last executing test programs:

7.278765245s ago: executing program 4 (id=6596):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
sendto$l2tp(r0, &(0x7f0000000080)="aba6cdaea4ec023e5aa295cbb8dc4834584ec29586f0cb27667d01221d3b7dbc6268960bd2d2c564ae43aacd10b9b7cc76d5b8529570c51c2bf58e0dc492dd5dd4be76f4ae265ab0fbf7133bbe8d4f159e1fa9fea22514283d935f5935838df65044fa6ddbc11af04920aebc82e1cba917cdfe008923097e6403e5c59c8d3ff9d13e3b8922c9b331906a0729f2cc928b588047a089b76bf9eb03ccd25ae77bb51cc111decbf12714b58e9775ec98b331a4a712e7f5ce632421fcd1628db02ac2b6c173c068ff6fac9e71669e5a4214ff706f", 0xd2, 0x4000, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) (async, rerun: 64)
writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) (rerun: 64)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async, rerun: 32)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r4=>0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4)
syz_open_procfs$namespace(r4, &(0x7f0000000040))

7.139277564s ago: executing program 4 (id=6600):
syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50)
syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r3, r1}, 0xc)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000002c0)={'netpci0\x00', {0x2, 0x0, @initdev}})
r4 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
close(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

6.577858032s ago: executing program 4 (id=6607):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\"\x00\x00'], 0x48) (async)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0xfffffffffffffeb6, 0x2c}, 0x44004)

6.348368738s ago: executing program 2 (id=6610):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast2, @remote, 0x16, 0x18}})
r3 = socket(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="09000000010001", 0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="9420010000000000280012800b00010067656e65b96cc4e20a4776650000180002800400"], 0x48}}, 0x20000050)
r5 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

6.079533274s ago: executing program 3 (id=6612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000681bd9a01eeb22c6d46db800850000006a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x40d, 0x70bd2a, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x6748}]}}}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xe}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c890}, 0xc)

6.078358548s ago: executing program 0 (id=6613):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0}) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={<r3=>0x0, @in6={{0xa, 0x4e22, 0x18, @local, 0x2}}}, &(0x7f0000000340)=0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={r3, 0xa703}, &(0x7f00000003c0)=0x8) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0)
close(r4) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002cbd7000fbdbdf254400000008000300b8db828baccb6d06cc822a9dca052ddbbb44af0f3685016874e4a58f49f97c03a909795d59d941603e96a88193ec034b609035b3885754ca68ed1b9f23c54653ac70061671dd19757a57926a05d185d3c9d37aae59218b45009784ef9b61fa99cfa88b00"/127, @ANYRES32=r2, @ANYBLOB="0800a100050012000400bf00"], 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x4050) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5.931336136s ago: executing program 0 (id=6614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x9}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x2}, 0x28)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a0, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendto$inet(r4, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
bind$x25(r4, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010000000000000083ab0300000004000180"], 0x18}}, 0x0)

5.329511792s ago: executing program 4 (id=6615):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x60, 0x12, 0x1, 0x70bd27, 0x25dfdbfb, {0x15, 0x6, 0x2, 0x2, {0x4e23, 0x4e22, [0xfffffffc, 0x8, 0x101, 0xb], [0x8, 0x4f2, 0x3, 0x5], 0x0, [0xfff, 0x5]}, 0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "09612b720200629cb3a766586837"}]}, 0x60}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x5, [@union={0x9, 0x4, 0x0, 0x5, 0x0, 0x5, [{0x6, 0x4, 0x1000}, {0xc, 0x1, 0x400}, {0xa, 0x1, 0x80000001}, {0xb, 0x2, 0x9}]}, @fwd={0x8}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xa, 0x5}, {0x3, 0x1}, {0x8, 0x4}, {0x8}, {0x5}, {0x9, 0x4}, {0xc, 0x2}]}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @struct={0xc, 0x3, 0x0, 0x4, 0x1, 0x7, [{0xf, 0x5, 0xb44}, {0x8, 0x0, 0x3}, {0x6, 0x5, 0xe1}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @const={0x1}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000540)=""/153, 0x111, 0x99, 0x1, 0x6, 0x10000}, 0x28)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@nested={0x10, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x1, 0x19, 0x9, 0x12401, r6, 0x4, '\x00', r4, r7, 0x5, 0x5, 0x2, 0x0, @void, @value, @value=r9}, 0x50)
poll(&(0x7f0000000280)=[{r1, 0x408}, {r10, 0x90}, {r1, 0x204}], 0x3, 0x7)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x40000)

4.776074435s ago: executing program 1 (id=6616):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b0000000000852000000400000095000058aa649a00"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xc044) (async)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

4.76599037s ago: executing program 2 (id=6617):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
socket(0x2c, 0x5, 0x200)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4)
close(0x4)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)=0x1)

4.757467839s ago: executing program 3 (id=6618):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x3c, r1, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x932}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-5lx  \x00'}, 0x20)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000440))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

4.738202018s ago: executing program 0 (id=6619):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xde, 0x1000})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea)

4.54361662s ago: executing program 1 (id=6620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b0400fb7ec388164bb3000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0600270000000000"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b0400fb7ec388164bb3000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0600270000000000"], 0x44}}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}], 0x1c)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null]}, 0x48)
connect$ax25(r3, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @bcast, @bcast]}, 0x48)
accept$netrom(r3, &(0x7f0000001200)={{0x3, @rose}, [@netrom, @netrom, @default, @remote, @bcast, @bcast, @null, @netrom]}, &(0x7f0000002500)=0x48)
sendmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000900)="1d528a956813971d2bd7430c7bd7699e2bcea3a63dcf4ea42372f9b9b76860e49870f3bd19a0c123338dcc74baf5bb199407f751457c4d577aabe57751997fc4962f8ce803080690a3cd", 0x4a}, {&(0x7f0000000200)="5eba4c9845c7c579ac2ddc3bc24b693ae08d3654dba031068f2811b92ed4390fb0e3ba30dacb20bdf56bb4cdaa1932ff6ade5d2abcd5a2524f1b21bc8323883c8910f028d3a1a213fb0a9b4a597b34615ee5a59e49aa120aa280e51841dc75639de2e10ba0a46e1b5243616f220361fd7f55876e1a351d2f1e6e037813de0998a0b471c80b8fa5669a792bdec032835d7166421e15d67dc4b750c054518bb79477ea9fdea45b86ef2b802dcd9a36d5c46e750df93f6de5326aae1f9d18db59264e8fec8accd461a1dc733e43452b62bc9625d55f393586e5d271adbfa598a27f2e", 0xe1}, {&(0x7f0000000300)="420c1f2050b0b599fd65736be707b32e52fdf488461931aba10437104f45891fe7fa62e3782bfaad348eb421f05fdb158451ac4bac2279f42fe35bca650737c29b70506885c9c2894fc10da1a5e07094c782674f5e3a457d8b431f06c1cd00007e7ae3d9b0b65c71fd5eacc6827e91e9fcd9db741a847ee15028bbdb9d898075d7cb1c823aa47f3cdc6ec8dae6bffccb3f70c664e4e27101d482048e9fcccadcefe8bf97b785b57e493d44045ae53f290dcdff3a0b7bc87ca31c4ddd4109", 0xbe}, {&(0x7f00000003c0)="e5be477dd351b85ab7f5a38d1d26e3897023068b6f0a846d637dde0c926fe349299f18114259f401dd5a630b03122e0fad7223b141da4d6955e5febff5c1739cb2212dab2ae37104b1cf526f5cf33b2de427a5ff4b611bda6147e2305892c1d3aaccd7043c45b11abdb9eebb9a62dca97d62767a9657d2f0410a8b8a8f8aaab92b8e7b995146ecede89bc42b4aa0a7b5598af129a8fd5055c37c035dbe75788b18c8e39cb5b4f1620395b8858663308c667debdf415a2adfa6400a80cf16d6b0c253", 0xc2}, {&(0x7f00000004c0)="bf402db9639b69d3dd5c1608d1abaa4c5ead11167e79bda0efd797602dbcd098b01c1a06816f6cfdf687b1923a0fb2d94138a2d179cd144b0d13cab0e1fa45a6c522f8d77eacc3e6a7ffa9d5ef61c863ec9295cf1a92866f28c688f88c754aecdf2d87ce61fd3494008a196658bd8715bb6dd20b75fa187ccc1dbdb4130d9cdc209b7fecb357640113d74a1976d97d6b7e34fdbc45473c0e3a9897b4d453252c19fc52af26b5583e51d12fb8dc378623d95d8d74e4087da8252fb10a1e3feab9da9cfd53fea0b160eec4df3f1060ec4610eb858f67c9bc6608e2b3d579dba1df42fab6c82e640a10ecc77680a10efdcd6156f59a13e4fd", 0xf7}], 0x5, 0x0, 0x0, 0x404c040}}], 0x1, 0x804) (async)
sendmmsg$unix(r1, &(0x7f0000000640)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000900)="1d528a956813971d2bd7430c7bd7699e2bcea3a63dcf4ea42372f9b9b76860e49870f3bd19a0c123338dcc74baf5bb199407f751457c4d577aabe57751997fc4962f8ce803080690a3cd", 0x4a}, {&(0x7f0000000200)="5eba4c9845c7c579ac2ddc3bc24b693ae08d3654dba031068f2811b92ed4390fb0e3ba30dacb20bdf56bb4cdaa1932ff6ade5d2abcd5a2524f1b21bc8323883c8910f028d3a1a213fb0a9b4a597b34615ee5a59e49aa120aa280e51841dc75639de2e10ba0a46e1b5243616f220361fd7f55876e1a351d2f1e6e037813de0998a0b471c80b8fa5669a792bdec032835d7166421e15d67dc4b750c054518bb79477ea9fdea45b86ef2b802dcd9a36d5c46e750df93f6de5326aae1f9d18db59264e8fec8accd461a1dc733e43452b62bc9625d55f393586e5d271adbfa598a27f2e", 0xe1}, {&(0x7f0000000300)="420c1f2050b0b599fd65736be707b32e52fdf488461931aba10437104f45891fe7fa62e3782bfaad348eb421f05fdb158451ac4bac2279f42fe35bca650737c29b70506885c9c2894fc10da1a5e07094c782674f5e3a457d8b431f06c1cd00007e7ae3d9b0b65c71fd5eacc6827e91e9fcd9db741a847ee15028bbdb9d898075d7cb1c823aa47f3cdc6ec8dae6bffccb3f70c664e4e27101d482048e9fcccadcefe8bf97b785b57e493d44045ae53f290dcdff3a0b7bc87ca31c4ddd4109", 0xbe}, {&(0x7f00000003c0)="e5be477dd351b85ab7f5a38d1d26e3897023068b6f0a846d637dde0c926fe349299f18114259f401dd5a630b03122e0fad7223b141da4d6955e5febff5c1739cb2212dab2ae37104b1cf526f5cf33b2de427a5ff4b611bda6147e2305892c1d3aaccd7043c45b11abdb9eebb9a62dca97d62767a9657d2f0410a8b8a8f8aaab92b8e7b995146ecede89bc42b4aa0a7b5598af129a8fd5055c37c035dbe75788b18c8e39cb5b4f1620395b8858663308c667debdf415a2adfa6400a80cf16d6b0c253", 0xc2}, {&(0x7f00000004c0)="bf402db9639b69d3dd5c1608d1abaa4c5ead11167e79bda0efd797602dbcd098b01c1a06816f6cfdf687b1923a0fb2d94138a2d179cd144b0d13cab0e1fa45a6c522f8d77eacc3e6a7ffa9d5ef61c863ec9295cf1a92866f28c688f88c754aecdf2d87ce61fd3494008a196658bd8715bb6dd20b75fa187ccc1dbdb4130d9cdc209b7fecb357640113d74a1976d97d6b7e34fdbc45473c0e3a9897b4d453252c19fc52af26b5583e51d12fb8dc378623d95d8d74e4087da8252fb10a1e3feab9da9cfd53fea0b160eec4df3f1060ec4610eb858f67c9bc6608e2b3d579dba1df42fab6c82e640a10ecc77680a10efdcd6156f59a13e4fd", 0xf7}], 0x5, 0x0, 0x0, 0x404c040}}], 0x1, 0x804)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, 0x0, 0x0)
preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/140, 0x8c}], 0x4, 0x7fffffff, 0x3287) (async)
preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/89, 0x59}, {&(0x7f0000000800)=""/140, 0x8c}], 0x4, 0x7fffffff, 0x3287)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x8907, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x8907, 0x0)

4.54270546s ago: executing program 4 (id=6621):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0xfffffffffffffffd)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x0)
close(r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="09000000305110b8a4d7603fadbbe3", 0xf}], 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x6, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0)

4.53642174s ago: executing program 0 (id=6622):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x5)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3)
recvfrom$inet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94)

