last executing test programs:

3m43.103657266s ago: executing program 1 (id=3702):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x2}, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a14000000090a010400000000000000000a0000045c000000080a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003800c000080080003400000000320000080100007800000010064757000040002800c0005400000000000000008140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x408c1}, 0x40) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'geneve1\x00', 0xc201}) (async)
r6 = socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) (async)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r8, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) (async)
bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async)
bind$tipc(r7, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r0, 0x2)
sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000d0a010800000000000000000500000136d2dd4d2decebe5dabbab18aa45eec1f0c6b94e3b6e62a7b01c56e754ddafcebec79ba5b53b2bf850dbd586660481eaea5e75e2ae4c7f48f8cd0d8805217c755ad2c7377e39612a2fc9fa"], 0x14}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601010000000000000068c32a8a1ff4402f02df3b7cf7c84500020000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800)

3m42.727572319s ago: executing program 1 (id=3706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0xff, 0x6}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}}, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080)
close(r2)

3m42.469711278s ago: executing program 1 (id=3712):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x68, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x400c001)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

3m42.141296951s ago: executing program 1 (id=3717):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m41.939914562s ago: executing program 1 (id=3721):
r0 = socket(0x1e, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
listen(r6, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) (async)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r10, r11, 0x4, r8}, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="0100030000000000000001000082987023b0578780816d0004000780"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="0100030000000000000001000082987023b0578780816d0004000780"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20)

3m40.846505208s ago: executing program 1 (id=3740):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000380)={'ip6gretap0\x00', @ifru_ivalue=0x3}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) (async)
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xa4, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x1)

3m25.722355211s ago: executing program 32 (id=3740):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000380)={'ip6gretap0\x00', @ifru_ivalue=0x3}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) (async)
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xa4, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x1)

9.141823441s ago: executing program 2 (id=5923):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101700"/24], &(0x7f0000000480)='GPL\x00'}, 0x90)

9.068959392s ago: executing program 2 (id=5924):
r0 = socket(0x2a, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004040) (async)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.004180293s ago: executing program 2 (id=5925):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'veth1_to_batadv\x00', &(0x7f0000000480)=@ethtool_channels={0x3c, 0x0, 0x6, 0x7, 0x2, 0x7, 0x2, 0x7, 0xfffffaf9}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
socket(0x2a, 0x2, 0x0) (async)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {0xfff3, 0x6}, {0xc, 0x8}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x54, 0xc, 0x3, 0x2, 0x2, 0x3, 0x2}}, {0x8, 0x2, [0x78f3, 0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0x6, 0xfffffffb, 0x0, 0x4, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x7ff, 0x7]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000081}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x50, r11, 0x8, 0x70bd2a, 0x0, {{}, {@void, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4841)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.919972489s ago: executing program 2 (id=5929):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44800)
write$cgroup_devices(r3, &(0x7f0000000300)={'c', ' *:* ', 'w\x00'}, 0x8)
syz_emit_ethernet(0x165, &(0x7f0000000380)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x1a, 0x4, 0x0, 0xc, 0x157, 0x66, 0x0, 0x1, 0x11, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0xb8, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0xc, [0x2, 0x3, 0x101, 0x2, 0x5, 0x8, 0x6]}, @generic={0x94, 0x9, "7393ec5fdee4e0"}, @lsrr={0x83, 0xb, 0xee, [@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x17, [@private=0xa010102, @multicast1]}]}}, {0x4e22, 0x4e21, 0xef, 0x0, @wg=@data={0x4, 0x8a, 0x23, "79768f62facbbe639c4c55be287a359fd08efd65818cd5a4c4407fa54f240216755b8da403707637db07edea6a3b4b62b1e1506f5edc475dd99ca8132ead0a9ef6a550fd762ff14a6de9fed470145dfc9159e6d3b8437c1241b761c255a90998459650b99cbdbc0ae6d759c374fe4738a41a2ef5762ba30b92f38af9a32bb3a21f1c2c269820b67263f7030a57b12699b22696548269dfdb3d1ac3fd6f3d8a1752ea82bda37eca2f1ad888c9f428ed55739b21cd73aab26e4d08743154adc441c996b14eb90bd42d4f266a8494f2ec4130cbe60d4881ad"}}}}}}, 0x0) (async)
syz_emit_ethernet(0x165, &(0x7f0000000380)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x1a, 0x4, 0x0, 0xc, 0x157, 0x66, 0x0, 0x1, 0x11, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0xb8, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0xc, [0x2, 0x3, 0x101, 0x2, 0x5, 0x8, 0x6]}, @generic={0x94, 0x9, "7393ec5fdee4e0"}, @lsrr={0x83, 0xb, 0xee, [@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x17, [@private=0xa010102, @multicast1]}]}}, {0x4e22, 0x4e21, 0xef, 0x0, @wg=@data={0x4, 0x8a, 0x23, "79768f62facbbe639c4c55be287a359fd08efd65818cd5a4c4407fa54f240216755b8da403707637db07edea6a3b4b62b1e1506f5edc475dd99ca8132ead0a9ef6a550fd762ff14a6de9fed470145dfc9159e6d3b8437c1241b761c255a90998459650b99cbdbc0ae6d759c374fe4738a41a2ef5762ba30b92f38af9a32bb3a21f1c2c269820b67263f7030a57b12699b22696548269dfdb3d1ac3fd6f3d8a1752ea82bda37eca2f1ad888c9f428ed55739b21cd73aab26e4d08743154adc441c996b14eb90bd42d4f266a8494f2ec4130cbe60d4881ad"}}}}}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x33}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x4, 0x1f, '\x00', [@generic={0xe, 0xf4, "1a29a23a530ca25f34ac850a910afb2318b8dcf3e4c45b33b6fa84489fa230a0d97cbed76c87be87a850196c026360dc2b5021a713a02b369eddba4d0a221e61592cf04cbc70d25065770595f64572b6b83ecac507a60c4e6caf476a207d628d131d8482e7b35a32e7bda4e86c79cbed96fc322080bf4849d58df05d76f83282d5f9b6fdd606c579730e077ce04cb09b4d64204e403e97505f6e8b048d3ce657c1af298edab8bc1cb040bf6c91e2cdcbb4e8c6ce69beba2e476235e6334aa0e5bda1b229e7c0f0f4db3552f44a62aa3b8a20a3cdefd595747468526de1eb2dd5105d05cced2815d1bff16ba297eaafa89b764c68"}, @pad1, @jumbo={0xc2, 0x4, 0xcd8}]}}}], 0x118}, 0x40000) (async)
sendmsg$inet6(r4, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x33}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x118, 0x29, 0x37, {0x4, 0x1f, '\x00', [@generic={0xe, 0xf4, "1a29a23a530ca25f34ac850a910afb2318b8dcf3e4c45b33b6fa84489fa230a0d97cbed76c87be87a850196c026360dc2b5021a713a02b369eddba4d0a221e61592cf04cbc70d25065770595f64572b6b83ecac507a60c4e6caf476a207d628d131d8482e7b35a32e7bda4e86c79cbed96fc322080bf4849d58df05d76f83282d5f9b6fdd606c579730e077ce04cb09b4d64204e403e97505f6e8b048d3ce657c1af298edab8bc1cb040bf6c91e2cdcbb4e8c6ce69beba2e476235e6334aa0e5bda1b229e7c0f0f4db3552f44a62aa3b8a20a3cdefd595747468526de1eb2dd5105d05cced2815d1bff16ba297eaafa89b764c68"}, @pad1, @jumbo={0xc2, 0x4, 0xcd8}]}}}], 0x118}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0)

3.865835677s ago: executing program 3 (id=5982):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x3, {0x2, 0x1, 0x4}, 0xfd}, 0x18)
setsockopt(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)="1a", 0x1)
r7 = socket(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="08009e00010000000a000600080211000001000048002d800a0000000202020202020000140000001f0f78fdda7734d6bde6c48891165ad30a00000002020202020200000a00000002020202020200004100000002020202020200000a00060008021100000000000800dc00010000002b8ec9666ca6535784eead3c074b277f696097b9e84b51e8d0cb5499b1b4ecb2b18997a2cc11545c6784ec15bfdaa080e4"], 0x8c}}, 0x400c000)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000017329f26d13c889f2272620f358f00520001000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e570606b6eaa92598253075578ccb4a29fb762d219d3947e9a4717b4008d5ad2c07e522f9f596c19ad64b1f848afffe4cb7a8ec4fecf780a819ccd2750ff510e81ce72992ba3fda1098a6246265b7c97064676ff28d89309fa5e6398136f6e0ae00c370d10f30fe0eac17aba1d344de8463a63dc9e96398f342ec23d41a791016b62625feb60d67b10628d7e730f4a7917f16a0d254007a5ec46c83950b092b3862316b388733fce39b8dbfcc69caa0a38b7d6c23e5751082df6ef4a08764105c7167f56795a6b6faf4c9f608ba922cbeed83811fca6c45015de31"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3.208291981s ago: executing program 3 (id=5985):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94)
socket$igmp(0x2, 0x3, 0x2) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)

3.199484544s ago: executing program 3 (id=5989):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="a5e47023c078000000070a010200000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004dc0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="a5e47023c078000000070a010200000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004dc0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0) (async)

3.197775359s ago: executing program 3 (id=5991):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'macvlan0\x00'})
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x100})
r2 = accept4(r1, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0x80, 0x0)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2)
getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x6)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000002c0)={0x10, 0x0, "5370f6eb26b5195995b527f770a65803"})
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000300)=0x1, 0x1)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000380)=@add_del={0x2, &(0x7f0000000340)='vxcan1\x00'})
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000003c0)={0x9, 0x400, 0xe7, 0x4}, 0x8)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000400)="c7ac84c8fd4a7222c592ffe6b34bcda5", 0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000440)={<r3=>0x0, 0x6, 0xfff}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000004c0)={r3, 0x2}, &(0x7f0000000500)=0x8)
r4 = gettid()
sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x110, 0x39, 0x400, 0x70bd27, 0x25dfdbfc, {0x1c}, [@typed={0x8, 0x134, 0x0, 0x0, @pid=r4}, @generic="fa53cadebca67b5261b071203620b7dd3bb0b28f4407666139c27b45885f5d14884baf0eccf597d2605e2ea40f242b4800089c9d406fa33a1ec65c0f0578402c5830994e10a1ce08dd1b9d962f1167564d3593b35553b11740a5d30dc1198d5014db1f1aa0aba1f578682a7fdbe6cd214ade228faad2cd66fab445d0238e7a582d38e75574bbc8e7927af7fafe09e19558e4d23a419327976a09d3e4c678b3a262f1098c1020aea1523dd7db0def20ac795c20d8ff4e151ac608cf850412987fc966436f3cb24b877ec799f2126d8d8d1555c12d0ba1558aa8f3297690087003e50f35c7392d3b466d4507d87de02cf48e"]}, 0x110}, 0x1, 0x0, 0x0, 0x4800}, 0x20000840)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000740)={r5, 0x68})
r6 = socket$inet6(0xa, 0x6, 0x40)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000780)=0x4, 0x4)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000007c0))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4005100)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000940)={0x7, [0xa6, 0x84, 0x401, 0xc000, 0x9, 0x8, 0x2]}, &(0x7f0000000980)=0x12)
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000009c0))
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000a00)=""/162, &(0x7f0000000ac0)=0xa2)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), r0)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x20008000)

2.962088867s ago: executing program 4 (id=5995):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x6c}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r8}, 0x20)
recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/110, 0x6e}], 0x1}, 0xfffffff7}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000001fc0)=""/102, 0x66}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000000a80)=""/225, 0xe1}, {&(0x7f0000000b80)=""/120, 0x78}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/35, 0x23}, {&(0x7f0000001e00)=""/47, 0x2f}, {&(0x7f0000001c80)=""/68, 0x44}], 0xa, &(0x7f0000001dc0)=""/52, 0x34}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=""/178, 0xb2}, 0x8001}], 0x3, 0x12123, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

2.928561372s ago: executing program 3 (id=5997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x8880)
bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)

2.791868157s ago: executing program 0 (id=5998):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

2.686059753s ago: executing program 3 (id=6000):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x50)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002cbd7000f9dbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000000900020001000000000000000800410072786500140033006970766c616e300000000000000000008b969da831adfd"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810)

2.603725359s ago: executing program 0 (id=6001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x46, 0x5, "b3e4931149b118e8b97e4f4a8839bb1386a79adb210fe986a50668d40cfed06b2f01a37d8adaf366c2b80882d51383a578bbe6c4cba163d78918ecebe4913d68c7e9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf661}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x14}, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', <r3=>0x0, 0x8000, 0x8, 0xd, 0x8da, {{0x13, 0x4, 0x0, 0x3c, 0x4c, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, {[@ssrr={0x89, 0x27, 0xf5, [@broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @empty, @private=0xa010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x11, 0x11, "bed9a2e391ec05afbd604ae171e25c"}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'nicvf0\x00', <r4=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', <r6=>0x0, 0x4, 0x4, 0x43, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x1, 0xa}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x6, 0x6, 0x8, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x700, 0x80000000, 0xc3e9}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x128, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x4050001)
close(r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000)
r8 = socket$inet6(0xa, 0xa, 0x8)
ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000880)={@private1, @private2, @empty, 0x2, 0x2, 0x9, 0x400, 0x0, 0x1000190, r6})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x41000003}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0xffffd6cf, 0x1000}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48000)
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_netdev_private(r10, 0x89fd, &(0x7f0000000a40)="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")
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000001ac0)={'tunl0\x00', &(0x7f0000001a40)={'erspan0\x00', r2, 0x40, 0x8, 0xe000000, 0x5, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x67, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp_prespec={0x44, 0x2c, 0x4f, 0x3, 0x1, [{@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x49}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x40}]}, @rr={0x7, 0xf, 0x5a, [@broadcast, @multicast1, @rand_addr=0x64010101]}, @noop, @ra={0x94, 0x4}]}}}}})
sendto(r11, &(0x7f0000001b00)="db6558ba8f3c0290b14325f8bffd287978594679ac342676c8a1824a9c7f63186c9f2b2798155c4b0787e04edf15ca810a2a5481cfbd82b7b611c9ae8ec791d715a49919cf448e2b7e07f796baa2d74b18f10cab784e99501595a8556f", 0x5d, 0x40000, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x5)
r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r13, 0x0, 0x3, &(0x7f0000001d00), &(0x7f0000001d40)=0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001fc0)={{<r14=>0xffffffffffffffff, &(0x7f0000001dc0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20000, &(0x7f0000001e00)={@align=0x5, {0x4, 0x5, 0x5, 0x1}}, 0x699, &(0x7f0000001e40)={@_ha_fsid}, &(0x7f0000001e80)=0x5}, 0x1, &(0x7f0000001f80)=[{0x3, 0xffffffff, &(0x7f0000001ec0)='\x00', &(0x7f0000001f00)="9d513b754d8107592a07a662b7bc46741ba1fc0e677865328b26c83489b4422e475100b038c718a2fbef746a09f602d6ed08557b18ae96201ea70799220a93c45cbcabe8b9f9efaacf4dfe836a3b1257dad1ec98326550d9909acaf1070fac7d510db3903337ba56", 0x68, 0x28}]})
sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000002300)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002080)={0x21c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x9, 0x81}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x453}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xad}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x179}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xec96}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4040)
setsockopt$ax25_SO_BINDTODEVICE(r14, 0x101, 0x19, &(0x7f0000002340)=@netrom={'nr', 0x0}, 0x10)

2.33290619s ago: executing program 4 (id=6003):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10)
shutdown(r1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'bond_slave_0\x00', &(0x7f0000000280)=@ethtool_gstrings})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
r4 = socket(0x400000000010, 0x6, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = socket(0x2000000015, 0x80005, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x4}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, 0x8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.944623164s ago: executing program 0 (id=6005):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x24}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) (async, rerun: 32)
r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async)
unshare(0x62000000) (async)
r6 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r6, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) (async)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x24, r5, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}}, 0x4040010)

1.838239379s ago: executing program 5 (id=6006):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x38, {0x2, 0x0, @rand_addr=0x64010101}, 'veth0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0)

1.824806982s ago: executing program 4 (id=6007):
r0 = epoll_create1(0x0)
epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

