last executing test programs:

3.69468038s ago: executing program 2 (id=4131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0xff11}, 0x20)

3.513218659s ago: executing program 2 (id=4134):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000880)={{<r2=>0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x2, &(0x7f0000000280)={@align=0x558, {0x5, 0xfffd, 0x1, 0x6}}, 0xff, &(0x7f00000002c0), &(0x7f0000000300)=0xea}, 0x5, &(0x7f00000007c0)=[{0x3, 0xfffffffe, &(0x7f0000000340)='(}-\x00', &(0x7f0000000380)="799e2f7f57c98541a2df637a0ad6c02bbb1f2a5d042740a081b70a3eed24708634420d001aa886b7666d8f9ef3a719a04808d0ed3d42c80631a5f4c4c5798963c7b042cbf39b32", 0x47, 0x8}, {0x2, 0xb3, &(0x7f0000000400)='\x00', &(0x7f0000000440)="4a6adc85561b0e61b67c3ac6aebd7d52168af25bde9df967a92ca83f436d12b25eea07ef689a5802e1094a429d75a6e4de4afa07fec22a65ff9edcb97bcfde8efbba757944ee37f6c3181528637e3db96da4a94e73b92061956418155d2d474b56eb3ec34e830e187c1bb81776c9ecafce6acc10c2428e6acdcd696f", 0x7c}, {0x3, 0x8, &(0x7f00000004c0)='\b\x99--\xd4\x00', &(0x7f0000000500)="3cd0cb19cb543ed9dedb2f7dfc958fd7b0c64ff8a0cee2a34c2bc05b62987d4080e52de925789db2a06cc7efeff9198f0b57932c99d04d329077fc900ed4b006f43ee9b206571f95647b26d0e4cd980a11ac76d242ed952bbeeb47ea0291537512d7a56c6bfae22280007d1ef07ed98b4bada6363b95e99293404443351e1be552746e0de5a2de97a1ed01ea2186eba1eeb4cdb12c7a6e923e421aa55164e7c31d6844f2759968422afe6e8fa485", 0xae}, {0x2, 0x3, &(0x7f00000005c0)='#-^\x83\xd1{&\x00', &(0x7f0000000600)="e9ef8b936c219b87c3e2fa9b52579251687d13f5b2d22181068daa106f3b9de12c1544b7650603c821f27ea49ded3e59f8ee95cec8a4b79f533ed8db45886c5f51318d695996a46e1b62b813c91778841f98a299a7d2d9ec1cbdcb933224b9969cbc5a9abfde2245f06b511fee9e415c0a084758f0b5b13e8e4429ed0a3740210150c6d5f257084c38c1ccc07f8759261401c1445fb0008d274e7c9b29363e93c596c8ff0a63218234282e6cfefbd2e1e8443cb092184aa6b2d2d311c2fef2bd76ddd3e02060a81ea6dee54b642b527b7df4f86e0ac5d6edffd932da", 0xdc, 0x18}, {0x2, 0xffff, &(0x7f0000000700)='{\x00', &(0x7f0000000740)="279d79ffff56f78e48d99382d5bbf489a5eb45deefcd383547c80efcb1944be6062c86caea0a7c7028cfba30aaf53bbfe40a94cd006c7b1365923f1c3c5ed701e9a3f0f0a3b6", 0x46}]})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)={<r3=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000810)
socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}}, 0x1)
ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000b80))
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000c00), &(0x7f0000000c40)=0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), r5)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x188, r4, 0xd12, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cbeb1bf600fafa70a06606afaafaaa30"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "47a72e307b6050f99e715505c569787060963a548a7abfe837573ca2e801e11a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c2bb1b7cc24d315db9b29907c2118123"}]}, @NL802154_ATTR_SEC_KEY={0xfc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8aa3efc04ce8bf3ad035f777b636b5267eafe8d42c83340e6b2c56de2bfdcb41"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "24911d10f4101fcfc80e81b431918193"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4040c8683e3ec02158384717776aba2f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b1ef3a78c81e0fa12b07b917216d8b16"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4d3de5321ef9d7b3c0ea4c32f054fb12826d7ad47e0d351380a36104e64ba95e"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r2)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xdc, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24040001}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r2)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000001180), &(0x7f00000011c0)=0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff6992}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000001)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r3)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r7, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x59}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x78, r6, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x87}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x38f8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc800}, 0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000015c0)={<r9=>0x0, @in={{0x2, 0x4e20, @local}}, [0x4, 0xfffffffffffffffb, 0x401, 0xa, 0x2, 0x8, 0x0, 0xe, 0x7, 0xc0f6, 0x0, 0x6, 0x2, 0x8000000000000001, 0x80000000]}, &(0x7f00000016c0)=0x100)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001700)={0x8, 0x8002, 0xd, 0x14, <r10=>r9}, &(0x7f0000001740)=0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), r2)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40b494b1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f00000018c0), r2)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001900)=@assoc_value={r10, 0x3}, 0x8)

3.346550277s ago: executing program 3 (id=4136):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00', 0xa}, {0xa, 0x4e21, 0x8, @mcast1, 0x8bb}, 0x0, {[0x8, 0x8, 0x0, 0xff9f, 0x0, 0x2227, 0x0, 0x3]}}, 0x5c)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000001c0)=0x6, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000040000000000ff020000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r3], 0x138}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in=@broadcast, 0x4e24, 0x6, 0x4e21, 0x5, 0xa, 0x0, 0x20, 0xdd, 0x0, 0xee00}, {0x1, 0x2, 0x9, 0x0, 0x9, 0x3, 0x9, 0x4}, {0xff, 0x1, 0x8297, 0xe}, 0x2, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private1, 0x4d4, 0x3c}, 0x2, @in=@private=0xa010102, 0x34ff, 0x0, 0x0, 0x1, 0x8, 0xfffffff8, 0x1}}, 0xe8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000100)={@void, @void, @llc={@snap={0xaa, 0x1, 'V', "371842", 0xe8f1, "ef4f3b47f9e5a593df29"}}}, 0x12)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

3.202204233s ago: executing program 4 (id=4137):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r0})
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f00000000c0), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$inet6(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700001dcdf254f00000008000300", @ANYRES32=r8, @ANYBLOB="38007a80320002"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.038201755s ago: executing program 2 (id=4139):
r0 = socket(0x22, 0x1, 0x200)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x5050)

2.724194412s ago: executing program 2 (id=4142):
r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async, rerun: 64)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42, 0x3}}}, 0x10) (async, rerun: 64)
getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg$unix(r0, &(0x7f0000002640)={&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000002580)=[{&(0x7f0000001100)=""/225, 0xe1}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/231, 0xe7}, {&(0x7f0000002300)=""/167, 0xa7}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)=""/190, 0xbe}, {&(0x7f0000002500)=""/105, 0x69}], 0x7, &(0x7f0000002600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x8040) (async)
close(r2) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket(0xa, 0x3, 0xff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
sendmsg$inet6(r5, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x20}, {&(0x7f0000000200)="9efe8000000000002bdfe52c1f51218206f5abfd2a00"/33, 0x21}], 0x2}, 0x20008b88)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000000)={r7, 0x2}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={r7, @in={{0x2, 0x4e20, @broadcast}}, [0x2d0, 0x1, 0x80, 0x8, 0x10000, 0x401, 0x10001, 0x0, 0x9, 0xb3e, 0x7, 0x80000001, 0x7]}, &(0x7f0000000100)=0x100)

2.721925917s ago: executing program 0 (id=4143):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000011600)={0x0, 0x0, &(0x7f00000115c0)={&(0x7f0000011580)={0x20, 0x1410, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}}, 0x4880)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x7a, "2e9ee5e3b160d318a14c9ee591c481da771acf6ed8a571dbe7a54ca35a52061f8ae87e393bf8e1ce7eb245146d79f436ca91a97a1d20096676259363a974b0b28b11482ff8595253cf98c48c4423a71d4f687e8f09223677411aa6f7ac6387b8c00a4eb655d28ef2423f089e06a9923fed6175046e47ebf47dce"}, &(0x7f0000000140)=0x9e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff8b}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000005c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x100}, 0x20008801)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x312}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x318}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x407f9c446931dc6d}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1c1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7c31}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xa547, 0x3]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x6}, @CTA_LABELS_MASK={0x14, 0x17, [0x810, 0x2, 0xbc, 0x9]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2f9}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc01}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x880}, 0x10)

2.631603876s ago: executing program 4 (id=4144):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r0, &(0x7f0000001480)=0x80000000003, 0x12)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="4c00000011000f140011000200000f0002000000200000", 0x17)

2.631133233s ago: executing program 3 (id=4145):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='bridge0\x00') (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000280))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) (async)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x0, 0x0})

2.504639743s ago: executing program 0 (id=4146):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x203a, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x28}, 0x94)

2.380400406s ago: executing program 0 (id=4147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000f40)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000300)=0x2a0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={@mcast1, @loopback, @private1, 0x5, 0x6, 0x0, 0x0, 0x5, 0x86020182, r5})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.264949089s ago: executing program 4 (id=4148):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) (async, rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) (async, rerun: 32)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 32)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x2f, 0x30, 0x4}, 0x20)
connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x2004}) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @multicast1}, &(0x7f0000000180)=0xc) (async)
epoll_pwait(r6, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) (async, rerun: 32)
r8 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32)
sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000240)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000000c0)=0x1, 0x4)

2.240868708s ago: executing program 3 (id=4149):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r3=>0x0)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, 0x42, 0x10, 0x70bd27, 0x25dfdbfd, {0x1}, [@generic="7a4092177d5ce0283eb2474efc23121dd4f174146d9af26c8a28ce4a9a52980dffbdb3ddcd1e1158da6e120121ba7b63d4077270c9d562ba0f4d54", @generic="feec6f816242628525ec76a6", @generic="abc4bd7da2fc9562b08e7c4055aa5f40a7604bc98abcff39c11d9742cb5fcfdf4c6a5a30c884b46bd61911b1ff1ae27d935435ce939ea1cc0b6fff9316b5ecab086c05268c7664d09a2b71836cff192dcf176f909e44156e61e0ec12633d51af33f1620152acb69321417020f2ce82164dfb1410c658146bded904a1233a05a71e76887769a84cef22e36ad52250dc3c33", @typed={0x8, 0x10d, 0x0, 0x0, @fd=r2}, @generic="88afa7b36ade9ebf97f06e9ef0c5c71d1020b51802367d0ac6075fd2abc35aed39d725705fbdbc3d4c1ed6053a8af05e897de63886e4e029fb4bbad8", @typed={0x8, 0x103, 0x0, 0x0, @pid=r3}, @nested={0x9e, 0xbb, 0x0, 0x1, [@generic="0a240614d9a2e1faba5f081d2b4dcdfbca76040bd1c7cfda5e666562c9ac11aa3482d81dd0606af051cc5f025e070dae8f8e1af8671e2cf2ea3e68e2a5c672c7ab45cf235a53afc6f7a2cae91541be5938023494d41b299f064022ccb8f8ca8048259a28b1d0f487f57941c69694c882cbdd2b5f5d2345dbef9874f19f357dfeedce3cdddd2b", @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0x126, 0x0, 0x0, @pid}, @typed={0x4, 0x10a}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x240}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x22000000}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0040)

2.030336675s ago: executing program 0 (id=4151):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x68, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x200408c0}, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x29, 0x7, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b44040000efba00f50012050000004b73c8ac5d5352542e0178171074976455c13c"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

1.986107304s ago: executing program 3 (id=4153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

1.780444112s ago: executing program 1 (id=4154):
clock_gettime(0xaf098b49fff259ae, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x4, 0x9, 0x84, 0x81}, {0x1, 0x4, 0xf7, 0x7}, {0x8, 0x3, 0xf8, 0x480}, {0x5, 0x81, 0x0, 0x4}, {0x7, 0xe, 0xf, 0x4}, {0x1, 0x0, 0x43}, {0xec11, 0x7, 0x8, 0x2}, {0x8, 0x9, 0x5, 0xd}]}, 0x10)

1.780032485s ago: executing program 0 (id=4155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.779215471s ago: executing program 3 (id=4156):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848300000005e140602bde200030e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40044)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x4})
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r2, 0x29, 0x4e, 0x0, &(0x7f0000000bc0))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc1})

1.657323293s ago: executing program 2 (id=4157):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)=')]\x15,\x00', 0xc00, &(0x7f0000000040)={@_ha_fsid={[0x4c, 0x1]}, {0x8, 0x4, 0x4, 0x2}}, 0xfd9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x303, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6d358f16, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x46fa4d948f415479}, 0x40000) (async)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x303, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6d358f16, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x46fa4d948f415479}, 0x40000)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24048040)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001580)={{<r3=>r0, &(0x7f0000000480)='\x00', 0x200000, &(0x7f00000004c0)={@_ha_fsid={[0x1, 0x4]}, {0x4, 0x1, 0x60, 0xfffffffffffffff1}}, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4}, {[0x9, 0x7, 0x1000, 0x3]}, 0x7, 0x1000, &(0x7f0000000580)=""/4096})
syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), r0) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), r0)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x70, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb846}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3da32b352a1be8d5}, 0x0) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3da32b352a1be8d5}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000800)
ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000002ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002a80)={&(0x7f0000001a00)={0x1064, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1064}}, 0x8000)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002b40)) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002b40)=<r7=>0x0)
r8 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x120, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x120}}, 0x4000000)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d80), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002dc0)={'wpan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002dc0)={'wpan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002e00)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002e40)={'wpan1\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002e80)={'wpan4\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002ec0)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002ec0)={'wpan4\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000002f00)={'wpan3\x00', <r15=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000003000)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x64, r9, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4008045)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003080), r5) (async)
r16 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003080), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x1c, r16, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x1c, r16, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
syz_genetlink_get_family_id$tipc(&(0x7f0000003180), r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={<r17=>0xffffffffffffffff})
connect(r17, &(0x7f0000003200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x4, 0x4, 0x0, 0x1}}, 0x80) (async)
connect(r17, &(0x7f0000003200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x4, 0x4, 0x0, 0x1}}, 0x80)

