last executing test programs:

51.281266926s ago: executing program 2 (id=1528):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

46.141343898s ago: executing program 2 (id=1550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0xf03c1a4546902de9, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xfa, 0x5, 0x0, 0x0, 0x4, 0x10012}}, 0x1c}}, 0x4040014)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440, 0x115}}}}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26eb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x48800)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

46.049772039s ago: executing program 4 (id=1551):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
close(0x3)

45.256025069s ago: executing program 3 (id=1556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000001100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x4008004)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x81, &(0x7f0000000680)=""/129, 0x0, 0x22}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x20008080)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000740)="2705020059feff000600002f86dd", 0xe}], 0x1}, 0x894)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000140)={r3})
recvmsg(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040)

45.033348991s ago: executing program 2 (id=1559):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
close(0x3)

44.6698654s ago: executing program 4 (id=1560):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

44.608106695s ago: executing program 3 (id=1561):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x4)
sendfile(r0, r1, 0x0, 0xffffffff000)
connect$llc(r0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000018060020010000000000000000000000000002fe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b415dbe75799"], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r4, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x20000000)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000000)={'veth0_to_batadv\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801002020205d0af8ff00000020bea100000000000007010000f8ffffffb702000000b7030000ff090000850000007200000095000000811c2264ab33a9ca43081cb0b3756e7dd434170753ea4785495380b615971d8af42c71ec0380d98a64be8c510a8f1b8a78d78179db2693f99bf0b6ace32a80914774ed000f7538b9a4ae3e7cecf4bf0865a90f2952ed33c8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

44.496848976s ago: executing program 0 (id=1562):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x23, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x9be47000)

44.236239444s ago: executing program 4 (id=1564):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
close(0x3)

43.502273441s ago: executing program 3 (id=1565):
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4)
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, r4, 0x0)
write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[], 0x6)
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

43.225569763s ago: executing program 0 (id=1566):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r5, 0x6, 0xd, 0x0, &(0x7f0000000080))

43.027139491s ago: executing program 1 (id=1567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x1, 0x9, 0x400, 0x4, 0x6, 0x7, 0x0, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x4, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xfffffffc, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x10000000}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xd}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)

42.719454008s ago: executing program 4 (id=1568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d0187f00080211000001"], 0x3c)

42.681807228s ago: executing program 2 (id=1569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0xf03c1a4546902de9, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xfa, 0x5, 0x0, 0x0, 0x4, 0x10012}}, 0x1c}}, 0x4040014)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440, 0x115}}}}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26eb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x48800)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

42.399821381s ago: executing program 0 (id=1570):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
close(0x3)

42.351907416s ago: executing program 1 (id=1571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x2)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)

42.269540507s ago: executing program 3 (id=1572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d1ac21", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

41.781939883s ago: executing program 1 (id=1573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000003340)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)="f5", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0xda49, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x20008000)

41.73937467s ago: executing program 4 (id=1574):
r0 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e)
socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)

41.39514078s ago: executing program 2 (id=1575):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x4)
sendfile(r0, r1, 0x0, 0xffffffff000)
connect$llc(r0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000018060020010000000000000000000000000002fe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b415dbe75799"], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r4, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x20000000)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000000)={'veth0_to_batadv\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801002020205d0af8ff00000020bea100000000000007010000f8ffffffb702000000b7030000ff090000850000007200000095000000811c2264ab33a9ca43081cb0b3756e7dd434170753ea4785495380b615971d8af42c71ec0380d98a64be8c510a8f1b8a78d78179db2693f99bf0b6ace32a80914774ed000f7538b9a4ae3e7cecf4bf0865a90f2952ed33c8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

41.123485972s ago: executing program 1 (id=1576):
socket$inet6(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0)
r0 = socket(0x11, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
socket(0x10, 0x3, 0x0)
unshare(0x22000400)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x4, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

41.110456956s ago: executing program 3 (id=1577):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)

40.3737797s ago: executing program 1 (id=1578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{0x0}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(0x0, r5)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={<r9=>r8, 0x8}, &(0x7f00000000c0)=0x8)
sendmmsg$inet_sctp(r7, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r9}}], 0x20, 0x4c004}], 0x1, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90)
sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006)
socket(0x2b, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151d0100000000004000128009000100766c616e0000000030000280040003800600010002000000040004801c0004800cf2010044c00000fe0f00000c000100080000000196000008000500", @ANYRES32, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0)

40.228745294s ago: executing program 0 (id=1579):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x8000000000000000, 0x100000000, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x4}}, 0xe8)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000600), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)
close(0x3)

39.787307153s ago: executing program 1 (id=1580):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

39.647723869s ago: executing program 2 (id=1581):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket(0xa, 0x2, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280))

39.285994564s ago: executing program 4 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0)

39.065088855s ago: executing program 0 (id=1583):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}}], 0x2, 0x4040081)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000084)

38.742023868s ago: executing program 3 (id=1584):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
listen(r0, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

35.51306801s ago: executing program 0 (id=1585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0xf03c1a4546902de9, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xfa, 0x5, 0x0, 0x0, 0x4, 0x10012}}, 0x1c}}, 0x4040014)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440, 0x115}}}}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26eb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x48800)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

23.026844329s ago: executing program 32 (id=1580):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

18.963826511s ago: executing program 33 (id=1581):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket(0xa, 0x2, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000280))

12.848933359s ago: executing program 34 (id=1585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0xf03c1a4546902de9, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0xfa, 0x5, 0x0, 0x0, 0x4, 0x10012}}, 0x1c}}, 0x4040014)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440, 0x115}}}}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26eb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4080}, 0x48800)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

5.868438123s ago: executing program 35 (id=1584):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
listen(r0, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

0s ago: executing program 36 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