4.338115018s ago: executing program 3 (id=6623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10, 0x8, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x0, 0x7, 0xffffffff, 0x28, @loopback, @remote, 0xaa8939e99105ef0e, 0x7, 0x7, 0xffffffff}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0x20, &(0x7f0000001980)={&(0x7f0000001800)=""/138, 0x8a, <r2=>0x0, &(0x7f00000018c0)=""/190, 0xbe}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a00)={r0, r1, 0x25, 0x1, @val=@target_btf_id=r2}, 0x14)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1d, &(0x7f00000016c0)=ANY=[@ANYBLOB="000004053a61a869faf51db40114c3cd7afe566af2898ed5e5826b11b641f1ea432d75627c30a95726e3bb58a1da2e780ee772adf4b82876e6be2921d83e450178", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185a000007000000000000000000000018260000", @ANYRES32, @ANYBLOB="000000000700000018300000040000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000067371000fcffffff8500000075000000850000007b00000018650000030000000000000006000000850000008e000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0xfffffffc, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x1, 0x3, 0x0, 0x2}, {0x3, 0x5, 0x10, 0x2}, {0x0, 0x2, 0x4, 0xc}], 0x10, 0x654c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r4, 0x0, 0x1000, 0x68, &(0x7f00000003c0)="78b8e6568aee8c95793da8b7055df39c5228660e4292757782888f68ece56326069899d20c6182278912c7d7ac6949222819b9646d97751c910f2d7f9278d11e721c686409f1f4b13ff375ef2b98bfb97f0f5d4ab4f4db5a2e39f96775e79e128ca850014e30882c58a890929728a29e9556e49cb4681497cddf78b8d4900582b58a4697caabbc2999d8ba5eadc09820db66830b4e03eb445b9bf46769ab433592445025e235f27ee553bedad4ed99beabfc3b448825c69ddea88944a811457abbabcd74d8e1ded66e96df0567e81d6bff997010aba715125cebc6ac8281bd2f9ff48255b5d148161b7131c302e087b59fef6c289b2cd46a9ebac6d27d207abc440d4dd86a1c2b495a53503ddea93b43247da68e9af924c5a458ff65a7e923bb781a03979ce70d6f4efab9884a9a41e62cf23359009ccba92a0e5cbea3ed27a81096c7c52058e63895b85d95f251e88430fe59cd04c4a0167c1b63dc37e9f305901c78ebf3f106c207fbdab010e77a0d9694a65ea876decb4c8861bad1ffff0bdf2ec3169cf4fa16bbaf49361f7cc40849ad263d04207dcaafc24769916ffdc0b584de1c557a51cbcd5e7e6783dda3d566f09691807b9740ca7a00d2186c95bbf0f109936799a9290eec2aaa474ceee34207b777792e5be1d7720c76396875b94356560fe97de87d6784bb2967ffd5036fdba4684864d0c0a73db243af3ad9cc2c9ba201a54e950436a0f314c7825b4f58fad193d70ff2d2be90e07e7dd507da044f0945ce9a532f51ff793a7420484396e4ee89a0f11655e4dab9966566b2459ad4f6d14a6bb591c2cf53e624b9be7c2598916dd188cc1bef24252556b63e613d1655e4bc91591a5425d3683a2b86462df62bba7d6868884a9763c796740d80a53067b3bf2a9e68dd145f0d241a222825999231ad12118c26e92fdbaef09a3624b211302ef9d1bdbd25b1730151297dcf13cf931130d57f05c6c6f44e22f0307eb6f2e4c209a8f0e95b0d97fbba0b2a11d58dbefc7b31770986a5fe3b4ccfa46d889f81233557f5ba91d1ba36d188501fc661a512d4c244185ceb24d4aa346748c000879e3be3b5146518873149f985c867df2a266beb73adc0e49b250cfc16fb266ea974b6e560689d9648679a4006737560b5ece4acb01a18acfcbc3250e738183aa45ae80731c6169dbc77ec1b523506fd92fe1fd6544c89a2d0069e7603897370fb8afcd1266f3f6204cf92fa63dee3a4efdde056fd72538b7b515ee6fe61308ec8a18bd8b7830420ae61d85b3a73d889674f8bd4c97639d202fb4bc332bfed5eb289944aa644837f212d9774ca357e8016f4cf104ed82001e85cf456b99947ffc28417f3dc7adf77d6dbc82f86c524159a5ba1d4f4784a15df97fbc6ea58d5eb2ab2f691ed2652bcc47bff55195194c6a4a2a00007b702fa632a34913ed5fee2b62063a08fa396c36e0278809b57de528102357cad2f143830f3c604ea76d2fb46c3d095f960d86a2be813f03f1db39de8d7d098bdd37513cfb0dc53835dca854a33d5611434d54113fb9135bfc2dd8183082aa8ae6f795a4df750b948edd708a3e093230df43f9e695261eecefe5a06480a7ccf90b750bedfd9d66dfeb3e82873893110a7fdec8dff9b9aa27ce34fba2eb9b8e0bd913d9a8515141df50f6aaad4d2051c9798c91ff6bcbac8e9ca505b2f3b56af39cb69a9d5d76cf8b1e18a633ca74de96473ac883c13e23b84b0c5027c2beda03e74dea60e4be949d4b62cd7d5c5fa09b208d7583afab924eb84eb06993cc382b8d6552e6bb416367acc63c4f59d745dbd2c6875fbb453b16151a491f4e7f5e3a5566a8a1191f2a8fe5149c3148aaa2565083dab33ebfef116bf0490f7c1f5479e8005d6a678b8b85dc7bd35c11e2fc5534ea5304aa0382d734abe6f971ff51a797020fa15be30f87e80c3641fbeebe0bd1488008b96f0d682b0cc012f0ecc07d1cdd9dbc3754f77eaf46d037bfff0dd382e4d98257a1adde074139d155736e12abfa9e84a32eb81db951df31517c1eaa7d32ef91171306652fc0dfca8f3a85a69213a99269532bd515c3b4be52c0d7d1f782d6d7868d1cfd795867a411dfd4b5cb7fe27da9bfae19cb53e8da40804a42342948c08e6a623bdac409426609ac380ecdbda5486bdebe3d9e29e902d866ac63b55765c0229e16bf84c79b8c4aec236dd2e51d2f00a0c4ba95067160bdad25d85cd4166dac0786e2267e41eb55f9f9eb01e1c432fb2e949ecab2f42ee53e26df13dc952a6ced109f28e61d7611e377d5549085a7e317602712d758ffbbf84bd10338ffc8d3ecb505dd24566553b9910d14cb8f4529ada4d54ab12c5ffa3c667a93805c4d7658e959d9255db4b97adb1ad411c4802ce9e3aabf95dd0eab94a160000bde4db68ab44b817a1fc40bf7059202e7cf0622a79532a04b0dd3c17b54fa9bfa4ec888401bbab63845662fc9d3470360c474ed5d083c0bdf904722da5484845fec3743d77c4ec6f6d475ce8c13661dd19a11c039c33275714672c7d315c4a0bd1960e4ea6b6343412d9e6ddbf3530e42b4ec8fbdac2f55c892106ae1235e2666b65b52c8ebc10abcd9303ab18463c2cdb8c4f24942f9afa3caa18bf12a875095816fc539d6d35f3446c06700bb9c31fa97e69dc489e6db683fe4bbedb63e6cb45bcad3093c8a703215d85de64da289b4520ee363d1d9a20e6d0107ba0a24d7d80a4f343b19a52e4a3d3bb4642466d80de7e7d8fc35652d353730b11eafc56dd8cbd812f41e8f91b917cc60532bb36fb167b14d4e62b081c3760e8207d84e121b912e139ac29202b34bea943e882288582193bff6ef528afde83473f34cb82085c87612cb644965dd3513a545864f2308f30aef6190ce2df858408478f95655bef8ad2825698402400081086e65397e43267c8cc9f02f280193fe663fd38639d5c941f98d36f496f9da61e510aca340a41066096c943fb9e50d597a8ce5bdac834c13273e2416f2e209d44db40fe83505dded3e8377750d48472f27137460f3a7baca74b4841ebe76e48ad0ef5b992389d36c7ba7b3c190f192c38573ce9a8690120e067a460847f3e9b30b01951c16ac0af56dd8d9e45812791269db4338437d2854c4e99b5e4b4abb591428e40465e380beef832b3166eaa8d3c4ac343eec5f7a4bae02443fd4d838c9b81304ed09a150cadbc8600d432f1336270ab91ba2d49597ec9950c887e8b2a1af4f1e10d9f515e55ff66613df42ebe0a856a5965af146a985a3bd12383dbc54478a0b0c3e14c52b54bd6809df0023c1fc6d58f123bd0baebc9874b6576d67c3b84986d6f70e4ab69f01b932d42730fd4c39a530f32cdb644d75bb5b368e5adbe59df3039f36a50c5cea60a9884964d1a76388a0a55e66c2d7a9f6bab63ad6a50b2a7672b3a8844a8820d3d9d740875f7bf44d71ffd9d536355778be7e6a31dd7509d781584f5504474963f5ac129575b42588f5b1a80bd03f44bc3918aed2e02325678522db53c6294ed076b68b3f6746da6750b8c1be63b82c1d9b637cb306ba025ebde34e5e6dbf8febf64e31d94083c247ecb513e09505e56d8e57706ac7aa4b6181199acc6e9421fe8dfdcf1973c05f147bf995cd28e97e85f7cce71f4c33d40a1547c2b293e7f8543ee5be4c4e6c1fd82d17df32d8b6274f6acd1aeac800749fe1495540bba59bfb0fb44fa1ebb6f4f1a76ccf746d72034b2f10093ae642c288c839f637cac5de33e9538edeef44dee448b297e3cd31b67e62e988ca6d301c9cf6e3cbdaf38cd7c91ecc5a294ce4deb0a0588cfa8dc7bf157ad3a1b27c6028978e16104feea2c99722a37bc3ac5a6ac77414a4628c426b6066e7b5e6d339b41dcdfb9f954a63a6b9b9715fce09f397966b2ced95c87aad6d8eedab16005692639ada9c2e2a0b6bedae9d0640387a88acd54e054c64d7f58823ea37f4d44228de6e88c0095e6ddfc9b590c092d4a2fd73b4fe41ff81583f7049c8a9183d9cb4538a6f7a44bcbc04afece275bad3e86802f674c20e60963c3829172e77f46160fce1de789a0e9116349299d05111c2b98042c5eefd3d55066482f876e1413ad515cb9c72b4c463e8272a61fbf9e33ce868e3c980afcd6e82f07c271fd316794feb226d77b3488aa9b05d631d5ac6ca990dc0a3ff7a879c018e208c241de1867bb5b7ae9343998f70f1f99214af0eb605599abaf1748d545e14cdb10e47a94a5d6e56bac9b0bf66a304e8a04c879e36b254b32c62526cf45a617ff44804c9347a1a4a13b1282de95e8734df74fa81f494046374bfc25381842a6c18ced3b5425219f524930983ae3beb24467fada909db1e9006949038931a18e25473a0b5fa1a72a690520818d038a636c4f8105f0804050c4c2dee0cd8c9a01369957c74e64725f634d32fbde07232766ae06efbb6a95db1f5cf1daff40ea48c12f4a80b5d344aa9dd825d915f5384624211eab1a04f511f6159ab9e42e9efe41171382db7470da0a68c1497c5b2b1d62a635e4f36517d02f1a050696fca047d785dd56b3b5a7a5715e4ab1023871142602e0fd4e67823127712f0b59cda900202dd0ae1d14edd8380e2bc4a5b9837685c8ffd9c883ea620feae86e275e515fe717aa9b7aad3a9488ef755ef34cd792dca2d94f9a7f51a62d70e3eefdd0ec96ae681e16aaa9c122a73b49e752d18a6cdd7dc7b3e2019c63ea9871f5bff0ea2c2da2d52e75d17991a2f9bef03df5cd38a32228da45d8075af84362a82b63db783e1daf866e17b9edfa87a47e968b6683d29a9ddf70d832c63fb813807b378a61cae5fc4a1249507e671ff1d8b7fcdc4355ca5d95af8d0e948fbcd13b5c0df9d5d0b5a4f7765f3d9b099b60667a2e2d6c269dc552095ca4d7272b4ecaac3fddbd8f4a257bfa023334b8b9bbef18f946cae5dc97f9814cb9d404613220016881a09b9517f3aa9fc43bf952be754adb3f501fdfcb047da3a22a70420b01acd5c046e783fa676dc73510398a1e7119c2632891bcc316450b8945d37f97ef1e0c2edf551d80f1b655dacc9061a97ce60cef86b7f8590a77ff426cd2be831e2c331e667dc2f85b58b9e7080f85a3685ff03f7431f51bb9999b1cab58c81f8d35e40ccd7d246fbb22e67da8950bc5403d14d7286f8dc6cfd0af5df039f6addc96d931280fc0d6f2049278841070504d633ae9cfc9c5c08de8c33350e7b1227b0a588a028b90d5bc3657b77799af3e5e3ee671662452bb9578b6b0015de77b2ef2143064067e6513b67bbb07245a262dd2d067446b963ae1e690de5290a993ba2f024207fa305d4ccdc6f757ac293a48153aaea5c1b94131f89fb1ba51940ca2a4e8da81683362a778ed7eac92328b875cd8f323ec1c67edcc8597642a3f91b56eb90a3aae6e1277ccecb0fba41e3199278f2055e2361bce593886023ec06d0249900d10b387a7761e64d87a7bfd8229d7b0a9a42f7c9bc1de421bf6f3f8f3cac7b150268cdb919666d430a59bcd2613d90d76e86f5673093a738daa1878fac31129aa85918ea4707891d2042b82deffae21450fa6d673b8f3a1f5621c8265103e4e6717719ff3365e6155d54aa6a16070d8912e24b36a1b953eb2b0bbfb5869c11a5faf83d4d92aac31a4aa89026612b9599802fea35ed6ebe942fabf37daa2645d31322968e14c2a360e467182814bb60c4697d257c50dd9db5b86147d6596560e0f7f5b66b1b790363bba56b2fa86d1d254001e2d856c031cc5a5d7e0fd38c73a95836e119862f0ffba4f1ee52ea9afb484f0", &(0x7f00000013c0)=""/104, 0x6, 0x0, 0xd6, 0xfc, &(0x7f0000001440)="3e3302a92fbbebf92ac56e1d748054fd36b7dd89e12def7f8b2419c18e49bd86fe2efe98f691272ae309881353558011690c8d2adae1e34ff2d6a1ef19032432bd441f08edcb06f0472a5e15401e0cc1f5e0d001b0627eea991b6fbafea4c2afa00a32cc88c2d29e31cc71daaa05e7c0ebc5017ec2980d8d588dd27b0dad9e6a33d7457ca50e52936f8d0112e647bb803c957d9942cf3d4aa3a9d90a21dda136defcebeb81a7c2d5966268636d526b10853edc4d2cfbf7eaf5c9105d87f6f794fd8ba4410ed127a813fc659153f53652dba37dc77434", &(0x7f0000001540)="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", 0x0, 0x0, 0x2}, 0x50)

4.227972163s ago: executing program 1 (id=6624):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040028}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r0, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0)

4.205666493s ago: executing program 2 (id=6625):
r0 = socket(0x1f, 0x4, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="070000000000000000c32a759d0000", @ANYRESDEC=r0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xa, &(0x7f0000000200)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040006002000"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r7, @ANYRESHEX=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7cf5924edac91b2375a9d82ae63171c621cd81452730b85ddd43e6077acecfc44575f1f4afc0ca3bf356187880972bf88b94eb38c52b987f8ee693dcf65902e28413c01d8c5f5943fb475884fd00389426bf1bb69cae018532e5561dccb7a310b7a08b0a9ed3491827009de9f57d009f885fba7425f79d7514817e88d7c4de", 0x7f, 0x240488c5, &(0x7f0000000480)={0xa, 0x4e21, 0x9, @local, 0xd5c}, 0x1c)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x38}}, 0x4000846)
r10 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4000009, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r3, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r3}}, 0x1c)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r11, 0x0, 0x0)
getsockopt$inet6_tcp_int(r11, 0x6, 0x2, 0x0, &(0x7f0000000340))

3.996332887s ago: executing program 2 (id=6626):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @in=@dev, {@in6=@remote, @in=@remote}, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x7e6bb0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

3.853232347s ago: executing program 3 (id=6627):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x81}, 0xe)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb09001800000000000000580000005800000005000000030000000000001103000000000000000900000003000084040000000400000004000000010000000c00000003000000080000000e00000005000000fcffffff0000000001000004000000000000000002000000000000000000002e00"], 0x0, 0x75}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="4f7b029ebf728882000004e4e2b22eb546ae3c2521ecaa2dca7ab6010d4074a8ee7f3c2e16a3317fa7aa2e563079e9a9d7060cb132a779900b43c8beedbbbc68c8fa43b301977e37d0ccba85da2abe7a62bc3aa09fed0a328df84fbc7b10c4df8dab58bb716671bdf1d74dd3c3544e73412945e6f58ac9e5914f4b6c400190f2991efdc614a7a224c726feeeae491684feeeeb0b2a6fe962eb7af1798a71f02841eb0eec10d1", @ANYRES32=0x1, @ANYBLOB="e100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000500"/28], 0x48)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
shutdown(r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="01000000220200000600000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="ffffffff0000000026d50d280f2185be3885038968902464b0b455dfb8651cd510dcb18f09be59adc96b0c6bb4312025aecf07c8ff333c8a72619ad55ec79d034059bc580133cef3c79d97b74c2b203f43edf7aef69e74bb7889367263b038fd2018d60356017516566b01374bd82e6be1e0042356ece4e2ab0920fa0663fc5c75f89285e9ad439114688fbcacf2d41a6f1247f969d9a43f3a33d862551e7e263118a73c82b2d84fb43b1a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180023000000000000000000000064009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r9, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c)
close(r2)
setsockopt(r0, 0x2, 0x9f, &(0x7f00000001c0)="b6df5363f24a599bb57e73360a99e8d1a11dfcbe6982a74120a5c2c5", 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})

3.826445413s ago: executing program 1 (id=6628):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0xcd52dcdb6de9c7d3)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa22040, 0x0)
write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000076e34106f7c533514064890ccf72b8cc4b990a93fb9ffd1dfc27655f3ac1ac14fca214bb748fb0e9bb22c387531e9a2416ff6e55720eb2af48844ca57ec073417f03f010c8001e38e4c043e1387e1a5342f12cbe"], 0x56)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200))
close(0x3)

3.57635087s ago: executing program 0 (id=6629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28)
recvmmsg(r2, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/147, 0x93}, {&(0x7f0000000080)=""/51, 0x33}], 0x2}, 0x80000001}], 0x1, 0x102, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r2, 0x0)

265.910368ms ago: executing program 3 (id=6630):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x503, 0x200, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x949d2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}}, 0x0)

265.30051ms ago: executing program 4 (id=6631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000102000000000000004f0000001a085f1be724bf88657673696d0000000f0002006e657464657673696d300000080003000200000008000b00000000000600110002000000"], 0x4c}}, 0x20000011)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

240.632822ms ago: executing program 0 (id=6632):
syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="09ed0f8d2c6ee9374e13781a1aeb1d967a4bee32c3229ba57d18101679eb426c70cf68f54dce90d669c8786d7a37d26293", 0x31) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 64)

239.102085ms ago: executing program 2 (id=6633):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x43eae5a61608ca7, 0x12, r0, 0x604ab000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r4, 0x0)
ppoll(&(0x7f0000000000)=[{r3}, {r4, 0x1008}], 0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

189.705455ms ago: executing program 1 (id=6634):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800a0001007265646972000000140002800800014000000004080002400600000c0900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCNRDECOBS(r2, 0x89e2)

27.98837ms ago: executing program 3 (id=6635):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180)=0x81, 0x4)
socket$netlink(0x10, 0x3, 0x8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x288, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x87e}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfb}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xa37}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xf7b}, {0x8, 0x15, 0x6f3a037f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x1ff}, {0x8, 0x15, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x992}, {0x6, 0x11, 0x4}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x7}}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x42)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}}, 0x0)

17.067518ms ago: executing program 2 (id=6636):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000fc0)=[{0x5, 0xf9, 0x1, 0x4}, {0xb65, 0x3, 0x8, 0x40}]})
syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x4000)
clock_gettime(0x0, &(0x7f00000026c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/244, 0xf4}], 0x1, &(0x7f00000011c0)=""/228, 0xe4}, 0x40}, {{&(0x7f00000012c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001340)=""/134, 0x86}, {&(0x7f0000001400)=""/58, 0x3a}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001480)=""/145, 0x91}, {&(0x7f0000001540)=""/140, 0x8c}, {&(0x7f0000001600)=""/161, 0xa1}, {&(0x7f00000016c0)=""/213, 0xd5}, {&(0x7f00000017c0)=""/138, 0x8a}, {&(0x7f0000001880)=""/80, 0x50}, {&(0x7f0000001900)=""/43, 0x2b}, {&(0x7f0000001940)=""/214, 0xd6}], 0x8}, 0x2}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/217, 0xd9}, {&(0x7f0000001c40)=""/104, 0x68}, {&(0x7f0000001cc0)=""/86, 0x56}], 0x3, &(0x7f0000001d80)=""/88, 0x58}, 0x7fff}, {{&(0x7f0000001e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/146, 0x92}], 0x1, &(0x7f0000001f80)=""/106, 0x6a}, 0xd}, {{&(0x7f0000002000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002180)=[{&(0x7f0000002740)=""/227, 0x35}], 0x1, &(0x7f00000021c0)=""/133, 0x85}, 0x3}, {{&(0x7f0000002280)=@alg, 0x80, &(0x7f0000002440)=[{&(0x7f0000002300)=""/140, 0x8c}, {&(0x7f00000023c0)=""/75, 0x4b}], 0x2, &(0x7f0000002480)=""/114, 0x72}, 0x80000001}], 0x7, 0x102, &(0x7f0000002700)={r1, r2+10000000})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