1.548780205s ago: executing program 1 (id=4158):
socket$unix(0x1, 0x2, 0x0) (async)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x2, 0x2, 0x1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000007a00000000000095000000000000003d9ef3db9f69a8b756d1f1c4c7342339c034f2102480d9dab82f2ea7552b0d663e002733e00f3722361382b6dffb10dcef40e39ee8856ba638baa1d9c5dd8574c3777d3eaab2d7bdfeccf267e3faced5f43e9e86cdf229f2f50fc5bbd1"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)

1.402723559s ago: executing program 0 (id=4159):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x880, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x10, 0x2, 0x5, 0x3, 0x2, 0x1, 0x8, 0x1, 0xfe, 0x4], 0xff, [0xc, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x0, 0xd03, 0x0, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x0, 0xe, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x600000d0}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) (async)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.400170118s ago: executing program 3 (id=4160):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) (async)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000fd"], 0x50) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) (async, rerun: 32)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r4, 0x58, &(0x7f0000000600)}, 0x10) (async)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x12, 0x3, 0x0, 0x3a) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000020605000000000000000000000000000500010007000000050005000000000005000400000000000900020073797a310000000010000300686173683a69702c6d61630031bc894e828defd35c5f74306cd174251cb1aeb31954a039d0982224e309c8ca7621d74f08c2b6aaa677fe626239f963fe3a0662bfe3dc36cf313e5cd70e2f2675215edd1fc73cb98952ea90e5d8c9ad8753ab13331b0c322ecf980d62ea1f999f69e1ce3afbce71f7b4607b394ba08b408e8982a69c3ec18e43c68e3649135c646db9a0b7c052cc3a6abd4050175be229d2204a68ad05f7f569"], 0x48}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0}) (async, rerun: 32)
r9 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32)
connect$can_bcm(r9, &(0x7f0000000280), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="000400a57908"], 0x80}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x24, 0x26, 0x309, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffe0, 0xb}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000d0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) (async)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r13, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x12, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ecffffffffffffffffffffdeb364fec55b00", @ANYRES32=r8, @ANYBLOB="080026006c09000008002700000000000800a100000000000500180101000000"], 0x3c}}, 0x884)

1.200928317s ago: executing program 1 (id=4161):
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffff, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
socket(0x15, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

941.322373ms ago: executing program 1 (id=4162):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={<r2=>0x0, 0x49, 0x5}, &(0x7f00000003c0)=0xc)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r3, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x24004004)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0x40}, &(0x7f0000000040)=0x8)

822.532405ms ago: executing program 1 (id=4163):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x208, 0x0, 0xfeffffff, 0x208, 0xf8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x1, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0xd, 'uP'}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x24, @loopback, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0))

787.141644ms ago: executing program 4 (id=4164):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_eeprom={0x7, 0xd, 0x200, 0xbe, "6aca7e531db37c93de98253f4f49daa9cf17dfcd2a2b98552d6bc61e769b65b16f944d2bb415b7bdcab634039e85c33ad656f6c0ff65877e235a3b9c887bdafab28ec23e486073ab65bcc08461543ec6de474d5ff6ca2a8b3f9ac9b7b857f93b28198764266f562a99b6455377dbbb288b19120d78953acdae541f6e8ff84767b69690b00cab032dbc8c2734d63e92dfaa9983f1a18b95921faf4dc649e8edd5604ab86d086a9fc1d5b407941185c36b712ff0f63d64aaa6b46c5341d579"}})
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_eeprom={0x7, 0xd, 0x200, 0xbe, "6aca7e531db37c93de98253f4f49daa9cf17dfcd2a2b98552d6bc61e769b65b16f944d2bb415b7bdcab634039e85c33ad656f6c0ff65877e235a3b9c887bdafab28ec23e486073ab65bcc08461543ec6de474d5ff6ca2a8b3f9ac9b7b857f93b28198764266f562a99b6455377dbbb288b19120d78953acdae541f6e8ff84767b69690b00cab032dbc8c2734d63e92dfaa9983f1a18b95921faf4dc649e8edd5604ab86d086a9fc1d5b407941185c36b712ff0f63d64aaa6b46c5341d579"}}) (async)

456.544255ms ago: executing program 2 (id=4165):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0xfffff96d, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r3 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000100), 0x4)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000011401002cbd7000fcdbdf25cb597a0409479c37b2847852795f8cffd4284eb8c7f4d78673b3a2d3f08f5705bf0bc510b8e80000897c0485022e261b478702a80bcb1d5af2e7a96356fe645407d89681bc5e8b78dc4ee02f66ea27d72d5e243725af6c06dba6e69967e8954517c5e2f4c8666181e70605a5d631ab8eafe8fb1e291163e49758fe1ae458b0ed08bd6d708256a6a3c33fefa65228f2cb91fae61e06aea1139339ab7a7ecb483e14edd4391c87820d34f836cf9273962f7060d7729e250e1eecb44be3f35e3006747d62c6a98215f2acfbe6"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x21, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

326.155878ms ago: executing program 4 (id=4166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000044)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="200000001100818804", 0x9}], 0x1}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x0, 0x1, {0xa, 0x4a21, 0x80000001, @empty, 0x3}}}, 0x32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000044) (async)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="200000001100818804", 0x9}], 0x1}, 0x0) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x0, 0x1, {0xa, 0x4a21, 0x80000001, @empty, 0x3}}}, 0x32) (async)

210.109981ms ago: executing program 1 (id=4167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_int(r2, 0x1, 0x26, 0x0, &(0x7f0000000080))
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a)

0s ago: executing program 4 (id=4168):
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="b73d61b1ffffbbbbbbbbbbff86dd6002000000000000fe8000000000000000000000000000aafe80000000000000000000000b00"/62], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002abd5624adbe306e53f13fdbc3cf7000fbdbdf25020000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4004001)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$kcm(0xa, 0x1, 0x106)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1)
sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040048}, 0x20000004)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200b, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefcb)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0x1c)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4000000)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01d21ad08778f73c993dac00000502000000"], 0x18}}, 0x44000)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000000000000a004e22000000050000000000000000000000000000000103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000001000000052000"], 0x310)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x24}, 0x94)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000700)={'erspan0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001c00010027bd7000ffdbdf2507000000", @ANYRES32=r12, @ANYBLOB="8000b60408001a1dbf0fbbc5"], 0x24}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14)
ioctl$XFS_IOC_GETBMAPX(r11, 0xc0205838, &(0x7f0000000640)={0x5, 0x2, 0xfffffffffffffff9, 0x4, 0xfffffffa, 0x20})

kernel console output (not intermixed with test programs):