 92.288786][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.303348][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.314379][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.325313][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.334349][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.344671][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.354076][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.365191][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.418877][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   92.473097][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.480364][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.507318][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.514554][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.551785][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.562791][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.570920][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.581138][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.597407][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.607975][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.616728][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.627040][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.644976][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.720046][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   92.756000][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.763214][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.817225][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.824491][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.849190][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.963266][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   93.007831][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.015190][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.035333][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.061891][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.069105][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.166851][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   93.216968][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.252474][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.259757][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.266206][   T50] Bluetooth: hci0: command tx timeout
[   93.303953][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.311176][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.341766][   T50] Bluetooth: hci1: command tx timeout
[   93.398167][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   93.423594][   T50] Bluetooth: hci4: command tx timeout
[   93.429407][ T4938] Bluetooth: hci2: command tx timeout
[   93.435289][ T5629] Bluetooth: hci3: command tx timeout
[   93.456958][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.464185][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.514506][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.521757][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.693102][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.946584][ T5628] veth0_vlan: entered promiscuous mode
[   94.039756][ T5628] veth1_vlan: entered promiscuous mode
[   94.151257][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.238845][ T5628] veth0_macvtap: entered promiscuous mode
[   94.274866][ T5628] veth1_macvtap: entered promiscuous mode
[   94.377696][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.409291][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.436616][ T5620] veth0_vlan: entered promiscuous mode
[   94.485048][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.514975][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.532666][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.557785][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.606320][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.624105][ T5620] veth1_vlan: entered promiscuous mode
[   94.842732][ T5620] veth0_macvtap: entered promiscuous mode
[   94.887771][ T5621] veth0_vlan: entered promiscuous mode
[   94.898411][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.914339][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.922289][ T5620] veth1_macvtap: entered promiscuous mode
[   94.956254][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.998759][ T5621] veth1_vlan: entered promiscuous mode
[   95.016825][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.031180][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.041721][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.067192][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.130307][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.204358][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.215859][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.232934][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.258062][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.274474][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.341941][ T5629] Bluetooth: hci0: command tx timeout
[   95.389779][ T5621] veth0_macvtap: entered promiscuous mode
[   95.417028][ T5627] veth0_vlan: entered promiscuous mode
[   95.422731][ T5629] Bluetooth: hci1: command tx timeout
[   95.454998][ T5621] veth1_macvtap: entered promiscuous mode
[   95.502116][ T5629] Bluetooth: hci3: command tx timeout
[   95.507709][   T50] Bluetooth: hci4: command tx timeout
[   95.513198][ T4938] Bluetooth: hci2: command tx timeout
[   95.558539][ T5627] veth1_vlan: entered promiscuous mode
[   95.611970][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.636340][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.647038][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.728756][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.771347][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.799645][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.817104][   T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.853354][   T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.863941][   T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.893798][ T5625] veth0_vlan: entered promiscuous mode
[   95.917374][   T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.965419][ T5627] veth0_macvtap: entered promiscuous mode
[   96.007957][ T5627] veth1_macvtap: entered promiscuous mode
[   96.065865][ T5625] veth1_vlan: entered promiscuous mode
[   96.158346][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.228472][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.242960][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.253268][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.293047][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.336495][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.365230][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.387764][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   96.432409][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.433904][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.459378][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.478116][ T5625] veth0_macvtap: entered promiscuous mode
[   96.506642][ T5625] veth1_macvtap: entered promiscuous mode
[   96.645317][ T5830] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   96.664470][ T5828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'.
[   96.804114][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'.
[   96.823372][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.838171][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.848733][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   96.866058][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.873843][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.930947][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.973248][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.054563][   T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.090991][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.111149][   T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.123615][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.277955][ T5841] IPv6: Can't replace route, no match found
[   97.289778][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   97.326842][ T5845] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   97.427109][ T5845] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   97.455820][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.486378][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.500164][ T5845] ipt_ECN: cannot use operation on non-tcp rule
[   97.676896][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.693524][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.755037][ T5859] netlink: 'syz.1.2': attribute type 15 has an invalid length.
[   97.770428][ T5859] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2'.
[   97.872012][ T5856] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'.
[   97.991142][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.017905][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.259113][ T5871] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   98.360212][ T5875] ieee802154 phy0 wpan0: encryption failed: -22
[   98.544669][ T5879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'.
[   99.499043][ T5898] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET)
[   99.556307][ T5897] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   99.611971][ T5897] netlink: 756 bytes leftover after parsing attributes in process `syz.2.14'.
[  100.030497][ T5913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17'.
[  101.366748][ T5974] atomic_op ffff888032b84998 conn xmit_atomic 0000000000000000
[  101.382283][ T5975] bridge0: port 3(syz_tun) entered blocking state
[  101.406001][ T5975] bridge0: port 3(syz_tun) entered disabled state
[  101.413256][ T5968] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  101.424520][ T5975] syz_tun: entered allmulticast mode
[  101.453841][ T5719] IPVS: starting estimator thread 0...
[  101.461840][ T5760] IPVS: starting estimator thread 0...
[  101.505718][ T5975] syz_tun: entered promiscuous mode
[  101.517347][ T5975] bridge0: port 3(syz_tun) entered blocking state
[  101.524955][ T5975] bridge0: port 3(syz_tun) entered forwarding state
[  101.561591][ T5980] IPVS: using max 28 ests per chain, 67200 per kthread
[  101.569305][ T5979] IPVS: using max 29 ests per chain, 69600 per kthread
[  102.012552][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'.
[  102.709094][ T6008] Zero length message leads to an empty skb
[  102.764653][ T6006] ip6erspan0: entered allmulticast mode
[  102.892212][ T6014] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.974152][ T6019] netlink: 240 bytes leftover after parsing attributes in process `syz.0.30'.
[  102.994663][ T6019] netlink: 'syz.0.30': attribute type 9 has an invalid length.
[  103.056293][ T6019] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.30'.
[  103.132552][ T6001] syzkaller0: entered allmulticast mode
[  103.840222][ T6037] netlink: 128 bytes leftover after parsing attributes in process `syz.1.35'.
[  103.880017][ T6016] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  103.938767][ T6041] Bluetooth: MGMT ver 1.23
[  104.171555][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'.
[  104.326036][ T6053] xt_l2tp: invalid flags combination: 8
[  104.366982][ T6053] netlink: 'syz.4.37': attribute type 1 has an invalid length.
[  105.108471][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'.
[  105.195368][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.203206][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.330493][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.351088][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.504740][ T6077] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  105.699032][  T585] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.714108][  T585] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.738579][ T6077] batadv0: entered promiscuous mode
[  105.753578][ T6077] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  105.804785][  T585] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.835462][  T585] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.297627][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'.
[  106.316283][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'.
[  106.336674][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'.
[  106.349925][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'.
[  106.408044][ T6086] bridge0: port 3(syz_tun) entered disabled state
[  106.422921][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.430751][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.707957][ T6032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.989441][ T6105] netlink: 'syz.4.48': attribute type 1 has an invalid length.
[  107.097834][ T6118] __nla_validate_parse: 34 callbacks suppressed
[  107.097854][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'.
[  107.180106][ T6120] netlink: 'syz.4.48': attribute type 3 has an invalid length.
[  107.209764][ T6120] netlink: 3 bytes leftover after parsing attributes in process `syz.4.48'.
[  107.384113][ T6111] bond1 (unregistering): Released all slaves
[  107.400645][ T6119] netlink: 'syz.2.50': attribute type 11 has an invalid length.
[  107.467574][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'.
[  107.800572][ T6136] netlink: 'syz.2.54': attribute type 13 has an invalid length.
[  107.844761][ T6136] netlink: 'syz.2.54': attribute type 17 has an invalid length.
[  107.964139][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.972095][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.235795][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.258291][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.476164][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.486437][ T6136] 8021q: adding VLAN 0 to HW filter on device team0
[  108.517049][ T6136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.550870][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[  108.585512][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.593794][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.610697][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.618200][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.644467][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.655013][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.684928][ T6136] veth1_vlan: left promiscuous mode
[  108.693030][ T6136] veth0_vlan: left promiscuous mode
[  108.703659][ T6136] veth0_vlan: entered promiscuous mode
[  108.715532][ T6136] veth1_vlan: entered promiscuous mode
[  108.731086][ T6136] veth1_macvtap: left promiscuous mode
[  108.742053][ T6136] veth0_macvtap: left promiscuous mode
[  108.749383][ T6136] veth0_macvtap: entered promiscuous mode
[  108.765010][ T6136] veth1_macvtap: entered promiscuous mode
[  108.777372][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.790438][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.806029][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  108.817747][ T6136] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  108.834852][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.941227][ T6156] netlink: 92 bytes leftover after parsing attributes in process `syz.0.57'.
[  109.147089][ T6165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.60'.
[  109.185609][ T6157] syz.0.57 (6157) used greatest stack depth: 18312 bytes left
[  109.214824][ T6165] Bluetooth: MGMT ver 1.23
[  109.286034][ T6162] tipc: Started in network mode
[  109.309518][ T6162] tipc: Node identity 6e9e875597ab, cluster identity 4711
[  109.329889][ T6162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.409161][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'.
[  109.599724][ T6162] syzkaller0: entered promiscuous mode
[  109.614093][ T6162] syzkaller0: entered allmulticast mode
[  109.630934][ T6162] tipc: Resetting bearer <eth:syzkaller0>
[  109.729510][ T6184] veth1_macvtap: left promiscuous mode
[  109.922094][ T6184] veth1_macvtap: entered promiscuous mode
[  109.961669][ T6161] tipc: Resetting bearer <eth:syzkaller0>