0s ago: executing program 1 (id=6637):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000000020000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a0000000000000000000052ca3d0b"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

6646][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'.
[  714.151960][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'.
[  714.332855][T25372] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  714.447544][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5100'.
[  714.885175][T25410] netlink: 'syz.2.5108': attribute type 1 has an invalid length.
[  714.919034][T25410] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5108'.
[  715.188165][T25425] netlink: 'syz.2.5112': attribute type 4 has an invalid length.
[  715.243253][T25434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5115'.
[  715.285590][T25437] xt_hashlimit: size too large, truncated to 1048576
[  715.436941][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5118'.
[  715.519196][T25452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  715.598439][T25459] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5121'.
[  715.869137][T25467] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  715.998976][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5124'.
[  716.038305][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5124'.
[  716.320124][T25491] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5130'.
[  717.027175][T25537] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  717.038128][T25537] bond0: Error: Cannot enslave bond to itself.
[  717.049204][T25537] x_tables: ip6_tables: mh match: only valid for protocol 135
[  717.232147][T25549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5150'.
[  717.254583][T25552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.273089][T25546] bond5: Unable to set down delay as MII monitoring is disabled
[  717.281932][T25552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.315743][T25546] bond5 (unregistering): Released all slaves
[  717.407918][T25559] tun0: tun_chr_ioctl cmd 1074025675
[  717.419401][T25559] tun0: persist disabled
[  717.503537][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5154'.
[  717.514717][T25554] netlink: 'syz.1.5152': attribute type 30 has an invalid length.
[  717.523363][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5152'.
[  717.559676][T25554] netlink: 'syz.1.5152': attribute type 30 has an invalid length.
[  717.585286][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5152'.
[  717.676003][T25565] netlink: 'syz.0.5156': attribute type 2 has an invalid length.
[  717.696317][T25565] netlink: 'syz.0.5156': attribute type 1 has an invalid length.
[  717.738494][T25569] netlink: 'syz.1.5158': attribute type 1 has an invalid length.
[  718.018089][T25586] tipc: New replicast peer: 255.255.255.255
[  718.031216][T25586] tipc: Enabled bearer <udp:syz2>, priority 10
[  718.392603][T25611] syzkaller1: entered promiscuous mode
[  718.413246][T25617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  718.422526][T25611] syzkaller1: entered allmulticast mode
[  718.761536][T25632] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  719.035738][T25643] 8021q: adding VLAN 0 to HW filter on device bond9
[  719.066741][T25643] bond9 (unregistering): Released all slaves
[  719.227571][T25661] 
: renamed from bond0 (while UP)
[  719.328566][   T30] audit: type=1800 audit(1776647207.043:10): pid=25663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5190" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  719.334755][T25663] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  719.359319][T25663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  719.386514][T25663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  719.497274][T25663] syz.1.5190 (25663) used greatest stack depth: 17560 bytes left
[  719.546354][T25684] x_tables: duplicate underflow at hook 3
[  719.699120][T25698] netlink: 'syz.2.5197': attribute type 30 has an invalid length.
[  720.066181][T25715] netlink: zone id is out of range
[  720.111028][T25715] netlink: zone id is out of range
[  720.137590][T25708] netlink: set zone limit has 4 unknown bytes
[  720.259670][T25724] netlink: 'syz.3.5204': attribute type 3 has an invalid length.
[  720.283894][T25724] __nla_validate_parse: 22 callbacks suppressed
[  720.283915][T25724] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5204'.
[  720.421901][T25731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5206'.
[  720.513855][T25737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5208'.
[  720.752088][T25750] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  721.057871][T25772] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5218'.
[  721.147526][T25784] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000
[  721.945658][T25828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  721.998176][T25835] netlink: 'syz.3.5232': attribute type 1 has an invalid length.
[  722.007293][T25835] netlink: 'syz.3.5232': attribute type 1 has an invalid length.
[  722.149359][T25847] netlink: 'syz.3.5235': attribute type 2 has an invalid length.
[  722.321030][T25855] netlink: 'syz.2.5236': attribute type 1 has an invalid length.
[  722.352966][T25855] netlink: 'syz.2.5236': attribute type 2 has an invalid length.
[  722.366901][T25855] netlink: 'syz.2.5236': attribute type 1 has an invalid length.
[  722.375723][T25855] netlink: 'syz.2.5236': attribute type 3 has an invalid length.
[  722.387143][T25855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5236'.
[  722.423394][T25859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.441406][T25860] IPv6: NLM_F_CREATE should be specified when creating new route
[  722.503940][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5237'.
[  722.733956][T25874] netlink: 'syz.4.5242': attribute type 21 has an invalid length.
[  722.742271][T25874] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5242'.
[  722.751982][T25874] netlink: 'syz.4.5242': attribute type 4 has an invalid length.
[  722.760059][T25874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5242'.
[  722.774764][T25872] SET target dimension over the limit!
[  722.788630][T25874] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5242'.
[  722.808197][T25874] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5242'.
[  722.862148][T25879] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  723.141086][T25898] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  723.624558][T25920] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  723.674535][T25920] bond9 (unregistering): Released all slaves
[  723.693861][T25929] xt_policy: output policy not valid in PREROUTING and INPUT
[  724.042933][T25943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.253157][T25956] �x9�: renamed from bridge_slave_0
[  725.412756][T26038] __nla_validate_parse: 11 callbacks suppressed
[  725.412779][T26038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5283'.
[  725.438554][T26031] netlink: 'syz.0.5284': attribute type 11 has an invalid length.
[  725.452635][T26031] validate_nla: 9 callbacks suppressed
[  725.452671][T26031] netlink: 'syz.0.5284': attribute type 4 has an invalid length.
[  725.466844][T26031] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.5284'.
[  725.671111][T26048] netlink: 'syz.3.5288': attribute type 1 has an invalid length.
[  725.767700][T26048] bond9: entered promiscuous mode
[  725.781297][T26048] 8021q: adding VLAN 0 to HW filter on device bond9
[  725.812269][T26058] netlink: 'syz.0.5290': attribute type 11 has an invalid length.
[  725.874932][T26050] bond9: (slave bridge4): making interface the new active one
[  725.893055][T26050] bridge4: entered promiscuous mode
[  725.899522][T26050] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  725.919885][T26062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5292'.
[  725.932073][T26062] netlink: 'syz.1.5292': attribute type 64 has an invalid length.
[  725.967884][T26058] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5290'.
[  726.344270][T26088] netlink: 'syz.2.5298': attribute type 1 has an invalid length.
[  726.372947][T26088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5298'.
[  726.394980][T26088] NCSI netlink: No device for ifindex 0
[  726.587118][T26099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5302'.
[  726.597017][T26100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5302'.
[  726.768606][T26109] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  726.874474][T26115] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5308'.
[  727.157151][T26132] netlink: 'syz.1.5312': attribute type 10 has an invalid length.
[  727.181632][T26132] bond0: (slave wlan1): Opening slave failed
[  727.323965][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5317'.
[  727.458942][T26151] xt_cgroup: invalid path, errno=-2
[  727.488033][T26157] netlink: 'syz.2.5320': attribute type 1 has an invalid length.
[  727.562879][T26167] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5323'.
[  727.617131][T26173] openvswitch: netlink: Flow actions attr not present in new flow.
[  727.638798][T26157] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.732397][T26163] vlan2: entered promiscuous mode
[  727.748707][T26163] bond0: entered promiscuous mode
[  727.762458][T26163] vlan2: entered allmulticast mode
[  727.767730][T26163] bond0: entered allmulticast mode
[  727.820891][T26171] 8021q: adding VLAN 0 to HW filter on device batadv1
[  727.837885][T26171] bond0: (slave batadv1): making interface the new active one
[  727.845951][T26171] batadv1: entered promiscuous mode
[  727.854769][T26171] batadv1: entered allmulticast mode
[  727.863019][T26171] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  728.164337][T26187] wg1 speed is unknown, defaulting to 1000
[  728.354725][T26205] netlink: 'syz.4.5331': attribute type 1 has an invalid length.
[  728.898169][T26187] dvmrp8: entered allmulticast mode
[  728.936374][T26238] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  728.991657][T26243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.129997][T10867] dvmrp8: left allmulticast mode
[  729.408552][T26258] syzkaller1: entered promiscuous mode
[  729.420259][T26258] syzkaller1: entered allmulticast mode
[  729.617555][T26270] netlink: 'syz.2.5347': attribute type 12 has an invalid length.
[  729.673873][T26273] xt_hl: Unknown TTL match mode: 255
[  730.098029][T26298] netlink: 'syz.1.5357': attribute type 5 has an invalid length.
[  730.110182][T26296] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  730.629863][T26327] __nla_validate_parse: 46 callbacks suppressed
[  730.629886][T26327] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5368'.
[  730.680719][T26329] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5369'.
[  731.001705][T26347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5374'.
[  731.037518][T26347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5374'.
[  731.255498][T26355] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  731.269487][T26363] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5376'.
[  731.758033][T26382] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  731.782816][T26382] tipc: Enabled bearer <udp:syz0>, priority 10
[  732.147093][ T5917] IPVS: starting estimator thread 0...
[  732.197837][T26411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5392'.
[  732.260991][T26414] IPVS: using max 30 ests per chain, 72000 per kthread
[  732.407335][T26428] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5396'.
[  732.533914][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5400'.
[  732.575575][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5400'.
[  732.609858][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5400'.
[  732.914113][T26446] validate_nla: 1 callbacks suppressed
[  732.914132][T26446] netlink: 'syz.4.5403': attribute type 2 has an invalid length.
[  733.226289][T26464] tipc: New replicast peer: 255.255.255.255
[  733.249358][T26464] tipc: Enabled bearer <udp:syz2>, priority 10
[  734.258988][T26538] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  734.285672][T26538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  734.328432][T26534] erspan0: entered promiscuous mode
[  734.352064][T26534] erspan0: entered allmulticast mode
[  734.625953][T26552] netlink: 'syz.1.5437': attribute type 1 has an invalid length.
[  735.592108][T26608] syzkaller1: entered promiscuous mode
[  735.616418][T26608] syzkaller1: entered allmulticast mode
[  735.656462][T26612] openvswitch: netlink: Multiple metadata blocks provided
[  735.721721][T26617] nbd: socks must be embedded in a SOCK_ITEM attr
[  735.742412][T26613] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  735.768387][T26613] bond2: (slave xfrm1): Error -95 calling set_mac_address
[  736.052297][T26633] __nla_validate_parse: 81 callbacks suppressed
[  736.052321][T26633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5459'.
[  736.196895][T26634] IPVS: Scheduler module ip_vs_sip not found
[  736.593438][T26667] netlink: 'syz.3.5468': attribute type 4 has an invalid length.
[  736.640158][T26666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5470'.
[  736.654839][T26666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5470'.
[  736.982741][T26684] netlink: 'syz.3.5477': attribute type 11 has an invalid length.
[  736.993603][T26685] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5479'.
[  737.129879][T26691] netlink: 'syz.3.5481': attribute type 39 has an invalid length.
[  737.188505][T26697] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5483'.
[  737.216751][T26697] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5483'.
[  737.267962][T26692] netlink: 'syz.2.5480': attribute type 1 has an invalid length.
[  737.403466][T26692] 8021q: adding VLAN 0 to HW filter on device bond8
[  737.459262][T26693] bond8: (slave veth0_to_bond): making interface the new active one
[  737.475281][T26693] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  737.526177][T26715] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5487'.
[  737.549359][T26714] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5487'.
[  737.565277][   T37] bond8: (slave veth0_to_bond): link status definitely down, disabling slave
[  737.621219][   T37] bond8: now running without any active interface!
[  737.661174][T26720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'.
[  737.707040][T26721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5488'.
[  737.786102][T26724] netlink: 'syz.4.5490': attribute type 1 has an invalid length.
[  737.955881][T26730] wg1 speed is unknown, defaulting to 1000
[  738.678299][T26779] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20000
[  738.959209][T26793] 8021q: adding VLAN 0 to HW filter on device bond10
[  738.979679][T26793] bond9: (slave bond10): Enslaving as an active interface with an up link
[  739.479110][T26820] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  739.997445][T26852] netlink: 'syz.3.5526': attribute type 19 has an invalid length.
[  740.188643][T26859] veth13: entered promiscuous mode
[  740.195520][T26866] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  740.294339][T26872] netlink: 'syz.3.5534': attribute type 28 has an invalid length.
[  740.303465][T26872] netlink: 'syz.3.5534': attribute type 3 has an invalid length.
[  740.702704][T26890] netlink: 'syz.0.5539': attribute type 1 has an invalid length.
[  740.825427][T26890] 8021q: adding VLAN 0 to HW filter on device bond5
[  740.942460][T26903] syzkaller0: entered promiscuous mode
[  740.993256][T26903] syzkaller0: entered allmulticast mode
[  741.341201][T26925] __nla_validate_parse: 15 callbacks suppressed
[  741.341226][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5544'.
[  741.370705][T26910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5540'.
[  741.415055][T26910] atomic_op ffff88803083f198 conn xmit_atomic 0000000000000000
[  741.534225][T26932] netlink: 'syz.1.5547': attribute type 9 has an invalid length.
[  741.568925][T26932] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5547'.
[  741.609394][T26937] netlink: 'syz.4.5548': attribute type 2 has an invalid length.
[  741.651296][T26937] v�: entered promiscuous mode
[  741.788863][T26950] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  741.864047][T26947] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5551'.
[  742.025068][T26958] netlink: 'syz.4.5555': attribute type 10 has an invalid length.
[  742.051633][T26958] bond0: (slave wlan1): Opening slave failed
[  742.072305][T26958] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  742.145651][T26958] geneve3: entered promiscuous mode
[  742.159253][T26958] geneve3: entered allmulticast mode
[  742.177485][T10870] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  742.193455][T26966] netlink: 'syz.1.5556': attribute type 9 has an invalid length.
[  742.199394][T26957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  742.202758][T10870] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  742.233274][T10870] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  742.255744][T10870] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  742.510107][T26974] netlink: 'syz.1.5559': attribute type 11 has an invalid length.
[  742.528849][T26974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5559'.
[  742.549215][T26981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5562'.
[  742.625691][T26987] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5561'.
[  742.676577][T26982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5561'.
[  742.757690][T26990] netlink: 'syz.2.5564': attribute type 4 has an invalid length.
[  743.017857][T27003] h: entered promiscuous mode
[  743.155839][T27014] vlan3: entered promiscuous mode
[  743.161965][T27014] geneve1: entered promiscuous mode
[  743.167741][T27014] vlan3: entered allmulticast mode
[  743.173058][T27014] geneve1: entered allmulticast mode
[  743.198203][T27016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5572'.
[  743.432461][T27028] netlink: 'syz.0.5575': attribute type 1 has an invalid length.
[  743.532314][T27037] bond6: (slave bridge2): Enslaving as a backup interface with an up link
[  743.997799][T27063] xt_hashlimit: overflow, rate too high: 0
[  744.427326][T27087] gretap0: entered promiscuous mode
[  744.436658][T27087] vlan2: entered promiscuous mode
[  744.545127][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'.
[  745.056926][T27115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.177289][T27126] syzkaller0: entered promiscuous mode
[  745.183944][T27126] syzkaller0: entered allmulticast mode
[  745.673179][T27155] syzkaller0: entered promiscuous mode
[  745.681644][T27155] syzkaller0: entered allmulticast mode
[  745.709253][T27151] syzkaller1: entered promiscuous mode
[  745.716233][T27151] syzkaller1: entered allmulticast mode
[  745.784564][T27151] erspan0: entered promiscuous mode
[  745.797887][T27151] erspan0: entered allmulticast mode
[  745.972507][T27161] IPVS: Unknown mcast interface: vcan0
[  746.064984][T27161] syzkaller1: entered allmulticast mode
[  746.231806][T27174] syzkaller0: entered promiscuous mode
[  746.245451][T27174] syzkaller0: entered allmulticast mode
[  746.482089][T27180] lo: left allmulticast mode
[  746.491397][T27181] __nla_validate_parse: 4 callbacks suppressed
[  746.491500][T27181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5616'.
[  746.523575][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'.
[  746.533098][T27180] tunl0: left promiscuous mode
[  746.699147][T27180] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  746.918368][T27203] 
s5���: renamed from vlan1
[  746.929217][T27203] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5624'.
[  747.044121][T27210] netlink: 'syz.0.5625': attribute type 10 has an invalid length.
[  747.077054][T27210] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5625'.
[  747.288569][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5628'.
[  747.389819][T27229] netlink: 'syz.4.5628': attribute type 16 has an invalid length.
[  747.428463][T27229] netlink: 'syz.4.5628': attribute type 17 has an invalid length.
[  747.462088][T27224] tipc: Resetting bearer <eth:xfrm0>
[  747.468082][T27224] tipc: Resetting bearer <eth:xfrm0>
[  747.592407][T27232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5629'.
[  747.659242][T27234] xt_limit: Overflow, try lower: 271964/0
[  747.768232][T27229] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.787084][T27229] 8021q: adding VLAN 0 to HW filter on device team0
[  747.804640][T27229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  748.123446][T27257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5632'.
[  748.365805][T27273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5633'.
[  748.388383][T27270] tipc: Resetting bearer <eth:xfrm0>
[  748.542972][T27284] netlink: zone id is out of range
[  748.566809][T27284] netlink: zone id is out of range
[  748.597985][T27284] netlink: zone id is out of range
[  748.629382][T27284] netlink: zone id is out of range
[  748.705791][T27284] netlink: zone id is out of range
[  748.756638][T27293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5640'.
[  748.783913][T27284] netlink: zone id is out of range
[  748.812595][T27284] netlink: zone id is out of range
[  748.853707][T27299] netlink: 'syz.3.5642': attribute type 23 has an invalid length.
[  749.227221][T27330] netlink: 'syz.1.5645': attribute type 29 has an invalid length.
[  749.328573][T27330] netlink: 'syz.1.5645': attribute type 29 has an invalid length.
[  749.374340][T27333] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5645'.
[  749.441267][T27335] netlink: 'syz.2.5649': attribute type 20 has an invalid length.
[  749.493334][T27335] IPv6: NLM_F_CREATE should be specified when creating new route
[  749.792837][T27343] SET target dimension over the limit!
[  750.031916][T27362] xfrm1: entered allmulticast mode
[  750.115802][T27371] netlink: 'syz.0.5657': attribute type 1 has an invalid length.
[  750.216369][T27381] net_ratelimit: 53 callbacks suppressed
[  750.216390][T27381] openvswitch: netlink: Multiple metadata blocks provided