1.639276374s ago: executing program 4 (id=6008):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000069c0)={0x2, {{0xa, 0x4e21, 0x1, @mcast2, 0x1000}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x4, @private1, 0xffffffff}}]}, 0x110)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c000780080013400000040e0500010006000008050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)

1.503097489s ago: executing program 4 (id=6009):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
syz_genetlink_get_family_id$ethtool(0x0, r4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, 0x0, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='rose0\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40600}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdb0013000100000005001300030000000500130007000000080014000e000000050013006a00000005001500520000000800140014000000050015002f00"/78], 0x54}, 0x1, 0x0, 0x0, 0x44040880}, 0x8010)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000})

1.400115079s ago: executing program 5 (id=6010):
socketpair(0x18, 0x1, 0x6, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0))
getpeername$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@remote, @remote, @remote, @netrom, @bcast, @remote, @null, @rose]}, &(0x7f0000000240)=0x48)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000300)={0xed, 0xb978, 0x3, 0x8}, 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={<r3=>0x0, 0x8, 0x5, [0x1, 0x3, 0x5f, 0xffff, 0x5d7b]}, &(0x7f0000000380)=0x12)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x100, 0xc0, 0x8, 0x1000000, 0x91, 0x6b, 0x4}, &(0x7f0000000480)=0x9c)
ioctl$int_in(r2, 0x5452, &(0x7f00000004c0)=0x42e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0)
sendto$rose(r0, &(0x7f0000000540)="a1eae19670398bc13b122761bde7df204ad57d8cfcafe76fdfae30e243bc600dc1bbd11558f1e6e967d2ce4e1ac6318aae4707f472596da2af89363f296fca57323a76ef6e6bd6773e5ab6e5ec030f2f6cad2c52ca9640109d0fc9f436f71fcfb830ed3f848e51cff826d96706cfe7ec192f83538f02b4f5d1e735f229a9dc747c271dd2bcd2749d75729694e6fc55c70e53d2517f95cbdfa641f6f93303bc518cf02a47ff5d99ba7e5cbaf1", 0xac, 0x20000005, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff01}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={r3, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x7, 0x10, 0x5, 0xe156, 0x18, 0xcda6e2d8, 0x9}, 0x9c)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'gre0\x00', <r7=>0x0, 0x7800, 0x80, 0x5, 0x7, {{0x16, 0x4, 0x2, 0xe, 0x58, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xbd, 0x1, 0xc, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0xeaa00000}, {@empty, 0xfffff000}, {@multicast2, 0x7}]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x2e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}]}}}}})
getsockname$packet(r0, &(0x7f0000000940)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14)
getpeername$packet(r0, &(0x7f00000009c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000a40)=<r10=>0x0, &(0x7f0000000a80)=0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xdc, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000011)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00'})
getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000d40))
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000d80)=0xd1, &(0x7f0000000dc0)=0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000e00)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x0, 0x80, 0x400, 0x2, "1529525b23d9ffe3ca721865d6b6dfe70f9fe551d532ec4404625df4db08dda08ffafe1ff900b7982beaffa7541bab15df3c179205b028d55ed8ec56c74685ffc3536775eb4b1eb5ace743d43f88c64c6f601be0206376e9ca89fac6fc5104d9714bb5ab04a15aa8df33978b10df9998298d7aa839709b878439f3f59a60504e"})

1.183474848s ago: executing program 0 (id=6011):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.085892372s ago: executing program 5 (id=6012):
r0 = socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0}, 0x40c0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x8001)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

946.309866ms ago: executing program 5 (id=6013):
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB="2223a13149", @ANYRES64=0x0], 0xa) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@gettaction={0x90, 0x32, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x90}}, 0x20040084)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0xa4, 0x2, 0xf, 0x0, 0xfe, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x1, 0x5, 0x106, 0x9, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) (async)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

765.41256ms ago: executing program 0 (id=6014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02001277b3080000000000000087000400000008", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800002c000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

495.316864ms ago: executing program 0 (id=6015):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}, 0x40080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}, 0x40080) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) (async)

486.976456ms ago: executing program 5 (id=6016):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48002100100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0335000000000000140003006e657464657673696d3000000000000014001680100001800c000300f4c8000077000000"], 0x48}}, 0x24040800)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48002100100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0335000000000000140003006e657464657673696d3000000000000014001680100001800c000300f4c8000077000000"], 0x48}}, 0x24040800) (async)

351.264831ms ago: executing program 5 (id=6017):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x7}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

298.828367ms ago: executing program 2 (id=5932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x6}, 0x94)
r1 = accept(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000040)=0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x6, @vifc_lcl_addr=@empty, @local}, 0x10)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r8, &(0x7f0000000500)={0x2a, 0x1}, 0xc)
connect$qrtr(r8, &(0x7f0000000280)={0x2a, 0x2, 0x8000}, 0xc)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x440, 0x13, 0x200, 0x70bd27, 0x25dfdbfd, {0x26, 0x3, 0x10, 0x56, {0x4e23, 0x4e20, [0x6, 0x3, 0x40, 0x8], [0x2, 0x31b, 0x1, 0x9], r7, [0x1, 0x2]}, 0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "58d8c2d5874a5174df7a16c138660c4c88d0095d5bc43871baad2f40da8d6c57a697c70c5ad9164b4900d1a2a1debef06fb5a1546f183bb52ba54def6324ae4219101582ea1a6f69f2daaad55948b2c5e9c950fe4850b7713038e952085c84dc5eee44810947a29b1672492c66f24c28520e0b7ad4cdc5860d61ff0015548c54dffb7438d21ed289930c0117d561ac0b9b7a7948e489a613585dd53aefd895941ca122bf8d292172c00c7a6152f02be221c994df3540237a6eccc98d1306f88720df61f5de4696f65f1cc3cadd1ae22e86d008743e850c617ffa0cb230fa356dc80e9cfdb09bd89fcc03dce4fe"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "c1ad497250a5ef052dd6ec640c02eed838fc5f046f75b304049f73bc16bcadd587eed33546ed2d60e828ddebd3035ec814d8da42b8249fc7100f6a954b7b0e3d3969a7e4963c8cde0cc749e3b385217c8b6127e216c232e1672d9420eb0482b02496cafbf6072b2ea4a0aa216721132b0c0be780872960ba97b0172a0a44906ee71f8dfca07835521576946edc64c8bac754de9b6234e319fb6d3b92bfe99dc989106fc9dc4313aa038d43cd57174405b584bafcc90c640ff54a62e70323ed56f3f25337ab0ffd0a"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "60e773d99d256e8ef95639b7b301a615eea971ce02977f14114bdf288f06fd02e249559562a387a088346c005746b9c22adab9b86b673f7651610dce050c60473e450d0013cdd4dd4d014d0cbc2ae361b050c3abefa1964a87b1ca85966573e659cd5f98c4714b238da2ae2aeff1ef9a55da919876da463005045a61c90669ab5eca2ac126d59bc68773c83804342aebeda3acb7961e15eb80c6fd972b8278c3c658386fe73edb701eed660aadf6aa382b7187d044583a3558a094241d6ed1a10c9c"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "49d8f3f33585dd91061c2adf9093c60882d27d201c7dabd0ff20b3a47fd8bbb7eee8034b3f08b72068424e053b2b2d02f6b71751cf3e46f2686f603a95ef4e1d582971ba6a1ce5e9cddabb419e2432cf8efa6b8d4307e0a289267c90a18b2a8b15292140d49aa1777c2b2ddf3c76fbe475c2244495ec625be5e967e3dade274cf1b2b4fdf9e82e2adb1d7a4d248e3ba0a7db155305434ac3c2a62f0a41e501b3"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "ec43efce0ce5a526f0453040d2a95f5db9fe36538b2c7015a7490cea0281c7476f87731f777433777b8accb549b49c103618c425a00cbc0594c8ef85657054423f26994e470ba42d2c09d1061644f681fa090040496113fc7ddafd68b0ffb969eadfdf450670a6cc14d27f55a03dd7e80bff0e927d52c2a656f8eae900114007822e8024b67da076e0e7e59289ad6da72aca4b744d3585c3548dbc8e682e7cd983d661508eed373567836f6da006294680ada4942f9adc015815e88967a62002f17e6b13"}]}, 0x440}, 0x1, 0x0, 0x0, 0x4081}, 0x1)

27.692854ms ago: executing program 4 (id=6018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x7c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "04e01d2f04881a35dc556c4fecac9cd38f75b113dab2f228767a90f912e92c9a787e18e202830ac7f032ae3254c72433e0f2ad3ab0d01f6995fc6e60cf"}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

0s ago: executing program 2 (id=6019):
r0 = socket$kcm(0xa, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) (async)
shutdown(0xffffffffffffffff, 0x0)
r4 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12) (async)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcec}, 0x40811)

kernel console output (not intermixed with test programs):

