438813][T23617] veth0_to_bridge: left promiscuous mode
[  613.438837][T23617] veth0_to_bridge: left allmulticast mode
[  613.619464][T23617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  613.619490][T23617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  613.677921][T23617] veth1_vlan: left promiscuous mode
[  613.681530][T23617] veth0_vlan: left promiscuous mode
[  613.701324][T23617] veth0_vlan: entered promiscuous mode
[  613.702566][T23617] veth1_vlan: entered promiscuous mode
[  613.726327][T23617] veth1_macvtap: left promiscuous mode
[  613.727662][T23617] veth0_macvtap: left promiscuous mode
[  613.730996][T23617] veth0_macvtap: entered promiscuous mode
[  613.732546][T23617] veth1_macvtap: entered promiscuous mode
[  613.734272][T23617] geneve0: entered promiscuous mode
[  613.770347][T23617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  613.771456][T23617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  613.772557][T23617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  613.774136][T23617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  613.804827][T23617] mac80211_hwsim hwsim45 wlan0: left promiscuous mode
[  613.804863][T23617] mac80211_hwsim hwsim45 wlan0: left allmulticast mode
[  613.807821][T23617] 8021q: adding VLAN 0 to HW filter on device bond1
[  613.868239][T23617] ip6gretap1: left allmulticast mode
[  613.869282][T23617] batman_adv: batadv0: Interface activated: ip6gretap1
[  613.870708][T23617] veth3: left allmulticast mode
[  613.872930][T23617] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check.
[  613.873137][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'.
[  613.906431][T23641] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4018'.
[  613.978836][T23623] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.980492][T23623] 8021q: adding VLAN 0 to HW filter on device team0
[  614.007190][T23623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  614.025845][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  614.080292][T23623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.082346][T23623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.103003][T23623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  614.103025][T23623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  614.129951][T23623] veth1_vlan: left promiscuous mode
[  614.140815][T23623] veth1_vlan: entered promiscuous mode
[  614.151380][T23623] veth1_macvtap: left promiscuous mode
[  614.153540][T23623] veth0_macvtap: entered promiscuous mode
[  614.167365][T23623] veth1_macvtap: entered promiscuous mode
[  614.171620][T23623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  614.172616][T23623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  614.173980][T23623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  614.202526][T23623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  614.218560][T23623] 8021q: adding VLAN 0 to HW filter on device bond1
[  614.220053][T23623] 8021q: adding VLAN 0 to HW filter on device bond2
[  614.239003][T23623] 8021q: adding VLAN 0 to HW filter on device bond3
[  614.243205][T23623] 8021q: adding VLAN 0 to HW filter on device bond4
[  614.328519][T17526] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.328715][T17526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.599557][T17526] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.599665][T17526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.601713][T17526] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.601812][T17526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.804288][T17517] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  614.805414][T17517] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  614.832684][T19626] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  614.845095][T17517] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0
[  614.845127][T17517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.926336][T17517] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  614.926799][T17517] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  614.927381][T17517] bond4: (slave veth5): making interface the new active one
[  615.050893][T17517] bond4: active interface up!
[  615.056392][T17513] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0
[  615.056453][T17513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.057209][T17513] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  615.057434][T17513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.057475][T17513] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  615.256771][T17512] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0
[  615.256837][T17512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.256903][T17512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.256943][T17512] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  615.257006][T17512] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0
[  615.257063][T17512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.257110][T17512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.257165][T17512] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  615.283799][T19639] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  615.330413][T17476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.330475][T17476] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  615.380636][T19665] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  616.498386][T23701] syzkaller1: entered promiscuous mode
[  616.498409][T23701] syzkaller1: entered allmulticast mode
[  616.810460][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'.
[  616.888867][T23721] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  616.889360][T23721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4036'.
[  616.893986][T23709] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  616.979063][T23720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  617.019230][T23720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4035'.
[  617.019255][T23720] openvswitch: netlink: Flow actions attr not present in new flow.
[  617.334266][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'.
[  617.334301][T23724] netlink: 'syz.0.4037': attribute type 30 has an invalid length.
[  617.386984][T23724] vxlan1: entered promiscuous mode
[  617.387007][T23724] vxlan1: entered allmulticast mode
[  617.518389][T23730] netlink: 'syz.3.4039': attribute type 6 has an invalid length.
[  617.518504][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4039'.
[  617.906970][T23741] netlink: 'syz.2.4041': attribute type 1 has an invalid length.
[  617.906992][T23741] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4041'.
[  617.950629][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4043'.
[  618.007604][T23745] nbd: couldn't find a device at index 0
[  618.107710][T23738] bond6 (unregistering): Released all slaves
[  618.602455][T23740] bond6 (unregistering): Released all slaves
[  618.810299][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4046'.
[  618.810523][T23768] netlink: 'syz.4.4047': attribute type 1 has an invalid length.
[  618.904683][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  619.149012][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  619.153301][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4048'.
[  619.271523][T23773] syzkaller0: entered promiscuous mode
[  619.271546][T23773] syzkaller0: entered allmulticast mode
[  619.283795][T23776] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  620.887501][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'.
[  621.715698][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  623.550271][T23794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4055'.
[  623.722880][T23805] team0: entered promiscuous mode
[  623.722904][T23805] team_slave_0: entered promiscuous mode
[  623.723089][T23805] team_slave_1: entered promiscuous mode
[  623.723238][T23805] team0: entered allmulticast mode
[  623.723251][T23805] team_slave_0: entered allmulticast mode
[  623.723263][T23805] team_slave_1: entered allmulticast mode
[  623.763337][T23807] netlink: 'syz.1.4057': attribute type 1 has an invalid length.
[  623.890196][T23816] dvmrp0: entered allmulticast mode
[  623.892342][T23816] dvmrp0: left allmulticast mode
[  623.897046][T23807] netlink: 'syz.1.4057': attribute type 1 has an invalid length.
[  624.271229][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  624.408805][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'.
[  624.409984][T23837] hsr_slave_0: left promiscuous mode
[  624.410892][T23837] hsr_slave_1: left promiscuous mode
[  624.453362][T23841] openvswitch: netlink: Duplicate or invalid key (type 0).
[  624.469576][T23836] netlink: 'syz.1.4065': attribute type 4 has an invalid length.
[  624.561988][T23833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4065'.
[  624.597732][T23844] batman_adv: batadv0: Adding interface: gretap1
[  624.597753][T23844] batman_adv: batadv0: Interface activated: gretap1
[  624.649855][T23836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4065'.
[  624.659962][T23833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4065'.
[  624.723820][T23847] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4070'.
[  625.362063][T23877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4075'.
[  625.673751][T23889] netlink: 'syz.2.4079': attribute type 16 has an invalid length.
