last executing test programs:

2m2.597105892s ago: executing program 0 (id=1799):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r4, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba919736d"], 0x2c}}, 0x0)
r7 = socket(0x1, 0x1, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000e5ffac141400140006000000000006"], 0x40}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffff9, 0x25df5bfc, {0x4, 0x7c}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x800007}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xb, 0x1e, 0x0, 0x0, @str='dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0xc000)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r15}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"})

2m2.385513813s ago: executing program 0 (id=1804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x48094) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001090000000100000000021800000000ff010000000008000100ac141439"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x3, 0x1)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96})

2m1.840535922s ago: executing program 0 (id=1807):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x80000)
getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x84, 0x19, 0xa, 0x5, 0xffffff00, 0x0, {0x2, 0x0, 0x82}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0xfc83}}, 0x20008804)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @netrom, @remote, @remote, @netrom, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x80000) (async)
getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x84, 0x19, 0xa, 0x5, 0xffffff00, 0x0, {0x2, 0x0, 0x82}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0xfc83}}, 0x20008804) (async)

2m1.838257816s ago: executing program 0 (id=1809):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x1, 0xfffffffe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000001090101000000000000001d02000000"], 0x14}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001a00010000000000000000000a000000000000000000000014000500fc020000000000000000000000000000080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xfc8ae3efc6e100f9)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x2})
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000180)=[{{0x4}, {0x1, 0x1}}, {{0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x38)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
sendto$llc(r4, 0x0, 0x0, 0x4000044, &(0x7f0000000000)={0x1a, 0x200, 0xcd, 0x0, 0xf3, 0x12, @broadcast}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000030425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0005000020000000340012800e00010069703665727370616e0000002000028008000100", @ANYRES32, @ANYBLOB="050016000100000004001200060010004e20000008000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

2m1.836640879s ago: executing program 0 (id=1810):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002480)={0x0, 0x0, {0x5, @usage=0x7, 0x0, 0x800, 0x3a, 0x0, 0x7fffffff, 0x400, 0x52, @struct={0x3}, 0x8000, 0x0, [0x9, 0x7fffffff, 0x1, 0x9, 0x9, 0xbbf6]}, {0x39, @struct={0x80, 0x7}, 0x0, 0x3, 0x1000000000000000, 0x289e, 0x6, 0xd, 0x401, @usage=0x4, 0x28d, 0x7, [0x7, 0x6, 0xd9a0, 0x7, 0x2, 0x3]}, {0xd6c8, @usage=0x1, 0x0, 0xc, 0x8, 0x4, 0xcd, 0x40, 0xc6, @usage=0x3, 0x0, 0xd, [0x2, 0x8, 0x7, 0x4, 0xa, 0xc]}, {0x5, 0x3, 0x7}})
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00')
pipe(&(0x7f0000000240)={<r10=>0xffffffffffffffff})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)=@newtaction={0x1070, 0x30, 0x871a15abc695f91d, 0x70bd2a, 0x80000, {}, [{0x105c, 0x1, [@m_mirred={0x1d8, 0x2, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x0, 0x0, 0x7ff}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9b5, 0x5, 0x2, 0x2, 0x73c}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x7f, 0x1, 0x6c, 0x93c}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1000, 0x7, 0x0, 0xe}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0xfffffffffffffff9, 0x3, 0xf}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf8, 0x5, 0x10000000, 0x0, 0x5}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x8000, 0xffffffffeffffffa, 0x5, 0x5}, 0x1, r1}}]}, {0xca, 0x6, "28f78d00ece42b39f7262d45e1510b81d7e5d0c4bbd301e9016abe84d4b54cb638c44926945dc951a4df3b475213f167e48ed7cc8c2e200f383d11691fc2fa8f0d7bb2e391107057eda90c1dc23123537d8b3bd7468c5ce6390a9e3c2c22d31d7a2f6d14f4f4657331ba6177616b7ada58cfae602f372ba97e25a2e7ca5c0c05ee3f377c0d8cf0bf202838bf4c9f36256259e61848a3a9175d85b047ac75d4652d8b3ec0543f1f3fb834876c96c7bfefb3c3d06362d01874d2175f729f85ae3ce4ea63b6792c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0xe80, 0x14, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x259, 0x5, 0x10000003, 0x8, 0xc1}, 0x2, 0x9, [{0x0, 0xfff, 0x1, 0x80000001, 0x2, 0x36}, {0x7, 0xf, 0x8, 0x2000, 0x10001, 0x1000}]}, [{0x401, 0x5, 0xb6b, 0xffffff69, 0x4, 0xfff}, {0x6, 0x400, 0x4, 0xfbd, 0x7, 0x101}, {0x5, 0x7f, 0xfffffffa, 0x2, 0x3, 0xfffffffc}, {0x4, 0xffffffff, 0x4, 0x7, 0xd2, 0x2}, {0xfffff8f2, 0x10001, 0x2, 0x6, 0x6, 0x1000}, {0x7, 0x1, 0x7f, 0x8, 0x8, 0x5}, {0x2, 0xc17, 0x83f, 0xfffffff1, 0xc2, 0xd}, {0x8, 0x5, 0x0, 0x6, 0x5f5c9056, 0xeb3}, {0xf69, 0x400, 0xcfa9, 0x7, 0x2, 0xffffffff}, {0x7, 0x8, 0x607, 0x0, 0xff}, {0x5, 0x10, 0x3, 0x4, 0x7ff, 0x3}, {0x89, 0x6, 0xfffffffc, 0x5, 0x7, 0x1ff}, {0x9, 0x4f, 0xffff, 0x0, 0x4, 0x4}, {0x80000000, 0x2, 0x8, 0xffffffff, 0x1, 0x10001}, {0xfffffffc, 0x8, 0x3, 0x7fe000}, {0x7d, 0xfff, 0x7ff, 0x8000, 0x3, 0x10}, {0x7, 0x3, 0x1000, 0x9, 0xffffca39, 0xfffffff8}, {0x7f, 0x972, 0x10000, 0x10, 0x6, 0x4}, {0x2, 0x9, 0x5, 0x4e, 0x7f, 0x9}, {0x800, 0x2, 0x854b, 0x9, 0x4, 0x4}, {0xcc, 0xf7, 0x7, 0xf, 0xd06d, 0x2}, {0xffff, 0x9, 0x2, 0x4, 0x6db6, 0x7}, {0x5, 0x8, 0xfffffffe, 0xbc2, 0x7fe, 0xb56b}, {0x10001, 0xfffffffd, 0x0, 0x6, 0x3}, {0x7f, 0x3, 0xfff, 0x5, 0x0, 0x6}, {0x2, 0x0, 0x7fffffff, 0x10001, 0x317, 0x3}, {0x1, 0x6aff905f, 0x7, 0x6823051e, 0x2b1e, 0x1}, {0x0, 0x6, 0x6, 0x83, 0x1, 0x9}, {0x4, 0x8, 0x7, 0xe, 0x6, 0xe}, {0x8, 0x80000000, 0x81, 0x0, 0x3, 0x800}, {0x0, 0x0, 0x2, 0xf, 0x7fffffff, 0x2}, {0x8, 0x3ff, 0x1ff, 0xfffffffa, 0x3, 0x6f09167e}, {0x2, 0xffffffff, 0x6, 0x0, 0x2, 0xffff}, {0x7fff, 0x8000, 0x1, 0xff, 0x9e}, {0x3ff, 0x1, 0x7, 0x4000800, 0xf, 0xafc}, {0xe, 0x0, 0x81, 0x3b30, 0x2, 0x90ea}, {0x3, 0x4, 0x6, 0x10001, 0x5, 0x8}, {0x5ce, 0x0, 0x6, 0x2e, 0x3, 0x5}, {0xfffffffa, 0x20, 0x9aa, 0x40, 0xfffff563, 0x5}, {0x9, 0xa, 0xffffffff, 0x7, 0x21, 0xc}, {0x7, 0x4000, 0x8, 0x0, 0x0, 0x3940}, {0x4, 0xd828, 0x101, 0x1, 0xe487, 0x6}, {0x8, 0x1, 0x8f, 0x4, 0x200, 0xfffffff0}, {0x6, 0x401, 0x9, 0x2af, 0x7, 0x8}, {0xa8d, 0x0, 0x400, 0x1ff, 0x10, 0x1}, {0x7, 0x80000000, 0xcbd8, 0xfffffffa, 0x1000, 0x1}, {0x7, 0x8, 0x8, 0x2, 0x80000000, 0xfa}, {0x7fffffff, 0x93, 0x80, 0x0, 0x4}, {0x4, 0x482, 0x971, 0x348677a4, 0x6, 0x6}, {0x9, 0x1, 0x5, 0x8, 0x8, 0x100}, {0x3, 0xa609, 0x639, 0x3, 0xbd, 0x401}, {0x1, 0x8, 0x99df, 0x80, 0x8, 0x8}, {0x7fffffff, 0x3, 0x9, 0x0, 0xffffffff, 0x7}, {0x6a6, 0x1, 0x6, 0x80000000, 0x140000, 0x7}, {0x8, 0x2, 0x2, 0xffffffff, 0x0, 0x9}, {0x0, 0x3, 0xe, 0xa821, 0xffffffff, 0x2}, {0x2, 0xfa51, 0x1, 0x0, 0x9, 0x3}, {0x101, 0xa86e, 0xd9, 0x6, 0xc0, 0xd}, {0x0, 0xf94, 0x6, 0x0, 0xff, 0x7}, {0x0, 0x5, 0x4, 0x4, 0x9, 0x6}, {0x9, 0x7, 0xc01, 0x8729, 0xce, 0x7}, {0x35, 0x6a30, 0x91, 0x8, 0x8001, 0xffffffb9}, {0x1, 0x3f, 0x5, 0x0, 0x7, 0x7fffffff}, {0x40, 0x8, 0x400, 0x1, 0x3fe}, {0x6, 0x10, 0x7, 0x401, 0x6, 0x6}, {0x8, 0x9, 0x400, 0x8, 0xff, 0x8}, {0x6, 0x3, 0x40000000, 0x200, 0x4, 0xaaf}, {0x1, 0x3, 0x4, 0xffffffff, 0x4, 0x3b41b4e4}, {0x0, 0x7, 0x5, 0x200, 0xfffffffb, 0x1}, {0x541, 0x10, 0x2, 0x6, 0x1, 0x4}, {0xd9d, 0x80, 0x8001, 0x3fff800, 0x7}, {0x1, 0x3, 0x4, 0x6, 0x1, 0x5}, {0x2, 0x7fff, 0xe, 0x8, 0x35df, 0x8000}, {0x8, 0x9, 0xb2, 0xa, 0x1ff}, {0xf, 0x5, 0x82, 0xe8, 0x8, 0xb}, {0x9, 0xd, 0x7, 0x4, 0x1, 0x3c3f}, {0x800, 0x1ff, 0x4da4, 0x2, 0x2000000, 0x8}, {0x400000, 0x6, 0x9, 0x5, 0x3ff, 0xfffffffb}, {0x6, 0x3, 0x34, 0x1, 0x6, 0x8}, {0xf, 0xb43c, 0x2, 0x6, 0x5fbb, 0x9}, {0x6e47, 0x1, 0xd15, 0xfffffff9, 0xc0, 0x4}, {0x2, 0x4, 0xce, 0x1, 0x2, 0xe2d}, {0x9, 0x2, 0xd, 0x0, 0x3, 0x7}, {0x7, 0x0, 0x3, 0x10000, 0x7fff, 0x7}, {0xfffffffd, 0xffffff81, 0x80000000, 0x6, 0x5, 0xd}, {0x10000, 0x101, 0x1, 0x8, 0x8001, 0xc}, {0x6, 0x3, 0x4, 0x6, 0x4}, {0x1ff00000, 0x7ff, 0x1, 0x9, 0x3, 0x6d}, {0x400, 0x8, 0x1, 0x1, 0x61}, {0x4, 0x3, 0xb18, 0x1, 0x3, 0x9}, {0x5, 0x8, 0x5, 0x9, 0x68c, 0x1}, {0xffffffff, 0x0, 0x2, 0x2, 0x7, 0xffffff69}, {0x3, 0x8, 0x2, 0x4, 0x560000, 0x3}, {0x2, 0x3, 0x3, 0x8001, 0x5315, 0xd5}, {0x8, 0x84fe, 0x8, 0x8001, 0x100, 0xf}, {0xffff0001, 0x82, 0x81, 0x7, 0x7, 0x8}, {0x4, 0x800, 0x8, 0x129170bf, 0x7, 0x3}, {0x1, 0x1, 0x6e28, 0x0, 0x0, 0x4}, {0x0, 0x5, 0x7ff, 0x9, 0x43f8, 0xebe}, {0x380, 0xf, 0x4, 0x9c23, 0x3, 0xfffffffd}, {0xd81c, 0x4, 0x3ff, 0x80000001, 0x8, 0x4}, {0x40, 0x360, 0x3, 0xf96a, 0x4, 0x7fffffff}, {0x6180, 0x8000, 0xa, 0x40, 0x2, 0x1}, {0xcfc, 0x1, 0x6, 0x8, 0x0, 0xf8d3}, {0xa, 0x409, 0x4, 0x5, 0x1, 0x2}, {0xdc85, 0x4, 0x2, 0xc7f7, 0x1, 0x8}, {0xc1560, 0xbb8, 0x5, 0x6, 0x1, 0xf894}, {0x3, 0x10a, 0x9, 0xffff, 0x8000, 0x30}, {0x6c0, 0x1, 0x39db, 0xb9e0, 0x0, 0x7f}, {0x3, 0x5, 0xfffffffb, 0x4, 0x8, 0x19d68fcc}, {0x8000, 0x1, 0x2, 0x6, 0x7, 0x8001}, {0x7fff, 0x0, 0x4, 0x1ff, 0x40, 0xffff}, {0xf660, 0x7, 0xbd, 0x6, 0x101, 0x4}, {0x1, 0x6, 0x7, 0xb, 0xfffffff6, 0x9}, {0x0, 0xf65b, 0xe, 0x2, 0xa, 0x8}, {0xba38, 0x7, 0xffff, 0x9, 0x93, 0xc000000}, {0x7, 0x80000001, 0x2, 0x9, 0x81, 0x6}, {0x8, 0xe, 0x7fffffff, 0x9, 0x100, 0xdb9}, {0xf, 0x7, 0x2, 0x6, 0x8, 0x7f}, {0x9, 0x3, 0x5, 0x7, 0x40, 0xcfe}, {0xffffffff, 0x1c7, 0x6, 0x8, 0xffffffff, 0x6}, {0x4, 0x6, 0x9, 0x7e42, 0x3, 0x6}, {0xffffffed, 0x1, 0x3, 0x2, 0xeda3, 0xf5b}, {0x0, 0x7fff, 0x98, 0x100, 0x1000, 0x9}, {0xb226, 0x7ff, 0x5, 0xb1f1, 0x0, 0x80000001}, {0x81, 0xb882, 0x4, 0xd480000, 0x1ff}, {0x2, 0x5, 0x401, 0xffff, 0x9, 0x9}, {0x1000, 0x9, 0x7, 0x2, 0x10000, 0xd1}], [{0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x4}, {0x4}, {0x1}, {0x2}, {0x2}, {0xde7ce323b75deae4}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x3}, {0x3}, {0x5}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x3}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x6}, {0x6}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x130d5b20d1a4418e}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1070}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000340)={r11})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0xe}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r12, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000100039043dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4ec23dc5083c75dd22a7a935fed749add0f592190fb75688dedfa9a966bc9890261ea2a41382925d53cafe2bf51ede9d50ad9d57e49ddc65b8b6a9e7af16bd3f42f6abb736f510680"], 0x20}, 0x1, 0x0, 0x0, 0x24000807}, 0x8041)

2m0.956266292s ago: executing program 0 (id=1826):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r7}, 0x7fff, 0x757d, 0x81})
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

1m45.972485814s ago: executing program 32 (id=1826):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r7}, 0x7fff, 0x757d, 0x81})
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

56.416420106s ago: executing program 3 (id=2551):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x48094)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRES32=0x0], 0x2c}}, 0x8000) (async)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}}}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x49200000}}, 0x6, 0x7}, 0x90)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket(0xa, 0x1, 0x0)
listen(r7, 0x0) (async)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) (async)
accept4(r7, 0x0, 0x0, 0x80000) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f00000001c0)={0x1, 0x80000001}) (async)
sendmsg$key(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x1, 0x1, 0x8, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1c, 0x18, 0x40, 0xfd, 0xd3, "a0762619e7a7bc287c1c76c484cfbc561101fa257bf49db5e4f45fb93829166f66f1bebf216c1baf9ca13d72ab6fb7275382057be7a805bae4b177eb8cdc922af626eb0f6a00dc9fff340722ae8538410970060f88bd02cdbc5dc68bc440bb76f7c4a08d901989aac5937d7735c0130d08b0a4072e7b69bf3f910d02b42184263f82ab80b2a8f5c1b0be6ec2ae18e0bc80432f2fb81402e64b073276c1d20b3b699bc18b5cd2cf585d82b3c3a82c589a356464c0e72b89989f05d379eceba4fc086df767183490722f77d3381800ac19e022c6"}]}, 0xf0}}, 0x8000) (async)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x1)
r9 = socket(0x2b, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt(r10, 0x3, 0x1ff, 0x0, 0x0) (async)
ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96})