t device team_slave_1 removed
[  437.858896][T20800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.871214][T20800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.880190][T20800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.888044][T20800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.896919][T20800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  438.063464][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4015'.
[  438.076143][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'.
[  438.110427][T20822] vxcan4: entered allmulticast mode
[  438.115903][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4014'.
[  438.155373][T20828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4015'.
[  438.196445][T20738] chnl_net:caif_netlink_parms(): no params data found
[  438.196638][T20829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4016'.
[  438.214078][T20831] netlink: 'syz.4.4017': attribute type 1 has an invalid length.
[  438.230290][T20831] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4017'.
[  438.260172][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4017'.
[  438.366230][T20836] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4018'.
[  438.372465][T20738] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.383973][T20738] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.392996][T20738] bridge_slave_0: entered allmulticast mode
[  438.401104][T20738] bridge_slave_0: entered promiscuous mode
[  438.410582][T20738] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.417880][T20738] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.426015][T20738] bridge_slave_1: entered allmulticast mode
[  438.435096][T20738] bridge_slave_1: entered promiscuous mode
[  438.617299][T20738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.662878][ T5141] Bluetooth: hci1: command tx timeout
[  438.668915][T20738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.722493][T20738] team0: Port device team_slave_0 added
[  438.732427][T20738] team0: Port device team_slave_1 added
[  438.840733][T20738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.859839][T20738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.887954][T20738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.986942][T20738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.995920][T20738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.025907][T20738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.373671][T20738] hsr_slave_0: entered promiscuous mode
[  439.382878][T20738] hsr_slave_1: entered promiscuous mode
[  439.391624][T20738] debugfs: 'hsr0' already exists in 'hsr'
[  439.411241][T20738] Cannot create hsr debugfs directory
[  440.190429][ T1299] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  440.192840][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  440.207464][    C0] lec:lec_tx_timeout: lec0
[  440.213149][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  440.327027][T20919] IPv6: NLM_F_CREATE should be specified when creating new route
[  440.517559][ T8136] bond8 (unregistering): (slave ip6gretap1): Releasing active interface
[  440.711834][ T8136] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  440.720085][ T8136] bridge1 (unregistering): left promiscuous mode
[  440.742291][ T5141] Bluetooth: hci1: command tx timeout
[  440.988342][ T8136] bond0 (unregistering): Released all slaves
[  440.999643][ T8136] bond1 (unregistering): Released all slaves
[  441.014689][ T8136] bond2 (unregistering): (slave veth3): Releasing active interface
[  441.024508][ T8136] bond2 (unregistering): Released all slaves
[  441.038662][ T8136] bond3 (unregistering): Released all slaves
[  441.054302][ T8136] bond4 (unregistering): Released all slaves
[  441.088268][ T8136] bond5 (unregistering): Released all slaves
[  441.102907][ T8136] bond6 (unregistering): Released all slaves
[  441.117291][ T8136] bond7 (unregistering): Released all slaves
[  441.130495][ T8136] bond8 (unregistering): Released all slaves
[  441.154736][ T8136] bond9 (unregistering): Released all slaves
[  441.212084][T20928] netlink: 'syz.2.4041': attribute type 1 has an invalid length.
[  441.219877][T20928] netlink: 'syz.2.4041': attribute type 2 has an invalid length.
[  441.265928][T20927] netlink: 'syz.2.4041': attribute type 1 has an invalid length.
[  441.284653][T20927] netlink: 'syz.2.4041': attribute type 2 has an invalid length.
[  441.359890][ T8136] tipc: Disabling bearer <udp:s>
[  441.380845][ T8136] tipc: Left network mode
[  441.446854][T20738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  441.538555][T20738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  441.576442][T20944] block nbd3: not configured, cannot reconfigure
[  441.618635][T20951] netlink: 'syz.2.4051': attribute type 1 has an invalid length.
[  441.629020][T20738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  441.637815][T20951] netlink: 'syz.2.4051': attribute type 1 has an invalid length.
[  441.670335][T20738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  441.778935][T20955] x_tables: unsorted underflow at hook 1
[  442.028683][T20975] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  442.094914][T20971] Bluetooth: MGMT ver 1.23
[  442.228157][T20982] netlink: 'syz.4.4062': attribute type 1 has an invalid length.
[  442.327975][T20738] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.446175][T20738] 8021q: adding VLAN 0 to HW filter on device team0
[  442.480526][T20994] xt_ecn: cannot match TCP bits for non-tcp packets
[  442.544302][T20990] ip6_vti0 speed is unknown, defaulting to 1000
[  442.555597][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.562996][ T8133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.687627][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.695010][ T8133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.829071][ T5141] Bluetooth: hci1: command tx timeout
[  443.607885][T20990] lo speed is unknown, defaulting to 1000
[  443.620448][T20738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.013193][T21061] __nla_validate_parse: 10 callbacks suppressed
[  444.013213][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4082'.
[  444.136754][ T8136] hsr_slave_0: left promiscuous mode
[  444.143907][ T8136] hsr_slave_1: left promiscuous mode
[  444.150153][ T8136] batman_adv: batadv0: Interface deactivated: ipvlan1
[  444.159139][ T8136] batman_adv: batadv0: Removing interface: ipvlan1
[  444.183833][ T8136] veth1_macvtap: left promiscuous mode
[  444.189613][ T8136] veth1_vlan: left promiscuous mode
[  444.191032][T21070] netlink: 'syz.0.4084': attribute type 1 has an invalid length.
[  444.199661][ T8136] veth0_vlan: left promiscuous mode
[  444.205206][T21070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4084'.
[  444.337435][ T8136] team0 (unregistering): Port device batadv1 removed
[  444.375027][ T8136] pimreg3 (unregistering): left allmulticast mode
[  444.399404][ T8136] pimreg (unregistering): left allmulticast mode
[  444.473303][T21079] IPVS: length: 172 != 24
[  445.222097][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  445.230230][    C0] lec:lec_tx_timeout: lec0
[  445.292520][T21095] syzkaller0: entered promiscuous mode
[  445.298539][T21095] syzkaller0: entered allmulticast mode
[  445.379989][T21102] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  445.490016][T21106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4089'.
[  445.632799][T21110] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.4090'.
[  445.694560][T20738] veth0_vlan: entered promiscuous mode
[  445.764516][T20738] veth1_vlan: entered promiscuous mode
[  445.815202][T21113] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  446.007305][T20738] veth0_macvtap: entered promiscuous mode
[  446.051644][T20738] veth1_macvtap: entered promiscuous mode
[  446.080156][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'.
[  446.100596][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4095'.
[  446.116333][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'.
[  446.128775][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4095'.
[  446.370702][T20738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.403085][T21144] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  446.497783][T20738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.549499][ T8136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.708928][ T8136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.720013][T21162] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4099'.
[  446.741339][ T8136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.829622][ T8136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.153462][ T8141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.203713][ T8141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.339091][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.368455][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.583859][T21202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4105'.
[  447.960270][T21224] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  448.185574][T21227] syzkaller0: entered promiscuous mode
[  448.191278][T21227] syzkaller0: entered allmulticast mode
[  450.998462][T21229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  451.048946][T21292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.441403][T21331] netlink: 'syz.4.4126': attribute type 1 has an invalid length.
[  451.554192][T21338] bond4: entered promiscuous mode
[  451.559382][T21338] bond4: entered allmulticast mode
[  451.565495][T21338] 8021q: adding VLAN 0 to HW filter on device bond4
[  451.612416][T21341] syz_tun: entered promiscuous mode
[  451.680135][T21341] syz_tun: entered allmulticast mode
[  451.687400][T21341] bond4: (slave syz_tun): Enslaving as an active interface with an up link
[  451.718705][T21343] tipc: New replicast peer: 255.255.255.255
[  451.755021][T21343] tipc: Enabled bearer <udp:syz2>, priority 10
[  452.049277][T21366] netlink: 'syz.3.4133': attribute type 1 has an invalid length.
[  452.068799][T21366] __nla_validate_parse: 2 callbacks suppressed
[  452.068817][T21366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4133'.
[  454.215462][  T981] tipc: Node number set to 4269801492
[  454.506771][T21417] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4140'.
[  454.580448][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4143'.
[  454.596928][T21421] netlink: 'syz.4.4142': attribute type 1 has an invalid length.
[  454.781822][T21430] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4145'.
[  455.018801][T21435] vlan2: entered promiscuous mode
[  455.025083][T21435] vlan2: entered allmulticast mode
[  455.030241][T21435] hsr_slave_1: entered allmulticast mode
[  455.048828][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4147'.
[  455.175434][T21442] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  455.215635][T21446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4151'.
[  455.886699][T21485] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4161'.
[  456.088612][T21500] netlink: 'syz.5.4164': attribute type 1 has an invalid length.
[  456.105121][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4164'.
[  456.121483][T21498] syzkaller0: entered promiscuous mode
[  456.127403][T21498] syzkaller0: entered allmulticast mode
[  456.141672][T21491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4163'.
[  456.182527][T21491] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4163'.
[  456.525883][T21522] netlink: 'syz.4.4174': attribute type 25 has an invalid length.
[  456.700500][T21531] netlink: 'syz.4.4176': attribute type 11 has an invalid length.
[  457.435875][T21572] __nla_validate_parse: 6 callbacks suppressed
[  457.435896][T21572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4190'.
[  457.488769][T21572] vcan1: entered promiscuous mode
[  457.509532][T21572] vcan1: entered allmulticast mode
[  457.666651][T21587] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4197'.
[  457.679239][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4196'.
[  457.819234][T21596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4198'.
[  457.834606][T21592] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  457.844008][T21592] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  458.062631][T21609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  458.137269][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'.
[  458.257404][T20890] udevd[20890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  458.457226][T21626] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4210'.
[  458.493625][T21623] sctp: [Deprecated]: syz.4.4209 (pid 21623) Use of int in maxseg socket option.
[  458.493625][T21623] Use struct sctp_assoc_value instead
[  458.515561][T21630] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4211'.
[  458.543610][T21631] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4211'.
[  458.720067][T21635] batadv1: entered allmulticast mode
[  458.775203][T21639] netlink: 'syz.0.4214': attribute type 5 has an invalid length.
[  458.936803][T21645] netlink: 'syz.2.4218': attribute type 2 has an invalid length.
[  459.201011][T21672] netlink: 'syz.5.4223': attribute type 3 has an invalid length.
[  459.249115][T21672] netlink: 'syz.5.4223': attribute type 3 has an invalid length.
[  459.426851][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'.
[  459.448097][T21686] xt_CT: You must specify a L4 protocol and not use inversions on it
[  459.672879][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4231'.
[  459.693087][ T3002] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.705823][ T3002] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.715719][ T3002] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.752040][ T3002] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  460.148700][T21701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  460.363782][T21744] netlink: 'syz.4.4242': attribute type 4 has an invalid length.
[  460.426644][T21751] netlink: 'syz.3.4245': attribute type 39 has an invalid length.
[  460.741808][T21771] !
: renamed from dummy0
[  460.827773][T21781] netlink: 'syz.0.4253': attribute type 16 has an invalid length.
[  460.872369][T21781] netlink: 'syz.0.4253': attribute type 17 has an invalid length.
[  460.928300][T21781] erspan0: left allmulticast mode
[  460.973241][T21781] sit0: left promiscuous mode
[  461.178534][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.236719][T21781] netlink: 'syz.0.4253': attribute type 16 has an invalid length.
[  461.237718][ T5969] lo speed is unknown, defaulting to 1000
[  461.294792][ T5969] syz0: Port: 1 Link ACTIVE
[  461.343563][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.410635][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.438957][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.514253][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.550788][T21781] validate_nla: 7 callbacks suppressed
[  461.550807][T21781] netlink: 'syz.0.4253': attribute type 16 has an invalid length.
[  461.597438][T21781] netlink: 'syz.0.4253': attribute type 17 has an invalid length.
[  461.653691][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.700594][T21826] xt_ecn: cannot match TCP bits for non-tcp packets
[  461.964815][T21840] netlink: 'syz.4.4271': attribute type 1 has an invalid length.
[  461.994722][T21841] netlink: 'syz.4.4271': attribute type 1 has an invalid length.
[  462.020601][T21841] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  462.027042][T21840] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  462.171050][T21861] xt_CT: You must specify a L4 protocol and not use inversions on it
[  464.503144][ T8141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  464.859006][T21834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  464.983413][T13403] lec:lec_start_xmit: lec0:No lecd attached
[  470.022165][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms
[  470.030213][    C0] lec:lec_tx_timeout: lec0
[  492.735664][T21874] __nla_validate_parse: 8 callbacks suppressed
[  492.735685][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4279'.
[  493.101475][T21893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  493.481689][T21916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4298'.
[  494.861598][T21990] xt_hashlimit: size too large, truncated to 1048576
[  495.794993][T22035] xt_hashlimit: size too large, truncated to 1048576
[  496.507567][ T8136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  496.812777][T22085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4366'.
[  496.983540][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4367'.
[  496.992799][T22096] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4367'.
[  497.006704][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4367'.
[  499.311189][T22149] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  499.661954][T22174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4386'.
[  499.717217][T22165] siw: device registration error -23
[  499.837801][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4393'.
[  499.879365][T22182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4393'.
[  500.008909][T22187] can: request_module (can-proto-0) failed.
[  500.037928][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'.
[  500.097379][T22187] netlink: 'syz.4.4395': attribute type 1 has an invalid length.
[  500.142466][T22200] ip6_vti0 speed is unknown, defaulting to 1000
[  500.144473][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'.
[  500.201492][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'.
[  500.211962][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4396'.
[  500.249131][T22205] netlink: 'syz.0.4396': attribute type 15 has an invalid length.
[  500.284131][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'.
[  500.305138][T22208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4399'.
[  500.318693][ T3011] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  500.337187][ T3011] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  500.423682][ T3011] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  500.433430][ T3011] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  500.737346][T22200] lo speed is unknown, defaulting to 1000
[  500.779652][T22231] vlan4: entered promiscuous mode
[  500.787758][T22231] geneve1: entered promiscuous mode
[  500.798653][T22231] vlan4: entered allmulticast mode
[  500.809860][T22231] geneve1: entered allmulticast mode
[  501.161089][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4410'.
[  501.234717][T22258] vlan3: entered allmulticast mode
[  501.240214][T22258] hsr0: entered allmulticast mode
[  501.274905][T22258] hsr_slave_0: entered allmulticast mode
[  501.280727][T22258] hsr_slave_1: entered allmulticast mode
[  501.630618][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  502.397884][T22322] netlink: 'syz.5.4427': attribute type 1 has an invalid length.
[  502.403777][T22325] xt_l2tp: v2 doesn't support IP mode
[  502.447637][T22321] syzkaller0: entered promiscuous mode
[  502.454813][T22321] syzkaller0: entered allmulticast mode
[  504.333243][T22344] veth1: entered allmulticast mode
[  504.623345][T22358] bond4: entered promiscuous mode
[  504.684862][T22362] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  504.711821][T22362] lo: entered promiscuous mode
[  504.718927][T22362] bond4: (slave lo): Enslaving as an active interface with an up link
[  504.735716][T22362] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  504.775354][T22372] __nla_validate_parse: 6 callbacks suppressed
[  504.775373][T22372] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4440'.
[  504.877797][T22380] xt_time: invalid argument - start or stop time greater than 23:59:59
[  505.111170][T22397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4451'.
[  505.122932][T22397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4451'.
[  505.257887][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4454'.
[  505.583350][T22428] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4462'.