ckets.
[  439.897857][T17702] bond21 (unregistering): Released all slaves
[  440.149476][T17504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.149513][T17504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.149538][T17504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  440.166994][ T5618] Bluetooth: hci5: command tx timeout
[  440.511726][T17504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.511792][T17504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.511852][T17504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  440.792995][T17504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.793033][T17504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.793057][T17504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  441.057994][T17504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.058029][T17504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.058060][T17504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  441.128660][T17749] netlink: 'syz.2.2987': attribute type 1 has an invalid length.
[  441.185587][T17749] 8021q: adding VLAN 0 to HW filter on device bond10
[  441.270455][T17745] ip6gre2: entered allmulticast mode
[  441.301740][ T9859] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  441.432276][T17756] netlink: 'syz.0.2989': attribute type 16 has an invalid length.
[  441.439183][T17756] veth0_macvtap: entered allmulticast mode
[  441.613509][T17763] x_tables: unsorted underflow at hook 4
[  441.672073][T17758] tipc: MTU too low for tipc bearer
[  441.873487][T17504] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  441.914437][T17504] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  441.932825][T17504] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  441.980718][T17504] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.035205][T17504] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  442.086059][T17504] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.090291][T17504] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  442.116745][T17504] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.247474][ T5618] Bluetooth: hci5: command tx timeout
[  442.622709][T17815] Cannot find add_set index 4 as target
[  442.626674][T17813] Cannot find add_set index 4 as target
[  442.631194][T17504] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.636696][T17815] Bluetooth: hci0: unsupported parameter 5161
[  442.636735][T17815] Bluetooth: hci0: unsupported parameter 8192
[  442.636762][T17815] Bluetooth: hci0: unsupported parameter 5161
[  442.636796][T17815] Bluetooth: hci0: unsupported parameter 8192
[  442.670020][T17504] 8021q: adding VLAN 0 to HW filter on device team0
[  442.693989][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.696045][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.767794][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.767918][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.230541][T17830] Bluetooth: hci0: unsupported parameter 5161
[  443.230567][T17830] Bluetooth: hci0: unsupported parameter 8192
[  443.230579][T17830] Bluetooth: hci0: unsupported parameter 5161
[  443.230590][T17830] Bluetooth: hci0: unsupported parameter 8192
[  443.853629][T17856] 8021q: VLANs not supported on tunl0
[  444.129395][T17504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.459908][T17877] netlink: Conntrack attr has 4 unknown bytes
[  444.459943][T17877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.922984][T17893] __nla_validate_parse: 45 callbacks suppressed
[  444.923003][T17893] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3017'.
[  444.993674][T17504] veth0_vlan: entered promiscuous mode
[  445.029830][T17504] veth1_vlan: entered promiscuous mode
[  445.212975][T17504] veth0_macvtap: entered promiscuous mode
[  445.241211][T17504] veth1_macvtap: entered promiscuous mode
[  445.287959][T17906] netlink: 'syz.3.3021': attribute type 62 has an invalid length.
[  445.327456][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'.
[  445.390751][T17504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.430701][T17906] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3021'.
[  445.452371][T17504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.479774][T17906] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3021'.
[  445.555063][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.595465][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  445.657593][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.660426][ T1127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.691251][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.037860][ T9850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.037883][ T9850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.144870][ T9850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.144910][ T9850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.492181][T17938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2927'.
[  447.067232][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  447.071624][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  447.084367][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  447.106880][T17932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.107344][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  447.107341][T17932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.111596][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  447.342224][T17955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3031'.
[  447.432736][T17955] ip_tables: iptables: counters copy to user failed while replacing table
[  447.493446][T17955] netlink: 'syz.4.3031': attribute type 8 has an invalid length.
[  447.493722][T17955] sch_fq: defrate 0 ignored.
[  447.800436][T17932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.800496][T17932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.863738][T17966] ip_tables: iptables: counters copy to user failed while replacing table
[  447.960799][T17968] x_tables: duplicate entry at hook 2
[  447.963151][T17968] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3034'.
[  448.478287][T17932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.478357][T17932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.568636][T17979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3036'.
[  448.887875][T17932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.887934][T17932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.030928][T18004] vcan0: tx address claim with dest, not broadcast
[  449.196124][ T5618] Bluetooth: hci1: command tx timeout
[  449.242885][T18008] ipt_REJECT: TCP_RESET invalid for non-tcp
[  449.244210][T18008] netlink: 'syz.3.3042': attribute type 4 has an invalid length.
[  449.244229][T18008] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3042'.
[  449.340568][T17948] lo speed is unknown, defaulting to 1000
[  449.395267][T17948] wg0 speed is unknown, defaulting to 1000
[  449.419541][T17948] lo speed is unknown, defaulting to 1000
[  449.421661][T18014] netlink: Unknown NAT attribute (type=3843, max=9)
[  449.421691][T18014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.205364][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.205397][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.205430][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.205451][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.205481][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.205503][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.205532][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.205551][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.265344][T18039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3049'.
[  450.750901][T18055] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3051'.
[  450.750929][T18055] openvswitch: netlink: Message has 4 unknown bytes.
[  451.015797][T18063] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3046'.
[  451.275610][ T5618] Bluetooth: hci1: command tx timeout
[  451.413005][T17948] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.413116][T17948] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.413280][T17948] bridge_slave_0: entered allmulticast mode
[  451.446672][T17948] bridge_slave_0: entered promiscuous mode
[  451.463037][T17948] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.463143][T17948] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.463302][T17948] bridge_slave_1: entered allmulticast mode
[  451.489706][T17948] bridge_slave_1: entered promiscuous mode
[  451.542885][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.559165][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.603990][T17948] team0: Port device team_slave_0 added
[  451.650688][T17948] team0: Port device team_slave_1 added
[  451.689457][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.689475][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.689497][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.691394][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.691411][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.691433][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.314653][T17948] hsr_slave_0: entered promiscuous mode
[  452.324477][T17948] hsr_slave_1: entered promiscuous mode
[  452.351151][T17948] debugfs: 'hsr0' already exists in 'hsr'
[  452.351193][T17948] Cannot create hsr debugfs directory
[  452.610885][T18117] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3062'.
[  452.632174][T18116] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  453.159024][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'.
[  453.176652][T18134] netlink: 'syz.4.3068': attribute type 1 has an invalid length.
[  453.176676][T18134] netlink: 'syz.4.3068': attribute type 2 has an invalid length.
[  453.355002][ T5618] Bluetooth: hci1: command tx timeout
[  453.453887][T17948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.453925][T17948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.706073][T17948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.709306][T17948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.922416][T17948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.922451][T17948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.074865][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  454.084810][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  454.084841][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.085009][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  454.085022][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.133097][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  454.133136][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.133351][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  454.133367][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.133561][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  454.133576][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.133765][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.133958][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.179736][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.180283][T18164] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  454.261066][T17948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.261103][T17948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.409855][T18174] netlink: 'syz.2.3076': attribute type 1 has an invalid length.
[  454.410821][T18175] netlink: 'syz.2.3076': attribute type 1 has an invalid length.
[  454.561428][T18174] bond11: (slave gretap1): making interface the new active one
[  454.561968][T18174] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  454.596660][ T5618] Bluetooth: hci5: unexpected cc 0x2003 length: 0 < 9
[  454.699671][T18177] bond12 (unregistering): Released all slaves
[  454.757412][T18191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.788944][T18174] 8021q: adding VLAN 0 to HW filter on device bond11
[  454.917924][T17948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  454.949073][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.949967][T17948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  454.973267][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.982664][T17948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  454.999444][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  455.002254][T17948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  455.051321][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  455.270645][T17948] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.319442][T17948] 8021q: adding VLAN 0 to HW filter on device team0
[  455.357540][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.357685][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.445564][ T5618] Bluetooth: hci1: command tx timeout
[  455.482687][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.482882][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.535453][T18213] __nla_validate_parse: 29 callbacks suppressed
[  455.535473][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'.
[  455.989153][T18227] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3086'.
[  456.061789][T18232] IPVS: Unknown mcast interface: dvmrp1
[  456.082707][T18228] net_ratelimit: 25 callbacks suppressed
[  456.082756][T18228] netlink: Failed to add  helper -22
[  456.082853][T18228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.470379][T18244] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  457.097255][T18267] trusted_key: syz.4.3092 sent an empty control message without MSG_MORE.
[  457.101191][T17948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.113142][T18267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3092'.
[  457.542665][T17948] veth0_vlan: entered promiscuous mode
[  457.583620][T17948] veth1_vlan: entered promiscuous mode
[  457.615227][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'.
[  457.623303][T18281] netlink: 'syz.4.3097': attribute type 1 has an invalid length.
[  457.715304][T18278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3096'.
[  458.069704][T18297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3101'.
[  458.190842][T18294] netlink: 'syz.3.3100': attribute type 2 has an invalid length.
[  458.190866][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[  458.227137][T17948] veth0_macvtap: entered promiscuous mode
[  458.264021][T17948] veth1_macvtap: entered promiscuous mode
[  458.292034][T17948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.333982][T17948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.445414][ T9859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.446189][ T9859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.490954][ T9850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.515110][ T9850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.630880][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.630935][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.639920][ T5618] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  458.641060][ T5618] Bluetooth: hci5: Injecting HCI hardware error event
[  458.642801][ T5618] Bluetooth: hci5: hardware error 0x00
[  458.856213][T18311] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3105'.
[  458.908226][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.908247][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.913114][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'.
[  459.022626][T18311] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3105'.
[  459.612631][T18343] ip_tables: iptables: counters copy to user failed while replacing table
[  460.301843][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  460.314093][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  460.327432][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  460.344065][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  460.353446][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  460.536793][T18368] netlink: 'syz.0.3119': attribute type 21 has an invalid length.
[  460.891766][ T5618] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  461.456288][T18389] netlink: 'syz.1.3124': attribute type 2 has an invalid length.
[  461.456309][T18389] __nla_validate_parse: 6 callbacks suppressed
[  461.456320][T18389] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3124'.
[  461.572734][ T9859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.572771][ T9859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.070823][T18405] netlink: 'syz.4.3127': attribute type 29 has an invalid length.
[  462.073570][   T30] audit: type=1107 audit(1790354232.735:5): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  462.143636][ T9859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.143672][ T9859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.475561][ T5618] Bluetooth: hci0: command tx timeout
[  462.601064][ T9859] bond0: (slave netdevsim1): Releasing backup interface
[  462.652520][ T9859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.652581][ T9859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.759739][T18357] lo speed is unknown, defaulting to 1000
[  462.812757][T18357] wg0 speed is unknown, defaulting to 1000
[  463.262676][ T9859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.262710][ T9859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.333832][T18357] lo speed is unknown, defaulting to 1000
[  463.519556][T18447] syzkaller0: entered promiscuous mode
[  463.519582][T18447] syzkaller0: entered allmulticast mode
[  463.730296][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'.
[  463.851625][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'.
[  463.851663][T18461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'.
[  463.984447][T18455] vlan1: entered promiscuous mode
[  463.984475][T18455] gretap0: entered promiscuous mode
[  464.200748][   T30] audit: type=1804 audit(1790354234.865:6): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3140" name="/newroot/29/cgroup.controllers" dev="tmpfs" ino=168 res=1 errno=0
[  464.201749][   T30] audit: type=1800 audit(1790354234.865:7): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3140" name="cgroup.controllers" dev="tmpfs" ino=168 res=0 errno=0
[  464.555439][ T5618] Bluetooth: hci0: command tx timeout
[  464.570220][ T5618] block nbd1: Receive control failed (result -32)
[  464.575629][ T5618] block nbd1: Receive control failed (result -32)
[  464.804404][T18488] sctp: [Deprecated]: syz.3.3143 (pid 18488) Use of struct sctp_assoc_value in delayed_ack socket option.
[  464.804404][T18488] Use struct sctp_sack_info instead
[  464.829541][ T9859] bridge_slave_1: left allmulticast mode
[  464.829597][ T9859] bridge_slave_1: left promiscuous mode
[  464.854289][T18488] Cannot find del_set index 4 as target
[  464.870867][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.981759][ T9859] erspan0: left allmulticast mode
[  464.981831][ T9859] erspan0: left promiscuous mode
[  464.982087][ T9859] bridge5: port 1(erspan0) entered disabled state
[  465.198288][ T9859] bridge0: left allmulticast mode
[  465.199120][ T9859] pimreg: left allmulticast mode
[  465.199230][ T9859] dvmrp1: left allmulticast mode
[  465.930454][ T9859] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  466.200496][ T9859] bond11 (unregistering): (slave gretap1): Releasing backup interface
[  466.322883][ T9859] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  466.322910][ T9859] bridge2 (unregistering): left promiscuous mode
[  466.520325][ T9859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.522402][ T9859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.545889][ T9859] bond0 (unregistering): Released all slaves
[  466.553155][ T9859] bond1 (unregistering): Released all slaves
[  466.594141][ T9859] bond2 (unregistering): Released all slaves
[  466.621563][ T9859] bond3 (unregistering): Released all slaves
[  466.635094][ T5618] Bluetooth: hci0: command tx timeout
[  466.667927][ T9859] bond4 (unregistering): Released all slaves
[  466.686327][ T9859] bond5 (unregistering): Released all slaves
[  466.707579][ T9859] bond6 (unregistering): Released all slaves
[  466.729374][ T9859] bond7 (unregistering): Released all slaves
[  466.758871][ T9859] bond8 (unregistering): Released all slaves
[  466.791217][ T9859] bond9 (unregistering): Released all slaves
[  466.820923][ T9859] bond10 (unregistering): Released all slaves
[  466.839691][ T9859] bond11 (unregistering): Released all slaves
[  466.959737][T18484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3140'.