54.967688751s ago: executing program 3 (id=2553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4004, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20040080)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000540)={0x3, 0x2000, 0xe72, 0x2e9}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0xea3)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240))
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x80}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4040014)

54.964984501s ago: executing program 2 (id=2554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)}, 0x84)
r2 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100))
socket$l2tp(0x2, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000680)={0x0, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r5, 0x0, 0x10}, 0xc)
close(r6)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x1, 'ipvlan1\x00', {}, 0x85e})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x7)
write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef)
write$cgroup_devices(r7, 0x0, 0xffffffa6)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x38}}, 0x30)

54.862271911s ago: executing program 3 (id=2556):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000005a00ac774a2b773fea6ceb8d07284b23a8c0ffff00"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, r11, 0x309, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b97d97e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b49527e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dd01700}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d06150a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a198c6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x632efe26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40e373a2}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040000)
socket$inet6(0xa, 0x2, 0x0)
r12 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r12)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r13, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000370404000000fbdbdf2500000000", @ANYRES32=r14, @ANYBLOB="a30d050000000000300012800b0001006970367400ff02000000000000000000000000000108001400ff000000"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)

54.848245084s ago: executing program 2 (id=2558):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
r2 = socket(0x2, 0x3, 0xff)
r3 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmmsg$inet(r2, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x2, 0x488c4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r8], 0x3c}}, 0x8000)
sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)
sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000380)="a6", 0x1, 0x40, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608064c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r10 = socket$netlink(0x10, 0x3, 0x9)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_rxnfc={0x30, 0x10, 0x2ee7a3f8, {0x7, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e21, 0x8}, {0x0, @local, 0x6, 0x288e, [0x7d3, 0x7]}, @esp_ip6_spec={@mcast1, @mcast2, 0xf, 0x2}, {0x0, @random="bfa6b04fd512", 0x6, 0x8001, [0xa, 0x80000000]}, 0xfffffffffffffffa, 0x3}}})

54.71958326s ago: executing program 3 (id=2559):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x10b}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000e0a010300000000000000000500000609000100e4b49a7bbdf7489c140000001100010000000000000000000000000a870633004a7060de00a2309cca5dd20f9da361a9d0f7dc14c6d3e06bc744d26c55e45f6f5c324c087273"], 0x48}}, 0x40004080)
sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040) (async)
sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0xfffffffffffffec8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000880)='rpcgss_bad_seqno\x00', r2}, 0x18)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r6)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000017c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0xfffffffe, 0x0, 0x9, 0x6, 0x0, 0x6, 0x8}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r6}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r6, <r8=>0xffffffffffffffff}, 0x4)
write(r8, &(0x7f0000000a00)="9bbf1c5e6f150e3793c3e2637a2d9cc1babdf4e89ed1f06ae539e381fa1e16bd61341d60f900d7f124fb476c4d26bfa4d02dfb55da202cc931c91017fb0b570e4aa5a6", 0x43)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f0000000800)={0x8, &(0x7f0000001ac0)=[{0x3ff, 0x46, &(0x7f0000000480)="b1a47be3d583372f64597b85026ee5d8dc2627fb00cf60656d7407711ecf5ff8582ad033e705371f4e3aefb33f96b0a435fb9240e415e1edfa79b018a48f407d11b4db642843", 0x1, 0x1}, {0x3, 0xa00, &(0x7f0000000ac0)="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", 0x0, 0x1}, {0x4bc74d35, 0x10, &(0x7f0000000400)="b71be278bdfec3479b6c3b9c8a943816", 0x1}, {0x7, 0xa8, &(0x7f0000000580)="8bd2194bcaab926eb042d32a5774122f264b4214485783d40a75d7a41cb94e678bfabbdff54011ad9904c804842f83edf5e202a62bb5d3d219ecaf65f55999c78140af4619314527cddaeb7335fb6ea768a8866f8e0b9ec4491f5287bb2692fcbd18d06bd9f53710d1101a2a8dc23227cc5458cbec3cd933c69713b8ab7c2257275a89029eae5bceafe88f13cd923affc0f4fa7b2e53d2946322cdc491777e2ae78b18c0af17e718", 0x1, 0x1}, {0xc260d4e, 0x55, &(0x7f0000000680)="5d64cb6323981767cc5a6c1bb7fc793a6de2f16013910c70c3c7679f3a08cc04197292d506e757f1003dba87759737d283ffca18856e78b028068fea84dbb8fa9715a2f432c4980c374f146aff936add07f58e28dc", 0x1, 0x1}, {0x80000000, 0xd6, &(0x7f0000000700)="7226029744d5b96a2574da7903db65c29568068fddb638247405bea53c433e3b1ebbbc0e420bc1150f07589eb2f90ccfd46d134473acc6130c1a78662ffbdb5913bc279d2a4b620e33c3982aa2d8533d5136e06391a057b6d0c7525695d55a0641f5b26409dfb7f743f6959a548aec96b9fbfb6b80c15e0170288ebebc2b985ca57c3abc9481deffd7920995917b32627f05da1062c8397afa1df812c6302f8fb38d8cf68f74f1dc386033bc4a3edb281b62659259c75d4c2a8f50d8f2fa8dd13a590bc10e4a5f2de584210ea7a9d94bdea16975a504", 0x1, 0x1}, {0x1, 0xfc, &(0x7f0000000900)="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", 0x1, 0x1}, {0x0, 0xb, &(0x7f0000000500)="a65d69926b52f71b8941d4", 0x1, 0x1}]})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt(r0, 0x4, 0x9, &(0x7f0000000000)="f73ad0e038c53a12ba6ce2fde2bcd1afe68f03a8f79abd9ac61d5cddc482a8a6a591169b878391d426f28ff8fd012ce77687d15b149a815d812102b11f3148796847041d9fc6a115c168a1ae0127e655b795fa2264bd896dd521651441283fb4b03c180b61c200ec8f97646e", 0x6c) (async)
setsockopt(r0, 0x4, 0x9, &(0x7f0000000000)="f73ad0e038c53a12ba6ce2fde2bcd1afe68f03a8f79abd9ac61d5cddc482a8a6a591169b878391d426f28ff8fd012ce77687d15b149a815d812102b11f3148796847041d9fc6a115c168a1ae0127e655b795fa2264bd896dd521651441283fb4b03c180b61c200ec8f97646e", 0x6c)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'veth1_to_bridge\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001dc0)={{0x0, 0x1, 0x3, 0x80, 0x800, 0x68, 0x4, 0xfffffffd, 0x3ff, 0xffffffff, 0x8, 0x3, 0xfffffffffffffffc, 0xba4, 0x80}, 0x18, [0x0, 0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001dc0)={{0x0, 0x1, 0x3, 0x80, 0x800, 0x68, 0x4, 0xfffffffd, 0x3ff, 0xffffffff, 0x8, 0x3, 0xfffffffffffffffc, 0xba4, 0x80}, 0x18, [0x0, 0x0, 0x0]})

54.705542629s ago: executing program 1 (id=2560):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r0)

54.29675696s ago: executing program 2 (id=2561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000000), 0xfffffffb, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140)='\a', 0x0}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)

54.293853921s ago: executing program 3 (id=2562):
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x8}, @sack_perm], 0x7)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, &(0x7f00000003c0)=0x1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000040)="e1", 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @dev}, &(0x7f0000000080)=0xc)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x211, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x24}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="0100fdffffff000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20004804)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x2, 0x0, 0xa, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x6e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa48, 0x0, 0x0, 0x0, 0x500]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmmsg$sock(r7, &(0x7f0000000540)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80, &(0x7f00000005c0)}}, {{&(0x7f0000000340)=@generic={0x1d, "3b122a8361f9d608e4340d35fcfdd3aea0c7b2e1d8dd5708f1239e2cc6f8624c25480d291cae2f561344fe8b363b09645c0bda07d9bfdf0f02a6a4988d0275096b76bb38137407507aa5440d36337f63d66f72d30477ce1c2539463aeaa2996c3d6ac5fad075ffff457373bc495e2448508fdd7a6ca7ce89b9375386b4af"}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x977}}, @mark={{0x14, 0x1, 0x24, 0x698}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xd8}}], 0x2, 0x20004800)
sendmsg$nl_route_sched_retired(r10, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)=@newtclass={0x88, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x3, 0xb}, {0xa, 0xfff1}}, [@c_cbq={{0x8}, {0x5c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3e, 0x0, 0x8, 0x1, 0x10000, 0x3, 0x6, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0xffff}, 0x6, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0xfff3}, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0xfff3}, 0xd, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x91, 0x1, 0xffff, 0xe, 0x6, 0x9}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24010800}, 0x440c4)

54.225817183s ago: executing program 1 (id=2563):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0dac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_GROUP={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

54.225300936s ago: executing program 3 (id=2564):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000700ca778409b72926c37b9b7e139838e376c34a21fcce52a459903bbd897092424afd24f738f50997a2be3cf479c29b2497675d4b14edc6571422f2433eab25cf0b020463c846982ba17f5f8f93ef9eee1e"], 0x14}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
epoll_create1(0x80000)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x10, 0x5], 0x0, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x11, "b6a7"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x1)

54.106454649s ago: executing program 2 (id=2565):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0])
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb441681815fa4a6215313f1d885804b79e7b9f985", 0x22}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0", 0x4e}], 0x4, 0x0, 0x0, 0x40880}], 0x1, 0x4814)
recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)}, 0xffffff0b}], 0x2, 0x2001, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, 0x0, 0x40890)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='bond_slave_1\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005003800000100627269646765000028000280050019000200000005001700000000000c001e0003000000000000000500160001200000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

53.315649288s ago: executing program 1 (id=2566):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r0 = socket$kcm(0x23, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

51.903485743s ago: executing program 2 (id=2567):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20)
socket$kcm(0xa, 0x3, 0x87)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000000)="e7bfc866d2", 0x5}, {&(0x7f0000000300)="98c83b399fba00559af3f9a3cd1d6842bd8af96d4713d85c1fc4c22f", 0x1c}], 0x3) (async)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="89e73d5521fe62a3b47380c988ca", 0xe}, {&(0x7f0000000000)="e7bfc866d2", 0x5}, {&(0x7f0000000300)="98c83b399fba00559af3f9a3cd1d6842bd8af96d4713d85c1fc4c22f", 0x1c}], 0x3)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000010000000000000000000000811278000000000095000007000000005c68e90ddbd0bf6ba6fe532e3fac4096b438982ebfc6c399e52d86d328296e9c70450d7978724109613f163aa7dd306a7eab0f8ccca55dd5b2760704b0ee31a1d365f78f2f498edb522df431950bef5604537e1075d43740d190fc4c91010636b50373489c0c403412c8d2a53f414f70b3bf7687f61a543a6407573194104a434c45b81d849244"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000010000000000000000000000811278000000000095000007000000005c68e90ddbd0bf6ba6fe532e3fac4096b438982ebfc6c399e52d86d328296e9c70450d7978724109613f163aa7dd306a7eab0f8ccca55dd5b2760704b0ee31a1d365f78f2f498edb522df431950bef5604537e1075d43740d190fc4c91010636b50373489c0c403412c8d2a53f414f70b3bf7687f61a543a6407573194104a434c45b81d849244"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

47.518326146s ago: executing program 2 (id=2568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x43, {@remote}}}], 0x28}, 0x40c0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xffffffffffffff67, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc4}}, 0x0)

37.813294811s ago: executing program 33 (id=2564):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000700ca778409b72926c37b9b7e139838e376c34a21fcce52a459903bbd897092424afd24f738f50997a2be3cf479c29b2497675d4b14edc6571422f2433eab25cf0b020463c846982ba17f5f8f93ef9eee1e"], 0x14}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
epoll_create1(0x80000)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x10, 0x5], 0x0, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x11, "b6a7"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x1)

32.74976321s ago: executing program 1 (id=2570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x73, @private=0xa010100, 0x4e23, 0x0, 'rr\x00', 0x1, 0x8, 0x8}, 0x2c) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x16, @remote, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x6f3, 0x34}, 0x2c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f00000000c0)=0x4) (async)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='initcall_start\x00', r5, 0x0, 0xe2b0}, 0x18) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) (async)
listen(r0, 0x7) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={<r6=>0x0, 0x4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={r6, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000340)=0x10)
recvfrom$l2tp(r5, &(0x7f0000000380)=""/90, 0x5a, 0x101, 0x0, 0x0) (async)
getpid()
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/44, 0x2c}], 0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x4c, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x11, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf4e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f00000006c0)='GPL\x00', 0x8001, 0x47, &(0x7f0000000700)=""/71, 0x41100, 0x2, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000ac0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xb, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r5, r4, r5, r4], &(0x7f0000000b80)=[{0x0, 0x4, 0x8, 0xb}, {0x3, 0x5, 0x4, 0xa}, {0x5, 0x1, 0x6, 0xa}, {0x0, 0x4, 0xe, 0x2}], 0x10, 0x4}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@generic={&(0x7f0000000c80)='./file0\x00', 0x0, 0x10}, 0x18) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r8, 0x0, 0x1000, 0xf3, &(0x7f0000000d00)="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", &(0x7f0000001d00)=""/243, 0x10, 0x0, 0x3b, 0x0, &(0x7f0000001e00)="24126d02ce3bb69e55e7833d0f148d43aca57a6964210b056e24c9dac56d871e4b6e569c6e6275ba767b90f79f9efeba1b6c5865120f61ff25bab3", &(0x7f0000001e40), 0x2, 0x0, 0xa917}, 0x50) (async)
connect$phonet_pipe(r4, &(0x7f0000001f00)={0x23, 0x10, 0x40, 0xf8}, 0x10) (async)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r9, 0x8010661b, &(0x7f0000001f40))
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000001f80)={@private}, 0xfffffffffffffffe)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001fc0)={'pim6reg0\x00', <r11=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x90e7, '\x00', r11, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000002380)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002100)={0x238, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x12}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ea8fbbc0ff19a7176df3a6ee48cd5106d5c9b4190ea7fe"}}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "ac15b013686cfa7dff4c24329ca94428f43b2a466da135eb9310"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x47}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x120, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ec8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb561}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)

31.170470597s ago: executing program 34 (id=2568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x43, {@remote}}}], 0x28}, 0x40c0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xffffffffffffff67, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc4}}, 0x0)

22.071051834s ago: executing program 1 (id=2572):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

15.432290024s ago: executing program 1 (id=2573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(r1)

0s ago: executing program 35 (id=2573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
close(r1)

kernel console output (not intermixed with test programs):