[  505.886231][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4465'.
[  505.903991][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4465'.
[  506.020372][T22458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4469'.
[  506.031254][T22464] netlink: 'syz.4.4472': attribute type 21 has an invalid length.
[  506.049385][T22464] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4472'.
[  506.060084][T22458] unsupported nlmsg_type 40
[  506.121248][T22467] bond5: (slave bond_slave_1): Device is not bonding slave
[  506.129398][T22467] bond5: option active_slave: invalid value (bond_slave_1)
[  506.150500][T22467] bond5 (unregistering): Released all slaves
[  506.158178][T22464] netlink: 'syz.4.4472': attribute type 1 has an invalid length.
[  506.187912][T22464] netlink: 'syz.4.4472': attribute type 2 has an invalid length.
[  506.234274][T22464] netlink: zone id is out of range
[  506.242112][T22464] netlink: zone id is out of range
[  506.247663][T22464] netlink: zone id is out of range
[  506.286849][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4475'.
[  506.296709][T22464] netlink: zone id is out of range
[  506.327098][T22464] netlink: zone id is out of range
[  506.332679][T22464] netlink: zone id is out of range
[  506.349351][T22464] netlink: zone id is out of range
[  506.358694][T22464] netlink: zone id is out of range
[  506.372121][T22464] netlink: zone id is out of range
[  506.502838][T22483] geneve3: entered promiscuous mode
[  506.518351][T22483] geneve3: entered allmulticast mode
[  506.593823][T22488] bond5 (unregistering): Released all slaves
[  506.604832][T22491] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  506.669036][ T3002] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  506.713868][ T8141] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  506.749265][ T8141] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  506.771073][ T8141] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  506.826304][T22501] netlink: 'syz.4.4484': attribute type 2 has an invalid length.
[  507.062222][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[  507.070353][    C0] lec:lec_tx_timeout: lec0
[  508.779118][T22620] netlink: 'syz.4.4515': attribute type 1 has an invalid length.
[  508.898491][T22625] veth0: entered promiscuous mode
[  508.906543][T22625] syzkaller0: entered promiscuous mode
[  508.913457][T22625] syzkaller0: entered allmulticast mode
[  508.961000][T22623] veth0: left promiscuous mode
[  509.211149][T22644] netlink: 'syz.3.4524': attribute type 1 has an invalid length.
[  509.339374][T22655] netlink: 'syz.0.4526': attribute type 4 has an invalid length.
[  509.365557][T22644] bond3: entered promiscuous mode
[  509.371315][T22644] 8021q: adding VLAN 0 to HW filter on device bond3
[  509.871627][T22681] atomic_op ffff888078f87998 conn xmit_atomic 0000000000000000
[  510.611491][T22707] __nla_validate_parse: 14 callbacks suppressed
[  510.611514][T22707] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4539'.
[  510.635869][T22708] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.4538'.
[  510.786867][T22712] netlink: 'syz.5.4538': attribute type 10 has an invalid length.
[  510.918266][T22712] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  511.263844][T22728] sctp: [Deprecated]: syz.3.4546 (pid 22728) Use of int in max_burst socket option deprecated.
[  511.263844][T22728] Use struct sctp_assoc_value instead
[  511.880953][T22747] syzkaller0: entered promiscuous mode
[  511.886793][T22747] syzkaller0: entered allmulticast mode
[  511.942106][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4555'.
[  511.954103][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'.
[  511.984110][T22758] netlink: 'syz.3.4555': attribute type 64 has an invalid length.
[  513.995958][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4565'.
[  514.009367][T22795] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4564'.
[  514.019322][T22796] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4564'.
[  514.042193][T22795] netlink: 'syz.3.4564': attribute type 4 has an invalid length.
[  514.195867][T22807] sit1: entered promiscuous mode
[  514.231395][T22807] sit1: entered allmulticast mode
[  514.288970][T22819] syzkaller1: entered promiscuous mode
[  514.295579][T22819] syzkaller1: entered allmulticast mode
[  514.441112][T22829] siw: device registration error -23
[  514.585199][T22840] netlink: 'syz.2.4577': attribute type 4 has an invalid length.
[  514.596354][T22838] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  514.607559][T22840] netlink: 193176 bytes leftover after parsing attributes in process `syz.2.4577'.
[  514.857217][T22848] netlink: 'syz.4.4580': attribute type 9 has an invalid length.
[  515.079071][T22871] netlink: 'syz.4.4588': attribute type 1 has an invalid length.
[  515.166896][T22871] netlink: 896 bytes leftover after parsing attributes in process `syz.4.4588'.
[  515.191733][T22871] netlink: 1224 bytes leftover after parsing attributes in process `syz.4.4588'.
[  515.232920][T22882] x_tables: duplicate underflow at hook 1
[  515.286603][T22880] syzkaller0: entered promiscuous mode
[  515.309127][T22880] syzkaller0: entered allmulticast mode
[  515.344433][T22880] tipc: Started in network mode
[  515.349373][T22880] tipc: Node identity 66385f62e791, cluster identity 4711
[  515.383562][T22880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.421457][T22877] tipc: Resetting bearer <eth:syzkaller0>
[  515.491571][T22877] tipc: Disabling bearer <eth:syzkaller0>
[  515.698604][T22911] netlink: 'syz.0.4600': attribute type 4 has an invalid length.
[  515.745931][  T923] lo speed is unknown, defaulting to 1000
[  515.772451][  T923] syz0: Port: 1 Link DOWN
[  515.893651][T22924] block nbd4: not configured, cannot reconfigure
[  516.081333][T22933] __nla_validate_parse: 3 callbacks suppressed
[  516.081354][T22933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4605'.
[  516.108896][T22938] ip_vti0: entered promiscuous mode
[  516.118819][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4606'.
[  516.160413][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'.
[  516.197437][T22926] netlink: 'syz.0.4604': attribute type 6 has an invalid length.
[  516.539345][T22956] 8021q: adding VLAN 0 to HW filter on device bond1
[  516.872941][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4616'.
[  516.898923][T22985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4620'.
[  517.199574][T22999] netlink: 'syz.5.4621': attribute type 1 has an invalid length.
[  517.238657][T22999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4621'.
[  517.483474][T23009] netlink: 'syz.4.4626': attribute type 12 has an invalid length.
[  517.527297][T23011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4625'.
[  517.532048][T23009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4626'.
[  517.567070][T23011] net_ratelimit: 51 callbacks suppressed
[  517.567091][T23011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.577790][T23016] xt_TPROXY: Can be used only with -p tcp or -p udp
[  517.845276][T23021] netlink: 'syz.2.4629': attribute type 3 has an invalid length.
[  518.267427][T23052] netlink: 'syz.4.4639': attribute type 10 has an invalid length.
[  518.289122][T23052] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4639'.
[  518.353843][T23056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.396176][T23061] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4641'.
[  518.605711][T23070] veth5: entered allmulticast mode
[  518.725685][T23078] netlink: 'syz.4.4648': attribute type 39 has an invalid length.
[  518.876083][T23081] delete_channel: no stack
[  519.168473][T23090] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  519.449203][T23114] netlink: 'syz.4.4657': attribute type 4 has an invalid length.
[  519.484806][T23114] netlink: 'syz.4.4657': attribute type 3 has an invalid length.
[  519.907867][T23130] openvswitch: netlink: IP tunnel TTL not specified.
[  520.347911][T23146] tipc: Started in network mode
[  520.353086][T23146] tipc: Node identity 0eedcda25686, cluster identity 4711
[  520.373960][T23146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.465478][T23146] syzkaller0: entered promiscuous mode
[  520.471116][T23146] syzkaller0: entered allmulticast mode
[  520.486394][T23146] tipc: Resetting bearer <eth:syzkaller0>
[  520.520478][T23145] tipc: Resetting bearer <eth:syzkaller0>
[  520.538387][T23162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  520.545704][T23162] IPv6: NLM_F_CREATE should be set when creating new route
[  522.429614][T23145] tipc: Disabling bearer <eth:syzkaller0>
[  522.528245][T23191] netlink: 'syz.2.4681': attribute type 21 has an invalid length.
[  522.542201][  T923] tipc: Node number set to 1483460002
[  522.564198][T23191] __nla_validate_parse: 10 callbacks suppressed
[  522.564218][T23191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4681'.
[  522.599997][T23191] netlink: 'syz.2.4681': attribute type 4 has an invalid length.
[  522.609487][T23191] netlink: 'syz.2.4681': attribute type 5 has an invalid length.
[  522.644017][T23191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4681'.
[  522.719710][T23200] netlink: 'syz.0.4683': attribute type 1 has an invalid length.
[  522.730616][T23201] netlink: 'syz.0.4683': attribute type 1 has an invalid length.
[  522.837032][T23201] bond6: entered promiscuous mode
[  522.847360][T23201] 8021q: adding VLAN 0 to HW filter on device bond6
[  523.001125][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'.
[  523.078350][T23232] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4691'.
[  523.104245][T23234] syzkaller0: entered promiscuous mode
[  523.104864][T23226] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4691'.
[  523.109762][T23234] syzkaller0: entered allmulticast mode
[  523.248339][T23234] tipc: Started in network mode
[  523.253745][T23234] tipc: Node identity ae5eb4c76782, cluster identity 4711
[  523.261476][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4695'.
[  523.281466][T23234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.291301][T23243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4695'.
[  523.370483][T23219] tipc: Resetting bearer <eth:syzkaller0>
[  523.428278][T23219] tipc: Disabling bearer <eth:syzkaller0>
[  523.452091][T23251] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4698'.
[  523.486690][T23254] x_tables: duplicate underflow at hook 1
[  523.555118][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4696'.
[  523.578505][T23259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4700'.
[  523.716964][T23266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  523.964174][T23282] erspan0: entered allmulticast mode
[  524.946967][T23324] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  525.199602][T23339] syzkaller0: entered promiscuous mode
[  525.226157][T23339] syzkaller0: entered allmulticast mode
[  525.389843][T23355] netlink: 'syz.0.4729': attribute type 1 has an invalid length.
[  525.411663][T23355] netlink: 'syz.0.4729': attribute type 1 has an invalid length.
[  525.420434][T23355] netlink: 'syz.0.4729': attribute type 8 has an invalid length.
[  525.468206][T23360] openvswitch: netlink: Duplicate key (type 32).
[  525.810286][T23375] netlink: 'syz.3.4737': attribute type 62 has an invalid length.
[  526.162808][T23387] netlink: 'syz.3.4741': attribute type 1 has an invalid length.
[  526.239097][T23395] bond0: entered allmulticast mode
[  526.849678][T23413] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  526.856788][T23413] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  527.340410][T23436] batadv_slave_0: entered promiscuous mode
[  527.401125][T23435] batadv_slave_0: left promiscuous mode
[  527.539921][T23445] syzkaller1: entered promiscuous mode
[  527.561968][T23445] syzkaller1: entered allmulticast mode
[  527.596328][T23445] __nla_validate_parse: 15 callbacks suppressed
[  527.596350][T23445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4759'.
[  527.759527][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'.
[  527.869645][T23452] gtp0: entered promiscuous mode
[  527.877002][T23452] gtp0: entered allmulticast mode
[  528.067172][T23470] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4766'.
[  528.200486][T23472] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4767'.
[  528.585253][T23486] IPVS: length: 251 != 24
[  529.115939][T23512] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4779'.
[  529.262350][T23522] validate_nla: 2 callbacks suppressed
[  529.262370][T23522] netlink: 'syz.4.4782': attribute type 3 has an invalid length.
[  529.311423][T23522] netlink: 'syz.4.4782': attribute type 3 has an invalid length.
[  529.369743][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'.
[  529.384441][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4783'.
[  529.407254][T23525] netlink: 'syz.5.4783': attribute type 1 has an invalid length.
[  529.442186][T23525] netlink: 'syz.5.4783': attribute type 4 has an invalid length.
[  529.449974][T23525] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4783'.
[  529.493620][T23528] bond5: option xmit_hash_policy: invalid value (64)
[  529.522178][T23528] bond5 (unregistering): Released all slaves
[  529.996142][T23552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  530.017550][T23552] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  530.039523][T23552] gretap1: entered promiscuous mode
[  530.039800][T23563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4791'.
[  530.046657][T23552] gretap1: entered allmulticast mode
[  530.123123][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'.
[  530.364417][ T5485] veth0_macvtap: left promiscuous mode
[  530.450353][T13403] lec:lec_start_xmit: lec0:No lecd attached
[  531.166826][T23623] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  531.522176][T23639] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  531.575298][T23639] bond7: entered promiscuous mode
[  531.603413][T23648] netlink: 'syz.2.4817': attribute type 10 has an invalid length.
[  531.608257][T23639] bond7: entered allmulticast mode
[  531.624195][T23639] 8021q: adding VLAN 0 to HW filter on device bond7
[  531.706347][T23648] bond4: (slave lo): Releasing backup interface
[  531.747721][T23648] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  531.786975][T23648] lo: left promiscuous mode
[  531.816759][T23648] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  531.821283][T23660] openvswitch: netlink: IP tunnel dst address not specified
[  531.858954][T23648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  532.057355][T23653] syzkaller0: entered promiscuous mode
[  532.074329][T23653] syzkaller0: entered allmulticast mode
[  532.094368][T23673] netlink: 'syz.2.4823': attribute type 1 has an invalid length.
[  532.106516][T23666] ip6_vti0 speed is unknown, defaulting to 1000
[  532.126531][T23673] netlink: 'syz.2.4823': attribute type 2 has an invalid length.
[  532.379228][T23688] tipc: Trying to set illegal importance in message
[  534.325187][T23666] lo speed is unknown, defaulting to 1000
[  534.747200][T23714] can: request_module (can-proto-0) failed.
[  534.986421][T23737] netlink: 'syz.2.4844': attribute type 33 has an invalid length.
[  535.162781][T23743] __nla_validate_parse: 10 callbacks suppressed
[  535.162803][T23743] netlink: 144188 bytes leftover after parsing attributes in process `syz.0.4845'.
[  535.165036][T23734] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4842'.
[  535.201638][T23747] tc_dump_action: action bad kind
[  535.560871][T23759] gtp0: entered promiscuous mode
[  535.582042][T23759] gtp0: entered allmulticast mode
[  535.884665][T23771] syzkaller0: entered promiscuous mode
[  535.890303][T23771] syzkaller0: entered allmulticast mode
[  535.898604][T23740] netlink: 'syz.4.4843': attribute type 1 has an invalid length.
[  536.031926][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms
[  536.040110][    C0] lec:lec_tx_timeout: lec0
[  536.150498][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4853'.
[  537.321690][T23836] sctp: [Deprecated]: syz.2.4864 (pid 23836) Use of int in max_burst socket option.
[  537.321690][T23836] Use struct sctp_assoc_value instead
[  537.340635][T23836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.397158][T23839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4865'.
[  537.554810][T23839] 8021q: adding VLAN 0 to HW filter on device bond2
[  537.615525][T23848] netlink: 'syz.0.4866': attribute type 1 has an invalid length.
[  537.809576][T23862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4866'.
[  537.980736][T23869] netlink: 'syz.5.4870': attribute type 33 has an invalid length.
[  538.446647][T23892] xt_nat: multiple ranges no longer supported
[  538.601345][T23899] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  538.619813][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4878'.
[  538.633206][T23902] netlink: 'syz.5.4878': attribute type 7 has an invalid length.
[  538.652388][T23902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4878'.
[  538.723160][T23900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4877'.
[  538.986620][T23909] syzkaller0: entered promiscuous mode
[  539.012001][T23909] syzkaller0: entered allmulticast mode
[  539.043501][T23916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'.
[  539.098777][T23918] netlink: 'syz.0.4884': attribute type 21 has an invalid length.
[  539.110701][T23918] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4884'.
[  539.234779][ T8141] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[  539.257087][ T8141] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[  539.283007][ T8141] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[  539.321979][ T8141] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[  539.807057][T23960] sock: sock_timestamping_bind_phc: sock not bind to device
[  540.267887][T23983] __nla_validate_parse: 6 callbacks suppressed
[  540.267909][T23983] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4903'.
[  540.381781][T23986] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  540.473142][T23986] bond5 (unregistering): Released all slaves
[  540.478558][T23995] sctp: [Deprecated]: syz.0.4907 (pid 23995) Use of int in maxseg socket option.
[  540.478558][T23995] Use struct sctp_assoc_value instead
[  540.500216][T23997] netlink: 'syz.3.4905': attribute type 1 has an invalid length.
[  540.615189][T24010] netlink: 'syz.0.4909': attribute type 21 has an invalid length.
[  540.630866][T24010] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4909'.
[  540.638555][T23997] 8021q: adding VLAN 0 to HW filter on device bond4
[  540.675490][T24010] netlink: 'syz.0.4909': attribute type 4 has an invalid length.
[  540.684075][T24010] netlink: 'syz.0.4909': attribute type 5 has an invalid length.
[  540.691872][T24010] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4909'.
[  540.719602][T23997] bond4: (slave gretap2): making interface the new active one
[  540.733146][T23997] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  540.869460][   T30] audit: type=1107 audit(1771423701.421:10): pid=24021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O���J'/`�F�f�'
[  543.351337][T23988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  543.362564][T24017] netlink: 'syz.0.4910': attribute type 9 has an invalid length.
[  543.461350][T24032] netlink: 'syz.3.4913': attribute type 12 has an invalid length.
[  543.539454][T24032] bond5: option primary_reselect: invalid value (255)
[  543.566322][T24032] bond5 (unregistering): Released all slaves
[  543.818303][T24056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4918'.
[  543.857440][T24054] openvswitch: netlink: Flow key attr not present in new flow.
[  544.248089][T24076] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4922'.
[  544.533048][T24083] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4926'.
[  544.670687][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  544.761602][T24094] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4927'.
[  544.901683][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4931'.