[  750.257664][T27371] 8021q: adding VLAN 0 to HW filter on device bond7
[  750.757552][T27409] ip6erspan0: entered allmulticast mode
[  751.323227][T27448] netlink: 'syz.1.5674': attribute type 8 has an invalid length.
[  751.787321][ T5488] veth0_macvtap: left promiscuous mode
[  751.847305][T27479] __nla_validate_parse: 6 callbacks suppressed
[  751.847328][T27479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5685'.
[  752.182804][T27486] wg1 speed is unknown, defaulting to 1000
[  752.765816][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5693'.
[  752.837898][T27521] netlink: 'syz.0.5693': attribute type 4 has an invalid length.
[  753.829777][T27567] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  754.403079][T27585] pim6reg1: entered promiscuous mode
[  754.430962][T27585] pim6reg1: entered allmulticast mode
[  754.446531][T27587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  754.467824][T27585] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5709'.
[  754.497541][T27585] netlink: 'syz.1.5709': attribute type 9 has an invalid length.
[  754.599973][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5709'.
[  754.613168][T27593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5709'.
[  754.743470][T27593] bond9: option xmit_hash_policy: invalid value (64)
[  754.768382][T27593] bond9 (unregistering): Released all slaves
[  755.075397][T27604] syzkaller0: entered promiscuous mode
[  755.105203][T27604] syzkaller0: entered allmulticast mode
[  755.114362][T27608] syzkaller1: entered promiscuous mode
[  755.120112][T27608] syzkaller1: entered allmulticast mode
[  755.192709][T27604] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  755.209083][T27604] bond11 (unregistering): Released all slaves
[  755.276642][T27619] vlan3: entered promiscuous mode
[  755.282977][T27619] bridge0: entered promiscuous mode
[  755.456309][T27633] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5722'.
[  755.483759][T27628] can: request_module (can-proto-0) failed.
[  755.677630][T27642] netlink: 'syz.2.5726': attribute type 10 has an invalid length.
[  756.473780][T27684] netlink: 'syz.0.5737': attribute type 1 has an invalid length.
[  756.508019][T27682] bridge3: entered promiscuous mode
[  756.528958][T27682] bridge3: entered allmulticast mode
[  756.676941][T27691] netlink: 'syz.4.5739': attribute type 16 has an invalid length.
[  756.710751][T27691] netlink: 'syz.4.5739': attribute type 3 has an invalid length.
[  756.718666][T27691] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5739'.
[  756.740209][T27694] netlink: 'syz.1.5741': attribute type 14 has an invalid length.
[  756.862748][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'.
[  756.897629][T27703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.107652][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.117044][T27703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.133059][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.152489][T27703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.173313][T27703] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5745'.
[  760.369504][T27716] wg1 speed is unknown, defaulting to 1000
[  760.677365][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  760.693707][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  760.702660][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  760.718634][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  760.731111][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  760.755428][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  760.767857][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  760.785746][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  760.794934][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  760.803258][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  761.149029][T27738] wg1 speed is unknown, defaulting to 1000
[  761.296072][T27758] netlink: 'syz.3.5759': attribute type 3 has an invalid length.
[  761.495288][T27764] sctp: [Deprecated]: syz.2.5761 (pid 27764) Use of int in maxseg socket option.
[  761.495288][T27764] Use struct sctp_assoc_value instead
[  761.589307][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5760'.
[  761.680782][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5763'.
[  761.704516][T27773] openvswitch: netlink: Key type 343 is out of range max 32
[  761.842946][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5760'.
[  761.933340][T27786] bond3: left promiscuous mode
[  761.947822][T27784] netlink: 'syz.1.5765': attribute type 1 has an invalid length.
[  762.089794][T27798] netlink: 'syz.2.5768': attribute type 32 has an invalid length.
[  762.115119][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'.
[  762.254606][T10865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.267421][T10865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.350820][T27798] bond11: option coupled_control: invalid value (28)
[  762.365120][T27798] bond11 (unregistering): Released all slaves
[  762.413958][T27807] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5770'.
[  762.449813][ T5914] IPVS: starting estimator thread 0...
[  762.550710][T27810] IPVS: using max 28 ests per chain, 67200 per kthread
[  762.593433][T10865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.631458][T10865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.677976][T27812] tipc: Disabling bearer <udp:syz2>
[  762.687972][T27813] veth1_macvtap: left promiscuous mode
[  762.732698][T27738] chnl_net:caif_netlink_parms(): no params data found
[  762.842002][ T5831] Bluetooth: hci3: command tx timeout
[  762.895055][T10865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.906137][T10865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.109374][T10865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  763.123860][T10865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.208670][T27841] syzkaller0: entered promiscuous mode
[  763.215203][T27841] syzkaller0: entered allmulticast mode
[  763.225151][T27845] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5783'.
[  763.268769][T27738] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.276819][T27738] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.287742][T27738] bridge_slave_0: entered allmulticast mode
[  763.301875][T27738] bridge_slave_0: entered promiscuous mode
[  763.348191][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5786'.
[  763.363890][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5786'.
[  763.402028][T27738] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.412628][T27738] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.420164][T27738] bridge_slave_1: entered allmulticast mode
[  763.428585][T27853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5785'.
[  763.439556][T27738] bridge_slave_1: entered promiscuous mode
[  763.576403][T27738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  763.657509][T27738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.776403][T27738] team0: Port device team_slave_0 added
[  763.787526][T27738] team0: Port device team_slave_1 added
[  763.856057][T27738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.864142][T27738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.891983][T27738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.927595][T27738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.935603][T27738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.967169][T27738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  764.229501][T10865] bond1 (unregistering): (slave geneve3): Releasing active interface
[  764.386121][T10865] bond6 (unregistering): (slave bridge2): Releasing backup interface
[  764.472985][T10865] bond0 (unregistering): (slave ������): Releasing backup interface
[  764.481639][T10865] ������: left allmulticast mode
[  764.489279][T10865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.499220][T10865] bond_slave_1: left allmulticast mode
[  764.508798][T10865] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  764.525833][T10865] bond0 (unregistering): Released all slaves
[  764.538389][T10865] bond1 (unregistering): Released all slaves
[  764.555013][T10865] bond2 (unregistering): Released all slaves
[  764.571703][T10865] bond3 (unregistering): Released all slaves
[  764.592483][T10865] bond4 (unregistering): Released all slaves
[  764.612961][T10865] bond5 (unregistering): Released all slaves
[  764.636529][T10865] bond6 (unregistering): Released all slaves
[  764.655661][T10865] bond7 (unregistering): Released all slaves
[  764.688177][   T29] wg1 speed is unknown, defaulting to 1000
[  764.695938][   T29] syz2: Port: 1 Link DOWN
[  764.750312][T27738] hsr_slave_0: entered promiscuous mode
[  764.773429][T27738] hsr_slave_1: entered promiscuous mode
[  764.824136][T10865] : left promiscuous mode
[  764.920576][ T5831] Bluetooth: hci3: command tx timeout
[  764.939575][T10865] tipc: Disabling bearer <udp:syz0>
[  764.952246][T10865] tipc: Left network mode
[  765.702818][T10865] hsr_slave_0: left promiscuous mode
[  765.709177][T10865] hsr_slave_1: left promiscuous mode
[  765.728831][T10865] veth1_macvtap: left promiscuous mode
[  765.734716][T10865] veth0_macvtap: left promiscuous mode
[  765.740313][T10865] veth1_vlan: left promiscuous mode
[  765.746590][T10865] veth0_vlan: left promiscuous mode
[  766.299606][T27853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  766.333540][T27738] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  766.492231][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  766.518666][T27738] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  766.565857][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  766.599260][T27738] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  766.728460][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  766.767834][T27738] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  766.814798][T27738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  766.915080][T27890] syzkaller1: entered promiscuous mode
[  766.938499][T27890] syzkaller1: entered allmulticast mode
[  767.003938][ T5831] Bluetooth: hci3: command tx timeout
[  767.118404][T27918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  767.288583][T27907] syzkaller0: entered promiscuous mode
[  767.294586][T27907] syzkaller0: entered allmulticast mode
[  767.302805][T27907] tipc: Resetting bearer <eth:syzkaller0>
[  767.402812][T10870] tipc: Resetting bearer <eth:syzkaller0>
[  767.425202][T27931] syzkaller0: entered promiscuous mode
[  767.431876][T27931] syzkaller0: entered allmulticast mode
[  767.464008][T27904] tipc: Resetting bearer <eth:syzkaller0>
[  769.088293][ T5831] Bluetooth: hci3: command tx timeout
[  771.874423][T27904] tipc: Disabling bearer <eth:syzkaller0>
[  771.989955][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5805'.
[  772.198443][T27738] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.282327][T27738] 8021q: adding VLAN 0 to HW filter on device team0
[  772.291231][T27964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5808'.
[  772.325159][T10865] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.332596][T10865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.368969][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5809'.
[  772.383797][T27964] IPVS: Error connecting to the multicast addr
[  772.403139][T27969] netlink: 'syz.2.5810': attribute type 1 has an invalid length.
[  772.539975][T27969] 8021q: adding VLAN 0 to HW filter on device bond11
[  772.586455][T27975] bond8: (slave veth0_to_bond): Releasing active interface
[  772.666634][T27975] bond11: (slave veth0_to_bond): making interface the new active one
[  772.742028][T27975] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  772.803735][T27991] Bluetooth: MGMT ver 1.23
[  772.814146][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.821408][ T8429] bridge0: port 2(bridge_slave_1) entered forwarding state
[  772.944123][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5815'.
[  772.960082][T27969] 8021q: adding VLAN 0 to HW filter on device bond12
[  772.985181][T27969] bond11: (slave bond12): Enslaving as an active interface with a down link
[  773.274412][T28009] netlink: 'syz.4.5820': attribute type 1 has an invalid length.
[  773.332938][T28010] netlink: 'syz.2.5818': attribute type 2 has an invalid length.
[  773.433798][T28020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5821'.
[  773.647425][T28025] pimreg3: entered allmulticast mode
[  773.728451][T27738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.874660][T27738] veth0_vlan: entered promiscuous mode
[  773.915266][T27738] veth1_vlan: entered promiscuous mode
[  774.022224][T27738] veth0_macvtap: entered promiscuous mode
[  774.052908][T27738] veth1_macvtap: entered promiscuous mode
[  774.153355][T27738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.216405][T27738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.277857][T10862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.322132][T10862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.369279][T10862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.401540][T10862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  774.675613][T10862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.707525][T10862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  774.740846][T28082] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5836'.
[  774.778859][T10867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.801628][T10867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  774.831017][T28084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.869171][T28084] syzkaller0: entered promiscuous mode
[  774.877152][T28086] netdevsim netdevsim1: Direct firmware load for r1 failed with error -2
[  774.901475][T28084] syzkaller0: entered allmulticast mode
[  774.903000][T28086] netdevsim netdevsim1: Falling back to sysfs fallback for: r1
[  775.002217][T28090] tipc: Resetting bearer <eth:syzkaller0>
[  775.095236][T28100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5751'.
[  775.156088][T28084] tipc: Resetting bearer <eth:syzkaller0>
[  775.203977][T28084] tipc: Disabling bearer <eth:syzkaller0>
[  775.248307][T28103] syzkaller0: entered promiscuous mode
[  775.259646][T28103] syzkaller0: entered allmulticast mode
[  775.359994][T28103] : entered promiscuous mode
[  775.908015][T28139] netlink: 'syz.1.5849': attribute type 1 has an invalid length.
[  775.950700][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'.
[  776.333215][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5857'.
[  776.376673][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5857'.
[  776.596650][T28175] netlink: 'syz.1.5860': attribute type 5 has an invalid length.
[  776.678631][T28178] openvswitch: netlink: IP tunnel dst address not specified
[  776.869200][T28178] bond1: (slave gre0): Device is not bonding slave
[  776.893315][T28178] bond1: option active_slave: invalid value (gre0)
[  776.905498][T28178] bond1 (unregistering): Released all slaves
[  777.228625][T28207] __nla_validate_parse: 5 callbacks suppressed
[  777.228645][T28207] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5868'.
[  777.268036][T28207] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5868'.
[  777.285956][T28208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5868'.
[  777.317013][T28214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5869'.
[  777.421329][T28222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5869'.
[  777.644380][T28235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.742993][T28243] netlink: 'syz.2.5879': attribute type 1 has an invalid length.
[  778.045039][T28259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5884'.
[  778.066151][T28259] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  778.095429][T28262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.244293][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5888'.
[  778.612339][T28301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5894'.
[  778.789460][T28309] openvswitch: netlink: IPv6 tunnel dst address is zero
[  778.953577][T28315] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5899'.
[  779.026050][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'.
[  779.233448][T28337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  780.275573][T28387] ip6t_rpfilter: unknown options
[  780.445050][T28368] dvmrp8: entered allmulticast mode
[  780.505062][ T8429] dvmrp8: left allmulticast mode
[  780.588223][T28400] xt_hashlimit: size too large, truncated to 1048576
[  781.194142][T28429] vxcan6: entered promiscuous mode
[  781.199467][T28429] vxcan6: entered allmulticast mode
[  781.279206][T28429] vxcan6: entered promiscuous mode
[  781.302202][T28429] vxcan6: entered allmulticast mode
[  781.391301][T28429] vxcan6: entered promiscuous mode
[  781.397755][T28429] vxcan6: entered allmulticast mode
[  781.404873][T28448] netlink: 'syz.3.5934': attribute type 11 has an invalid length.
[  781.413658][T28448] netlink: 'syz.3.5934': attribute type 11 has an invalid length.
[  781.423693][T28449] netlink: 'syz.3.5934': attribute type 11 has an invalid length.
[  781.437498][T28449] netlink: 'syz.3.5934': attribute type 11 has an invalid length.
[  781.497207][T28429] vxcan6: entered promiscuous mode
[  781.506661][T28429] vxcan6: entered allmulticast mode
[  781.638277][T28429] vxcan6: entered promiscuous mode
[  781.658426][T28429] vxcan6: entered allmulticast mode
[  781.764318][T28429] vxcan6: entered promiscuous mode
[  781.769780][T28429] vxcan6: entered allmulticast mode
[  781.845020][T28429] vxcan6: entered promiscuous mode
[  781.851172][T28429] vxcan6: entered allmulticast mode
[  781.868178][ T5917] IPVS: starting estimator thread 0...
[  781.961080][T28471] IPVS: using max 38 ests per chain, 91200 per kthread
[  781.991720][T28429] vxcan6: entered promiscuous mode
[  782.010538][T28429] vxcan6: entered allmulticast mode
[  782.559119][T28511] __nla_validate_parse: 16 callbacks suppressed
[  782.559139][T28511] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5948'.
[  782.636763][T28508] netlink: 'syz.1.5947': attribute type 10 has an invalid length.
[  782.669036][T28508] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5947'.
[  782.704071][T28508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5947'.
[  782.783395][T28526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5952'.
[  782.947816][T28532] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5954'.
[  783.045264][T28536] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5955'.
[  783.080215][T28539] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5957'.
[  783.349787][T28556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  783.412118][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5965'.
[  783.433299][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5965'.
[  783.487436][T28564] syzkaller0: entered promiscuous mode
[  783.503969][T28564] syzkaller0: entered allmulticast mode
[  783.638516][T28568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5968'.
[  783.860078][T28584] can: request_module (can-proto-0) failed.
[  784.423473][T28609] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  784.436346][T28609] bond15 (unregistering): Released all slaves
[  784.726625][T28618] openvswitch: netlink: Message has 4 unknown bytes.
[  784.755108][T28618] netlink: 'syz.2.5981': attribute type 16 has an invalid length.
[  784.791461][T28618] netlink: 'syz.2.5981': attribute type 17 has an invalid length.
[  785.178732][T28651] netem: incorrect gi model size
[  785.198073][T28651] netem: change failed
[  785.803489][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.816131][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.040876][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.534219][T28704] netlink: 'syz.4.6009': attribute type 4 has an invalid length.
[  786.852967][T28726] netlink: 'syz.3.6013': attribute type 8 has an invalid length.
[  786.950179][T28731] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  786.977271][T28731] bond2 (unregistering): Released all slaves
[  787.083942][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.512290][T28753] syzkaller0: entered promiscuous mode
[  787.518289][T28753] syzkaller0: entered allmulticast mode
[  787.723808][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.823351][T28761] syzkaller0: entered promiscuous mode
[  787.829035][T28761] syzkaller0: entered allmulticast mode
[  787.842174][T28762] H: renamed from dummy0 (while UP)
[  788.123186][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.360963][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.842850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.853705][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.002594][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.013629][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.161069][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.603580][T28710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  789.829218][T28788] netlink: 'syz.3.6028': attribute type 1 has an invalid length.
[  789.854944][T28788] __nla_validate_parse: 15 callbacks suppressed
[  789.854966][T28788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6028'.
[  789.893094][T28793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6028'.
[  789.904246][T28788] netlink: 'syz.3.6028': attribute type 1 has an invalid length.
[  789.918048][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6028'.
[  789.932283][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6031'.
[  790.201702][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.420855][T28816] block nbd2: server does not support multiple connections per device.
[  790.433259][T28816] block nbd2: shutting down sockets
[  790.458302][T28819] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6040'.
[  790.486733][T28819] netlink: 'syz.3.6040': attribute type 2 has an invalid length.
[  790.507523][T28827] openvswitch: netlink: Message has 4 unknown bytes.
[  790.544497][T28827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6042'.