[  110.063342][ T6191] netlink: 'syz.3.62': attribute type 13 has an invalid length.
[  110.499702][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'.
[  112.070597][ T6161] tipc: Disabling bearer <eth:syzkaller0>
[  112.262392][ T6200] batadv0: entered promiscuous mode
[  112.273868][ T6200] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  112.295605][ T1225] tipc: Node number set to 4181034837
[  112.325554][ T6205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  112.548247][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'.
[  112.701027][ T6222] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  112.834410][ T6222] block nbd1: not configured, cannot reconfigure
[  113.354023][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'.
[  113.526160][ T6244] block nbd0: not configured, cannot reconfigure
[  113.590196][ T6255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.75'.
[  113.668905][ T6256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.980389][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.103247][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'.
[  114.250681][ T6269] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  114.320900][ T6276] netlink: 14 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.332760][ T6269] bond1 (unregistering): Released all slaves
[  114.399510][ T6286] netlink: 100 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.426213][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.525380][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.554325][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'.
[  114.816256][   T29] audit: type=1800 audit(1785055259.887:2): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="memory.events" dev="tmpfs" ino=111 res=0 errno=0
[  115.027850][ T6304] netlink: 'syz.0.80': attribute type 13 has an invalid length.
[  115.075281][ T6304] netlink: 'syz.0.80': attribute type 17 has an invalid length.
[  115.801153][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.820984][ T6327] Cannot find del_set index 0 as target
[  115.863671][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.217557][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.225316][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.365571][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.386173][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.573815][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.583654][ T6304] 8021q: adding VLAN 0 to HW filter on device team0
[  116.595821][ T6304] batadv0: left promiscuous mode
[  116.603723][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.669846][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.681347][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.697654][ T6304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  116.709617][ T6304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  116.735314][ T6304] veth1_vlan: left promiscuous mode
[  116.742509][ T6304] veth0_vlan: left promiscuous mode
[  116.749379][ T6304] veth0_vlan: entered promiscuous mode
[  116.757484][ T6304] veth1_vlan: entered promiscuous mode
[  116.768873][ T6304] veth0_macvtap: left promiscuous mode
[  116.775797][ T6304] veth0_macvtap: entered promiscuous mode
[  116.793605][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  116.805740][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  116.818508][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  116.831070][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  116.848257][ T6313] team_slave_1: Caught tx_queue_len zero misconfig
[  116.885198][ T6297] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[  116.908491][ T6297] netlink: 'syz.2.81': attribute type 2 has an invalid length.
[  116.950255][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.957522][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.020320][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.027656][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.203840][ T5949] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.234772][ T5949] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.270534][ T5949] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.308039][ T5949] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.510022][ T6349] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  117.534203][ T6349] bond1 (unregistering): Released all slaves
[  117.638516][ T6357] ip6gre1: entered promiscuous mode
[  117.654563][ T6357] ip6gre1: entered allmulticast mode
[  117.667189][ T6359] __nla_validate_parse: 5 callbacks suppressed
[  117.667207][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[  117.714354][ T6359] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  117.728310][ T6359] bond1 (unregistering): Released all slaves
[  117.799572][ T6369] netlink: 92 bytes leftover after parsing attributes in process `syz.2.92'.
[  118.016526][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.038763][ T6355] 8021q: adding VLAN 0 to HW filter on device team0
[  118.049940][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.157327][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.184817][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.216404][ T6355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.244578][ T6355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.280285][ T6355] veth1_vlan: left promiscuous mode
[  118.298202][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[  118.307287][ T6355] veth0_vlan: left promiscuous mode
[  118.325848][ T6355] veth0_vlan: entered promiscuous mode
[  118.343839][ T6355] veth1_vlan: entered promiscuous mode
[  118.402896][ T6355] veth1_macvtap: left promiscuous mode
[  118.430084][ T6355] veth0_macvtap: left promiscuous mode
[  118.450935][ T6355] veth0_macvtap: entered promiscuous mode
[  118.471252][ T6355] veth1_macvtap: entered promiscuous mode
[  118.500115][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  118.516669][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  118.535077][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  118.549845][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  118.617908][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.625186][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.649481][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.656768][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.808639][ T6380] veth0: entered promiscuous mode
[  118.826758][ T6387] veth0: left promiscuous mode
[  119.116538][ T6393] bond0: (slave bond_slave_1): Releasing backup interface
[  119.156506][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.172298][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.207813][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.275527][ T6411] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[  119.307038][ T6411] netlink: 'syz.0.97': attribute type 2 has an invalid length.
[  119.329090][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.476578][ T5752] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  119.494416][  T585] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  119.656750][ T6423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.101'.
[  119.967526][ T6430] syz_tun: entered allmulticast mode
[  119.978414][ T6432] netlink: 200 bytes leftover after parsing attributes in process `syz.0.103'.
[  120.024756][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'.
[  120.129542][ T6430] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  120.221746][ T5732] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  120.349329][ T6430] bond1 (unregistering): Released all slaves
[  120.576694][ T6456] syz_tun: entered allmulticast mode
[  120.649710][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.107'.
[  120.742097][ T6428] syz_tun: left allmulticast mode
[  120.770133][  T585] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  120.805602][  T585] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  120.963496][ T6462] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  121.054925][ T6462] bond1 (unregistering): Released all slaves
[  121.322514][ T5732] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  121.517147][ T6450] bridge0: port 3(syz_tun) entered blocking state
[  121.523849][ T6450] bridge0: port 3(syz_tun) entered forwarding state
[  121.532367][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.539601][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.547199][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.554478][ T6450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.588819][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.613578][ T6450] 8021q: adding VLAN 0 to HW filter on device team0
[  121.645868][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.395939][ T6455] syz_tun: left allmulticast mode
[  122.605619][ T6522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.113'.
[  122.676570][ T6508] netlink: 'syz.3.111': attribute type 1 has an invalid length.
[  122.725487][ T6508] netlink: 'syz.3.111': attribute type 2 has an invalid length.
[  122.927568][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'.
[  123.185301][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.115'.
[  123.306374][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.116'.
[  123.934306][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'.
[  124.756582][ T6535] syz_tun: entered allmulticast mode
[  124.762494][ T6535] syz_tun: left allmulticast mode
[  124.839336][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.847065][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.966236][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.986972][ T6541] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.103123][ T6559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.120'.
[  125.125384][ T6541] ip6erspan0: left allmulticast mode
[  125.158637][ T6542] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  125.216882][ T6555] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  125.270724][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.336598][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.376811][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.428060][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.468052][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.556238][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.595206][ T6573] syz_tun: entered allmulticast mode
[  125.625547][ T6575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'.
[  125.666752][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'.
[  125.892647][ T6570] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  125.914933][ T6570] bond1 (unregistering): Released all slaves
[  125.999529][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'.
[  126.016444][ T6581] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[  126.045156][ T6581] netlink: 'syz.1.127': attribute type 2 has an invalid length.
[  126.077018][ T6569] syz_tun: left allmulticast mode
[  126.262883][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'.
[  126.304970][ T6598] syz_tun: entered allmulticast mode
[  126.326531][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'.
[  126.442868][ T6598] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  126.527219][ T6598] bond1 (unregistering): Released all slaves
[  126.668082][ T6330] IPVS: starting estimator thread 0...
[  126.692799][ T6597] syz_tun: left allmulticast mode
[  126.773433][ T6610] IPVS: using max 29 ests per chain, 69600 per kthread
[  127.140739][ T6624] syz_tun: entered allmulticast mode
[  127.150120][ T6620] block nbd0: server does not support multiple connections per device.
[  127.183935][ T6620] block nbd0: shutting down sockets
[  127.313387][ T6624] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  127.362809][ T6624] bond1 (unregistering): Released all slaves
[  127.417305][ T6639] netlink: 'syz.4.144': attribute type 1 has an invalid length.
[  127.817764][ T6622] syz_tun: left allmulticast mode
[  127.957506][ T6620] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  127.978998][ T6620] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  128.188316][ T6620] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  128.216450][ T6620] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  128.311438][ T6620] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  128.345947][ T6620] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  128.417882][ T6620] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  128.433811][ T6620] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  128.449600][ T6672] __nla_validate_parse: 8 callbacks suppressed
[  128.449620][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'.
[  128.476309][ T6620] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  128.488126][ T6620] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  129.090515][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'.
[  129.367333][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[  129.453591][ T6701] macsec1: entered promiscuous mode
[  129.759595][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.159912][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.357760][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'.
[  130.483698][ T6702] ip6gre1: left promiscuous mode
[  130.501122][ T6702] ip6gre1: left allmulticast mode
[  130.516804][ T5951] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.574596][ T5951] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.610702][ T5951] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.648578][ T5951] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.765358][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[  130.837929][ T6739] ip6gre2: entered promiscuous mode
[  130.851909][ T6739] ip6gre2: entered allmulticast mode
[  130.873684][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.167'.
[  130.904489][ T6737] tunl0: Caught tx_queue_len zero misconfig
[  130.926213][ T6739] netlink: 'syz.2.166': attribute type 6 has an invalid length.
[  130.971514][ T6739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.166'.
[  131.094783][ T6752] bond0: (slave ip6tnl0): refused to change device type
[  131.233923][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.173'.
[  131.247618][ T6761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.172'.
[  131.569681][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'.
[  131.609677][ T6758] bridge0: port 3(syz_tun) entered disabled state
[  131.664829][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.672701][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.130852][ T6758] batadv0: left promiscuous mode
[  132.345090][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.410371][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.799384][ T6764] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  132.865191][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  133.014903][ T6810] Cannot find add_set index 1 as target
[  133.278738][  T585] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.301033][ T6805] ip6gre2: left promiscuous mode
[  133.306783][ T6805] ip6gre2: left allmulticast mode
[  133.370204][ T6819] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[  133.393943][ T6819] netlink: 'syz.1.178': attribute type 2 has an invalid length.
[  133.529793][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.537252][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.824648][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.918432][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.057994][  T585] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.083960][ T6831] __nla_validate_parse: 2 callbacks suppressed
[  134.083982][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.183'.
[  134.136846][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'.
[  134.188855][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[  134.250202][ T6847] macsec0: entered promiscuous mode
[  134.270095][  T585] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.314899][  T585] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.409447][ T6837] macsec0 (unregistering): left promiscuous mode
[  134.498108][  T585] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.538823][  T585] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.579841][ T6863] macvtap0: entered promiscuous mode