[  467.371841][ T8657] wg0 speed is unknown, defaulting to 1000
[  467.371954][ T8657] syz0: Port: 1 Link DOWN
[  467.394280][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.395348][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.395632][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.395938][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.396184][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.396431][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.396672][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.396907][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.397146][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'.
[  467.537468][ T9859] : left promiscuous mode
[  468.104463][T18557] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  468.208276][ T9859] tipc: Disabling bearer <udp:syz0>
[  468.208563][ T9859] tipc: Disabling bearer <ib:macvtap0>
[  468.234428][ T9859] tipc: Left network mode
[  468.409502][ T9859] IPVS: stopping backup sync thread 17440 ...
[  468.717334][ T5618] Bluetooth: hci0: command tx timeout
[  469.351092][T18595] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  469.410919][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  469.692642][T18357] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.692764][T18357] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.692922][T18357] bridge_slave_0: entered allmulticast mode
[  469.733900][T18357] bridge_slave_0: entered promiscuous mode
[  469.750082][T18357] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.753964][T18357] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.754141][T18357] bridge_slave_1: entered allmulticast mode
[  469.816243][T18357] bridge_slave_1: entered promiscuous mode
[  469.888842][T18623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  470.338394][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.356703][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.404496][T18640] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  470.875438][T18357] team0: Port device team_slave_0 added
[  470.934314][T18357] team0: Port device team_slave_1 added
[  471.098597][T18655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.309873][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.309892][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.309915][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.313388][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.313421][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.313461][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.366799][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  471.488755][T18664] netlink: 'syz.0.3171': attribute type 20 has an invalid length.
[  471.488779][T18664] IPv6: NLM_F_CREATE should be specified when creating new route
[  472.324232][T18357] hsr_slave_0: entered promiscuous mode
[  472.352069][T18357] hsr_slave_1: entered promiscuous mode
[  472.365666][T18357] debugfs: 'hsr0' already exists in 'hsr'
[  472.365707][T18357] Cannot create hsr debugfs directory
[  472.370217][T18684] __nla_validate_parse: 25 callbacks suppressed
[  472.370238][T18684] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3173'.
[  472.968618][ T9859] hsr_slave_0: left promiscuous mode
[  472.980378][ T9859] hsr_slave_1: left promiscuous mode
[  472.993232][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.003622][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.081206][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.081245][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.477192][ T9859] veth1_macvtap: left promiscuous mode
[  473.487587][ T9859] veth0_macvtap: left promiscuous mode
[  474.264146][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'.
[  474.358775][T18727] netlink: 'syz.4.3183': attribute type 1 has an invalid length.
[  475.579615][   T42] smbdirect: ib_dev[syz0] removed
[  475.605209][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  475.783087][T18726] netlink: 'syz.4.3183': attribute type 1 has an invalid length.
[  475.783113][T18726] netlink: 'syz.4.3183': attribute type 2 has an invalid length.
[  475.831964][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'.
[  475.928209][T18736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3186'.
[  476.381220][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3190'.
[  476.381251][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'.
[  477.790412][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'.
[  477.958332][T18791] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  478.052108][T18792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3197'.
[  478.390176][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'.
[  478.689316][T18816] netlink: 'syz.1.3203': attribute type 2 has an invalid length.
[  479.588512][T18843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3209'.
[  479.616857][T18843] netlink: 'syz.4.3209': attribute type 12 has an invalid length.
[  479.963888][T18357] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  480.002438][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  480.013515][T18357] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  480.031720][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  480.042946][T18357] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  480.066236][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  480.083817][T18357] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  480.162824][T18357] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  480.334131][T18858] netlink: 'syz.1.3214': attribute type 5 has an invalid length.
[  480.334919][T18858] netlink: 'syz.1.3214': attribute type 5 has an invalid length.
[  480.360948][T18868] ip_tables: iptables: counters copy to user failed while replacing table
[  480.479405][T18868] Bluetooth: MGMT ver 1.23
[  480.872760][T18863] netlink: 'syz.4.3213': attribute type 3 has an invalid length.
[  480.920064][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3216'.
[  481.821813][T18850] tipc: Resetting bearer <eth:syzkaller0>
[  482.689801][T18927] netlink: Conntrack attr has 1 unknown bytes
[  482.689847][T18927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.727612][T18933] netlink: Conntrack attr has 1 unknown bytes
[  482.727647][T18933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.053541][ T5621] Bluetooth: hci4: command 0x0405 tx timeout
[  483.142077][T18357] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.242781][T18357] 8021q: adding VLAN 0 to HW filter on device team0
[  483.291781][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.291888][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.371848][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.371960][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.375945][T18947] netlink: 'syz.3.3229': attribute type 4 has an invalid length.
[  483.439763][T18949] netlink: 'syz.3.3229': attribute type 4 has an invalid length.
[  483.557509][T12499] lo speed is unknown, defaulting to 1000
[  483.560074][T18949] netlink: 'syz.3.3229': attribute type 4 has an invalid length.
[  483.562795][T18950] netlink: 'syz.3.3229': attribute type 4 has an invalid length.
[  483.723102][T18080] lo speed is unknown, defaulting to 1000
[  483.723182][T18080] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  483.800870][ T8653] lo speed is unknown, defaulting to 1000
[  483.800965][ T8653] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  483.802201][T12499] lo speed is unknown, defaulting to 1000
[  484.009331][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3230'.
[  484.009371][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3230'.
[  484.952045][T18993] bond0: (slave bond_slave_1): Device is not bonding slave
[  484.952068][T18993] bond0: option active_slave: invalid value (bond_slave_1)
[  485.168055][T18994] nbd: must specify a size in bytes for the device
[  485.781693][T19025] netlink: 'syz.0.3241': attribute type 11 has an invalid length.
[  486.412983][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'.
[  486.413049][T19048] netlink: 'syz.0.3246': attribute type 7 has an invalid length.
[  486.413074][T19048] netlink: 'syz.0.3246': attribute type 8 has an invalid length.
[  486.413084][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3246'.
[  486.623911][T18357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.882529][T19057] tls_set_device_offload_rx: netdev not found
[  487.123418][T18357] veth0_vlan: entered promiscuous mode
[  487.240044][T18357] veth1_vlan: entered promiscuous mode
[  487.426924][T19073] Cannot find set identified by id 65534 to match
[  487.451800][T19073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3252'.
[  487.624942][T19081] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3255'.
[  487.798702][T18357] veth0_macvtap: entered promiscuous mode
[  487.831444][T19093] netlink: 'syz.0.3256': attribute type 1 has an invalid length.
[  487.882600][T18357] veth1_macvtap: entered promiscuous mode
[  488.031113][T19093] 8021q: adding VLAN 0 to HW filter on device bond2
[  488.034003][T19093] bond1: (slave bond2): making interface the new active one
[  488.034494][T19093] bond1: (slave bond2): Enslaving as an active interface with an up link
[  488.077516][T19093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3256'.
[  488.281826][T19101] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  488.312094][T19093] 8021q: adding VLAN 0 to HW filter on device bond1
[  488.377529][T18357] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.520650][T18357] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.868676][T19122] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.869372][T19122] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.429984][T19122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.483051][T19122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.734996][T19160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3270'.
[  489.737106][T19160] netlink: 'syz.1.3270': attribute type 1 has an invalid length.
[  490.313672][T19160] 8021q: adding VLAN 0 to HW filter on device bond12
[  490.369120][ T9851] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.370001][ T9851] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.370097][ T9851] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.370165][ T9851] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.554390][T19165] lo speed is unknown, defaulting to 1000
[  490.885722][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.886092][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.886967][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.887286][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.890891][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'.
[  491.103006][T19207] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  491.104887][T19207] netlink: 'syz.0.3276': attribute type 2 has an invalid length.
[  491.195637][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  491.230654][T19191] lo speed is unknown, defaulting to 1000
[  491.409742][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'.
[  491.696398][T19191] lo speed is unknown, defaulting to 1000
[  491.880446][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.880484][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.149369][T19241] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  492.313207][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.313262][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.465210][T19244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'.
[  492.653549][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3283'.
[  492.666881][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'.
[  492.666968][T19257] netlink: 'syz.0.3284': attribute type 10 has an invalid length.
[  492.666999][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'.
[  493.728971][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  493.733886][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  493.752652][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  493.782266][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  493.784051][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  494.039544][T19283] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  494.061432][T19283] bond3 (unregistering): Released all slaves
[  494.707528][ T5627] syz_tun (unregistering): left promiscuous mode
[  495.069274][T19313] batman_adv: batadv0: Adding interface: gretap1
[  495.069309][T19313] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  495.069365][T19313] batman_adv: batadv0: Interface activated: gretap1
[  495.516554][T19340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3297'.
[  495.589762][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'.
[  495.851654][ T5618] Bluetooth: hci3: command tx timeout
[  495.853187][T19353] ip_tables: iptables: counters copy to user failed while replacing table
[  495.939618][T19357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3300'.
[  496.546924][T19284] lo speed is unknown, defaulting to 1000
[  496.580967][T19284] lo speed is unknown, defaulting to 1000
[  496.939004][T19392] netlink: 'syz.2.3311': attribute type 1 has an invalid length.
[  497.022596][T19388] syzkaller1: entered promiscuous mode
[  497.022638][T19388] syzkaller1: entered allmulticast mode
[  497.043408][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  497.567137][T19415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3314'.
[  497.624174][T19421] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3313'.
[  497.680202][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  497.916603][ T5618] Bluetooth: hci3: command tx timeout
[  498.552480][T19455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.609506][T19456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.673911][T19284] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.674088][T19284] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.675779][T19284] bridge_slave_0: entered allmulticast mode
[  498.677608][T19284] bridge_slave_0: entered promiscuous mode
[  498.681297][T19284] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.681458][T19284] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.681596][T19284] bridge_slave_1: entered allmulticast mode
[  498.683489][T19284] bridge_slave_1: entered promiscuous mode
[  498.732174][T19284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.740456][T19284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.995859][ T5618] Bluetooth: hci3: command tx timeout
[  500.755694][T19475] netlink: 'syz.4.3321': attribute type 20 has an invalid length.
[  500.755718][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'.
[  500.790625][T19475] netlink: 'syz.4.3321': attribute type 20 has an invalid length.
[  500.790648][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'.
[  500.790805][T19470] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  500.807538][ T9849] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  500.814128][T19284] team0: Port device team_slave_0 added
[  500.816090][ T9851] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  500.868880][T19284] team0: Port device team_slave_1 added
[  501.111603][T19284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.111621][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.111646][T19284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.115439][ T9851] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  501.115491][ T9851] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  501.123415][T19284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.123432][T19284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.123455][T19284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.516378][T19284] hsr_slave_0: entered promiscuous mode
[  501.521083][T19284] hsr_slave_1: entered promiscuous mode
[  501.531749][T19284] debugfs: 'hsr0' already exists in 'hsr'
[  501.531805][T19284] Cannot create hsr debugfs directory
[  501.771383][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'.
[  502.082089][ T5618] Bluetooth: hci3: command tx timeout
[  502.102389][T19522] 8021q: VLANs not supported on ip_vti0
[  502.395329][T19528] netlink: 'syz.4.3333': attribute type 12 has an invalid length.
[  502.395371][T19528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3333'.
[  502.852962][T19284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  502.853010][T19284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.853035][T19284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  503.238837][T19284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.238875][T19284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.238899][T19284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  503.494289][T19284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.494327][T19284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.494351][T19284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  503.540180][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'.
[  503.669340][T19284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.669377][T19284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.669401][T19284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  503.849911][T19560] netlink: 'syz.4.3345': attribute type 1 has an invalid length.
[  503.921581][T19560] 8021q: adding VLAN 0 to HW filter on device bond1
[  504.080697][T19569] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  504.081103][T19569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3348'.
[  504.136020][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'.
[  504.339898][T19573] netlink: zone id is out of range
[  504.340163][T19573] netlink: zone id is out of range
[  504.341653][T19573] netlink: zone id is out of range
[  504.341664][T19573] netlink: zone id is out of range
[  504.341673][T19573] netlink: zone id is out of range
[  504.341680][T19573] netlink: zone id is out of range
[  504.341687][T19573] netlink: zone id is out of range
[  504.341710][T19573] netlink: zone id is out of range
[  504.341718][T19573] netlink: zone id is out of range
[  504.341725][T19573] netlink: zone id is out of range
[  504.535476][T19284] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  504.563218][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  504.573226][T19284] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  504.636896][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  504.653085][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  504.672411][T19284] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  504.701652][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  504.711605][T19284] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  504.800879][T19284] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.819523][T19580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3352'.
[  504.917595][T19592] netlink: 'syz.2.3351': attribute type 1 has an invalid length.
[  505.663323][T19605] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3354'.
[  505.679901][T19607] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3354'.
[  505.828315][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3357'.
[  505.862238][T19284] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.880292][ T9849] syzkaller0: tun_net_xmit 76
[  505.891331][ T9849] syzkaller0: tun_net_xmit 48
[  505.907575][ T8654] syzkaller0: tun_net_xmit 76
[  506.063230][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'.
[  506.085869][T19620] bridge8: entered promiscuous mode
[  506.085894][T19620] bridge8: entered allmulticast mode
[  506.088948][ T8654] syzkaller0: tun_net_xmit 76
[  506.088966][T19620] team0: Port device bridge8 added
[  506.166984][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'.
[  506.320693][T19622] vlan4: entered promiscuous mode
[  506.320718][T19622] bridge0: entered promiscuous mode
[  506.320882][T19622] vlan4: entered allmulticast mode
[  506.320895][T19622] bridge0: entered allmulticast mode
[  506.343465][T19625] bridge0: port 1(team0) entered blocking state
[  506.343794][T19625] bridge0: port 1(team0) entered disabled state
[  506.344105][T19625] team0: entered allmulticast mode
[  506.363820][T19625] team0: entered promiscuous mode
[  506.432335][T19284] 8021q: adding VLAN 0 to HW filter on device team0
[  506.533825][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.533994][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.557347][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.662532][T19643] netlink: 'syz.1.3362': attribute type 24 has an invalid length.