[  545.063027][T24114] C: renamed from lo
[  545.080516][T24114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  545.174466][T24121] sctp: [Deprecated]: syz.3.4937 (pid 24121) Use of int in maxseg socket option.
[  545.174466][T24121] Use struct sctp_assoc_value instead
[  545.204746][T24120] netlink: 672 bytes leftover after parsing attributes in process `syz.0.4936'.
[  545.406754][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'.
[  545.453122][T24131] ip6t_srh: unknown srh invflags 4000
[  545.466466][T24131] Unknown options in mask 697c
[  545.503951][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'.
[  545.679583][T24146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  545.836513][T24155] netlink: 'syz.5.4945': attribute type 22 has an invalid length.
[  545.846068][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4945'.
[  545.857526][T24155] netlink: 'syz.5.4945': attribute type 22 has an invalid length.
[  545.871617][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4945'.
[  546.141289][T24163] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4947'.
[  546.251170][T24173] netlink: 'syz.5.4949': attribute type 5 has an invalid length.
[  546.411363][T24176] 8021q: VLANs not supported on ip6_vti0
[  546.453206][T24180] tc_dump_action: action bad kind
[  546.513440][T24182] netlink: 'syz.4.4953': attribute type 10 has an invalid length.
[  546.533376][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4952'.
[  546.546400][T24185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  546.557001][T24185] syzkaller0: entered promiscuous mode
[  546.564085][T24185] syzkaller0: entered allmulticast mode
[  546.807079][T24194] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.828748][T24199] netlink: 'syz.4.4957': attribute type 10 has an invalid length.
[  546.850801][T24194] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  546.862993][T24199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4957'.
[  546.893943][T24194] bond0: (slave ip6tnl1): Error -95 calling set_mac_address
[  547.263963][T24175] tipc: Resetting bearer <eth:syzkaller0>
[  547.383952][T24175] tipc: Disabling bearer <eth:syzkaller0>
[  547.652586][   T58] nci: nci_rsp_packet: unknown rsp opcode 0xc02
[  547.724731][T24231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  547.763020][T24240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4970'.
[  548.408770][T24262] xt_policy: output policy not valid in PREROUTING and INPUT
[  548.741119][T24278] IPVS: set_ctl: invalid protocol: 56 26.0.1.255:0
[  548.800475][T24278] sock: sock_set_timeout: `syz.4.4978' (pid 24278) tries to set negative timeout
[  548.938029][T24289] netlink: 'syz.5.4980': attribute type 1 has an invalid length.
[  548.991069][T24289] netlink: 'syz.5.4980': attribute type 6 has an invalid length.
[  549.023912][T24289] ip6t_srh: unknown srh match flags  4000
[  549.339860][T24297] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[  549.614601][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'.
[  549.688390][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'.
[  550.478161][T24366] __nla_validate_parse: 1 callbacks suppressed
[  550.478182][T24366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5004'.
[  550.483924][T24367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5003'.
[  550.495052][T24368] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5004'.
[  550.628788][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5005'.
[  550.889428][T24386] netlink: 'syz.4.5009': attribute type 9 has an invalid length.
[  550.922116][T24386] netlink: 'syz.4.5009': attribute type 11 has an invalid length.
[  550.929994][T24386] netlink: 'syz.4.5009': attribute type 12 has an invalid length.
[  550.954832][T24386] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5009'.
[  550.972743][T24386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5009'.
[  551.112082][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'.
[  551.237781][T24396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  551.566522][T24401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5015'.
[  551.910942][T24412] bond5: option fail_over_mac: invalid value (16)
[  551.930306][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5021'.
[  551.941634][T24412] bond5 (unregistering): Released all slaves
[  552.091393][T24423] bond0: entered promiscuous mode
[  552.102100][T24423] bond_slave_0: entered promiscuous mode
[  552.108995][T24423] bond_slave_1: entered promiscuous mode
[  552.122915][T24423] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  552.152059][T24423] bond0: left promiscuous mode
[  552.156982][T24423] bond_slave_0: left promiscuous mode
[  552.192972][T24423] bond_slave_1: left promiscuous mode
[  552.199251][T24423] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  552.460360][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5025'.
[  552.535308][T24443] netlink: 'syz.5.5026': attribute type 1 has an invalid length.
[  552.562579][T24441] netlink: 'syz.5.5026': attribute type 1 has an invalid length.
[  552.566348][T24446] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  552.689224][T24449] netlink: 'syz.4.5027': attribute type 3 has an invalid length.
[  552.706093][T24449] netlink: 'syz.4.5027': attribute type 3 has an invalid length.
[  552.950725][T24463] netlink: 'syz.5.5034': attribute type 24 has an invalid length.
[  553.166435][T24476] netlink: 'syz.0.5035': attribute type 9 has an invalid length.
[  553.174519][T24476] netlink: 'syz.0.5035': attribute type 11 has an invalid length.
[  553.659629][T24488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.733980][T24455] veth1_macvtap: left promiscuous mode
[  554.007752][ T1150] netdevsim netdevsim2 ������: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.038766][ T1150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.115183][ T1150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.145005][ T1150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.820411][T24549] IPv6: sit1: Disabled Multicast RS
[  555.144109][T24569] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  555.617958][T24584] 8021q: adding VLAN 0 to HW filter on device bond9
[  555.732481][T24591] ip6erspan1: entered promiscuous mode
[  555.777682][T24591] bond9: (slave ip6erspan1): making interface the new active one
[  555.787743][T24591] bond9: (slave ip6erspan1): Enslaving as an active interface with an up link
[  555.926634][T24606] syzkaller1: entered promiscuous mode
[  555.970368][T24606] syzkaller1: entered allmulticast mode
[  556.131305][T24606] validate_nla: 4 callbacks suppressed
[  556.131325][T24606] netlink: 'syz.4.5064': attribute type 33 has an invalid length.
[  556.379779][T24606] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  556.439082][T24606] bond6 (unregistering): Released all slaves
[  556.532136][T24630] batadv_slave_1: entered promiscuous mode
[  556.538045][T24630] batadv_slave_1: entered allmulticast mode
[  556.657535][T24638] netlink: 'syz.3.5071': attribute type 11 has an invalid length.
[  556.830032][T24638] __nla_validate_parse: 14 callbacks suppressed
[  556.830053][T24638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5071'.
[  556.997879][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.043759][T24651] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.087782][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.106050][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.144705][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.195614][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.237644][T24652] netlink: 'syz.5.5075': attribute type 29 has an invalid length.
[  557.520402][T24676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  557.527793][T24676] IPv6: NLM_F_CREATE should be set when creating new route
[  557.535209][T24676] IPv6: NLM_F_CREATE should be set when creating new route
[  557.542535][T24676] IPv6: NLM_F_CREATE should be set when creating new route
[  557.826208][T24694] netlink: 'syz.2.5084': attribute type 10 has an invalid length.
[  557.885204][T24682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.912764][T24687] syzkaller0: entered promiscuous mode
[  557.918379][T24687] syzkaller0: entered allmulticast mode
[  558.049051][T24696] tipc: Resetting bearer <eth:syzkaller0>
[  558.068846][T24690] syzkaller1: entered promiscuous mode
[  558.079158][T24690] syzkaller1: entered allmulticast mode
[  558.135300][T24668] tipc: Resetting bearer <eth:syzkaller0>
[  558.222740][T24668] tipc: Disabling bearer <eth:syzkaller0>
[  558.248523][T24681] syzkaller1: left promiscuous mode
[  558.254590][T24681] syzkaller1: left allmulticast mode
[  558.459554][T24711] netlink: 'syz.4.5087': attribute type 7 has an invalid length.
[  558.505002][T24718] IPVS: set_ctl: invalid protocol: 94 172.30.1.4:20000
[  558.689806][T24726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5093'.
[  558.927636][T24738] ip6_vti0 speed is unknown, defaulting to 1000
[  559.141975][T24752] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5100'.
[  559.265473][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5100'.
[  559.298891][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5100'.
[  559.353336][T24758] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5104'.
[  559.461041][T24752] bond5: option primary_reselect: invalid value (255)
[  559.513810][T24752] bond5 (unregistering): Released all slaves
[  559.557075][T24738] lo speed is unknown, defaulting to 1000
[  559.728948][T24769] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5105'.
[  559.758410][T24771] netlink: zone id is out of range
[  559.778057][T24771] netlink: zone id is out of range
[  559.793680][T24771] netlink: zone id is out of range
[  559.798947][T24771] netlink: zone id is out of range
[  559.837639][T24771] netlink: zone id is out of range
[  559.867753][T24771] netlink: zone id is out of range
[  559.886990][T24771] netlink: zone id is out of range
[  559.909979][T24771] netlink: zone id is out of range
[  559.925171][T24771] netlink: zone id is out of range
[  559.953491][T24771] netlink: zone id is out of range
[  560.022093][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  560.112465][T24779] batadv_slave_0: entered promiscuous mode
[  560.186119][T24778] batadv_slave_0: left promiscuous mode
[  560.256645][T24794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5113'.
[  560.519015][T24803] syzkaller0: entered promiscuous mode
[  560.549410][T24803] syzkaller0: entered allmulticast mode
[  560.654538][T24807] syzkaller0: entered promiscuous mode
[  560.665891][T24807] syzkaller0: entered allmulticast mode
[  561.046498][T24835] syzkaller0: entered promiscuous mode
[  561.074444][T24835] syzkaller0: entered allmulticast mode
[  561.269050][T24844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5126'.
[  561.353308][T24844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5126'.
[  561.589560][T24862] validate_nla: 3 callbacks suppressed
[  561.589579][T24862] netlink: 'syz.4.5130': attribute type 10 has an invalid length.
[  561.624962][T24863] netlink: 'syz.4.5130': attribute type 10 has an invalid length.
[  561.706891][T24872] team0: Mode changed to "activebackup"
[  561.886158][T24879] __nla_validate_parse: 2 callbacks suppressed
[  561.886180][T24879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5136'.
[  561.945370][T24876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5134'.
[  562.009112][T24876] netlink: 'syz.5.5134': attribute type 13 has an invalid length.
[  562.043948][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'.
[  562.320746][T24897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5140'.
[  562.435509][T24901] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5141'.
[  562.447332][T24902] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5141'.
[  562.531519][T24904] netlink: 'syz.4.5143': attribute type 7 has an invalid length.
[  562.532995][T24906] netlink: 'syz.0.5142': attribute type 16 has an invalid length.
[  562.544475][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5143'.
[  562.548456][T24906] netlink: 'syz.0.5142': attribute type 3 has an invalid length.
[  562.566803][T24906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5142'.
[  562.588379][T24904] netlink: 'syz.4.5143': attribute type 7 has an invalid length.
[  562.588980][ T1150] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  562.597083][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5143'.
[  562.607135][ T1150] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  562.643049][ T1150] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  562.662997][ T3011] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  563.024012][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5151'.
[  563.070012][ T3011] wlan1: Trigger new scan to find an IBSS to join
[  563.079784][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  563.452922][T24956] netlink: 'syz.4.5159': attribute type 1 has an invalid length.
[  563.490363][T24956] erspan1: entered allmulticast mode
[  563.548368][T24957] netlink: 'syz.4.5159': attribute type 29 has an invalid length.
[  563.709172][T24962] ip6_vti0 speed is unknown, defaulting to 1000
[  564.040933][T24971] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  564.062499][T24971] bond6 (unregistering): Released all slaves
[  564.087336][T24962] lo speed is unknown, defaulting to 1000
[  564.498373][T25003] netlink: 'syz.2.5172': attribute type 9 has an invalid length.
[  564.537245][T25005] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  564.588935][T25003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  564.773283][T25003] syzkaller0: entered promiscuous mode
[  564.780333][T25003] syzkaller0: entered allmulticast mode
[  564.792295][T25003] tipc: Resetting bearer <eth:syzkaller0>
[  565.226983][T24999] tipc: Resetting bearer <eth:syzkaller0>
[  567.122960][T24999] tipc: Disabling bearer <eth:syzkaller0>
[  567.181972][T24487] tipc: Node number set to 3386684615
[  567.614895][T25067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.622277][T25067] IPv6: NLM_F_CREATE should be set when creating new route
[  567.629541][T25067] IPv6: NLM_F_CREATE should be set when creating new route
[  567.677719][T25067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  567.754038][T25071] ipvlan2: entered promiscuous mode
[  567.791650][T25074] ipvlan3: entered promiscuous mode
[  567.806963][T25076] __nla_validate_parse: 11 callbacks suppressed
[  567.806983][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5194'.
[  567.991645][T25088] netlink: 'syz.0.5196': attribute type 1 has an invalid length.
[  568.023139][T25088] netlink: 'syz.0.5196': attribute type 7 has an invalid length.
[  568.036746][ T3002] wlan1: Trigger new scan to find an IBSS to join
[  568.054572][T25088] netlink: 'syz.0.5196': attribute type 8 has an invalid length.
[  568.091885][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  568.100064][    C0] lec:lec_tx_timeout: lec0
[  568.113228][T25088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5196'.
[  568.454585][T25119] sctp: [Deprecated]: syz.4.5205 (pid 25119) Use of int in max_burst socket option deprecated.
[  568.454585][T25119] Use struct sctp_assoc_value instead
[  568.471421][T25116] IPVS: set_ctl: invalid protocol: 50 172.20.20.13:20003
[  568.565272][T25118] ip6_vti0 speed is unknown, defaulting to 1000
[  568.574479][T25125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5207'.
[  568.690140][T25122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5207'.
[  568.699830][T25122] block nbd0: Unsupported socket: should be TCP or UNIX.
[  568.768801][T25128] netlink: 'syz.4.5209': attribute type 1 has an invalid length.
[  568.789190][T25128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5209'.
[  568.867942][T25118] lo speed is unknown, defaulting to 1000
[  569.052686][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5211'.
[  569.086427][T25144] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  569.116709][ T6511] wlan1: Creating new IBSS network, BSSID ce:3a:aa:f0:ed:75
[  569.311735][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5215'.
[  569.343354][T25154] lo: Caught tx_queue_len zero misconfig
[  569.693330][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5221'.
[  569.725640][T25181] net_ratelimit: 5 callbacks suppressed
[  569.725661][T25181] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  570.156497][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5227'.
[  570.446908][T25222] veth0_to_bond: entered promiscuous mode
[  570.555033][T25228] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5233'.
[  570.685989][T25230] syzkaller0: entered promiscuous mode
[  570.699033][T25230] syzkaller0: entered allmulticast mode
[  571.702040][T25283] tipc: New replicast peer: 255.255.255.255
[  571.714250][T25283] tipc: Enabled bearer <udp:syz2>, priority 10
[  571.736001][T25283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  571.984647][T25303] netlink: 'syz.5.5256': attribute type 10 has an invalid length.
[  571.995802][T25303] veth0_macvtap: left promiscuous mode
[  572.517818][T25338] syz_tun: entered allmulticast mode
[  572.612358][T25335] block nbd2: not configured, cannot reconfigure
[  572.646300][T25335] C: entered promiscuous mode
[  572.668822][T25335] netlink: 'syz.2.5267': attribute type 2 has an invalid length.
[  572.696351][T25335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  572.756222][T25334] syz_tun: left allmulticast mode
[  572.921472][T25359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  573.099399][T25367] __nla_validate_parse: 4 callbacks suppressed
[  573.099420][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5279'.
[  573.179615][T25375] �: renamed from vxcan1 (while UP)
[  573.616718][T25409] gre0: entered promiscuous mode
[  573.632809][T25409] gre0: entered allmulticast mode
[  573.687651][T25398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5287'.
[  574.078179][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5298'.
[  574.111653][T25437] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5300'.
[  574.387464][T25448] syzkaller0: entered promiscuous mode
[  574.399142][T25448] syzkaller0: entered allmulticast mode
[  574.438764][T25448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.466390][T25448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.484312][T25448] netlink: 'syz.5.5305': attribute type 6 has an invalid length.
[  574.588426][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5309'.
[  574.774503][T25474] smc: net device caif0 applied user defined pnetid SYZ2
[  575.032630][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'.
[  575.054257][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'.
[  575.073139][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'.
[  575.176605][T25501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5323'.
[  575.327965][T25509] sctp: [Deprecated]: syz.5.5326 (pid 25509) Use of struct sctp_assoc_value in delayed_ack socket option.
[  575.327965][T25509] Use struct sctp_sack_info instead
[  575.591221][T25525] IPVS: Unknown mcast interface: vcan0
[  575.970037][T25543] atomic_op ffff88806823c998 conn xmit_atomic 0000000000000000
[  576.027266][T25547] xt_TPROXY: Can be used only with -p tcp or -p udp
[  576.054640][T25547] block nbd3: not configured, cannot reconfigure
[  576.072379][T25549] block nbd3: not configured, cannot reconfigure
[  576.133363][T25555] netlink: 'syz.2.5343': attribute type 1 has an invalid length.
[  576.141154][T25555] netlink: 'syz.2.5343': attribute type 1 has an invalid length.
[  576.149479][T25555] netlink: 'syz.2.5343': attribute type 1 has an invalid length.
[  576.178327][T25555] netlink: 'syz.2.5343': attribute type 2 has an invalid length.
[  576.188771][T25555] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5343'.
[  576.204572][T25561] xt_l2tp: v2 tid > 0xffff: 1114244
[  576.272739][T25562] bond5: entered promiscuous mode
[  576.277931][T25562] bond5: entered allmulticast mode
[  576.292639][T25562] 8021q: adding VLAN 0 to HW filter on device bond5