[  134.597308][  T585] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.636413][  T585] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.694316][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.192'.
[  134.754968][ T6872] netlink: 68 bytes leftover after parsing attributes in process `syz.1.194'.
[  134.769787][ T6870] syz_tun: entered allmulticast mode
[  134.813497][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.193'.
[  135.035324][ T6870] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  135.297881][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'.
[  135.429041][ T6870] bond1 (unregistering): Released all slaves
[  135.520548][ T6898] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[  135.536419][ T6898] netlink: 'syz.0.195': attribute type 2 has an invalid length.
[  135.574357][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.200'.
[  135.618887][ T6869] syz_tun: left allmulticast mode
[  135.711731][   T29] audit: type=1800 audit(1785055280.787:3): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="memory.events" dev="tmpfs" ino=230 res=0 errno=0
[  135.887761][ T6916] ip6gre1: entered allmulticast mode
[  136.059330][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'.
[  136.267597][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'.
[  136.309572][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.891047][ T6946] netlink: 'syz.1.213': attribute type 1 has an invalid length.
[  136.919632][ T6946] netlink: 'syz.1.213': attribute type 2 has an invalid length.
[  137.000772][ T6968] netlink: 'syz.3.217': attribute type 39 has an invalid length.
[  137.829913][ T7001] batadv0: entered promiscuous mode
[  137.874036][ T7001] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  138.074767][   T29] audit: type=1800 audit(1785055283.157:4): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.215" name="memory.events" dev="tmpfs" ino=244 res=0 errno=0
[  138.211050][ T7011] ip6gre1: left allmulticast mode
[  139.144404][ T7042] macvtap0: left promiscuous mode
[  139.384654][ T7053] __nla_validate_parse: 9 callbacks suppressed
[  139.384675][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'.
[  139.457572][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.1.237'.
[  139.509466][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'.
[  140.011571][ T7086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.238'.
[  140.200400][ T7086] ip6gre2: entered promiscuous mode
[  140.228262][ T7086] ip6gre2: entered allmulticast mode
[  140.279792][ T7093] netlink: 92 bytes leftover after parsing attributes in process `syz.4.238'.
[  140.336597][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'.
[  140.451395][ T7102] syz_tun: entered allmulticast mode
[  140.478409][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'.
[  140.532236][   T29] audit: type=1800 audit(1785055285.617:5): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.237" name="memory.events" dev="tmpfs" ino=281 res=0 errno=0
[  140.627011][ T7102] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  140.638380][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  140.667617][ T7102] bond1 (unregistering): Released all slaves
[  140.707551][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'.
[  140.798955][ T7117] ip6gre2: left promiscuous mode
[  140.810325][ T7117] ip6gre2: left allmulticast mode
[  140.846956][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'.
[  140.896049][ T7118] macsec0: entered promiscuous mode
[  140.969372][ T7124] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  140.969372][ T7124] Please contact the netfilter-devel mailing list or update your nftables rules.
[  141.017829][ T7108] macsec0 (unregistering): left promiscuous mode
[  141.075632][ T7101] syz_tun: left allmulticast mode
[  141.879876][ T7148] netlink: 'syz.1.258': attribute type 1 has an invalid length.
[  141.907132][ T7148] netlink: 'syz.1.258': attribute type 2 has an invalid length.
[  142.605536][   T29] audit: type=1800 audit(1785055287.687:6): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.257" name="memory.events" dev="tmpfs" ino=275 res=0 errno=0
[  142.817552][ T7171] syz_tun: entered allmulticast mode
[  143.055187][ T7171] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  143.102358][ T7171] bond1 (unregistering): Released all slaves
[  143.457647][ T7185] batadv0: entered promiscuous mode
[  143.501108][ T7185] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  143.663960][ T7183] netlink: 'syz.4.266': attribute type 1 has an invalid length.
[  143.687065][ T7183] netlink: 'syz.4.266': attribute type 2 has an invalid length.
[  143.774618][ T7170] syz_tun: left allmulticast mode
[  144.128900][ T7215] netlink: 'syz.4.270': attribute type 1 has an invalid length.
[  144.191541][ T7215] netlink: 'syz.4.270': attribute type 2 has an invalid length.
[  144.638201][ T7223] __nla_validate_parse: 7 callbacks suppressed
[  144.638223][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[  144.744173][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'.
[  144.809145][ T7228] netlink: 68 bytes leftover after parsing attributes in process `syz.3.275'.
[  145.119025][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'.
[  145.448499][ T7248] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[  145.491494][ T7248] netlink: 'syz.0.280': attribute type 2 has an invalid length.
[  145.780428][   T29] audit: type=1800 audit(1785055290.857:7): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.275" name="memory.events" dev="tmpfs" ino=287 res=0 errno=0
[  145.927650][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[  145.978943][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'.
[  146.008082][ T7260] batadv0: left promiscuous mode
[  146.047328][ T7264] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[  146.101433][ T7264] netlink: 'syz.0.287': attribute type 2 has an invalid length.
[  146.494813][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'.
[  146.869083][ T7286] ip6tnl1: entered allmulticast mode
[  146.933742][ T1128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.969191][ T1128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.978530][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.143628][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'.
[  147.226423][ T7295] netlink: 'syz.4.297': attribute type 1 has an invalid length.
[  147.247396][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'.
[  147.263683][ T7295] netlink: 'syz.4.297': attribute type 2 has an invalid length.
[  147.294177][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.374354][ T7301] netlink: 68 bytes leftover after parsing attributes in process `syz.3.299'.
[  147.501650][ T6099] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.523365][ T7299] batadv0: left promiscuous mode
[  147.538349][ T7299] ip6tnl1: left allmulticast mode
[  147.756968][ T7307] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[  147.820120][ T7307] netlink: 'syz.0.302': attribute type 2 has an invalid length.
[  148.879755][ T7334] ip6tnl1: entered allmulticast mode
[  149.211051][ T7345] ip6tnl1: left allmulticast mode
[  149.914082][ T7368] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[  149.950988][ T7368] netlink: 'syz.1.319': attribute type 2 has an invalid length.
[  150.343629][ T7380] __nla_validate_parse: 8 callbacks suppressed
[  150.343648][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[  150.445352][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'.
[  150.505380][   T29] audit: type=1800 audit(1785055295.587:8): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.320" name="memory.events" dev="tmpfs" ino=347 res=0 errno=0
[  151.040170][ T7403] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[  151.069946][ T7403] netlink: 'syz.1.335': attribute type 2 has an invalid length.
[  151.282601][ T7408] ip6tnl1: entered allmulticast mode
[  151.453248][ T1128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.488887][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.498412][ T1128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.553458][ T7416] netlink: 68 bytes leftover after parsing attributes in process `syz.2.343'.
[  151.700870][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[  151.780777][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'.
[  151.971151][ T7431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.348'.
[  151.982326][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.196507][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.224059][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.357352][   T29] audit: type=1800 audit(1785055297.437:9): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.343" name="memory.events" dev="tmpfs" ino=370 res=0 errno=0
[  152.389387][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.347'.
[  152.458300][ T7447] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  152.488672][ T7447] bond1 (unregistering): Released all slaves
[  152.765374][ T7444] netlink: 'syz.1.350': attribute type 1 has an invalid length.
[  152.813727][ T7444] netlink: 'syz.1.350': attribute type 2 has an invalid length.
[  153.128001][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'.
[  153.302964][ T7480] netlink: 68 bytes leftover after parsing attributes in process `syz.1.362'.
[  153.358196][ T7473] ip6tnl1: left allmulticast mode
[  153.737618][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'.
[  153.865938][ T7494] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  153.925150][ T7494] bond1 (unregistering): Released all slaves
[  154.239278][ T7526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  154.675303][ T7537] unsupported nla_type 46433
[  155.149841][ T7555] macsec1: entered promiscuous mode
[  155.240319][ T7560] syz_tun: entered allmulticast mode
[  155.374478][ T7560] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  155.420683][ T7560] bond1 (unregistering): Released all slaves
[  155.593692][ T7558] syz_tun: left allmulticast mode
[  155.976341][ T7583] __nla_validate_parse: 4 callbacks suppressed
[  155.976361][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'.
[  156.218380][   T29] audit: type=1800 audit(1785055301.297:10): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.383" name="memory.events" dev="tmpfs" ino=402 res=0 errno=0
[  156.563685][ T7607] syz_tun: entered allmulticast mode
[  156.611233][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.397'.
[  156.797597][ T7607] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  156.860539][ T7607] bond1 (unregistering): Released all slaves
[  157.060634][ T7605] syz_tun: left allmulticast mode
[  157.363067][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'.
[  157.417330][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'.
[  157.735367][ T7646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.406'.
[  158.010896][ T7660] netlink: 'syz.3.412': attribute type 1 has an invalid length.
[  158.036784][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'.
[  158.050059][ T7661] syz_tun: entered allmulticast mode
[  158.079784][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'.
[  158.260183][ T7657] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  158.277954][ T7657] bond1 (unregistering): Released all slaves
[  158.419986][ T7656] syz_tun: left allmulticast mode
[  159.006506][   T29] audit: type=1800 audit(1785055304.087:11): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.406" name="memory.events" dev="tmpfs" ino=433 res=0 errno=0
[  159.398074][ T7706] netlink: 64 bytes leftover after parsing attributes in process `syz.2.423'.
[  159.635200][ T7719] netlink: 2 bytes leftover after parsing attributes in process `syz.0.427'.
[  160.187651][ T7738] netlink: 'syz.4.432': attribute type 1 has an invalid length.
[  160.209745][ T7738] netlink: 'syz.4.432': attribute type 2 has an invalid length.
[  160.334928][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'.
[  161.506521][ T7786] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[  161.533006][ T7786] netlink: 'syz.0.445': attribute type 2 has an invalid length.
[  161.925934][ T7800] netlink: 2 bytes leftover after parsing attributes in process `syz.2.449'.
[  162.834441][ T7835] ip6tnl1: entered allmulticast mode
[  162.862769][   T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  162.890486][   T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  162.899488][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  162.910782][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'.
[  162.981609][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  163.367966][ T7859] macvtap1: entered promiscuous mode
[  163.386366][ T7859] bridge0: entered promiscuous mode
[  163.823345][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.001797][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  164.170371][ T7887] ip6tnl1: entered allmulticast mode
[  164.178506][ T3361] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.201768][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.201787][ T3361] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.385282][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.761594][ T6336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.828591][ T7948] tipc: Enabled bearer <eth:gre0>, priority 25
[  166.046039][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'.
[  166.107814][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'.
[  166.225154][ T7959] macvtap1: left promiscuous mode
[  167.307502][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[  167.354109][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'.
[  167.382877][ T8011] ip6tnl1: left allmulticast mode
[  167.556436][ T8020] netlink: 2 bytes leftover after parsing attributes in process `syz.0.513'.
[  167.611515][ T8021] macsec0: entered promiscuous mode
[  168.343271][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.518'.
[  168.370574][ T8045] ip6gre1: entered promiscuous mode
[  168.384234][ T8045] ip6gre1: entered allmulticast mode
[  168.533974][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.980164][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'.
[  169.067201][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.524'.
[  169.093684][ T8071] ip6gre1: left promiscuous mode
[  169.105163][ T8071] ip6gre1: left allmulticast mode
[  169.518163][ T8088] netlink: 2 bytes leftover after parsing attributes in process `syz.2.530'.
[  170.001627][ T8093] batadv0: entered promiscuous mode
[  170.024862][ T8093] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  170.122334][ T8103] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  170.137714][   T29] audit: type=1800 audit(1785055315.217:12): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.526" name="memory.events" dev="tmpfs" ino=521 res=0 errno=0
[  170.157184][ T8103] netlink: 'syz.0.533': attribute type 2 has an invalid length.
[  170.291910][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  170.327504][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'.
[  170.932713][ T8136] netlink: 2 bytes leftover after parsing attributes in process `syz.2.548'.
[  171.162761][ T8145] netlink: 'syz.4.551': attribute type 1 has an invalid length.
[  171.198172][ T8145] netlink: 'syz.4.551': attribute type 2 has an invalid length.
[  171.524467][ T8156] syz_tun: entered allmulticast mode
[  171.558949][ T8154] syz_tun: left allmulticast mode
[  172.332353][ T8184] __nla_validate_parse: 4 callbacks suppressed
[  172.332372][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'.
[  172.566331][ T8189] ip6tnl1: left allmulticast mode
[  172.612595][ T8194] syz_tun: entered allmulticast mode
[  172.681129][ T8186] netlink: 'syz.4.565': attribute type 1 has an invalid length.
[  172.721422][ T8186] netlink: 'syz.4.565': attribute type 2 has an invalid length.
[  172.949579][ T8211] vlan2: entered allmulticast mode
[  172.965058][ T8211] bond0: entered allmulticast mode
[  172.970524][ T8211] bond_slave_0: entered allmulticast mode
[  173.114066][ T8217] netlink: 2 bytes leftover after parsing attributes in process `syz.1.571'.
[  173.183890][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'.