[  790.580186][T28827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6042'.
[  790.725121][T28834] macsec1: entered promiscuous mode
[  790.733405][T28834] batadv0: entered promiscuous mode
[  790.745547][T28834] 8021q: adding VLAN 0 to HW filter on device macsec1
[  790.762620][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.781726][T28836] netlink: 'syz.3.6045': attribute type 1 has an invalid length.
[  790.791857][T28834] batadv0: left promiscuous mode
[  790.809270][T28836] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  790.967383][T28847] syzkaller0: entered promiscuous mode
[  790.973482][T28847] syzkaller0: entered allmulticast mode
[  791.068242][T28850] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  791.082637][T28850] bond12 (unregistering): Released all slaves
[  791.469517][T28872] vcan0: entered allmulticast mode
[  791.623998][T28886] netlink: 'syz.2.6059': attribute type 21 has an invalid length.
[  791.664647][T28886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6059'.
[  791.720105][T28886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6059'.
[  791.931655][T28897] netlink: 'syz.0.6061': attribute type 1 has an invalid length.
[  791.944908][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6062'.
[  791.959130][T28897] netlink: 'syz.0.6061': attribute type 1 has an invalid length.
[  791.968815][T28905] netlink: 'syz.1.6063': attribute type 1 has an invalid length.
[  791.979375][T28901] netlink: 'syz.2.6062': attribute type 3 has an invalid length.
[  791.987764][T28897] netlink: 'syz.0.6061': attribute type 1 has an invalid length.
[  792.136014][T28913] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  792.951876][T28957] macvtap1: entered promiscuous mode
[  792.994580][T28957] macvtap1: entered allmulticast mode
[  793.020546][T28957] veth1_vlan: entered allmulticast mode
[  793.801658][T19188] net_ratelimit: 3 callbacks suppressed
[  793.801681][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.915887][T29003] xt_TPROXY: Can be used only with -p tcp or -p udp
[  794.121157][T10867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.363891][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.395446][T29018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.407379][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.713404][T29031] bond15: option all_slaves_active: invalid value (222)
[  794.723838][T29031] bond15 (unregistering): Released all slaves
[  794.809055][T29032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.821415][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.097431][T29053] vlan4: entered allmulticast mode
[  795.117614][T29053] bond0: entered allmulticast mode
[  795.142041][T29053] __nla_validate_parse: 8 callbacks suppressed
[  795.142063][T29053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'.
[  795.306843][T29075] IPv6: NLM_F_CREATE should be specified when creating new route
[  795.327897][T29075] validate_nla: 7 callbacks suppressed
[  795.327918][T29075] netlink: 'syz.2.6105': attribute type 1 has an invalid length.
[  795.404967][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.413380][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.435099][T29067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  795.635071][T29089] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  795.767496][T29095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.834475][T29095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.869579][T29095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.938299][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.017879][T29105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'.
[  796.018813][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.036696][T29105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6113'.
[  796.047104][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.059684][T29107] netlink: 'syz.3.6113': attribute type 4 has an invalid length.
[  796.068236][T29106] netlink: 'syz.3.6113': attribute type 4 has an invalid length.
[  796.077020][T29106] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6113'.
[  796.098911][T29107] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6113'.
[  796.103983][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.156356][T29110] netlink: 'syz.0.6114': attribute type 1 has an invalid length.
[  796.176841][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.185584][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.195690][T29097] netlink: 'syz.4.6112': attribute type 1 has an invalid length.
[  796.414724][T29122] 8021q: adding VLAN 0 to HW filter on device bond12
[  796.427845][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6118'.
[  796.511425][T29122] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  796.543858][T29122] bond12: entered allmulticast mode
[  796.671844][T29135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6120'.
[  796.900713][T29143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6123'.
[  796.982816][T29150] syzkaller0: entered promiscuous mode
[  796.990790][T29150] syzkaller0: entered allmulticast mode
[  797.014716][T29150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.048484][T29149] tipc: Resetting bearer <eth:syzkaller0>
[  797.148543][T29149] tipc: Disabling bearer <eth:syzkaller0>
[  797.226066][T29164] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6130'.
[  797.405879][T29172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6131'.
[  797.413568][T29168] 8021q: adding VLAN 0 to HW filter on device bond7
[  797.560032][T29168] bond7: (slave veth0_to_bond): making interface the new active one
[  797.577774][T29168] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  797.900822][T29197] xt_cgroup: xt_cgroup: no path or classid specified
[  798.120036][T29212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  798.324897][T29223] IPVS: set_ctl: invalid protocol: 1 172.30.255.2:20004
[  798.562097][T29239] syzkaller0: create flow: hash 1177146831 index 1
[  798.685776][T29239] syzkaller0: delete flow: hash 1177146831 index 1
[  799.251359][T10870] net_ratelimit: 8 callbacks suppressed
[  799.251380][T10870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.574250][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.526326][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.607306][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.167943][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.359057][T29227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  801.642674][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.719634][T29263] validate_nla: 64 callbacks suppressed
[  801.719655][T29263] netlink: 'syz.2.6155': attribute type 1 has an invalid length.
[  802.297993][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.611264][T29263] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  802.680938][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.082257][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.090782][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.313541][T29311] __nla_validate_parse: 2 callbacks suppressed
[  803.313562][T29311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6167'.
[  803.350942][T29313] syzkaller0: entered promiscuous mode
[  803.383311][T29313] syzkaller0: entered allmulticast mode
[  803.427134][T29320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6170'.
[  803.974289][T29356] x_tables: duplicate underflow at hook 3
[  803.991591][T29356] x_tables: duplicate underflow at hook 3
[  804.008158][T29356] x_tables: duplicate underflow at hook 3
[  804.026257][T29356] x_tables: duplicate underflow at hook 3
[  804.052943][T29356] x_tables: duplicate underflow at hook 3
[  804.114709][T29366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  804.142088][T29370] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.6181'.
[  804.361016][    C0] net_ratelimit: 4 callbacks suppressed
[  804.361037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.761063][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.005701][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.015560][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.801674][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.662232][T29334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  806.841119][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.897195][T29389] netlink: 'syz.1.6187': attribute type 2 has an invalid length.
[  806.902032][T29382] IPVS: dh: FWM 3 0x00000003 - no destination available
[  806.926082][T29389] �9: entered promiscuous mode
[  807.089379][T29398] lo: entered allmulticast mode
[  807.108458][T29398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  807.292439][T29406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.302098][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.342056][T29393] syzkaller0: entered promiscuous mode
[  807.348260][T29411] netlink: 'syz.3.6195': attribute type 1 has an invalid length.
[  807.352222][T29393] syzkaller0: entered allmulticast mode
[  809.963541][ T1210] net_ratelimit: 3 callbacks suppressed
[  809.963558][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.128815][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.761968][ T8429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.770148][ T8429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.938276][T29411] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  810.943051][T29414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  811.002794][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.035456][T29446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6199'.
[  811.058151][T29417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6196'.
[  811.104775][T29451] "syz.2.6200" (29451) uses obsolete ecb(arc4) skcipher
[  811.254337][T29441] bridge0: port 1(hsr0) entered blocking state
[  811.271910][T29441] bridge0: port 1(hsr0) entered disabled state
[  811.290936][T29441] hsr0: entered allmulticast mode
[  811.302868][T29441] hsr_slave_0: entered allmulticast mode
[  811.317103][T29441] hsr_slave_1: entered allmulticast mode
[  811.340998][T29441] hsr0: entered promiscuous mode
[  811.458227][T29446] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  811.749731][T29480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  812.042048][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.089453][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.803199][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.127447][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.166158][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.505254][T29480] syzkaller0: MTU too low for tipc bearer
[  815.511366][T29480] tipc: Disabling bearer <eth:syzkaller0>
[  815.802364][T10870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.122229][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  816.134284][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  816.150698][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  816.164570][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  816.172609][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  816.178726][T29532] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6220'.
[  816.206421][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.286295][T29532] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6220'.
[  816.917741][T29567] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6228'.
[  816.957491][T29570] netlink: 'syz.2.6229': attribute type 1 has an invalid length.
[  817.018015][T29575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6230'.
[  817.040953][T29570] bond15: entered promiscuous mode
[  817.048296][T29570] 8021q: adding VLAN 0 to HW filter on device bond15
[  817.121227][T29570] ipvlan1: entered allmulticast mode
[  817.132036][T29570] bond15: entered allmulticast mode
[  817.148687][T29524] chnl_net:caif_netlink_parms(): no params data found
[  817.161958][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.170811][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.240693][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.294354][T29570] bond15: (slave bridge2): making interface the new active one
[  817.303377][T29570] bridge2: entered promiscuous mode
[  817.308929][T29570] bridge2: entered allmulticast mode
[  817.317499][T29570] bond15: (slave bridge2): Enslaving as an active interface with an up link
[  817.335456][T29588] netlink: 'syz.3.6232': attribute type 1 has an invalid length.
[  817.344301][T29588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6232'.
[  817.354456][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6232'.
[  817.364330][T29588] netlink: 'syz.3.6232': attribute type 2 has an invalid length.
[  817.375666][T29588] netlink: 'syz.3.6232': attribute type 2 has an invalid length.
[  817.384111][T29588] netlink: 'syz.3.6232': attribute type 2 has an invalid length.
[  817.692861][T29524] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.700993][T29524] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.708329][T29524] bridge_slave_0: entered allmulticast mode
[  817.716616][T29524] bridge_slave_0: entered promiscuous mode
[  817.728460][T29604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6236'.
[  817.752734][T29524] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.765808][T29524] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.782768][T29524] bridge_slave_1: entered allmulticast mode
[  817.803024][T29524] bridge_slave_1: entered promiscuous mode
[  817.887713][T29524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  817.900314][T29609] netlink: 'syz.0.6237': attribute type 1 has an invalid length.
[  817.912911][T29611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6238'.
[  817.922637][T29524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.098496][T29524] team0: Port device team_slave_0 added
[  818.128425][T29524] team0: Port device team_slave_1 added
[  818.210046][T29620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  818.282096][ T5831] Bluetooth: hci5: command tx timeout
[  818.292666][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.303199][T29629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6240'.
[  818.386876][T29524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  818.412905][T29524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.459835][T29524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  818.474690][T29524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.481920][T29524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.513094][T29524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  818.665068][T29524] hsr_slave_0: entered promiscuous mode
[  818.674721][T29524] hsr_slave_1: entered promiscuous mode
[  818.681498][T29643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6245'.
[  818.691946][T29524] debugfs: 'hsr0' already exists in 'hsr'
[  818.699523][T29524] Cannot create hsr debugfs directory
[  818.843558][T19188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.202469][T29673] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  819.214233][T29673] netlink: 'syz.0.6251': attribute type 12 has an invalid length.
[  819.243003][T29673] netlink: 'syz.0.6251': attribute type 11 has an invalid length.
[  819.323521][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.375190][T29524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.386963][T29524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.627186][T29524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.672936][T29524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.886443][T29701] netlink: 'syz.4.6262': attribute type 7 has an invalid length.
[  819.896033][T29524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.907540][T29524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.919594][T29701] netlink: 'syz.4.6262': attribute type 8 has an invalid length.
[  820.153469][T29524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  820.183487][T29524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.211220][T29702] syzkaller1: entered promiscuous mode
[  820.217044][T29702] syzkaller1: entered allmulticast mode
[  820.314507][T29710] tc_dump_action: action bad kind
[  820.362507][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.370775][ T5831] Bluetooth: hci5: command tx timeout
[  820.383274][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.656050][T29734] syzkaller1: entered promiscuous mode
[  820.687227][T29734] syzkaller1: entered allmulticast mode
[  820.757346][T29735] sctp: [Deprecated]: syz.3.6270 (pid 29735) Use of int in max_burst socket option deprecated.
[  820.757346][T29735] Use struct sctp_assoc_value instead
[  821.004712][  T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.057042][T29751] veth0_to_team: entered promiscuous mode
[  821.063942][T29751] veth0_to_team: entered allmulticast mode
[  821.113161][T29524] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  821.137402][T29524] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  821.167265][T29524] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  821.205120][T29524] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  821.308037][T29524] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  821.336623][T29524] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  821.355575][T29524] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  821.386022][T29524] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  821.401707][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.592943][T29524] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.634269][T29524] 8021q: adding VLAN 0 to HW filter on device team0
[  821.659848][T10869] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.667118][T10869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  821.698157][T10869] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.705608][T10869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.986435][T29524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.035349][T29524] veth0_vlan: entered promiscuous mode
[  822.047624][T29524] veth1_vlan: entered promiscuous mode
[  822.082235][T29524] veth0_macvtap: entered promiscuous mode
[  822.093687][T29524] veth1_macvtap: entered promiscuous mode
[  822.115549][T29524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  822.132044][T29524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  822.146887][  T962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  822.157307][  T962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  822.169434][  T962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  822.179968][  T962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  822.301860][T10870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.312830][T10870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  822.354277][T29729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.363136][T29729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  822.424675][T29793] __nla_validate_parse: 70 callbacks suppressed
[  822.424691][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6213'.
[  822.441090][ T5831] Bluetooth: hci5: command tx timeout
[  822.441646][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.482332][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.042924][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.201308][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.521909][ T5831] Bluetooth: hci5: command tx timeout
[  824.528378][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.560948][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.602204][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.762612][  T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.640940][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.681199][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.721585][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.801263][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.961513][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.607464][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.764259][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.242601][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.251078][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.801124][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.900777][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.522115][T29729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.840911][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.880802][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.920947][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.721679][    C0] net_ratelimit: 1 callbacks suppressed
[  835.721703][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.960828][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.004088][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.041019][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.281440][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.289661][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.297881][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.080808][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.122732][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.160803][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.321741][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.489274][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.200778][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.240839][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.041048][  T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.281122][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.321123][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.329675][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.338574][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.361142][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.082493][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.401127][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.441980][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.161938][  T962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.480937][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.522283][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.081585][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.561108][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.201268][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.363105][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.600955][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.642515][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.680884][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.921832][T29729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.721143][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.760877][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.801864][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  857.961999][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.834808][T29801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.849352][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.858109][T29801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.881825][T29801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.930245][T29805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.963005][T29805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.042750][T29800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.406320][T29820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6291'.