[  625.673773][T23889] netlink: 'syz.2.4079': attribute type 17 has an invalid length.
[  625.735682][T23887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4078'.
[  625.918400][T23889] vlan0: left promiscuous mode
[  625.922725][T23889] macvtap0: left promiscuous mode
[  625.933770][T23889] gre1: left promiscuous mode
[  625.933807][T23889] gre1: left allmulticast mode
[  625.959429][T23889] veth5: left allmulticast mode
[  625.981007][T23894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4079'.
[  626.253612][T23913] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4084'.
[  626.309884][T17506] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  626.310369][T17506] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  626.357461][ T5714] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  626.568575][T23927] netlink: 'syz.0.4089': attribute type 10 has an invalid length.
[  626.586515][T23927] syz_tun: entered promiscuous mode
[  626.628749][T23927] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  626.746693][ T5714] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  626.875370][ T5714] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  626.905882][T23943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.105926][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  628.243682][T23974] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  628.247884][T23974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  628.737799][T23996] __nla_validate_parse: 2 callbacks suppressed
[  628.737821][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'.
[  629.083866][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'.
[  629.183070][T23976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.199126][T23976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.267001][T23976] tipc: Resetting bearer <eth:syzkaller0>
[  629.293863][T23976] batman_adv: batadv0: Interface deactivated: gretap1
[  629.334545][T17512] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.334593][T17512] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.334626][T17512] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.334659][T17512] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  630.058336][T24030] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.119472][T24030] tap0: tun_chr_ioctl cmd 1074025680
[  630.435820][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  630.728755][T24038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.881743][T24053] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4118'.
[  630.923629][T24052] vxcan2: entered allmulticast mode
[  630.947586][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.122833][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.155313][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.182257][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.182734][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.183182][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.183612][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'.
[  631.306103][ T1997] block nbd6: Possible stuck request ffff888026d10000: control (read@0,1024B). Runtime 30 seconds
[  631.310277][ T1997] block nbd6: Possible stuck request ffff888026d101c0: control (read@1024,1024B). Runtime 30 seconds
[  631.310312][ T1997] block nbd6: Possible stuck request ffff888026d10380: control (read@2048,1024B). Runtime 30 seconds
[  631.310336][ T1997] block nbd6: Possible stuck request ffff888026d10540: control (read@3072,1024B). Runtime 30 seconds
[  631.371910][T24058] batadv1: entered promiscuous mode
[  631.371933][T24058] batadv1: entered allmulticast mode
[  631.715012][T24074] bridge1: entered promiscuous mode
[  631.715034][T24074] bridge1: entered allmulticast mode
[  632.191852][T24066] Set syz0 is full, maxelem 0 reached
[  633.307443][T24127] macsec1: entered promiscuous mode
[  633.307505][T24127] syz_tun: entered promiscuous mode
[  633.344865][T24127] syz_tun: left promiscuous mode
[  633.524981][T24136] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  633.572911][T24136] xt_CT: No such helper "netbios-ns"
[  633.636899][T24129] team0: Port device team_slave_0 removed
[  633.781384][T24149] syzkaller0: left promiscuous mode
[  633.781419][T24149] syzkaller0: left allmulticast mode
[  633.979223][T24152] netlink: 'syz.4.4143': attribute type 10 has an invalid length.
[  634.073390][T24152] team_slave_0: left promiscuous mode
[  634.073741][T24152] team_slave_0: left allmulticast mode
[  634.092525][T24152] team0 (unregistering): Port device team_slave_0 removed
[  634.098258][T24152] team_slave_1: left promiscuous mode
[  634.098578][T24152] team_slave_1: left allmulticast mode
[  634.143936][T24152] team0 (unregistering): Port device team_slave_1 removed
[  634.313554][T24155] __nla_validate_parse: 66 callbacks suppressed
[  634.313607][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  634.459682][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4145'.
[  634.541160][T24161] netlink: 'syz.2.4146': attribute type 29 has an invalid length.
[  634.706968][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4148'.
[  634.841672][T24169] netlink: 'syz.0.4149': attribute type 1 has an invalid length.
[  634.909985][T24169] bond3: entered promiscuous mode
[  634.910009][T24169] bond3: entered allmulticast mode
[  634.910361][T24169] 8021q: adding VLAN 0 to HW filter on device bond3
[  635.045732][T24177] netlink: 'syz.2.4150': attribute type 1 has an invalid length.
[  635.192179][T24175] syzkaller1: entered promiscuous mode
[  635.192220][T24175] syzkaller1: entered allmulticast mode
[  635.601243][T24198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4155'.
[  635.690801][T24204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4157'.
[  635.722059][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'.
[  635.826240][T24209] netlink: 'syz.4.4158': attribute type 1 has an invalid length.
[  635.856778][T24209] 8021q: adding VLAN 0 to HW filter on device bond1
[  635.870308][T24209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.881575][T24209] bond1: (slave batadv0): making interface the new active one
[  635.893122][T24209] bond1: (slave batadv0): Enslaving as an active interface with an up link
[  635.903104][T24209] bond0: left allmulticast mode
[  635.903152][T24209] bond_slave_0: left allmulticast mode
[  635.903168][T24209] bond_slave_1: left allmulticast mode
[  635.903190][T24209] bond0: left promiscuous mode
[  635.903202][T24209] bond_slave_0: left promiscuous mode
[  635.903402][T24209] bond_slave_1: left promiscuous mode
[  635.910606][T24209] bridge0: port 3(bond0) entered disabled state
[  635.953976][T24209] bond1: (slave batadv0): Releasing active interface
[  635.965002][T24209] bridge_slave_0: left allmulticast mode
[  635.965043][T24209] bridge_slave_0: left promiscuous mode
[  635.965497][T24209] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.010390][T24209] bridge_slave_1: left allmulticast mode
[  636.010452][T24209] bridge_slave_1: left promiscuous mode
[  636.010841][T24209] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.047949][T24209] bond0: (slave bond_slave_0): Releasing backup interface
[  636.067674][T24209] bond0: (slave bond_slave_1): Releasing backup interface
[  636.073179][T24209] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.086788][T24209] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.101726][T24209] batman_adv: batadv0: Removing interface: gretap1
[  636.376941][T24221] netlink: 'syz.4.4160': attribute type 58 has an invalid length.
[  636.376984][T24221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4160'.
[  636.501579][T24223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4161'.
[  636.502222][T24223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4161'.
[  636.734448][ T6691] IPVS: starting estimator thread 0...
[  636.734881][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'.
[  636.734915][T24227] netlink: 'syz.4.4164': attribute type 1 has an invalid length.