[  506.675691][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.675886][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.925883][T19648] bond1: entered promiscuous mode
[  506.925944][T19648] bond1: entered allmulticast mode
[  506.926337][T19648] 8021q: adding VLAN 0 to HW filter on device bond1
[  506.956604][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'.
[  506.991871][T19284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  506.991897][T19284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.334343][T19663] netlink: 'syz.2.3369': attribute type 14 has an invalid length.
[  507.428356][T19664] dvmrp8: entered allmulticast mode
[  507.631963][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[  507.660510][T19669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'.
[  507.879242][T19680] ip6tnl0: Caught tx_queue_len zero misconfig
[  508.498554][T19697] Bluetooth: MGMT ver 1.23
[  508.498609][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.498820][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.499089][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.499339][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.499540][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.499734][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.499920][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.500110][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.534311][T19698] netlink: 'syz.0.3376': attribute type 10 has an invalid length.
[  508.569144][T19698] 8021q: adding VLAN 0 to HW filter on device team0
[  508.602326][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.602537][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.602737][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.602939][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.603130][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.603332][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.603524][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.603754][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.603960][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.604193][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.604406][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.619533][T19698] bond0: (slave team0): Enslaving as an active interface with an up link
[  508.673095][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.673546][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.674257][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.820948][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.821427][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.821895][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.841709][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.842111][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.842664][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.843050][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.862682][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.863214][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.863634][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.864037][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.864465][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.880286][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.881956][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.882583][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.882966][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.910828][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.911224][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.915280][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.915709][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.951588][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.952010][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.952438][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.954084][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.974847][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.975415][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.975801][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.976196][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  508.976599][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.016140][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.016699][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.017091][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.017583][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.053696][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.054182][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.062568][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.072178][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.072699][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.079458][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.135397][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.135594][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.135768][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.135972][T19697] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  509.169795][T19708] netlink: 'syz.2.3379': attribute type 1 has an invalid length.
[  509.366657][T19708] bond2: entered promiscuous mode
[  509.367108][T19708] 8021q: adding VLAN 0 to HW filter on device bond2
[  509.390966][T19284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.461695][T19727] sctp: [Deprecated]: syz.4.3381 (pid 19727) Use of int in max_burst socket option deprecated.
[  509.461695][T19727] Use struct sctp_assoc_value instead
[  509.514176][T19726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3383'.
[  509.514241][T19726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3383'.
[  509.549117][T19726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3383'.
[  509.568302][T19709] bond2: (slave bridge1): making interface the new active one
[  509.568335][T19709] bridge1: entered promiscuous mode
[  509.571317][T19709] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  509.612242][T19710] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  509.625900][T19726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3383'.
[  509.700775][T19284] veth0_vlan: entered promiscuous mode
[  509.967549][T19284] veth1_vlan: entered promiscuous mode
[  510.015767][T19730] syzkaller0: entered promiscuous mode
[  510.015823][T19730] syzkaller0: entered allmulticast mode
[  510.032207][T19738] netlink: 'syz.1.3386': attribute type 4 has an invalid length.
[  510.261570][T19284] veth0_macvtap: entered promiscuous mode
[  510.289959][T19284] veth1_macvtap: entered promiscuous mode
[  510.328387][T19284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.362636][T19284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.427471][ T9851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.428794][ T9851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.428840][ T9851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.428873][ T9851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.637100][T19752] vlan5: entered promiscuous mode
[  510.809488][   T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  510.811789][ T7585] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.811923][ T7585] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.811952][ T7585] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.960449][T19765] lo speed is unknown, defaulting to 1000
[  510.986219][ T9857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.986275][ T9857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.040568][T19765] lo speed is unknown, defaulting to 1000
[  511.136967][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.136992][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.320169][T19771] __nla_validate_parse: 5 callbacks suppressed
[  511.320190][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3396'.
[  511.434254][T19777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  511.620205][T19784] netlink: 'syz.4.3399': attribute type 24 has an invalid length.
[  511.621949][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3399'.
[  512.567222][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  512.583263][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  512.608366][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  512.615209][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  512.630334][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  513.250820][T19825] net_ratelimit: 7 callbacks suppressed
[  513.250865][T19825] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  513.413782][T19819] bridge_slave_0: left allmulticast mode
[  513.413812][T19819] bridge_slave_0: left promiscuous mode
[  513.414005][T19819] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.490122][T19819] bridge_slave_1: left allmulticast mode
[  513.490152][T19819] bridge_slave_1: left promiscuous mode
[  513.490342][T19819] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.528732][T19819] bond0: (slave bond_slave_0): Releasing backup interface
[  513.552973][T19819] bond0: (slave bond_slave_1): Releasing backup interface
[  513.577815][T19819] team0: Port device team_slave_0 removed
[  513.592854][T19819] team0: Port device team_slave_1 removed
[  513.593807][T19819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.593828][T19819] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.628452][T19819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.628479][T19819] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.632518][T19819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  513.757008][T19821] team0: Port device xfrm0 added
[  513.960091][T19831] veth0: entered promiscuous mode
[  513.960336][T19836] veth0: left promiscuous mode
[  514.675751][T19810] lo speed is unknown, defaulting to 1000
[  514.722105][ T5618] Bluetooth: hci4: command tx timeout
[  514.730034][T19810] lo speed is unknown, defaulting to 1000
[  515.128640][T19880] dvmrp0: entered allmulticast mode
[  515.169279][T19884] bond0: Error: Cannot enslave bond to itself.
[  515.380795][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'.
[  515.983088][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.093529][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'.
[  516.120400][T19919] team0: Device gtp0 is up. Set it down before adding it as a team port
[  516.263747][T19810] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.263979][T19810] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.264123][T19810] bridge_slave_0: entered allmulticast mode
[  516.267320][T19810] bridge_slave_0: entered promiscuous mode
[  516.270708][T19810] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.270871][T19810] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.271008][T19810] bridge_slave_1: entered allmulticast mode
[  516.272844][T19810] bridge_slave_1: entered promiscuous mode
[  516.318837][T19810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.328624][T19810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.438572][T19810] team0: Port device team_slave_0 added
[  516.441841][T19810] team0: Port device team_slave_1 added
[  516.447214][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'.
[  516.495708][T19810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.495727][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.495750][T19810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.507530][T19810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.507548][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.507571][T19810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.664389][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'.
[  516.768318][T19810] hsr_slave_0: entered promiscuous mode
[  516.770596][T19810] hsr_slave_1: entered promiscuous mode
[  516.772487][T19810] debugfs: 'hsr0' already exists in 'hsr'
[  516.772511][T19810] Cannot create hsr debugfs directory
[  516.800024][ T5618] Bluetooth: hci4: command tx timeout
[  516.832375][T19936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3434'.
[  516.889430][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'.
[  517.380199][T19953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  517.635792][ T8656] hid-generic 0005:0B57:0002.0004: unknown main item tag 0x0
[  517.749535][ T8656] hid-generic 0005:0B57:0002.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  517.903119][T19974] batadv_slave_0: mtu less than device minimum
[  517.993838][T19982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3442'.
[  518.286812][T19986] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  518.346506][T19810] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.346541][T19810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.530361][T19999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3448'.
[  518.589739][T19810] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.589796][T19810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.594248][T19999] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  518.651606][T19993] Cannot find add_set index 4 as target
[  518.755784][T20002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3448'.
[  518.859541][T19810] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.859574][T19810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.880102][ T5618] Bluetooth: hci4: command tx timeout
[  519.072943][T19810] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.072978][T19810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.263889][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'.
[  519.293340][T20011] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3452'.
[  519.493658][T20018] netlink: 'syz.2.3454': attribute type 4 has an invalid length.
[  519.546417][T20019] netlink: 'syz.2.3454': attribute type 4 has an invalid length.
[  519.922361][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.924959][T20024] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3456'.
[  519.998042][T12498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.359322][T19810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  520.419418][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  520.422447][T19810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  520.440610][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  520.480207][T19810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  520.523379][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  520.533236][T19810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  520.578208][T19810] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  520.705584][T20065] xt_hashlimit: size too large, truncated to 1048576
[  520.860449][T19810] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.955068][ T5618] Bluetooth: hci4: command tx timeout
[  520.959354][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.045774][T19810] 8021q: adding VLAN 0 to HW filter on device team0
[  521.094407][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.094575][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.173606][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.173787][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.277105][T12500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.277186][T12500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.277449][T12500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.448445][T20088] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  521.467221][T20091] __nla_validate_parse: 3 callbacks suppressed
[  521.467241][T20091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3467'.
[  521.467266][T20091] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  521.616424][T20085] syzkaller0: entered promiscuous mode
[  521.616449][T20085] syzkaller0: entered allmulticast mode
[  522.020673][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.062741][T20107] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3469'.
[  523.869729][    C0] net_ratelimit: 1 callbacks suppressed
[  523.869758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.101726][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.323328][T12498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.127270][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.161235][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.838029][T20106] ������: renamed from vlan1
[  527.199065][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.294103][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'.
[  527.343053][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'.
[  527.356631][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.358006][ T7585] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  527.358936][ T7585] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  527.358971][ T7585] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  527.359002][ T7585] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  527.381067][T20129] netlink: 'syz.3.3477': attribute type 1 has an invalid length.
[  527.381090][T20129] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3477'.
[  527.381105][T20129] netlink: 'syz.3.3477': attribute type 1 has an invalid length.
[  527.669257][T20135] netlink: 'syz.2.3480': attribute type 21 has an invalid length.
[  527.669277][T20135] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3480'.
[  527.669346][T20135] netlink: 'syz.2.3480': attribute type 5 has an invalid length.
[  527.669360][T20135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3480'.
[  527.868105][T20146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.239519][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.754391][T19810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.996413][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'.
[  528.996452][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'.
[  529.057861][T19810] veth0_vlan: entered promiscuous mode
[  529.171698][T19810] veth1_vlan: entered promiscuous mode
[  529.275835][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.292573][T20203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3495'.
[  529.356510][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'.
[  529.429884][T20200] 8021q: adding VLAN 0 to HW filter on device bond2
[  529.677979][T20209] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  529.753535][T19810] veth0_macvtap: entered promiscuous mode
[  529.800344][T19810] veth1_macvtap: entered promiscuous mode
[  529.929411][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  529.978936][T19810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.003563][T20238] netlink: 'syz.2.3502': attribute type 32 has an invalid length.
[  530.028736][T19810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.215839][ T1493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.289851][ T9849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.300039][ T9852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.317678][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.386620][ T9851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.403539][T20246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.403727][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.427540][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.869390][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.869445][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.877179][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.252533][ T9851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.252555][ T9851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.357772][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.527520][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.396134][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.448230][T20295] syzkaller0: entered promiscuous mode
[  532.448256][T20295] syzkaller0: entered allmulticast mode
[  532.723125][ T1493] IPVS: starting estimator thread 0...
[  532.804761][T20307] IPVS: using max 25 ests per chain, 60000 per kthread
[  532.920349][T20310] syz_tun: entered allmulticast mode
[  532.940871][T20310] dvmrp6: entered allmulticast mode
[  532.952945][T20309] syz_tun: left allmulticast mode
[  533.190482][T20320] xt_connbytes: Forcing CT accounting to be enabled
[  533.190547][T20320] Cannot find set identified by id 0 to match
[  533.328187][T20246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  533.354339][T20328] __nla_validate_parse: 3 callbacks suppressed