[  576.779214][T25587] xt_l2tp: v2 doesn't support IP mode
[  577.259042][T25617] IPVS: length: 56 != 24
[  577.645112][T25643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.662004][T25642] tipc: Enabled bearer <eth:vlan0>, priority 10
[  577.902885][T25658] 8021q: adding VLAN 0 to HW filter on device bond6
[  577.970868][T25666] bond0: entered promiscuous mode
[  577.994194][T25657] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  578.017775][T25666] batadv0: entered promiscuous mode
[  578.037921][T25666] debugfs: 'hsr1' already exists in 'hsr'
[  578.056489][T25666] Cannot create hsr debugfs directory
[  578.071637][T25666] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  578.090159][T25666] hsr1: entered promiscuous mode
[  578.099276][T25666] hsr1: entered allmulticast mode
[  578.106284][T25666] batadv0: entered allmulticast mode
[  578.113050][T25666] 8021q: adding VLAN 0 to HW filter on device hsr1
[  578.122061][T25666] bond0: left promiscuous mode
[  578.127925][T25666] batadv0: left promiscuous mode
[  578.178409][T25665] 8021q: adding VLAN 0 to HW filter on device bond6
[  578.190453][T25665] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address
[  578.204044][T25665] bond6: (slave vxcan7): Error -95 calling set_mac_address
[  578.493831][T25683] netlink: 'syz.3.5381': attribute type 1 has an invalid length.
[  578.572843][T25695] __nla_validate_parse: 5 callbacks suppressed
[  578.572865][T25695] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5384'.
[  578.615343][T25695] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5384'.
[  578.749457][   T30] audit: type=1804 audit(1771423739.301:11): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5387" name="/newroot/501/cgroup.controllers" dev="tmpfs" ino=2571 res=1 errno=0
[  578.802297][T25707] batadv_slave_0: entered promiscuous mode
[  578.842022][   T30] audit: type=1800 audit(1771423739.301:12): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5387" name="cgroup.controllers" dev="tmpfs" ino=2571 res=0 errno=0
[  579.027319][T25701] batadv_slave_0: left promiscuous mode
[  579.820802][T25739] bridge_slave_1: entered promiscuous mode
[  579.829782][T25739] macvtap0: entered promiscuous mode
[  579.836393][T25739] macvtap0: entered allmulticast mode
[  579.842303][T25739] bridge_slave_1: entered allmulticast mode
[  579.918791][T25740] macvtap1: entered promiscuous mode
[  579.935147][T25740] macvtap1: entered allmulticast mode
[  579.977308][T25751] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5397'.
[  579.997354][T25751] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5397'.
[  580.177577][T25763] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5402'.
[  580.224922][ T5913] IPVS: starting estimator thread 0...
[  580.312369][T25773] IPVS: using max 26 ests per chain, 62400 per kthread
[  580.355016][   T30] audit: type=1107 audit(1771423740.911:13): pid=25780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' ��+\�.)�i���xLJ��M4�r��
�z0�t`E9v���+ح�/�խ�V9V�'f�e���ɠ���~�'
[  580.851595][T25802] netlink: 'syz.0.5415': attribute type 30 has an invalid length.
[  580.889069][T25802] bond10: option arp_missed_max: invalid value (0)
[  580.895998][T25802] bond10: option arp_missed_max: allowed values 1 - 255
[  580.905782][T25802] bond10 (unregistering): Released all slaves
[  581.247137][T25822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5423'.
[  581.326898][T25822] netlink: 'syz.2.5423': attribute type 8 has an invalid length.
[  581.335580][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5423'.
[  581.393796][T25822] bond0: entered promiscuous mode
[  581.409951][T25822] gretap0: entered promiscuous mode
[  581.433474][T25822] bond0: left promiscuous mode
[  581.443298][T25822] gretap0: left promiscuous mode
[  581.467396][T25834] Cannot find set identified by id 3 to match
[  581.757536][T25848] netlink: 'syz.4.5431': attribute type 1 has an invalid length.
[  581.853480][T25850] bond6: (slave ip6gretap1): making interface the new active one
[  581.864199][T25850] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  582.082702][T25860] netlink: 'syz.4.5434': attribute type 2 has an invalid length.
[  582.090594][T25860] netlink: 'syz.4.5434': attribute type 1 has an invalid length.
[  582.265003][T25870] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  582.487638][T25875] syzkaller0: entered promiscuous mode
[  582.497890][T25875] syzkaller0: entered allmulticast mode
[  582.513562][T25877] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5441'.
[  582.527199][T25877] netlink: 'syz.2.5441': attribute type 1 has an invalid length.
[  582.550680][T25875] netlink: 'syz.5.5439': attribute type 10 has an invalid length.
[  582.569239][T25882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5442'.
[  582.630188][T25877] bond7: entered promiscuous mode
[  582.639800][T25877] 8021q: adding VLAN 0 to HW filter on device bond7
[  582.700139][T25882] 8021q: adding VLAN 0 to HW filter on device bond10
[  582.731585][T25886] 8021q: adding VLAN 0 to HW filter on device bond7
[  582.739179][T25886] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[  582.752183][T25886] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  582.775466][T25886] bond7: (slave vti0): making interface the new active one
[  582.783932][T25886] vti0: entered promiscuous mode
[  582.791083][T25886] bond7: (slave vti0): Enslaving as an active interface with an up link
[  582.927689][T25897] siw: device registration error -23
[  583.190420][T25910] netlink: 'syz.5.5448': attribute type 1 has an invalid length.
[  583.202636][T25912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5447'.
[  583.221940][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  583.794901][T25936] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5453'.
[  583.959436][T25944] netlink: 'syz.4.5456': attribute type 1 has an invalid length.
[  583.991650][T25944] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  584.168092][T25962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5459'.
[  584.258215][T25955] bond11: entered promiscuous mode
[  584.305676][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5462'.
[  584.332071][T25968] hsr_slave_0: left promiscuous mode
[  584.394865][T25958] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5460'.
[  584.634079][T25984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  584.717620][T25984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.156977][T26002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.508590][T26057] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  588.518378][T26056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5485'.
[  588.734251][T26073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5491'.
[  588.825860][T26076] netlink: 'syz.3.5492': attribute type 1 has an invalid length.
[  588.853549][T26076] netlink: 'syz.3.5492': attribute type 2 has an invalid length.
[  588.891115][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5493'.
[  588.907841][T26081] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5494'.
[  588.944035][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5495'.
[  588.988092][T26081] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  589.082721][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5498'.
[  589.121678][T26090] sctp: [Deprecated]: syz.0.5497 (pid 26090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  589.121678][T26090] Use struct sctp_sack_info instead
[  589.235725][T26092] syzkaller0: entered promiscuous mode
[  589.241604][T26092] syzkaller0: entered allmulticast mode
[  589.517659][T26105] netlink: 'syz.2.5501': attribute type 14 has an invalid length.
[  589.526245][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5501'.
[  589.537938][T26105] netlink: 'syz.2.5501': attribute type 14 has an invalid length.
[  589.547651][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5501'.
[  589.664438][T26103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.749363][T26117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5503'.
[  589.807353][T26118] syzkaller0: entered promiscuous mode
[  589.817338][T26118] syzkaller0: entered allmulticast mode
[  589.837918][T26118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.872567][T26116] tipc: Resetting bearer <eth:syzkaller0>
[  589.922735][T26116] tipc: Disabling bearer <eth:syzkaller0>
[  590.424943][T26156] netlink: 'syz.0.5514': attribute type 4 has an invalid length.
[  590.455328][T26157] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  590.472571][T26156] netlink: 'syz.0.5514': attribute type 4 has an invalid length.
[  590.480664][T26158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5515'.
[  590.497649][ T5913] lo speed is unknown, defaulting to 1000
[  590.504604][ T5913] syz0: Port: 1 Link ACTIVE
[  590.521404][T26163] netlink: 'syz.0.5514': attribute type 4 has an invalid length.
[  590.590293][ T5913] lo speed is unknown, defaulting to 1000
[  590.613959][ T5913] syz0: Port: 1 Link DOWN
[  590.625884][T26167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5518'.
[  590.639543][T26167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5518'.
[  590.650756][T26167] netlink: 'syz.2.5518': attribute type 2 has an invalid length.
[  590.767640][T26176] netlink: 'syz.0.5520': attribute type 2 has an invalid length.
[  590.835445][T26176] �9: entered promiscuous mode
[  591.587743][T26211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.596213][T26211] syzkaller0: entered promiscuous mode
[  591.601751][T26211] syzkaller0: entered allmulticast mode
[  591.850108][T26209] tipc: Resetting bearer <eth:syzkaller0>
[  591.923849][T26209] tipc: Disabling bearer <eth:syzkaller0>
[  591.942202][T26227] ip6_vti0 speed is unknown, defaulting to 1000
[  592.046787][T26241] netlink: 'syz.3.5543': attribute type 29 has an invalid length.
[  592.460219][T26227] lo speed is unknown, defaulting to 1000
[  593.061779][T26272] team1: entered promiscuous mode
[  593.067919][T26272] team1: entered allmulticast mode
[  594.320704][T13403] lec:lec_start_xmit: lec0:No lecd attached
[  594.837032][T26238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  594.990099][T26308] __nla_validate_parse: 14 callbacks suppressed
[  594.990119][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5564'.
[  595.138363][T26315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.146837][T26316] xt_l2tp: unknown flags: 10
[  595.174790][T26316] validate_nla: 1 callbacks suppressed
[  595.174812][T26316] netlink: 'syz.5.5567': attribute type 1 has an invalid length.
[  595.228412][T26316] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5567'.
[  595.337381][T26315] syzkaller0: entered promiscuous mode
[  595.364359][T26315] syzkaller0: entered allmulticast mode
[  595.390209][T26315] tipc: Resetting bearer <eth:syzkaller0>
[  595.431674][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5571'.
[  595.475741][T26313] tipc: Resetting bearer <eth:syzkaller0>
[  595.630503][T26342] netlink: 'syz.5.5575': attribute type 1 has an invalid length.
[  595.639726][T26342] netlink: 'syz.5.5575': attribute type 1 has an invalid length.
[  595.649141][T26342] netlink: 'syz.5.5575': attribute type 4 has an invalid length.
[  595.662105][T26342] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5575'.
[  597.677265][T26313] tipc: Disabling bearer <eth:syzkaller0>
[  597.699174][T26342] `: renamed from bond0 (while UP)
[  597.764697][  T923] tipc: Node number set to 2175360866
[  598.045995][T26375] veth0: entered promiscuous mode
[  598.062588][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5582'.
[  598.073765][T26381] veth0: Caught tx_queue_len zero misconfig
[  598.118107][T26375] veth0 (unregistering): left promiscuous mode
[  598.312824][T26402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5588'.
[  598.363100][T26404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5588'.
[  598.398425][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5588'.
[  598.885431][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5595'.
[  599.203709][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  599.233137][T26448] syzkaller1: entered promiscuous mode
[  599.246546][T26448] syzkaller1: entered allmulticast mode
[  599.284803][T26450] lo: entered allmulticast mode
[  599.303000][T26461] lo: left allmulticast mode
[  599.313314][T26446] netlink: 'syz.3.5599': attribute type 7 has an invalid length.
[  599.321334][T26451] netlink: 'syz.3.5599': attribute type 7 has an invalid length.
[  599.534216][T26468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.740547][T26482] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5607'.
[  600.022021][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms
[  600.030129][    C0] lec:lec_tx_timeout: lec0
[  600.096285][T26512] netlink: 'syz.3.5617': attribute type 33 has an invalid length.
[  600.160941][T26512] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  600.209239][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5619'.
[  600.222577][T26512] bond6 (unregistering): Released all slaves
[  600.269053][T26516] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  600.550826][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5624'.
[  600.814315][T26551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5630'.
[  600.843687][T26551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5630'.
[  601.006519][T26515] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  601.508363][T26593] syz_tun: entered allmulticast mode
[  601.528048][T26593] syz_tun: left allmulticast mode
[  601.983584][T26606] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  602.015992][T26606] bond7 (unregistering): Released all slaves
[  602.238746][T26634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5655'.
[  602.248848][T26634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5655'.
[  602.276333][T26634] gretap0: entered promiscuous mode
[  602.292523][T26634] gretap0: left promiscuous mode
[  602.470285][T26598] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  602.569977][T26647] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5662'.
[  602.624285][T26652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5661'.
[  602.911246][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5666'.
[  603.243930][ T6518] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  603.262666][ T6518] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 8472 - 0
[  603.295727][ T6518] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  603.320842][ T6518] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  603.344031][ T6518] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  603.353057][ T6518] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 8472 - 0
[  603.363302][ T6518] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  603.373161][ T6518] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  603.403805][T26682] netlink: 'syz.0.5670': attribute type 1 has an invalid length.
[  603.436803][T26682] netlink: 'syz.0.5670': attribute type 1 has an invalid length.
[  603.444980][T26682] netlink: 'syz.0.5670': attribute type 1 has an invalid length.
[  603.455943][T26688] netlink: 'syz.0.5670': attribute type 39 has an invalid length.
[  603.459054][T26682] netlink: 'syz.0.5670': attribute type 2 has an invalid length.
[  603.475284][ T6518] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  603.486055][ T6518] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 8472 - 0
[  603.494758][T26682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5670'.
[  603.505939][ T6518] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  603.515856][ T6518] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  603.563824][ T6518] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  603.595126][ T6518] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 8472 - 0
[  603.604343][ T6518] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  603.619211][ T6518] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  603.890161][T26699] netlink: zone id is out of range
[  603.920120][T26699] netlink: zone id is out of range
[  603.939854][T26699] netlink: zone id is out of range
[  603.961223][T26699] netlink: zone id is out of range
[  603.982786][T26699] netlink: zone id is out of range
[  604.006176][T26699] netlink: zone id is out of range
[  604.025851][T26699] netlink: zone id is out of range
[  604.026153][ T1150] wlan1: Trigger new scan to find an IBSS to join
[  604.035502][T26699] netlink: zone id is out of range
[  604.078038][T26699] netlink: zone id is out of range
[  604.125587][T26699] netlink: zone id is out of range
[  604.589675][T26737] tipc: Failed to remove unknown binding: 66,0,0/1483460002:3100192284/3100192285
[  604.599725][T26737] tipc: Failed to remove unknown binding: 66,0,0/1483460002:3100192284/3100192285
[  605.192808][T26766] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  605.224008][T26767] netlink: 'syz.3.5694': attribute type 29 has an invalid length.
[  605.242665][T26767] netlink: 'syz.3.5694': attribute type 29 has an invalid length.
[  605.488164][T26777] netlink: 'syz.3.5698': attribute type 29 has an invalid length.
[  605.737037][T26800] sctp: [Deprecated]: syz.3.5702 (pid 26800) Use of int in maxseg socket option.
[  605.737037][T26800] Use struct sctp_assoc_value instead
[  605.835552][T26796] 8021q: adding VLAN 0 to HW filter on device bond12
[  605.954642][T26806] __nla_validate_parse: 1 callbacks suppressed
[  605.954664][T26806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5706'.
[  605.958220][T26811] netlink: 'syz.2.5710': attribute type 5 has an invalid length.
[  605.978159][T26806] netlink: 'syz.4.5706': attribute type 7 has an invalid length.
[  605.981736][T26808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5709'.
[  605.994184][T26806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5706'.
[  606.026259][T26806] erspan0: entered promiscuous mode
[  606.035241][T26806] gretap0: entered promiscuous mode
[  606.042853][T26806] debugfs: 'hsr1' already exists in 'hsr'
[  606.048725][T26806] Cannot create hsr debugfs directory
[  606.055635][T26806] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  607.174454][T26865] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  607.538195][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5738'.
[  607.854427][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5741'.
[  608.378336][T26931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5750'.
[  608.709259][T26932] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5750'.
[  608.720013][T26932] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5750'.
[  608.762693][T26932] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5750'.
[  608.987568][T26940] sctp: [Deprecated]: syz.3.5753 (pid 26940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  608.987568][T26940] Use struct sctp_sack_info instead
[  609.018251][T26949] sctp: [Deprecated]: syz.3.5753 (pid 26949) Use of struct sctp_assoc_value in delayed_ack socket option.
[  609.018251][T26949] Use struct sctp_sack_info instead
[  609.038575][T26950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5754'.
[  609.064277][ T6511] wlan1: Trigger new scan to find an IBSS to join
[  609.086679][T26950] ip6tnl0: Caught tx_queue_len zero misconfig
[  609.200296][T26959] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  609.316769][T26959] bond7: (slave lo): Enslaving as an active interface with an up link
[  609.354593][T26959] net_ratelimit: 5 callbacks suppressed
[  609.354613][T26959] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  609.470392][T26970] GUP no longer grows the stack in syz.0.5760 (26970): 200000003000-20000000a000 (200000001000)
[  609.522031][T26970] CPU: 1 UID: 0 PID: 26970 Comm: syz.0.5760 Not tainted syzkaller #0 PREEMPT(full) 
[  609.522062][T26970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  609.522073][T26970] Call Trace:
[  609.522081][T26970]  <TASK>
[  609.522091][T26970]  dump_stack_lvl+0xe8/0x150
[  609.522125][T26970]  __get_user_pages+0x2453/0x29d0
[  609.522174][T26970]  ? __gup_longterm_locked+0xc4e/0x1630