[  859.480892][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  859.498813][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  859.510028][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  859.518923][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  859.529783][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  859.650289][T29831] C: renamed from lo (while UP)
[  859.949676][T29848] xt_hashlimit: size too large, truncated to 1048576
[  860.179130][  T962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  860.220840][  T962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.232198][  T962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44466 - 0
[  860.484106][T29873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6309'.
[  860.516952][  T962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  860.527834][  T962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.539693][  T962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44466 - 0
[  860.578508][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6306'.
[  860.730285][  T962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  860.743555][  T962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.757541][  T962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44466 - 0
[  860.782267][T29883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6311'.
[  861.005870][T29900] netlink: 'syz.4.6314': attribute type 3 has an invalid length.
[  861.038168][T29892] netlink: 'syz.4.6314': attribute type 3 has an invalid length.
[  861.123670][  T962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  861.162703][  T962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.189898][  T962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44466 - 0
[  861.259690][T29915] netlink: 'syz.4.6318': attribute type 75 has an invalid length.
[  861.294316][T29911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6317'.
[  861.315391][T29828] chnl_net:caif_netlink_parms(): no params data found
[  861.425321][T29919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6319'.
[  861.462025][T29920] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  861.581514][T29925] netlink: 'syz.1.6320': attribute type 3 has an invalid length.
[  861.646900][T29925] netlink: 'syz.1.6320': attribute type 1 has an invalid length.
[  861.660581][ T5831] Bluetooth: hci0: command tx timeout
[  861.687825][T29925] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6320'.
[  861.774429][T29828] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.795276][T29828] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.809726][T29942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6324'.
[  861.833057][T29828] bridge_slave_0: entered allmulticast mode
[  861.852576][T29828] bridge_slave_0: entered promiscuous mode
[  861.912626][T29828] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.929617][T29828] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.947797][T29828] bridge_slave_1: entered allmulticast mode
[  861.960835][ T1210] net_ratelimit: 9 callbacks suppressed
[  861.960855][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.992099][T29828] bridge_slave_1: entered promiscuous mode
[  862.119806][T29828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.138186][T29828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.252700][T29828] team0: Port device team_slave_0 added
[  862.263351][T29828] team0: Port device team_slave_1 added
[  862.352631][  T962] bond3: left allmulticast mode
[  862.357870][  T962] bridge0: port 2(bond3) entered disabled state
[  862.411306][  T962] pimreg3: left allmulticast mode
[  862.429498][T29962] x_tables: ip_tables: icmp match: only valid for protocol 1
[  862.478296][T29962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.493221][T29962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.509966][T29962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  862.733942][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6330'.
[  862.769894][T29977] netlink: 324 bytes leftover after parsing attributes in process `syz.4.6332'.
[  863.004547][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.086867][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.236538][  T962] bond15 (unregistering): (slave bridge2): Releasing backup interface
[  863.245400][  T962] bridge2 (unregistering): left promiscuous mode
[  863.253204][  T962] bridge2 (unregistering): left allmulticast mode
[  863.323349][  T962] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.342429][  T962] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.355866][  T962] 
 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  863.371825][  T962] 
 (unregistering): Released all slaves
[  863.391807][  T962] bond1 (unregistering): Released all slaves
[  863.414130][  T962] bond2 (unregistering): Released all slaves
[  863.436360][  T962] bond3 (unregistering): Released all slaves
[  863.459425][  T962] bond4 (unregistering): (slave veth3): Releasing active interface
[  863.471025][  T962] bond4 (unregistering): Released all slaves
[  863.488257][  T962] bond5 (unregistering): Released all slaves
[  863.506409][  T962] bond6 (unregistering): Released all slaves
[  863.529127][  T962] bond7 (unregistering): Released all slaves
[  863.553242][  T962] bond0 (unregistering): (slave batadv1): Releasing active interface
[  863.567212][  T962] batadv1: left promiscuous mode
[  863.573371][  T962] batadv1: left allmulticast mode
[  863.581927][  T962] bond0 (unregistering): Released all slaves
[  863.598448][  T962] bond8 (unregistering): Released all slaves
[  863.617270][  T962] bond9 (unregistering): (slave bond10): Releasing backup interface
[  863.633997][  T962] bond9 (unregistering): Released all slaves
[  863.650875][  T962] bond10 (unregistering): Released all slaves
[  863.668159][  T962] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface
[  863.680985][  T962] bond11 (unregistering): (slave bond12): Releasing active interface
[  863.690276][  T962] bond11 (unregistering): Released all slaves
[  863.714408][  T962] bond12 (unregistering): Released all slaves
[  863.721290][ T5831] Bluetooth: hci0: command tx timeout
[  863.737247][  T962] bond13 (unregistering): Released all slaves
[  863.760105][  T962] bond14 (unregistering): Released all slaves
[  863.784828][  T962] bond15 (unregistering): Released all slaves
[  863.813981][T29828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.823045][T29828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.855616][T29828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.869793][T29828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.878248][T29828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.934265][T29828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.986608][T29979] syzkaller0: entered promiscuous mode
[  864.020667][T29979] syzkaller0: entered allmulticast mode
[  864.050827][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.349976][  T962] : left promiscuous mode
[  864.488624][T29828] hsr_slave_0: entered promiscuous mode
[  864.496957][T29828] hsr_slave_1: entered promiscuous mode
[  864.504456][T29828] debugfs: 'hsr0' already exists in 'hsr'
[  864.511058][T29828] Cannot create hsr debugfs directory
[  864.543788][T30010] team0: No ports can be present during mode change
[  864.618723][T30005] 8021q: adding VLAN 0 to HW filter on device bond3
[  864.627463][T30012] __nla_validate_parse: 2 callbacks suppressed
[  864.627478][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6339'.
[  864.695542][T30008] 8021q: adding VLAN 0 to HW filter on device bond3
[  864.704420][T30008] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address
[  864.716511][T30008] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  864.753098][T30008] bond3: (slave xfrm1): making interface the new active one
[  864.778467][T30008] bond3: (slave xfrm1): Enslaving as an active interface with an up link
[  864.788637][  T962] tipc: Disabling bearer <eth:macvlan1>
[  864.808857][  T962] tipc: Left network mode
[  864.920985][T30012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6339'.
[  865.085738][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.168458][T30022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.543544][T30031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6346'.
[  865.800704][ T5831] Bluetooth: hci0: command tx timeout
[  865.806821][T10870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.034890][T30062] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6354'.
[  866.945154][T30108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6366'.
[  866.993923][T30108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6366'.
[  867.087584][  T962] hsr_slave_0: left promiscuous mode
[  867.108246][  T962] hsr_slave_1: left promiscuous mode
[  867.120974][  T962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  867.141291][  T962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.160174][  T962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  867.165227][ T1210] net_ratelimit: 3 callbacks suppressed
[  867.165284][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  867.178811][T30118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6369'.
[  867.197071][  T962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.225631][  T962] veth1_macvtap: left promiscuous mode
[  867.232208][  T962] veth1_vlan: left promiscuous mode
[  867.646771][  T962] team0 (unregistering): Port device team_slave_1 removed
[  867.677510][  T962] team0 (unregistering): Port device team_slave_0 removed
[  867.808599][  T962] vcan0 (unregistering): left allmulticast mode
[  867.845554][T30108] gretap3: entered promiscuous mode
[  867.855395][T30108] gretap3: entered allmulticast mode
[  867.870530][T30121] C: renamed from lo (while UP)
[  867.880898][ T5831] Bluetooth: hci0: command tx timeout
[  867.933776][T30121] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  868.206915][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.307517][T30130] bond8: entered allmulticast mode
[  868.520143][T29828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  868.601447][T29828] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  868.621663][T29828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  868.653220][T30150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6377'.
[  868.696105][T29828] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  868.704754][T30156] netlink: 'syz.3.6377': attribute type 10 has an invalid length.
[  868.737768][T30152] netlink: 'syz.1.6379': attribute type 10 has an invalid length.
[  868.777020][T29828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  868.819148][T29828] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  868.844865][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.982319][T30152] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  869.043040][T29828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  869.094400][T29828] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  869.116963][T30160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.154921][T30174] netlink: 'syz.4.6381': attribute type 10 has an invalid length.
[  869.242691][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.392324][T30189] netlink: 'syz.1.6383': attribute type 2 has an invalid length.
[  869.529707][T29828] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.598400][T29828] 8021q: adding VLAN 0 to HW filter on device team0
[  869.638976][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.646255][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.694239][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.701767][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  869.877697][T30211] sctp: [Deprecated]: syz.1.6388 (pid 30211) Use of struct sctp_assoc_value in delayed_ack socket option.
[  869.877697][T30211] Use struct sctp_sack_info instead
[  869.926034][T30210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6388'.
[  870.017783][T30218] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6389'.
[  870.048174][T30218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6389'.
[  870.061910][T30218] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.069847][T30218] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.281689][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.290063][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.389919][T29828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.563315][T29828] veth0_vlan: entered promiscuous mode
[  870.630188][T29828] veth1_vlan: entered promiscuous mode
[  870.815641][T29828] veth0_macvtap: entered promiscuous mode
[  870.848278][T29828] veth1_macvtap: entered promiscuous mode
[  870.905828][T29828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.921668][T10867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  870.954839][T29828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.037761][T10866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.063366][T10866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.072769][T10866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.116534][T10866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.322346][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  871.376375][T10862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.398311][T10862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.503210][T10867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.520196][T10867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.622953][T30270] bond9: entered allmulticast mode
[  871.713092][T30269] bridge8: entered promiscuous mode
[  871.755791][T30269] bridge8: entered allmulticast mode
[  871.812610][T30275] bridge9: entered promiscuous mode
[  871.819035][T30275] bridge9: entered allmulticast mode
[  871.861830][T30283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6400'.
[  872.099257][T30296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6403'.
[  872.243988][T30302] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6404'.
[  872.364281][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.573393][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  872.592912][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  872.603609][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  872.617343][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  872.632637][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  873.404722][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.481131][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.489500][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  873.763697][T30318] chnl_net:caif_netlink_parms(): no params data found
[  873.961640][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.167530][T30318] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.181362][T30318] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.188876][T30318] bridge_slave_0: entered allmulticast mode
[  874.200316][T30318] bridge_slave_0: entered promiscuous mode
[  874.236072][T30390] bridge_slave_0: left allmulticast mode
[  874.244371][T30390] bridge_slave_0: left promiscuous mode
[  874.250263][T30390] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.266767][T30390] bridge_slave_1: left allmulticast mode
[  874.276394][T30390] bridge_slave_1: left promiscuous mode
[  874.283548][T30390] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.303273][T30390] bond0: (slave bond_slave_0): Releasing backup interface
[  874.315642][T30390] bond0: (slave bond_slave_1): Releasing backup interface
[  874.337213][T30390] team0: Port device team_slave_0 removed
[  874.361801][T30390] team0: Port device team_slave_1 removed
[  874.369156][T30390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  874.378359][T30390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  874.388659][T30390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  874.397909][T30390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.412853][T30390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  874.439477][T30318] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.449719][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.464928][T30318] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.474674][T30318] bridge_slave_1: entered allmulticast mode
[  874.491807][T30318] bridge_slave_1: entered promiscuous mode
[  874.509156][T30402] syzkaller0: entered promiscuous mode
[  874.573029][T30318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  874.595224][T30318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  874.647332][T30318] team0: Port device team_slave_0 added
[  874.658511][T30318] team0: Port device team_slave_1 added
[  874.681344][ T5144] Bluetooth: hci4: command tx timeout
[  874.718921][T30318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  874.726297][T30318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.754668][T30318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  874.791365][T30318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  874.805710][T30318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.834554][T30318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  874.914664][T30318] hsr_slave_0: entered promiscuous mode
[  874.922089][T30318] hsr_slave_1: entered promiscuous mode
[  874.929181][T30318] debugfs: 'hsr0' already exists in 'hsr'
[  874.936101][T30318] Cannot create hsr debugfs directory
[  875.244554][T30318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.259456][T30318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.271911][T30318] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  875.379422][T30318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.390721][T30318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.402638][T30318] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  875.486727][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.537612][T30318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.548781][T30318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.564404][T30318] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  875.688638][T30318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.699091][T30318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.710042][T30318] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  876.041063][T10866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.325267][T30352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  876.402048][T30318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  876.453672][T30318] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  876.476470][T30318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  876.499457][T30318] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  876.523593][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  876.558040][T30318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  876.585336][T30318] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  876.639929][T30318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  876.690261][T30436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6423'.
[  876.761785][ T5144] Bluetooth: hci4: command tx timeout
[  876.837610][T30318] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  877.068999][T30466] syzkaller1: entered promiscuous mode
[  877.085524][T30466] syzkaller1: entered allmulticast mode
[  877.148995][T30318] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.306905][T30318] 8021q: adding VLAN 0 to HW filter on device team0
[  877.344238][T10870] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.351571][T10870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  877.374963][T10867] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.382292][T10867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  877.458796][T30478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6433'.
[  877.473883][T30477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6432'.
[  877.485093][T30482] netlink: 'syz.1.6434': attribute type 13 has an invalid length.
[  877.486169][T30477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6432'.
[  877.522910][T30482] netlink: 'syz.1.6434': attribute type 58 has an invalid length.
[  877.541046][T30482] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6434'.
[  877.561037][T17007] net_ratelimit: 4 callbacks suppressed
[  877.561059][T17007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.612687][T30318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  877.848713][T30498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.897909][T30499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.945575][T30507] netlink: 'syz.3.6442': attribute type 1 has an invalid length.
[  877.954854][T30507] netlink: 'syz.3.6442': attribute type 2 has an invalid length.