[  533.354362][T20328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3525'.
[  533.452859][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.741341][T20334] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  533.748488][T20334] bond3 (unregistering): Released all slaves
[  534.457495][T20365] netlink: 'syz.3.3534': attribute type 7 has an invalid length.
[  534.476108][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.556725][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.277341][T20383] syzkaller0: entered promiscuous mode
[  535.277366][T20383] syzkaller0: entered allmulticast mode
[  535.306565][T20401] sctp: [Deprecated]: syz.4.3542 (pid 20401) Use of int in maxseg socket option.
[  535.306565][T20401] Use struct sctp_assoc_value instead
[  535.321406][T20401] sctp: [Deprecated]: syz.4.3542 (pid 20401) Use of int in max_burst socket option deprecated.
[  535.321406][T20401] Use struct sctp_assoc_value instead
[  535.515400][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.286825][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'.
[  536.563114][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.610467][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.642042][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.743250][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.787280][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.485230][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.638123][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.795641][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.136207][T20442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.225340][T20439] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3551'.
[  541.247238][T20448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.294041][T20448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.411981][T20453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  541.793256][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3550'.
[  541.793281][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3550'.
[  541.839698][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.850827][T20433] ip_tables: iptables: counters copy to user failed while replacing table
[  541.873321][T20433] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3550'.
[  541.942508][T20464] netlink: 'syz.2.3556': attribute type 1 has an invalid length.
[  542.040277][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'.
[  542.058275][T20464] 8021q: adding VLAN 0 to HW filter on device bond3
[  542.282644][T20476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3558'.
[  542.301860][T20464] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  542.597073][T20480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.693267][T20482] sctp: [Deprecated]: syz.2.3560 (pid 20482) Use of int in max_burst socket option deprecated.
[  542.693267][T20482] Use struct sctp_assoc_value instead
[  542.878104][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.896117][T20498] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3564'.
[  542.911701][T20498] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3564'.
[  543.178531][T20505] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3567'.
[  543.178757][T20505] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3567'.
[  543.681124][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.867360][T20522] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  543.919541][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.146896][T20529] syzkaller0: entered promiscuous mode
[  544.146957][T20529] syzkaller0: entered allmulticast mode
[  544.955464][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.031269][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.726139][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.037108][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.085596][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.126331][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.755557][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.082536][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.167689][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.401063][T20577] netlink: 'syz.0.3582': attribute type 1 has an invalid length.
[  550.401087][T20577] __nla_validate_parse: 4 callbacks suppressed
[  550.401097][T20577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3582'.
[  550.473941][T20581] netlink: 'syz.0.3582': attribute type 1 has an invalid length.
[  550.473967][T20581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3582'.
[  550.731469][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.019218][T20600] netlink: 'syz.2.3588': attribute type 1 has an invalid length.
[  551.082711][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'.
[  551.111777][T20600] 8021q: adding VLAN 0 to HW filter on device bond4
[  551.208054][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.196828][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3594'.
[  552.237585][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.257372][T20643] ip_tables: iptables: counters copy to user failed while replacing table
[  552.260731][T20643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3597'.
[  552.541413][T20650] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3597'.
[  552.696810][T20656] netlink: 'syz.1.3598': attribute type 15 has an invalid length.
[  552.801547][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.867727][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3600'.
[  552.868506][T20665] netlink: 'syz.0.3600': attribute type 8 has an invalid length.
[  552.868522][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'.
[  553.066791][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3603'.
[  553.067755][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'.
[  553.285641][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.518115][T20684] Bluetooth: hci0: unsupported parameter 5135
[  553.518137][T20684] Bluetooth: hci0: unsupported parameter 8192
[  553.518150][T20684] Bluetooth: hci0: unsupported parameter 5135
[  553.518161][T20684] Bluetooth: hci0: unsupported parameter 8192
[  553.873241][T20693] netlink: 'syz.3.3610': attribute type 3 has an invalid length.
[  554.315524][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.559545][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.873866][T20738] batadv_slave_1: entered promiscuous mode
[  554.919914][T20736] batadv_slave_1: left promiscuous mode
[  555.198008][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.242253][T20747] openvswitch: netlink: Flow actions attr not present in new flow.
[  555.366555][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.738656][T20762] netlink: 'syz.4.3632': attribute type 1 has an invalid length.
[  555.764970][T20758] ip6tnl2: entered promiscuous mode
[  555.765010][T20758] ip6tnl2: entered allmulticast mode
[  555.894156][T20762] 8021q: adding VLAN 0 to HW filter on device bond3
[  555.937100][T20775] netlink: 'syz.1.3635': attribute type 1 has an invalid length.
[  555.998853][T20772] bond3: (slave geneve2): making interface the new active one
[  556.013330][T20772] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  556.107211][T20775] 8021q: adding VLAN 0 to HW filter on device bond1
[  556.223179][T20778] bond1: (slave geneve2): making interface the new active one
[  556.237667][T20778] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  556.395861][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.064253][T20815] bond5: Removing last ns target with arp_interval on
[  557.435789][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.586422][T20842] __nla_validate_parse: 37 callbacks suppressed
[  557.586442][T20842] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3652'.
[  557.595521][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.675206][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.915952][T20849] sctp: [Deprecated]: syz.1.3654 (pid 20849) Use of struct sctp_assoc_value in delayed_ack socket option.
[  557.915952][T20849] Use struct sctp_sack_info instead
[  558.230615][T20862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3660'.
[  558.395561][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.403236][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.403484][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.422959][T20883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.553812][T20880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.645144][T20872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.707454][T20880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  559.070402][T20895] syzkaller0: entered promiscuous mode
[  559.070443][T20895] syzkaller0: entered allmulticast mode
[  559.250134][T20904] ������: renamed from dummy0
[  559.363302][T20913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3670'.
[  559.609254][T20926] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  559.759967][T20930] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3676'.
[  560.555666][ T8656] net_ratelimit: 7 callbacks suppressed
[  560.555702][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.635386][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.877413][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.595785][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.175676][T20907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.347717][T20945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'.
[  562.433501][T20948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3684'.
[  562.454141][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'.
[  562.454164][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'.
[  562.554061][T20944] bridge_slave_0: left allmulticast mode
[  562.554088][T20944] bridge_slave_0: left promiscuous mode
[  562.554302][T20944] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.579087][T20945] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3681'.
[  562.620627][T20944] bridge_slave_1: left allmulticast mode
[  562.621884][T20944] bridge_slave_1: left promiscuous mode
[  562.622129][T20944] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.647437][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.690371][T20944] bond0: (slave bond_slave_0): Releasing backup interface
[  562.709999][T20958] xt_time: invalid argument - start or stop time greater than 23:59:59
[  562.749790][T20944] bond0: (slave bond_slave_1): Releasing backup interface
[  562.811581][T20944] team0: Port device team_slave_0 removed
[  562.837000][T20944] team0: Port device team_slave_1 removed
[  562.838068][T20944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.838088][T20944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.871541][T20944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.871565][T20944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.947609][T20944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  562.986809][T20945] team0: Port device xfrm0 added
[  562.992160][T20946] tipc: Started in network mode
[  562.992208][T20946] tipc: Node identity 8e8939a77546, cluster identity 4711
[  563.002983][T20946] tipc: Enabled bearer <eth:team0>, priority 0
[  563.076616][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'.
[  563.248208][T20977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  563.359340][T20981] sch_tbf: burst 0 is lower than device gre0 mtu (1304) !
[  563.445471][T20982] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3691'.
[  563.471224][T20979] netlink: 'syz.1.3691': attribute type 2 has an invalid length.
[  563.486188][T20979] netlink: 'syz.1.3691': attribute type 2 has an invalid length.
[  563.486226][T20979] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3691'.
[  563.562510][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3695'.
[  563.579630][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3695'.
[  563.601811][T20989] netlink: 'syz.4.3692': attribute type 3 has an invalid length.
[  563.601838][T20989] netlink: 'syz.4.3692': attribute type 2 has an invalid length.
[  563.654897][T20995] netlink: 'syz.0.3694': attribute type 21 has an invalid length.
[  563.654953][T20995] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3694'.
[  563.655118][T20995] netlink: 'syz.0.3694': attribute type 5 has an invalid length.
[  563.655150][T20995] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3694'.
[  563.685291][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.686545][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.984753][ T8656] tipc: Node number set to 4224661927
[  564.107314][T21014] ovs-dp0: entered promiscuous mode
[  564.192479][T21017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'.
[  564.193910][T21017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'.
[  564.214858][T21017] netlink: 'syz.1.3700': attribute type 32 has an invalid length.
[  564.214879][T21017] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3700'.
[  564.715490][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  565.030113][T21036] ip6gre1: entered promiscuous mode
[  565.405433][T21062] netlink: 'syz.1.3713': attribute type 1 has an invalid length.
[  565.551164][T21064] IPv6: Can't replace route, no match found
[  565.551463][T21064] IPv6: Can't replace route, no match found
[  565.553444][T21064] netlink: 'syz.2.3714': attribute type 30 has an invalid length.
[  565.612939][T21071] net_ratelimit: 3 callbacks suppressed
[  565.612992][T21071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.768968][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.029128][T21098] netlink: 'syz.2.3722': attribute type 7 has an invalid length.
[  566.806486][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.436164][ T5621] Bluetooth: hci0: command 0x0c3a tx timeout
[  567.439475][ T5618] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[  567.835419][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.835824][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.349875][T21063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  568.366429][T21085] __nla_validate_parse: 5 callbacks suppressed
[  568.366451][T21085] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3719'.
[  568.366485][T21085] NCSI netlink: No device for ifindex 65584
[  568.697034][T21111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3725'.
[  568.826823][T21112] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  568.828735][T21112] bond7 (unregistering): Released all slaves
[  568.878038][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.043116][T21120] veth0_macvtap: entered allmulticast mode
[  569.043259][T21120] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  569.414160][T21133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.414446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.438631][T21133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.476719][T21138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'.
[  569.479245][T21136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3733'.
[  569.517455][T21138] ipvlan2: entered allmulticast mode
[  569.517480][T21138] syz_tun: entered allmulticast mode
[  569.540030][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'.
[  569.544308][T21141] validate_nla: 4 callbacks suppressed
[  569.544356][T21141] netlink: 'syz.0.3732': attribute type 5 has an invalid length.
[  569.631215][T21149] netlink: 'syz.0.3732': attribute type 5 has an invalid length.
[  569.670877][T21145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3735'.
[  570.882242][T20218] net_ratelimit: 7 callbacks suppressed
[  570.882262][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.955460][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.013097][T21210] Bluetooth: MGMT ver 1.23
[  571.213906][T21212] netlink: 'syz.2.3747': attribute type 62 has an invalid length.
[  571.389299][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3753'.
[  571.391630][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3753'.
[  571.656684][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3752'.
[  571.692500][T21235] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  571.997251][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.110897][T21245] ip_tables: iptables: counters copy to user failed while replacing table
[  572.243485][T21251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3764'.
[  572.286459][T21251] bond0: (slave team0): Releasing backup interface
[  572.321001][T21251] team0 (unregistering): Port device team_slave_0 removed
[  572.339504][T21251] team0 (unregistering): Port device team_slave_1 removed
[  572.389859][T21254] netlink: 'syz.0.3764': attribute type 2 has an invalid length.
[  572.419892][T21261] xt_bpf: check failed: parse error
[  572.582528][T21266] netlink: 'syz.4.3765': attribute type 11 has an invalid length.
[  572.582561][T21266] netlink: 'syz.4.3765': attribute type 11 has an invalid length.
[  572.703980][T21273] netlink: 'syz.2.3767': attribute type 178 has an invalid length.
[  572.795603][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.046999][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.116740][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  573.268631][T21295] vlan2: entered promiscuous mode
[  573.268655][T21295] erspan0: entered promiscuous mode
[  573.918837][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.947515][T21309] __nla_validate_parse: 8 callbacks suppressed
[  573.947535][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'.
[  574.111336][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.188020][T21317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.188320][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.194044][T21316] netlink: 'syz.2.3785': attribute type 10 has an invalid length.
[  574.194237][T21316] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address
[  574.247682][T21316] bond0: (slave virt_wifi0): Error -95 calling set_mac_address
[  574.423083][T21323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3789'.
[  574.633285][T21331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3788'.
[  575.228299][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'.
[  575.487604][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'.
[  576.168220][ T8656] net_ratelimit: 4 callbacks suppressed
[  576.168256][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.965441][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.217805][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.273168][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.285621][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.011520][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.326702][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.483389][T21344] netlink: 'syz.2.3792': attribute type 1 has an invalid length.
[  580.485585][T21353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.587664][T21353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.668867][T21363] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  580.773101][T21363] netlink: 'syz.3.3796': attribute type 10 has an invalid length.
[  581.356012][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.697528][T21401] netlink: 'syz.1.3805': attribute type 3 has an invalid length.
[  582.186517][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'.
[  582.398296][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.523410][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3812'.
[  582.630689][T21431] 8021q: adding VLAN 0 to HW filter on device bond7
[  582.657928][T21431] ipt_ah: unknown flags FF
[  582.704621][T21432] macvlan2: entered promiscuous mode
[  582.704677][T21432] macvlan2: entered allmulticast mode
[  582.706686][T21432] bond7: entered promiscuous mode
[  582.707927][T21432] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  582.718211][T21432] bond7: left promiscuous mode
[  582.934268][T21433] netlink: 'syz.2.3812': attribute type 3 has an invalid length.
[  583.036785][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.074233][T21453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'.
[  583.186777][T21462] IPv6: NLM_F_CREATE should be specified when creating new route
[  583.236782][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3816'.
[  583.273955][T21464] xt_hashlimit: size too large, truncated to 1048576
[  583.322642][T21466] xt_hashlimit: size too large, truncated to 1048576
[  583.417279][T21470] netlink: NAT attribute has 4 unknown bytes