[  173.278755][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[  173.337831][ T8230] macsec0: entered promiscuous mode
[  173.396195][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'.
[  173.419374][ T8235] netlink: 2 bytes leftover after parsing attributes in process `syz.2.577'.
[  173.528634][ T8225] macsec0 (unregistering): left promiscuous mode
[  173.973118][ T8247] syz_tun: entered allmulticast mode
[  173.994925][ T8247] syz_tun: left allmulticast mode
[  175.025444][ T8296] netlink: 2 bytes leftover after parsing attributes in process `syz.0.591'.
[  175.119568][ T8298] syz_tun: entered allmulticast mode
[  175.140397][ T8298] syz_tun: left allmulticast mode
[  175.375407][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'.
[  175.476850][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'.
[  175.628442][ T8315] netlink: 2 bytes leftover after parsing attributes in process `syz.3.597'.
[  175.663620][ T8308] batadv0: entered promiscuous mode
[  175.679170][ T8308] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  176.296092][ T8341] syz_tun: entered allmulticast mode
[  176.318611][ T8340] syz_tun: left allmulticast mode
[  177.332600][ T8376] bridge0: port 3(syz_tun) entered blocking state
[  177.339227][ T8376] bridge0: port 3(syz_tun) entered forwarding state
[  177.410936][ T8380] netlink: 'syz.3.609': attribute type 1 has an invalid length.
[  177.425246][ T8380] netlink: 'syz.3.609': attribute type 2 has an invalid length.
[  177.695636][ T8391] netlink: 'syz.3.615': attribute type 29 has an invalid length.
[  177.790079][ T8395] __nla_validate_parse: 4 callbacks suppressed
[  177.790098][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'.
[  177.959678][ T8399] netlink: 2 bytes leftover after parsing attributes in process `syz.1.614'.
[  178.207189][ T8416] netlink: 76 bytes leftover after parsing attributes in process `syz.3.620'.
[  178.589828][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.624'.
[  178.750247][ T8426] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  178.775145][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'.
[  178.804304][ T8426] bond1 (unregistering): Released all slaves
[  178.859294][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'.
[  179.166512][ T8446] bridge0: port 3(syz_tun) entered disabled state
[  179.189366][ T8446] batadv0: left promiscuous mode
[  179.195819][ T8446] vlan2: left allmulticast mode
[  179.200983][ T8446] bond0: left allmulticast mode
[  179.207075][ T8446] bond_slave_0: left allmulticast mode
[  179.394835][ T8455] macsec0: entered promiscuous mode
[  179.921217][ T8479] macsec0: entered promiscuous mode
[  180.282822][ T8493] batadv0: entered promiscuous mode
[  180.330465][ T8493] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  180.335678][ T8497] netlink: 2 bytes leftover after parsing attributes in process `syz.1.637'.
[  180.670850][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'.
[  180.764621][ T8508] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  180.816017][ T8508] bond1 (unregistering): Released all slaves
[  180.900338][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'.
[  180.937439][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'.
[  180.979145][ T8512] tipc: Resetting bearer <eth:gre0>
[  181.094175][ T8519] netlink: 'syz.0.644': attribute type 6 has an invalid length.
[  181.478170][ T8530] batadv0: left promiscuous mode
[  181.888250][ T8548] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  181.941343][ T8548] netlink: 'syz.0.651': attribute type 2 has an invalid length.
[  182.596540][ T8573] syz_tun: entered allmulticast mode
[  182.764221][ T8573] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  182.806943][ T8573] bond1 (unregistering): Released all slaves
[  183.024476][ T8572] syz_tun: left allmulticast mode
[  183.104723][ T8585] __nla_validate_parse: 6 callbacks suppressed
[  183.104745][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  183.198690][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'.
[  184.226701][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  184.473061][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[  184.836236][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'.
[  184.899352][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'.
[  185.154850][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'.
[  185.282708][ T8663] bridge0: left promiscuous mode
[  185.316058][ T8666] netlink: 'syz.1.676': attribute type 1 has an invalid length.
[  185.332607][ T8666] netlink: 'syz.1.676': attribute type 2 has an invalid length.
[  186.098245][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[  186.161661][ T8697] macsec0: entered promiscuous mode
[  186.218451][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'.
[  186.350695][ T8697] macsec0 (unregistering): left promiscuous mode
[  186.426825][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'.
[  187.038925][ T8716] netlink: 'syz.2.695': attribute type 1 has an invalid length.
[  187.046987][ T8716] netlink: 'syz.2.695': attribute type 2 has an invalid length.
[  188.450220][ T8785] __nla_validate_parse: 1 callbacks suppressed
[  188.450242][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'.
[  188.474980][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'.
[  188.662010][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'.
[  188.810439][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'.
[  189.198501][ T8806] sctp: [Deprecated]: syz.1.718 (pid 8806) Use of int in max_burst socket option deprecated.
[  189.198501][ T8806] Use struct sctp_assoc_value instead
[  189.914395][   T29] audit: type=1800 audit(1785055334.997:13): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.715" name="memory.events" dev="tmpfs" ino=730 res=0 errno=0
[  189.968305][   T29] audit: type=1800 audit(1785055335.037:14): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.716" name="memory.events" dev="tmpfs" ino=766 res=0 errno=0
[  190.747842][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'.
[  190.784866][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'.
[  191.062591][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'.
[  191.126780][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'.
[  191.671183][ T8878] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  191.952520][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.737'.
[  192.350445][ T8903] batadv0: entered promiscuous mode
[  192.359720][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'.
[  192.369396][ T8903] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  192.388945][ T8905] batadv0: left promiscuous mode
[  192.847204][   T29] audit: type=1800 audit(1785055337.927:15): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.733" name="memory.events" dev="tmpfs" ino=783 res=0 errno=0
[  193.512805][ T8930] __nla_validate_parse: 2 callbacks suppressed
[  193.512825][ T8930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.748'.
[  193.608898][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'.
[  193.637152][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'.
[  193.662825][ T8932] batadv0: left promiscuous mode
[  193.913427][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'.
[  194.186172][ T8955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.756'.
[  194.305213][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  194.559817][   T29] audit: type=1800 audit(1785055339.637:16): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.749" name="memory.events" dev="tmpfs" ino=772 res=0 errno=0
[  194.756059][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'.
[  194.860379][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'.
[  195.406596][ T8986] netlink: 2 bytes leftover after parsing attributes in process `syz.2.766'.
[  195.609067][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.769'.
[  196.435620][ T9018] batadv0: entered promiscuous mode
[  196.463098][ T9018] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  196.676681][ T9024] macsec1: entered promiscuous mode
[  197.227470][ T9043] macsec0: entered promiscuous mode
[  197.240144][ T9047] netlink: 2 bytes leftover after parsing attributes in process `syz.3.785'.
[  199.595566][ T9136] macsec0: entered promiscuous mode
[  199.753351][ T9131] __nla_validate_parse: 1 callbacks suppressed
[  199.753371][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  199.992970][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'.
[  200.067517][ T9149] macsec0: entered promiscuous mode
[  200.147918][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  200.238334][ T9146] macsec0 (unregistering): left promiscuous mode
[  200.837396][   T29] audit: type=1800 audit(1785055345.917:17): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.805" name="memory.events" dev="tmpfs" ino=867 res=0 errno=0
[  201.085222][ T9180] lo: Caught tx_queue_len zero misconfig
[  201.402885][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'.
[  202.054120][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'.
[  202.077684][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'.
[  202.168441][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.821'.
[  202.479361][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  202.536781][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  202.989803][   T29] audit: type=1800 audit(1785055348.067:18): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="memory.events" dev="tmpfs" ino=838 res=0 errno=0
[  203.208674][ T9265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.826'.
[  203.894121][   T29] audit: type=1800 audit(1785055348.977:19): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.826" name="memory.events" dev="tmpfs" ino=864 res=0 errno=0
[  204.652570][ T9317] syz_tun: left allmulticast mode
[  204.839804][ T9317] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  204.900536][ T9317] bond1 (unregistering): Released all slaves
[  205.128133][ T9327] __nla_validate_parse: 3 callbacks suppressed
[  205.128154][ T9327] netlink: 2 bytes leftover after parsing attributes in process `syz.4.844'.
[  205.183238][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'.
[  205.308874][ T9333] macsec0: entered promiscuous mode
[  206.205256][ T9363] xt_hashlimit: size too large, truncated to 1048576
[  206.316115][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.853'.
[  206.379781][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.853'.
[  206.789791][ T9383] netlink: 'syz.2.854': attribute type 1 has an invalid length.
[  206.808105][ T9382] IPVS: Scheduler module ip_vs_sip not found
[  206.821594][ T9383] netlink: 'syz.2.854': attribute type 2 has an invalid length.
[  206.858313][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.857'.
[  207.954510][ T9437] syz_tun: entered allmulticast mode
[  208.010377][ T9435] syz_tun: left allmulticast mode
[  208.155835][   T29] audit: type=1800 audit(1785055353.237:20): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.859" name="memory.events" dev="tmpfs" ino=902 res=0 errno=0
[  208.345906][ T9452] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  209.008454][ T9479] netlink: 'syz.1.872': attribute type 1 has an invalid length.
[  209.037016][ T9479] netlink: 'syz.1.872': attribute type 2 has an invalid length.
[  209.078024][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'.
[  209.108628][ T9487] macsec0: entered promiscuous mode
[  209.716029][ T9508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.880'.
[  210.023288][ T9519] batadv0: entered promiscuous mode
[  210.033816][ T9519] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  210.532981][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'.
[  210.689972][ T9546] netlink: 200 bytes leftover after parsing attributes in process `syz.2.889'.
[  210.951407][   T29] audit: type=1800 audit(1785055356.027:21): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.880" name="memory.events" dev="tmpfs" ino=954 res=0 errno=0
[  211.138532][ T9553] netlink: 'syz.4.888': attribute type 1 has an invalid length.
[  211.237442][ T9553] netlink: 'syz.4.888': attribute type 2 has an invalid length.
[  211.398086][ T9571] syz_tun: entered allmulticast mode
[  211.451144][ T9571] dvmrp8: entered allmulticast mode
[  211.473113][ T9569] syz_tun: left allmulticast mode
[  211.483212][ T9567] netlink: 48 bytes leftover after parsing attributes in process `syz.3.890'.
[  211.815883][ T9588] batadv0: entered promiscuous mode
[  211.822283][ T9588] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  212.169264][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.901'.
[  212.362685][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'.
[  212.746540][   T29] audit: type=1800 audit(1785055357.827:22): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.895" name="memory.events" dev="tmpfs" ino=919 res=0 errno=0
[  213.276779][ T9643] batadv0: entered promiscuous mode
[  213.291866][ T9643] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  213.327358][ T9653] netlink: 'syz.1.915': attribute type 39 has an invalid length.
[  213.363690][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.913'.
[  213.554131][ T9646] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  213.577183][ T9646] bond1 (unregistering): Released all slaves
[  214.753134][   T29] audit: type=1800 audit(1785055359.837:23): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.921" name="memory.events" dev="tmpfs" ino=1005 res=0 errno=0
[  215.036628][ T9717] netlink: 11 bytes leftover after parsing attributes in process `syz.3.928'.
[  215.357541][ T9724] IPVS: Scheduler module ip_vs_sip not found
[  215.611760][ T9736] netlink: 'syz.4.933': attribute type 10 has an invalid length.
[  216.556255][ T9721] infiniband syz1: set active
[  216.573764][ T9721] infiniband syz1: added syz_tun
[  216.660987][ T9721] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  216.693960][ T9721] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  216.753163][ T9721] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  216.804000][ T9721] RDS/IB: syz1: added
[  216.810238][ T9721] smc: adding ib device syz1 with port count 1
[  216.816809][ T9721] smc:    ib device syz1 port 1 has no pnetid
[  217.102783][   T29] audit: type=1800 audit(1785055362.177:24): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.938" name="memory.events" dev="tmpfs" ino=970 res=0 errno=0
[  217.507976][ T9800] netlink: 176 bytes leftover after parsing attributes in process `syz.1.945'.
[  218.227678][ T9830] netlink: 180 bytes leftover after parsing attributes in process `syz.1.953'.
[  219.162061][   T29] audit: type=1800 audit(1785055364.247:25): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.951" name="memory.events" dev="tmpfs" ino=1026 res=0 errno=0
[  219.477120][ T9872] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  220.268463][ T9916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.953265][ T9962] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  222.064347][ T9970] syzkaller1: entered promiscuous mode
[  222.093625][ T9970] syzkaller1: entered allmulticast mode
[  222.616054][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'.
[  222.636896][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'.
[  223.814521][T10034] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  224.282914][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.998'.
[  224.320889][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.998'.
[  224.343759][T10049] netlink: 'syz.4.998': attribute type 32 has an invalid length.
[  224.354832][T10049] netlink: 500 bytes leftover after parsing attributes in process `syz.4.998'.
[  225.368930][T10090] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  226.505504][T10132] netlink: 'syz.1.1014': attribute type 1 has an invalid length.
[  226.523262][T10132] netlink: 'syz.1.1014': attribute type 2 has an invalid length.
[  226.621700][T10133] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  226.639448][T10133] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  226.823932][T10136] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  226.870962][T10136] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  227.663803][T10183] netlink: 'syz.2.1029': attribute type 1 has an invalid length.
[  227.866941][T10183] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.905685][T10187] bond1: (slave gretap1): making interface the new active one
[  227.915919][T10187] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  228.107751][T10190] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1030'.
[  228.464217][T10193] bridge0: port 3(syz_tun) entered blocking state
[  228.470879][T10193] bridge0: port 3(syz_tun) entered forwarding state
[  228.490795][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'.
[  228.509629][T10195] netlink: 'syz.3.1032': attribute type 1 has an invalid length.
[  228.533232][T10195] netlink: 'syz.3.1032': attribute type 2 has an invalid length.
[  228.634173][T10199] batadv0: left promiscuous mode
[  228.854426][    T9] syz1: Port: 1 Link DOWN
[  229.853711][T10247] syz_tun: entered allmulticast mode
[  229.874070][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'.
[  230.010862][T10247] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  230.080788][T10247] bond1 (unregistering): Released all slaves
[  230.149080][T10250] netlink: 'syz.4.1049': attribute type 1 has an invalid length.
[  230.158450][T10250] netlink: 'syz.4.1049': attribute type 2 has an invalid length.
[  230.298965][T10242] syz_tun: left allmulticast mode
[  230.898484][T10285] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  230.930638][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'.
[  230.948201][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'.
[  231.020693][T10291] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  231.056338][T10291] netlink: 'syz.3.1058': attribute type 2 has an invalid length.
[  231.094843][T10282] batadv0: entered promiscuous mode
[  231.105225][T10282] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  231.372209][T10309] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1062'.
[  231.618760][T10315] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  231.639073][T10315] netlink: 'syz.0.1063': attribute type 2 has an invalid length.
[  231.663454][ T5752] syz1: Port: 1 Link ACTIVE
[  231.670400][T10318] syz_tun: entered allmulticast mode
[  231.697590][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1064'.
[  231.768040][T10318] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  231.820740][T10318] bond1 (unregistering): Released all slaves
[  231.948751][T10317] syz_tun: left allmulticast mode
[  232.091059][T10329] batadv_slave_0: entered promiscuous mode
[  232.102336][T10328] batadv_slave_0: left promiscuous mode
[  232.923956][T10351] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  233.022807][T10364] netlink: 'syz.4.1075': attribute type 1 has an invalid length.
[  233.041535][T10364] netlink: 'syz.4.1075': attribute type 2 has an invalid length.
[  233.291708][T10374] syz_tun: entered allmulticast mode
[  233.313278][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'.
[  233.383310][T10374] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  233.419383][T10374] bond1 (unregistering): Released all slaves
[  233.652334][T10373] syz_tun: left allmulticast mode
[  233.808528][T10394] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1080'.
[  234.426717][T10420] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1087'.
[  234.892071][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1092'.
[  234.955174][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1091'.
[  234.993750][T10433] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  235.008213][T10433] bond1 (unregistering): Released all slaves
[  235.098921][T10441] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  235.108604][T10441] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  235.176819][T10442] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  235.198704][T10442] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  236.294036][T10480] syz_tun: entered allmulticast mode
[  236.303247][T10479] syz_tun: entered allmulticast mode
[  236.314428][T10479] dvmrp8: left allmulticast mode
[  236.321365][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'.
[  236.389419][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1106'.
[  236.389732][T10477] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  236.410015][T10477] bond2 (unregistering): Released all slaves
[  236.626563][T10479] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  236.630302][T10491] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1108'.
[  236.650608][T10479] bond1 (unregistering): Released all slaves
[  236.685063][T10476] syz_tun: left allmulticast mode
[  236.693965][T10490] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1107'.
[  236.743636][T10478] syz_tun: left allmulticast mode
[  237.734581][T10513] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1115'.
[  237.859890][T10520] netlink: 'syz.2.1117': attribute type 12 has an invalid length.
[  238.980258][T10548] __nla_validate_parse: 2 callbacks suppressed
[  238.980280][T10548] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1126'.
[  239.166497][T10552] gretap2: entered promiscuous mode
[  239.517567][T10568] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1133'.
[  239.584515][T10572] netlink: 'syz.1.1132': attribute type 12 has an invalid length.
[  239.763366][T10565] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  239.810927][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'.
[  239.855280][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'.
[  240.548230][   T29] audit: type=1800 audit(1785055385.617:26): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1133" name="memory.events" dev="tmpfs" ino=1225 res=0 errno=0
[  241.249485][T10608] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  241.812814][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'.
[  243.663621][T10628] netlink: 'syz.1.1150': attribute type 12 has an invalid length.
[  243.672768][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'.
[  243.873234][T10648] macsec0: entered promiscuous mode
[  243.916837][T10657] netlink: 'syz.4.1157': attribute type 1 has an invalid length.
[  244.143765][T10659] gretap1: entered allmulticast mode
[  244.179009][T10659] bond1: (slave gretap1): making interface the new active one
[  244.200874][T10659] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  244.387465][T10672] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  244.614168][T10691] netlink: 'syz.0.1166': attribute type 12 has an invalid length.
[  244.769284][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'.
[  244.805591][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  245.220904][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'.
[  245.245147][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'.
[  245.515981][T10713] macsec0: entered promiscuous mode
[  245.566354][T10719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'.
[  245.957469][T10736] macsec0: entered promiscuous mode
[  247.030147][T10768] netlink: 'syz.0.1181': attribute type 12 has an invalid length.
[  247.163208][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1185'.
[  247.210899][T10777] ip6gre1: entered promiscuous mode
[  247.235346][T10777] ip6gre1: entered allmulticast mode
[  247.276413][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'.
[  247.329974][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'.
[  247.333077][T10777] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1185'.
[  247.422243][T10783] macsec0: entered promiscuous mode
[  247.690266][T10780] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.890716][T10788] syzkaller1: entered promiscuous mode
[  247.911169][T10788] syzkaller1: entered allmulticast mode
[  248.239552][T10801] syz_tun: entered allmulticast mode
[  248.283326][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'.
[  248.294069][T10803] netlink: 'syz.1.1194': attribute type 39 has an invalid length.
[  248.358838][T10801] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  248.373178][T10801] bond1 (unregistering): Released all slaves
[  248.503745][T10800] syz_tun: left allmulticast mode
[  248.722757][T10823] macsec0: entered promiscuous mode
[  248.883157][T10827] syzkaller1: entered promiscuous mode
[  248.940887][T10827] syzkaller1: entered allmulticast mode
[  248.993246][T10829] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  249.471367][T10856] netlink: 'syz.0.1201': attribute type 12 has an invalid length.
[  249.922708][T10873] __nla_validate_parse: 3 callbacks suppressed
[  249.922728][T10873] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1207'.
[  250.073819][T10872] syzkaller0: entered promiscuous mode
[  250.085893][T10872] syzkaller0: entered allmulticast mode
[  252.149221][T10888] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  252.413730][T10899] macsec0: entered promiscuous mode
[  252.475084][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'.
[  252.804029][T10915] batadv0: left promiscuous mode
[  252.849774][T10915] ip6gre1: left promiscuous mode
[  252.867493][T10915] ip6gre1: left allmulticast mode
[  253.181997][T10933] netlink: 'syz.1.1218': attribute type 12 has an invalid length.
[  253.412414][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[  253.431664][T10946] syzkaller1: entered promiscuous mode
[  253.442703][T10946] syzkaller1: entered allmulticast mode
[  253.513455][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  253.784080][T10951] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1222'.
[  254.101795][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'.
[  254.146140][T10959] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  254.448458][T10976] macsec0: entered promiscuous mode
[  254.942789][T10999] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96
[  255.326141][T11014] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1237'.
[  255.359978][T11016] netlink: 'syz.1.1238': attribute type 12 has an invalid length.
[  255.534371][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'.
[  255.624866][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'.
[  255.699994][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'.
[  255.739076][T11030] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  255.778242][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  255.814477][ T5964] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.855784][ T5964] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.902995][ T5964] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.934870][ T5964] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  256.714818][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'.
[  257.506954][T11090] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1256'.
[  257.757315][T11106] netlink: 'syz.2.1261': attribute type 12 has an invalid length.
[  257.885067][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'.
[  257.973836][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'.
[  258.370559][T11128] netlink: 'syz.2.1266': attribute type 1 has an invalid length.
[  258.411643][T11128] netlink: 'syz.2.1266': attribute type 2 has an invalid length.
[  259.844455][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'.
[  259.924486][T11188] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1276'.
[  260.370532][T11203] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  260.437113][T11202] netlink: 'syz.0.1281': attribute type 1 has an invalid length.
[  260.481448][T11202] netlink: 'syz.0.1281': attribute type 2 has an invalid length.
[  261.207999][T11229] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  261.557718][T11241] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  261.590652][T11244] __nla_validate_parse: 1 callbacks suppressed
[  261.590673][T11244] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1295'.
[  261.758839][T11250] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  261.789185][T11250] netlink: 'syz.3.1294': attribute type 2 has an invalid length.
[  262.214639][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'.
[  262.510130][T11279] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1302'.
[  262.722168][T11291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'.
[  262.753738][T11291] ip6gre1: entered promiscuous mode
[  262.769352][T11291] ip6gre1: entered allmulticast mode
[  262.808780][T11291] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1306'.
[  262.842816][T11287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1305'.
[  263.005604][T11291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.052383][T11294] syz_tun: entered allmulticast mode
[  263.081446][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'.
[  263.191792][T11294] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  263.250018][T11294] bond2 (unregistering): Released all slaves
[  263.389659][T11293] syz_tun: left allmulticast mode
[  263.650209][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'.
[  263.787587][T11317] bridge0: port 3(syz_tun) entered disabled state
[  264.309115][T11337] sctp: [Deprecated]: syz.4.1316 (pid 11337) Use of int in max_burst socket option deprecated.
[  264.309115][T11337] Use struct sctp_assoc_value instead
[  264.354105][T11340] syz_tun: entered allmulticast mode
[  264.406068][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1317'.
[  264.604188][T11340] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  264.682618][T11340] bond1 (unregistering): Released all slaves
[  264.690021][T11356] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1323'.
[  265.175958][T11358] syz_tun: entered allmulticast mode
[  265.276594][T11351] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  265.309331][T11351] bond2 (unregistering): Released all slaves
[  265.379456][T11339] syz_tun: left allmulticast mode
[  265.448604][T11346] syz_tun: left allmulticast mode
[  265.714954][T11384] netlink: 'syz.4.1328': attribute type 12 has an invalid length.
[  267.129069][T11425] syz_tun: entered allmulticast mode
[  267.160386][T11425] __nla_validate_parse: 4 callbacks suppressed
[  267.160432][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'.
[  267.410621][T11425] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  267.459598][T11425] bond2 (unregistering): Released all slaves
[  267.499764][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'.
[  267.582818][T11436] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  267.602440][T11424] syz_tun: left allmulticast mode
[  267.626212][T11436] bond1 (unregistering): (slave macvlan1): Releasing backup interface
[  267.662044][T11436] bond1 (unregistering): Released all slaves
[  267.778627][T11439] bridge0: port 3(syz_tun) entered blocking state
[  267.786899][T11439] bridge0: port 3(syz_tun) entered disabled state
[  267.794096][T11439] syz_tun: entered allmulticast mode
[  267.806150][T11439] syz_tun: entered promiscuous mode
[  267.812097][T11439] bridge0: port 3(syz_tun) entered blocking state
[  267.818741][T11439] bridge0: port 3(syz_tun) entered forwarding state
[  268.024360][T11445] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1341'.
[  268.094367][T11449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1343'.
[  268.286038][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1344'.
[  268.727588][T11471] syz_tun: entered allmulticast mode
[  268.745067][T11471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'.
[  268.866228][T11471] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  268.894595][T11471] bond2 (unregistering): Released all slaves
[  269.103664][T11470] syz_tun: left allmulticast mode
[  269.647531][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'.
[  269.670470][T11510] macsec0: entered promiscuous mode
[  269.862371][T11517] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1360'.
[  269.903691][T11519] netlink: zone id is out of range
[  269.909060][T11519] netlink: zone id is out of range
[  269.914650][T11519] netlink: zone id is out of range
[  269.919923][T11519] netlink: zone id is out of range
[  269.925433][T11519] netlink: zone id is out of range
[  269.931635][T11519] netlink: zone id is out of range
[  269.942338][T11519] netlink: zone id is out of range
[  269.954525][T11519] netlink: zone id is out of range
[  269.965900][T11519] netlink: zone id is out of range
[  269.976768][T11519] netlink: zone id is out of range
[  270.236894][T11527] syz_tun: entered allmulticast mode
[  270.271719][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1364'.
[  270.335619][T11527] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  270.347822][T11527] bond2 (unregistering): Released all slaves
[  270.358077][T11532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1366'.
[  270.467374][T11526] syz_tun: left allmulticast mode
[  271.188630][T11563] netlink: 'syz.1.1373': attribute type 1 has an invalid length.
[  271.315582][T11570] netlink: 'syz.1.1373': attribute type 10 has an invalid length.
[  271.492111][T11563] 8021q: adding VLAN 0 to HW filter on device bond1
[  271.567069][T11566] bond1: (slave dummy0): making interface the new active one
[  271.608785][T11566] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  271.645224][T11570] dummy0: entered promiscuous mode
[  271.713821][T11570] bond1: (slave dummy0): Releasing active interface
[  271.753642][T11573] netlink: 'syz.0.1375': attribute type 1 has an invalid length.
[  271.781733][T11573] netlink: 'syz.0.1375': attribute type 1 has an invalid length.
[  271.810198][T11573] netlink: 'syz.0.1375': attribute type 2 has an invalid length.
[  271.853098][T11573] netlink: 'syz.0.1375': attribute type 2 has an invalid length.
[  271.989976][T11586] syz_tun: entered allmulticast mode
[  272.277355][T11586] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  272.367119][T11586] bond2 (unregistering): Released all slaves
[  272.377921][T11606] __nla_validate_parse: 3 callbacks suppressed
[  272.377939][T11606] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1381'.
[  272.577179][T11585] syz_tun: left allmulticast mode
[  272.585785][T11608] netlink: 'syz.2.1382': attribute type 1 has an invalid length.
[  272.608737][T11608] netlink: 'syz.2.1382': attribute type 2 has an invalid length.
[  272.688294][T11614] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1383'.
[  273.418468][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'.
[  273.495472][T11637] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  275.874794][T11637] bond2 (unregistering): Released all slaves
[  276.039698][T11651] syz_tun: entered allmulticast mode
[  276.067825][T11654] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  276.091994][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'.
[  276.138093][T11654] 8021q: adding VLAN 0 to HW filter on device bond2
[  276.227296][T11649] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  276.242399][T11649] bond1 (unregistering): Released all slaves
[  276.290239][T11654] bond2: (slave geneve2): making interface the new active one
[  276.304406][T11654] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  276.336979][ T9909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.356291][ T9909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.366862][ T9909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.440157][ T9909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.449636][T11648] syz_tun: left allmulticast mode
[  277.148811][T11679] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1404'.
[  279.104426][T11670] macsec0: entered promiscuous mode
[  279.210426][T11706] syz_tun: entered allmulticast mode
[  279.229933][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1407'.
[  279.411630][T11706] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  279.442949][T11706] bond1 (unregistering): Released all slaves
[  279.604860][T11709] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1408'.
[  279.643769][T11705] syz_tun: left allmulticast mode
[  279.926549][T11735] syzkaller0: entered promiscuous mode
[  279.941762][T11735] syzkaller0: entered allmulticast mode
[  279.968180][T11725] batadv0: entered promiscuous mode
[  279.983025][T11725] net_ratelimit: 722 callbacks suppressed
[  279.983046][T11725] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  280.032119][T11742] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  280.242185][T11750] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1417'.
[  282.382872][T11784] macsec0: entered promiscuous mode
[  282.441617][T11775] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  282.478321][T11790] syz_tun: entered allmulticast mode
[  282.502752][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1425'.
[  282.589745][T11790] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  282.614920][T11790] bond1 (unregistering): Released all slaves
[  282.667856][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'.
[  282.699018][T11789] syz_tun: left allmulticast mode
[  283.013238][T11807] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  283.805221][T11850] tipc: Started in network mode
[  283.811129][T11850] tipc: Node identity 629795ae1644, cluster identity 4711
[  283.818913][T11850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.975408][T11843] syzkaller0: entered promiscuous mode
[  283.991360][T11843] syzkaller0: entered allmulticast mode
[  284.005026][T11843] tipc: Resetting bearer <eth:syzkaller0>
[  284.015295][T11849] batadv0: entered promiscuous mode
[  284.024197][T11849] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  284.069161][T11842] tipc: Resetting bearer <eth:syzkaller0>
[  284.404465][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'.
[  286.277294][T11842] tipc: Disabling bearer <eth:syzkaller0>
[  286.288337][T11861] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  286.298470][T11880] macsec0: entered promiscuous mode
[  286.328417][ T6091] tipc: Node number set to 1960023470
[  286.953112][T11932] syzkaller0: entered promiscuous mode
[  286.968382][T11932] syzkaller0: entered allmulticast mode
[  287.759576][T11964] netlink: 'syz.2.1450': attribute type 1 has an invalid length.
[  287.773034][T11964] netlink: 'syz.2.1450': attribute type 2 has an invalid length.
[  287.896389][T11970] syz_tun: entered allmulticast mode
[  287.927055][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1453'.
[  288.035715][T11970] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  288.058248][T11970] bond2 (unregistering): Released all slaves
[  288.173583][T11969] syz_tun: left allmulticast mode
[  288.953237][T11997] macsec0: entered promiscuous mode
[  289.032730][T12012] netlink: 'syz.4.1458': attribute type 1 has an invalid length.
[  289.528090][T12028] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  289.544653][T12036] syz_tun: entered allmulticast mode
[  289.562388][T12028] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.572680][T12028] 8021q: adding VLAN 0 to HW filter on device team0
[  289.591389][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.599602][T12032] syzkaller0: entered promiscuous mode
[  289.610704][T12032] syzkaller0: entered allmulticast mode
[  289.620882][T12028] netlink: 'syz.4.1464': attribute type 1 has an invalid length.
[  289.632172][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'.
[  289.643517][T12028] netlink: 'syz.4.1464': attribute type 2 has an invalid length.
[  289.679609][T12033] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  289.691790][T12033] bond1 (unregistering): Released all slaves
[  289.770133][T12030] syz_tun: left allmulticast mode
[  289.941968][T12042] syzkaller1: entered promiscuous mode
[  289.966821][T12042] syzkaller1: entered allmulticast mode
[  290.268332][T12058] syzkaller0: entered promiscuous mode
[  290.291942][T12058] syzkaller0: entered allmulticast mode
[  290.309938][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'.
[  290.339680][T12065] bridge0: port 3(syz_tun) entered disabled state
[  290.403388][T12065] syz_tun (unregistering): left allmulticast mode
[  290.422449][T12065] syz_tun (unregistering): left promiscuous mode
[  290.429099][T12065] bridge0: port 3(syz_tun) entered disabled state
[  290.486586][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'.
[  290.580239][T12073] vlan2: entered allmulticast mode
[  290.600935][T12073] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  290.713583][T12074] macsec0: entered promiscuous mode
[  290.722550][T12083] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1478'.
[  291.195486][T12099] syz_tun: entered allmulticast mode
[  291.235092][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'.
[  291.296274][T12104] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1482'.
[  291.400992][T12099] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  291.415700][T12099] bond1 (unregistering): Released all slaves
[  291.505419][T12110] syzkaller1: entered promiscuous mode
[  291.521107][T12110] syzkaller1: entered allmulticast mode
[  291.543735][T12098] syz_tun: left allmulticast mode
[  291.674975][T12112] syzkaller0: entered promiscuous mode
[  291.685937][T12112] syzkaller0: entered allmulticast mode
[  291.774233][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'.
[  291.797018][T12119] syzkaller0: entered promiscuous mode
[  291.813517][T12119] syzkaller0: entered allmulticast mode
[  292.133037][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'.
[  292.185708][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'.
[  292.215875][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'.
[  292.267170][T12148] macsec0: entered promiscuous mode
[  292.583841][T12156] syzkaller0: entered promiscuous mode
[  292.596255][T12156] syzkaller0: entered allmulticast mode
[  292.638203][T12156] tipc: Started in network mode
[  292.647631][T12156] tipc: Node identity 16c3dd2639d1, cluster identity 4711
[  292.670750][T12156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.692252][T12154] tipc: Resetting bearer <eth:syzkaller0>
[  292.724719][T12154] tipc: Disabling bearer <eth:syzkaller0>
[  293.301150][T12185] syzkaller0: entered promiscuous mode
[  293.307280][T12185] syzkaller0: entered allmulticast mode
[  293.564376][T12184] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  294.471065][T12214] bond2: entered promiscuous mode
[  294.483636][T12214] 8021q: adding VLAN 0 to HW filter on device bond2
[  294.494677][T12212] tipc: Started in network mode
[  294.509915][T12212] tipc: Node identity a26b3a3510ec, cluster identity 4711
[  294.527689][T12212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.629273][T12212] syzkaller0: entered promiscuous mode
[  294.635416][T12212] syzkaller0: entered allmulticast mode
[  294.641769][T12212] tipc: Resetting bearer <eth:syzkaller0>
[  294.673399][T12216] 8021q: adding VLAN 0 to HW filter on device bond2
[  294.688461][T12216] bond2: (slave sit2): The slave device specified does not support setting the MAC address
[  294.708175][T12216] bond2: (slave sit2): Error -95 calling set_mac_address
[  294.742674][T12211] tipc: Resetting bearer <eth:syzkaller0>
[  295.194950][T12224] __nla_validate_parse: 2 callbacks suppressed
[  295.194970][T12224] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1519'.
[  296.533608][T12211] tipc: Disabling bearer <eth:syzkaller0>
[  296.554047][T12221] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  296.570679][ T5719] tipc: Node number set to 2995206709
[  296.787819][T12232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1521'.
[  296.802235][T12237] syz_tun: entered allmulticast mode
[  296.815981][T12230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1520'.
[  296.853379][T12230] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  297.134466][T12230] bond3 (unregistering): Released all slaves
[  297.247190][T12252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'.
[  297.259413][T12243] syzkaller0: entered promiscuous mode
[  297.292470][T12243] syzkaller0: entered allmulticast mode
[  297.365116][T12252] ip6tnl2: entered allmulticast mode
[  297.433675][T12229] syz_tun: left allmulticast mode
[  297.439920][T12255] syzkaller0: entered promiscuous mode
[  297.460375][T12255] syzkaller0: entered allmulticast mode
[  297.948826][T12265] bridge0: port 3(syz_tun) entered blocking state
[  297.955528][T12265] bridge0: port 3(syz_tun) entered forwarding state
[  298.015474][T12271] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[  298.032078][T12271] netlink: 'syz.3.1529': attribute type 2 has an invalid length.
[  298.057314][T12268] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  298.456207][T12278] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1533'.
[  298.528721][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1535'.
[  298.648950][T12282] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  298.740791][T12282] macvlan2: entered promiscuous mode
[  298.746527][T12282] macvlan2: entered allmulticast mode
[  298.762766][T12282] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  299.267242][T12285] syzkaller0: entered promiscuous mode
[  299.282844][T12285] syzkaller0: entered allmulticast mode
[  299.477420][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'.
[  299.585841][T12307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'.
[  301.283538][T12298] bond2: entered allmulticast mode
[  301.302572][T12307] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  301.307724][T12312] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  301.351485][T12298] bond2: left allmulticast mode
[  301.815442][T12320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.216110][T12320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.356568][T12320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.690790][T12320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.768668][T12355] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1550'.
[  303.248725][ T5947] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.285309][T12375] syzkaller0: entered promiscuous mode
[  303.290974][T12375] syzkaller0: entered allmulticast mode
[  303.340182][   T77] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  303.435562][   T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.498956][   T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.605903][T12385] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  303.642005][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1556'.
[  303.780992][T12388] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  303.823426][T12388] bond1 (unregistering): Released all slaves
[  303.925412][T12402] syzkaller0: entered promiscuous mode
[  303.943442][T12402] syzkaller0: entered allmulticast mode
[  304.001290][T12392] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  304.323574][T12417] syzkaller0: entered promiscuous mode
[  304.334588][T12417] syzkaller0: entered allmulticast mode
[  306.273483][T12479] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1569'.
[  306.382255][T12477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.557415][T12487] netlink: 'syz.1.1571': attribute type 13 has an invalid length.
[  307.966405][T12520] netlink: 'syz.1.1576': attribute type 10 has an invalid length.
[  308.015187][T12520] 8021q: adding VLAN 0 to HW filter on device team0
[  308.048602][T12520] bond0: (slave team0): Enslaving as an active interface with an up link
[  308.748322][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1578'.
[  308.793837][T12529] dummy0: left promiscuous mode
[  308.809248][T12529] batadv0: left promiscuous mode
[  308.882056][T12529] ip6tnl2: left allmulticast mode
[  309.608931][T12537] syzkaller0: entered promiscuous mode
[  309.649127][T12537] syzkaller0: entered allmulticast mode
[  310.326692][T12558] xt_CT: No such helper "netbios-ns"
[  315.328778][    C0] sched: DL replenish lagged too much
[  317.631157][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  331.417442][T12577] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1585'.
[  353.219391][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  353.711110][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  353.777887][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  354.004421][   T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.129508][   T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  354.195979][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  354.322454][   T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  354.547707][   T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  355.696422][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  357.195646][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.385122][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.152282][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.197125][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.556181][ T4938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.721066][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.953677][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.091575][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.230913][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.415898][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.628227][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.963068][ T5629] Bluetooth: hci5: command tx timeout
[  367.037292][ T5629] Bluetooth: hci5: command tx timeout
[  368.335458][ T5629] Bluetooth: hci6: command tx timeout
[  368.592298][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.716272][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.750537][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.169351][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.194060][ T5629] Bluetooth: hci5: command tx timeout
[  369.199689][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.401603][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.770688][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.083607][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.397541][ T5631] Bluetooth: hci6: command tx timeout
[  370.439468][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.530440][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.557712][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.710517][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.358461][ T5629] Bluetooth: hci5: command tx timeout
[  371.582653][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.482923][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  372.589061][ T5629] Bluetooth: hci6: command tx timeout
[  373.379208][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.526115][ T5631] Bluetooth: hci3: command tx timeout
[  374.664859][ T5631] Bluetooth: hci6: command tx timeout
[  376.094718][ T5631] Bluetooth: hci0: command tx timeout
[  376.681072][ T5631] Bluetooth: hci3: command tx timeout
[  378.147975][ T5631] Bluetooth: hci7: command tx timeout
[  378.264084][ T5631] Bluetooth: hci0: command tx timeout
[  378.879044][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  378.903477][ T5631] Bluetooth: hci3: command tx timeout
[  380.236284][ T5631] Bluetooth: hci7: command tx timeout
[  380.445795][ T5631] Bluetooth: hci0: command tx timeout
[  380.958225][ T5631] Bluetooth: hci3: command tx timeout
[  382.320928][ T5631] Bluetooth: hci7: command tx timeout
[  382.675806][ T5631] Bluetooth: hci0: command tx timeout
[  384.398402][ T5631] Bluetooth: hci7: command tx timeout
[  392.895964][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.367836][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.754417][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.237111][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.585187][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  397.615266][ T5623] Bluetooth: hci1: command tx timeout
[  399.893259][ T5623] Bluetooth: hci1: command tx timeout
[  402.020085][ T5623] Bluetooth: hci1: command tx timeout
[  404.082972][ T5623] Bluetooth: hci1: command tx timeout
[  407.203522][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  407.530867][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  407.703194][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  408.126560][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  408.753090][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  411.603854][ T5631] Bluetooth: hci8: command tx timeout
[  413.699387][ T5631] Bluetooth: hci8: command tx timeout
[  415.965130][ T5631] Bluetooth: hci8: command tx timeout
[  416.932310][ T5623] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  417.253035][ T5623] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  417.318767][ T5623] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  417.712747][ T5623] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  417.881050][ T5623] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  418.120063][ T5623] Bluetooth: hci8: command tx timeout
[  420.880841][ T5623] Bluetooth: hci9: command tx timeout
[  423.050816][ T5623] Bluetooth: hci9: command tx timeout
[  425.428787][ T5623] Bluetooth: hci9: command tx timeout
[  425.758497][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  426.714844][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  426.874726][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  427.162187][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  427.266844][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  427.598245][ T5631] Bluetooth: hci9: command tx timeout
[  428.748670][ T5631] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  428.890551][ T5631] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  428.974847][ T5631] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  429.458776][ T4938] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  429.578335][ T4938] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  430.817904][ T5629] Bluetooth: hci4: command tx timeout
[  432.849935][ T5629] Bluetooth: hci10: command tx timeout
[  432.955413][ T5629] Bluetooth: hci4: command tx timeout
[  435.222385][ T5629] Bluetooth: hci10: command tx timeout
[  435.227949][ T5629] Bluetooth: hci4: command tx timeout
[  437.326564][ T5629] Bluetooth: hci10: command tx timeout
[  437.442402][ T5629] Bluetooth: hci4: command tx timeout
[  439.679897][ T5629] Bluetooth: hci10: command tx timeout
[  440.239023][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  454.549725][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  454.860361][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  454.926607][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  455.710720][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  455.810282][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  458.744969][ T5629] Bluetooth: hci2: command tx timeout
[  459.669222][ T4938] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  459.804267][ T4938] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  459.888336][ T4938] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  460.011696][ T4938] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  460.303560][ T4938] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  460.847020][ T4938] Bluetooth: hci2: command tx timeout
[  462.750543][ T4938] Bluetooth: hci11: command tx timeout
[  462.956860][ T4938] Bluetooth: hci2: command tx timeout
[  464.665118][ T5629] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  464.810392][ T5629] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  464.896514][ T5629] Bluetooth: hci11: command tx timeout
[  465.094804][ T5629] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  465.119122][ T5631] Bluetooth: hci2: command tx timeout
[  465.354053][ T5629] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  465.583036][ T5629] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  466.970418][ T5629] Bluetooth: hci11: command tx timeout
[  468.184340][ T5629] Bluetooth: hci12: command tx timeout
[  469.160545][ T5629] Bluetooth: hci11: command tx timeout
[  470.345800][ T5629] Bluetooth: hci12: command tx timeout
[  471.983107][ T4938] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  472.225214][ T4938] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  472.365578][ T4938] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  472.515274][ T5631] Bluetooth: hci12: command tx timeout
[  472.714549][ T4938] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  472.923298][ T4938] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  474.556312][ T5629] Bluetooth: hci12: command tx timeout
[  476.000393][ T5629] Bluetooth: hci13: command tx timeout
[  478.262042][ T5629] Bluetooth: hci13: command tx timeout
[  480.460227][ T4938] Bluetooth: hci13: command tx timeout
[  481.418449][ T4938] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  481.762342][ T4938] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  482.024199][ T4938] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  482.410039][ T4938] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  482.515739][ T4938] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  482.563001][ T4938] Bluetooth: hci13: command tx timeout
[  487.329737][ T5629] Bluetooth: hci14: command tx timeout
[  488.403106][ T5629] Bluetooth: hci5: command 0x0406 tx timeout
[  489.760447][ T4938] Bluetooth: hci14: command tx timeout
[  491.849506][ T5629] Bluetooth: hci14: command tx timeout
[  493.513947][ T5629] Bluetooth: hci6: command 0x0406 tx timeout
[  493.970126][ T5629] Bluetooth: hci14: command tx timeout
[  498.616260][ T4938] Bluetooth: hci0: command 0x0406 tx timeout
[  498.662477][ T4938] Bluetooth: hci3: command 0x0406 tx timeout
[  501.656048][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  501.759829][ T5947] smc: removing ib device syz1
[  503.649035][ T5631] Bluetooth: hci7: command 0x0406 tx timeout
[  512.772803][ T5621] bridge0: port 3(syz_tun) entered disabled state
[  518.983953][ T5631] Bluetooth: hci1: command 0x0406 tx timeout
[  523.154791][ T5623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  523.660074][ T5623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  524.025764][ T5623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  524.244508][ T5623] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  524.346598][ T5623] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  524.568320][ T5623] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  524.753756][ T5623] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  524.864883][ T5623] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  525.024238][T12700] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  525.148570][T12700] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  527.781062][ T5629] Bluetooth: hci15: command tx timeout
[  528.081709][ T5629] Bluetooth: hci16: command tx timeout
[  529.964654][ T5629] Bluetooth: hci15: command tx timeout
[  530.479098][ T5629] Bluetooth: hci16: command tx timeout
[  532.048223][ T5629] Bluetooth: hci15: command tx timeout
[  532.554546][ T5623] Bluetooth: hci16: command tx timeout
[  533.535762][   T30] INFO: task kworker/0:11:6093 blocked for more than 143 seconds.
[  533.570711][   T30]       Not tainted syzkaller #0
[  533.890809][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.981375][   T30] task:kworker/0:11    state:D stack:25960 pid:6093  tgid:6093  ppid:2      task_flags:0x4208060 flags:0x00080000
[  534.232387][ T5623] Bluetooth: hci15: command tx timeout
[  534.483472][ T5623] Bluetooth: hci8: command 0x0406 tx timeout
[  534.636845][ T5623] Bluetooth: hci16: command tx timeout
[  534.750146][   T30] Workqueue: events switchdev_deferred_process_work
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  534.992947][   T30] Call Trace:
[  534.996366][   T30]  <TASK>
[  535.227855][   T30]  __schedule+0x17d9/0x56c0
[  535.242201][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  535.247519][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  535.939480][   T30]  ? __pfx___schedule+0x10/0x10
[  535.953999][   T30]  ? schedule+0x90/0x2b0
[  535.958329][   T30]  schedule+0x164/0x2b0
[  536.377050][ T5621] syz_tun (unregistering): left allmulticast mode
[  536.411704][   T30]  schedule_preempt_disabled+0x13/0x30
[  536.658949][ T5621] syz_tun (unregistering): left promiscuous mode
[  536.931943][   T30]  __mutex_lock+0x7bf/0x1550
[  536.936643][   T30]  ? __mutex_lock+0x5d4/0x1550
[  537.148925][ T5621] bridge0: port 3(syz_tun) entered disabled state
[  537.311664][   T30]  ? switchdev_deferred_process_work+0xe/0x20
[  537.500423][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  537.515188][   T30]  ? rcu_is_watching+0x15/0xb0
[  537.520068][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  537.808833][   T30]  switchdev_deferred_process_work+0xe/0x20
[  537.980326][   T30]  process_scheduled_works+0xa8e/0x14e0
[  538.384662][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  538.390740][   T30]  ? assign_work+0x3cf/0x5d0
[  538.712414][   T30]  worker_thread+0xa47/0xfb0
[  538.717129][   T30]  kthread+0x388/0x470
[  539.072149][   T30]  ? __pfx_worker_thread+0x10/0x10
[  539.314365][   T30]  ? __pfx_kthread+0x10/0x10
[  539.500858][   T30]  ret_from_fork+0x514/0xb70
[  539.515298][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  539.520498][   T30]  ? __switch_to+0xc89/0x1420
[  539.656127][   T30]  ? __pfx_kthread+0x10/0x10
[  539.660805][   T30]  ret_from_fork_asm+0x1a/0x30
[  539.772948][   T30]  </TASK>
[  539.797046][   T30] INFO: task syz-executor:12582 blocked for more than 149 seconds.
[  539.930765][   T30]       Not tainted syzkaller #0
[  540.172626][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  540.287469][   T30] task:syz-executor    state:D stack:26792 pid:12582 tgid:12582 ppid:1      task_flags:0x400140 flags:0x00080002
[  540.453873][   T30] Call Trace:
[  540.457224][   T30]  <TASK>
[  540.546943][   T30]  __schedule+0x17d9/0x56c0
[  540.643256][   T30]  ? __lock_acquire+0x683/0x2cf0
[  540.736990][   T30]  ? __lock_acquire+0x683/0x2cf0
[  540.833799][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  541.002399][   T30]  ? __pfx___schedule+0x10/0x10
[  541.007358][   T30]  ? schedule+0x90/0x2b0
[  541.090653][   T30]  schedule+0x164/0x2b0
[  541.126150][   T30]  schedule_preempt_disabled+0x13/0x30
[  541.300812][   T30]  __mutex_lock+0x7bf/0x1550
[  541.323671][   T30]  ? __mutex_lock+0x5d4/0x1550
[  541.328539][   T30]  ? inet_rtm_newaddr+0x470/0x19f0
[  541.429067][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  541.505839][   T30]  ? __nla_parse+0x40/0x60
[  541.560943][   T30]  inet_rtm_newaddr+0x470/0x19f0
[  541.623018][   T30]  ? __kernel_text_address+0xd/0x30
[  541.679876][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  541.720354][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  541.837450][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  541.881492][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  541.917930][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  541.964807][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  542.011535][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  542.044295][   T30]  ? __lock_acquire+0x683/0x2cf0
[  542.094267][   T30]  netlink_rcv_skb+0x226/0x4a0
[  542.148288][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  542.181279][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.214336][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  542.263772][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  542.348590][   T30]  netlink_unicast+0x7bb/0x940
[  542.374348][   T30]  netlink_sendmsg+0x813/0xb40
[  542.379215][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.535835][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.541003][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.593623][   T30]  sock_sendmsg_nosec+0x13a/0x180
[  542.673062][   T30]  __sys_sendto+0x408/0x5a0
[  542.715733][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  542.756737][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  542.802478][   T30]  __x64_sys_sendto+0xde/0x100
[  542.835613][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.870937][   T30]  do_syscall_64+0x174/0x580
[  542.906904][   T30]  ? trace_irq_disable+0x3b/0x140
[  542.939034][   T30]  ? clear_bhb_loop+0x40/0x90
[  542.972948][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.019870][   T30] RIP: 0033:0x7fd52735e6ce
[  543.063648][   T30] RSP: 002b:00007ffe7f895ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  543.119707][   T30] RAX: ffffffffffffffda RBX: 00005555768d1500 RCX: 00007fd52735e6ce
[  543.155866][   T30] RDX: 0000000000000028 RSI: 00007fd528154670 RDI: 0000000000000003
[  543.195572][   T30] RBP: 0000000000000001 R08: 00007ffe7f895f74 R09: 000000000000000c
[  543.240064][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  543.283600][   T30] R13: 0000000000000000 R14: 00007fd528154670 R15: 0000000000000000
[  543.342518][   T30]  </TASK>
[  543.530510][   T30] INFO: task syz-executor:12592 blocked for more than 153 seconds.
[  543.547992][   T30]       Not tainted syzkaller #0