: Enslaving as an active interface with an up link
[  187.801784][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'.
[  187.805139][T11097] Unsupported xt match
[  187.805974][T11097] unable to load match
[  187.865012][T11100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1372'.
[  187.980586][T10649] bond0: (slave dummy0): interface is now down
[  187.993118][T10649] bond0: now running without any active interface!
[  188.057571][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  188.260004][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'.
[  188.289278][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'.
[  188.365418][T11128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.425448][T11130] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  188.445043][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'.
[  188.521775][T11136] wg1 speed is unknown, defaulting to 1000
[  188.537360][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'.
[  188.645145][T11148] validate_nla: 10 callbacks suppressed
[  188.645160][T11148] netlink: 'syz.2.1386': attribute type 1 has an invalid length.
[  188.825015][T11156] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.868449][T11158] geneve0: entered promiscuous mode
[  188.874096][T11158] geneve0: entered allmulticast mode
[  188.876894][T10649] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.884576][T10649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.888561][T10649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.894615][T10649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.945130][T11164] netlink: 'syz.2.1392': attribute type 4 has an invalid length.
[  189.278479][T11206] netlink: 'syz.0.1404': attribute type 5 has an invalid length.
[  189.334796][T11214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.458953][T11220] syzkaller1: entered promiscuous mode
[  189.462046][T11220] syzkaller1: entered allmulticast mode
[  189.482504][T11220] syzkaller1: left promiscuous mode
[  189.485837][T11220] syzkaller1: left allmulticast mode
[  189.575062][T11228] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.649485][T11237] netlink: 'syz.2.1415': attribute type 10 has an invalid length.
[  189.802950][T11253] netlink: 'syz.1.1419': attribute type 1 has an invalid length.
[  189.849838][T11260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.873975][T11256] macsec2: entered promiscuous mode
[  189.876074][T11256] macsec2: entered allmulticast mode
[  189.897926][T11260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.898558][T11264] sctp: [Deprecated]: syz.1.1422 (pid 11264) Use of int in max_burst socket option.
[  189.898558][T11264] Use struct sctp_assoc_value instead
[  189.938171][T11264] netlink: 'syz.1.1422': attribute type 10 has an invalid length.
[  189.950978][T11260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.048452][T11260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.067289][T11266] xt_ct_set_helper: 55 callbacks suppressed
[  190.067305][T11266] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.158803][ T5901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.174478][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.179175][T11277] netlink: 'syz.1.1427': attribute type 9 has an invalid length.
[  190.195191][ T5850] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.198946][T11279] netlink: 'syz.1.1427': attribute type 9 has an invalid length.
[  190.205815][ T5850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.221277][T11278] wg1 speed is unknown, defaulting to 1000
[  190.275186][T11282] bond3: option mode: unable to set because the bond device has slaves
[  190.337508][T11286] bond23: option mode: unable to set because the bond device has slaves
[  191.287971][T11299] bond26: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  191.293805][T11299] bond26 (unregistering): Released all slaves
[  191.620674][T11325] bond0: Device is already in use.
[  191.695079][T11334] wg1 speed is unknown, defaulting to 1000
[  191.760747][T11343] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  191.815155][T11345] syzkaller0: entered allmulticast mode
[  191.824620][T11345] syzkaller0 (unregistering): left allmulticast mode
[  191.857377][T11348] Unknown options in mask b7f2
[  192.036008][T11354] netlink: 'syz.2.1450': attribute type 13 has an invalid length.
[  192.189285][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  192.388808][T11357] gretap0: left promiscuous mode
[  192.402006][T11357] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  192.407155][ T5869] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.409879][ T5869] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.418220][ T5869] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.422757][ T5869] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.425494][T11371] syzkaller0: left promiscuous mode
[  192.427372][T11371] syzkaller0: left allmulticast mode
[  192.532850][T11381] netlink: 'syz.2.1457': attribute type 21 has an invalid length.
[  192.535297][T11381] __nla_validate_parse: 24 callbacks suppressed
[  192.535306][T11381] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1457'.
[  192.540430][T11381] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1457'.
[  192.543872][T11381] sctp: [Deprecated]: syz.2.1457 (pid 11381) Use of int in max_burst socket option deprecated.
[  192.543872][T11381] Use struct sctp_assoc_value instead
[  192.629099][T11385] xt_bpf: check failed: parse error
[  192.846301][T11421] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1467'.
[  193.033356][T11441] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1473'.
[  193.126062][T11451] bond0: (slave dummy0): Releasing backup interface
[  193.131556][T11451] team0: Port device dummy0 added
[  193.146460][T11451] team0: Port device dummy0 removed
[  193.154543][T11451] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  193.158354][T11447] xfrm0: entered promiscuous mode
[  193.160947][T11447] xfrm0: entered allmulticast mode
[  193.399974][T11462] bond26: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  193.407437][T11462] bond26 (unregistering): Released all slaves
[  193.430281][ T8215] bond0: (slave dummy0): interface is now down
[  193.435037][ T8215] bond0: now running without any active interface!
[  193.608671][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'.
[  193.758602][T11477] validate_nla: 4 callbacks suppressed
[  193.758616][T11477] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  193.773524][T11472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.792712][T11477] 8021q: adding VLAN 0 to HW filter on device bond29
[  193.796751][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'.
[  193.804104][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'.
[  193.952609][T11477] bond29 (unregistering): Released all slaves
[  193.955147][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'.
[  194.039722][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[  194.042830][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'.
[  194.115653][T11501] No such timeout policy "syz0"
[  194.156133][T11505] wg1 speed is unknown, defaulting to 1000
[  194.208631][T11505] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.525843][T11518] netlink: 'syz.2.1491': attribute type 2 has an invalid length.
[  194.587937][T11520] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.803014][T11529] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  195.236075][T11537] 8021q: adding VLAN 0 to HW filter on device bond26
[  195.315100][T11540] netlink: 'syz.2.1500': attribute type 1 has an invalid length.
[  195.339662][T11540] 8021q: adding VLAN 0 to HW filter on device bond27
[  195.369712][T11540] bond27: (slave geneve3): making interface the new active one
[  195.374247][T11540] bond27: (slave geneve3): Enslaving as an active interface with an up link
[  195.377936][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  195.384849][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  195.389922][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  195.395179][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  195.668949][T11563] wg1 speed is unknown, defaulting to 1000
[  195.695619][T11558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.699541][T11558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.914939][T11577] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[  195.954848][T11577] bond29: entered promiscuous mode
[  195.956692][T11577] 8021q: adding VLAN 0 to HW filter on device bond29
[  195.967696][T11577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.970116][T11577] IPv6: NLM_F_CREATE should be set when creating new route
[  195.972661][T11577] IPv6: NLM_F_CREATE should be set when creating new route
[  195.976159][T11577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.038000][T11588] netlink: 'syz.0.1513': attribute type 2 has an invalid length.
[  196.227385][T11598] netlink: 'syz.2.1515': attribute type 6 has an invalid length.
[  196.367076][T11608] netlink: 'syz.0.1517': attribute type 7 has an invalid length.
[  196.442200][T11610] 8021q: adding VLAN 0 to HW filter on device bond30
[  196.454823][T11613] dvmrp0: entered allmulticast mode
[  196.498240][T11619] bond0: left promiscuous mode
[  196.499950][T11619] bond0: left allmulticast mode
[  197.373268][T11634] wg1 speed is unknown, defaulting to 1000
[  197.497104][T11642] smc: net device hsr0 applied user defined pnetid SYZ2
[  197.505645][T11642] smc: net device hsr0 erased user defined pnetid SYZ2
[  197.512375][T11642] netlink: 'syz.2.1527': attribute type 11 has an invalid length.
[  197.578028][T11646] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  197.743584][T11658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.805035][T11659] xt_hashlimit: size too large, truncated to 1048576
[  197.818308][T11647] __nla_validate_parse: 17 callbacks suppressed
[  197.818321][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'.
[  197.828384][T11647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.046833][T11671] wg1 speed is unknown, defaulting to 1000
[  198.093594][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'.
[  198.474668][T11688] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1539'.
[  198.510942][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'.
[  198.589925][T11691] 8021q: adding VLAN 0 to HW filter on device bond28
[  198.609955][T11691] bond28: (slave geneve5): making interface the new active one
[  198.614906][T11691] bond28: (slave geneve5): Enslaving as an active interface with an up link
[  198.618593][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  198.622583][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  198.627376][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  198.632904][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  198.809250][T11701] validate_nla: 4 callbacks suppressed
[  198.809267][T11701] netlink: 'syz.1.1543': attribute type 2 has an invalid length.
[  198.815832][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  198.823006][T11701] netlink: 'syz.1.1543': attribute type 1 has an invalid length.
[  198.859366][T11701] 8021q: adding VLAN 0 to HW filter on device bond29
[  198.882292][T11705] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1544'.
[  198.883419][T11704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1544'.
[  198.888080][T11701] bond29: (slave ip6gretap3): making interface the new active one
[  198.894278][T11701] bond29: (slave ip6gretap3): Enslaving as an active interface with an up link
[  198.925754][T11701] veth11: entered promiscuous mode
[  198.934666][T11701] bond29: (slave veth11): Enslaving as an active interface with a down link
[  198.945775][T11701] erspan0: entered allmulticast mode
[  198.979148][T11701] bond29: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  199.089968][T11716] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1548'.
[  199.146273][T11713] wg1 speed is unknown, defaulting to 1000
[  199.199187][T11725] xt_TCPMSS: Only works on TCP SYN packets
[  199.544434][T11738] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1552'.
[  199.589932][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  200.242389][T11789] x_tables: duplicate underflow at hook 1
[  200.337417][T11795] netlink: 'syz.0.1567': attribute type 30 has an invalid length.
[  200.342588][T11793] bond0: (slave dummy0): Releasing backup interface
[  200.348308][T11793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.371885][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.375246][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.378553][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.414658][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.438425][T11797] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  200.442809][T11797] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  200.548770][T11805] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  201.424433][T11836] pim6reg: entered allmulticast mode
[  201.426647][T11837] pim6reg: left allmulticast mode
[  201.472134][T11835] netlink: 'syz.1.1578': attribute type 6 has an invalid length.
[  201.478546][T11835] netlink: 'syz.1.1578': attribute type 6 has an invalid length.
[  201.605157][T11845] tipc: Resetting bearer <eth:ip6gre0>
[  201.716794][T11845] tipc: Resetting bearer <eth:syzkaller0>
[  201.736581][T11845] gretap4: left promiscuous mode
[  201.745174][T11845] vlan4: left promiscuous mode
[  201.747134][T11845] geneve1: left promiscuous mode
[  201.749253][T11845] vlan4: left allmulticast mode
[  201.751805][T11845] geneve1: left allmulticast mode
[  201.782391][T11845] veth13: left promiscuous mode
[  201.834391][T11845] vxcan3: left allmulticast mode
[  201.836246][T11845] bridge8: left allmulticast mode
[  201.840645][T11845] geneve0: left promiscuous mode
[  201.842769][T11845] geneve0: left allmulticast mode
[  201.861510][T11845] bond29: left promiscuous mode
[  201.889730][    T9] syz2: Port: 1 Link DOWN
[  201.892114][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.894578][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.897700][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.912714][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.919914][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.930515][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.933954][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.937144][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.021590][T11856] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  202.051245][T11856] 8021q: adding VLAN 0 to HW filter on device bond28
[  202.056066][T11851] wg1 speed is unknown, defaulting to 1000
[  202.096876][T11856] veth1: entered promiscuous mode
[  202.105543][T11856] bond28: (slave veth1): Enslaving as an active interface with a down link
[  202.115714][T11856] erspan0: entered allmulticast mode
[  202.128617][T11862] sctp: [Deprecated]: syz.0.1586 (pid 11862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.128617][T11862] Use struct sctp_sack_info instead
[  202.132066][T11856] bond28: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  202.137809][T11862] sctp: [Deprecated]: syz.0.1586 (pid 11862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.137809][T11862] Use struct sctp_sack_info instead
[  202.293285][   T34] audit: type=1804 audit(1768958225.613:3): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1588" name="/newroot/540/cgroup.controllers" dev="tmpfs" ino=2768 res=1 errno=0
[  202.301899][T11869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.317863][   T34] audit: type=1800 audit(1768958225.613:4): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1588" name="cgroup.controllers" dev="tmpfs" ino=2768 res=0 errno=0
[  202.442631][T11879] wg1 speed is unknown, defaulting to 1000
[  202.481364][T11882] netem: change failed
[  202.515920][T11884] xt_CT: You must specify a L4 protocol and not use inversions on it
[  202.551788][T11882] xt_CT: No such helper "netbios-ns"
[  202.646476][T11892] IPVS: length: 132 != 8
[  202.765800][T11898] netlink: 'syz.2.1594': attribute type 30 has an invalid length.
[  202.841689][T11899] wg1 speed is unknown, defaulting to 1000
[  203.151723][T11913] erspan0: left allmulticast mode
[  203.213350][T11925] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  203.217448][T11924] __nla_validate_parse: 13 callbacks suppressed
[  203.217460][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'.
[  203.282082][T11913] vlan0: left allmulticast mode
[  203.288340][T11913] geneve1: left allmulticast mode
[  203.290935][T11913] bond8: left promiscuous mode
[  203.293010][T11913] bond8: left allmulticast mode
[  203.295962][T11913] geneve2: left promiscuous mode
[  203.298208][T11913] geneve2: left allmulticast mode
[  203.300778][T11913] geneve3: left promiscuous mode
[  203.303125][T11913] bond17: left promiscuous mode
[  203.328337][T11913] veth7: left promiscuous mode
[  203.335471][T11913] veth9: left promiscuous mode
[  203.337812][T11913] bond24: left promiscuous mode
[  203.347681][T11913] bond26: left promiscuous mode
[  203.358840][T11913] team1: left promiscuous mode
[  203.360938][T11913] team1: left allmulticast mode
[  203.367769][T11913] team2: left promiscuous mode
[  203.369312][T11913] team2: left allmulticast mode
[  203.399891][T11913] veth11: left promiscuous mode
[  203.411312][T11921] veth0: entered promiscuous mode
[  203.420601][T11921] veth0: left promiscuous mode
[  203.438839][T11925] 8021q: adding VLAN 0 to HW filter on device bond31
[  203.468961][T11928] veth15: entered promiscuous mode
[  203.477166][T11928] bond31: (slave veth15): Enslaving as an active interface with a down link
[  203.486910][T11929] erspan0: entered allmulticast mode
[  203.489593][T11929] bond25: (slave erspan0): Releasing active interface
[  203.504757][T11929] bond31: (slave erspan0): making interface the new active one
[  203.509253][T11929] erspan0: entered promiscuous mode
[  203.512858][T11929] bond31: (slave erspan0): Enslaving as an active interface with an up link
[  203.516542][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  203.522854][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  203.540788][T11931] bond31: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  203.574829][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  203.578672][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  203.592759][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'.
[  203.605250][T11942] netlink: 'syz.2.1603': attribute type 4 has an invalid length.
[  203.632877][T11940] 8021q: adding VLAN 0 to HW filter on device bond30
[  203.781275][T11940] bond30 (unregistering): Released all slaves
[  203.795663][T11942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  203.803519][T11942] netlink: 'syz.2.1603': attribute type 1 has an invalid length.
[  203.814942][T11946] bond0: (slave wlan1): Releasing backup interface
[  203.817915][T11946] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  203.942049][T11964] validate_nla: 1 callbacks suppressed
[  203.942060][T11964] netlink: 'syz.2.1609': attribute type 1 has an invalid length.
[  203.954168][T11962] wg1 speed is unknown, defaulting to 1000
[  203.995807][T11969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1609'.
[  204.089420][T11977] siw: device registration error -23
[  204.092822][T11978] siw: device registration error -23
[  204.096580][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  204.146346][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  204.259962][T11987] wg1 speed is unknown, defaulting to 1000
[  204.369301][T11993] 9: renamed from lo
[  205.027154][T12012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1621'.
[  205.032506][T12012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1621'.
[  205.035665][T12012] vlan0: entered promiscuous mode
[  205.100487][T12017] syzkaller0: entered promiscuous mode
[  205.103624][T12017] syzkaller0: entered allmulticast mode
[  205.169109][T12024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1626'.
[  205.173403][T12024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1626'.
[  205.177316][T12016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.195111][T12026] bridge10: entered promiscuous mode
[  205.223145][T12028] veth0: entered promiscuous mode
[  205.268452][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'.
[  205.273474][T12027] veth0: left promiscuous mode
[  205.324598][T12036] x_tables: duplicate underflow at hook 3
[  205.424944][T12048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  205.432765][T12048] batman_adv: batadv0: Adding interface: gretap6
[  205.435088][T12048] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.444668][T12048] batman_adv: batadv0: Interface activated: gretap6
[  205.481091][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'.