[  583.417316][T21470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.446119][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.718098][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3819'.
[  583.997080][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.223651][T21491] ip_tables: iptables: counters copy to user failed while replacing table
[  584.362626][T21508] netlink: 'syz.0.3828': attribute type 1 has an invalid length.
[  584.382995][T21511] netlink: 'syz.0.3828': attribute type 1 has an invalid length.
[  584.477093][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.502806][T21515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'.
[  584.679575][T21522] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3829'.
[  584.755240][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3829'.
[  584.864416][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3830'.
[  584.867667][T21532] block nbd3: Unsupported socket: should be TCP or UNIX.
[  584.900011][T21530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'.
[  584.970002][T21530] bond4: option xmit_hash_policy: invalid value (64)
[  584.988793][T21530] bond4 (unregistering): Released all slaves
[  585.444668][T21469] Bluetooth: hci0: command 0x0c3a tx timeout
[  585.444758][T21469] Bluetooth: hci1: command 0x0406 tx timeout
[  585.517338][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.820218][T21575] geneve0: entered allmulticast mode
[  585.859580][T21576] netlink: 'syz.1.3842': attribute type 5 has an invalid length.
[  586.365862][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365882][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365892][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365901][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365909][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365919][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.365929][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.367892][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.367908][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.367916][T21578] tc action pedit offset must be on 32 bit boundaries
[  586.367935][T21578] net_ratelimit: 1 callbacks suppressed
[  586.367947][T21578] 0: reclassify loop, rule prio 0, protocol 800
[  586.557168][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.128849][T21616] netlink: 'syz.1.3856': attribute type 2 has an invalid length.
[  587.273118][T21623] __nla_validate_parse: 160 callbacks suppressed
[  587.273166][T21623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3858'.
[  587.365739][T21613] 8021q: adding VLAN 0 to HW filter on device bond1
[  587.366533][T21613] bridge0: port 1(bond1) entered blocking state
[  587.366646][T21613] bridge0: port 1(bond1) entered disabled state
[  587.367985][T21613] bond1: entered allmulticast mode
[  587.373097][T21613] bond1: entered promiscuous mode
[  587.413419][T21613] bridge0: port 1(bond1) entered blocking state
[  587.413560][T21613] bridge0: port 1(bond1) entered forwarding state
[  587.432360][ T1493] bridge0: port 1(bond1) entered disabled state
[  587.501060][T21620] pim6reg: entered allmulticast mode
[  587.520768][T21626] netdevsim netdevsim1 
: renamed from netdevsim0 (while UP)
[  587.600501][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.611615][T21634] xt_nat: multiple ranges no longer supported
[  587.708124][T21635] x_tables: unsorted underflow at hook 1
[  587.721218][T21635] netlink: 'syz.0.3861': attribute type 1 has an invalid length.
[  587.721240][T21635] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3861'.
[  587.747050][T21635] syzkaller0: entered promiscuous mode
[  587.747074][T21635] syzkaller0: entered allmulticast mode
[  587.833417][T21640] netlink: 'syz.3.3865': attribute type 12 has an invalid length.
[  587.996613][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'.
[  588.217699][T21653] dvmrp6: left allmulticast mode
[  588.331697][T21656] xt_l2tp: v2 doesn't support IP mode
[  588.533526][T21664] bond8 (unregistering): Released all slaves
[  588.639382][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.704621][T21669] bond3: option all_slaves_active: invalid value (179)
[  588.729049][T21677] ip_tables: iptables: counters copy to user failed while replacing table
[  588.743350][T21669] bond3 (unregistering): Released all slaves
[  588.867473][T21684] netlink: 'syz.3.3877': attribute type 97 has an invalid length.
[  588.867499][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3877'.
[  588.867513][T21684] netlink: 'syz.3.3877': attribute type 97 has an invalid length.
[  588.867526][T21684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3877'.
[  588.922074][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'.
[  589.116715][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.122831][T21691] netlink: 'syz.3.3879': attribute type 1 has an invalid length.
[  589.384077][T21693] 8021q: adding VLAN 0 to HW filter on device bond3
[  589.390313][T21693] bond2: (slave bond3): making interface the new active one
[  589.397163][T21693] bond2: (slave bond3): Enslaving as an active interface with an up link
[  589.458304][T21691] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  589.492715][T21710] C: renamed from lo (while UP)
[  589.494084][T21706] xt_hashlimit: size too large, truncated to 1048576
[  589.530860][T21710] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  589.536683][T21717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3884'.
[  589.539042][T21717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3884'.
[  589.671013][T21717] gretap1: entered promiscuous mode
[  589.671071][T21717] gretap1: entered allmulticast mode
[  589.675133][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.995038][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.307913][T21708] syzkaller1: entered promiscuous mode
[  590.307937][T21708] syzkaller1: entered allmulticast mode
[  590.652176][T21750] netlink: 'syz.1.3891': attribute type 4 has an invalid length.
[  590.664134][T21751] netlink: 'syz.1.3891': attribute type 4 has an invalid length.
[  590.726966][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.761399][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3890'.
[  590.762180][T21758] netlink: 'syz.0.3892': attribute type 27 has an invalid length.
[  591.297037][T21781] netlink: 'syz.4.3899': attribute type 58 has an invalid length.
[  591.297132][T21781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3899'.
[  591.414119][T21787] sctp: [Deprecated]: syz.3.3898 (pid 21787) Use of int in max_burst socket option deprecated.
[  591.414119][T21787] Use struct sctp_assoc_value instead
[  591.418970][T21783] sctp: [Deprecated]: syz.3.3898 (pid 21783) Use of int in max_burst socket option deprecated.
[  591.418970][T21783] Use struct sctp_assoc_value instead
[  591.758099][ T8655] net_ratelimit: 1 callbacks suppressed
[  591.758135][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.159896][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.256125][T21800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.289962][T21800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.343568][T21809] netlink: 'syz.4.3910': attribute type 1 has an invalid length.
[  592.433256][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'.
[  592.460667][T21809] 8021q: adding VLAN 0 to HW filter on device bond4
[  592.499921][T21817] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  592.641152][   T30] audit: type=1107 audit(1790354363.305:8): pid=21811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%T���\�������0���l�t�ݕ?'
[  592.777368][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'.
[  592.779897][T21826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.805978][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.837291][T21828] pim6reg: entered allmulticast mode
[  592.929805][T21831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.321641][T21848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3919'.
[  593.487851][T21853] netlink: 'syz.1.3917': attribute type 1 has an invalid length.
[  593.698575][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.789507][T21859] netlink: 'syz.2.3923': attribute type 1 has an invalid length.
[  593.812853][T21859] 8021q: adding VLAN 0 to HW filter on device bond8
[  593.821021][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'.
[  593.841218][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.439026][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3932'.
[  594.547262][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3930'.
[  594.631103][T21890] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3933'.
[  594.879875][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.190097][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3939'.
[  595.190135][T21920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3939'.
[  595.199086][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.211985][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3939'.
[  595.315264][T21929] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  595.442901][T21931] syz_tun: entered allmulticast mode
[  595.915491][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.007257][T21949] syzkaller1: entered promiscuous mode
[  596.007281][T21949] syzkaller1: entered allmulticast mode
[  596.116152][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.142557][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.196861][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.257155][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.289515][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.312526][T21960] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  596.443444][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.478083][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.535664][ T9852] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  596.535714][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.579077][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.600722][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.643798][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.672032][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.702930][T21951] netlink: 'syz.0.3946': attribute type 30 has an invalid length.
[  596.736466][ T9852] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  596.737089][ T9858] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  596.745658][ T1493] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  596.956309][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.475339][T21997] team0: Port device xfrm0 removed
[  597.476513][T21997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  597.476856][T21995] netlink: 'syz.4.3960': attribute type 5 has an invalid length.
[  597.531825][ T1493] tipc: Resetting bearer <eth:team0>
[  597.553425][T22009] __nla_validate_parse: 16 callbacks suppressed
[  597.553446][T22009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3963'.
[  597.553465][T22009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'.
[  597.553477][T22009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3963'.
[  597.553620][T21995] gretap2: entered promiscuous mode
[  597.559324][T21995] batman_adv: batadv0: Adding interface: gretap2
[  597.559341][T21995] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  597.559363][T21995] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  597.700586][T22006] dvmrp0: entered allmulticast mode
[  597.854372][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'.
[  597.984323][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'.
[  597.984352][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'.
[  597.984417][T22014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3965'.
[  597.996523][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.132662][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3966'.
[  598.143005][T22027] netlink: 'syz.0.3967': attribute type 7 has an invalid length.
[  598.240275][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.289428][   T30] audit: type=1107 audit(1790354368.955:9): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  598.308776][T22022] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3967'.
[  598.313430][T22027] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3967'.
[  598.793101][T22050] ������: renamed from dummy0 (while UP)
[  599.040290][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.665378][T22081] 8021q: adding VLAN 0 to HW filter on device bond3
[  599.741002][T22081] macvlan3: entered promiscuous mode
[  599.741037][T22081] macvlan3: entered allmulticast mode
[  599.742150][T22081] bond3: (slave macvlan3): Error -22 calling dev_set_mtu
[  599.968574][T22095] tls_set_device_offload_rx: netdev not found
[  600.075777][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.467601][T22108] netlink: 'syz.1.3988': attribute type 11 has an invalid length.
[  600.467627][T22108] netlink: 'syz.1.3988': attribute type 11 has an invalid length.
[  601.115280][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.243997][T22130] ip6gre1: entered allmulticast mode
[  601.279279][T20214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.158748][T18080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.449818][T22166] tipc: Resetting bearer <eth:team0>
[  602.967295][T22195] __nla_validate_parse: 15 callbacks suppressed
[  602.967443][T22195] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4005'.
[  602.967480][T22195] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4005'.
[  603.196376][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.196678][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.241535][T22178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  603.288650][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'.
[  603.288954][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'.
[  603.290720][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'.
[  603.290746][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'.
[  603.546648][T22206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4009'.
[  603.581867][T22208] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4008'.
[  603.595810][T22209] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4008'.
[  603.788086][T22211] validate_nla: 6 callbacks suppressed
[  603.788108][T22211] netlink: 'syz.3.4010': attribute type 1 has an invalid length.
[  604.171392][T22219] netlink: 'syz.3.4013': attribute type 21 has an invalid length.
[  604.219562][T22219] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  604.239449][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.275953][T22219] bond4 (unregistering): Released all slaves
[  604.315736][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.432438][T22231] netlink: 'syz.1.4016': attribute type 1 has an invalid length.
[  604.432569][T22231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4016'.
[  604.951571][ T9858] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  604.983645][T22244] IPVS: Scheduler module ip_vs_sip not found
[  605.275240][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.696770][T22250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  606.254307][T22303] bridge0: entered allmulticast mode
[  606.255490][T22303] bridge_slave_1: left allmulticast mode
[  606.255731][T22303] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.286061][T22303] bridge_slave_0: left allmulticast mode
[  606.286092][T22303] bridge_slave_0: left promiscuous mode
[  606.286326][T22303] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.323589][T22303] bridge0 (unregistering): left allmulticast mode
[  606.340885][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.547521][T22311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.551256][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.206682][T22342] SET target dimension over the limit!
[  607.209915][T22344] SET target dimension over the limit!
[  607.355967][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.356358][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.362983][T22347] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  608.023458][T22383] __nla_validate_parse: 9 callbacks suppressed
[  608.023479][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'.
[  608.030322][T22386] netlink: 'syz.1.4059': attribute type 21 has an invalid length.
[  608.030349][T22386] IPv6: NLM_F_CREATE should be specified when creating new route
[  608.030432][T22386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.030442][T22386] IPv6: NLM_F_CREATE should be set when creating new route
[  608.030482][T22386] IPv6: NLM_F_CREATE should be set when creating new route
[  608.030505][T22386] IPv6: NLM_F_CREATE should be set when creating new route
[  608.033827][T22383] bond0: option miimon: invalid value (18446744071829782528)
[  608.033853][T22383] bond0: option miimon: allowed values 0 - 2147483647
[  608.041939][T22386] netlink: 'syz.1.4059': attribute type 21 has an invalid length.
[  608.042028][T22386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.320911][T22404] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  608.397994][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.966786][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.154565][T22431] nbd3: detected capacity change from 0 to 63
[  609.155880][T22431] block nbd3: NBD_DISCONNECT
[  609.157187][T22431] block nbd3: Disconnected due to user request.
[  609.157207][T22431] block nbd3: shutting down sockets
[  609.191501][ T2014] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.191619][ T2014] Buffer I/O error on dev nbd3, logical block 0, async page read
[  609.218456][ T2014] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.218524][ T2014] Buffer I/O error on dev nbd3, logical block 1, async page read
[  609.218763][ T2014] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.218823][ T2014] Buffer I/O error on dev nbd3, logical block 2, async page read
[  609.219020][ T2014] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.219059][ T2014] Buffer I/O error on dev nbd3, logical block 3, async page read
[  609.219348][ T2014] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.219405][ T2014] Buffer I/O error on dev nbd3, logical block 0, async page read
[  609.219573][ T2014] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.219620][ T2014] Buffer I/O error on dev nbd3, logical block 1, async page read
[  609.219801][ T2014] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.219839][ T2014] Buffer I/O error on dev nbd3, logical block 2, async page read
[  609.220033][ T2014] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.220071][ T2014] Buffer I/O error on dev nbd3, logical block 3, async page read
[  609.220264][ T2014] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.220304][ T2014] Buffer I/O error on dev nbd3, logical block 0, async page read
[  609.220487][ T2014] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  609.220523][ T2014] Buffer I/O error on dev nbd3, logical block 1, async page read
[  609.273386][T21426] ldm_validate_partition_table(): Disk read failed.
[  609.301303][T21426] Dev nbd3: unable to read RDB block 0
[  609.381827][T21426]  nbd3: unable to read partition table
[  609.435684][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.531104][T21426] ldm_validate_partition_table(): Disk read failed.
[  609.533662][T21426] Dev nbd3: unable to read RDB block 0
[  609.550813][T21426]  nbd3: unable to read partition table
[  609.647927][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'.
[  609.902182][T22459] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4080'.
[  609.930296][T22459] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4080'.
[  610.035749][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'.
[  610.398915][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.477274][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.753907][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4088'.
[  610.753937][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4088'.
[  611.206528][T22521] netlink: 'syz.4.4093': attribute type 1 has an invalid length.
[  611.515309][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.548563][T22541] netlink: 'syz.2.4100': attribute type 2 has an invalid length.
[  611.561839][T22535] ip_tables: iptables: counters copy to user failed while replacing table
[  612.307268][T22574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4109'.
[  612.307291][T22574] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4109'.