[  609.522197][T26970]  ? down_read_killable+0x1bb/0x340
[  609.522226][T26970]  ? try_get_folio+0xec/0x650
[  609.522254][T26970]  __gup_longterm_locked+0xdcf/0x1630
[  609.522314][T26970]  gup_fast_fallback+0x1d82/0x22e0
[  609.522372][T26970]  ? __pfx_gup_fast_fallback+0x10/0x10
[  609.522399][T26970]  ? is_valid_gup_args+0x11f/0x200
[  609.522421][T26970]  ? get_user_pages_fast+0x4d/0xb0
[  609.522444][T26970]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  609.522472][T26970]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  609.522499][T26970]  iov_iter_get_pages2+0x5e/0xa0
[  609.522523][T26970]  __se_sys_vmsplice+0x7b3/0x1490
[  609.522565][T26970]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  609.522589][T26970]  ? __pfx_futex_wake+0x10/0x10
[  609.522688][T26970]  do_syscall_64+0x14d/0xf80
[  609.522714][T26970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.522733][T26970]  ? trace_irq_disable+0x37/0x100
[  609.522756][T26970]  ? clear_bhb_loop+0x40/0x90
[  609.522781][T26970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.522800][T26970] RIP: 0033:0x7fdff199c629
[  609.522818][T26970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.522835][T26970] RSP: 002b:00007fdff2834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  609.522857][T26970] RAX: ffffffffffffffda RBX: 00007fdff1c15fa0 RCX: 00007fdff199c629
[  609.522870][T26970] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  609.522882][T26970] RBP: 00007fdff1a32b39 R08: 0000000000000000 R09: 0000000000000000
[  609.522894][T26970] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  609.522904][T26970] R13: 00007fdff1c16038 R14: 00007fdff1c15fa0 R15: 00007ffd7b6d2a38
[  609.522939][T26970]  </TASK>
[  609.551399][T26971] validate_nla: 3 callbacks suppressed
[  609.551416][T26971] netlink: 'syz.5.5759': attribute type 58 has an invalid length.
[  609.930967][T26993] syzkaller0: entered promiscuous mode
[  609.941390][T26993] syzkaller0: entered allmulticast mode
[  610.039418][T26993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.482885][T26984] tipc: Resetting bearer <eth:syzkaller0>
[  610.499032][T27015] x_tables: duplicate underflow at hook 1
[  610.519079][T27016] x_tables: duplicate underflow at hook 1
[  610.573868][T26984] tipc: Disabling bearer <eth:syzkaller0>
[  610.602493][T27020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.764964][T27027] nbd: couldn't find a device at index 0
[  610.807929][T27027] team0: Caught tx_queue_len zero misconfig
[  611.207989][T27056] __nla_validate_parse: 5 callbacks suppressed
[  611.208012][T27056] netlink: 161176 bytes leftover after parsing attributes in process `syz.4.5778'.
[  611.264739][T27049] bond8 (unregistering): Released all slaves
[  611.288448][T27060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5780'.
[  611.484796][ T6518] wlan1: Creating new IBSS network, BSSID 76:c6:da:aa:9d:ed
[  611.501317][T27067] netlink: 'syz.5.5783': attribute type 1 has an invalid length.
[  611.533661][T27067] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5783'.
[  611.588877][T27067] netlink: 'syz.5.5783': attribute type 1 has an invalid length.
[  611.617180][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5783'.
[  611.758753][T27084] netlink: 'syz.0.5787': attribute type 1 has an invalid length.
[  611.794036][T27084] netlink: 'syz.0.5787': attribute type 3 has an invalid length.
[  611.806720][T27090] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5790'.
[  611.833191][T27084] netlink: 'syz.0.5787': attribute type 1 has an invalid length.
[  611.844398][T27088] syzkaller0: entered promiscuous mode
[  611.849923][T27088] syzkaller0: entered allmulticast mode
[  611.914149][T27099] FAULT_INJECTION: forcing a failure.
[  611.914149][T27099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.941421][T27099] CPU: 0 UID: 0 PID: 27099 Comm: syz.4.5791 Not tainted syzkaller #0 PREEMPT(full) 
[  611.941450][T27099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  611.941462][T27099] Call Trace:
[  611.941469][T27099]  <TASK>
[  611.941478][T27099]  dump_stack_lvl+0xe8/0x150
[  611.941510][T27099]  should_fail_ex+0x412/0x560
[  611.941543][T27099]  _copy_from_iter+0x1d3/0x1670
[  611.941580][T27099]  ? rcu_is_watching+0x15/0xb0
[  611.941604][T27099]  ? __pfx__copy_from_iter+0x10/0x10
[  611.941640][T27099]  ? netlink_sendmsg+0x650/0xb40
[  611.941659][T27099]  ? skb_put+0x11b/0x210
[  611.941686][T27099]  netlink_sendmsg+0x6c0/0xb40
[  611.941715][T27099]  ? __pfx_netlink_sendmsg+0x10/0x10
[  611.941739][T27099]  ? aa_sock_msg_perm+0xf1/0x1b0
[  611.941768][T27099]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  611.941800][T27099]  ? __pfx_netlink_sendmsg+0x10/0x10
[  611.941817][T27099]  ____sys_sendmsg+0xa68/0xad0
[  611.941841][T27099]  ? __might_fault+0xaf/0x130
[  611.941869][T27099]  ? __pfx_____sys_sendmsg+0x10/0x10
[  611.941904][T27099]  ? import_iovec+0x73/0xa0
[  611.941928][T27099]  ___sys_sendmsg+0x2a5/0x360
[  611.941950][T27099]  ? __lock_acquire+0x6b5/0x2cf0
[  611.941975][T27099]  ? __pfx____sys_sendmsg+0x10/0x10
[  611.942038][T27099]  ? __fget_files+0x2a/0x420
[  611.942056][T27099]  ? __fget_files+0x3a0/0x420
[  611.942086][T27099]  __x64_sys_sendmsg+0x1bd/0x2a0
[  611.942114][T27099]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  611.942159][T27099]  ? __pfx_ksys_write+0x10/0x10
[  611.942196][T27099]  do_syscall_64+0x14d/0xf80
[  611.942221][T27099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.942239][T27099]  ? trace_irq_disable+0x37/0x100
[  611.942261][T27099]  ? clear_bhb_loop+0x40/0x90
[  611.942285][T27099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.942303][T27099] RIP: 0033:0x7f8fd159c629
[  611.942323][T27099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.942339][T27099] RSP: 002b:00007f8fd23df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  611.942361][T27099] RAX: ffffffffffffffda RBX: 00007f8fd1815fa0 RCX: 00007f8fd159c629
[  611.942374][T27099] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  611.942386][T27099] RBP: 00007f8fd23df090 R08: 0000000000000000 R09: 0000000000000000
[  611.942398][T27099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.942409][T27099] R13: 00007f8fd1816038 R14: 00007f8fd1815fa0 R15: 00007ffddb54a2c8
[  611.942443][T27099]  </TASK>
[  612.421358][T27115] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  612.996263][T27150] FAULT_INJECTION: forcing a failure.
[  612.996263][T27150] name failslab, interval 1, probability 0, space 0, times 0
[  612.998432][T27151] x_tables: ip6_tables: mh match: only valid for protocol 135
[  613.041013][T27150] CPU: 1 UID: 0 PID: 27150 Comm: syz.4.5804 Not tainted syzkaller #0 PREEMPT(full) 
[  613.041042][T27150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  613.041053][T27150] Call Trace:
[  613.041061][T27150]  <TASK>
[  613.041069][T27150]  dump_stack_lvl+0xe8/0x150
[  613.041169][T27150]  should_fail_ex+0x412/0x560
[  613.041199][T27150]  should_failslab+0xa8/0x100
[  613.041227][T27150]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  613.041248][T27150]  ? __alloc_skb+0x186/0x7d0
[  613.041267][T27150]  ? __alloc_skb+0x1d0/0x7d0
[  613.041283][T27150]  ? __local_bh_enable_ip+0xd0/0x130
[  613.041308][T27150]  __alloc_skb+0x1d0/0x7d0
[  613.041328][T27150]  ? netlink_ack_tlv_len+0x6c/0x210
[  613.041348][T27150]  netlink_ack+0x146/0xa50
[  613.041372][T27150]  ? __lock_acquire+0x6b5/0x2cf0
[  613.041399][T27150]  netlink_rcv_skb+0x2b6/0x4b0
[  613.041419][T27150]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  613.041447][T27150]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  613.041476][T27150]  ? bpf_lsm_capable+0x9/0x20
[  613.041495][T27150]  ? security_capable+0x7e/0x2c0
[  613.041526][T27150]  nfnetlink_rcv+0x2c0/0x27b0
[  613.041549][T27150]  ? is_bpf_text_address+0x26/0x2b0
[  613.041577][T27150]  ? is_bpf_text_address+0x292/0x2b0
[  613.041600][T27150]  ? is_bpf_text_address+0x26/0x2b0
[  613.041626][T27150]  ? kernel_text_address+0xa5/0xe0
[  613.041652][T27150]  ? __kernel_text_address+0xd/0x30
[  613.041675][T27150]  ? unwind_get_return_address+0x4d/0x90
[  613.041697][T27150]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  613.041723][T27150]  ? arch_stack_walk+0xfb/0x150
[  613.041753][T27150]  ? __lock_acquire+0x6b5/0x2cf0
[  613.041776][T27150]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  613.041803][T27150]  ? stack_trace_save+0xa9/0x100
[  613.041826][T27150]  ? __pfx_stack_trace_save+0x10/0x10
[  613.041854][T27150]  ? __lock_acquire+0x6b5/0x2cf0
[  613.041880][T27150]  ? __lock_acquire+0x6b5/0x2cf0
[  613.041910][T27150]  ? __netlink_lookup+0xc6/0x8b0
[  613.041942][T27150]  ? netlink_deliver_tap+0x2e/0x1b0
[  613.041963][T27150]  ? netlink_deliver_tap+0x2e/0x1b0
[  613.041988][T27150]  ? netlink_deliver_tap+0x2e/0x1b0
[  613.042016][T27150]  netlink_unicast+0x80f/0x9b0
[  613.042053][T27150]  ? __pfx_netlink_unicast+0x10/0x10
[  613.042081][T27150]  ? netlink_sendmsg+0x650/0xb40
[  613.042096][T27150]  ? skb_put+0x11b/0x210
[  613.042129][T27150]  netlink_sendmsg+0x813/0xb40
[  613.042158][T27150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.042179][T27150]  ? aa_sock_msg_perm+0xf1/0x1b0
[  613.042205][T27150]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  613.042232][T27150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.042249][T27150]  ____sys_sendmsg+0xa68/0xad0
[  613.042271][T27150]  ? __might_fault+0xaf/0x130
[  613.042298][T27150]  ? __pfx_____sys_sendmsg+0x10/0x10
[  613.042329][T27150]  ? import_iovec+0x73/0xa0
[  613.042352][T27150]  ___sys_sendmsg+0x2a5/0x360
[  613.042370][T27150]  ? __lock_acquire+0x6b5/0x2cf0
[  613.042389][T27150]  ? __pfx____sys_sendmsg+0x10/0x10
[  613.042443][T27150]  ? __fget_files+0x2a/0x420
[  613.042461][T27150]  ? __fget_files+0x3a0/0x420
[  613.042491][T27150]  __x64_sys_sendmsg+0x1bd/0x2a0
[  613.042518][T27150]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  613.042551][T27150]  ? __pfx_ksys_write+0x10/0x10
[  613.042586][T27150]  do_syscall_64+0x14d/0xf80
[  613.042612][T27150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.042629][T27150]  ? trace_irq_disable+0x37/0x100
[  613.042650][T27150]  ? clear_bhb_loop+0x40/0x90
[  613.042674][T27150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.042693][T27150] RIP: 0033:0x7f8fd159c629
[  613.042712][T27150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.042728][T27150] RSP: 002b:00007f8fd23df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  613.042749][T27150] RAX: ffffffffffffffda RBX: 00007f8fd1815fa0 RCX: 00007f8fd159c629
[  613.042762][T27150] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  613.042774][T27150] RBP: 00007f8fd23df090 R08: 0000000000000000 R09: 0000000000000000
[  613.042785][T27150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.042797][T27150] R13: 00007f8fd1816038 R14: 00007f8fd1815fa0 R15: 00007ffddb54a2c8
[  613.042829][T27150]  </TASK>
[  613.484965][T27158] netlink: 'syz.3.5807': attribute type 1 has an invalid length.
[  613.518593][T27158] 8021q: adding VLAN 0 to HW filter on device bond6
[  613.618613][T27166] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5809'.
[  613.646377][T27159] 8021q: adding VLAN 0 to HW filter on device bond6
[  613.659716][T27159] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  613.682500][T27171] netlink: 'syz.5.5809': attribute type 16 has an invalid length.
[  613.691689][T27159] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  613.718849][T27171] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5809'.
[  613.753235][T27174] netlink: 'syz.0.5811': attribute type 13 has an invalid length.
[  613.771545][T27158] ip6erspan0: entered promiscuous mode
[  613.803275][T27158] bond6: (slave ip6erspan0): making interface the new active one
[  613.818187][T27158] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link
[  613.991227][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5812'.
[  614.413358][T27201] netlink: 'syz.2.5816': attribute type 1 has an invalid length.
[  614.593788][T27211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5819'.
[  614.622570][T27211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5819'.
[  615.569355][T27257] netlink: 'syz.3.5827': attribute type 10 has an invalid length.
[  616.068084][T25096] bond0 (unregistering): Released all slaves
[  616.078352][T25096] bond1 (unregistering): Released all slaves
[  616.091773][T25096] bond2 (unregistering): Released all slaves
[  616.107757][T25096] bond3 (unregistering): Released all slaves
[  616.121614][T25096] bond4 (unregistering): Released all slaves
[  616.141000][T25096] bond5 (unregistering): Released all slaves
[  616.165847][T25096] bond6 (unregistering): Released all slaves
[  616.179886][T25096] bond7 (unregistering): Released all slaves
[  616.197084][T25096] bond8 (unregistering): (slave veth5): Releasing backup interface
[  616.213086][T25096] bond8 (unregistering): Released all slaves
[  616.227192][T25096] bond9 (unregistering): Released all slaves
[  616.245681][T27201] erspan1: entered allmulticast mode
[  616.534811][T25096] IPVS: stopping backup sync thread 14918 ...
[  616.892360][T27284] netlink: 'syz.2.5833': attribute type 1 has an invalid length.
[  616.913029][T27287] netlink: 'syz.5.5834': attribute type 1 has an invalid length.
[  616.999304][T27293] netlink: 'syz.2.5833': attribute type 1 has an invalid length.
[  617.025653][T27295] openvswitch: netlink: IP tunnel dst address not specified
[  617.101060][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  617.116207][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  617.135754][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  617.145677][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  617.154647][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  617.203464][T27289] bond9: (slave ip6gretap1): making interface the new active one
[  617.212701][T27289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  617.220837][T27289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  617.232343][T27289] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  617.248997][T27286] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  617.250605][T27287] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  617.321414][T27292] bond8 (unregistering): Released all slaves
[  617.442660][T27300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.529474][T27300] tipc: Disabling bearer <eth:syzkaller0>
[  617.769140][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5839'.
[  617.779448][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5840'.
[  617.857209][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5840'.
[  617.896637][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5840'.
[  617.992717][T27301] ip6_vti0 speed is unknown, defaulting to 1000
[  618.055536][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'.
[  618.111440][T27339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5844'.
[  618.507985][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5849'.
[  618.544092][T27362] netlink: 'syz.0.5850': attribute type 7 has an invalid length.
[  618.663370][T27301] lo speed is unknown, defaulting to 1000
[  618.706909][T27363] bridge7: port 1(veth1) entered blocking state
[  618.720779][T27363] bridge7: port 1(veth1) entered disabled state
[  618.728030][T27363] veth1: entered allmulticast mode
[  618.738195][T27363] veth1: entered promiscuous mode
[  618.758107][T27365] bridge7: port 2(veth0_to_bond) entered blocking state
[  618.768891][T27365] bridge7: port 2(veth0_to_bond) entered disabled state
[  618.776404][T27365] veth0_to_bond: entered allmulticast mode
[  618.799687][T27365] veth0_to_bond: entered promiscuous mode
[  618.813434][   T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  618.829617][T27369] sctp: [Deprecated]: syz.5.5851 (pid 27369) Use of int in maxseg socket option.
[  618.829617][T27369] Use struct sctp_assoc_value instead
[  618.844411][   T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  618.900625][   T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  618.931330][   T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  619.053792][T27373] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.5852'.
[  619.076280][T27373] netlink: Unknown conntrack attr (type=2304, max=9)
[  619.222504][   T51] Bluetooth: hci2: command tx timeout
[  619.235962][T25096] hsr_slave_0: left promiscuous mode
[  619.245580][T25096] hsr_slave_1: left promiscuous mode
[  619.429730][T27387] netlink: 'syz.5.5855': attribute type 62 has an invalid length.
[  619.772779][T27394] netlink: 'syz.5.5857': attribute type 2 has an invalid length.
[  619.901196][T27401] netlink: set zone limit has 4 unknown bytes
[  619.959341][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'.
[  620.133416][T27411] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  620.146674][T27413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5862'.
[  620.248633][T27411] syzkaller0: entered promiscuous mode
[  620.271921][T27411] syzkaller0: entered allmulticast mode
[  620.307663][T27301] chnl_net:caif_netlink_parms(): no params data found
[  620.645404][T27301] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.652931][T27301] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.661386][T27301] bridge_slave_0: entered allmulticast mode
[  620.671517][T27301] bridge_slave_0: entered promiscuous mode
[  620.688609][T27301] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.696313][T27301] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.705834][T27301] bridge_slave_1: entered allmulticast mode
[  620.715460][T27301] bridge_slave_1: entered promiscuous mode
[  620.809195][T25096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  620.822650][T25096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.834067][T25096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  620.933870][T27301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.103817][T25096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  621.136409][T25096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.159254][T25096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  621.209864][T27301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.295562][T27446] syzkaller0: entered promiscuous mode
[  621.301766][T27446] syzkaller0: entered allmulticast mode
[  621.302966][   T51] Bluetooth: hci2: command tx timeout
[  623.220673][T25096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.231364][T25096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.241897][T25096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  623.284059][T27475] __nla_validate_parse: 2 callbacks suppressed
[  623.284081][T27475] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5879'.
[  623.302492][T27475] bridge_slave_1: default FDB implementation only supports local addresses
[  623.372428][T27301] team0: Port device team_slave_0 added
[  623.382015][ T5141] Bluetooth: hci2: command tx timeout
[  623.399643][T27301] team0: Port device team_slave_1 added
[  623.464353][T25096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.492509][T25096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.504683][T25096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  623.609054][T27492] macvlan0: entered promiscuous mode
[  623.698175][T27301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.732598][T27496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5885'.
[  623.740082][T27301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.789034][T27301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.829507][T27496] team0 (unregistering): Port device team_slave_0 removed
[  623.860804][T27496] team0 (unregistering): Port device team_slave_1 removed
[  623.874742][T27301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.886774][T27301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.914787][T27301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.128989][T27301] hsr_slave_0: entered promiscuous mode
[  624.145997][T27301] hsr_slave_1: entered promiscuous mode
[  624.158195][T27301] debugfs: 'hsr0' already exists in 'hsr'
[  624.164216][T27301] Cannot create hsr debugfs directory