[  636.834608][T24234] IPVS: using max 32 ests per chain, 76800 per kthread
[  637.141831][T24246] macvtap1: entered promiscuous mode
[  637.141870][T24246] syz_tun: entered promiscuous mode
[  637.165122][T24246] macvtap1: entered allmulticast mode
[  637.165142][T24246] syz_tun: entered allmulticast mode
[  637.419626][T24262] ip6t_frag: unknown flags 4
[  637.549712][T24269] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21
[  637.550333][T24269] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:25
[  637.578300][T24270] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  637.769526][T24279] IPVS: stopping master sync thread 24270 ...
[  638.180879][T24293] tipc: Started in network mode
[  638.180914][T24293] tipc: Node identity , cluster identity 4711
[  638.180945][T24293] tipc: Failed to obtain node identity
[  638.181004][T24293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  638.216474][T24293] tipc: Started in network mode
[  638.216492][T24293] tipc: Node identity , cluster identity 4711
[  638.216505][T24293] tipc: Failed to obtain node identity
[  638.216529][T24293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  638.342403][T24309] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  638.531206][T24314] vxcan1: entered promiscuous mode
[  638.784279][T24322] vlan0: entered promiscuous mode
[  638.787271][T24322] .`: entered promiscuous mode
[  638.984974][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  638.988597][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.042905][T24333] netlink: 'syz.2.4190': attribute type 1 has an invalid length.
[  639.196074][T24339] pim6reg1: entered allmulticast mode
[  639.363982][T24351] netlink: 'syz.1.4195': attribute type 1 has an invalid length.
[  639.400590][T24348] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  639.401176][T24348] __nla_validate_parse: 13 callbacks suppressed
[  639.401191][T24348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4196'.
[  639.401586][T24348] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  639.433530][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4195'.
[  639.433571][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4195'.
[  639.538230][T24360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4197'.
[  639.791402][T24363] syzkaller0: left promiscuous mode
[  639.791423][T24363] syzkaller0: left allmulticast mode
[  639.849407][T24367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4199'.
[  640.193860][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'.
[  640.193887][T24381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4202'.
[  640.228045][   T31] audit: type=1800 audit(1789956067.036:15): pid=24387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4204" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1202 res=0 errno=0
[  640.228166][T24383] syzkaller1: entered promiscuous mode
[  640.228183][T24383] syzkaller1: entered allmulticast mode
[  640.524889][T24397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'.
[  640.819881][T24402] vcan0: entered allmulticast mode
[  640.823130][T24403] vcan0: left allmulticast mode
[  640.946764][T24409] netlink: 'syz.3.4210': attribute type 13 has an invalid length.
[  640.946789][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'.
[  641.544426][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  641.943506][T24447] syzkaller1: entered allmulticast mode
[  642.612590][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'.
[  642.636798][T24479] bridge0: port 2(veth0) entered blocking state
[  642.636910][T24479] bridge0: port 2(veth0) entered disabled state
[  642.637077][T24479] veth0: entered allmulticast mode
[  642.651740][T24479] veth0: entered promiscuous mode
[  642.653012][T24479] bridge0: port 2(veth0) entered blocking state
[  642.653119][T24479] bridge0: port 2(veth0) entered forwarding state
[  642.769762][T24466] syzkaller1: entered allmulticast mode
[  642.862874][T24490] tipc: New replicast peer: 255.255.255.255
[  642.883289][T24490] tipc: Enabled bearer <udp:syz2>, priority 26
[  642.892630][T24494] xt_l2tp: v2 sid > 0xffff: 33554432
[  643.885898][ T6930] tipc: Node number set to 3649031229
[  644.962796][T24558] __nla_validate_parse: 6 callbacks suppressed
[  644.962815][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4237'.
[  645.212672][T24573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4239'.
[  645.213120][T24574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4239'.
[  645.252348][T24570] netlink: 'syz.4.4240': attribute type 8 has an invalid length.
[  645.419499][T24572] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4238'.
[  645.419777][T24568] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4238'.
[  645.452711][T24568] netlink: 'syz.3.4238': attribute type 1 has an invalid length.
[  646.026073][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  646.026548][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  646.169373][T24595] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  646.246064][T24597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4246'.
[  646.246091][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'.
[  646.247158][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'.
[  646.247192][T24597] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4246'.
[  646.247208][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'.
[  646.356480][T24598] netlink: 'syz.0.4243': attribute type 1 has an invalid length.
[  646.539401][T24606] netlink: 'syz.3.4247': attribute type 16 has an invalid length.
[  646.713256][T24618] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[  646.993970][T24626] syzkaller0: entered promiscuous mode
[  646.993991][T24626] syzkaller0: entered allmulticast mode
[  647.011828][T24625] nbd: couldn't find a device at index 0
[  647.015528][T24625] netlink: 'syz.2.4248': attribute type 9 has an invalid length.
[  648.785255][T24687] xt_policy: output policy not valid in PREROUTING and INPUT
[  648.930254][T24689] netlink: 'syz.4.4263': attribute type 3 has an invalid length.
[  648.954153][T24692] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  648.954189][T24692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  649.389944][T24706] netlink: 'syz.3.4270': attribute type 2 has an invalid length.
[  650.021205][T24724] netlink: 'syz.3.4274': attribute type 1 has an invalid length.
[  650.354267][T24738] __nla_validate_parse: 9 callbacks suppressed
[  650.362454][T24738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4276'.
[  650.461542][T24740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4276'.
[  650.658718][T24726] veth9: entered allmulticast mode
[  650.662936][T24726] bond6: (slave veth9): Enslaving as an active interface with a down link
[  650.726841][T24731] bond6: (slave veth0_to_bond): making interface the new active one
[  650.730486][T24731] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  650.780195][T24724] macvlan3: entered promiscuous mode
[  650.780218][T24724] macvlan3: entered allmulticast mode
[  650.782817][T24724] bond6: entered promiscuous mode
[  650.782836][T24724] veth0_to_bond: entered promiscuous mode
[  650.783745][T24724] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  650.816781][T24724] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth9
[  650.820716][T24724] bond6: left promiscuous mode
[  650.820742][T24724] veth0_to_bond: left promiscuous mode
[  651.007160][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'.
[  651.033844][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'.
[  651.092688][T24753] netlink: 'syz.0.4281': attribute type 4 has an invalid length.
[  651.122620][T24753] netlink: 'syz.0.4281': attribute type 4 has an invalid length.
[  651.299163][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4283'.
[  651.299189][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4283'.
[  651.299251][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4283'.
[  651.536696][T24773] ip_tables: iptables: counters copy to user failed while replacing table
[  652.217953][T24801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'.
[  652.217979][T24801] nbd: must specify at least one socket
[  652.219082][T24801] block nbd2: NBD_DISCONNECT
[  652.227824][T24801] block nbd2: Send disconnect failed -104
[  652.227849][T24801] block nbd2: shutting down sockets
[  652.332570][T24804] openvswitch: netlink: Missing key (keys=40, expected=100)
[  652.747121][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'.