[  877.977194][T30505] netlink: 'syz.3.6442': attribute type 1 has an invalid length.
[  877.997708][T30505] netlink: 'syz.3.6442': attribute type 2 has an invalid length.
[  878.315689][T30318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  878.604114][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  878.638136][T30534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.718000][T30539] syzkaller1: entered promiscuous mode
[  878.730527][T30539] syzkaller1: entered allmulticast mode
[  878.736562][T30540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.819333][T30534] syzkaller0: entered promiscuous mode
[  878.826192][T30534] syzkaller0: entered allmulticast mode
[  878.843208][ T5144] Bluetooth: hci4: command tx timeout
[  879.081209][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.183643][T30318] veth0_vlan: entered promiscuous mode
[  879.214186][T30318] veth1_vlan: entered promiscuous mode
[  879.294197][T30318] veth0_macvtap: entered promiscuous mode
[  879.308963][T30318] veth1_macvtap: entered promiscuous mode
[  879.343099][T30318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  879.376913][T30318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  879.411796][T10870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.432567][T10870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  879.468375][T10870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  879.480895][T30558] netlink: 'syz.1.6455': attribute type 1 has an invalid length.
[  879.550286][T30559] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  879.577534][T30559] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  879.587901][T30559] gretap1: entered promiscuous mode
[  879.597712][T30559] gretap1: entered allmulticast mode
[  879.606656][T10870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  879.641244][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  879.672086][T30558] 8021q: adding VLAN 0 to HW filter on device bond2
[  879.709470][T30562] bond2: (slave bridge2): making interface the new active one
[  879.720255][T30562] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  879.882679][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.053279][T10867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.090417][T10867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.175454][T10866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.213693][T10866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.503922][T30599] xt_hashlimit: size too large, truncated to 1048576
[  880.515417][T30601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6465'.
[  880.525404][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.700395][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.930551][ T5144] Bluetooth: hci4: command tx timeout
[  881.067586][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  881.089382][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  881.113459][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  881.127497][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  881.139116][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  881.162969][T10870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  881.636057][T10866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  881.648143][T10866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.728701][T30623] chnl_net:caif_netlink_parms(): no params data found
[  881.772442][T10866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  881.783307][T10866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.897649][T10866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  881.913370][T10866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.945254][T30623] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.952755][T30623] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.960483][T30623] bridge_slave_0: entered allmulticast mode
[  881.968669][T30623] bridge_slave_0: entered promiscuous mode
[  881.979159][T30623] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.986860][T30623] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.994775][T30623] bridge_slave_1: entered allmulticast mode
[  882.005296][T30623] bridge_slave_1: entered promiscuous mode
[  882.043713][T10866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  882.054785][T10866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.104449][T30623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  882.120482][T30623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.167359][T30623] team0: Port device team_slave_0 added
[  882.178423][T30623] team0: Port device team_slave_1 added
[  882.214253][T30623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.221405][T30623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.249709][T30623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.264597][T30623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.272630][T30623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.299407][T30623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.406617][T30623] hsr_slave_0: entered promiscuous mode
[  882.415033][T30623] hsr_slave_1: entered promiscuous mode
[  882.422038][T30623] debugfs: 'hsr0' already exists in 'hsr'
[  882.427833][T30623] Cannot create hsr debugfs directory
[  882.494534][T10866] bridge_slave_1: left allmulticast mode
[  882.503795][T10866] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.514960][T10866] bridge_slave_0: left allmulticast mode
[  882.522370][T10866] bridge_slave_0: left promiscuous mode
[  882.528250][T10866] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.748416][T10866] bond3 (unregistering): (slave gretap1): Releasing active interface
[  882.761114][T17009] net_ratelimit: 1 callbacks suppressed
[  882.761133][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.907081][T10866] bond7 (unregistering): (slave bridge2): Releasing backup interface
[  882.915400][T10866] bond7 (unregistering): (slave bridge2): the permanent HWaddr of slave - c2:5f:82:68:d4:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  883.065035][T10866] bond9 (unregistering): (slave bridge4): Releasing backup interface
[  883.073547][T10866] bridge4 (unregistering): left promiscuous mode
[  883.250619][ T5144] Bluetooth: hci2: command tx timeout
[  883.267857][T10866] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  883.282237][T10866] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  883.293228][T10866] .` (unregistering): Released all slaves
[  883.305198][T10866] bond1 (unregistering): Released all slaves
[  883.323177][T10866] bond2 (unregistering): Released all slaves
[  883.363447][T10866] bond0 (unregistering): Released all slaves
[  883.380230][T10866] bond3 (unregistering): Released all slaves
[  883.403980][T10866] bond4 (unregistering): Released all slaves
[  883.422243][T10866] bond5 (unregistering): Released all slaves
[  883.443339][T10866] bond6 (unregistering): Released all slaves
[  883.462229][T10866] bond7 (unregistering): (slave veth1): Releasing backup interface
[  883.482953][T10866] bond7 (unregistering): Released all slaves
[  883.499245][T10866] bond8 (unregistering): Released all slaves
[  883.516606][T10866] bond9 (unregistering): Released all slaves
[  883.538688][T10866] bond10 (unregistering): Released all slaves
[  883.556466][T10866] bond11 (unregistering): Released all slaves
[  883.582197][T10866] bond12 (unregistering): Released all slaves
[  883.759202][T30613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  883.801084][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.847546][T10866] tipc: Left network mode
[  884.135384][T30643] netlink: 'syz.1.6473': attribute type 13 has an invalid length.
[  884.216252][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.542888][T30643] gretap0: refused to change device tx_queue_len
[  884.556573][T30643] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  884.810034][T30659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6473'.
[  884.829076][T30676] 8021q: VLANs not supported on ipvlan1
[  884.845721][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.163475][ T5144] Bluetooth: hci3: command 0x0406 tx timeout
[  885.322010][ T5831] Bluetooth: hci2: command tx timeout
[  885.332231][T30692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6481'.
[  885.574739][T30710] xt_TCPMSS: Only works on TCP SYN packets
[  885.652712][T10866] hsr_slave_0: left promiscuous mode
[  885.696162][T10866] veth0_macvtap: left promiscuous mode
[  885.715392][T10866] veth1_vlan: left promiscuous mode
[  885.849498][T30729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6486'.
[  885.869357][T30694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  885.880815][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.086593][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a515c00: rx timeout, send abort
[  886.392870][T10866] team0 (unregistering): Port device team_slave_1 removed
[  886.439430][T10866] team0 (unregistering): Port device team_slave_0 removed
[  886.586741][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a516800: rx timeout, send abort
[  886.595267][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a515c00: abort rx timeout. Force session deactivation
[  886.921827][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.935349][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.095142][    C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805a516800: abort rx timeout. Force session deactivation
[  887.422523][ T5831] Bluetooth: hci2: command tx timeout
[  887.561477][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.571873][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.622972][T30623] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  887.654499][T30623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  887.681375][T30623] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  887.694716][T10866] IPVS: stop unused estimator thread 0...
[  887.714527][T30623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  887.747151][T30623] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  887.800080][T30623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  887.850757][T30623] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  887.884546][T30623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  887.961145][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.991990][T30768] netlink: 'syz.0.6495': attribute type 2 has an invalid length.
[  888.055762][T30768] netlink: 'syz.0.6495': attribute type 2 has an invalid length.
[  888.313925][T30623] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.394820][T30623] 8021q: adding VLAN 0 to HW filter on device team0
[  888.444002][T10869] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.451487][T10869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  888.522312][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.529805][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  888.778436][T30806] openvswitch: netlink: IPv4 tun info is not correct
[  888.843778][T30806] ip6gre1: entered allmulticast mode
[  888.864826][T30806] openvswitch: netlink: IPv4 tun info is not correct
[  889.004247][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.038945][T30820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  889.046324][T30820] IPv6: NLM_F_CREATE should be set when creating new route
[  889.053680][T30820] IPv6: NLM_F_CREATE should be set when creating new route
[  889.306120][T30623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  889.463868][T30623] veth0_vlan: entered promiscuous mode
[  889.482028][ T5831] Bluetooth: hci2: command tx timeout
[  889.488582][T19189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.540918][T30623] veth1_vlan: entered promiscuous mode
[  889.630110][T30845] netlink: 'syz.0.6513': attribute type 7 has an invalid length.
[  889.655102][T30848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6515'.
[  889.681019][T30845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  889.698604][T30623] veth0_macvtap: entered promiscuous mode
[  889.699883][T30850] netlink: 'syz.2.6511': attribute type 3 has an invalid length.
[  889.798892][T30623] veth1_macvtap: entered promiscuous mode
[  889.808871][T30848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6515'.
[  889.943677][T30863] netlink: 'syz.0.6517': attribute type 4 has an invalid length.
[  889.950987][T30859] netlink: 'syz.0.6517': attribute type 4 has an invalid length.
[  889.979676][T30623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  889.991405][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.038376][T30866] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:20000
[  890.072458][T30623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  890.111563][T10862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  890.141494][T10862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  890.175345][T10862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  890.226635][T10862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  890.279083][T30875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6522'.
[  890.562984][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.593472][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.651764][T30885] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6525'.
[  890.675025][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  890.698899][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  890.967155][T30903] xt_TPROXY: Can be used only with -p tcp or -p udp
[  890.978765][T30900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6528'.
[  891.003317][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6530'.
[  891.040123][T30910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6532'.
[  891.154136][T30915] syzkaller0: entered promiscuous mode
[  891.252730][T30923] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  891.266237][T30920] netlink: 456 bytes leftover after parsing attributes in process `syz.2.6534'.
[  891.471655][T30937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6539'.
[  891.573875][T30940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6539'.
[  891.932123][T30969] netlink: 'syz.1.6547': attribute type 1 has an invalid length.
[  891.976742][T30969] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6547'.
[  892.017241][T30973] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6548'.
[  892.207719][T30982] netlink: 'syz.1.6552': attribute type 1 has an invalid length.
[  892.638308][T31007] netlink: 'syz.1.6559': attribute type 1 has an invalid length.
[  892.646763][T31006] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  892.682403][T31007] netlink: 'syz.1.6559': attribute type 3 has an invalid length.
[  892.723809][T31007] netlink: 'syz.1.6559': attribute type 7 has an invalid length.
[  892.770753][T31007] netlink: 'syz.1.6559': attribute type 8 has an invalid length.
[  892.798368][T31007] NCSI netlink: No device for ifindex 131092
[  892.981765][T31028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  893.789559][T19189] IPVS: starting estimator thread 0...
[  893.801344][T31066] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  893.921782][T31070] IPVS: using max 24 ests per chain, 57600 per kthread
[  894.654553][T31105] xt_TCPMSS: Only works on TCP SYN packets
[  894.718639][T31105] bond0: entered promiscuous mode
[  894.743308][T31105] batadv0: entered promiscuous mode
[  894.792737][T31105] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  894.815915][T31105] 8021q: adding VLAN 0 to HW filter on device hsr1
[  894.880227][T31105] bond0: left promiscuous mode
[  894.893209][T31105] batadv0: left promiscuous mode
[  894.985292][T31125] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  895.038014][T31122] 8021q: adding VLAN 0 to HW filter on device bond1
[  895.072478][T31125] macvlan2: entered promiscuous mode
[  895.084451][T31125] macvlan2: entered allmulticast mode
[  895.177822][T31130] bond0: entered promiscuous mode
[  895.195088][T31130] bond0: left promiscuous mode
[  895.410191][T31143] __nla_validate_parse: 14 callbacks suppressed
[  895.410213][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'.
[  895.443572][T31144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6593'.
[  895.482274][T31144] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6593'.
[  895.638830][T31143] bond1: (slave ip6gre0): Device is not bonding slave
[  895.652424][T31143] bond1: option active_slave: invalid value (ip6gre0)
[  895.679168][T31153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6594'.
[  895.695673][T31143] bond1 (unregistering): Released all slaves
[  895.704383][T31163] validate_nla: 1 callbacks suppressed
[  895.704404][T31163] netlink: 'syz.0.6599': attribute type 1 has an invalid length.
[  895.719912][T31164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6599'.
[  895.868955][T31163] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  896.231410][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6606'.
[  896.266031][T31192] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  896.279676][T31188] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6606'.
[  896.518232][T31196] Bluetooth: MGMT ver 1.23
[  896.548124][T31199] block nbd0: reconnected socket
[  896.555079][T31199] block nbd0: reconnected socket
[  896.558669][T31196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6610'.
[  896.577591][ T5831] block nbd0: Receive control failed (result -32)
[  896.577609][ T5144] block nbd0: Receive control failed (result -32)
[  896.649579][T10862] bridge_slave_1: left allmulticast mode
[  896.673003][T10862] bridge_slave_1: left promiscuous mode
[  896.688903][T31202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6609'.
[  896.707772][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.743856][T10862] �x9�: left allmulticast mode
[  896.762921][T31205] netlink: 'syz.3.6612': attribute type 11 has an invalid length.
[  896.772799][T10862] �x9�: left promiscuous mode
[  896.783138][T10862] bridge0: port 1(
0�x9�) entered disabled state
[  896.836816][T10862] pimreg: left allmulticast mode
[  897.440231][T10862] bond5 (unregistering): (slave bridge1): Releasing active interface
[  897.448770][T10862] bond5 (unregistering): (slave bridge1): the permanent HWaddr of slave - fe:08:33:26:ea:64 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  897.496214][T10862] bond5 (unregistering): (slave bridge2): Releasing active interface
[  897.536562][T10862] bond7 (unregistering): (slave bridge3): Releasing backup interface
[  897.545017][T10862] bridge3 (unregistering): left promiscuous mode
[  897.603924][T31221] openvswitch: netlink: IP tunnel dst address not specified
[  897.678782][T10862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  897.693262][T10862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  897.708271][T10862] bond0 (unregistering): Released all slaves
[  897.721659][T10862] bond1 (unregistering): Released all slaves
[  897.740985][T10862] bond2 (unregistering): Released all slaves
[  897.757818][T10862] bond3 (unregistering): Released all slaves
[  897.783213][T10862] bond4 (unregistering): Released all slaves
[  897.801346][T10862] bond5 (unregistering): Released all slaves
[  897.824885][T10862] bond6 (unregistering): Released all slaves
[  897.852409][T10862] bond7 (unregistering): Released all slaves
[  897.877873][T10862] bond8 (unregistering): Released all slaves
[  897.915098][T31219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6615'.
[  898.004426][T31220] ip6gre1: entered allmulticast mode
[  898.193679][T31236] xt_ipcomp: unknown flags 1D
[  898.307040][T10862] �9: left promiscuous mode
[  898.422903][T10862] tipc: Disabling bearer <udp:syz2>
[  898.432703][T10862] tipc: Left network mode
[  898.439497][T31245] tipc: Started in network mode
[  898.449509][T31245] tipc: Node identity d6f46098c5df, cluster identity 4711
[  898.457647][T31245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  898.777125][T31248] syzkaller0: entered promiscuous mode
[  898.783281][T31248] syzkaller0: entered allmulticast mode
[  898.790086][T31248] tipc: Resetting bearer <eth:syzkaller0>
[  898.906109][T31242] tipc: Resetting bearer <eth:syzkaller0>
[  902.348048][T31242] tipc: Disabling bearer <eth:syzkaller0>
[  902.413866][ T5914] tipc: Node number set to 321609880
[  902.565636][T31287] netlink: 'syz.4.6631': attribute type 17 has an invalid length.
[  902.583648][T31287] __nla_validate_parse: 4 callbacks suppressed
[  902.583672][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6631'.
[  902.616960][T31287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6631'.
[  902.711436][T31287] gretap0: entered promiscuous mode
[  902.757387][T31287] gretap0: left promiscuous mode
[  902.902828][T10862] 
[  902.905309][T10862] ======================================================
[  902.912498][T10862] WARNING: possible circular locking dependency detected
[  902.919608][T10862] syzkaller #0 Not tainted
[  902.924078][T10862] ------------------------------------------------------
[  902.931264][T10862] kworker/u8:16/10862 is trying to acquire lock:
[  902.937631][T10862] ffff88801be9da10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180
[  902.948279][T10862] 
[  902.948279][T10862] but task is already holding lock:
[  902.955693][T10862] ffff88801be9d980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  902.965543][T10862] 
[  902.965543][T10862] which lock already depends on the new lock.
[  902.965543][T10862] 
[  902.976510][T10862] 
[  902.976510][T10862] the existing dependency chain (in reverse order) is:
[  902.985781][T10862] 
[  902.985781][T10862] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  902.994202][T10862]        down_write+0x96/0x200
[  902.999030][T10862]        kernfs_add_one+0x41/0x5c0
[  903.004361][T10862]        kernfs_create_dir_ns+0xde/0x130
[  903.010187][T10862]        internal_create_group+0x425/0x1180
[  903.016237][T10862]        cpuhp_invoke_callback+0x445/0x860
[  903.022110][T10862]        cpuhp_issue_call+0x430/0x7a0
[  903.027731][T10862]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  903.034558][T10862]        __cpuhp_setup_state+0x3f/0x60