[  624.377514][T25096] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  624.393898][T25096] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  624.408690][T25096] bridge0: port 3(wlan0) entered disabled state
[  624.434076][T25096] veth5: left allmulticast mode
[  624.446062][T25096] veth5: left promiscuous mode
[  624.452255][T25096] bridge2: port 1(veth5) entered disabled state
[  624.510421][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  624.655030][T27525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5892'.
[  625.128005][T25096] bond6 (unregistering): (slave ip6erspan0): Releasing active interface
[  625.420252][T25096] bond4 (unregistering): (slave gretap2): Releasing active interface
[  625.472902][ T5141] Bluetooth: hci2: command tx timeout
[  625.887953][T25096] bond0 (unregistering): Released all slaves
[  625.898371][T25096] bond1 (unregistering): Released all slaves
[  625.911768][T25096] bond2 (unregistering): Released all slaves
[  625.926379][T25096] bond3 (unregistering): Released all slaves
[  625.951470][T25096] bond4 (unregistering): Released all slaves
[  625.970065][T25096] bond5 (unregistering): Released all slaves
[  625.986883][T25096] bond6 (unregistering): Released all slaves
[  626.215456][T25096] tipc: Left network mode
[  626.280720][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'.
[  626.703488][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'.
[  626.715830][T27586] x_tables: unsorted entry at hook 2
[  626.765123][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'.
[  626.779914][T27594] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5901'.
[  626.822298][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'.
[  626.877621][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'.
[  626.910001][T27591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5902'.
[  627.517820][T27610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.594734][T27613] syzkaller0: entered promiscuous mode
[  627.600253][T27613] syzkaller0: entered allmulticast mode
[  627.643145][T27610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  627.729247][T27617] ip6tnl0: Caught tx_queue_len zero misconfig
[  627.760077][T27301] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  627.810603][T25096] hsr_slave_0: left promiscuous mode
[  627.827270][T25096] hsr_slave_1: left promiscuous mode
[  627.852512][T25096] bridge_slave_1: left allmulticast mode
[  627.863707][T25096] bridge_slave_1: left promiscuous mode
[  627.869321][T25096] veth1_vlan: left promiscuous mode
[  628.324121][T27613] tipc: Resetting bearer <eth:syzkaller0>
[  628.337883][T27301] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  628.352811][T27301] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  628.384782][T27609] tipc: Resetting bearer <eth:syzkaller0>
[  628.425940][T27609] tipc: Disabling bearer <eth:syzkaller0>
[  628.445699][T27301] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  628.486705][T27634] __nla_validate_parse: 32 callbacks suppressed
[  628.486727][T27634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5911'.
[  628.537941][T27634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5911'.
[  628.702858][T27642] syzkaller0: entered promiscuous mode
[  628.709178][T27642] syzkaller0: entered allmulticast mode
[  628.882104][T27301] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.939634][T27301] 8021q: adding VLAN 0 to HW filter on device team0
[  628.967452][T27662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  629.009422][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.016686][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  629.069690][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.077052][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.456690][T27643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.517934][T27301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.589956][T27301] veth0_vlan: entered promiscuous mode
[  629.606191][T27301] veth1_vlan: entered promiscuous mode
[  629.653880][T27301] veth0_macvtap: entered promiscuous mode
[  629.676055][T27301] veth1_macvtap: entered promiscuous mode
[  629.706141][T27301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.725386][T27301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.741437][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.755610][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.779191][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.800788][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.022005][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms
[  630.030206][    C0] lec:lec_tx_timeout: lec0
[  631.623524][T27644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  631.841488][ T8139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.859793][ T8139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.936270][T25093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.947446][T25093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.101343][T27761] netlink: 'syz.3.5832': attribute type 15 has an invalid length.
[  632.111719][T27763] netlink: 'syz.4.5931': attribute type 13 has an invalid length.
[  632.133866][T27761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5832'.
[  632.484610][T24030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  632.494740][T24030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  632.504190][T24030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  632.512431][T24030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  632.520389][T24030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  632.565861][T27785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5938'.
[  632.587808][T27784] netlink: 'syz.3.5937': attribute type 2 has an invalid length.
[  632.666577][T27777] ip6_vti0 speed is unknown, defaulting to 1000
[  632.750994][T27794] delete_channel: no stack
[  633.250073][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5946'.
[  633.270741][T27777] lo speed is unknown, defaulting to 1000
[  633.409559][T27807] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  633.704335][T27777] chnl_net:caif_netlink_parms(): no params data found
[  633.981683][T27839] IPVS: set_ctl: invalid protocol: 4 172.30.1.6:20000
[  634.087653][T27777] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.098016][T27777] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.109849][T27777] bridge_slave_0: entered allmulticast mode
[  634.142170][T27777] bridge_slave_0: entered promiscuous mode
[  634.207093][T27845] bond13: entered promiscuous mode
[  634.214404][T27777] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.221550][T27777] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.230507][T27777] bridge_slave_1: entered allmulticast mode
[  634.238263][T27777] bridge_slave_1: entered promiscuous mode
[  634.249508][T27845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'.
[  634.252566][T27849] macvlan2: entered promiscuous mode
[  634.265459][T27849] macvlan2: entered allmulticast mode
[  634.271961][T27849] bond13: (slave macvlan2): Opening slave failed
[  634.297201][T27853] sit0: mtu less than device minimum
[  634.330667][T27777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.359733][T27777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.467257][T27777] team0: Port device team_slave_0 added
[  634.481654][T27777] team0: Port device team_slave_1 added
[  634.532313][T27777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.540030][T27777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.571432][T27777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.584888][ T5141] Bluetooth: hci4: command tx timeout
[  634.596757][T27777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.604050][T27777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.634679][T27777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.655391][T27859] mac80211_hwsim hwsim29 wlan0: Caught tx_queue_len zero misconfig
[  634.787116][T27777] hsr_slave_0: entered promiscuous mode
[  634.796989][T27777] hsr_slave_1: entered promiscuous mode
[  634.803784][T27777] debugfs: 'hsr0' already exists in 'hsr'
[  634.809646][T27777] Cannot create hsr debugfs directory
[  635.033446][T27895] netlink: 264 bytes leftover after parsing attributes in process `syz.4.5967'.
[  635.262549][T27901] IPv6: NLM_F_REPLACE set, but no existing node found!
[  635.558034][T27920] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5973'.
[  635.658918][T27928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5977'.
[  635.685228][T27920] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.693308][T27920] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.908237][T27932] bridge0: Caught tx_queue_len zero misconfig
[  636.019607][T27940] syzkaller0: entered promiscuous mode
[  636.062538][T27940] syzkaller0: entered allmulticast mode
[  636.137017][T27940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.147262][T27940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.207052][T27939] tipc: Resetting bearer <eth:syzkaller0>
[  636.260123][T27939] tipc: Disabling bearer <eth:syzkaller0>
[  636.422452][T27962] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5989'.
[  636.440544][T27962] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5989'.
[  636.444548][T27777] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  636.481610][T27777] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  636.523396][T27777] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  636.533187][T27967] netlink: 'syz.4.5990': attribute type 1 has an invalid length.
[  636.540985][T27967] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5990'.
[  636.569960][T27967] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5990'.
[  636.580369][T27777] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  636.582477][T27967] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5990'.
[  636.662715][ T5141] Bluetooth: hci4: command tx timeout
[  636.904775][T27995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'.
[  636.906935][T27777] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.999244][T27777] 8021q: adding VLAN 0 to HW filter on device team0
[  637.074285][T25093] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.081541][T25093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.155025][T27711] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.162299][T27711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.940611][T27777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.089510][T28013] infiniband 
: set down
[  638.095909][T28049] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.103391][T28049] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.110651][T28013] infiniband 
: added ipvlan0
[  638.154297][T28055] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.161477][T28055] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.169044][T28055] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.169368][T28013] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  638.176247][T28055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.198833][T28013] infiniband 
: Couldn't open port 1
[  638.202516][T28055] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.211442][T28055] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.263788][T28013] RDS/IB: 
: added
[  638.304923][T27777] veth0_vlan: entered promiscuous mode
[  638.313736][T28013] smc: adding ib device 
 with port count 1
[  638.316874][T28060] sctp: [Deprecated]: syz.4.6009 (pid 28060) Use of struct sctp_assoc_value in delayed_ack socket option.
[  638.316874][T28060] Use struct sctp_sack_info instead
[  638.320468][T28013] smc:    ib device 
 port 1 has no pnetid
[  638.327589][T27777] veth1_vlan: entered promiscuous mode
[  638.444866][T27777] veth0_macvtap: entered promiscuous mode
[  638.481345][T27777] veth1_macvtap: entered promiscuous mode
[  638.533215][T27777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.592850][T27777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.636335][T25098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.657191][T25098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.723061][T25098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.743247][ T5141] Bluetooth: hci4: command tx timeout
[  638.796156][T25098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.051066][ T8139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.092862][ T8139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.254245][T25093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.276601][T28060] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  639.286941][T25093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.619421][T28095] syzkaller0: entered promiscuous mode
[  639.642517][T28095] syzkaller0: entered allmulticast mode
[  639.724992][T28096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.732779][T28098] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  639.750446][T28095] vlan2: entered promiscuous mode
[  639.757567][   T49] ------------[ cut here ]------------
[  639.758738][T28095] bridge0: entered promiscuous mode
[  639.763498][   T49] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[  639.763540][   T49] WARNING: net/mac80211/tx.c:760 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#0: kworker/u8:3/49
[  639.793269][   T49] Modules linked in:
[  639.797571][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  639.807023][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  639.817201][   T49] Workqueue: events_unbound cfg80211_wiphy_work
[  639.823552][   T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760
[  639.830024][   T49] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 01 48 ab f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 9e 43 ab f6 e9
[  639.849706][   T49] RSP: 0018:ffffc90000ba7440 EFLAGS: 00010293
[  639.855845][   T49] RAX: ffffffff8b18f70f RBX: ffffffff9021e310 RCX: 0000000000000005
[  639.863882][   T49] RDX: ffff888052197784 RSI: ffff88803feb5808 RDI: ffffffff9021e310
[  639.871919][   T49] RBP: ffffc90000ba75a8 R08: ffff888078daa9c7 R09: 1ffff1100f1b5538
[  639.880200][   T49] R10: dffffc0000000000 R11: ffffed100f1b5539 R12: dffffc0000000000
[  639.888246][   T49] R13: 0000000000000001 R14: ffff88803feb5808 R15: ffff888052197784
[  639.896282][   T49] FS:  0000000000000000(0000) GS:ffff8881254ae000(0000) knlGS:0000000000000000
[  639.905279][   T49] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  639.911937][   T49] CR2: 00007ffaa3b456b8 CR3: 0000000027ef4000 CR4: 00000000003526f0
[  639.919946][   T49] Call Trace:
[  639.923306][   T49]  <TASK>
[  639.926370][   T49]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  639.932525][   T49]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[  639.938721][   T49]  invoke_tx_handlers_late+0xba/0x18a0
[  639.944449][   T49]  ? invoke_tx_handlers_early+0xa0c/0x1d50
[  639.950391][   T49]  ieee80211_tx+0x2d7/0x4b0
[  639.955010][   T49]  ? __pfx_ieee80211_tx+0x10/0x10
[  639.960194][   T49]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  639.966259][   T49]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[  639.972391][   T49]  ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[  639.979192][   T49]  ieee80211_scan_state_send_probe+0x594/0xa00
[  639.985455][   T49]  ? try_to_wake_up+0x7fc/0x1390
[  639.990439][   T49]  ieee80211_scan_work+0x64d/0x1c60
[  639.995833][   T49]  cfg80211_wiphy_work+0x2ab/0x450
[  640.000984][   T49]  ? process_scheduled_works+0xa0f/0x17a0
[  640.006813][   T49]  process_scheduled_works+0xaec/0x17a0
[  640.012452][   T49]  ? __pfx_process_scheduled_works+0x10/0x10
[  640.018480][   T49]  ? assign_work+0x3d5/0x5e0
[  640.023186][   T49]  worker_thread+0xa50/0xfc0
[  640.027857][   T49]  kthread+0x388/0x470
[  640.031999][   T49]  ? __pfx_worker_thread+0x10/0x10
[  640.037170][   T49]  ? __pfx_kthread+0x10/0x10
[  640.041853][   T49]  ret_from_fork+0x51e/0xb90
[  640.046479][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  640.051635][   T49]  ? __switch_to+0xc7d/0x1400
[  640.056437][   T49]  ? __pfx_kthread+0x10/0x10
[  640.061114][   T49]  ret_from_fork_asm+0x1a/0x30
[  640.066112][   T49]  </TASK>
[  640.069175][   T49] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  640.076487][   T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  640.085915][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  640.096045][   T49] Workqueue: events_unbound cfg80211_wiphy_work
[  640.102340][   T49] Call Trace:
[  640.105650][   T49]  <TASK>
[  640.108618][   T49]  vpanic+0x1e0/0x670
[  640.112651][   T49]  panic+0xc5/0xd0
[  640.116441][   T49]  ? __pfx_panic+0x10/0x10
[  640.120936][   T49]  ? ret_from_fork_asm+0x1a/0x30
[  640.126016][   T49]  __warn+0x315/0x4a0
[  640.130041][   T49]  ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[  640.136068][   T49]  ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[  640.141932][   T49]  __report_bug+0x29a/0x540
[  640.146486][   T49]  ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760
[  640.152335][   T49]  ? __pfx___report_bug+0x10/0x10
[  640.157397][   T49]  ? stack_trace_save+0xa9/0x100
[  640.162483][   T49]  ? kasan_save_track+0x4f/0x80
[  640.167382][   T49]  ? kasan_save_track+0x3e/0x80
[  640.172371][   T49]  ? __kasan_slab_alloc+0x6c/0x80
[  640.177439][   T49]  report_bug_entry+0x19a/0x290
[  640.182424][   T49]  ? ieee80211_tx_h_rate_ctrl+0xded/0x1760
[  640.188275][   T49]  ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760
[  640.194148][   T49]  handle_bug+0xca/0x200
[  640.198439][   T49]  exc_invalid_op+0x1a/0x50
[  640.203163][   T49]  asm_exc_invalid_op+0x1a/0x20
[  640.208046][   T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760
[  640.214538][   T49] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 01 48 ab f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 9e 43 ab f6 e9
[  640.234207][   T49] RSP: 0018:ffffc90000ba7440 EFLAGS: 00010293
[  640.240315][   T49] RAX: ffffffff8b18f70f RBX: ffffffff9021e310 RCX: 0000000000000005
[  640.248328][   T49] RDX: ffff888052197784 RSI: ffff88803feb5808 RDI: ffffffff9021e310
[  640.256342][   T49] RBP: ffffc90000ba75a8 R08: ffff888078daa9c7 R09: 1ffff1100f1b5538
[  640.264446][   T49] R10: dffffc0000000000 R11: ffffed100f1b5539 R12: dffffc0000000000
[  640.272447][   T49] R13: 0000000000000001 R14: ffff88803feb5808 R15: ffff888052197784
[  640.280542][   T49]  ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760
[  640.286387][   T49]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  640.292510][   T49]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[  640.298758][   T49]  invoke_tx_handlers_late+0xba/0x18a0
[  640.304236][   T49]  ? invoke_tx_handlers_early+0xa0c/0x1d50
[  640.310149][   T49]  ieee80211_tx+0x2d7/0x4b0
[  640.314663][   T49]  ? __pfx_ieee80211_tx+0x10/0x10
[  640.319734][   T49]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  640.325713][   T49]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[  640.331539][   T49]  ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[  640.337950][   T49]  ieee80211_scan_state_send_probe+0x594/0xa00
[  640.344117][   T49]  ? try_to_wake_up+0x7fc/0x1390
[  640.349107][   T49]  ieee80211_scan_work+0x64d/0x1c60
[  640.354334][   T49]  cfg80211_wiphy_work+0x2ab/0x450
[  640.359451][   T49]  ? process_scheduled_works+0xa0f/0x17a0
[  640.365176][   T49]  process_scheduled_works+0xaec/0x17a0
[  640.370750][   T49]  ? __pfx_process_scheduled_works+0x10/0x10
[  640.376741][   T49]  ? assign_work+0x3d5/0x5e0
[  640.381344][   T49]  worker_thread+0xa50/0xfc0
[  640.386050][   T49]  kthread+0x388/0x470
[  640.390149][   T49]  ? __pfx_worker_thread+0x10/0x10
[  640.395261][   T49]  ? __pfx_kthread+0x10/0x10
[  640.399901][   T49]  ret_from_fork+0x51e/0xb90
[  640.404507][   T49]  ? __pfx_ret_from_fork+0x10/0x10
[  640.409621][   T49]  ? __switch_to+0xc7d/0x1400
[  640.414304][   T49]  ? __pfx_kthread+0x10/0x10
[  640.418909][   T49]  ret_from_fork_asm+0x1a/0x30
[  640.423695][   T49]  </TASK>
[  640.426876][   T49] Kernel Offset: disabled
[  640.431200][   T49] Rebooting in 86400 seconds..