[  652.747285][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'.
[  652.993155][T24824] batman_adv: batadv0: Adding interface: dummy0
[  652.993188][T24824] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.993241][T24824] batman_adv: batadv0: Interface activated: dummy0
[  653.070708][T24830] IPv6: NLM_F_REPLACE set, but no existing node found!
[  653.103628][T24827] syzkaller0: entered promiscuous mode
[  653.103651][T24827] syzkaller0: entered allmulticast mode
[  653.163535][T24832] batadv0: mtu less than device minimum
[  653.164936][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.166241][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.167533][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.168829][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.170161][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.171511][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.172807][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.174149][T24832] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  653.246796][T24827] netlink: 'syz.0.4300': attribute type 3 has an invalid length.
[  656.279540][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  658.075954][T24926] netlink: 'syz.1.4317': attribute type 7 has an invalid length.
[  658.533165][T24934] sctp: [Deprecated]: syz.2.4318 (pid 24934) Use of int in max_burst socket option.
[  658.533165][T24934] Use struct sctp_assoc_value instead
[  658.583977][T24939] __nla_validate_parse: 4 callbacks suppressed
[  658.583996][T24939] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4320'.
[  659.109837][T24956] netlink: 'syz.2.4326': attribute type 362 has an invalid length.
[  659.164244][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.164862][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.165223][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.165614][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.167481][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.167903][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.168272][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.168661][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.169060][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  659.627077][T24967] syzkaller0: entered promiscuous mode
[  659.627099][T24967] syzkaller0: entered allmulticast mode
[  659.631906][T24967] net_ratelimit: 11 callbacks suppressed
[  659.631923][T24967] 0: reclassify loop, rule prio 0, protocol 700
[  660.153054][T25003] netlink: 'syz.2.4335': attribute type 3 has an invalid length.
[  660.201115][T24999] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  660.228258][T24999] bond6 (unregistering): Released all slaves
[  661.390780][ T1997] block nbd6: Possible stuck request ffff888026d10000: control (read@0,1024B). Runtime 60 seconds
[  661.390823][ T1997] block nbd6: Possible stuck request ffff888026d101c0: control (read@1024,1024B). Runtime 60 seconds
[  661.390848][ T1997] block nbd6: Possible stuck request ffff888026d10380: control (read@2048,1024B). Runtime 60 seconds
[  661.390869][ T1997] block nbd6: Possible stuck request ffff888026d10540: control (read@3072,1024B). Runtime 60 seconds
[  661.882485][T25079] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  662.537503][T25100] 8021q: adding VLAN 0 to HW filter on device bond0
[  662.557987][T25100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.259927][T25100] veth1_macvtap: left promiscuous mode
[  663.262216][T25100] veth0_macvtap: left promiscuous mode
[  663.279729][T25100] veth0_macvtap: entered promiscuous mode
[  663.284249][T25100] veth1_macvtap: entered promiscuous mode
[  663.335440][T25100] 8021q: adding VLAN 0 to HW filter on device eth0
[  663.337371][T25100] 8021q: adding VLAN 0 to HW filter on device eth1
[  663.341614][T25100] 8021q: adding VLAN 0 to HW filter on device eth2
[  663.343554][T25100] 8021q: adding VLAN 0 to HW filter on device eth3
[  663.383638][T25100] macvtap1: left promiscuous mode
[  663.408733][T25100] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  663.724752][T25134] netlink: 'syz.4.4369': attribute type 4 has an invalid length.
[  663.724774][T25134] __nla_validate_parse: 28 callbacks suppressed
[  663.724785][T25134] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4369'.
[  663.835293][T15589] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.835357][T15589] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.835517][T15589] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.835558][T15589] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.835629][T15589] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.835682][T15589] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.835750][T15589] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.835790][T15589] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.877491][T25147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4370'.
[  663.877563][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'.
[  664.298132][T25160] Cannot find add_set index 0 as target
[  664.661136][T25178] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4379'.
[  664.831790][T25170] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  664.948882][T25190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4381'.
[  664.948943][T25190] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4381'.
[  665.002909][T25195] netlink: 'syz.4.4383': attribute type 2 has an invalid length.
[  665.017063][T25195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4383'.
[  665.658773][T25212] netlink: 'syz.1.4388': attribute type 2 has an invalid length.
[  665.719376][T25215] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4389'.
[  665.812638][T25218] GUP no longer grows the stack in syz.2.4391 (25218): 200000003000-20000000a000 (200000001000)
[  665.812670][T25218] CPU: 1 UID: 0 PID: 25218 Comm: syz.2.4391 Not tainted syzkaller #0 PREEMPT(full) 
[  665.812691][T25218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  665.812702][T25218] Call Trace:
[  665.812711][T25218]  <TASK>
[  665.812720][T25218]  dump_stack_lvl+0xe8/0x150
[  665.812756][T25218]  __get_user_pages+0x23b6/0x2750
[  665.812823][T25218]  ? lock_acquire+0x115/0x350
[  665.812875][T25218]  ? __gup_longterm_locked+0xc3b/0x15c0
[  665.812909][T25218]  __gup_longterm_locked+0xd52/0x15c0
[  665.812936][T25218]  ? lock_acquire+0x115/0x350
[  665.812970][T25218]  gup_fast_fallback+0x1d92/0x20e0
[  665.813040][T25218]  ? __pfx_gup_fast_fallback+0x10/0x10
[  665.813068][T25218]  ? lock_acquire+0x115/0x350
[  665.813084][T25218]  ? is_valid_gup_args+0x11f/0x200
[  665.813109][T25218]  ? get_user_pages_fast+0x4d/0xb0
[  665.813136][T25218]  __iov_iter_get_pages_alloc+0x378/0xa40
[  665.813229][T25218]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  665.813265][T25218]  iov_iter_get_pages2+0x5e/0xa0
[  665.813300][T25218]  __se_sys_vmsplice+0x7b5/0x1660
[  665.813348][T25218]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  665.813376][T25218]  ? __pfx_futex_wait+0x10/0x10
[  665.813487][T25218]  do_syscall_64+0x166/0x520
[  665.813511][T25218]  ? trace_irq_disable+0x3b/0x140
[  665.813529][T25218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.813549][T25218]  ? clear_bhb_loop+0x70/0xc0
[  665.813571][T25218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.813589][T25218] RIP: 0033:0x7f8dec59e159
[  665.813607][T25218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.813626][T25218] RSP: 002b:00007f8ded487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  665.813646][T25218] RAX: ffffffffffffffda RBX: 00007f8dec826090 RCX: 00007f8dec59e159
[  665.813660][T25218] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  665.813673][T25218] RBP: 00007f8dec63506b R08: 0000000000000000 R09: 0000000000000000
[  665.813684][T25218] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  665.813693][T25218] R13: 00007f8dec826128 R14: 00007f8dec826090 R15: 00007fffb1b1b158
[  665.813724][T25218]  </TASK>
[  666.155002][T25220] vcan0: entered allmulticast mode
[  666.176141][T25221] vcan0: left allmulticast mode
[  666.271391][T25223] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  666.817365][ T4982] udevd[4982]: worker [22642] /devices/virtual/block/nbd6 is taking a long time
[  666.931535][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4396'.
[  667.031267][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4402'.
[  667.342436][T25273] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  667.362890][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378002][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378109][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378229][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378314][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378399][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378481][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378565][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.378642][T25274] netlink: 'syz.1.4407': attribute type 2 has an invalid length.
[  667.448027][T25273] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  667.986251][T25282] netlink: 'syz.4.4410': attribute type 1 has an invalid length.
[  668.023136][   T31] audit: type=1800 audit(1789956094.826:16): pid=25275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4406" name="memory.events" dev="tmpfs" ino=1418 res=0 errno=0
[  668.067538][T25282] 8021q: adding VLAN 0 to HW filter on device bond2
[  668.101589][T25282] netlink: 'syz.4.4410': attribute type 1 has an invalid length.
[  668.151074][T25288] bond2: (slave geneve3): making interface the new active one
[  668.175306][T25288] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  668.265196][T25297] netlink: 'syz.3.4414': attribute type 30 has an invalid length.
[  668.509753][T25297] bond7: option arp_missed_max: invalid value (0)
[  668.509910][T25297] bond7: option arp_missed_max: allowed values 1 - 255
[  668.541698][T25297] bond7 (unregistering): Released all slaves
[  668.736906][T25307] openvswitch: netlink: Flow actions attr not present in new flow.
[  668.756844][T25305] __nla_validate_parse: 11 callbacks suppressed
[  668.756889][T25305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4417'.
[  669.412704][T25349] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4425'.
[  669.939479][T25361] openvswitch: netlink: Key type 5377 is out of range max 32
[  670.270696][T25367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4431'.
[  670.303885][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4431'.
[  670.422370][T25379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4433'.
[  670.525114][T25377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'.
[  670.908906][T25384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4436'.
[  671.419633][T25410] netlink: 'syz.4.4440': attribute type 1 has an invalid length.
[  671.422134][T25410] netlink: 'syz.4.4440': attribute type 1 has an invalid length.
[  671.422171][T25410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4440'.
[  671.422199][T25410] NCSI netlink: No device for ifindex 0
[  671.634582][T25420] netlink: 'syz.1.4442': attribute type 1 has an invalid length.
[  671.721774][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'.
[  671.722452][T25425] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4445'.
[  671.799559][T25420] 8021q: adding VLAN 0 to HW filter on device bond8
[  671.872452][T25424] 8021q: adding VLAN 0 to HW filter on device bond8
[  671.872934][T25424] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address
[  671.873442][T25424] bond8: (slave xfrm1): Error -95 calling set_mac_address
[  671.931447][T25429] dummy0: left promiscuous mode
[  671.931469][T25429] dummy0: left allmulticast mode
[  672.020008][T25429] bond8: (slave dummy0): making interface the new active one
[  672.020632][T25429] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  672.130109][T25442] netlink: 'syz.3.4449': attribute type 12 has an invalid length.
[  672.130130][T25442] netlink: 'syz.3.4449': attribute type 29 has an invalid length.
[  672.130163][T25442] netlink: 'syz.3.4449': attribute type 1 has an invalid length.
[  672.668558][ T5625] Bluetooth: hci4: link tx timeout
[  672.668807][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  673.213816][T25483] batadv0: entered promiscuous mode
[  673.214144][T25483] macvtap2: entered promiscuous mode
[  673.224848][T25483] macvtap2: entered allmulticast mode
[  673.224885][T25483] batadv0: entered allmulticast mode
[  673.233473][T25483] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  673.258736][T25483] batadv0: left allmulticast mode
[  673.258943][T25483] batadv0: left promiscuous mode
[  673.306651][T25483] 
[  673.309016][T25483] ======================================================
[  673.316068][T25483] WARNING: possible circular locking dependency detected
[  673.323133][T25483] syzkaller #0 Not tainted
[  673.327557][T25483] ------------------------------------------------------
[  673.334639][T25483] syz.4.4462/25483 is trying to acquire lock:
[  673.340766][T25483] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  673.350708][T25483] 
[  673.350708][T25483] but task is already holding lock:
[  673.358071][T25483] ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  673.366897][T25483] 
[  673.366897][T25483] which lock already depends on the new lock.
[  673.366897][T25483] 
[  673.377303][T25483] 
[  673.377303][T25483] the existing dependency chain (in reverse order) is:
[  673.386318][T25483] 
[  673.386318][T25483] -> #12 (gdp_mutex){+.+.}-{4:4}:
[  673.393662][T25483]        __mutex_lock+0x19d/0x1550
[  673.398859][T25483]        get_device_parent+0x16f/0x3a0
[  673.404328][T25483]        device_add+0x2d4/0xb80
[  673.409200][T25483]        device_create+0x269/0x300
[  673.414326][T25483]        msr_device_create+0x33/0x50
[  673.419669][T25483]        cpuhp_invoke_callback+0x434/0x810
[  673.425533][T25483]        cpuhp_thread_fun+0x362/0x780
[  673.430937][T25483]        smpboot_thread_fn+0x565/0xa70
[  673.436447][T25483]        kthread+0x38b/0x480
[  673.441048][T25483]        ret_from_fork+0x514/0xb70
[  673.446173][T25483]        ret_from_fork_asm+0x1a/0x30
[  673.451467][T25483] 
[  673.451467][T25483] -> #11 (cpuhp_state-up){+.+.}-{0:0}:
[  673.459132][T25483]        cpuhp_thread_fun+0x127/0x780
[  673.464530][T25483]        smpboot_thread_fn+0x565/0xa70
[  673.470048][T25483]        kthread+0x38b/0x480
[  673.474648][T25483]        ret_from_fork+0x514/0xb70
[  673.479770][T25483]        ret_from_fork_asm+0x1a/0x30
[  673.485073][T25483] 
[  673.485073][T25483] -> #10 (cpu_hotplug_lock){++++}-{0:0}:
[  673.492895][T25483]        cpus_read_lock+0x42/0x160
[  673.498008][T25483]        static_key_slow_inc+0x12/0x30
[  673.503507][T25483]        ipv6_flowlabel_opt+0x1cb1/0x2b10
[  673.509339][T25483]        do_ipv6_setsockopt+0x9cb/0x2960
[  673.515066][T25483]        ipv6_setsockopt+0x59/0x170
[  673.520286][T25483]        do_sock_setsockopt+0x17c/0x1b0
[  673.525842][T25483]        __x64_sys_setsockopt+0x13d/0x1b0
[  673.531564][T25483]        do_syscall_64+0x166/0x520
[  673.536680][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.543091][T25483] 
[  673.543091][T25483] -> #9 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  673.550842][T25483]        lock_sock_nested+0x41/0x100
[  673.556217][T25483]        tls_sw_sendmsg+0x15f/0x2b50
[  673.561583][T25483]        sock_sendmsg_nosec+0x90/0x180
[  673.567042][T25483]        sock_write_iter+0x2de/0x3e0
[  673.572332][T25483]        do_iter_readv_writev+0x612/0x8c0
[  673.578044][T25483]        vfs_writev+0x343/0x990
[  673.582889][T25483]        do_writev+0x154/0x2e0
[  673.587641][T25483]        do_syscall_64+0x166/0x520
[  673.592766][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.599174][T25483] 
[  673.599174][T25483] -> #8 (&ctx->tx_lock){+.+.}-{4:4}:
[  673.606650][T25483]        __mutex_lock+0x19d/0x1550
[  673.611763][T25483]        tls_sw_sendmsg+0x13a/0x2b50
[  673.617045][T25483]        sock_sendmsg_nosec+0x90/0x180
[  673.622497][T25483]        sock_sendmsg+0x1ca/0x2d0
[  673.627510][T25483]        __sock_xmit+0x245/0x4f0
[  673.632551][T25483]        nbd_disconnect+0x3ad/0x560
[  673.637741][T25483]        nbd_disconnect_and_put+0x32/0x280
[  673.643547][T25483]        nbd_genl_disconnect+0x4af/0x590
[  673.649191][T25483]        genl_family_rcv_msg_doit+0x233/0x340
[  673.655408][T25483]        genl_rcv_msg+0x614/0x7a0
[  673.660447][T25483]        netlink_rcv_skb+0x226/0x4a0
[  673.665739][T25483]        genl_rcv+0x28/0x40
[  673.670241][T25483]        netlink_unicast+0x7bd/0x940
[  673.675566][T25483]        netlink_sendmsg+0x813/0xb40
[  673.680855][T25483]        sock_sendmsg_nosec+0x13a/0x180
[  673.686391][T25483]        ____sys_sendmsg+0x54e/0x850
[  673.691672][T25483]        ___sys_sendmsg+0x2a5/0x360
[  673.696863][T25483]        __x64_sys_sendmsg+0x1b1/0x290
[  673.702321][T25483]        do_syscall_64+0x166/0x520
[  673.707436][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.713848][T25483] 
[  673.713848][T25483] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  673.721497][T25483]        __mutex_lock+0x19d/0x1550
[  673.726647][T25483]        nbd_queue_rq+0x373/0xff0
[  673.731666][T25483]        blk_mq_dispatch_rq_list+0x499/0x1990
[  673.737919][T25483]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  673.744803][T25483]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  673.751302][T25483]        blk_mq_run_work_fn+0x16c/0x300
[  673.756848][T25483]        process_scheduled_works+0xc3d/0x1630
[  673.762953][T25483]        worker_thread+0xa47/0xfb0
[  673.768062][T25483]        kthread+0x38b/0x480
[  673.772999][T25483]        ret_from_fork+0x514/0xb70
[  673.778121][T25483]        ret_from_fork_asm+0x1a/0x30
[  673.783417][T25483] 
[  673.783417][T25483] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  673.790639][T25483]        __mutex_lock+0x19d/0x1550
[  673.795753][T25483]        nbd_queue_rq+0xc1/0xff0
[  673.800688][T25483]        blk_mq_dispatch_rq_list+0x499/0x1990
[  673.806755][T25483]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  673.813604][T25483]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  673.820101][T25483]        blk_mq_run_work_fn+0x16c/0x300
[  673.825648][T25483]        process_scheduled_works+0xc3d/0x1630
[  673.831719][T25483]        worker_thread+0xa47/0xfb0
[  673.836828][T25483]        kthread+0x38b/0x480
[  673.841416][T25483]        ret_from_fork+0x514/0xb70
[  673.846519][T25483]        ret_from_fork_asm+0x1a/0x30
[  673.851807][T25483] 
[  673.851807][T25483] -> #5 (set->srcu){.+.+}-{0:0}:
[  673.858931][T25483]        __synchronize_srcu+0xc9/0x2f0
[  673.864428][T25483]        elevator_switch+0x1e8/0x7b0
[  673.869840][T25483]        elevator_change+0x2fa/0x480
[  673.875120][T25483]        elevator_set_default+0x375/0x440
[  673.880832][T25483]        blk_register_queue+0x3f3/0x4e0
[  673.886425][T25483]        __add_disk+0x6b8/0xdb0
[  673.891279][T25483]        add_disk_fwnode+0x100/0x3a0
[  673.896567][T25483]        nbd_dev_add+0x733/0xb60
[  673.901497][T25483]        nbd_init+0x168/0x1f0
[  673.906279][T25483]        do_one_initcall+0x250/0x870
[  673.911567][T25483]        do_initcall_level+0x10a/0x1a0
[  673.917051][T25483]        do_initcalls+0x59/0xa0
[  673.921895][T25483]        kernel_init_freeable+0x29d/0x3e0
[  673.927612][T25483]        kernel_init+0x22/0x1d0
[  673.932464][T25483]        ret_from_fork+0x514/0xb70
[  673.937579][T25483]        ret_from_fork_asm+0x1a/0x30
[  673.942869][T25483] 
[  673.942869][T25483] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  673.950686][T25483]        __mutex_lock+0x19d/0x1550
[  673.955800][T25483]        elevator_change+0x1af/0x480
[  673.961088][T25483]        elevator_set_none+0xb5/0x140
[  673.966454][T25483]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  673.972785][T25483]        nbd_start_device+0x189/0xb30
[  673.978152][T25483]        nbd_genl_connect+0x167d/0x1cd0
[  673.983696][T25483]        genl_family_rcv_msg_doit+0x233/0x340
[  673.989762][T25483]        genl_rcv_msg+0x614/0x7a0
[  673.994783][T25483]        netlink_rcv_skb+0x226/0x4a0
[  674.000068][T25483]        genl_rcv+0x28/0x40
[  674.004567][T25483]        netlink_unicast+0x7bd/0x940
[  674.009854][T25483]        netlink_sendmsg+0x813/0xb40
[  674.015140][T25483]        sock_sendmsg_nosec+0x13a/0x180
[  674.020677][T25483]        ____sys_sendmsg+0x54e/0x850
[  674.025962][T25483]        ___sys_sendmsg+0x2a5/0x360
[  674.031160][T25483]        __x64_sys_sendmsg+0x1b1/0x290
[  674.036613][T25483]        do_syscall_64+0x166/0x520
[  674.041732][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.048153][T25483] 
[  674.048153][T25483] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  674.056792][T25483]        blk_alloc_queue+0x544/0x690
[  674.062075][T25483]        __blk_mq_alloc_disk+0x194/0x390
[  674.067707][T25483]        nbd_dev_add+0x494/0xb60
[  674.072642][T25483]        nbd_init+0x168/0x1f0
[  674.077315][T25483]        do_one_initcall+0x250/0x870
[  674.082599][T25483]        do_initcall_level+0x10a/0x1a0
[  674.088063][T25483]        do_initcalls+0x59/0xa0
[  674.092906][T25483]        kernel_init_freeable+0x29d/0x3e0
[  674.098624][T25483]        kernel_init+0x22/0x1d0
[  674.103481][T25483]        ret_from_fork+0x514/0xb70
[  674.108585][T25483]        ret_from_fork_asm+0x1a/0x30
[  674.113873][T25483] 
[  674.113873][T25483] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  674.121079][T25483]        fs_reclaim_acquire+0x71/0x100
[  674.126535][T25483]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  674.132776][T25483]        alloc_inode+0xb8/0x1b0
[  674.137624][T25483]        iget_locked+0x131/0x6a0
[  674.142570][T25483]        kernfs_get_inode+0x4f/0x770
[  674.148117][T25483]        kernfs_get_tree+0x5cd/0x980
[  674.153403][T25483]        vfs_get_tree+0x92/0x2a0
[  674.158357][T25483]        do_new_mount+0x319/0xdc0
[  674.163380][T25483]        __se_sys_mount+0x31d/0x420
[  674.168572][T25483]        do_syscall_64+0x166/0x520
[  674.173680][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.180122][T25483] 
[  674.180122][T25483] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  674.188116][T25483]        down_write+0x96/0x200
[  674.192877][T25483]        kernfs_remove_by_name_ns+0x4e/0x140
[  674.198860][T25483]        device_links_driver_bound+0x4ab/0x1440
[  674.205172][T25483]        driver_bound+0xd8/0x2e0
[  674.210338][T25483]        really_probe+0x774/0xae0
[  674.215358][T25483]        __driver_probe_device+0x1e8/0x360
[  674.221175][T25483]        driver_probe_device+0x4f/0x240
[  674.226716][T25483]        __device_attach_driver+0x270/0x410
[  674.232610][T25483]        bus_for_each_drv+0x258/0x2f0
[  674.237999][T25483]        __device_attach+0x2c4/0x450
[  674.243284][T25483]        device_initial_probe+0xa1/0xd0
[  674.248836][T25483]        bus_probe_device+0x12a/0x220
[  674.254206][T25483]        device_add+0x7d7/0xb80
[  674.259049][T25483]        faux_device_create_with_groups+0x1a5/0x2b0
[  674.265742][T25483]        regulator_dummy_init+0x19/0x40
[  674.271342][T25483]        regulator_init+0xca/0x110
[  674.276704][T25483]        do_one_initcall+0x250/0x870
[  674.281994][T25483]        do_initcall_level+0x10a/0x1a0
[  674.287450][T25483]        do_initcalls+0x59/0xa0
[  674.292300][T25483]        kernel_init_freeable+0x29d/0x3e0
[  674.298022][T25483]        kernel_init+0x22/0x1d0
[  674.302872][T25483]        ret_from_fork+0x514/0xb70
[  674.307980][T25483]        ret_from_fork_asm+0x1a/0x30
[  674.313277][T25483] 
[  674.313277][T25483] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  674.321874][T25483]        __lock_acquire+0x164c/0x2de0
[  674.327242][T25483]        lock_acquire+0x115/0x350
[  674.332261][T25483]        down_read+0x4a/0x330
[  674.336942][T25483]        kernfs_remove+0x35/0x80
[  674.341875][T25483]        __kobject_del+0xe0/0x310
[  674.346985][T25483]        kobject_del+0x45/0x60
[  674.351744][T25483]        cleanup_glue_dir+0x1a3/0x220
[  674.357111][T25483]        device_del+0x77d/0x8f0
[  674.361956][T25483]        device_destroy+0xb2/0x1a0
[  674.367062][T25483]        macvtap_device_event+0x226/0x400
[  674.372870][T25483]        notifier_call_chain+0x1a5/0x3d0
[  674.378508][T25483]        unregister_netdevice_many_notify+0x17f9/0x2140
[  674.385534][T25483]        rtnl_newlink_create+0x664/0x7b0
[  674.391232][T25483]        rtnl_newlink+0x167a/0x1c30
[  674.396431][T25483]        rtnetlink_rcv_msg+0x802/0xc00
[  674.401887][T25483]        netlink_rcv_skb+0x226/0x4a0
[  674.407177][T25483]        netlink_unicast+0x7bd/0x940
[  674.412467][T25483]        netlink_sendmsg+0x813/0xb40
[  674.417756][T25483]        sock_sendmsg_nosec+0x13a/0x180
[  674.423295][T25483]        ____sys_sendmsg+0x54e/0x850
[  674.428578][T25483]        ___sys_sendmsg+0x2a5/0x360
[  674.433778][T25483]        __x64_sys_sendmsg+0x1b1/0x290
[  674.439234][T25483]        do_syscall_64+0x166/0x520
[  674.444353][T25483]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.450762][T25483] 
[  674.450762][T25483] other info that might help us debug this:
[  674.450762][T25483] 
[  674.460981][T25483] Chain exists of:
[  674.460981][T25483]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  674.460981][T25483] 
[  674.474364][T25483]  Possible unsafe locking scenario:
[  674.474364][T25483] 
[  674.481894][T25483]        CPU0                    CPU1
[  674.487339][T25483]        ----                    ----
[  674.492713][T25483]   lock(gdp_mutex);
[  674.496607][T25483]                                lock(cpuhp_state-up);
[  674.503447][T25483]                                lock(gdp_mutex);
[  674.509859][T25483]   rlock(&root->kernfs_supers_rwsem);
[  674.515328][T25483] 
[  674.515328][T25483]  *** DEADLOCK ***
[  674.515328][T25483] 
[  674.523577][T25483] locks held by syz.4.4462/25483: 3, last CPU#1:
[  674.530021][T25483]  #0: ffffffff907a80d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  674.539567][T25483]  #1: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  674.548614][T25483]  #2: ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  674.557749][T25483] 
[  674.557749][T25483] stack backtrace:
[  674.563634][T25483] CPU: 1 UID: 0 PID: 25483 Comm: syz.4.4462 Not tainted syzkaller #0 PREEMPT(full) 
[  674.572997][T25483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.583055][T25483] Call Trace:
[  674.586347][T25483]  <TASK>
[  674.589275][T25483]  dump_stack_lvl+0xe8/0x150
[  674.593877][T25483]  print_circular_bug+0x2e2/0x300
[  674.598918][T25483]  check_noncircular+0x12f/0x150
[  674.604028][T25483]  __lock_acquire+0x164c/0x2de0
[  674.608881][T25483]  lock_acquire+0x115/0x350
[  674.613389][T25483]  ? kernfs_remove+0x35/0x80
[  674.617977][T25483]  down_read+0x4a/0x330
[  674.622128][T25483]  ? kernfs_remove+0x35/0x80
[  674.626716][T25483]  kernfs_remove+0x35/0x80
[  674.631127][T25483]  __kobject_del+0xe0/0x310
[  674.635630][T25483]  kobject_del+0x45/0x60
[  674.639876][T25483]  cleanup_glue_dir+0x1a3/0x220
[  674.644728][T25483]  device_del+0x77d/0x8f0
[  674.649059][T25483]  ? __pfx_device_del+0x10/0x10
[  674.653912][T25483]  ? kobject_put+0x50f/0x550
[  674.658512][T25483]  device_destroy+0xb2/0x1a0
[  674.663101][T25483]  ? __pfx_device_destroy+0x10/0x10
[  674.668305][T25483]  ? kernfs_remove_by_name_ns+0x101/0x140
[  674.674039][T25483]  macvtap_device_event+0x226/0x400
[  674.679243][T25483]  ? __pfx_ipvlan_device_event+0x10/0x10
[  674.684990][T25483]  ? __pfx_macvtap_device_event+0x10/0x10
[  674.690745][T25483]  notifier_call_chain+0x1a5/0x3d0
[  674.695868][T25483]  unregister_netdevice_many_notify+0x17f9/0x2140
[  674.702344][T25483]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  674.709214][T25483]  ? netdev_upper_dev_unlink+0x99/0xe0
[  674.714679][T25483]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  674.720658][T25483]  ? macvlan_dellink+0x3e4/0x470
[  674.725677][T25483]  rtnl_newlink_create+0x664/0x7b0
[  674.730808][T25483]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  674.736456][T25483]  ? __pfx___mutex_lock+0x10/0x10
[  674.741493][T25483]  ? ns_capable+0x89/0xe0
[  674.745847][T25483]  rtnl_newlink+0x167a/0x1c30
[  674.750532][T25483]  ? __pfx_rtnl_newlink+0x10/0x10
[  674.755554][T25483]  ? sock_sendmsg_nosec+0x13a/0x180
[  674.760753][T25483]  ? ____sys_sendmsg+0x54e/0x850
[  674.765690][T25483]  ? ___sys_sendmsg+0x2a5/0x360
[  674.770537][T25483]  ? __x64_sys_sendmsg+0x1b1/0x290
[  674.775649][T25483]  ? do_syscall_64+0x166/0x520
[  674.780413][T25483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.786488][T25483]  ? kasan_quarantine_put+0xbb/0x1f0
[  674.791770][T25483]  ? lockdep_hardirqs_on+0x7b/0x110
[  674.797053][T25483]  ? nlmon_xmit+0xb0/0x100
[  674.801569][T25483]  ? kmem_cache_free+0x182/0x650
[  674.806509][T25483]  ? __lock_acquire+0x747/0x2de0
[  674.811444][T25483]  ? __local_bh_enable_ip+0xd6/0x140
[  674.816724][T25483]  ? lockdep_hardirqs_on+0x7b/0x110
[  674.821919][T25483]  ? __dev_queue_xmit+0x29b/0x3820
[  674.827036][T25483]  ? __local_bh_enable_ip+0xd6/0x140
[  674.832328][T25483]  ? __dev_queue_xmit+0x29b/0x3820
[  674.837451][T25483]  ? __pfx_rtnl_newlink+0x10/0x10
[  674.842495][T25483]  rtnetlink_rcv_msg+0x802/0xc00
[  674.847433][T25483]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  674.852547][T25483]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  674.854973][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  674.865456][T25483]  ? ref_tracker_free+0x689/0x830
[  674.870584][T25483]  ? __pfx_ref_tracker_free+0x10/0x10
[  674.875971][T25483]  netlink_rcv_skb+0x226/0x4a0
[  674.880742][T25483]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  674.886205][T25483]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  674.891524][T25483]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.896729][T25483]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.901935][T25483]  netlink_unicast+0x7bd/0x940
[  674.906707][T25483]  netlink_sendmsg+0x813/0xb40
[  674.911475][T25483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.916765][T25483]  ? apparmor_socket_sendmsg+0x98/0x360
[  674.922438][T25483]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.927732][T25483]  sock_sendmsg_nosec+0x13a/0x180
[  674.932757][T25483]  ____sys_sendmsg+0x54e/0x850
[  674.937520][T25483]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.942809][T25483]  ? import_iovec+0x73/0xa0
[  674.947314][T25483]  ___sys_sendmsg+0x2a5/0x360
[  674.952035][T25483]  ? __lock_acquire+0x747/0x2de0
[  674.956970][T25483]  ? __pfx____sys_sendmsg+0x10/0x10
[  674.962169][T25483]  ? futex_wait+0x2a2/0x390
[  674.966690][T25483]  ? __fget_files+0x2a/0x420
[  674.971282][T25483]  ? __fget_files+0x3a2/0x420
[  674.976076][T25483]  __x64_sys_sendmsg+0x1b1/0x290
[  674.981013][T25483]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  674.986480][T25483]  do_syscall_64+0x166/0x520
[  674.991072][T25483]  ? trace_irq_disable+0x3b/0x140
[  674.996089][T25483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.002154][T25483]  ? clear_bhb_loop+0x70/0xc0
[  675.006829][T25483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.012724][T25483] RIP: 0033:0x7f4aa259e159
[  675.017140][T25483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.036741][T25483] RSP: 002b:00007f4aa350a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  675.045157][T25483] RAX: ffffffffffffffda RBX: 00007f4aa2825fa0 RCX: 00007f4aa259e159
[  675.053134][T25483] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  675.061100][T25483] RBP: 00007f4aa263506b R08: 0000000000000000 R09: 0000000000000000
[  675.069064][T25483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  675.077027][T25483] R13: 00007f4aa2826038 R14: 00007f4aa2825fa0 R15: 00007ffd3af7be28
[  675.085007][T25483]  </TASK>
[  675.102333][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  681.864706][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!