[  205.726820][T12075] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  205.736017][T12075] erspan0: left promiscuous mode
[  205.737944][T12075] erspan0: left allmulticast mode
[  205.747742][T12075] 8021q: adding VLAN 0 to HW filter on device .`
[  205.751056][T12075] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  205.801034][ T5903] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  205.815863][T12077] gretap2: entered promiscuous mode
[  205.945559][T12082] netlink: 'syz.1.1644': attribute type 4 has an invalid length.
[  205.992692][T12087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.065185][ T5903] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  206.260580][T12091] wg1: entered promiscuous mode
[  206.262699][T12091] wg1: entered allmulticast mode
[  206.422115][T12093] netlink: 'syz.0.1647': attribute type 10 has an invalid length.
[  206.426333][T12093] bond0: (slave dummy0): Releasing backup interface
[  206.436331][T12093] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  206.439715][T12093] team0: Failed to send options change via netlink (err -105)
[  206.443130][T12093] team0: Port device dummy0 added
[  206.446954][T12093] netlink: 'syz.0.1647': attribute type 10 has an invalid length.
[  206.458095][T12093] team0: Failed to send options change via netlink (err -105)
[  206.461747][T12093] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  206.466773][T12093] team0: Port device dummy0 removed
[  206.473589][T12093] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  206.609194][T12108] bond0: invalid ARP target 0.0.0.0 specified for addition
[  206.612492][T12108] bond0: option arp_ip_target: invalid value (0)
[  206.615500][   T12] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  206.678804][T12115] wg1 speed is unknown, defaulting to 1000
[  206.782589][T12121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  207.168117][T12137] erspan0: left allmulticast mode
[  207.178890][T12137] tipc: Resetting bearer <eth:ip6gre0>
[  207.183184][T12137] tipc: Resetting bearer <eth:ip6gre0>
[  207.194272][T12137] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.198354][T12137] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  207.561997][T12142] gretap0: entered promiscuous mode
[  207.571105][T12142] gretap0: left promiscuous mode
[  207.577871][T12142] 8021q: adding VLAN 0 to HW filter on device team0
[  207.584501][T12142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.656037][ T5850] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  207.659961][ T5850] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  207.790935][T12151] netlink: 'syz.2.1661': attribute type 12 has an invalid length.
[  207.888684][T12152] sctp: [Deprecated]: syz.2.1661 (pid 12152) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.888684][T12152] Use struct sctp_sack_info instead
[  208.225804][T12165] : renamed from vlan1
[  208.270741][T12167] netlink: 'syz.1.1666': attribute type 1 has an invalid length.
[  208.273941][T12167] __nla_validate_parse: 16 callbacks suppressed
[  208.273957][T12167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1666'.
[  208.381782][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1667'.
[  208.387417][T12171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'.
[  208.541492][T12181] wg1 speed is unknown, defaulting to 1000
[  208.611852][ T5903] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  208.655279][T12186] wg1 speed is unknown, defaulting to 1000
[  208.676362][T12191] xt_time: unknown flags 0xf4
[  208.679457][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1670'.
[  208.684333][T12191] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1670'.
[  209.061994][T12227] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1679'.
[  209.065605][T12227] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1679'.
[  209.104194][T12232] netlink: 'syz.2.1680': attribute type 9 has an invalid length.
[  209.106914][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  209.158195][T12234] netlink: 'syz.2.1681': attribute type 3 has an invalid length.
[  209.161090][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'.
[  209.189413][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.198895][T12234] team0: Failed to send options change via netlink (err -105)
[  209.204740][T12234] team0: Port device dummy0 added
[  209.206651][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.212989][T12234] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  209.219689][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.224439][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.227178][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.230258][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.232816][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.235383][T12234] netlink: 'syz.2.1681': attribute type 10 has an invalid length.
[  209.333066][T12238] wg1 speed is unknown, defaulting to 1000
[  209.479608][T12246] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1683'.
[  209.479681][T12245] wg1 speed is unknown, defaulting to 1000
[  209.727856][T12253] team0: Port device dummy0 removed
[  209.731770][T12253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  209.753194][T12253] team0: Mode changed to "loadbalance"
[  210.000635][T12275] gretap0: entered promiscuous mode
[  210.006479][T12275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.014478][T12276] gretap0: left promiscuous mode
[  210.035307][T12276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.065120][T12275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.203976][T12283] wg1 speed is unknown, defaulting to 1000
[  210.243813][T12291] can: request_module (can-proto-0) failed.
[  210.642640][T12317] wg1: left promiscuous mode
[  210.644763][T12317] wg1: left allmulticast mode
[  210.653998][T12317] syzkaller0: left promiscuous mode
[  210.656205][T12317] syzkaller0: left allmulticast mode
[  210.717695][T12321] wg1 speed is unknown, defaulting to 1000
[  211.260459][   T56] Bluetooth: hci2: link tx timeout
[  211.262168][   T56] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.264670][T12358] pim6reg: entered allmulticast mode
[  211.268917][T12358] pim6reg: left allmulticast mode
[  211.342011][T12347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.345894][T12348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.429255][T12371] wg1: entered promiscuous mode
[  211.431592][T12371] wg1: entered allmulticast mode
[  211.433946][ T5903] wg1 speed is unknown, defaulting to 1000
[  211.435934][ T5903] syz0: Port: 1 Link ACTIVE
[  211.593112][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.596414][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.599120][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.603461][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.632571][T12387] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  211.973763][T12418] bond30: option arp_all_targets: invalid value (129)
[  211.979318][T12418] bond30 (unregistering): Released all slaves
[  212.109608][T12430] netlink: zone id is out of range
[  212.112384][T12430] netlink: zone id is out of range
[  212.114606][T12430] netlink: zone id is out of range
[  212.119277][T12430] netlink: zone id is out of range
[  212.121868][T12430] netlink: zone id is out of range
[  212.123967][T12430] netlink: zone id is out of range
[  212.487344][T12471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.514984][T12472] 8021q: adding VLAN 0 to HW filter on device bond31
[  212.523884][T12472] bond30: (slave bond31): making interface the new active one
[  212.527418][T12472] bond30: (slave bond31): Enslaving as an active interface with an up link
[  212.531714][T12471] syzkaller0: entered promiscuous mode
[  212.533873][T12471] syzkaller0: entered allmulticast mode
[  212.540866][T12471] tipc: Resetting bearer <eth:syzkaller0>
[  212.543355][ T5886] syz2: Port: 1 Link ACTIVE
[  212.553921][T12472] vlan1: entered promiscuous mode
[  212.556294][T12472] bond30: entered promiscuous mode
[  212.558836][T12472] bond31: entered promiscuous mode
[  212.561808][T12472] bond30: (slave vlan1): Opening slave failed
[  212.693959][T12489] can: request_module (can-proto-0) failed.
[  212.787501][T12506] 8021q: adding VLAN 0 to HW filter on device bond30
[  212.915585][T12517] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  212.918796][T12516] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  213.130426][T12545] wg1: entered promiscuous mode
[  213.132117][T12545] wg1: entered allmulticast mode
[  213.176651][T12547] wg1 speed is unknown, defaulting to 1000
[  213.222386][T12552] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  213.321044][T12561] __nla_validate_parse: 36 callbacks suppressed
[  213.321054][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'.
[  213.335899][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  213.384000][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'.
[  213.632014][T12573] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  213.647341][T12573] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  213.662670][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.665424][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.667930][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.670943][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.673381][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.675563][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.677717][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.680256][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.682454][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.684677][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.686848][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.689003][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.694095][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.696303][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.698456][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.700749][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.702906][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.705052][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.707210][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.709368][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.711848][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.715552][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.717753][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.719942][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.722390][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.724526][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.726663][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.728815][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.731291][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.736533][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.738791][T12573] IPVS: set_ctl: invalid protocol: 31091 110.108.50.0:0
[  213.796309][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'.
[  213.951510][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'.
[  213.973650][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'.
[  214.009257][T12606] bond5: (slave 9): Releasing backup interface
[  214.012671][T12606] bond5: (slave 9): last VLAN challenged slave left bond - VLAN blocking is removed
[  214.019959][T12606] bond31: (slave erspan0): Releasing active interface
[  214.023848][T12606] erspan0: left promiscuous mode
[  214.032026][T12606] tipc: Resetting bearer <eth:ip6gre0>
[  214.036027][T12606] bond0: (slave dummy0): Releasing backup interface
[  214.050862][T12606] bond0: (slave bridge_slave_1): Releasing backup interface
[  214.057883][T12606] bond2: (slave bond3): Releasing backup interface
[  214.061386][T12606] bond2: (slave bond3): the permanent HWaddr of slave - f6:fc:1a:12:37:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  214.076945][T12606] bond2: (slave gretap1): making interface the new active one
[  214.092661][T12606] bond2: (slave gretap1): Releasing backup interface
[  214.103447][T12606] tipc: Resetting bearer <eth:syzkaller0>
[  214.112208][T12606] bond6: (slave gretap3): Releasing active interface
[  214.124687][T12606] team0: Port device bridge4 removed
[  214.130466][T12606] bond12: (slave erspan2): Releasing active interface
[  214.141877][T12606] bond13: (slave bond14): Releasing backup interface
[  214.145942][T12606] bond16: (slave wireguard2): Releasing backup interface
[  214.156251][T12606] bond18: (slave batadv0): Releasing active interface
[  214.165148][T12606] bond19: (slave veth5): Releasing backup interface
[  214.173523][T12606] vlan3: left allmulticast mode
[  214.176505][T12606] bridge_slave_0: left allmulticast mode
[  214.184236][T12606] vlan3: left promiscuous mode
[  214.187015][T12606] bridge_slave_0: left promiscuous mode
[  214.191492][T12606] bridge0: port 2(vlan3) entered disabled state
[  214.204949][T12606] bond21: (slave veth11): Releasing active interface
[  214.214958][T12606] bond24: (slave batadv1): Releasing active interface
[  214.222134][T12606] bond25: (slave veth13): Releasing active interface
[  214.229489][T12606] bond31: (slave veth15): Releasing active interface
[  214.243638][T12606] batman_adv: batadv0: Interface deactivated: gretap6
[  214.245867][T12606] batman_adv: batadv0: Removing interface: gretap6
[  214.287270][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'.
[  214.361367][T12639] xt_policy: neither incoming nor outgoing policy selected
[  214.466148][T12647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1781'.
[  214.469563][T12647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1781'.
[  214.533141][T12653] validate_nla: 38 callbacks suppressed
[  214.533157][T12653] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  214.538686][T12653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1783'.
[  214.602613][T12658] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1785'.
[  214.786105][T12662] tap0: tun_chr_ioctl cmd 1074025677
[  214.788577][T12662] tap0: linktype set to 1
[  214.793205][T12662] tap0: tun_chr_ioctl cmd 1074025677
[  214.795690][T12662] tap0: linktype set to 280
[  215.959984][T12685] netlink: 'syz.0.1794': attribute type 1 has an invalid length.
[  215.989033][T12685] 8021q: adding VLAN 0 to HW filter on device bond33
[  216.005580][T12685] 8021q: adding VLAN 0 to HW filter on device bond33
[  216.008510][T12685] bond33: (slave vxcan5): The slave device specified does not support setting the MAC address
[  216.012492][T12685] bond33: (slave vxcan5): Error -95 calling set_mac_address
[  216.047218][T12687] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  216.052293][T12687] bond33: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  216.084817][T12685] bridge12: entered allmulticast mode
[  216.240879][T12692] netlink: 'syz.0.1796': attribute type 1 has an invalid length.
[  216.268028][T12692] 8021q: adding VLAN 0 to HW filter on device bond34
[  216.277994][T12692] bond34: entered allmulticast mode
[  216.298419][T12692] veth17: entered promiscuous mode
[  216.303783][T12692] bond34: (slave veth17): Enslaving as an active interface with a down link
[  216.470556][T12706] net_ratelimit: 8 callbacks suppressed
[  216.470572][T12706] openvswitch: netlink: Key type 30 is not supported
[  216.476618][T12706] pim6reg1: entered allmulticast mode
[  216.576590][T12719] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  216.640959][T12721] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  216.644499][T12721] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  216.648751][T12721] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  216.678674][T12721] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  216.781379][T12728] wg1 speed is unknown, defaulting to 1000
[  216.833077][T12736] nft_compat: unsupported protocol 0
[  217.259441][T12758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.323841][T12771] netlink: 'syz.0.1810': attribute type 16 has an invalid length.
[  217.502135][T12782] x_tables: ip_tables: sctp match: only valid for protocol 132
[  217.575389][T12785] 8021q: adding VLAN 0 to HW filter on device bond31
[  217.588412][T12788] pim6reg: entered allmulticast mode
[  217.591859][T12788] pim6reg: left allmulticast mode
[  217.827251][T12802] netlink: 'syz.2.1823': attribute type 1 has an invalid length.
[  217.896943][T12805] netlink: 'syz.2.1824': attribute type 1 has an invalid length.
[  218.107890][T12811] macsec0: entered allmulticast mode
[  218.179287][T12813] tipc: Resetting bearer <eth:syzkaller0>
[  218.192732][T12813] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  218.343055][T12815] netlink: 'syz.2.1828': attribute type 1 has an invalid length.
[  218.372420][T12815] veth13: entered promiscuous mode
[  218.379862][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.384942][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.561959][T12820] wg1 speed is unknown, defaulting to 1000
[  218.714559][T12834] netlink: 'syz.1.1834': attribute type 4 has an invalid length.
[  218.871431][T12842] Cannot find set identified by id 0 to match
[  218.899377][T12845] __nla_validate_parse: 14 callbacks suppressed
[  218.899391][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'.
[  218.913720][T12845] [: entered promiscuous mode
[  219.139962][T12858] wg1: left promiscuous mode
[  219.142282][T12858] wg1: left allmulticast mode
[  219.365409][T12865] Bluetooth: MGMT ver 1.23
[  219.376609][T12865] ip6gretap5: entered allmulticast mode
[  219.444473][T12867] dvmrp0: entered allmulticast mode
[  219.582947][T12871] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1845'.
[  219.586826][T12871] netlink: 'syz.1.1845': attribute type 9 has an invalid length.
[  220.048820][T12897] syzkaller1: entered promiscuous mode
[  220.198319][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'.
[  220.201603][T12901] xt_policy: neither incoming nor outgoing policy selected
[  220.592978][T12906] netlink: 'syz.1.1854': attribute type 1 has an invalid length.
[  220.607380][T12906] 8021q: adding VLAN 0 to HW filter on device bond32
[  220.629008][T12906] 8021q: adding VLAN 0 to HW filter on device bond32
[  220.632056][T12906] bond32: (slave vxcan3): The slave device specified does not support setting the MAC address
[  220.635946][T12906] bond32: (slave vxcan3): Error -95 calling set_mac_address
[  220.676010][T12908] veth13: entered promiscuous mode
[  220.681592][T12908] bond32: (slave veth13): Enslaving as an active interface with a down link
[  220.688926][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.692624][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.928676][T12914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.171204][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  221.210870][T12931] wg1 speed is unknown, defaulting to 1000
[  221.249625][T12934] netlink: 'syz.2.1859': attribute type 21 has an invalid length.
[  221.252818][T12934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1859'.
[  221.255980][T12934] netlink: 'syz.2.1859': attribute type 1 has an invalid length.
[  222.023689][T12940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1861'.
[  222.027573][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'.
[  222.031293][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'.
[  222.035171][T12938] netlink: 'syz.1.1860': attribute type 6 has an invalid length.
[  222.039142][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'.
[  222.043363][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'.
[  222.047270][T12938] netlink: 'syz.1.1860': attribute type 6 has an invalid length.
[  222.047274][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1861'.
[  222.054453][ T5886] tipc: Node number set to 3608429185
[  222.459409][T12987] wg1 speed is unknown, defaulting to 1000
[  222.475952][T12992] bond23: option mode: unable to set because the bond device has slaves
[  222.501968][T12992] bond23: (slave ip6gretap6): Enslaving as a backup interface with an up link
[  222.560746][T12996] bond33: entered promiscuous mode
[  222.571065][T12997] vcan0: entered promiscuous mode
[  222.573670][T12997] bond33: (slave vcan0): The slave device specified does not support setting the MAC address
[  222.578509][T12997] bond33: (slave vcan0): Error -95 calling set_mac_address
[  222.873500][T13009] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.878028][T13009] syzkaller0: entered promiscuous mode
[  222.887236][T13009] syzkaller0: entered allmulticast mode
[  222.904693][T13009] tipc: Resetting bearer <eth:syzkaller0>
[  223.154961][T13018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.447485][T13022] bridge0: port 1(erspan0) entered blocking state
[  223.449649][T13022] bridge0: port 1(erspan0) entered disabled state
[  223.454163][T13022] erspan0: entered allmulticast mode
[  223.457087][T13022] erspan0: left allmulticast mode
[  224.389692][T13031] batadv_slave_1: entered promiscuous mode
[  224.478719][T13033] __nla_validate_parse: 4 callbacks suppressed
[  224.478730][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'.
[  224.484731][T13033] bond0: invalid ARP target 0.0.0.0 specified for addition
[  224.487535][T13033] bond0: option arp_ip_target: invalid value (0)
[  224.656318][T13030] batadv_slave_1: left promiscuous mode
[  224.661620][T13040] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  224.678837][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'.
[  224.697296][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  224.718427][T13042] wg1 speed is unknown, defaulting to 1000
[  224.737176][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'.
[  224.739968][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1882'.
[  224.918717][T13042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.926572][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'.
[  224.959847][T13061] netlink: 'syz.2.1885': attribute type 1 has an invalid length.
[  224.975649][T13061] 8021q: adding VLAN 0 to HW filter on device bond34
[  224.985691][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'.
[  224.988611][T13061] bond34: entered promiscuous mode
[  224.990597][T13061] bond34: entered allmulticast mode
[  225.028154][T13061] bond34: (slave dummy0): making interface the new active one
[  225.031119][T13061] dummy0: entered promiscuous mode
[  225.033505][T13061] bond34: (slave dummy0): Enslaving as an active interface with an up link
[  225.126238][T13061] bond34 (unregistering): (slave dummy0): Releasing active interface
[  225.128822][T13061] dummy0: left promiscuous mode
[  225.134464][T13061] bond34 (unregistering): Released all slaves
[  225.243535][T13067] tipc: Resetting bearer <eth:ip6gre0>
[  225.247899][T13067] xfrm0: left promiscuous mode
[  225.252722][T13067] bond24: left promiscuous mode
[  225.256690][T13067] veth1: left promiscuous mode
[  225.260887][T13067] veth13: left promiscuous mode
[  225.318026][T13070] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1887'.
[  225.537006][T13080] wg1 speed is unknown, defaulting to 1000
[  225.617681][T13088] wg1 speed is unknown, defaulting to 1000
[  225.625123][T13081] wg1 speed is unknown, defaulting to 1000
[  225.700751][T13092] wg1 speed is unknown, defaulting to 1000
[  225.937851][T13102] tipc: Resetting bearer <eth:ip6gre0>
[  225.945760][T13102] netlink: 'syz.2.1893': attribute type 16 has an invalid length.
[  225.948558][T13102] netlink: 'syz.2.1893': attribute type 17 has an invalid length.
[  225.972735][T13102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.036707][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'.
[  226.138870][T13111] netlink: 'syz.2.1896': attribute type 10 has an invalid length.
[  226.145275][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1896'.
[  226.696533][T13122] bond33: option arp_interval: invalid value (18446744073709551615)
[  226.699772][T13122] bond33: option arp_interval: allowed values 0 - 2147483647
[  226.704482][T13122] bond33 (unregistering): Released all slaves
[  227.201199][T13147] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  227.229515][T13147] 8021q: adding VLAN 0 to HW filter on device bond34
[  227.256494][T13147] 8021q: adding VLAN 0 to HW filter on device bond34
[  227.259670][T13147] bond34: (slave vxcan5): The slave device specified does not support setting the MAC address
[  227.265881][T13147] bond34: (slave vxcan5): Error -95 calling set_mac_address
[  227.353903][T13155] netlink: 'syz.1.1910': attribute type 15 has an invalid length.
[  227.807658][T13168] wg1 speed is unknown, defaulting to 1000
[  228.904656][T13191] sctp: [Deprecated]: syz.2.1920 (pid 13191) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.904656][T13191] Use struct sctp_sack_info instead
[  229.475300][T13211] wg1 speed is unknown, defaulting to 1000
[  229.567830][T13217] __nla_validate_parse: 11 callbacks suppressed
[  229.567843][T13217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1928'.
[  229.656318][T13222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1930'.
[  229.660248][T13222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1930'.
[  229.663157][T13222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1930'.
[  229.907482][T13237] pim6reg: entered allmulticast mode
[  229.911265][T13237] pim6reg: left allmulticast mode
[  229.992370][T13238] tipc: Resetting bearer <eth:syzkaller0>
[  229.995095][T13238] syzkaller0: left promiscuous mode
[  229.996785][T13238] syzkaller0: left allmulticast mode
[  230.002945][T13238] ip6gretap5: left allmulticast mode
[  230.014638][T13238] veth13: left promiscuous mode
[  230.086375][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'.
[  230.345892][T13242] wg1 speed is unknown, defaulting to 1000
[  230.561150][T13252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.708574][T13255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1939'.
[  230.751286][T13257] x_tables: unsorted underflow at hook 4
[  230.892140][T13271] netlink: 'syz.2.1943': attribute type 10 has an invalid length.
[  230.900267][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'.
[  230.910227][T13271] macsec3: entered promiscuous mode
[  230.912485][T13271] hsr0: entered promiscuous mode
[  230.914710][T13271] macsec3: entered allmulticast mode
[  230.917100][T13271] hsr0: entered allmulticast mode
[  230.919226][T13271] hsr_slave_0: entered allmulticast mode
[  230.923518][T13271] hsr_slave_1: entered allmulticast mode
[  230.928175][T13271] hsr0: left allmulticast mode
[  230.930449][T13271] hsr_slave_0: left allmulticast mode
[  230.932750][T13271] hsr_slave_1: left allmulticast mode
[  230.934974][T13271] hsr0: left promiscuous mode
[  231.236523][T13287] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1947'.
[  231.301383][T13289] bond36: option all_slaves_active: invalid value (13)
[  231.305772][T13289] bond36 (unregistering): Released all slaves
[  231.345436][T13290] bond36: option all_slaves_active: invalid value (13)
[  231.349824][T13290] bond36 (unregistering): Released all slaves
[  231.706845][T13297] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  231.717335][T13302] netlink: 'syz.1.1951': attribute type 4 has an invalid length.
[  231.723884][T13302] netlink: 'syz.1.1951': attribute type 4 has an invalid length.
[  231.822058][T13310] openvswitch: netlink: IP tunnel TTL not specified.
[  232.155949][T13324] gtp0: entered promiscuous mode
[  232.157864][T13324] gtp0: entered allmulticast mode
[  233.035357][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  233.061481][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'.
[  233.169305][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  233.177043][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  233.182189][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  233.185727][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  233.191799][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  233.228852][T13352] vti0: entered promiscuous mode
[  233.238826][T13352] vti0: entered allmulticast mode
[  233.247749][T13349] wg1 speed is unknown, defaulting to 1000
[  233.332056][T13361] tipc: New replicast peer: 255.255.255.255
[  233.336602][T13361] tipc: Enabled bearer <udp:s>, priority 10
[  233.416625][T13369] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002
[  233.420983][T13369] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004
[  233.484149][T13349] chnl_net:caif_netlink_parms(): no params data found
[  233.566692][T13381] dummy0: entered promiscuous mode
[  233.572240][T13381] dummy0: left promiscuous mode
[  233.646269][T13349] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.649376][T13349] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.653035][T13385] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.653032][T13349] bridge_slave_0: entered allmulticast mode
[  233.660434][T13349] bridge_slave_0: entered promiscuous mode
[  233.665245][T13349] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.668248][T13349] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.672376][T13349] bridge_slave_1: entered allmulticast mode
[  233.676379][T13349] bridge_slave_1: entered promiscuous mode
[  233.706861][T13349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.713738][T13349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.741166][T13349] team0: Port device team_slave_0 added
[  233.746036][T13349] team0: Port device team_slave_1 added
[  233.773955][T13349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.776939][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.788310][T13349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.796370][T13349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.799353][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.809846][T13349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.850196][T13349] hsr_slave_0: entered promiscuous mode
[  233.853686][T13349] hsr_slave_1: entered promiscuous mode
[  234.036972][T13349] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  234.044733][T13349] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  234.050390][   T41] wlan1: Trigger new scan to find an IBSS to join
[  234.057275][T13349] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  234.065668][T13349] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  234.097404][T13349] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.100392][T13349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.103600][T13349] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.106484][T13349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.146241][T13349] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.156440][  T741] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.160203][  T741] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.173089][T13349] 8021q: adding VLAN 0 to HW filter on device team0
[  234.181577][  T741] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.184652][  T741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.193082][  T741] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.196014][  T741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.333864][T13402] netlink: 'syz.1.1977': attribute type 4 has an invalid length.
[  234.369718][T13349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.392724][T13349] veth0_vlan: entered promiscuous mode
[  234.397797][T13349] veth1_vlan: entered promiscuous mode
[  234.416977][T13349] veth0_macvtap: entered promiscuous mode
[  234.421024][T13349] veth1_macvtap: entered promiscuous mode
[  234.453635][T13349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.474703][T13349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.485658][ T5869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.502455][ T5869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.512399][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.515167][ T5869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.624781][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.627950][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.666475][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.673390][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.750668][T13415] sctp: [Deprecated]: syz.1.1981 (pid 13415) Use of int in maxseg socket option.
[  234.750668][T13415] Use struct sctp_assoc_value instead
[  234.829516][T13422] __nla_validate_parse: 7 callbacks suppressed
[  234.829537][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'.
[  234.840510][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1982'.
[  234.852865][T13422] geneve6: entered promiscuous mode
[  234.855088][T13422] geneve6: entered allmulticast mode
[  234.863518][ T8215] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.866860][ T8215] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.881164][ T8215] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.883777][ T8215] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.929638][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'.
[  234.946102][T13432] xfrm2: entered promiscuous mode
[  234.947796][T13432] xfrm2: entered allmulticast mode
[  234.949748][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'.
[  234.986812][T13434] lo speed is unknown, defaulting to 1000
[  234.989303][T13434] lo speed is unknown, defaulting to 1000
[  234.992968][T13434] lo speed is unknown, defaulting to 1000
[  235.027821][T13438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1986'.
[  235.028176][T13434] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  235.082748][T13434] lo speed is unknown, defaulting to 1000
[  235.086228][T13434] lo speed is unknown, defaulting to 1000
[  235.092384][T13434] lo speed is unknown, defaulting to 1000
[  235.095006][T13434] lo speed is unknown, defaulting to 1000
[  235.108089][T13442] siw: device registration error -23
[  235.237036][T13451] netlink: 'syz.1.1991': attribute type 13 has an invalid length.
[  235.250407][   T56] Bluetooth: hci3: command tx timeout
[  235.370707][T13454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.503134][T13468] netlink: 'syz.3.1993': attribute type 1 has an invalid length.
[  235.565129][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'.
[  235.569895][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'.
[  235.571198][T13468] bond1 (unregistering): Released all slaves
[  235.601896][T13465] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  235.609791][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'.
[  235.664691][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1993'.
[  235.685940][T13483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  235.889786][T13491] netlink: 'syz.2.2000': attribute type 1 has an invalid length.
[  235.919598][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'.
[  235.941524][T13490] delete_channel: no stack
[  236.009018][T13497] wg1 speed is unknown, defaulting to 1000
[  236.013230][T13497] lo speed is unknown, defaulting to 1000
[  236.235473][T13517] netlink: 'syz.2.2007': attribute type 1 has an invalid length.
[  236.240942][T13517] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  236.330266][T13524] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  236.352148][T13526] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  236.355422][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  236.362016][   T33] IPVS: starting estimator thread 0...
[  236.374062][T13526] bridge_slave_0: left allmulticast mode
[  236.376286][T13526] bridge_slave_0: left promiscuous mode
[  236.378546][T13526] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.385673][T13526] bridge_slave_1: left allmulticast mode
[  236.387938][T13526] bridge_slave_1: left promiscuous mode
[  236.390643][T13526] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.409791][T13526] bond0: (slave bond_slave_0): Releasing backup interface
[  236.431720][T13526] bond0: (slave bond_slave_1): Releasing backup interface
[  236.439989][T13526] team0: Port device team_slave_0 removed
[  236.445868][T13526] team0: Port device team_slave_1 removed
[  236.448271][T13526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.451200][T13527] IPVS: using max 84 ests per chain, 201600 per kthread
[  236.456365][T13526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.459821][T13526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.462534][T13526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.465961][T13526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  236.497749][T13532] xt_TCPMSS: Only works on TCP SYN packets
[  236.501305][T13532] netlink: 'syz.1.2012': attribute type 13 has an invalid length.
[  236.503661][T13530] netlink: 'syz.2.2011': attribute type 10 has an invalid length.
[  236.513274][T13530] wlan1: mtu less than device minimum
[  236.515342][T13530] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  237.074146][T13565] x_tables: duplicate underflow at hook 2
[  237.127708][T13568] netlink: 'syz.2.2023': attribute type 1 has an invalid length.
[  237.229928][T13568] 8021q: adding VLAN 0 to HW filter on device bond37
[  237.253600][T13575] wg1 speed is unknown, defaulting to 1000
[  237.259872][T13568] erspan0: entered allmulticast mode
[  237.274515][T13575] lo speed is unknown, defaulting to 1000
[  237.281380][T13578] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.287722][T13578] gtp0: entered promiscuous mode
[  237.292757][T13578] gtp0: entered allmulticast mode
[  237.340142][   T56] Bluetooth: hci3: command tx timeout
[  237.388342][T13587] netlink: 'syz.1.2028': attribute type 1 has an invalid length.
[  237.460559][T13587] 8021q: adding VLAN 0 to HW filter on device bond33
[  237.477606][T13591] xt_connbytes: Forcing CT accounting to be enabled
[  237.493033][T13587] netlink: 'syz.1.2028': attribute type 39 has an invalid length.
[  237.631009][T13593] bond33: (slave gretap2): making interface the new active one
[  237.637629][T13593] bond33: (slave gretap2): Enslaving as an active interface with an up link
[  237.780797][T13604] syzkaller0: entered promiscuous mode
[  237.783312][T13604] syzkaller0: entered allmulticast mode
[  237.787307][T13604] netlink: 'syz.1.2032': attribute type 16 has an invalid length.
[  237.790767][T13604] netlink: 'syz.1.2032': attribute type 17 has an invalid length.
[  237.828820][T13604] 8021q: adding VLAN 0 to HW filter on device team0
[  237.837090][T13604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.843988][ T5904] lo speed is unknown, defaulting to 1000
[  237.846326][ T5904] syz1: Port: 1 Link ACTIVE
[  238.130780][T13619] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  238.134057][T13619] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  238.283854][T13622] tap0: tun_chr_ioctl cmd 1074025692
[  238.498507][T13626] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  238.503024][T13626] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  238.757815][T13642] m1Ie5n: entered promiscuous mode
[  238.782377][T13646] netlink: set zone limit has 8 unknown bytes
[  238.786610][T13646] netlink: 'syz.2.2043': attribute type 33 has an invalid length.
[  238.789832][T13646] `: renamed from team0 (while UP)
[  238.979320][T13663] erspan0: left allmulticast mode
[  239.018529][T13663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.072107][T13665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.091832][ T1108] wlan1: Trigger new scan to find an IBSS to join
[  239.410915][   T56] Bluetooth: hci3: command tx timeout
[  239.449179][T13689] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  239.461542][T13689] tipc: Resetting bearer <eth:syzkaller0>
[  239.665241][T13707] syzkaller0: Caught tx_queue_len zero misconfig
[  239.675477][T13707] ip6gretap0: entered promiscuous mode
[  239.690853][T13707] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  239.835288][T13730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.839030][T13728] __nla_validate_parse: 27 callbacks suppressed
[  239.839049][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'.
[  239.845848][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2070'.
[  239.859874][T13728] geneve2: entered promiscuous mode
[  239.862752][T13728] geneve2: entered allmulticast mode
[  239.866201][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  239.870822][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  239.874308][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  239.877680][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  239.921582][T13735] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  239.924061][T13735] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  239.951717][T13736] bond34: option tlb_dynamic_lb: invalid value (5)
[  239.955344][T13736] bond34 (unregistering): Released all slaves
[  240.017592][T13743] xt_TPROXY: Can be used only with -p tcp or -p udp
[  240.044550][T13743] tipc: Failed to remove unknown binding: 66,0,0/0:1459845445/1459845446
[  240.051237][T13743] tipc: Failed to remove unknown binding: 66,0,0/0:1459845445/1459845446
[  240.065845][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'.
[  240.192388][T13759] wg1 speed is unknown, defaulting to 1000
[  240.196542][T13759] lo speed is unknown, defaulting to 1000
[  240.228307][T13760] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  240.228837][T13764] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  240.412577][T13772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  240.419602][T13772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2082'.
[  240.505547][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  240.509373][T13776] tap0: tun_chr_ioctl cmd 2148553947
[  240.513311][T13776] tap0: tun_chr_ioctl cmd 2147767521
[  240.559607][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'.
[  240.715348][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2085'.
[  240.820626][T13789] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2084'.
[  240.825534][T13789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.886768][T13791] `: Port device dummy0 added
[  240.910272][T13791] `: Port device dummy0 removed
[  240.916097][T13791] dummy0: entered promiscuous mode
[  241.231394][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2091'.
[  241.234974][T13807] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  241.255447][T13800] wg1 speed is unknown, defaulting to 1000
[  241.262470][T13800] lo speed is unknown, defaulting to 1000
[  241.492412][   T56] Bluetooth: hci3: command tx timeout
[  241.515450][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'.
[  241.526994][T13822] hsr_slave_0: left promiscuous mode
[  241.535339][T13822] hsr_slave_1: left promiscuous mode
[  241.689052][T13831] TCP: TCP_TX_DELAY enabled
[  241.908455][T13840] validate_nla: 13 callbacks suppressed
[  241.908470][T13840] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  242.094082][T13845] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.096975][T13845] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  242.150727][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.170224][T13845] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.174230][T13845] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  242.189182][T13849] ip6gretap1: entered promiscuous mode
[  242.191565][T13849] ip6gretap1: entered allmulticast mode
[  242.226749][T13845] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.231102][T13845] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  242.305658][T13845] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.312633][T13845] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  242.326662][T13850] wg1 speed is unknown, defaulting to 1000
[  242.343298][T13850] lo speed is unknown, defaulting to 1000
[  242.346230][T13854] wg1 speed is unknown, defaulting to 1000
[  242.362824][T13854] lo speed is unknown, defaulting to 1000
[  242.463496][T13864] bond2: entered promiscuous mode
[  242.479253][T13864] vcan1: entered promiscuous mode
[  242.482080][T13864] vcan1: entered allmulticast mode
[  242.484694][T13864] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  242.489657][T13864] bond2: (slave vcan1): Error -95 calling set_mac_address
[  242.504664][ T5850] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.508173][ T5850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  242.566801][ T5850] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.570602][ T5850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  242.603983][ T5869] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.607847][ T5869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  242.630355][ T5869] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.640362][ T5869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  242.725898][T13871] vlan3: entered promiscuous mode
[  242.727601][T13871] bond0: entered promiscuous mode
[  242.802991][T13888] netlink: 'syz.3.2106': attribute type 10 has an invalid length.
[  242.829861][T13880] bond38 (unregistering): Released all slaves
[  242.896716][T13896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.203838][T13924] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  243.237077][T13924] bond34: entered promiscuous mode
[  243.239518][T13924] 8021q: adding VLAN 0 to HW filter on device bond34
[  243.355510][T13936] wg1 speed is unknown, defaulting to 1000
[  243.359767][T13936] lo speed is unknown, defaulting to 1000
[  243.442330][T13946] netlink: 'syz.2.2121': attribute type 1 has an invalid length.
[  243.449035][T13946] netlink: 'syz.2.2121': attribute type 2 has an invalid length.
[  243.464152][T13946] netlink: 'syz.2.2121': attribute type 1 has an invalid length.
[  243.471547][T13946] netlink: 'syz.2.2121': attribute type 3 has an invalid length.
[  243.492526][T13946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.537965][T13953] netlink: 'syz.3.2123': attribute type 1 has an invalid length.
[  243.587875][T13953] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.645548][T13967] tipc: Enabling of bearer <eth:ip6gre0> rejected, already enabled
[  243.688256][T13965] tap0: tun_chr_ioctl cmd 2148553947
[  243.693748][T13965] tap0: tun_chr_ioctl cmd 2147767521
[  243.910736][T13980] veth0: entered promiscuous mode
[  243.920520][T13979] veth0: left promiscuous mode
[  244.007709][T13987] netlink: 'syz.3.2132': attribute type 1 has an invalid length.
[  244.042758][T13987] bond4: entered promiscuous mode
[  244.045086][T13987] bond4: entered allmulticast mode
[  244.047616][T13987] 8021q: adding VLAN 0 to HW filter on device bond4
[  244.060597][T13987] erspan1: entered allmulticast mode
[  244.068343][T13987] bond4: (slave erspan1): making interface the new active one
[  244.073044][T13987] erspan1: entered promiscuous mode
[  244.078220][T13987] bond4: (slave erspan1): Enslaving as an active interface with an up link
[  244.261048][T14005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.299179][ T5869] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6
[  244.313133][T14009] syzkaller1: entered promiscuous mode
[  244.315458][T14009] syzkaller1: entered allmulticast mode
[  244.422094][T14012] tipc: Resetting bearer <eth:ip6gre0>
[  244.438322][T14012] bond0: (slave rose0): Enslaving as an active interface with an up link
[  244.877346][T14019] netlink: 'syz.1.2140': attribute type 1 has an invalid length.
[  244.917949][T14018] bond35: (slave veth15): Enslaving as an active interface with a down link
[  244.941658][T14018] bond35: (slave veth17): Enslaving as an active interface with a down link
[  244.977486][T14022] __nla_validate_parse: 50 callbacks suppressed
[  244.977496][T14022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2141'.
[  245.012283][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'.
[  245.105190][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2143'.
[  245.131598][T14029] bond5: entered promiscuous mode
[  245.137584][T14029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'.
[  245.152485][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2144'.
[  245.156130][T14031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2144'.
[  245.176411][T14031] bridge15: entered promiscuous mode
[  245.180245][   T56] Bluetooth: hci3: command tx timeout
[  245.189424][T14033] Bluetooth: MGMT ver 1.23
[  245.193510][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'.
[  245.239044][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'.
[  245.242230][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'.
[  245.245443][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'.
[  245.285327][T14037] xt_time: invalid argument - start or stop time greater than 23:59:59
[  245.382034][T14043] bond6: option updelay: invalid value (18446744072924056005)
[  245.384297][T14043] bond6: option updelay: allowed values 0 - 2147483647
[  245.400602][T14043] bond6 (unregistering): Released all slaves
[  245.503256][T14057] ip6gre1: entered promiscuous mode
[  245.505462][T14057] ip6gre1: entered allmulticast mode
[  245.609657][T14067] team1: entered promiscuous mode
[  245.611995][T14067] team1: entered allmulticast mode
[  245.614024][T14067] 8021q: adding VLAN 0 to HW filter on device team1
[  245.633491][T14071] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.061939][T14101] pim6reg1: entered promiscuous mode
[  246.063697][T14101] pim6reg1: entered allmulticast mode
[  246.148970][T14108] pim6reg: entered allmulticast mode
[  246.151488][T14108] pim6reg: left allmulticast mode
[  246.208578][T14110] wg1 speed is unknown, defaulting to 1000
[  246.215155][T14110] lo speed is unknown, defaulting to 1000
[  246.257169][T14088] delete_channel: no stack
[  246.277425][T14116] syzkaller1: entered promiscuous mode
[  246.279070][T14116] syzkaller1: entered allmulticast mode
[  246.354833][T14120] wg1 speed is unknown, defaulting to 1000
[  246.358303][T14120] lo speed is unknown, defaulting to 1000
[  246.453529][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.461292][T14128] xt_CT: You must specify a L4 protocol and not use inversions on it
[  246.468090][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.481480][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.696347][T14135] smc: net device erspan0 applied user defined pnetid SYZ0
[  246.743129][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.747447][  T783] lo speed is unknown, defaulting to 1000
[  246.749142][  T783] syz1: Port: 1 Link DOWN
[  246.781027][T14136] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  246.956931][T14136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  247.182320][  T783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  247.573125][T14157] validate_nla: 3 callbacks suppressed
[  247.573135][T14157] netlink: 'syz.1.2176': attribute type 13 has an invalid length.
[  247.876045][T14173] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  247.881017][T14173] netlink: 'syz.1.2181': attribute type 2 has an invalid length.
[  247.894561][T14173] !9: entered promiscuous mode
[  248.068929][T14182] wg1 speed is unknown, defaulting to 1000
[  248.072683][T14182] lo speed is unknown, defaulting to 1000
[  248.120576][T14182] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.346259][T14191] 0{X: renamed from gretap0 (while UP)
[  248.354417][T14191] 0{X: entered allmulticast mode
[  248.356644][T14191] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  248.408531][T14193] tipc: Started in network mode
[  248.412071][T14193] tipc: Node identity 080211000001, cluster identity 4711
[  248.415030][T14193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.420215][T14193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.423900][T14193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.427396][T14193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.433136][T14193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.509794][T14200] sit1: entered promiscuous mode
[  248.922869][T14226] wg1 speed is unknown, defaulting to 1000
[  248.926645][T14226] lo speed is unknown, defaulting to 1000
[  249.173441][T14239] IPv6: sit2: Disabled Multicast RS
[  249.414110][   T24] tipc: Node number set to 134418688
[  249.505220][T14267] xt_TCPMSS: Only works on TCP SYN packets
[  249.546343][T14272] wg1 speed is unknown, defaulting to 1000
[  249.552818][T14272] lo speed is unknown, defaulting to 1000
[  249.831095][T14289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  250.210434][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  250.702772][T14307] siw: device registration error -23
[  250.948739][T14316] tipc: Resetting bearer <eth:syzkaller0>
[  250.957167][T14316] syzkaller0: left allmulticast mode
[  250.987118][T14316] trusted_key: syz.1.2222 sent an empty control message without MSG_MORE.
[  251.116300][T14322] __nla_validate_parse: 26 callbacks suppressed
[  251.116316][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'.
[  251.126330][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'.
[  251.193483][T14324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2226'.
[  251.197010][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'.
[  251.201241][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'.
[  251.268510][T14326] netlink: 'syz.3.2227': attribute type 8 has an invalid length.
[  251.290548][T14328] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  251.304327][T14328] netlink: 'syz.1.2228': attribute type 1 has an invalid length.
[  251.331854][T14328] bond36: entered promiscuous mode
[  251.336885][T14328] 8021q: adding VLAN 0 to HW filter on device bond36
[  251.357188][T14328] bond36: (slave bridge16): making interface the new active one
[  251.362589][T14328] bridge16: entered promiscuous mode
[  251.365506][T14328] bond36: (slave bridge16): Enslaving as an active interface with an up link
[  251.613518][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'.
[  251.619216][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'.
[  251.667512][T14351] netlink: 'syz.2.2233': attribute type 2 has an invalid length.
[  251.777494][T14359] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2236'.
[  251.795120][T14357] wg1 speed is unknown, defaulting to 1000
[  251.798566][T14357] lo speed is unknown, defaulting to 1000
[  251.813539][T14359] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.002466][T14358] tipc: Resetting bearer <eth:ip6gre0>
[  252.061082][T14358] xfrm0: left allmulticast mode
[  252.065281][T14358] macsec0: left allmulticast mode
[  252.073109][T14358] bond1: left allmulticast mode
[  252.077677][T14358] bond8: left allmulticast mode
[  252.079587][T14358] vlan2: left allmulticast mode
[  252.081295][T14358] bond10: left allmulticast mode
[  252.082959][T14358] geneve0: left allmulticast mode
[  252.085384][T14358] tipc: Resetting bearer <eth:syzkaller0>
[  252.092512][T14358] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  252.094717][T14358] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  252.098910][T14358] macvlan0: left allmulticast mode
[  252.101292][T14358] ip6gre1: left allmulticast mode
[  252.104564][T14358] bond19: left allmulticast mode
[  252.197934][T14358] gtp0: left promiscuous mode
[  252.203992][T14358] gtp0: left allmulticast mode
[  252.213680][T14358] vti0: left promiscuous mode
[  252.217908][T14358] vti0: left allmulticast mode
[  252.219714][T14358] xfrm2: left promiscuous mode
[  252.221628][T14358] xfrm2: left allmulticast mode
[  252.267386][T14298] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.279973][T14298] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  252.282918][T14298] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.285795][T14298] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  252.288507][T14298] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.294136][T14298] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  252.310768][T14359] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.320617][T14298] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.323744][T14298] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  252.408704][T14359] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.495052][T14359] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.521844][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2239'.
[  252.588704][T10649] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.622896][T14298] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.664032][T14298] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.677696][T14164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.779662][T14393] sctp: [Deprecated]: syz.1.2242 (pid 14393) Use of int in max_burst socket option.
[  252.779662][T14393] Use struct sctp_assoc_value instead
[  252.791176][T14397] netlink: 'syz.3.2244': attribute type 1 has an invalid length.
[  252.837963][T14397] bond6: entered promiscuous mode
[  252.841716][T14397] 8021q: adding VLAN 0 to HW filter on device bond6
[  252.858899][T14397] bond6: (slave veth5): making interface the new active one
[  252.862950][T14397] veth5: entered promiscuous mode
[  252.864332][T14402] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2243'.
[  252.865079][T14397] bond6: (slave veth5): Enslaving as an active interface with an up link
[  253.085872][T14413] bond37 (unregistering): Released all slaves
[  253.268510][T14419] netlink: 'syz.3.2249': attribute type 12 has an invalid length.
[  253.273330][T14419] bridge0: port 1(erspan0) entered blocking state
[  253.276205][T14419] bridge0: port 1(erspan0) entered disabled state
[  253.279136][T14419] erspan0: entered allmulticast mode
[  253.283142][T14419] erspan0: entered promiscuous mode
[  253.385148][T14427] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  253.390159][T14427] bond7 (unregistering): Released all slaves
[  253.495829][T14432] netlink: 'syz.3.2252': attribute type 4 has an invalid length.
[  253.505333][T14432] .`: renamed from bond0 (while UP)
[  253.752073][T14446] netlink: 'syz.2.2256': attribute type 15 has an invalid length.
[  253.851468][T14459] netlink: 'syz.1.2258': attribute type 1 has an invalid length.
[  253.993655][T14466] pim6reg1: entered promiscuous mode
[  253.998982][T14466] pim6reg1: entered allmulticast mode
[  254.036426][T14472] wg1 speed is unknown, defaulting to 1000
[  254.043949][T14473] wg1 speed is unknown, defaulting to 1000
[  254.046762][T14475] wg1 speed is unknown, defaulting to 1000
[  254.047699][T14473] lo speed is unknown, defaulting to 1000
[  254.058314][T14475] lo speed is unknown, defaulting to 1000
[  254.063066][T14465] delete_channel: no stack
[  254.065911][T14472] lo speed is unknown, defaulting to 1000
[  254.154057][T14481] bond38: entered promiscuous mode
[  254.158419][T14481] bond38: entered allmulticast mode
[  254.160457][T14481] 8021q: adding VLAN 0 to HW filter on device bond38
[  254.278976][T14486] wg1 speed is unknown, defaulting to 1000
[  254.282941][T14486] lo speed is unknown, defaulting to 1000
[  254.585540][T14508] netlink: 'syz.2.2272': attribute type 2 has an invalid length.
[  254.740873][T14517] pim6reg: entered allmulticast mode
[  254.745657][T14517] pim6reg: left allmulticast mode
[  254.768073][T14518] bond38: left promiscuous mode
[  254.769729][T14518] bond38: left allmulticast mode
[  254.802641][T14519] pim6reg: entered allmulticast mode
[  254.807116][T14518] hsr_slave_0: left promiscuous mode
[  254.810815][T14518] hsr_slave_1: left promiscuous mode
[  254.839601][T14517] pim6reg: left allmulticast mode
[  254.969585][T14298] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.974366][T14298] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.976838][T14298] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.979455][T14298] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.984983][T14536] tipc: Enabled bearer <eth:vlan0>, priority 0
[  254.994557][T14542] xt_cluster: node mask cannot exceed total number of nodes
[  255.059398][T14547] wg1 speed is unknown, defaulting to 1000
[  255.078211][T14547] lo speed is unknown, defaulting to 1000
[  255.124909][T14555] netlink: 'syz.2.2285': attribute type 7 has an invalid length.
[  255.132389][T14555] netlink: 'syz.2.2285': attribute type 7 has an invalid length.
[  255.144399][T14555] netlink: 'syz.2.2285': attribute type 7 has an invalid length.
[  255.153188][T14555] netlink: 'syz.2.2285': attribute type 7 has an invalid length.
[  255.301488][T14563] bridge3: port 1(ip6gretap2) entered blocking state
[  255.303857][T14563] bridge3: port 1(ip6gretap2) entered disabled state
[  255.306118][T14563] ip6gretap2: entered allmulticast mode
[  255.308665][T14563] ip6gretap2: entered promiscuous mode
[  255.335083][T14563] bridge3: port 2(veth7) entered blocking state
[  255.337123][T14563] bridge3: port 2(veth7) entered disabled state
[  255.339175][T14563] veth7: entered allmulticast mode
[  255.357514][T14563] veth7: entered promiscuous mode
[  255.359749][T14563] bridge3: port 2(veth7) entered blocking state
[  255.361997][T14563] bridge3: port 2(veth7) entered forwarding state
[  255.380519][ T4437] bridge3: port 2(veth7) entered disabled state
[  255.382876][T14568] syzkaller0: Caught tx_queue_len zero misconfig
[  255.402281][T14568] syzkaller0: left promiscuous mode
[  255.545934][T14583] wg1 speed is unknown, defaulting to 1000
[  255.549396][T14583] lo speed is unknown, defaulting to 1000
[  255.582283][T14585] 8021q: adding VLAN 0 to HW filter on device bond37
[  255.597177][T14585] veth19: entered promiscuous mode
[  255.601735][T14585] bond37: (slave veth19): Enslaving as an active interface with a down link
[  255.611679][ T3982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.614734][ T3982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.792508][T14591] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  255.797764][T14591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.803029][T14591] syzkaller0: entered promiscuous mode
[  255.805336][T14591] syzkaller0: entered allmulticast mode
[  256.236906][T14606] x_tables: ip_tables: icmp match: only valid for protocol 1
[  256.244323][T14607] x_tables: ip_tables: icmp match: only valid for protocol 1
[  256.323292][T14610] bond0: option ad_select: invalid value (34)
[  256.327047][T14610] bond0 (unregistering): Released all slaves
[  256.422837][T14616] xt_hashlimit: size too large, truncated to 1048576
[  256.456666][T14619] __nla_validate_parse: 32 callbacks suppressed
[  256.456683][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'.
[  256.477511][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  256.606053][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'.
[  256.667051][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2302'.
[  256.769343][T14643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.782026][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  256.786120][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  256.797138][T14643] tipc: Resetting bearer <eth:syzkaller0>
[  256.899006][T14657] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode
[  256.905499][T14657] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode
[  257.791064][T14741] xt_hashlimit: size too large, truncated to 1048576
[  257.820145][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  257.919963][T14763] geneve3: entered promiscuous mode
[  257.971044][T14775] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2322'.
[  258.015278][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'.
[  258.491991][T14817] vlan1: entered promiscuous mode
[  258.494101][T14817] hsr_slave_1: entered promiscuous mode
[  258.496418][T14817] vlan1: entered allmulticast mode
[  258.500315][T14817] hsr_slave_1: entered allmulticast mode
[  258.509644][T14817] delete_channel: no stack
[  258.771379][T14833] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2331'.
[  258.944370][T14841] validate_nla: 2 callbacks suppressed
[  258.944387][T14841] netlink: 'syz.1.2332': attribute type 1 has an invalid length.
[  258.985463][T14841] 8021q: adding VLAN 0 to HW filter on device bond38
[  258.997855][T14841] vlan3: entered promiscuous mode
[  258.999977][T14841] bond38: entered promiscuous mode
[  259.002194][T14841] vlan3: entered allmulticast mode
[  259.004318][T14841] bond38: entered allmulticast mode
[  259.010819][T14841] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2332'.
[  259.157599][T14848] wg1 speed is unknown, defaulting to 1000
[  259.161250][T14848] lo speed is unknown, defaulting to 1000
[  259.360308][T14856] bridge5: entered promiscuous mode
[  259.361990][T14856] bridge5: entered allmulticast mode
[  259.365903][T14856] team0: Port device bridge5 added
[  259.383891][T14858] : entered promiscuous mode
[  259.387732][T14858] netlink: 'syz.1.2337': attribute type 1 has an invalid length.
[  259.433351][T14858] bond39: entered promiscuous mode
[  259.435813][T14858] 8021q: adding VLAN 0 to HW filter on device bond39
[  259.520558][T14867] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  259.744362][T14885] netlink: 'syz.1.2344': attribute type 1 has an invalid length.
[  259.784268][T14885] 8021q: adding VLAN 0 to HW filter on device bond40
[  259.810435][T14885] veth21: entered promiscuous mode
[  259.816992][T14885] bond40: (slave veth21): Enslaving as an active interface with a down link
[  259.843611][T14885] erspan0: entered allmulticast mode
[  259.851663][T14890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.863567][T14890] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  259.866807][T14890] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  259.999566][T10649] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.003846][T10649] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.010184][T10649] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  260.013733][T10649] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.114949][T14909] pim6reg: entered allmulticast mode
[  260.128398][T14909] pim6reg: left allmulticast mode
[  260.318612][T14918] netlink: 'syz.3.2353': attribute type 3 has an invalid length.
[  260.467616][T14927] bond0: Removing last ns target with arp_interval on
[  260.508170][T14932] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.518351][T14932] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  260.523323][T14932] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  260.526399][T14932] tipc: Resetting bearer <eth:syzkaller0>
[  260.626974][T14942] 8021q: adding VLAN 0 to HW filter on device bond7
[  260.636536][T14942] macsec1: entered promiscuous mode
[  260.638638][T14942] bond7: entered promiscuous mode
[  260.641974][T14942] macsec1: entered allmulticast mode
[  260.644060][T14942] bond7: entered allmulticast mode
[  260.666671][T14947] bridge0: port 1(macvtap1) entered blocking state
[  260.669279][T14947] bridge0: port 1(macvtap1) entered disabled state
[  260.672199][T14947] macvtap1: entered allmulticast mode
[  260.674140][T14947] bridge0: entered allmulticast mode
[  260.677108][T14947] macvtap1: left allmulticast mode
[  260.678955][T14947] bridge0: left allmulticast mode
[  261.134726][T14978] lo: Caught tx_queue_len zero misconfig
[  261.511640][T14988] pim6reg: entered allmulticast mode
[  261.524216][T14989] pim6reg: left allmulticast mode
[  261.631499][T14994] __nla_validate_parse: 21 callbacks suppressed
[  261.631515][T14994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2373'.
[  261.645454][T14994] netlink: 'syz.2.2373': attribute type 1 has an invalid length.
[  261.706659][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'.
[  261.765841][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'.
[  261.873490][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'.
[  262.087018][T15009] netlink: 'syz.3.2377': attribute type 21 has an invalid length.
[  262.093527][T15009] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2377'.
[  262.098128][T15009] netlink: 'syz.3.2377': attribute type 5 has an invalid length.
[  262.105351][T15009] netlink: 'syz.3.2377': attribute type 6 has an invalid length.
[  262.108548][T15009] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2377'.
[  262.116401][T15009] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.275220][T15013] netlink: 'syz.3.2378': attribute type 3 has an invalid length.
[  262.289823][T15015] x_tables: ip_tables: icmp match: only valid for protocol 1
[  262.329647][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'.
[  262.398709][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.539123][T15029] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2382'.
[  262.550580][T15029] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  262.635394][T15032] netlink: 'syz.2.2384': attribute type 29 has an invalid length.
[  262.638651][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'.
[  262.689902][T15038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2385'.
[  262.927651][T15047] syzkaller1: entered promiscuous mode
[  262.935965][T15047] syzkaller1: entered allmulticast mode
[  263.078313][T15047] tipc: Resetting bearer <eth:syzkaller0>
[  263.190144][T15055] syzkaller1: left promiscuous mode
[  263.192276][T15055] syzkaller1: left allmulticast mode
[  263.206831][T15060] IPv6: NLM_F_REPLACE set, but no existing node found!
[  263.474198][T15047] tipc: Resetting bearer <eth:syzkaller0>
[  263.924780][T15084] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.056855][T15084] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.118015][T15084] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.303043][T15084] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.467052][T14164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.492534][T14164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.511886][T14164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.535875][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.662473][T15106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.737301][T15112] validate_nla: 3 callbacks suppressed
[  264.737317][T15112] netlink: 'syz.3.2397': attribute type 1 has an invalid length.
[  264.765737][T15112] netlink: 'syz.3.2397': attribute type 1 has an invalid length.
[  264.987882][T15128] wg1 speed is unknown, defaulting to 1000
[  264.996049][T15128] lo speed is unknown, defaulting to 1000
[  265.011382][T15126] netlink: 'syz.2.2399': attribute type 19 has an invalid length.
[  265.098609][T15126] netlink: 'syz.2.2399': attribute type 19 has an invalid length.
[  265.249843][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  265.254473][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  265.257499][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  265.263314][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  265.266522][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  265.269885][T15148] netlink: 'syz.2.2403': attribute type 33 has an invalid length.
[  266.457035][T15186] bond42: option mode: invalid value (18)
[  266.466791][T15186] bond42 (unregistering): Released all slaves
[  266.823088][T15207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  266.864085][T15210] __nla_validate_parse: 81 callbacks suppressed
[  266.864100][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'.
[  266.938723][T15204] syzkaller1: entered promiscuous mode
[  266.984207][T15204] syzkaller1: entered allmulticast mode
[  267.121918][T15221] bond42: Unable to set down delay as MII monitoring is disabled
[  267.144556][T15221] bond42 (unregistering): Released all slaves
[  267.233795][T15214] syzkaller1: left promiscuous mode
[  267.235980][T15214] syzkaller1: left allmulticast mode
[  267.672300][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'.
[  267.857905][T15254] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link
[  267.969988][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2421'.
[  268.112966][T15268] 8021q: adding VLAN 0 to HW filter on device bond39
[  268.187488][T15273] 8021q: adding VLAN 0 to HW filter on device bond39
[  268.201232][T15273] bond39: (slave vxcan5): The slave device specified does not support setting the MAC address
[  268.206046][T15273] bond39: (slave vxcan5): Error -95 calling set_mac_address
[  268.305026][T15268] veth15: entered promiscuous mode
[  268.323280][T15268] bond39: (slave veth15): Enslaving as an active interface with a down link
[  268.462806][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'.
[  268.552986][T15289] gtp0: entered promiscuous mode
[  268.563907][T15289] gtp0: entered allmulticast mode
[  268.604344][T15291] pim6reg1: entered promiscuous mode
[  268.617405][T15291] pim6reg1: entered allmulticast mode
[  268.641171][T15291] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2427'.
[  269.234497][T15321] xt_nfacct: accounting object `syz0' does not exist
[  269.349070][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'.
[  269.356983][T15329] 8021q: VLANs not supported on xfrm0
[  269.368223][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'.
[  269.633103][T15341] xt_hashlimit: size too large, truncated to 1048576
[  270.271111][T15354] validate_nla: 62 callbacks suppressed
[  270.271123][T15354] netlink: 'syz.2.2437': attribute type 1 has an invalid length.
[  270.598741][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'.
[  270.799579][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2441'.
[  270.814005][T15377] netlink: 'syz.2.2441': attribute type 1 has an invalid length.
[  270.858309][T15377] 8021q: adding VLAN 0 to HW filter on device bond41
[  271.222989][T15395] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.227718][T15397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.469402][T15405] macvlan2: entered promiscuous mode
[  271.471573][T15405] bond0: entered promiscuous mode
[  271.473321][T15405] macvlan2: entered allmulticast mode
[  271.480218][T15405] bond0: entered allmulticast mode
[  271.484440][T15405] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  271.502723][T15405] bond0: left allmulticast mode
[  271.504853][T15405] bond0: left promiscuous mode
[  272.806808][T15395] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.928987][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'.
[  272.934028][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'.
[  273.055773][T15427] netlink: 'syz.1.2451': attribute type 10 has an invalid length.
[  273.137920][T15395] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.180160][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  273.301891][T15428] : renamed from bond_slave_0
[  273.357355][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'.
[  273.361054][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'.
[  273.455196][T15395] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.474946][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'.
[  273.569235][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.582432][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.594985][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.741372][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.228932][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  274.287841][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'.
[  274.291646][T15457] openvswitch: netlink: Flow actions attr not present in new flow.
[  274.295991][T15457] netlink: 'syz.3.2460': attribute type 1 has an invalid length.
[  274.318712][T15457] bond10 (unregistering): Released all slaves
[  274.349660][T15459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2460'.
[  274.352946][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2460'.
[  274.755654][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'.
[  274.902622][T15475] 8021q: adding VLAN 0 to HW filter on device .`
[  274.910354][T15475] 8021q: adding VLAN 0 to HW filter on device `
[  274.934683][T15475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  275.119398][T15490] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  275.285109][T15494] netlink: 'syz.3.2470': attribute type 10 has an invalid length.
[  275.288539][T15494] wlan1: mtu less than device minimum
[  275.290936][T15494] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  275.441100][T15501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.721976][T15519] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  275.943900][T15533] sctp: [Deprecated]: syz.3.2477 (pid 15533) Use of int in max_burst socket option.
[  275.943900][T15533] Use struct sctp_assoc_value instead
[  276.629362][T15555] netlink: 'syz.1.2481': attribute type 11 has an invalid length.
[  276.881041][T15564] x_tables: duplicate underflow at hook 3
[  277.043357][T15570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  277.170259][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  277.248915][T15576] netlink: 'syz.1.2488': attribute type 11 has an invalid length.
[  277.257329][T15577] netlink: 'syz.1.2488': attribute type 11 has an invalid length.
[  277.576233][T15583] erspan0: left allmulticast mode
[  277.617341][T15583] 8021q: adding VLAN 0 to HW filter on device team0
[  277.651236][T15583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.663702][T15604] IPVS: length: 132 != 8
[  277.667304][  T783] lo speed is unknown, defaulting to 1000
[  277.672990][  T783] syz1: Port: 1 Link ACTIVE
[  278.085522][T15629] wg1 speed is unknown, defaulting to 1000
[  278.089231][T15629] lo speed is unknown, defaulting to 1000
[  278.145277][T15629] xt_CT: You must specify a L4 protocol and not use inversions on it
[  278.274050][T15633] bond42: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  278.279895][T15633] bond42 (unregistering): Released all slaves
[  278.683046][T15642] __nla_validate_parse: 27 callbacks suppressed
[  278.683057][T15642] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.2505'.
[  278.849287][T15647] 0{X: left allmulticast mode
[  278.877496][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'.
[  278.886161][T15647] 8021q: adding VLAN 0 to HW filter on device .`
[  278.924160][T15647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.979267][T15655] 8021q: adding VLAN 0 to HW filter on device bond42
[  279.293806][T15658] bond42 (unregistering): Released all slaves
[  279.318745][T15654] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  279.329999][T15640] wg1 speed is unknown, defaulting to 1000
[  279.337834][T15640] lo speed is unknown, defaulting to 1000
[  279.428959][T15661] netlink: 'syz.1.2509': attribute type 4 has an invalid length.
[  279.447448][T15661] netlink: 'syz.1.2509': attribute type 4 has an invalid length.
[  279.452731][T15654] wg1 speed is unknown, defaulting to 1000
[  279.453605][T14365] lo speed is unknown, defaulting to 1000
[  279.457663][T14365] lo speed is unknown, defaulting to 1000
[  279.509199][T15654] lo speed is unknown, defaulting to 1000
[  279.524229][T15663] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2510'.
[  279.622458][T15667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2512'.
[  279.691454][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2511'.
[  279.957965][T15674] xt_hashlimit: size too large, truncated to 1048576
[  280.081829][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'.
[  280.111183][T15679] syz_tun: entered allmulticast mode
[  280.191330][T15678] syz_tun: left allmulticast mode
[  280.302941][T15684] bond42 (unregistering): Released all slaves
[  280.418065][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'.
[  280.490731][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  280.507803][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  280.514898][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  280.635896][T15698] tipc: Resetting bearer <eth:ip6gre0>
[  280.757851][T15706] bridge0: port 1(erspan0) entered blocking state
[  280.763028][T15706] bridge0: port 1(erspan0) entered disabled state
[  280.765785][T15706] erspan0: entered allmulticast mode
[  280.778144][T15706] erspan0: left allmulticast mode
[  280.857680][ T5886] hid-generic 0005:0B57:0401.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  281.017612][T15725] IPVS: length: 132 != 8
[  281.286615][T15730] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  281.295781][T15734] wg1 speed is unknown, defaulting to 1000
[  281.307103][T15734] lo speed is unknown, defaulting to 1000
[  281.334344][T15736] pim6reg1: entered promiscuous mode
[  281.336698][T15736] pim6reg1: entered allmulticast mode
[  281.422589][T15731] delete_channel: no stack
[  281.572464][T15749] xt_cgroup: path and classid specified
[  281.598688][T15753] netlink: 'syz.1.2535': attribute type 32 has an invalid length.
[  281.639771][T15753] bond42: option coupled_control: invalid value (12)
[  281.648310][T15753] bond42 (unregistering): Released all slaves
[  281.967465][T15763] pim6reg1: entered promiscuous mode
[  281.969595][T15763] pim6reg1: entered allmulticast mode
[  282.145507][T15771] dvmrp1: entered allmulticast mode
[  282.203787][T15775] netlink: 'syz.1.2541': attribute type 1 has an invalid length.
[  282.322436][T15784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.446762][T15792] delete_channel: no stack
[  282.493646][T15798] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.503982][T15798] vti0: entered promiscuous mode
[  283.378763][T15822] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  283.382887][T15822] vlan1: left promiscuous mode
[  283.385004][T15822] hsr_slave_1: left promiscuous mode
[  283.387733][T15822] veth15: left promiscuous mode
[  284.188673][T15835] __nla_validate_parse: 168 callbacks suppressed
[  284.188683][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2556'.
[  284.207713][T15835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2556'.
[  284.236932][T15840] xt_TCPMSS: Only works on TCP SYN packets
[  284.329392][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'.
[  284.421382][T15847] 8021q: adding VLAN 0 to HW filter on device bond42
[  284.600387][T15841] bond42 (unregistering): Released all slaves
[  284.877771][T15865] wg1 speed is unknown, defaulting to 1000
[  284.906719][T15865] lo speed is unknown, defaulting to 1000
[  288.044708][T15871] xt_CT: You must specify a L4 protocol and not use inversions on it
[  295.430088][    C0] sched: DL replenish lagged too much
[  301.980314][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  314.827588][T15892] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20003
[  316.902652][ T5221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.950289][ T5221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.979507][ T5221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  317.142112][ T5221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  317.194532][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  317.266100][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  317.319276][ T5221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  317.485132][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.248996][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.353035][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  319.819095][ T5840] Bluetooth: hci4: command tx timeout
[  321.822290][ T5836] Bluetooth: hci5: command tx timeout
[  321.961618][ T5836] Bluetooth: hci4: command tx timeout
[  322.052759][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2572'.
[  322.212515][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'.
[  323.899971][ T5836] Bluetooth: hci5: command tx timeout
[  323.988841][ T5836] Bluetooth: hci4: command tx timeout
[  325.992156][ T5836] Bluetooth: hci5: command tx timeout
[  326.138876][ T5836] Bluetooth: hci4: command tx timeout
[  328.072552][ T5836] Bluetooth: hci5: command tx timeout
[  332.784697][T15908] syzkaller0: left promiscuous mode
[  332.830509][T15908] syzkaller0: left allmulticast mode
[  343.393365][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  343.545331][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  343.564312][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  343.623999][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  344.015801][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.449014][ T5840] Bluetooth: hci2: command tx timeout
[  348.562848][ T5840] Bluetooth: hci2: command tx timeout
[  350.086091][T14137] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.682964][ T5840] Bluetooth: hci2: command tx timeout
[  352.732738][ T5840] Bluetooth: hci2: command tx timeout
[  357.296380][T14137] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  363.411740][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  365.552427][T14137] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.487964][T14137] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.891558][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.015429][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.085977][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.229680][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.915625][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.067751][ T5221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.133936][ T5221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.275537][T15891] wg1 speed is unknown, defaulting to 1000
[  376.345519][T15891] lo speed is unknown, defaulting to 1000
[  376.365850][T15921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.532786][T15921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.594804][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.129433][T15911] wg1 speed is unknown, defaulting to 1000
[  378.660772][ T5840] Bluetooth: hci0: command tx timeout
[  379.031366][ T5840] Bluetooth: hci6: command tx timeout
[  380.701070][ T5840] Bluetooth: hci0: command tx timeout
[  381.216150][ T5840] Bluetooth: hci6: command tx timeout
[  382.780650][ T5840] Bluetooth: hci0: command tx timeout
[  383.330893][ T5840] Bluetooth: hci6: command tx timeout
[  383.357373][T15911] lo speed is unknown, defaulting to 1000
[  384.901966][ T5840] Bluetooth: hci0: command tx timeout
[  385.425374][ T5840] Bluetooth: hci6: command tx timeout
[  414.994541][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  415.132791][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  415.155115][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  415.192703][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  415.222139][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  417.593637][   T56] Bluetooth: hci3: command tx timeout
[  419.660827][   T56] Bluetooth: hci3: command tx timeout
[  421.757674][   T56] Bluetooth: hci3: command tx timeout
[  423.813962][   T56] Bluetooth: hci3: command tx timeout
[  431.191610][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  431.223986][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  431.242750][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  431.501145][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  431.563455][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  434.065860][ T5840] Bluetooth: hci5: command tx timeout
[  436.146577][ T5840] Bluetooth: hci5: command tx timeout
[  436.195670][   T56] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  436.214457][   T56] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  436.230944][   T56] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  436.422864][   T56] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  436.468800][   T56] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  438.243617][ T5840] Bluetooth: hci5: command tx timeout
[  439.227544][ T5840] Bluetooth: hci7: command tx timeout
[  440.295913][   T56] Bluetooth: hci5: command tx timeout
[  441.256439][   T56] Bluetooth: hci7: command tx timeout
[  442.494808][   T56] Bluetooth: hci4: command 0x0406 tx timeout
[  443.347062][ T5840] Bluetooth: hci7: command tx timeout
[  445.418955][ T5840] Bluetooth: hci7: command tx timeout
[  466.402795][T14137] tipc: Disabling bearer <eth:ip6gre0>
[  467.892443][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  481.173072][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.126276][T14137] bond7 (unregistering): (slave ip6gretap4): Releasing active interface
[  488.916624][T14137] bond21 (unregistering): (slave ip6gretap5): Releasing active interface
[  489.395772][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  489.411768][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  489.433855][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  489.610661][T15921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  489.876148][T15921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  492.536466][   T56] Bluetooth: hci0: command tx timeout
[  492.876958][   T56] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  492.908938][   T56] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  492.935142][   T56] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  493.136584][   T56] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  493.175380][   T56] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  494.613682][T15921] Bluetooth: hci0: command tx timeout
[  495.659355][T15921] Bluetooth: hci8: command tx timeout
[  496.296300][   T56] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  496.325623][   T56] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  496.341971][   T56] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  496.380773][   T56] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  496.464268][   T56] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  496.712439][   T56] Bluetooth: hci0: command tx timeout
[  497.737804][   T56] Bluetooth: hci8: command tx timeout
[  498.715910][   T56] Bluetooth: hci9: command tx timeout
[  498.776769][   T56] Bluetooth: hci0: command tx timeout
[  498.962302][T14137] bond23 (unregistering): (slave ip6gretap6): Releasing backup interface
[  499.975878][   T56] Bluetooth: hci8: command tx timeout
[  500.875523][   T56] Bluetooth: hci9: command tx timeout
[  502.148033][T15921] Bluetooth: hci8: command tx timeout
[  502.934516][T15921] Bluetooth: hci9: command tx timeout
[  503.734275][T15921] Bluetooth: hci6: command 0x0406 tx timeout
[  505.078738][   T56] Bluetooth: hci9: command tx timeout
[  539.574957][   T56] Bluetooth: hci3: command 0x0406 tx timeout
[  554.424224][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  554.448195][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  554.511414][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  554.675251][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  554.788011][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  554.934197][   T56] Bluetooth: hci5: command 0x0406 tx timeout
[  556.934783][T15921] Bluetooth: hci10: command tx timeout
[  557.036857][   T56] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  557.055686][   T56] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  557.173389][   T56] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  557.257584][   T56] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  557.291123][   T56] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  557.642367][T15921] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  557.664038][T15921] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  557.975090][T15921] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  558.436472][T15921] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  558.474069][T15921] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  559.012954][   T56] Bluetooth: hci10: command tx timeout
[  559.582833][   T56] Bluetooth: hci11: command tx timeout
[  560.063443][T15921] Bluetooth: hci7: command 0x0406 tx timeout
[  560.913073][ T5836] Bluetooth: hci12: command tx timeout
[  561.093849][ T5836] Bluetooth: hci10: command tx timeout
[  561.674809][ T5836] Bluetooth: hci11: command tx timeout
[  562.973228][ T5836] Bluetooth: hci12: command tx timeout
[  563.170743][ T5836] Bluetooth: hci10: command tx timeout
[  563.735582][ T5836] Bluetooth: hci11: command tx timeout
[  565.051892][ T5836] Bluetooth: hci12: command tx timeout
[  565.816066][ T5836] Bluetooth: hci11: command tx timeout
[  567.098421][ T5836] Bluetooth: hci12: command tx timeout
[  602.084644][T14137] bond20 (unregistering): (slave gretap2): Releasing backup interface
[  609.175191][   T35] INFO: task syz-executor:15891 blocked for more than 143 seconds.
[  609.177743][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  609.360485][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  609.363327][   T35] task:syz-executor    state:D stack:23704 pid:15891 tgid:15891 ppid:1      task_flags:0x400140 flags:0x00080003
[  609.367435][   T35] Call Trace:
[  609.368537][   T35]  <TASK>
[  609.369475][   T35]  __schedule+0x14ef/0x4fb0
[  609.690951][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  609.693180][   T35]  ? __pfx___schedule+0x10/0x10
[  609.695160][   T35]  ? schedule+0x90/0x360
[  609.696757][   T35]  schedule+0x164/0x360
[  609.698189][   T35]  schedule_preempt_disabled+0x13/0x30
[  609.879264][   T35]  __mutex_lock+0x829/0x1340
[  609.884391][   T35]  ? __mutex_lock+0x5cc/0x1340
[  609.886011][   T35]  ? ip6mr_net_exit_batch+0x20/0x90
[  609.887717][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  609.889340][   T35]  ip6mr_net_exit_batch+0x20/0x90
[  609.912725][   T35]  ? __pfx_ip6mr_net_exit_batch+0x10/0x10
[  609.914617][   T35]  ops_undo_list+0x52b/0x940
[  609.916094][   T35]  ? __pfx_ops_undo_list+0x10/0x10
[  609.917706][   T35]  ? ops_init+0x469/0x5c0
[  609.919067][   T35]  setup_net+0x2f0/0x340
[  609.924567][   T35]  ? __pfx_setup_net+0x10/0x10
[  609.926142][   T35]  ? preinit_net+0x47d/0x780
[  609.927600][   T35]  copy_net_ns+0x3e2/0x570
[  609.928988][   T35]  create_new_namespaces+0x3e7/0x6a0
[  609.953234][   T35]  ? security_capable+0x7e/0x2c0
[  609.954861][   T35]  unshare_nsproxy_namespaces+0x11a/0x160
[  609.956648][   T35]  ksys_unshare+0x4f4/0x900
[  609.958068][   T35]  ? fput_close_sync+0x11f/0x240
[  609.959572][   T35]  ? __pfx_ksys_unshare+0x10/0x10
[  610.267172][   T35]  __x64_sys_unshare+0x38/0x50
[  610.269183][   T35]  do_syscall_64+0xe2/0xf80
[  610.284623][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.287176][   T35]  ? trace_irq_disable+0x37/0x100
[  610.289246][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.586921][   T35] RIP: 0033:0x7f563779bfa7
[  610.588489][   T35] RSP: 002b:00007ffddeb948f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  610.800968][   T35] RAX: ffffffffffffffda RBX: 00007f5637a15f40 RCX: 00007f563779bfa7
[  610.804243][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  610.807130][   T35] RBP: 00007f5637a167b8 R08: 0000000000000000 R09: 0000000000000000
[  610.809716][   T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  610.842468][   T35] R13: 0000000000000003 R14: 00007ffddeb94b38 R15: 0000000000000000
[  610.845207][   T35]  </TASK>
[  610.846366][   T35] INFO: task syz-executor:15911 blocked for more than 145 seconds.
[  610.848806][   T35]       Not tainted syzkaller #0
[  610.862644][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  610.865922][   T35] task:syz-executor    state:D stack:23704 pid:15911 tgid:15911 ppid:1      task_flags:0x400140 flags:0x00080002
[  611.331949][   T35] Call Trace:
[  611.333081][   T35]  <TASK>
[  611.334046][   T35]  __schedule+0x14ef/0x4fb0
[  611.335537][   T35]  ? __pfx___schedule+0x10/0x10
[  611.364503][   T35]  ? schedule+0x90/0x360
[  611.366055][   T35]  schedule+0x164/0x360
[  611.367379][   T35]  schedule_preempt_disabled+0x13/0x30
[  611.369109][   T35]  __mutex_lock+0x829/0x1340
[  612.148332][   T35]  ? __mutex_lock+0x5cc/0x1340
[  612.181067][   T35]  ? cangw_pernet_exit_batch+0x20/0x90
[  612.183296][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  612.185329][   T35]  cangw_pernet_exit_batch+0x20/0x90
[  612.187461][   T35]  ? __pfx_cangw_pernet_exit_batch+0x10/0x10
[  612.189839][   T35]  ops_undo_list+0x52b/0x940
[  612.271018][   T35]  ? __pfx_ops_undo_list+0x10/0x10
[  612.272702][   T35]  ? ops_init+0x469/0x5c0
[  612.274086][   T35]  setup_net+0x2f0/0x340
[  612.275476][   T35]  ? __pfx_setup_net+0x10/0x10
[  612.276981][   T35]  ? preinit_net+0x47d/0x780
[  612.278468][   T35]  copy_net_ns+0x3e2/0x570
[  612.279881][   T35]  create_new_namespaces+0x3e7/0x6a0
[  612.474502][   T35]  ? security_capable+0x7e/0x2c0
[  612.476191][   T35]  unshare_nsproxy_namespaces+0x11a/0x160
[  612.478009][   T35]  ksys_unshare+0x4f4/0x900
[  612.479333][   T35]  ? fput_close_sync+0x11f/0x240
[  612.500354][   T35]  ? __pfx_ksys_unshare+0x10/0x10
[  612.501999][   T35]  __x64_sys_unshare+0x38/0x50
[  612.503487][   T35]  do_syscall_64+0xe2/0xf80
[  612.504922][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.506819][   T35]  ? trace_irq_disable+0x37/0x100
[  612.508364][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.628191][   T35] RIP: 0033:0x7f5e2c39bfa7
[  612.629747][   T35] RSP: 002b:00007ffcb804ff88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  612.914177][   T35] RAX: ffffffffffffffda RBX: 00007f5e2c615f40 RCX: 00007f5e2c39bfa7
[  612.916987][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  612.919565][   T35] RBP: 00007f5e2c6167b8 R08: 0000000000000000 R09: 0000000000000000
[  613.089586][   T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  613.114044][   T35] R13: 0000000000000003 R14: 00007ffcb80501c8 R15: 0000000000000000
[  613.116568][   T35]  </TASK>
[  613.248188][   T35] INFO: task syz-executor:15919 blocked for more than 148 seconds.
[  613.536977][   T35]       Not tainted syzkaller #0
[  613.538777][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  613.544957][   T35] task:syz-executor    state:D stack:24184 pid:15919 tgid:15919 ppid:1      task_flags:0x400140 flags:0x00080002
[  613.548702][   T35] Call Trace:
[  613.549801][   T35]  <TASK>
[  613.814338][   T35]  __schedule+0x14ef/0x4fb0
[  613.815907][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  613.817874][   T35]  ? __pfx___schedule+0x10/0x10
[  613.819622][   T35]  ? schedule+0x90/0x360
[  613.836531][   T35]  schedule+0x164/0x360
[  613.838061][   T35]  schedule_preempt_disabled+0x13/0x30
[  613.839688][   T35]  __mutex_lock+0x829/0x1340
[  613.844908][   T35]  ? __mutex_lock+0x5cc/0x1340
[  613.846385][   T35]  ? fib6_rules_net_exit_batch+0x20/0xc0
[  613.848098][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  613.849711][   T35]  fib6_rules_net_exit_batch+0x20/0xc0
[  614.344465][   T35]  ? __pfx_fib6_rules_net_exit_batch+0x10/0x10
[  614.346483][   T35]  ops_undo_list+0x52b/0x940
[  614.347957][   T35]  ? __pfx_ops_undo_list+0x10/0x10
[  614.349568][   T35]  ? ops_init+0x469/0x5c0
[  614.375109][   T35]  setup_net+0x2f0/0x340
[  614.376501][   T35]  ? __pfx_setup_net+0x10/0x10
[  614.378007][   T35]  ? preinit_net+0x47d/0x780
[  614.379476][   T35]  copy_net_ns+0x3e2/0x570
[  614.406055][   T35]  create_new_namespaces+0x3e7/0x6a0
[  614.407803][   T35]  ? security_capable+0x7e/0x2c0
[  614.409392][   T35]  unshare_nsproxy_namespaces+0x11a/0x160
[  614.422914][   T35]  ksys_unshare+0x4f4/0x900
[  614.424529][   T35]  ? fput_close_sync+0x11f/0x240
[  614.426073][   T35]  ? __pfx_ksys_unshare+0x10/0x10
[  614.427751][   T35]  __x64_sys_unshare+0x38/0x50
[  614.429345][   T35]  do_syscall_64+0xe2/0xf80
[  614.753094][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.755678][   T35]  ? trace_irq_disable+0x37/0x100
[  614.757796][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.770903][   T35] RIP: 0033:0x7f1106d9bfa7
[  614.772380][   T35] RSP: 002b:00007ffd6b3d6608 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  614.810143][   T35] RAX: ffffffffffffffda RBX: 00007f1107015f40 RCX: 00007f1106d9bfa7
[  614.812757][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  614.815410][   T35] RBP: 00007f11070167b8 R08: 0000000000000000 R09: 0000000000000000
[  614.818212][   T35] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  615.080865][   T35] R13: 0000000000000003 R14: 00007ffd6b3d6848 R15: 0000000000000000
[  615.083326][   T35]  </TASK>
[  615.084334][   T35] INFO: task syz-executor:15923 blocked for more than 149 seconds.
[  615.087240][   T35]       Not tainted syzkaller #0
[  615.088977][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  615.694562][   T35] task:syz-executor    state:D stack:25368 pid:15923 tgid:15923 ppid:1      task_flags:0x400140 flags:0x00080002
[  615.699224][   T35] Call Trace:
[  615.707165][   T35]  <TASK>
[  615.708416][   T35]  __schedule+0x14ef/0x4fb0
[  616.493845][ T5840] Bluetooth: hci8: command 0x0406 tx timeout
[  616.495841][T15921] Bluetooth: hci0: command 0x0406 tx timeout
[  617.106766][   T35]  ? __pfx___schedule+0x10/0x10
[  617.108399][   T35]  ? schedule+0x90/0x360
[  617.109726][   T35]  schedule+0x164/0x360
[  617.114934][   T35]  schedule_preempt_disabled+0x13/0x30
[  617.116651][   T35]  __mutex_lock+0x829/0x1340
[  617.118131][   T35]  ? __mutex_lock+0x5cc/0x1340
[  617.119617][   T35]  ? ib_get_eth_speed+0x173/0x7f0
[  617.125061][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  617.126654][   T35]  ? do_raw_spin_unlock+0x4d/0x230
[  617.128207][   T35]  ? _raw_spin_unlock+0x28/0x50
[  617.129685][   T35]  ? ib_device_get_netdev+0x220/0x2f0
[  617.492943][   T35]  ib_get_eth_speed+0x173/0x7f0
[  617.494936][   T35]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  617.497045][   T35]  ? ib_query_port+0x384/0x830
[  617.498940][   T35]  siw_query_port+0x3c/0x4a0
[  617.568628][   T35]  ib_setup_port_attrs+0x26e/0x2140
[  617.614364][   T35]  ? rcu_is_watching+0x15/0xb0
[  617.615930][   T35]  ? trace_contention_end+0x39/0x100
[  617.617600][   T35]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  617.619317][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  617.751532][   T35]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  617.753521][   T35]  ? device_add+0x70b/0xb70
[  617.754961][   T35]  add_one_compat_dev+0x448/0x650
[  617.756542][   T35]  ? down_read+0x272/0x2e0
[  617.757906][   T35]  rdma_dev_init_net+0x243/0x2f0
[  617.759472][   T35]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  617.780892][   T35]  ? trace_kmalloc+0x1f/0xb0
[  617.782455][   T35]  ? __kmalloc_noprof+0x42d/0x7e0
[  617.784081][   T35]  ops_init+0x35c/0x5c0
[  617.785418][   T35]  setup_net+0x118/0x340
[  617.786781][   T35]  ? __pfx_setup_net+0x10/0x10
[  617.788234][   T35]  ? preinit_net+0x47d/0x780
[  617.789689][   T35]  copy_net_ns+0x3e2/0x570
[  617.883434][   T35]  create_new_namespaces+0x3e7/0x6a0
[  617.885138][   T35]  ? security_capable+0x7e/0x2c0
[  617.886681][   T35]  unshare_nsproxy_namespaces+0x11a/0x160
[  617.888493][   T35]  ksys_unshare+0x4f4/0x900
[  617.889950][   T35]  ? fput_close_sync+0x11f/0x240
[  617.932449][   T35]  ? __pfx_ksys_unshare+0x10/0x10
[  617.934047][   T35]  __x64_sys_unshare+0x38/0x50
[  617.935554][   T35]  do_syscall_64+0xe2/0xf80
[  617.937022][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.938933][   T35]  ? trace_irq_disable+0x37/0x100
[  618.042695][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.045035][   T35] RIP: 0033:0x7fabd819bfa7
[  618.046746][   T35] RSP: 002b:00007ffed73ce238 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  618.049940][   T35] RAX: ffffffffffffffda RBX: 00007fabd8415f40 RCX: 00007fabd819bfa7
[  618.083366][   T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  618.086401][   T35] RBP: 00007fabd84167b8 R08: 0000000000000000 R09: 0000000000000000
[  618.089437][   T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  618.172608][   T35] R13: 0000000000000003 R14: 00007ffed73ce478 R15: 0000000000000000
[  618.175672][   T35]  </TASK>
[  618.259352][   T35] INFO: task syz-executor:15926 blocked for more than 153 seconds.
[  618.277535][   T35]       Not tainted syzkaller #0
[  618.279364][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  618.294054][   T35] task:syz-executor    state:D stack:25368 pid:15926 tgid:15926 ppid:1      task_flags:0x400140 flags:0x00080002
[  618.298289][   T35] Call Trace:
[  618.299341][   T35]  <TASK>
[  618.311100][   T35]  __schedule+0x14ef/0x4fb0
[  618.312939][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  618.314973][   T35]  ? __pfx___schedule+0x10/0x10
[  618.316869][   T35]  ? schedule+0x90/0x360
[  618.318528][   T35]  schedule+0x164/0x360
[  618.900284][   T35]  schedule_preempt_disabled+0x13/0x30
[  618.902178][   T35]  __mutex_lock+0x829/0x1340
[  618.903802][   T35]  ? __mutex_lock+0x5cc/0x1340
[  618.905377][   T35]  ? register_netdevice_notifier_net+0x1a/0xa0
[  618.907500][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  618.909160][   T35]  ? net_generic+0x1e/0x240
[  618.925083][   T35]  ? net_generic+0x1e/0x240
[  618.926613][   T35]  register_netdevice_notifier_net+0x1a/0xa0
[  618.928498][   T35]  ops_init+0x35c/0x5c0
[  618.929964][   T35]  setup_net+0x118/0x340