[  903.040103][T10862]        do_one_initcall+0x250/0x870
[  903.045479][T10862]        do_initcall_level+0x104/0x190
[  903.051013][T10862]        do_initcalls+0x59/0xa0
[  903.055928][T10862]        kernel_init_freeable+0x2a6/0x3e0
[  903.061703][T10862]        kernel_init+0x1d/0x1d0
[  903.066617][T10862]        ret_from_fork+0x514/0xb70
[  903.071788][T10862]        ret_from_fork_asm+0x1a/0x30
[  903.077439][T10862] 
[  903.077439][T10862] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  903.085413][T10862] 
[  903.085413][T10862] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  903.093301][T10862]        cpus_read_lock+0x42/0x160
[  903.098599][T10862]        static_key_slow_inc+0x12/0x30
[  903.104221][T10862]        nbd_genl_reconfigure+0x132f/0x1ea0
[  903.110199][T10862]        genl_family_rcv_msg_doit+0x22a/0x330
[  903.116428][T10862]        genl_rcv_msg+0x61c/0x7a0
[  903.121542][T10862]        netlink_rcv_skb+0x232/0x4b0
[  903.126900][T10862]        genl_rcv+0x28/0x40
[  903.131466][T10862]        netlink_unicast+0x75c/0x8e0
[  903.136819][T10862]        netlink_sendmsg+0x813/0xb40
[  903.142161][T10862]        ____sys_sendmsg+0x972/0x9f0
[  903.147693][T10862]        ___sys_sendmsg+0x2a5/0x360
[  903.152977][T10862]        __x64_sys_sendmsg+0x1bd/0x2a0
[  903.158500][T10862]        do_syscall_64+0x15f/0xf80
[  903.163793][T10862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.170438][T10862] 
[  903.170438][T10862] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  903.178244][T10862]        __mutex_lock+0x1a3/0x1550
[  903.183464][T10862]        nbd_queue_rq+0x37b/0x1100
[  903.188650][T10862]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  903.194783][T10862]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  903.201773][T10862]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  903.208601][T10862]        blk_mq_run_hw_queue+0x348/0x4f0
[  903.214389][T10862]        blk_mq_dispatch_list+0xd16/0xe10
[  903.220165][T10862]        blk_mq_flush_plug_list+0x48d/0x570
[  903.226186][T10862]        __blk_flush_plug+0x3ed/0x4d0
[  903.231608][T10862]        __submit_bio+0x28d/0x580
[  903.236676][T10862]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  903.242864][T10862]        block_read_full_folio+0x599/0x830
[  903.248696][T10862]        filemap_read_folio+0x137/0x3b0
[  903.254266][T10862]        do_read_cache_folio+0x358/0x590
[  903.259924][T10862]        read_part_sector+0xb6/0x2b0
[  903.265230][T10862]        adfspart_check_ICS+0xb1/0x960
[  903.270712][T10862]        bdev_disk_changed+0x817/0x1770
[  903.276308][T10862]        blkdev_get_whole+0x380/0x510
[  903.281704][T10862]        bdev_open+0x31e/0xd30
[  903.286505][T10862]        blkdev_open+0x470/0x610
[  903.291477][T10862]        do_dentry_open+0x785/0x14e0
[  903.296996][T10862]        vfs_open+0x3b/0x340
[  903.301605][T10862]        path_openat+0x2e08/0x3860
[  903.306743][T10862]        do_file_open+0x23e/0x4a0
[  903.311799][T10862]        do_sys_openat2+0x113/0x200
[  903.317032][T10862]        __x64_sys_openat+0x138/0x170
[  903.322430][T10862]        do_syscall_64+0x15f/0xf80
[  903.327756][T10862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.334631][T10862] 
[  903.334631][T10862] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  903.341869][T10862]        __mutex_lock+0x1a3/0x1550
[  903.347010][T10862]        nbd_queue_rq+0xc6/0x1100
[  903.352085][T10862]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  903.358375][T10862]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  903.365975][T10862]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  903.372534][T10862]        blk_mq_run_hw_queue+0x348/0x4f0
[  903.378520][T10862]        blk_mq_dispatch_list+0xd16/0xe10
[  903.384419][T10862]        blk_mq_flush_plug_list+0x48d/0x570
[  903.390376][T10862]        __blk_flush_plug+0x3ed/0x4d0
[  903.395789][T10862]        __submit_bio+0x28d/0x580
[  903.400868][T10862]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  903.407044][T10862]        block_read_full_folio+0x599/0x830
[  903.413093][T10862]        filemap_read_folio+0x137/0x3b0
[  903.418703][T10862]        do_read_cache_folio+0x358/0x590
[  903.424361][T10862]        read_part_sector+0xb6/0x2b0
[  903.429667][T10862]        adfspart_check_ICS+0xb1/0x960
[  903.435228][T10862]        bdev_disk_changed+0x817/0x1770
[  903.440809][T10862]        blkdev_get_whole+0x380/0x510
[  903.446217][T10862]        bdev_open+0x31e/0xd30
[  903.451009][T10862]        blkdev_open+0x470/0x610
[  903.456068][T10862]        do_dentry_open+0x785/0x14e0
[  903.461391][T10862]        vfs_open+0x3b/0x340
[  903.466267][T10862]        path_openat+0x2e08/0x3860
[  903.471410][T10862]        do_file_open+0x23e/0x4a0
[  903.476480][T10862]        do_sys_openat2+0x113/0x200
[  903.481814][T10862]        __x64_sys_openat+0x138/0x170
[  903.487293][T10862]        do_syscall_64+0x15f/0xf80
[  903.492435][T10862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.498877][T10862] 
[  903.498877][T10862] -> #4 (set->srcu){.+.+}-{0:0}:
[  903.506028][T10862]        __synchronize_srcu+0xca/0x300
[  903.511619][T10862]        elevator_switch+0x1e8/0x7a0
[  903.517102][T10862]        elevator_change+0x2cc/0x450
[  903.522546][T10862]        elevator_set_default+0x36c/0x430
[  903.528401][T10862]        blk_register_queue+0x3e9/0x4e0
[  903.534196][T10862]        __add_disk+0x677/0xd50
[  903.539094][T10862]        add_disk_fwnode+0xfb/0x480
[  903.544441][T10862]        nbd_dev_add+0x72c/0xb50
[  903.549462][T10862]        nbd_init+0x168/0x1f0
[  903.554263][T10862]        do_one_initcall+0x250/0x870
[  903.559585][T10862]        do_initcall_level+0x104/0x190
[  903.565074][T10862]        do_initcalls+0x59/0xa0
[  903.569985][T10862]        kernel_init_freeable+0x2a6/0x3e0
[  903.575744][T10862]        kernel_init+0x1d/0x1d0
[  903.580812][T10862]        ret_from_fork+0x514/0xb70
[  903.585951][T10862]        ret_from_fork_asm+0x1a/0x30
[  903.591367][T10862] 
[  903.591367][T10862] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  903.599325][T10862]        __mutex_lock+0x1a3/0x1550
[  903.604469][T10862]        elevator_change+0x1b3/0x450
[  903.609863][T10862]        elevator_set_none+0xb5/0x140
[  903.615267][T10862]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  903.621626][T10862]        nbd_start_device+0x17f/0xb10
[  903.627049][T10862]        nbd_genl_connect+0x165b/0x1cf0
[  903.632639][T10862]        genl_family_rcv_msg_doit+0x22a/0x330
[  903.638821][T10862]        genl_rcv_msg+0x61c/0x7a0
[  903.643879][T10862]        netlink_rcv_skb+0x232/0x4b0
[  903.649188][T10862]        genl_rcv+0x28/0x40
[  903.653709][T10862]        netlink_unicast+0x75c/0x8e0
[  903.659030][T10862]        netlink_sendmsg+0x813/0xb40
[  903.664377][T10862]        ____sys_sendmsg+0x972/0x9f0
[  903.669856][T10862]        ___sys_sendmsg+0x2a5/0x360
[  903.675290][T10862]        __x64_sys_sendmsg+0x1bd/0x2a0
[  903.680799][T10862]        do_syscall_64+0x15f/0xf80
[  903.686038][T10862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.692571][T10862] 
[  903.692571][T10862] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  903.701324][T10862]        blk_alloc_queue+0x546/0x680
[  903.706650][T10862]        __blk_mq_alloc_disk+0x197/0x390
[  903.712338][T10862]        nbd_dev_add+0x499/0xb50
[  903.717312][T10862]        nbd_init+0x168/0x1f0
[  903.722051][T10862]        do_one_initcall+0x250/0x870
[  903.727378][T10862]        do_initcall_level+0x104/0x190
[  903.732880][T10862]        do_initcalls+0x59/0xa0
[  903.737763][T10862]        kernel_init_freeable+0x2a6/0x3e0
[  903.743616][T10862]        kernel_init+0x1d/0x1d0
[  903.748593][T10862]        ret_from_fork+0x514/0xb70
[  903.753736][T10862]        ret_from_fork_asm+0x1a/0x30
[  903.759057][T10862] 
[  903.759057][T10862] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  903.766312][T10862]        fs_reclaim_acquire+0x71/0x100
[  903.771808][T10862]        kmem_cache_alloc_noprof+0x40/0x650
[  903.777738][T10862]        __kernfs_iattrs+0xdf/0x320
[  903.783143][T10862]        kernfs_iop_setattr+0xea/0x3f0
[  903.788631][T10862]        notify_change+0xc1a/0xf40
[  903.793760][T10862]        do_truncate+0x1c2/0x250
[  903.798774][T10862]        path_openat+0x2f89/0x3860
[  903.803931][T10862]        do_file_open+0x23e/0x4a0
[  903.809002][T10862]        do_sys_openat2+0x113/0x200
[  903.814263][T10862]        __x64_sys_openat+0x138/0x170
[  903.819743][T10862]        do_syscall_64+0x15f/0xf80
[  903.824984][T10862]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.831953][T10862] 
[  903.831953][T10862] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  903.840608][T10862]        __lock_acquire+0x15a5/0x2cf0
[  903.846012][T10862]        lock_acquire+0x106/0x350
[  903.851269][T10862]        down_write+0x96/0x200
[  903.856088][T10862]        kernfs_unlink_sibling+0x71/0x180
[  903.861848][T10862]        kernfs_rename_ns+0x4a6/0x830
[  903.867401][T10862]        sysfs_rename_link_ns+0x16e/0x1b0
[  903.873448][T10862]        device_rename+0x110/0x210
[  903.878608][T10862]        __dev_change_net_namespace+0x15d3/0x20a0
[  903.885343][T10862]        cfg802154_switch_netns+0xbf/0x3d0
[  903.891193][T10862]        cfg802154_pernet_exit+0x75/0xe0
[  903.896960][T10862]        ops_undo_list+0x49f/0x940
[  903.902122][T10862]        cleanup_net+0x56b/0x800
[  903.907140][T10862]        process_scheduled_works+0xb5d/0x1860
[  903.913257][T10862]        worker_thread+0xa53/0xfc0
[  903.918417][T10862]        kthread+0x388/0x470
[  903.923036][T10862]        ret_from_fork+0x514/0xb70
[  903.928247][T10862]        ret_from_fork_asm+0x1a/0x30
[  903.933580][T10862] 
[  903.933580][T10862] other info that might help us debug this:
[  903.933580][T10862] 
[  903.943939][T10862] Chain exists of:
[  903.943939][T10862]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  903.943939][T10862] 
[  903.958778][T10862]  Possible unsafe locking scenario:
[  903.958778][T10862] 
[  903.966886][T10862]        CPU0                    CPU1
[  903.972386][T10862]        ----                    ----
[  903.977782][T10862]   lock(&root->kernfs_rwsem);
[  903.982686][T10862]                                lock(cpuhp_state_mutex);
[  903.990010][T10862]                                lock(&root->kernfs_rwsem);
[  903.997689][T10862]   lock(&root->kernfs_iattr_rwsem);
[  904.003032][T10862] 
[  904.003032][T10862]  *** DEADLOCK ***
[  904.003032][T10862] 
[  904.011295][T10862] 5 locks held by kworker/u8:16/10862:
[  904.016793][T10862]  #0: ffff88801be9e940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  904.027737][T10862]  #1: ffffc9001c3c7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  904.038377][T10862]  #2: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  904.047744][T10862]  #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0
[  904.057363][T10862]  #4: ffff88801be9d980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  904.067422][T10862] 
[  904.067422][T10862] stack backtrace:
[  904.073351][T10862] CPU: 0 UID: 0 PID: 10862 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) 
[  904.073375][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  904.073390][T10862] Workqueue: netns cleanup_net
[  904.073422][T10862] Call Trace:
[  904.073432][T10862]  <TASK>
[  904.073442][T10862]  dump_stack_lvl+0xe8/0x150
[  904.073471][T10862]  print_circular_bug+0x2e1/0x300
[  904.073502][T10862]  check_noncircular+0x12e/0x150
[  904.073533][T10862]  __lock_acquire+0x15a5/0x2cf0
[  904.073560][T10862]  ? __lock_acquire+0x6b5/0x2cf0
[  904.073585][T10862]  ? __lock_acquire+0x6b5/0x2cf0
[  904.073610][T10862]  ? kernfs_unlink_sibling+0x71/0x180
[  904.073627][T10862]  lock_acquire+0x106/0x350
[  904.073649][T10862]  ? kernfs_unlink_sibling+0x71/0x180
[  904.073672][T10862]  down_write+0x96/0x200
[  904.073699][T10862]  ? kernfs_unlink_sibling+0x71/0x180
[  904.073715][T10862]  ? __pfx_down_write+0x10/0x10
[  904.073738][T10862]  ? kernfs_root+0x1c/0x230
[  904.073761][T10862]  ? kernfs_root+0x1c/0x230
[  904.073783][T10862]  ? kernfs_root+0x1c/0x230
[  904.073806][T10862]  ? kernfs_root+0x1ea/0x230
[  904.073830][T10862]  kernfs_unlink_sibling+0x71/0x180
[  904.073849][T10862]  kernfs_rename_ns+0x4a6/0x830
[  904.073869][T10862]  sysfs_rename_link_ns+0x16e/0x1b0
[  904.073895][T10862]  device_rename+0x110/0x210
[  904.073921][T10862]  __dev_change_net_namespace+0x15d3/0x20a0
[  904.073950][T10862]  ? __pfx___dev_change_net_namespace+0x10/0x10
[  904.073977][T10862]  ? __lock_acquire+0x6b5/0x2cf0
[  904.074005][T10862]  ? __mutex_trylock_common+0x158/0x260
[  904.074160][T10862]  ? __pfx___mutex_trylock_common+0x10/0x10
[  904.074189][T10862]  ? rcu_is_watching+0x15/0xb0
[  904.074215][T10862]  ? trace_contention_end+0x3d/0x140
[  904.074232][T10862]  ? __mutex_lock+0x319/0x1550
[  904.074258][T10862]  ? do_raw_spin_unlock+0xf5/0x210
[  904.074278][T10862]  ? _raw_spin_unlock+0x28/0x50
[  904.074303][T10862]  ? __pfx___mutex_lock+0x10/0x10
[  904.074328][T10862]  ? __pfx_netdev_run_todo+0x10/0x10
[  904.074349][T10862]  cfg802154_switch_netns+0xbf/0x3d0
[  904.074380][T10862]  cfg802154_pernet_exit+0x75/0xe0
[  904.074409][T10862]  ops_undo_list+0x49f/0x940
[  904.074437][T10862]  ? __pfx_ops_undo_list+0x10/0x10
[  904.074462][T10862]  ? idr_destroy+0x218/0x290
[  904.074480][T10862]  ? do_raw_spin_unlock+0xf5/0x210
[  904.074500][T10862]  cleanup_net+0x56b/0x800
[  904.074525][T10862]  ? __pfx_cleanup_net+0x10/0x10
[  904.074552][T10862]  ? process_scheduled_works+0xa70/0x1860
[  904.074575][T10862]  ? process_scheduled_works+0xa70/0x1860
[  904.074600][T10862]  process_scheduled_works+0xb5d/0x1860
[  904.074637][T10862]  ? __pfx_process_scheduled_works+0x10/0x10
[  904.074664][T10862]  ? assign_work+0x3d5/0x5e0
[  904.074689][T10862]  worker_thread+0xa53/0xfc0
[  904.074725][T10862]  kthread+0x388/0x470
[  904.074742][T10862]  ? __pfx_worker_thread+0x10/0x10
[  904.074766][T10862]  ? __pfx_kthread+0x10/0x10
[  904.074783][T10862]  ret_from_fork+0x514/0xb70
[  904.074809][T10862]  ? __pfx_ret_from_fork+0x10/0x10
[  904.074833][T10862]  ? __switch_to+0xc79/0x1410
[  904.074856][T10862]  ? __pfx_kthread+0x10/0x10
[  904.074873][T10862]  ret_from_fork_asm+0x1a/0x30
[  904.074907][T10862]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  904.614619][T10862] hsr_slave_0: left promiscuous mode
[  904.646046][T10862] hsr_slave_1: left promiscuous mode
[  904.658066][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.682113][T10862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.737709][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  904.774756][T10862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  904.831437][T10862] veth1_macvtap: left promiscuous mode
[  904.837101][T10862] veth0_macvtap: left promiscuous mode
[  904.845781][T10862] veth1_vlan: left promiscuous mode
[  904.857578][T10862] veth0_vlan: left promiscuous mode
[  905.044609][T10862] team0 (unregistering): Port device 
2
6�� removed
[  905.065027][T10862] team0 (unregistering): Port device team_slave_0 removed
[  905.131545][T10862] team0 (unregistering): Port device dummy0 removed
[  905.746572][T10862] IPVS: stop unused estimator thread 0...
[  905.849099][T10862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.889000][T10862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.926830][T10862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.975653][T10862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.063009][T10862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.118097][T10862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.158438][T10862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.221133][T10862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.337386][T10862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.396735][T10862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.447068][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1
[  906.459627][T10862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.507279][T10862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.624120][T10862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.658117][T10862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.727380][T10862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.771956][T10862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.837968][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2
[  906.888605][T10862] bridge_slave_1: left allmulticast mode
[  906.898906][T10862] bridge_slave_1: left promiscuous mode
[  906.905081][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.915098][T10862] bridge_slave_0: left allmulticast mode
[  906.921064][T10862] bridge_slave_0: left promiscuous mode
[  906.926833][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.937935][T10862] bridge_slave_1: left allmulticast mode
[  906.944263][T10862] bridge_slave_1: left promiscuous mode
[  906.949964][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.958486][T10862] bridge_slave_0: left allmulticast mode
[  906.964343][T10862] bridge_slave_0: left promiscuous mode
[  906.970052][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.983808][T10862] bridge_slave_1: left allmulticast mode
[  906.990174][T10862] bridge_slave_1: left promiscuous mode
[  906.996004][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.005242][T10862] bridge_slave_0: left allmulticast mode
[  907.011196][T10862] bridge_slave_0: left promiscuous mode
[  907.017097][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.187507][T10862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.198761][T10862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.208761][T10862] bond0 (unregistering): Released all slaves
[  907.363390][T10862] bond2 (unregistering): (slave bridge2): Releasing active interface
[  907.454584][T10862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.465278][T10862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.476018][T10862] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  907.487459][T10862] bond0 (unregistering): Released all slaves
[  907.497575][T10862] bond1 (unregistering): Released all slaves
[  907.508901][T10862] bond2 (unregistering): Released all slaves
[  907.595261][T10862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.606652][T10862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.616818][T10862] bond0 (unregistering): Released all slaves
[  907.628096][T10862] bond1 (unregistering): Released all slaves
[  907.726544][T10862] bond0 (unregistering): Released all slaves
[  907.875074][T10862] tipc: Left network mode
[  908.148304][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3
[  908.407781][T10862] hsr_slave_0: left promiscuous mode
[  908.413938][T10862] hsr_slave_1: left promiscuous mode
[  908.419895][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.433216][T10862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.443152][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  908.451074][T10862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  908.471751][T10862] hsr_slave_0: left promiscuous mode
[  908.477725][T10862] hsr_slave_1: left promiscuous mode
[  908.487120][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.494869][T10862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.504319][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  908.511914][T10862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  908.530051][T10862] hsr_slave_0: left promiscuous mode
[  908.551139][T10862] hsr_slave_1: left promiscuous mode
[  908.557198][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.566245][T10862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  908.576300][T10862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  908.584086][T10862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  908.595348][T10862] hsr_slave_0: left promiscuous mode
[  908.602257][T10862] hsr_slave_1: left promiscuous mode
[  908.623017][T10862] veth1_macvtap: left promiscuous mode
[  908.629607][T10862] veth0_macvtap: left promiscuous mode
[  908.635676][T10862] veth1_vlan: left promiscuous mode
[  908.642404][T10862] veth0_vlan: left promiscuous mode
[  908.649239][T10862] veth1_macvtap: left promiscuous mode
[  908.655104][T10862] veth0_macvtap: left promiscuous mode
[  908.660977][T10862] veth1_vlan: left promiscuous mode
[  908.666291][T10862] veth0_vlan: left promiscuous mode
[  908.672583][T10862] veth1_macvtap: left promiscuous mode
[  908.678129][T10862] veth0_macvtap: left promiscuous mode
[  908.685678][T10862] veth1_vlan: left promiscuous mode
[  908.691087][T10862] veth0_vlan: left promiscuous mode
[  908.697106][T10862] veth1_macvtap: left promiscuous mode
[  908.702788][T10862] veth0_macvtap: left promiscuous mode
[  908.708343][T10862] veth1_vlan: left promiscuous mode
[  908.713739][T10862] veth0_vlan: left promiscuous mode
[  908.998099][T10862] team0 (unregistering): Port device team_slave_1 removed
[  909.010100][T10862] team0 (unregistering): Port device team_slave_0 removed
[  909.138545][T10862] team0 (unregistering): Port device team_slave_1 removed
[  909.177149][T10862] team0 (unregistering): Port device team_slave_0 removed
[  909.315492][T10862] team0 (unregistering): Port device team_slave_1 removed
[  909.327508][T10862] team0 (unregistering): Port device team_slave_0 removed
[  909.564289][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4
[  910.015218][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5
[  910.398104][ T5488] 8021q: adding VLAN 0 to HW filter on device eth6
[  910.540651][T10862] IPVS: stop unused estimator thread 0...
[  910.758680][ T5488] 8021q: adding VLAN 0 to HW filter on device eth7
[  911.038780][ T5488] 8021q: adding VLAN 0 to HW filter on device eth8
[  911.359422][ T5488] 8021q: adding VLAN 0 to HW filter on device eth9
[  911.643422][ T5488] 8021q: adding VLAN 0 to HW filter on device eth10
[  911.924389][ T5488] 8021q: adding VLAN 0 to HW filter on device eth11
[  912.199288][ T5488] 8021q: adding VLAN 0 to HW filter on device eth12
[  912.484209][ T5488] 8021q: adding VLAN 0 to HW filter on device eth13
[  912.760464][ T5488] 8021q: adding VLAN 0 to HW filter on device eth14