[  612.393817][T22574] veth3: entered promiscuous mode
[  612.559264][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.008188][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4117'.
[  613.441185][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.597414][ T8653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.639225][T22627] gretap0: vlans aren't supported yet for dev_uc|mc_add()
[  613.703078][T22633] __nla_validate_parse: 1 callbacks suppressed
[  613.703099][T22633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'.
[  613.703135][T22633] nbd: socks must be embedded in a SOCK_ITEM attr
[  613.843054][T22630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'.
[  614.315773][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4133'.
[  614.684443][ T8653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.127737][T22685] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  615.164981][T22690] Bluetooth: hci0: unsupported parameter 5135
[  615.165024][T22690] Bluetooth: hci0: unsupported parameter 8192
[  615.165050][T22690] Bluetooth: hci0: unsupported parameter 5135
[  615.165084][T22690] Bluetooth: hci0: unsupported parameter 8192
[  615.710852][T22715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4151'.
[  615.979392][T22727] netlink: 'syz.3.4156': attribute type 10 has an invalid length.
[  616.091660][T22727] team0: Device hsr0 is of different type
[  616.465262][T22754] syzkaller0: entered promiscuous mode
[  616.465323][T22754] syzkaller0: entered allmulticast mode
[  616.516951][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.606480][T22768] netlink: 'syz.1.4161': attribute type 1 has an invalid length.
[  616.606504][T22768] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4161'.
[  616.606520][T22768] netlink: 'syz.1.4161': attribute type 1 has an invalid length.
[  616.606531][T22768] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.4161'.
[  616.717660][T22772] sctp: [Deprecated]: syz.1.4162 (pid 22772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  616.717660][T22772] Use struct sctp_sack_info instead
[  616.801067][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.928114][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'.
[  616.928144][T22761] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4160'.
[  617.031317][T22776] xt_TCPMSS: Only works on TCP SYN packets
[  617.047886][T22754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'.
[  617.091118][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'.
[  617.140363][T22748] tipc: Started in network mode
[  617.140394][T22748] tipc: Node identity 62e7e8487ba8, cluster identity 4711
[  617.140772][T22748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.258468][T22744] tipc: Resetting bearer <eth:syzkaller0>
[  617.649124][ T1441] 
[  617.651507][ T1441] ======================================================
[  617.658535][ T1441] WARNING: possible circular locking dependency detected
[  617.665582][ T1441] syzkaller #0 Not tainted
[  617.670005][ T1441] ------------------------------------------------------
[  617.677029][ T1441] kworker/u8:10/1441 is trying to acquire lock:
[  617.683277][ T1441] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610
[  617.693122][ T1441] 
[  617.693122][ T1441] but task is already holding lock:
[  617.700480][ T1441] ffff88807ac65360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  617.710145][ T1441] 
[  617.710145][ T1441] which lock already depends on the new lock.
[  617.710145][ T1441] 
[  617.720555][ T1441] 
[  617.720555][ T1441] the existing dependency chain (in reverse order) is:
[  617.729570][ T1441] 
[  617.729570][ T1441] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  617.737474][ T1441]        lock_sock_nested+0x41/0x100
[  617.742767][ T1441]        mptcp_connect+0x4a0/0x7f0
[  617.747881][ T1441]        __inet_stream_connect+0x258/0xe00
[  617.753689][ T1441]        inet_stream_connect+0x66/0xa0
[  617.759146][ T1441]        __sys_connect+0x316/0x450
[  617.764265][ T1441]        __x64_sys_connect+0x7a/0x90
[  617.769551][ T1441]        do_syscall_64+0x166/0x520
[  617.774666][ T1441]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.781685][ T1441] 
[  617.781685][ T1441] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  617.789417][ T1441]        lock_sock_nested+0x41/0x100
[  617.794701][ T1441]        inet_shutdown+0x6a/0x390
[  617.799719][ T1441]        nbd_mark_nsock_dead+0x2cb/0x550
[  617.805354][ T1441]        recv_work+0x1cee/0x1e10
[  617.810296][ T1441]        process_scheduled_works+0xc3d/0x1630
[  617.816360][ T1441]        worker_thread+0xa47/0xfb0
[  617.821469][ T1441]        kthread+0x38b/0x480
[  617.826056][ T1441]        ret_from_fork+0x514/0xb70
[  617.831161][ T1441]        ret_from_fork_asm+0x1a/0x30
[  617.836446][ T1441] 
[  617.836446][ T1441] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  617.844086][ T1441]        __mutex_lock+0x19d/0x1550
[  617.849204][ T1441]        nbd_queue_rq+0x373/0xff0
[  617.854228][ T1441]        blk_mq_dispatch_rq_list+0x499/0x1990
[  617.860295][ T1441]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  617.867151][ T1441]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  617.873654][ T1441]        blk_mq_run_work_fn+0x16c/0x300
[  617.879201][ T1441]        process_scheduled_works+0xc3d/0x1630
[  617.885267][ T1441]        worker_thread+0xa47/0xfb0
[  617.890379][ T1441]        kthread+0x38b/0x480
[  617.894961][ T1441]        ret_from_fork+0x514/0xb70
[  617.900065][ T1441]        ret_from_fork_asm+0x1a/0x30
[  617.905357][ T1441] 
[  617.905357][ T1441] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  617.912567][ T1441]        __mutex_lock+0x19d/0x1550
[  617.917685][ T1441]        nbd_queue_rq+0xc1/0xff0
[  617.922622][ T1441]        blk_mq_dispatch_rq_list+0x499/0x1990
[  617.928688][ T1441]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  617.935540][ T1441]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  617.942044][ T1441]        blk_mq_run_work_fn+0x16c/0x300
[  617.947592][ T1441]        process_scheduled_works+0xc3d/0x1630
[  617.955436][ T1441]        worker_thread+0xa47/0xfb0
[  617.961364][ T1441]        kthread+0x38b/0x480
[  617.965961][ T1441]        ret_from_fork+0x514/0xb70
[  617.971104][ T1441]        ret_from_fork_asm+0x1a/0x30
[  617.976397][ T1441] 
[  617.976397][ T1441] -> #3 (set->srcu){.+.+}-{0:0}:
[  617.983602][ T1441]        __synchronize_srcu+0xc9/0x2f0
[  617.989144][ T1441]        elevator_switch+0x1e8/0x7b0
[  617.994423][ T1441]        elevator_change+0x2fa/0x480
[  617.999703][ T1441]        elevator_set_default+0x375/0x440
[  618.005435][ T1441]        blk_register_queue+0x3f3/0x4e0
[  618.010982][ T1441]        __add_disk+0x6b8/0xdb0
[  618.015842][ T1441]        add_disk_fwnode+0x100/0x3a0
[  618.021128][ T1441]        nbd_dev_add+0x733/0xb60
[  618.026059][ T1441]        nbd_init+0x168/0x1f0
[  618.030735][ T1441]        do_one_initcall+0x250/0x870
[  618.036025][ T1441]        do_initcall_level+0x10a/0x1a0
[  618.041476][ T1441]        do_initcalls+0x59/0xa0
[  618.046316][ T1441]        kernel_init_freeable+0x29d/0x3e0
[  618.052031][ T1441]        kernel_init+0x22/0x1d0
[  618.056874][ T1441]        ret_from_fork+0x514/0xb70
[  618.062762][ T1441]        ret_from_fork_asm+0x1a/0x30
[  618.069213][ T1441] 
[  618.069213][ T1441] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  618.077070][ T1441]        __mutex_lock+0x19d/0x1550
[  618.082189][ T1441]        elevator_change+0x1af/0x480
[  618.087468][ T1441]        elevator_set_none+0xb5/0x140
[  618.092853][ T1441]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  618.099184][ T1441]        nbd_start_device+0x189/0xb30
[  618.104553][ T1441]        nbd_genl_connect+0x167d/0x1cd0
[  618.110098][ T1441]        genl_family_rcv_msg_doit+0x233/0x340
[  618.116171][ T1441]        genl_rcv_msg+0x614/0x7a0
[  618.121202][ T1441]        netlink_rcv_skb+0x226/0x4a0
[  618.126488][ T1441]        genl_rcv+0x28/0x40
[  618.130991][ T1441]        netlink_unicast+0x7bd/0x940
[  618.136273][ T1441]        netlink_sendmsg+0x813/0xb40
[  618.141558][ T1441]        sock_sendmsg_nosec+0x13a/0x180
[  618.147114][ T1441]        ____sys_sendmsg+0x54e/0x850
[  618.152399][ T1441]        ___sys_sendmsg+0x2a5/0x360
[  618.157631][ T1441]        __x64_sys_sendmsg+0x1b1/0x290
[  618.163096][ T1441]        do_syscall_64+0x166/0x520
[  618.168208][ T1441]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.174620][ T1441] 
[  618.174620][ T1441] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  618.183225][ T1441]        blk_alloc_queue+0x544/0x690
[  618.188511][ T1441]        __blk_mq_alloc_disk+0x194/0x390
[  618.194146][ T1441]        nbd_dev_add+0x494/0xb60
[  618.199084][ T1441]        nbd_init+0x168/0x1f0
[  618.203755][ T1441]        do_one_initcall+0x250/0x870
[  618.209037][ T1441]        do_initcall_level+0x10a/0x1a0
[  618.214492][ T1441]        do_initcalls+0x59/0xa0
[  618.219337][ T1441]        kernel_init_freeable+0x29d/0x3e0
[  618.225052][ T1441]        kernel_init+0x22/0x1d0
[  618.229900][ T1441]        ret_from_fork+0x514/0xb70
[  618.235003][ T1441]        ret_from_fork_asm+0x1a/0x30
[  618.240289][ T1441] 
[  618.240289][ T1441] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  618.247494][ T1441]        __lock_acquire+0x164c/0x2de0
[  618.252861][ T1441]        lock_acquire+0x115/0x350
[  618.257883][ T1441]        fs_reclaim_acquire+0x71/0x100
[  618.263348][ T1441]        kmem_cache_alloc_node_noprof+0x5f/0x610
[  618.269725][ T1441]        __alloc_skb+0x1db/0x7a0
[  618.274664][ T1441]        tcp_stream_alloc_skb+0x3f/0x580
[  618.280294][ T1441]        tcp_connect+0x1646/0x54e0
[  618.285401][ T1441]        tcp_v6_connect+0x14ed/0x1cf0
[  618.290764][ T1441]        __inet_stream_connect+0x258/0xe00
[  618.296564][ T1441]        inet_stream_connect+0x66/0xa0
[  618.302018][ T1441]        kernel_connect+0x141/0x1c0
[  618.307216][ T1441]        rds_tcp_conn_path_connect+0x6e9/0x920
[  618.313369][ T1441]        rds_connect_worker+0x1d8/0x290
[  618.318914][ T1441]        process_scheduled_works+0xc3d/0x1630
[  618.324985][ T1441]        worker_thread+0xa47/0xfb0
[  618.330097][ T1441]        kthread+0x38b/0x480
[  618.334682][ T1441]        ret_from_fork+0x514/0xb70
[  618.339873][ T1441]        ret_from_fork_asm+0x1a/0x30
[  618.345162][ T1441] 
[  618.345162][ T1441] other info that might help us debug this:
[  618.345162][ T1441] 
[  618.355378][ T1441] Chain exists of:
[  618.355378][ T1441]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  618.355378][ T1441] 
[  618.369548][ T1441]  Possible unsafe locking scenario:
[  618.369548][ T1441] 
[  618.376998][ T1441]        CPU0                    CPU1
[  618.382353][ T1441]        ----                    ----
[  618.387708][ T1441]   lock(k-sk_lock-AF_INET6);
[  618.392378][ T1441]                                lock(sk_lock-AF_INET6);
[  618.399395][ T1441]                                lock(k-sk_lock-AF_INET6);
[  618.406587][ T1441]   lock(fs_reclaim);
[  618.410565][ T1441] 
[  618.410565][ T1441]  *** DEADLOCK ***
[  618.410565][ T1441] 
[  618.418695][ T1441] locks held by kworker/u8:10/1441: 4, last CPU#1:
[  618.425191][ T1441]  #0: ffff88807ffab940 ((wq_completion)krds_cp_wq#22/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  618.436943][ T1441]  #1: ffffc90005c3fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  618.449735][ T1441]  #2: ffff88805383b680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  618.460789][ T1441]  #3: ffff88807ac65360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  618.470908][ T1441] 
[  618.470908][ T1441] stack backtrace:
[  618.476812][ T1441] CPU: 1 UID: 0 PID: 1441 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  618.486354][ T1441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  618.496409][ T1441] Workqueue: krds_cp_wq#22/0 rds_connect_worker
[  618.502674][ T1441] Call Trace:
[  618.505954][ T1441]  <TASK>
[  618.508883][ T1441]  dump_stack_lvl+0xe8/0x150
[  618.513475][ T1441]  print_circular_bug+0x2e2/0x300
[  618.518499][ T1441]  check_noncircular+0x12f/0x150
[  618.523440][ T1441]  __lock_acquire+0x164c/0x2de0
[  618.528292][ T1441]  ? __lock_acquire+0x747/0x2de0
[  618.533230][ T1441]  lock_acquire+0x115/0x350
[  618.537726][ T1441]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  618.543708][ T1441]  ? lock_acquire+0x115/0x350
[  618.548382][ T1441]  ? __alloc_skb+0x1db/0x7a0
[  618.552969][ T1441]  fs_reclaim_acquire+0x71/0x100
[  618.557902][ T1441]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  618.563891][ T1441]  kmem_cache_alloc_node_noprof+0x5f/0x610
[  618.569706][ T1441]  ? lock_acquire+0x115/0x350
[  618.574377][ T1441]  ? __alloc_skb+0x1db/0x7a0
[  618.578967][ T1441]  __alloc_skb+0x1db/0x7a0
[  618.583393][ T1441]  tcp_stream_alloc_skb+0x3f/0x580
[  618.588524][ T1441]  ? __asan_memset+0x22/0x50
[  618.593125][ T1441]  tcp_connect+0x1646/0x54e0
[  618.597728][ T1441]  ? lock_acquire+0x115/0x350
[  618.602403][ T1441]  ? __pfx_tcp_connect+0x10/0x10
[  618.607335][ T1441]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  618.613488][ T1441]  ? lockdep_hardirqs_on+0x7b/0x110
[  618.618686][ T1441]  ? ktime_get_with_offset+0x93/0x2d0
[  618.624060][ T1441]  ? seqcount_lockdep_reader_access+0xea/0x100
[  618.630218][ T1441]  ? __asan_memset+0x22/0x50
[  618.634842][ T1441]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  618.641087][ T1441]  ? inet6_hash_connect+0xeb/0x170
[  618.646199][ T1441]  tcp_v6_connect+0x14ed/0x1cf0
[  618.651053][ T1441]  ? __pfx_tcp_v6_connect+0x10/0x10
[  618.656248][ T1441]  ? __local_bh_enable_ip+0xd6/0x140
[  618.661541][ T1441]  ? __bfs+0x153/0x290
[  618.665611][ T1441]  ? __bfs+0x153/0x290
[  618.669682][ T1441]  __inet_stream_connect+0x258/0xe00
[  618.674967][ T1441]  ? do_raw_spin_lock+0x12b/0x2f0
[  618.679995][ T1441]  ? __pfx___inet_stream_connect+0x10/0x10
[  618.685801][ T1441]  ? inet_stream_connect+0x51/0xa0
[  618.690912][ T1441]  ? __local_bh_enable_ip+0xd6/0x140
[  618.696204][ T1441]  inet_stream_connect+0x66/0xa0
[  618.701170][ T1441]  kernel_connect+0x141/0x1c0
[  618.705849][ T1441]  ? __pfx_kernel_connect+0x10/0x10
[  618.711054][ T1441]  ? __local_bh_enable_ip+0xd6/0x140
[  618.716343][ T1441]  rds_tcp_conn_path_connect+0x6e9/0x920
[  618.721989][ T1441]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  618.728158][ T1441]  ? lock_acquire+0x115/0x350
[  618.732844][ T1441]  rds_connect_worker+0x1d8/0x290
[  618.737870][ T1441]  ? process_scheduled_works+0x97a/0x1630
[  618.743588][ T1441]  process_scheduled_works+0xc3d/0x1630
[  618.749150][ T1441]  ? __pfx_process_scheduled_works+0x10/0x10
[  618.755171][ T1441]  ? assign_work+0x3cf/0x5d0
[  618.759766][ T1441]  worker_thread+0xa47/0xfb0
[  618.764375][ T1441]  kthread+0x38b/0x480
[  618.768442][ T1441]  ? __pfx_worker_thread+0x10/0x10
[  618.773553][ T1441]  ? __pfx_kthread+0x10/0x10
[  618.778181][ T1441]  ret_from_fork+0x514/0xb70
[  618.782770][ T1441]  ? __pfx_ret_from_fork+0x10/0x10
[  618.787877][ T1441]  ? __switch_to+0xc89/0x1420
[  618.792555][ T1441]  ? __pfx_kthread+0x10/0x10
[  618.797141][ T1441]  ret_from_fork_asm+0x1a/0x30
[  618.801922][ T1441]  </TASK>
[  618.819077][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.826594][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.827367][T22744] tipc: Disabling bearer <eth:syzkaller0>
[  618.833490][T22796] __nla_validate_parse: 1 callbacks suppressed
[  618.833509][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'.
[  618.833535][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4168'.
[  618.859361][ T8655] tipc: Node number set to 424667208
[  619.155267][ T9859] unregister_netdevice: waiting for C to become free. Usage count = 5
[  619.155440][ T9859] ref_tracker: netdev@ffff88807aff6700 has 1/4 users at
[  619.155440][ T9859]      dst_init+0xbe/0x470
[  619.155440][ T9859]      dst_alloc+0x12a/0x170
[  619.155440][ T9859]      ip6_pol_route+0xba1/0x14d0
[  619.155440][ T9859]      fib6_rule_lookup+0x21a/0x6e0
[  619.155440][ T9859]      ip6_route_output_flags+0x364/0x5d0
[  619.155440][ T9859]      ip6_dst_lookup_tail+0x273/0x1610
[  619.155440][ T9859]      ip6_dst_lookup_flow+0x89/0x150
[  619.155440][ T9859]      send6+0x4ea/0x920
[  619.155440][ T9859]      wg_socket_send_skb_to_peer+0x111/0x1d0
[  619.155440][ T9859]      wg_packet_tx_worker+0x1c8/0x7e0
[  619.155440][ T9859]      process_scheduled_works+0xc3d/0x1630
[  619.155440][ T9859]      worker_thread+0xa47/0xfb0
[  619.155440][ T9859]      kthread+0x38b/0x480
[  619.155440][ T9859]      ret_from_fork+0x514/0xb70
[  619.155440][ T9859]      ret_from_fork_asm+0x1a/0x30
[  619.155440][ T9859] 
[  619.155588][ T9859] ref_tracker: netdev@ffff88807aff6700 has 1/4 users at
[  619.155588][ T9859]      dst_init+0xbe/0x470
[  619.155588][ T9859]      dst_alloc+0x12a/0x170
[  619.155588][ T9859]      ip6_pol_route+0xba1/0x14d0
[  619.155588][ T9859]      fib6_rule_lookup+0x21a/0x6e0
[  619.155588][ T9859]      ip6_route_output_flags+0x364/0x5d0
[  619.155588][ T9859]      ip6_dst_lookup_tail+0x1a1/0x1610
[  619.155588][ T9859]      ip6_dst_lookup_flow+0x89/0x150
[  619.155588][ T9859]      send6+0x4ea/0x920
[  619.155588][ T9859]      wg_socket_send_skb_to_peer+0x111/0x1d0
[  619.155588][ T9859]      wg_packet_handshake_send_worker+0x204/0x370
[  619.155588][ T9859]      process_scheduled_works+0xc3d/0x1630
[  619.155588][ T9859]      worker_thread+0xa47/0xfb0
[  619.155588][ T9859]      kthread+0x38b/0x480
[  619.155588][ T9859]      ret_from_fork+0x514/0xb70
[  619.155588][ T9859]      ret_from_fork_asm+0x1a/0x30
[  619.155588][ T9859] 
[  619.155757][ T9859] ref_tracker: netdev@ffff88807aff6700 has 1/4 users at
[  619.155757][ T9859]      netdev_get_by_index+0x79/0xb0
[  619.155757][ T9859]      fib6_nh_init+0x285/0x1e40
[  619.155757][ T9859]      ip6_route_info_create_nh+0x16a/0xad0
[  619.155757][ T9859]      addrconf_f6i_alloc+0x3b7/0x630
[  619.155757][ T9859]      ipv6_add_addr+0x59c/0x1110
[  619.155757][ T9859]      add_addr+0x8b/0x2d0
[  619.155757][ T9859]      addrconf_notify+0xb1e/0x1050
[  619.155757][ T9859]      notifier_call_chain+0x1a5/0x3d0
[  619.155757][ T9859]      __dev_notify_flags+0x31e/0x510
[  619.155757][ T9859]      netif_change_flags+0xde/0x1b0
[  619.155757][ T9859]      do_setlink+0xdd6/0x4670
[  619.155757][ T9859]      rtnl_newlink+0x15a3/0x1c30
[  619.155757][ T9859]      rtnetlink_rcv_msg+0x802/0xc00
[  619.155757][ T9859]      netlink_rcv_skb+0x226/0x4a0
[  619.155757][ T9859]      netlink_unicast+0x7bd/0x940
[  619.155757][ T9859]      netlink_sendmsg+0x813/0xb40
[  619.155757][ T9859] 
[  619.155916][ T9859] ref_tracker: netdev@ffff88807aff6700 has 1/4 users at
[  619.155916][ T9859]      ipv6_add_dev+0x50f/0x13a0
[  619.155916][ T9859]      addrconf_notify+0x771/0x1050
[  619.155916][ T9859]      notifier_call_chain+0x1a5/0x3d0
[  619.155916][ T9859]      register_netdevice+0x18a4/0x1eb0
[  619.155916][ T9859]      register_netdev+0x40/0x60
[  619.155916][ T9859]      loopback_net_init+0x75/0x150
[  619.155916][ T9859]      ops_init+0x35d/0x5d0
[  619.155916][ T9859]      setup_net+0x118/0x350
[  619.155916][ T9859]      copy_net_ns+0x53b/0x780
[  619.155916][ T9859]      create_new_namespaces+0x3f0/0x6b0
[  619.155916][ T9859]      unshare_nsproxy_namespaces+0x149/0x190
[  619.155916][ T9859]      ksys_unshare+0x5a7/0x950
[  619.155916][ T9859]      __x64_sys_unshare+0x38/0x50
[  619.155916][ T9859]      do_syscall_64+0x166/0x520
[  619.155916][ T9859]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.155916][ T9859] 
[  619.197218][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.596838][T20216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.835709][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.886215][ T8653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.927121][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.635296][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.966500][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.997661][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.320357][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.322358][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.046896][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.085676][ T8656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.126456][ T8653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.355460][T20215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.434877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog