last executing test programs:

2m7.378166837s ago: executing program 0 (id=4827):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24"], 0x140}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x406, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000a0}, 0x20004044)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={<r7=>0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x3}, &(0x7f0000000080)=0x90)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
mkdirat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x1ff)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000240)={r7, 0x101, 0x94, "d92dee2bb2d5f067bd75d87494e73c1ee0579ed62e1191b37c319145bc62370c78e7ec22a5723d0c254420975746fc21658df3f274ce6490d57ca1419d1ff48fda9b21ac86fb15456c139a7c911f992774aecff085a7868c8e708ae4790323782a55d384c58a7ee0124ca847c3a231671d95c4ca4b6d12c4926e46bcff0b7671cad06038f370e3bb37aa7f50abf7abfa1d0c2401"}, 0x9c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)

2m7.307880049s ago: executing program 0 (id=4828):
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3) (async)
socket$inet6(0xa, 0x2, 0x40000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000000000084000000ffffffff"], 0x10}}], 0x2, 0xc88c5) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x3c, 0x1, '\x00', [@pad1, @pad1, @pad1]}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
unshare(0x4000400) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000180200002020702500000000002020207b0af8ff00000000bda1000000f8ffffffb79cabd20e000000b703006490451700850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
pipe(&(0x7f0000000440))
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6(0xa, 0x80001, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0)

2m7.293622164s ago: executing program 0 (id=4831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'ipvlan0\x00', 0x3923})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x20000800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r14 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000800)={{r14, &(0x7f0000000640)='CHECKSUM\x00', 0x501442, &(0x7f0000000680)={@align=0x5, {0x4, 0x1000, 0x2, 0x8}}, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0xfff}, {[0x2, 0x3, 0x0, 0x85]}, 0x6, 0x30, &(0x7f00000007c0)=""/48})
sendmsg$DEVLINK_CMD_TRAP_GET(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r13, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x21}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r11, @ANYRES16=r9, @ANYRESHEX=r12, @ANYRES32=r8, @ANYBLOB="08000300", @ANYRESOCT=r0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r15 = socket(0x2b, 0x1, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r15)

2m7.217559139s ago: executing program 0 (id=4833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204]}}}}]}, 0x88}}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x6)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
recvmmsg(r9, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000080)={<r11=>r7, 0x4, 0x81})
bind$llc(r11, &(0x7f00000000c0)={0x1a, 0x206, 0x2, 0x8, 0x8, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e00)={0x54, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb5a}, {0x6}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}]}, 0x54}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan0\x00'})

2m7.108081046s ago: executing program 0 (id=4835):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000900000000000000000000000105"], 0x0, 0x5b}, 0x28)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3000fc57240af6dfebd50c000000000e0001002bbd7000f8dbdf2504004f8008007571", @ANYRES32=0x0, @ANYBLOB="14006a8008002e8004000b0008001c00ac14143d"], 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000007, 0x4010, 0xffffffffffffffff, 0x85893000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000008000200030000000800010003000000"], 0x24}}, 0x4080)
unshare(0x22020600)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1, @multicast1}, 0xc)
setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4c23, @empty}}}, 0x108)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
pwrite64(r7, &(0x7f0000000380)='k', 0x1, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r4, 0x6ecca000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @remote}, {0x2, 0x4e26, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000, 0x1, 0x15})

2m6.776899739s ago: executing program 0 (id=4843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)

2m5.848092968s ago: executing program 1 (id=4852):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x2b, "5c09b89e1e00000800000e00000000000000"}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r2, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14962168cc09dabd987f00ffffffffffffff2e43061b8a6bcfe5ef10c1a59ab661055d13b6efe9dcd06248d4920492c4a7e95b3dee2e2e1160616493be"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x2, 'macvlan1\x00', {0x8001}, 0x8})

2m5.644582559s ago: executing program 1 (id=4853):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000900000000000000000000000105"], 0x0, 0x5b}, 0x28)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000900)={0x20, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0x4, 0x16a}]}, 0x20}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000007, 0x4010, 0xffffffffffffffff, 0x85893000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080fffb11010008000200030000000800010003000000"], 0x24}}, 0x4080)
unshare(0x22020600)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1, @multicast1}, 0xc)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000600)={0xb, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x133)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r8 = openat$cgroup_ro(r6, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
pwrite64(r7, &(0x7f0000000380)='k', 0x1, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r9, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x4e26, @multicast2}, 0x2a0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x100000, 0x0, 0x5})

2m5.427337544s ago: executing program 1 (id=4854):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c000280060012"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x10008, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c, 0x0}}], 0x1, 0x24000000)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x0, r5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10})
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010)
sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2m5.366394673s ago: executing program 1 (id=4855):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, "db12e3"}, 0x4) (async)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80000)
sendto$inet6(r1, &(0x7f00000000c0)="75e8b29415672a53dfb66c91f45168e78c29c7f50a32f3cd937cbff7ce7a064043d4700f8530a03beb0d5a2bc538f9ad6da30e32be0b17c770dabec213351e905db533f66a0f519987287f34b59e01a1a4e78a519d2d18a4f664257dd2c25fb7d62d178aa8f96444f339f94b174825f7faf2a49beae12e8a3dfaf28b09593467c3183704547b64e3a1f2517d10e2146ab331d29f358d1d4486aa22a96bf4d257860086144087e6250fdfd65dfd011ae12bc1febfc9d40c6c7d83989943012f", 0xbf, 0x80, &(0x7f0000000180)={0xa, 0x4e21, 0x7f, @local, 0x8}, 0x1c) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x64, "88505dafe747f69975a887a49fd573b2b6c885a1275766456cedf663514bb1f7b823a68ba6bc4e8a9900edc6bf56abb4cff3a7b6cf33b03b3e3d01833263c17bdd7f2f64abf4a6b056c603cf6f62a7c934b5da83697d95675b19e4f304a65d4aff65aa24"}, &(0x7f0000000280)=0x88)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0x3}, 0x1}, 0x10) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{<r2=>r0, &(0x7f0000000300)='\x00', 0x4a0403, &(0x7f0000000340)={@_ha_fsid={[0xffffff76, 0xffffffff]}, {0x6, 0xfff8, 0x400, 0x1000}}, 0x7, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0xe64b}, {[0x800, 0x3f6c80b0, 0x100, 0x1000]}, 0xbe, 0xb2, &(0x7f0000000400)=""/178})
setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000540)=0x1, 0x4) (async)
sendmsg$rds(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/183, 0xb7}], 0x1, &(0x7f00000007c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5266}, &(0x7f0000000680)=0x57d, &(0x7f00000006c0)=0x8001, 0x7, 0x80000001, 0x2, 0xeda, 0x23, 0xa}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000700)=""/118, 0x76}, &(0x7f0000000780), 0x23}}], 0x88, 0x20004081}, 0x2004012) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000900)={'sit0\x00', &(0x7f00000008c0)={@rand_addr=' \x01\x00', @broadcast, 0x1f, 0x11}}) (async)
r3 = accept$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000009c0), &(0x7f0000000a00)=0x8) (async)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000b40)={&(0x7f0000000a80)=""/150, 0x96, 0x97, 0x7})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan3\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
connect$vsock_stream(r2, &(0x7f0000000d40)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000e40)={r10, r2, 0x8, 0x3f, &(0x7f0000000e00)="28cab5638d25a9e6cfe17036d350ac0e9cb6969ecb5f8208408d022330ab8694799246039b0a103607b4783387867a98d9bfa11ca42d22226d061398fb4dfc", 0x4, 0x9, 0x3, 0x1, 0x6, 0x6, 0x401, 'syz0\x00'}) (async)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000f00)=0x5, &(0x7f0000000f40)=0x4) (async)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000f80)={0x9, {{0xa, 0x4e22, 0x7, @private0, 0x9}}, {{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}}}, 0x108) (async)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001100)={0x3, &(0x7f00000010c0)=[{0xa, 0x6, 0x8, 0x1}, {0xf, 0x8, 0x10, 0x3}, {0x81, 0xf8, 0x3, 0x2}]}, 0x10) (async)
syz_emit_ethernet(0x3a, &(0x7f0000001140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@arp={0x806, @generic={0x338, 0x80f3, 0x6, 0x8, 0x1, @remote, "56e3915e089a0f1c", @link_local, "f145f429461b5bdbfd68eae0507ab6bc"}}}}, 0x0) (async)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r11, 0x4008662c, &(0x7f00000011c0)={0x0, 0x0, "efbcc1e1c34967e3f8d17ff531d8bd80"})

2m5.309929058s ago: executing program 1 (id=4856):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="28ffdbdf2500001000"/20, @ANYRES32=0x0, @ANYBLOB="000002000208000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x30, r0, 0x6cb8f000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8)
r9 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r9, &(0x7f0000000180)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r12, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001840)='`g', 0x2}], 0x1}}], 0x1, 0x20000013)
shutdown(r12, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2m5.227316405s ago: executing program 1 (id=4858):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0x101, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)

1m51.467102862s ago: executing program 32 (id=4843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)

1m50.212729708s ago: executing program 33 (id=4858):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0x101, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)

45.372934246s ago: executing program 4 (id=5641):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000000c0), 0x0}, 0x20) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@local, 0x6, 0x0, 0xff, 0x0, 0x2, 0xfffc}, &(0x7f00000004c0)=0x20) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2ea)

45.08792749s ago: executing program 4 (id=5648):
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000540)=ANY=[@ANYBLOB="6dfa0c3031fd1351414ce2d1e7739e14c82262f131006c8ae22d2097c329a7c2a120718d00dd33b038f29603d8c770f4f1e9d3921208ba8b1537da13e61ed8501fc265d75a30cd8c36589b9389188b74e6af64111f3d1212cc216c", @ANYRES16=<r0=>0x0, @ANYBLOB="00022dbd7000fedbdf251300000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x40044)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0xfffc, 0x9, 0x0, 0x9}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket(0x2a, 0x800, 0x1c90)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x871bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0xffff, 0xd}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000), 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r10, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'vxcan1\x00', 0x1}, 0x18)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0xd8}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400d8cf7000fbdbdf25490000000c009900000b00002e000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x4830)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r11, @ANYRESOCT=r1, @ANYRESOCT, @ANYRESOCT=r0], 0x58}}, 0x4004090)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}})
ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={r3, 0x0, 0x3}, 0x8)

44.149489643s ago: executing program 4 (id=5656):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000884)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6}}}, 0x24}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x6, 0x7, 0x7fff, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88)

43.908671154s ago: executing program 4 (id=5658):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={<r2=>0xffffffffffffffff, &(0x7f0000000080)='{\x00', 0x400000, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x993b]}, {0x7, 0x401, 0x401, 0xb31}}, 0x2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000140)=0x8})
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r4, @ANYBLOB="91040500000000002000128008000100736974001400028006000f000100000008000300ac1414"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r4}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
unshare(0x62040200)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f0000000500), &(0x7f0000000240)=r8}, 0x20)
setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
read(r8, &(0x7f0000000080)=""/5, 0x5)
write(r7, &(0x7f0000000140)=';r8', 0x3)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)
write$tun(r5, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffe}}}}, 0x36)

43.608620095s ago: executing program 4 (id=5664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x29, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x25, 0x1, 0x35, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0x460c6}, 0x8000, 0x10, 0x8, 0x300002}})
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x29, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x25, 0x1, 0x35, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0x460c6}, 0x8000, 0x10, 0x8, 0x300002}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) (async)

43.51950197s ago: executing program 4 (id=5665):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x63, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x24000001)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
unshare(0x2020400)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3b071, 0xffffffffffffffff, 0x4000)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
listen(r5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r7, 0x638)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x33, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf}, @jmp={0x5, 0x1, 0xb, 0x4, 0x4, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9}, 0x94)
setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x1000006, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x80)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'veth0_virt_wifi\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00"], 0x66)

28.50672632s ago: executing program 34 (id=5665):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x63, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x24000001)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
unshare(0x2020400)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3b071, 0xffffffffffffffff, 0x4000)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
listen(r5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r7, 0x638)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x33, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf}, @jmp={0x5, 0x1, 0xb, 0x4, 0x4, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9}, 0x94)
setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x1000006, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x80)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'veth0_virt_wifi\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00"], 0x66)

13.574810605s ago: executing program 2 (id=5895):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)="9938a927b7b3ee320bb4a7667fe8978f8100", 0x12}, 0x1, 0x0, 0x100000000000000, 0x8054}, 0x800)

13.568588655s ago: executing program 2 (id=5896):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x10, r8, 0xcff38000)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0xc2d7, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r13, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801400000000050400000008000cb8ad17004e244e2414000200fc0000000000000000000000000000041400010020011300170000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000030003904000000006ce0660000000000", @ANYBLOB="678dbf0b22b6b10d0e303a8c08686744d1d0653d5ea8f555c948f6596f03e014217c2acdc80580e814129e5fae41bd3bc2e36c16061a349ae203359c656ab15011483045cceb5cd3b9c8ed7fad0c5b6463184f082dd632c0365a1320349de00b52278e99f5e3345c1e17b5703b9f9797fa4876a34b922c9243705aaeea26009f0cfcab1731eeef722127ff6cb382e82dcdd553b3e391b061471b078b765c25bf1c706b5bd07d1d9e14bf0048248e9c193af88e70cdecc2dbc7b529a46a7efd4c2d5d7f8754ab71535fc6aacd72b92c5bfe2b8d34d82137", @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0)

13.503691174s ago: executing program 2 (id=5897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x84, 0x21000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404000c}, 0x0)

13.503135554s ago: executing program 2 (id=5898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x8b9, @private2, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000000c0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}}], 0x20, 0x4008000}, 0x28008841)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62001}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x5c}}, 0x0)

13.415860813s ago: executing program 2 (id=5899):
unshare(0x6a060280)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

13.295496951s ago: executing program 2 (id=5900):
unshare(0x6a040000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f00000000c0)=0xa4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0)
recvmsg$can_j1939(r3, &(0x7f00000006c0)={&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000500)=""/197, 0xc5}], 0x2, &(0x7f0000000640)=""/108, 0x6c}, 0x40000022)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000300))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000884)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0x9, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x6]}})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x6, 0x7, 0x7fff, 0x6ca], 0x1, 0x0, 0x0, [{}]}, 0x88)

1.539849317s ago: executing program 3 (id=5978):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x92}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0)

1.404453043s ago: executing program 3 (id=5982):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x800, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000390425bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="81b80000000000002400572d2100a71b42d938a5bd8612800b000100697036746e6c000020000280140103006f6d96584dc6818424e951b4fc0000000000000000000000000000010800080022000000"], 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000682c057d8215319024e0e8d81a647d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$igmp6(0xa, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000440)=0x51e, 0x12)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r3, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c00010023bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000000028000004003480140035006272696467653000080000"], 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
recvmsg(r6, &(0x7f0000000600)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000680)=""/119, 0x77}], 0x2, &(0x7f0000000540)=""/152, 0x98}, 0x102)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1007c, r8})
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r9], 0x28}}, 0x0)
ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000001c0)=@buf)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4)
sendto$packet(r0, &(0x7f0000000640)="e8b7703aa9", 0x5, 0x48000, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14)

1.093672907s ago: executing program 5 (id=5983):
r0 = socket$inet(0xa, 0x801, 0x0)
sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x4f, 0x1}}], 0x18}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040085}, 0x20048900)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e1f, 0xb6, @mcast1, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=<r6=>r5, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="a42804000000000014000300697036746e6c3000000000000000000008100a0043a8dc339cda9001be61388e5a4d68673ee68eff6f6f580da1549f09fb1f57e7a29f68d2c23a0db3ddd179769b38dfd96bff8ea7ffffffff043b148966af574377b2d3b0fc1559beee2e5bf0d4c9407bbdcbf321962d9c1ab5f61456ce258935bb5050", @ANYRESDEC=0x0, @ANYBLOB="eff72953ec76a5e046a93ef320442eec6f1494bb37c63e3b8fa393b1dd89dac5aed9fa258c"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0804d1ff00000000f89af6900003000006945920c1abf2274421fa87561b4ee0bee24a1648aa9c14d4"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)
close(0xffffffffffffffff)
socket(0x28, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r5, r8, 0x0, 0x5, 0x1}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000034c0))
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)

1.043769333s ago: executing program 5 (id=5984):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000900000000000000000000000105"], 0x0, 0x5b}, 0x28) (async)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="30000000130001002bbd7084f7c3a05c33de00f8dbdf2504", @ANYRES32=0x0, @ANYBLOB="14006a8008002e8004000b0008001c00ac141443"], 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000007, 0x4010, 0xffffffffffffffff, 0x85893000) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01008002fbff1d8911976f1e00000000edff000108002ed05c48a4c13c2956000003000000080000000000ddff3f045ade3431d03927c2608f7beddba499f44f19d7f2b72ccda7d7420e5783e968f30d26e1cd79e93d95bcbd9100ec73965aac18aa70b4203166e1383235670f2151638cc8aecbcc5593aa59edb188b9abd59b966ee3a3db04ee2a0922293c7225a248f81c466aa7a7013eb1a4f851a05b4ed3f7264f41b2f8fe461b153c86d35738e5c6b99236bcffeabf2010c96247f5753adf1c3e8ce861c6ce7f734751361a291ba8dc31de5a50264251a5af3397a4c2b2b25dd23ced89519cb7d3dd3e95b0da"], 0x24}}, 0x4080) (async)
unshare(0x22020600) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1, @multicast1}, 0xc)
setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
pwrite64(r7, &(0x7f0000000380)='k', 0x1, 0xc) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x4e26, @multicast2}, 0x2a0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x100000, 0x0, 0x5})

791.655582ms ago: executing program 5 (id=5985):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00\\'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080060021"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x101ffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xa00}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe4, 0x10, 0x509, 0x70bd29, 0x0, "", [@nested={0xd4, 0x67, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @u32=0xffffff15}, @generic="b812139e98acb4b04d37664e50566f48b611f64db287b25fb648103db68af0f165fcfac4d1e5d5fb1e81501dc4a1335c5a88cfe1758329ad0e8374d64db3d22e288f013511acec2deab7fe99a5d463fd48eb083b2da8b7d7e1a5144383f216e4752d1f6aba78b5506ac716244389bc22cdcfa56a364e3c79b42996a22f5ba1a1a5d5f278c05f1a87d99f84852d997a81d3778ba757c48baa70521a13d01e89961754eac08bcc02047287f0f81ca0c3330a57dd74b1bdd10f90c577fa202f73a33d93a2e774044d83"]}]}, 0xe4}], 0x1}, 0x40040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000d0400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)

683.243163ms ago: executing program 5 (id=5986):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000003000000000000000000000900000000000000000000000105"], 0x0, 0x5b}, 0x28)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c4}], 0x1, 0x0, 0x0, 0x8000}, 0x488c1)
unshare(0x6a040000)
mmap(&(0x7f0000857000/0x3000)=nil, 0x3000, 0x3000006, 0x4010, r1, 0x85893000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRESHEX, @ANYRES16=r4, @ANYRES32=r0], 0x24}}, 0x4080)
unshare(0x22020600)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000340)=0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @remote}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @multicast1, @multicast1}, 0xc)
setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
pwrite64(r0, &(0x7f0000000380)='k', 0x1, 0xf)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x5}}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0xb7cdf000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20)
sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0xb8f, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0)

552.609841ms ago: executing program 5 (id=5987):
syz_emit_ethernet(0xda, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000a42b00fc010000000000000000000000000001fe8000000000000000000000000000aa3b"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
connect(r2, &(0x7f0000000080)=@can={0x1d, r3}, 0x80)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be000c2fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

532.873326ms ago: executing program 3 (id=5988):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async)
write(0xffffffffffffffff, &(0x7f00000003c0)="fa1569d0cc9915455d2871ca031d5c09db2f6cebc8acccae0082c65f3d24d97ca9b727995192f313bf96fbb6f8c091588390296771cea0d347618c1e828b6803565e509b533db881da5526430117227e74878aad932f47baf12e2967e896202575bbf454fb652e3406b5c0b153b07633ec9cfd01850b37a9fdd0e32219ae66a2bec4d81e5d6a2fda4b91f2beb87bf962fa89accab5444494db5f5a244432f47561eccb2831a5e214412265d52cbad86cada3b9722616d0a63ba94a294014db0a1fca97702aed38294c0ac780173cfe2967d187a26889ba9ea8d9a22f2c59a6175eddaec15ed5b3dfef2529e33356fcfd2a0e15", 0xf3) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x42) (async)
shutdown(r4, 0x1) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={<r5=>0x0, 0x8000}, &(0x7f0000000100)=0x8) (rerun: 32)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000280)={r5, 0x2}, &(0x7f00000002c0)=0x8) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x1000, @empty, 0x697d}}, 0x6, 0x3, 0x20080000, 0x9, 0x2, 0x10, 0x1}, 0x9c) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

383.995775ms ago: executing program 3 (id=5989):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8)
unshare(0x62040200)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="0800080000030000010000000000450000280000000000899078ac1e0001e000000100004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cbc0d863dfdc686"], 0x36)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) (async)
unshare(0x62040200) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="0800080000030000010000000000450000280000000000899078ac1e0001e000000100004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cbc0d863dfdc686"], 0x36) (async)

303.576675ms ago: executing program 5 (id=5990):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x1, 0x38, [0xe6, 0x7, 0x8d, 0x80], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$inet(0x2, 0xa, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcff, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0xa, 0x6, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
openat$cgroup(r8, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r6, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000002c0)='syz1\x00', 0x5)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r9)
sendmsg$NFC_CMD_SE_IO(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf25170000000c00060003000000030000000c000600030000000300000070b85f904c2527e753616af2e3478addd756d28ed90868d4f20db0667dd634e719313f02d87f89d9dfcc7573a8e4bb4859b01214d04ec75bf7e4c11ff73b9a3068b34004b3ca85376d3a025024229ebf890a8a225f1d208184cb83b6547b76fc68135850ec7997a584fcf7f10d9f8e5f7a950aae643baf30b2f4ddf8ecb85b36355d82b50785f5e2b799d98bd5748295fe222d315ed32aee5cd0a4dd5fdbb3c0bce65ece69b55b3340d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)

215.009403ms ago: executing program 3 (id=5991):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x4, 0x3, 0xfe, 0x0, 0x0, @remote, @mcast2, 0x478e4ab3fdaa1dc8, 0x8000, 0x8000002}})
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000430000000400000008"], 0x50) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvfrom$unix(r0, &(0x7f0000000080)=""/56, 0x38, 0x10000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040))

0s ago: executing program 3 (id=5992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_PORT_SELF={0x8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x60000090)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

kernel console output (not intermixed with test programs):

05] veth1_vlan: entered promiscuous mode
[  605.805369][T24105] veth0_macvtap: entered promiscuous mode
[  605.828052][T24105] veth1_macvtap: entered promiscuous mode
[  605.850179][T24105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.865031][T24105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.886574][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.890865][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.898149][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.902587][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.972148][T24198] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  605.989033][T24198] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  606.025287][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.030053][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.069018][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.071807][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.194254][T24063] Bluetooth: hci3: command tx timeout
[  606.328603][T24221] netlink: 'syz.2.4960': attribute type 29 has an invalid length.
[  606.957177][T24236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4963'.
[  607.256331][T24249] netlink: 'syz.3.4967': attribute type 7 has an invalid length.
[  607.279246][T24249] netlink: 'syz.3.4967': attribute type 7 has an invalid length.
[  607.282445][ T5723] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  607.286045][ T5723] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  607.290298][ T5723] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  607.294882][ T5723] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  607.331022][T24252] netlink: 'syz.4.4969': attribute type 29 has an invalid length.
[  607.483980][T24063] Bluetooth: hci4: command tx timeout
[  607.549171][T24259] vlan2: entered allmulticast mode
[  607.551838][T24259] bond0: entered allmulticast mode
[  607.556747][T24259] bond_slave_0: entered allmulticast mode
[  607.559357][T24259] bond_slave_1: entered allmulticast mode
[  607.603965][T24261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4971'.
[  607.705842][T24267] syzkaller1: entered promiscuous mode
[  607.716072][T24272] x_tables: duplicate entry at hook 1
[  607.718525][T24267] syzkaller1: entered allmulticast mode
[  607.766091][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4974'.
[  607.777955][T24272] netlink: 'syz.3.4974': attribute type 1 has an invalid length.
[  608.242466][T24281] netlink: 'syz.4.4977': attribute type 27 has an invalid length.
[  608.247375][T24281] netlink: 'syz.4.4977': attribute type 4 has an invalid length.
[  608.251210][T24281] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4977'.
[  608.257490][T24281] syz_tun: entered allmulticast mode
[  608.275569][T24063] Bluetooth: hci3: command tx timeout
[  608.298422][T24285] bond0: (slave ip6tnl0): refused to change device type
[  608.340304][T24288] syzkaller1: entered promiscuous mode
[  608.342128][T24288] syzkaller1: entered allmulticast mode
[  608.348729][T24290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  608.860605][T24298] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  608.865189][T24298] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  608.897621][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4984'.
[  608.903323][T24300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4984'.
[  609.553612][T24063] Bluetooth: hci4: command tx timeout
[  609.998964][T24351] netlink: 'syz.4.4996': attribute type 1 has an invalid length.
[  610.008476][T24351] veth0_macvtap: Device is already in use.
[  610.021952][T24351] veth0_macvtap: Device is already in use.
[  610.297193][T24364] sctp: [Deprecated]: syz.3.5000 (pid 24364) Use of struct sctp_assoc_value in delayed_ack socket option.
[  610.297193][T24364] Use struct sctp_sack_info instead
[  610.304043][T24362] syzkaller1: entered promiscuous mode
[  610.304061][T24362] syzkaller1: entered allmulticast mode
[  610.353918][T24063] Bluetooth: hci3: command tx timeout
[  610.469183][T24372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5002'.
[  610.481088][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5002'.
[  610.702406][T24388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5008'.
[  610.742738][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'.
[  610.756558][T24389] syzkaller1: entered promiscuous mode
[  610.758985][T24389] syzkaller1: entered allmulticast mode
[  610.837674][T24396] bridge0: port 3(syz_tun) entered blocking state
[  610.839789][T24396] bridge0: port 3(syz_tun) entered disabled state
[  610.841929][T24396] syz_tun: entered allmulticast mode
[  610.846444][T24396] syz_tun: entered promiscuous mode
[  610.848579][T24396] bridge0: port 3(syz_tun) entered blocking state
[  610.851414][T24396] bridge0: port 3(syz_tun) entered forwarding state
[  611.039859][T24410] netlink: 'syz.3.5016': attribute type 29 has an invalid length.
[  611.045189][T24410] netlink: 'syz.3.5016': attribute type 29 has an invalid length.
[  611.582123][ T5723] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  611.585564][ T5723] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.617948][T24467] ipip0: entered promiscuous mode
[  611.634057][T24063] Bluetooth: hci4: command tx timeout
[  611.709836][T24470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.715989][T24470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.795684][T24470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.799051][T24470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.875756][T24470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  611.879959][T24470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.018345][T20858] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  612.021620][T20858] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.035413][T20858] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  612.038785][T20858] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.050643][T20858] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  612.054711][T20858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.075707][T20858] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  612.078963][T20858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  612.435963][T24487] __nla_validate_parse: 28 callbacks suppressed
[  612.435973][T24487] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5037'.
[  612.500933][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'.
[  612.687811][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  612.692475][   T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  614.960033][T24565] validate_nla: 20 callbacks suppressed
[  614.960047][T24565] netlink: 'syz.4.5054': attribute type 1 has an invalid length.
[  614.984067][T24565] bond1: entered promiscuous mode
[  614.986718][T24565] 8021q: adding VLAN 0 to HW filter on device bond1
[  615.124659][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5056'.
[  615.136610][T24572] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5056'.
[  615.513282][T24583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5058'.
[  615.730327][T24588] netlink: 'syz.4.5059': attribute type 1 has an invalid length.
[  615.740334][T24588] netlink: 'syz.4.5059': attribute type 2 has an invalid length.
[  615.872135][T24591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5060'.
[  615.931706][T24593] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5061'.
[  615.955105][T24063] Bluetooth: hci4: command tx timeout
[  616.141842][T24597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5062'.
[  616.673678][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  616.795288][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5068'.
[  616.833834][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  617.231145][T24625] vlan2: entered promiscuous mode
[  617.233300][T24625] hsr0: entered promiscuous mode
[  617.237652][T24625] vlan2: entered allmulticast mode
[  617.239940][T24625] hsr0: entered allmulticast mode
[  617.241898][T24625] hsr_slave_0: entered allmulticast mode
[  617.248864][T24625] hsr_slave_1: entered allmulticast mode
[  617.351552][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5071'.
[  617.501655][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'.
[  617.526760][T24644] ip6tnl9: entered allmulticast mode
[  617.602010][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5076'.
[  617.608157][T24649] lo speed is unknown, defaulting to 1000
[  617.612100][T24649] lo speed is unknown, defaulting to 1000
[  617.619678][T24649] lo speed is unknown, defaulting to 1000
[  617.635012][T24652] smc: removing ib device syz1
[  617.638642][T24649] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  617.647417][T24649] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  617.654149][T24649] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  617.666151][T24649] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  617.682987][T24649] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  617.705264][T24655] lo speed is unknown, defaulting to 1000
[  617.740761][T24652] smbdirect: ib_dev[syz1] removed
[  617.744378][T24649] lo speed is unknown, defaulting to 1000
[  617.808066][T24649] lo speed is unknown, defaulting to 1000
[  617.841891][T24649] lo speed is unknown, defaulting to 1000
[  617.854277][T24649] lo speed is unknown, defaulting to 1000
[  617.860063][T24649] lo speed is unknown, defaulting to 1000
[  618.195061][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'.
[  618.304488][T24669] lo speed is unknown, defaulting to 1000
[  618.307983][T24670] syzkaller0: entered promiscuous mode
[  618.309830][T24670] syzkaller0: entered allmulticast mode
[  618.316212][T24670] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5081'.
[  618.325333][T24670] netlink: 'syz.4.5081': attribute type 4 has an invalid length.
[  618.556317][T24673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5082'.
[  618.560821][T24673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  618.706573][T24675] lo speed is unknown, defaulting to 1000
[  618.816026][T24678] lo speed is unknown, defaulting to 1000
[  618.962567][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5085'.
[  618.971745][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5085'.
[  618.993378][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5085'.
[  618.997309][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5085'.
[  619.001838][ T5723] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  619.010642][ T5723] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  619.018245][ T5723] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  619.027306][ T5723] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  619.217925][T24690] syzkaller1: tun_chr_ioctl cmd 1074025677
[  619.221704][T24690] syzkaller1: linktype set to 778
[  619.285942][T24692] lo speed is unknown, defaulting to 1000
[  619.629123][T24704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5093'.
[  619.968313][T24713] lo speed is unknown, defaulting to 1000
[  620.132039][T24719] netlink: 'syz.3.5097': attribute type 1 has an invalid length.
[  620.173100][    T9] lo speed is unknown, defaulting to 1000
[  620.451827][T24735] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  620.585525][T24755] lo speed is unknown, defaulting to 1000
[  620.623150][T24762] netlink: 'syz.2.5109': attribute type 4 has an invalid length.
[  621.036277][T24799] xt_hashlimit: max too large, truncated to 1048576
[  621.037525][T24797] macsec1: entered promiscuous mode
[  621.038671][T24799] xt_hashlimit: overflow, try lower: 137438953472/8
[  621.084506][T24799] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  621.180583][T24801] x_tables: duplicate underflow at hook 3
[  621.471011][T24842] sctp: [Deprecated]: syz.4.5133 (pid 24842) Use of int in max_burst socket option deprecated.
[  621.471011][T24842] Use struct sctp_assoc_value instead
[  621.540306][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.655655][T24858] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  621.667378][T24858] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  621.695471][T24866] gretap0: entered promiscuous mode
[  621.758077][T24866] syz_tun (unregistering): left allmulticast mode
[  621.854306][T24877] ip6tnl11: entered promiscuous mode
[  621.926347][T24880] x_tables: duplicate underflow at hook 2
[  622.301247][T24901] lo speed is unknown, defaulting to 1000
[  622.430221][T24910] lo speed is unknown, defaulting to 1000
[  623.569917][T24938] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  623.572934][T24938] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  623.614515][T24940] syzkaller0: entered promiscuous mode
[  623.616703][T24940] syzkaller0: entered allmulticast mode
[  623.815786][T24952] __nla_validate_parse: 17 callbacks suppressed
[  623.815801][T24952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5162'.
[  623.821656][T24955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5163'.
[  623.821785][T24951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5162'.
[  624.142799][T24989] lo speed is unknown, defaulting to 1000
[  624.609707][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  624.879437][T25001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5174'.
[  625.233639][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  625.237082][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  626.655886][T25008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5176'.
[  626.710573][T25013] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5178'.
[  626.807232][ T5722] IPVS: starting estimator thread 0...
[  626.884318][T25014] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.889090][T25014] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.903538][T25020] IPVS: using max 65 ests per chain, 156000 per kthread
[  627.102072][T25014] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  627.114293][T25019] netlink: 'syz.2.5180': attribute type 12 has an invalid length.
[  627.352815][T25038] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  627.455476][T25049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5186'.
[  627.461633][T25045] lo speed is unknown, defaulting to 1000
[  627.522473][T25049] lo speed is unknown, defaulting to 1000
[  627.529145][T25050] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5186'.
[  627.543887][T25050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5186'.
[  627.547601][T25050] netlink: 'syz.3.5186': attribute type 4 has an invalid length.
[  627.568413][   T10] lo speed is unknown, defaulting to 1000
[  627.574870][   T10] syz2: Port: 1 Link DOWN
[  627.851151][T25059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5188'.
[  627.952289][T25068] lo speed is unknown, defaulting to 1000
[  628.222812][T25089] netlink: 'syz.4.5193': attribute type 1 has an invalid length.
[  628.256003][T25089] bond3: option mode: invalid value (7)
[  628.259314][T25089] bond3 (unregistering): Released all slaves
[  628.577887][T25098] lo speed is unknown, defaulting to 1000
[  628.599024][T25099] lo speed is unknown, defaulting to 1000
[  628.663026][T25115] sctp: [Deprecated]: syz.3.5199 (pid 25115) Use of int in maxseg socket option.
[  628.663026][T25115] Use struct sctp_assoc_value instead
[  630.679882][T25120] syzkaller1: entered promiscuous mode
[  630.682299][T25120] syzkaller1: entered allmulticast mode
[  630.700974][T25118] lo speed is unknown, defaulting to 1000
[  630.758079][T25125] __nla_validate_parse: 3 callbacks suppressed
[  630.758091][T25125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5201'.
[  630.818082][T25125] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5201'.
[  630.821864][T25125] netlink: 'syz.4.5201': attribute type 1 has an invalid length.
[  631.097304][T25142] lo speed is unknown, defaulting to 1000
[  631.180718][T25146] netlink: 756 bytes leftover after parsing attributes in process `syz.2.5207'.
[  631.186292][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5207'.
[  631.406322][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5206'.
[  631.487841][T25143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5206'.
[  631.496488][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5206'.
[  631.521726][T25143] veth1: entered allmulticast mode
[  631.533371][T25143] bond0: (slave veth1): Enslaving as an active interface with an up link
[  631.560356][T25142] bond0 (unregistering): (slave veth1): Releasing backup interface
[  631.592459][T25142] bond0 (unregistering): Released all slaves
[  632.110788][T25192] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5217'.
[  632.501435][T25190] syzkaller0: entered promiscuous mode
[  632.503342][T25190] syzkaller0: entered allmulticast mode
[  632.648835][T25197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  632.675843][T25198] syzkaller1: entered promiscuous mode
[  632.679311][T25198] syzkaller1: entered allmulticast mode
[  632.686562][T25194] lo speed is unknown, defaulting to 1000
[  632.962363][T25205] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.5222'.
[  633.137874][T25218] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5226'.
[  633.154826][T25215] lo speed is unknown, defaulting to 1000
[  633.161202][T25218] netlink: 'syz.2.5226': attribute type 4 has an invalid length.
[  633.198260][T25217] lo speed is unknown, defaulting to 1000
[  633.320168][T25220] bond3: invalid ARP target 0.0.0.0 specified for addition
[  633.323170][T25220] bond3: option arp_ip_target: invalid value (0)
[  633.328244][T25220] bond3 (unregistering): Released all slaves
[  633.349445][T25226] netlink: 'syz.2.5229': attribute type 29 has an invalid length.
[  633.989582][T25268] 8021q: adding VLAN 0 to HW filter on device bond22
[  634.123319][T25277] netlink: 'syz.2.5243': attribute type 1 has an invalid length.
[  634.212802][T25282] dummy0: left promiscuous mode
[  634.472395][T25295] batadv_slave_1: entered promiscuous mode
[  634.582746][T25294] batadv_slave_1: left promiscuous mode
[  634.674160][T25309] lo speed is unknown, defaulting to 1000
[  634.882975][T25316] lo speed is unknown, defaulting to 1000
[  635.205771][T25348] netlink: 'syz.3.5263': attribute type 4 has an invalid length.
[  635.211888][T25349] netlink: 'syz.2.5264': attribute type 15 has an invalid length.
[  635.239234][T25349] x_tables: ip_tables: osf match: only valid for protocol 6
[  635.248264][T25349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  635.373654][T25360] syzkaller1: entered promiscuous mode
[  635.376310][T25360] syzkaller1: entered allmulticast mode
[  635.685078][T25384] lo speed is unknown, defaulting to 1000
[  635.801612][ T5722] lo speed is unknown, defaulting to 1000
[  635.992752][T25403] lo speed is unknown, defaulting to 1000
[  636.039448][T25404] bond1: invalid ARP target 0.0.0.0 specified for addition
[  636.042482][T25404] bond1: option arp_ip_target: invalid value (0)
[  636.061430][T25404] bond1 (unregistering): Released all slaves
[  636.148114][T25409] __nla_validate_parse: 6 callbacks suppressed
[  636.148129][T25409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5279'.
[  636.387932][T25415] lo speed is unknown, defaulting to 1000
[  636.458061][T25420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5284'.
[  636.547792][T25424] lo speed is unknown, defaulting to 1000
[  636.611446][T25423] lo speed is unknown, defaulting to 1000
[  636.789773][T25437] netlink: 'syz.2.5290': attribute type 46 has an invalid length.
[  636.792402][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5290'.
[  636.808927][T25437] netlink: 'syz.2.5290': attribute type 11 has an invalid length.
[  636.967626][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'.
[  637.043214][T25458] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5296'.
[  637.070216][T25446] tipc: Resetting bearer <eth:syz_tun>
[  637.074498][T25446] 8021q: adding VLAN 0 to HW filter on device .`
[  637.077430][T25446] 8021q: adding VLAN 0 to HW filter on device team0
[  637.080778][T25446] tipc: Resetting bearer <eth:team0>
[  637.086728][T25461] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5292'.
[  637.086866][T25446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.125766][T25446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  637.129443][T25446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  637.139752][T25446] veth1_vlan: left promiscuous mode
[  637.142355][T25446] veth0_vlan: left promiscuous mode
[  637.146208][T25446] veth0_vlan: entered promiscuous mode
[  637.150260][T25446] veth1_vlan: entered promiscuous mode
[  637.162363][T25446] veth1_macvtap: left promiscuous mode
[  637.165585][T25446] veth0_macvtap: left promiscuous mode
[  637.168404][T25446] veth0_macvtap: entered promiscuous mode
[  637.171320][T25446] veth1_macvtap: entered promiscuous mode
[  637.180556][T25446] 8021q: adding VLAN 0 to HW filter on device bond1
[  637.184758][T25446] 8021q: adding VLAN 0 to HW filter on device bond2
[  637.190060][T25446] batman_adv: batadv0: Interface activated: gretap1
[  637.195092][T25446] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  637.210607][T25465] netlink: 'syz.4.5292': attribute type 4 has an invalid length.
[  637.251295][ T5723] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.255196][ T5723] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  637.265749][T25450] lo speed is unknown, defaulting to 1000
[  637.274071][ T5723] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.277202][ T5723] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.479269][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5300'.
[  637.506739][T25478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5300'.
[  637.808959][T25482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5301'.
[  638.035448][T25494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.047532][T25494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.219535][T25503] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5309'.
[  638.222782][   T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.225712][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.230473][   T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.235179][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.247455][   T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.252344][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.258465][   T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.264651][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.289088][T25505] lo speed is unknown, defaulting to 1000
[  638.372552][ T5669] lo speed is unknown, defaulting to 1000
[  638.374820][ T5669] syz2: Port: 1 Link ACTIVE
[  638.395168][T25517] pimreg: entered allmulticast mode
[  638.398031][T25511] pimreg: left allmulticast mode
[  639.370518][T25556] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  639.405985][T25558] lo speed is unknown, defaulting to 1000
[  640.219714][T25615] lo speed is unknown, defaulting to 1000
[  640.549829][T25625] lo speed is unknown, defaulting to 1000
[  640.640956][T25625] netlink: 'syz.4.5343': attribute type 4 has an invalid length.
[  640.670017][T25630] lo speed is unknown, defaulting to 1000
[  640.780060][T25635] 8021q: VLANs not supported on gre0
[  640.858881][T25630] netlink: 'syz.3.5345': attribute type 9 has an invalid length.
[  640.987865][T25645] netlink: 'syz.2.5350': attribute type 9 has an invalid length.
[  641.149444][T25653] lo speed is unknown, defaulting to 1000
[  641.226493][T25657] syzkaller1: entered promiscuous mode
[  641.228303][T25657] syzkaller1: entered allmulticast mode
[  641.498242][T25675] __nla_validate_parse: 17 callbacks suppressed
[  641.498254][T25675] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5361'.
[  641.530514][T25670] lo speed is unknown, defaulting to 1000
[  641.609546][T25677] lo speed is unknown, defaulting to 1000
[  641.827051][T25684] ip6gre1: entered allmulticast mode
[  641.831301][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  641.871195][T25686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5364'.
[  641.948600][T25689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5365'.
[  642.005600][T25701] netlink: 14264 bytes leftover after parsing attributes in process `syz.4.5368'.
[  642.006177][T25703] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5369'.
[  642.012064][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'.
[  642.018939][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5369'.
[  642.032754][T25701] lo speed is unknown, defaulting to 1000
[  642.159266][T25710] lo speed is unknown, defaulting to 1000
[  642.220522][T25712] netlink: 'syz.3.5370': attribute type 4 has an invalid length.
[  642.257443][T10246] lo speed is unknown, defaulting to 1000
[  642.260194][T10246] syz2: Port: 1 Link DOWN
[  642.284201][T25717] netlink: 'syz.2.5372': attribute type 1 has an invalid length.
[  642.409844][T25722] bridge_slave_0: left allmulticast mode
[  642.412306][T25722] bridge_slave_0: left promiscuous mode
[  642.415817][T25724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5375'.
[  642.415994][T25722] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.424861][T25722] bridge_slave_1: left allmulticast mode
[  642.427218][T25722] bridge_slave_1: left promiscuous mode
[  642.429611][T25722] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.440917][T25722] bond0: (slave bond_slave_0): Releasing backup interface
[  642.449455][T25722] bond0: (slave bond_slave_1): Releasing backup interface
[  642.459147][T25722] team0: Port device team_slave_0 removed
[  642.465140][T25722] team0: Port device team_slave_1 removed
[  642.468395][T25722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.471931][T25722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  642.479936][T25726] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  642.485205][T25722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  642.564256][T25726] team0: Port device xfrm0 added
[  642.564788][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5376'.
[  642.648740][T25722] tipc: Started in network mode
[  642.662217][T25722] tipc: Node identity f6c2a06847db, cluster identity 4711
[  642.666307][T25722] tipc: Enabled bearer <eth:team0>, priority 0
[  642.734043][T25741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5380'.
[  642.755841][T25744] lo speed is unknown, defaulting to 1000
[  643.153068][T25763] lo speed is unknown, defaulting to 1000
[  643.197487][T25765] lo speed is unknown, defaulting to 1000
[  643.783779][T10246] tipc: Node number set to 2971246696
[  644.137510][T25800] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  644.140499][T25800] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  644.173181][T25801] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  644.178053][T25801] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.288706][T25801] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  644.294738][T25801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.375677][T25801] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  644.392669][T25801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.478963][T25801] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  644.482802][T25801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.586427][ T5723] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  644.589692][ T5723] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.612096][ T5723] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  644.615684][ T5723] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.629567][ T5723] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  644.632309][ T5723] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.645680][T25821] netlink: 'syz.2.5400': attribute type 1 has an invalid length.
[  644.651329][ T5723] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  644.654871][ T5723] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.809233][T25837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.811130][T25834] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  644.908669][T25848] lo speed is unknown, defaulting to 1000
[  645.136124][T25867] syzkaller1: tun_chr_ioctl cmd 1074025681
[  645.318451][T25870] openvswitch: netlink: Missing key (keys=40, expected=100)
[  645.417093][T25888] lo speed is unknown, defaulting to 1000
[  645.673232][T25910] ip6tnl11: entered allmulticast mode
[  645.945274][T25930] netlink: 'syz.4.5428': attribute type 2 has an invalid length.
[  646.033835][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  646.434772][T25948] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  648.961631][T25952] ipip0: left promiscuous mode
[  648.965028][T25952] bond1: left promiscuous mode
[  648.967194][T25952] vlan2: left promiscuous mode
[  648.969092][T25952] hsr0: left promiscuous mode
[  648.971392][T25952] vlan2: left allmulticast mode
[  648.973023][T25952] hsr0: left allmulticast mode
[  648.975723][T25952] hsr_slave_0: left allmulticast mode
[  648.978173][T25952] hsr_slave_1: left allmulticast mode
[  648.982479][T25954] __nla_validate_parse: 14 callbacks suppressed
[  648.982487][T25954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5436'.
[  648.989198][T25952] ip6tnl9: left allmulticast mode
[  648.991514][T25952] macsec1: left promiscuous mode
[  649.019029][T25954] lo speed is unknown, defaulting to 1000
[  649.318414][T25975] netlink: 'syz.2.5443': attribute type 8 has an invalid length.
[  649.340644][T25969] vlan2: left allmulticast mode
[  649.342353][T25969] bond0: left allmulticast mode
[  649.345538][T25969] bond_slave_0: left allmulticast mode
[  649.347829][T25969] bond_slave_1: left allmulticast mode
[  649.371345][T25969] ip6gre1: left allmulticast mode
[  649.382713][T25969] 8021q: adding VLAN 0 to HW filter on device eth0
[  649.389661][T25969] 8021q: adding VLAN 0 to HW filter on device eth1
[  649.396163][T25969] 8021q: adding VLAN 0 to HW filter on device eth2
[  649.401986][T25969] 8021q: adding VLAN 0 to HW filter on device eth3
[  649.408620][T25969] ip6tnl11: left allmulticast mode
[  649.412032][T10246] lo speed is unknown, defaulting to 1000
[  649.416442][T10246] syz2: Port: 1 Link ACTIVE
[  649.430050][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  649.438717][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  649.454005][ T5722] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  649.470958][T25973] lo speed is unknown, defaulting to 1000
[  649.480862][   T13] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  649.485040][   T13] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  649.497107][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  649.503339][T25984] batman_adv: batadv0: Adding interface: gretap1
[  649.504269][   T31] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  649.506347][T25984] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.519558][T25984] batman_adv: batadv0: Interface activated: gretap1
[  649.525252][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  649.527784][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  649.554671][   T31] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  649.699744][T25994] lo speed is unknown, defaulting to 1000
[  649.925772][T26007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5450'.
[  649.943380][T26007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'.
[  650.009823][T26012] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  650.016541][T26012] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  650.109961][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5453'.
[  650.235619][T26023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5452'.
[  650.522872][T26030] lo speed is unknown, defaulting to 1000
[  650.786569][T26037] lo speed is unknown, defaulting to 1000
[  650.799854][T26039] tipc: Resetting bearer <eth:syz_tun>
[  650.807262][T26039] tipc: Resetting bearer <eth:team0>
[  650.978068][T26039] batman_adv: batadv0: Interface deactivated: gretap1
[  651.021996][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.025648][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.046282][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.049455][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.081152][T26044] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5459'.
[  651.119831][T26047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5460'.
[  651.123353][T26047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5460'.
[  651.131333][T26048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5460'.
[  651.134339][T26048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5460'.
[  651.224809][T26055] sctp: [Deprecated]: syz.4.5462 (pid 26055) Use of struct sctp_assoc_value in delayed_ack socket option.
[  651.224809][T26055] Use struct sctp_sack_info instead
[  651.362293][T26061] 0: renamed from hsr0
[  651.366865][T26061] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  651.370265][T26061] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  651.374733][T26061] 0: entered allmulticast mode
[  651.376790][T26061] hsr_slave_0: entered allmulticast mode
[  651.378927][T26061] hsr_slave_1: entered allmulticast mode
[  651.382406][T26061] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  651.427356][T26066] lo speed is unknown, defaulting to 1000
[  651.647162][T26072] netlink: 'syz.3.5465': attribute type 1 has an invalid length.
[  651.671903][T26072] bond1: entered promiscuous mode
[  651.674770][T26072] 8021q: adding VLAN 0 to HW filter on device bond1
[  651.684757][T26072] netlink: 'syz.3.5465': attribute type 5 has an invalid length.
[  651.698580][T26072] macvtap1: entered allmulticast mode
[  651.738044][T26072] bond1: (slave bridge4): making interface the new active one
[  651.740482][T26072] bridge4: entered promiscuous mode
[  651.743801][T26072] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  651.926352][T24063] Bluetooth: hci4: link tx timeout
[  651.930698][T24063] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  651.943250][T24063] Bluetooth: hci4: link tx timeout
[  651.949107][T24063] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  651.983340][T26084] netlink: 'syz.3.5470': attribute type 29 has an invalid length.
[  651.992590][T26084] gre1: entered promiscuous mode
[  652.065804][T26089] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  652.276250][T26102] lo speed is unknown, defaulting to 1000
[  652.282256][T26101] lo speed is unknown, defaulting to 1000
[  652.382758][T26108] lo speed is unknown, defaulting to 1000
[  652.749602][T26122] lo speed is unknown, defaulting to 1000
[  653.030554][T26132] lo speed is unknown, defaulting to 1000
[  653.573038][T26155] lo speed is unknown, defaulting to 1000
[  653.614130][T26156] netlink: 'syz.2.5491': attribute type 4 has an invalid length.
[  653.796178][T26165] x_tables: duplicate entry at hook 1
[  653.811774][T26165] netlink: 'syz.2.5495': attribute type 1 has an invalid length.
[  653.855991][T26167] syzkaller1: entered promiscuous mode
[  653.857843][T26167] syzkaller1: entered allmulticast mode
[  653.925005][T26169] lo speed is unknown, defaulting to 1000
[  653.957568][T24063] Bluetooth: hci4: command 0x0406 tx timeout
[  654.008965][T26169] netlink: 'syz.2.5496': attribute type 4 has an invalid length.
[  654.194328][T26176] lo speed is unknown, defaulting to 1000
[  654.230165][T26180] __nla_validate_parse: 11 callbacks suppressed
[  654.230177][T26180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5498'.
[  654.236017][T26178] lo speed is unknown, defaulting to 1000
[  654.515281][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5502'.
[  654.565294][T26192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5503'.
[  654.588995][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5504'.
[  654.592601][T26194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5504'.
[  654.753768][    C1] ip6_tnl_xmit_ctl: 38 callbacks suppressed
[  654.753789][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  654.901196][T26205] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  655.008213][T26213] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5510'.
[  655.026027][T26213] netlink: 'syz.3.5510': attribute type 1 has an invalid length.
[  656.502556][T26259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5523'.
[  656.554132][T26261] lo speed is unknown, defaulting to 1000
[  656.608089][T26263] syzkaller1: entered promiscuous mode
[  656.610263][T26263] syzkaller1: entered allmulticast mode
[  656.677152][T26267] lo speed is unknown, defaulting to 1000
[  656.816655][T26270] syzkaller1: entered promiscuous mode
[  656.818496][T26270] syzkaller1: entered allmulticast mode
[  656.836795][T26273] lo speed is unknown, defaulting to 1000
[  656.919021][T26282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5529'.
[  657.083325][T26285] netlink: 'syz.4.5530': attribute type 14 has an invalid length.
[  657.088137][T26285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5530'.
[  657.092226][T26285] bond0: option xmit_hash_policy: invalid value (183)
[  657.104647][T26287] ip6tnl18: entered promiscuous mode
[  657.219170][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5533'.
[  657.394852][T26307] lo speed is unknown, defaulting to 1000
[  657.443062][T26307] netlink: 'syz.3.5535': attribute type 4 has an invalid length.
[  657.462953][T26317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.892563][T26347] 8021q: adding VLAN 0 to HW filter on device batadv1
[  657.907518][T26347] bond1: entered allmulticast mode
[  657.909639][T26347] bridge4: entered allmulticast mode
[  657.912336][T26347] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  657.915904][T10246] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  657.919061][T10246] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  657.925281][T10246] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  657.931909][T10246] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  657.938081][T10246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  657.940689][T10246] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  657.947614][T10246] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  657.956984][ T5669] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  657.962801][   T13] ip6_tunnel: ip6tnl15 xmit: Local address not yet configured!
[  658.076597][T26355] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  658.280210][T26373] lo speed is unknown, defaulting to 1000
[  658.352451][T26380] x_tables: duplicate entry at hook 1
[  658.517052][T26398] lo speed is unknown, defaulting to 1000
[  658.583007][T26397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  659.389319][T26408] __nla_validate_parse: 10 callbacks suppressed
[  659.389332][T26408] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5561'.
[  659.496418][T26416] syzkaller1: entered promiscuous mode
[  659.498653][T26416] syzkaller1: entered allmulticast mode
[  659.505583][T26416] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5562'.
[  659.597366][T26420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5560'.
[  659.891521][T26426] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5565'.
[  660.446400][T26436] tipc: Resetting bearer <eth:syz_tun>
[  660.460732][T26436] 8021q: adding VLAN 0 to HW filter on device .`
[  660.464350][T26436] 8021q: adding VLAN 0 to HW filter on device team0
[  660.467131][T26436] tipc: Resetting bearer <eth:team0>
[  660.472003][T26436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  660.485469][T26439] netlink: 'syz.3.5568': attribute type 4 has an invalid length.
[  660.503077][T26436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  660.508074][T26436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  660.520765][T26436] veth1_vlan: left promiscuous mode
[  660.523224][T26436] veth0_vlan: left promiscuous mode
[  660.526406][T26436] veth0_vlan: entered promiscuous mode
[  660.529456][T26436] veth1_vlan: entered promiscuous mode
[  660.535518][T26436] veth1_macvtap: left promiscuous mode
[  660.539181][T26436] veth0_macvtap: left promiscuous mode
[  660.542236][T26436] veth0_macvtap: entered promiscuous mode
[  660.546411][T26436] veth1_macvtap: entered promiscuous mode
[  660.556978][T26436] 8021q: adding VLAN 0 to HW filter on device bond1
[  660.560865][T26436] 8021q: adding VLAN 0 to HW filter on device bond2
[  660.566595][T26436] batman_adv: batadv0: Interface activated: gretap1
[  660.571888][T26436] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  660.607467][T20858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.611455][T20858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.617318][T20858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.622178][T20858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.634917][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'.
[  660.638529][T26441] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5569'.
[  660.805253][T26441] bridge0: port 3(syz_tun) entered disabled state
[  660.821781][T26441] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.824868][T26441] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.083624][    C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  661.083643][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  661.097696][T26441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  661.111092][T26441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  661.215116][T26456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5572'.
[  661.218987][T26456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5572'.
[  661.811337][T26441] batman_adv: batadv0: Interface deactivated: gretap1
[  661.840572][T26441] bond1: left promiscuous mode
[  661.844228][T26441] bridge4: left promiscuous mode
[  661.856417][T26441] bond1: left allmulticast mode
[  661.860795][T26441] bridge4: left allmulticast mode
[  661.862520][T26441] macvtap1: left allmulticast mode
[  661.878826][T26441] gre1: left promiscuous mode
[  661.916435][T10246] lo speed is unknown, defaulting to 1000
[  661.924575][T10246] syz2: Port: 1 Link DOWN
[  661.951666][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.975481][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.978350][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.980983][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.985346][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.989400][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.992025][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  661.999789][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  662.008517][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5575'.
[  662.011448][T26462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5575'.
[  662.014901][T26462] netlink: 'syz.4.5575': attribute type 12 has an invalid length.
[  662.017618][T26462] netlink: 'syz.4.5575': attribute type 11 has an invalid length.
[  662.044601][T26463] netlink: 'syz.3.5574': attribute type 22 has an invalid length.
[  662.048419][T26463] netlink: 'syz.3.5574': attribute type 22 has an invalid length.
[  662.091551][T26471] x_tables: duplicate entry at hook 1
[  662.097546][T26470] vlan4: entered allmulticast mode
[  662.099386][T26470] bond0: entered allmulticast mode
[  662.126920][T26470] netlink: 'syz.4.5577': attribute type 1 has an invalid length.
[  662.209008][T26480] netlink: 'syz.4.5580': attribute type 29 has an invalid length.
[  662.430436][T26501] netlink: 'syz.4.5584': attribute type 7 has an invalid length.
[  662.916672][T26503] openvswitch: netlink: Key type 4112 is out of range max 32
[  662.933077][T26503] syzkaller0: entered promiscuous mode
[  662.935840][T26503] syzkaller0: entered allmulticast mode
[  663.712933][T26530] netlink: 'syz.4.5596': attribute type 13 has an invalid length.
[  663.722629][T26529] tipc: Resetting bearer <eth:syz_tun>
[  663.724975][T26529] tipc: Resetting bearer <eth:syz_tun>
[  663.728263][T26529] tipc: Resetting bearer <eth:team0>
[  663.730105][T26529] tipc: Resetting bearer <eth:team0>
[  663.737527][T26529] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  663.877006][T26539] netlink: 'syz.4.5599': attribute type 4 has an invalid length.
[  664.303019][T26567] lo speed is unknown, defaulting to 1000
[  664.364115][T26569] lo speed is unknown, defaulting to 1000
[  664.745462][T26569] netlink: 'syz.4.5608': attribute type 4 has an invalid length.
[  664.888954][T26582] netlink: 'syz.2.5609': attribute type 13 has an invalid length.
[  664.908513][T26582] tipc: Resetting bearer <eth:syz_tun>
[  664.911235][T26582] tipc: Resetting bearer <eth:syz_tun>
[  664.918190][T26582] tipc: Resetting bearer <eth:team0>
[  664.920392][T26582] tipc: Resetting bearer <eth:team0>
[  665.028640][T26583] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  665.128461][T26586] lo speed is unknown, defaulting to 1000
[  665.301337][T26590] lo speed is unknown, defaulting to 1000
[  665.390543][T26595] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  665.399773][T26597] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  665.846570][T26617] syzkaller0: entered promiscuous mode
[  665.848444][T26617] syzkaller0: entered allmulticast mode
[  665.852768][T26617] __nla_validate_parse: 20 callbacks suppressed
[  665.852778][T26617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5617'.
[  665.861142][T26617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5617'.
[  666.201835][T26643] syzkaller0: entered promiscuous mode
[  666.204746][T26643] syzkaller0: entered allmulticast mode
[  666.474515][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5625'.
[  666.597269][T26670] veth1_to_bond: Caught tx_queue_len zero misconfig
[  666.657745][T26678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5628'.
[  667.115923][T26698] lo speed is unknown, defaulting to 1000
[  667.180730][T26699] syzkaller1: entered promiscuous mode
[  667.183372][T26699] syzkaller1: entered allmulticast mode
[  667.292031][T26701] syzkaller1: entered promiscuous mode
[  667.295215][T26701] syzkaller1: entered allmulticast mode
[  667.299877][T26701] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5631'.
[  667.501522][T26704] lo speed is unknown, defaulting to 1000
[  667.527408][T26707] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5632'.
[  667.533363][T26706] Bluetooth: MGMT ver 1.23
[  667.556579][T26707] netlink: 'syz.4.5632': attribute type 4 has an invalid length.
[  667.598416][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5633'.
[  667.683543][T26713] lo speed is unknown, defaulting to 1000
[  667.927722][T26725] sctp: [Deprecated]: syz.2.5639 (pid 26725) Use of int in max_burst socket option deprecated.
[  667.927722][T26725] Use struct sctp_assoc_value instead
[  667.928623][T26728] veth1_to_bond: Caught tx_queue_len zero misconfig
[  668.031200][T26742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5642'.
[  668.087696][T26742] team0: No ports can be present during mode change
[  668.131511][T26744] tipc: Resetting bearer <eth:syz_tun>
[  668.136993][T26744] tipc: Resetting bearer <eth:team0>
[  668.142622][T26744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  668.157100][T26744] team0: No ports can be present during mode change
[  668.209276][T26752] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  668.271779][T26760] tipc: Resetting bearer <eth:syz_tun>
[  668.280588][T26760] tipc: Resetting bearer <eth:team0>
[  668.392622][T26760] batman_adv: batadv0: Interface deactivated: gretap1
[  668.409659][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.412479][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.416919][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.419645][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.427464][T26763] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  668.436016][T26763] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  668.453837][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.457666][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.461315][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.465243][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.468555][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.471963][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.476440][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.479721][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.482943][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.670109][T26779] nbd: couldn't find a device at index 0
[  668.716643][T26782] x_tables: duplicate entry at hook 1
[  668.732105][T26782] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5654'.
[  668.736227][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5654'.
[  668.744922][T26782] netlink: 'syz.2.5654': attribute type 1 has an invalid length.
[  669.203340][T26788] lo speed is unknown, defaulting to 1000
[  669.310431][T26791] lo speed is unknown, defaulting to 1000
[  669.526121][T26798] lo speed is unknown, defaulting to 1000
[  669.574039][T26796] syzkaller1: entered promiscuous mode
[  669.576145][T26796] syzkaller1: entered allmulticast mode
[  669.746993][T26813] lo speed is unknown, defaulting to 1000
[  670.251075][T26834] netlink: 'syz.3.5668': attribute type 13 has an invalid length.
[  670.255932][T26834] netlink: 'syz.3.5668': attribute type 17 has an invalid length.
[  670.312313][ T5669] lo speed is unknown, defaulting to 1000
[  670.317260][T26838] netlink: 'syz.3.5669': attribute type 4 has an invalid length.
[  670.320932][ T5669] syz2: Port: 1 Link ACTIVE
[  670.342813][T26837] lo speed is unknown, defaulting to 1000
[  670.345718][ T5669] lo speed is unknown, defaulting to 1000
[  670.350535][ T5669] syz2: Port: 1 Link DOWN
[  670.461561][T11661] lo speed is unknown, defaulting to 1000
[  670.464534][T11661] syz2: Port: 1 Link ACTIVE
[  670.513396][T26844] netlink: 'syz.3.5671': attribute type 4 has an invalid length.
[  670.526553][T11661] lo speed is unknown, defaulting to 1000
[  670.529219][T11661] syz2: Port: 1 Link DOWN
[  670.677585][T26856] lo speed is unknown, defaulting to 1000
[  670.902217][T26867] syzkaller1: entered promiscuous mode
[  670.904665][T26867] syzkaller1: entered allmulticast mode
[  671.019008][T26876] netlink: 'syz.2.5681': attribute type 29 has an invalid length.
[  671.088806][T26883] netlink: 'syz.3.5683': attribute type 46 has an invalid length.
[  671.111105][T26883] lo speed is unknown, defaulting to 1000
[  671.147310][T26885] __nla_validate_parse: 9 callbacks suppressed
[  671.147326][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5683'.
[  671.349986][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5685'.
[  671.385058][T26890] vti0: entered promiscuous mode
[  671.400173][T26891] vti0: left promiscuous mode
[  672.005518][T26909] lo speed is unknown, defaulting to 1000
[  672.052469][T26909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'.
[  672.247952][T26923] lo speed is unknown, defaulting to 1000
[  673.535612][T26941] lo speed is unknown, defaulting to 1000
[  673.568220][T26941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5699'.
[  673.572828][T26941] netlink: 'syz.3.5699': attribute type 4 has an invalid length.
[  673.578529][T26941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5699'.
[  673.621110][T26947] lo speed is unknown, defaulting to 1000
[  673.659994][T26948] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5700'.
[  673.706519][   T31] lo speed is unknown, defaulting to 1000
[  673.708701][T26948] netlink: 'syz.3.5700': attribute type 4 has an invalid length.
[  673.708806][   T31] syz2: Port: 1 Link ACTIVE
[  673.731794][T11661] lo speed is unknown, defaulting to 1000
[  673.737682][T11661] syz2: Port: 1 Link DOWN
[  673.790049][T26951] netlink: 'syz.3.5701': attribute type 29 has an invalid length.
[  673.836045][T26953] lo: entered promiscuous mode
[  673.838181][T26953] tunl0: entered promiscuous mode
[  673.840355][T26953] gre0: entered promiscuous mode
[  673.842568][T26953] gretap0: entered promiscuous mode
[  673.845011][T26953] erspan0: entered promiscuous mode
[  673.847236][T26953] ip_vti0: entered promiscuous mode
[  673.849447][T26953] ip6_vti0: entered promiscuous mode
[  673.851659][T26953] sit0: entered promiscuous mode
[  673.854572][T26953] ip6tnl0: entered promiscuous mode
[  673.856792][T26953] ip6gre0: entered promiscuous mode
[  673.859168][T26953] ip6gretap0: entered promiscuous mode
[  673.861470][T26953] bridge0: entered promiscuous mode
[  673.865078][T26953] vcan0: entered promiscuous mode
[  673.867484][T26953] bond0: entered promiscuous mode
[  673.869512][T26953] bond_slave_0: entered promiscuous mode
[  673.871780][T26953] bond_slave_1: entered promiscuous mode
[  673.874913][T26953] team0: entered promiscuous mode
[  673.877033][T26953] team_slave_0: entered promiscuous mode
[  673.879451][T26953] team_slave_1: entered promiscuous mode
[  673.881915][T26953] dummy0: entered promiscuous mode
[  673.884590][T26953] nlmon0: entered promiscuous mode
[  673.886787][T26953] batadv0: entered promiscuous mode
[  673.889181][T26953] vxcan0: entered promiscuous mode
[  673.891736][T26953] vxcan1: entered promiscuous mode
[  673.894591][T26953] veth0: entered promiscuous mode
[  673.896761][T26953] veth1: entered promiscuous mode
[  673.898842][T26953] wg0: entered promiscuous mode
[  673.901070][T26953] wg1: entered promiscuous mode
[  673.903259][T26953] wg2: entered promiscuous mode
[  673.906097][T26953] veth0_to_bridge: entered promiscuous mode
[  673.908833][T26953] veth1_to_bridge: entered promiscuous mode
[  673.911582][T26953] veth0_to_bond: entered promiscuous mode
[  673.914726][T26953] veth1_to_bond: entered promiscuous mode
[  673.917299][T26953] veth0_to_team: entered promiscuous mode
[  673.919906][T26953] veth1_to_team: entered promiscuous mode
[  673.922635][T26953] veth0_to_batadv: entered promiscuous mode
[  673.925272][T26953] batadv_slave_0: entered promiscuous mode
[  673.927868][T26953] veth1_to_batadv: entered promiscuous mode
[  673.930349][T26953] batadv_slave_1: entered promiscuous mode
[  673.932862][T26953] xfrm0: entered promiscuous mode
[  673.935307][T26953] veth0_to_hsr: entered promiscuous mode
[  673.937834][T26953] veth1_to_hsr: entered promiscuous mode
[  673.940173][T26953] hsr0: entered promiscuous mode
[  673.942272][T26953] veth1_virt_wifi: entered promiscuous mode
[  673.944907][T26953] veth0_virt_wifi: entered promiscuous mode
[  673.947390][T26953] virt_wifi0: entered promiscuous mode
[  673.949868][T26953] vlan0: entered promiscuous mode
[  673.952098][T26953] vlan1: entered promiscuous mode
[  673.955132][T26953] macvlan0: entered promiscuous mode
[  673.957451][T26953] macvlan1: entered promiscuous mode
[  673.959731][T26953] ipvlan0: entered promiscuous mode
[  673.961890][T26953] ipvlan1: entered promiscuous mode
[  673.964907][T26953] macvtap0: entered promiscuous mode
[  673.967281][T26953] macsec0: entered promiscuous mode
[  673.969349][T26953] geneve0: entered promiscuous mode
[  673.971135][T26953] geneve1: entered promiscuous mode
[  673.972963][T26953] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  673.976465][T26953] ip6tnl1: entered promiscuous mode
[  673.978853][T26953] ip6tnl2: entered promiscuous mode
[  673.981142][T26953] ip6tnl3: entered promiscuous mode
[  673.983262][T26953] @: entered promiscuous mode
[  673.985826][T26953] vlan2: entered promiscuous mode
[  673.988200][T26953] ip6tnl4: entered promiscuous mode
[  673.990473][T26953] ip6tnl5: entered promiscuous mode
[  673.992837][T26953] ip6tnl6: entered promiscuous mode
[  673.995578][T26953] syztnl0: entered promiscuous mode
[  673.997774][T26953] ip6tnl7: entered promiscuous mode
[  673.999969][T26953] bridge1: entered promiscuous mode
[  674.002234][T26953] veth2: entered promiscuous mode
[  674.004494][T26953] veth3: entered promiscuous mode
[  674.006571][T26953] bridge2: entered promiscuous mode
[  674.008674][T26953] ip6tnl8: entered promiscuous mode
[  674.010637][T26953] sit1: entered promiscuous mode
[  674.012789][T26953] ip6tnl9: entered promiscuous mode
[  674.015070][T26953] ip6tnl10: entered promiscuous mode
[  674.017259][T26953] tun0: entered promiscuous mode
[  674.019307][T26953] bridge3: entered promiscuous mode
[  674.021445][T26953] ip6tnl12: entered promiscuous mode
[  674.023824][T26953] ip6tnl13: entered promiscuous mode
[  674.026103][T26953] ip6gre1: entered promiscuous mode
[  674.028189][T26953] ip6gretap1: entered promiscuous mode
[  674.030447][T26953] syztnl1: entered promiscuous mode
[  674.032627][T26953] netdevsim netdevsim3 eth0: entered promiscuous mode
[  674.036101][T26953] netdevsim netdevsim3 eth1: entered promiscuous mode
[  674.038958][T26953] netdevsim netdevsim3 eth2: entered promiscuous mode
[  674.041691][T26953] netdevsim netdevsim3 eth3: entered promiscuous mode
[  674.044100][T26953] ip6gre2: entered promiscuous mode
[  674.046337][T26953] ip6tnl11: entered promiscuous mode
[  674.048518][T26953] batadv1: entered promiscuous mode
[  674.050813][T26953] gretap1: entered promiscuous mode
[  674.053045][T26953] ip6tnl14: entered promiscuous mode
[  674.055795][T26953] ip6tnl15: entered promiscuous mode
[  674.058073][T26953] bond1: entered promiscuous mode
[  674.060082][T26953] bridge4: entered promiscuous mode
[  674.062393][T26953] macvtap1: entered promiscuous mode
[  674.065417][T26953] ip6tnl16: entered promiscuous mode
[  674.067686][T26953] gre1: entered promiscuous mode
[  674.069829][T26953] ip6tnl17: entered promiscuous mode
[  674.072052][T26953] veth4: entered promiscuous mode
[  674.074762][T26953] veth5: entered promiscuous mode
[  674.076950][T26953] ip6gre3: entered promiscuous mode
[  674.079021][T26953] ip6tnl18: entered promiscuous mode
[  674.080975][T26953] vti60: entered promiscuous mode
[  674.082570][T26953] bond2: entered promiscuous mode
[  674.084550][T26953] geneve2: entered promiscuous mode
[  674.086422][T26953] vti0: entered promiscuous mode
[  674.088080][T26953] ip6tnl19: entered promiscuous mode
[  674.126244][T26955] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5703'.
[  674.177919][T26958] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5704'.
[  674.233007][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5705'.
[  674.237522][T26963] dummy0: left promiscuous mode
[  674.299296][T26968] lo speed is unknown, defaulting to 1000
[  674.310337][T26969] lo speed is unknown, defaulting to 1000
[  674.617034][T26976] lo speed is unknown, defaulting to 1000
[  674.904329][T26982] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003
[  674.913037][T26982] syzkaller1: entered promiscuous mode
[  674.916385][T26982] syzkaller1: entered allmulticast mode
[  675.147659][T26992] lo: left promiscuous mode
[  675.150988][T26992] tunl0: left promiscuous mode
[  675.159846][T26992] gre0: left promiscuous mode
[  675.162904][T26992] gretap0: left promiscuous mode
[  675.166198][T26992] erspan0: left promiscuous mode
[  675.169258][T26992] ip_vti0: left promiscuous mode
[  675.171664][T26992] ip6_vti0: left promiscuous mode
[  675.177044][T26992] sit0: left promiscuous mode
[  675.181134][T26992] ip6tnl0: left promiscuous mode
[  675.184112][T26992] ip6gre0: left promiscuous mode
[  675.188637][T26992] ip6gretap0: left promiscuous mode
[  675.193592][T26992] bridge0: port 3(syz_tun) entered blocking state
[  675.196196][T26992] bridge0: port 3(syz_tun) entered forwarding state
[  675.200361][T26992] bridge0: left promiscuous mode
[  675.203857][T26992] vcan0: left promiscuous mode
[  675.208078][T26992] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.211406][T26992] team0: left promiscuous mode
[  675.214876][T26992] 8021q: adding VLAN 0 to HW filter on device team0
[  675.220408][T26992] nlmon0: left promiscuous mode
[  675.223288][T26992] batadv0: left promiscuous mode
[  675.227884][T26992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.231348][T26992] vxcan0: left promiscuous mode
[  675.235971][T26992] vxcan1: left promiscuous mode
[  675.239038][T26992] veth0: left promiscuous mode
[  675.242270][T26992] veth1: left promiscuous mode
[  675.253333][T26992] wg0: left promiscuous mode
[  675.258522][T26992] wg1: left promiscuous mode
[  675.265744][T26992] wg2: left promiscuous mode
[  675.268844][T26992] veth0_to_bridge: left promiscuous mode
[  675.273165][T26992] veth1_to_bridge: left promiscuous mode
[  675.278395][T26992] veth0_to_bond: left promiscuous mode
[  675.282712][T26992] veth1_to_bond: left promiscuous mode
[  675.287344][T26992] veth0_to_team: left promiscuous mode
[  675.290754][T26992] team_slave_0: left promiscuous mode
[  675.293913][T26992] veth1_to_team: left promiscuous mode
[  675.297409][T26992] team_slave_1: left promiscuous mode
[  675.300481][T26992] veth0_to_batadv: left promiscuous mode
[  675.304439][T26992] batadv_slave_0: left promiscuous mode
[  675.307264][T26992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.310389][T26992] veth1_to_batadv: left promiscuous mode
[  675.314729][T26992] batadv_slave_1: left promiscuous mode
[  675.317763][T26992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.321070][T26992] xfrm0: left promiscuous mode
[  675.327545][T26992] veth0_to_hsr: left promiscuous mode
[  675.331587][T26992] veth1_to_hsr: left promiscuous mode
[  675.335854][T26992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  675.339828][T26992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  675.344116][T26992] hsr0: left promiscuous mode
[  675.347366][T26992] veth1_virt_wifi: left promiscuous mode
[  675.350807][T26992] veth0_virt_wifi: left promiscuous mode
[  675.354175][T26992] virt_wifi0: left promiscuous mode
[  675.358187][T26992] veth1_vlan: left promiscuous mode
[  675.362863][T26992] vlan0: left promiscuous mode
[  675.366591][T26992] vlan1: left promiscuous mode
[  675.369724][T26992] veth1_vlan: entered promiscuous mode
[  675.372092][T26992] macvlan0: left promiscuous mode
[  675.375621][T26992] macvlan1: left promiscuous mode
[  675.378903][T26992] ipvlan0: left promiscuous mode
[  675.382045][T26992] ipvlan1: left promiscuous mode
[  675.385164][T26992] veth1_macvtap: left promiscuous mode
[  675.388625][T26992] veth0_macvtap: left promiscuous mode
[  675.391892][T26992] veth0_macvtap: entered promiscuous mode
[  675.394425][T26992] macvtap0: left promiscuous mode
[  675.400118][T26992] veth1_macvtap: entered promiscuous mode
[  675.402740][T26992] macsec0: left promiscuous mode
[  675.405981][T26992] geneve0: left promiscuous mode
[  675.409277][T26992] geneve1: left promiscuous mode
[  675.413135][T26992] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  675.416818][T26992] ip6tnl1: left promiscuous mode
[  675.419812][T26992] ip6tnl2: left promiscuous mode
[  675.422793][T26992] ip6tnl3: left promiscuous mode
[  675.426385][T26992] @: left promiscuous mode
[  675.429343][T26992] vlan2: left promiscuous mode
[  675.431230][T26992] bond0: left promiscuous mode
[  675.433096][T26992] bond_slave_0: left promiscuous mode
[  675.435494][T26992] bond_slave_1: left promiscuous mode
[  675.438696][T26992] ip6tnl4: left promiscuous mode
[  675.441712][T26992] ip6tnl5: left promiscuous mode
[  675.445111][T26992] ip6tnl6: left promiscuous mode
[  675.448838][T26992] syztnl0: left promiscuous mode
[  675.451754][T26992] ip6tnl7: left promiscuous mode
[  675.455360][T26992] bridge1: left promiscuous mode
[  675.458542][T26992] veth2: left promiscuous mode
[  675.461161][T26992] veth3: left promiscuous mode
[  675.464573][T26992] bridge2: left promiscuous mode
[  675.467792][T26992] ip6tnl8: left promiscuous mode
[  675.470198][T26992] sit1: left promiscuous mode
[  675.498051][T26992] ip6tnl9: left promiscuous mode
[  675.501153][T26992] ip6tnl10: left promiscuous mode
[  675.504511][T26992] tun0: left promiscuous mode
[  675.510181][T26992] bridge3: left promiscuous mode
[  675.513936][T26992] ip6tnl12: left promiscuous mode
[  675.516952][T26992] ip6tnl13: left promiscuous mode
[  675.520025][T26992] ip6gre1: left promiscuous mode
[  675.523093][T26992] ip6gretap1: left promiscuous mode
[  675.527230][T26992] syztnl1: left promiscuous mode
[  675.530941][T26992] netdevsim netdevsim3 eth0: left promiscuous mode
[  675.534647][T26992] 8021q: adding VLAN 0 to HW filter on device eth0
[  675.538535][T26992] netdevsim netdevsim3 eth1: left promiscuous mode
[  675.541511][T26992] 8021q: adding VLAN 0 to HW filter on device eth1
[  675.548067][T26992] netdevsim netdevsim3 eth2: left promiscuous mode
[  675.551012][T26992] 8021q: adding VLAN 0 to HW filter on device eth2
[  675.555527][T26992] netdevsim netdevsim3 eth3: left promiscuous mode
[  675.558483][T26992] 8021q: adding VLAN 0 to HW filter on device eth3
[  675.562218][T26992] ip6gre2: left promiscuous mode
[  675.565990][T26992] ip6tnl11: left promiscuous mode
[  675.568973][T26992] batadv1: left promiscuous mode
[  675.571764][T26992] 8021q: adding VLAN 0 to HW filter on device batadv1
[  675.575262][T26992] gretap1: left promiscuous mode
[  675.578078][T26992] batman_adv: batadv0: Interface activated: gretap1
[  675.581503][T26992] ip6tnl14: left promiscuous mode
[  675.584782][T26992] ip6tnl15: left promiscuous mode
[  675.587914][T26992] bond1: left promiscuous mode
[  675.590730][T26992] 8021q: adding VLAN 0 to HW filter on device bond1
[  675.594952][T26992] bond1: entered promiscuous mode
[  675.597201][T26992] macvtap1: left promiscuous mode
[  675.599113][T26992] bond1: left promiscuous mode
[  675.602191][T26992] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  675.607009][T26992] bridge4: left promiscuous mode
[  675.609853][T26992] bridge4: entered promiscuous mode
[  675.611946][T26992] ip6tnl16: left promiscuous mode
[  675.615364][T26992] gre1: left promiscuous mode
[  675.618373][T26992] ip6tnl17: left promiscuous mode
[  675.621455][T26992] veth4: left promiscuous mode
[  675.624675][T26992] veth5: left promiscuous mode
[  675.627485][T26992] ip6gre3: left promiscuous mode
[  675.630678][T26992] ip6tnl18: left promiscuous mode
[  675.633872][T26992] vti60: left promiscuous mode
[  675.637512][T26992] bond2: left promiscuous mode
[  675.639728][T26992] 8021q: adding VLAN 0 to HW filter on device bond2
[  675.644055][T26992] geneve2: left promiscuous mode
[  675.646112][T26992] net_ratelimit: 24 callbacks suppressed
[  675.646128][T26992] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  675.654335][   T31] lo speed is unknown, defaulting to 1000
[  675.661065][T19922] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.664177][T19922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.669801][   T31] syz2: Port: 1 Link ACTIVE
[  675.674111][T19922] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.676971][T19922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.697396][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  675.700167][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.703155][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.706447][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.716767][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.719624][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.722764][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  675.725924][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.731675][ T5648] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  675.734633][ T5648] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  675.737559][ T5648] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  675.739886][ T5648] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  675.742500][ T5648] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  675.745891][ T5648] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  675.753901][   T31] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  675.759049][ T5648] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  675.761754][ T5648] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  675.764626][   T31] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  675.840039][T27002] lo speed is unknown, defaulting to 1000
[  676.220602][T27014] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5716'.
[  676.260031][T27016] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5717'.
[  676.321271][T27016] ieee802154 phy0 wpan0: encryption failed: -22
[  676.425874][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5718'.
[  676.686214][T27035] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  676.877461][T27045] lo speed is unknown, defaulting to 1000
[  676.933382][T27046] syzkaller1: entered promiscuous mode
[  676.936367][T27046] syzkaller1: entered allmulticast mode
[  677.646323][T27050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5724'.
[  677.650814][T27050] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5724'.
[  677.655386][T27050] netlink: 'syz.3.5724': attribute type 5 has an invalid length.
[  677.659149][T27050] netlink: 'syz.3.5724': attribute type 6 has an invalid length.
[  677.662161][T27050] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5724'.
[  677.747485][T27051] ieee802154 phy0 wpan0: encryption failed: -22
[  678.466911][T27053] xt_limit: Overflow, try lower: 2/2147483648
[  678.470514][T27053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5725'.
[  678.605910][T27053] bridge0: port 3(syz_tun) entered disabled state
[  678.627787][T27053] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.630192][T27053] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.853379][T27053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.872504][T27053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  679.274168][T27053] batman_adv: batadv0: Interface deactivated: gretap1
[  679.492415][T27053] vti0: left promiscuous mode
[  679.496896][T27053] ip6tnl19: left promiscuous mode
[  679.500365][ T5669] lo speed is unknown, defaulting to 1000
[  679.504241][ T5648] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  679.507232][ T5648] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.508293][ T5669] syz2: Port: 1 Link DOWN
[  679.509938][ T5648] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  679.515598][ T5648] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.518777][ T5648] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  679.521853][ T5648] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.525929][ T5648] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  679.530138][ T5648] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  679.590696][T27068] syz_tun: left allmulticast mode
[  679.592665][T27068] syz_tun: left promiscuous mode
[  679.595477][T27068] bridge0: port 3(syz_tun) entered disabled state
[  679.600600][T27068] bridge_slave_0: left allmulticast mode
[  679.602791][T27068] bridge_slave_0: left promiscuous mode
[  679.606128][T27068] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.611290][T27068] bridge_slave_1: left allmulticast mode
[  679.614312][T27068] bridge_slave_1: left promiscuous mode
[  679.616611][T27068] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.622981][T27068] bond0: (slave bond_slave_0): Releasing backup interface
[  679.628232][T27068] bond0: (slave bond_slave_1): Releasing backup interface
[  679.634104][T27068] team0: Port device team_slave_0 removed
[  679.638171][T27068] team0: Port device team_slave_1 removed
[  679.640672][T27068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  679.646352][T27068] batman_adv: batadv0: Removing interface: batadv_slave_1
[  679.649630][T27068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  679.687607][T27073] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  679.794184][T27080] x_tables: duplicate entry at hook 1
[  679.807255][T27080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5730'.
[  679.812138][T27080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5730'.
[  679.820217][T27080] netlink: 'syz.3.5730': attribute type 1 has an invalid length.
[  680.437996][T27091] netlink: 'syz.2.5734': attribute type 29 has an invalid length.
[  680.477620][T27096] netlink: 'syz.2.5735': attribute type 3 has an invalid length.
[  680.480658][T27096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5735'.
[  680.510009][T27098] x_tables: duplicate entry at hook 1
[  680.533195][T27098] netlink: 'syz.2.5736': attribute type 1 has an invalid length.
[  680.827286][T27104] tipc: Resetting bearer <eth:syz_tun>
[  680.832640][T27104] 8021q: adding VLAN 0 to HW filter on device .`
[  680.843007][T27104] 8021q: adding VLAN 0 to HW filter on device team0
[  680.847201][T27104] tipc: Resetting bearer <eth:team0>
[  680.852668][T27104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.885930][T27104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  680.889449][T27104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  680.896428][T27104] veth1_vlan: left promiscuous mode
[  680.898839][T27104] veth0_vlan: left promiscuous mode
[  680.901661][T27104] veth0_vlan: entered promiscuous mode
[  680.906820][T27104] veth1_vlan: entered promiscuous mode
[  680.916381][T27104] veth1_macvtap: left promiscuous mode
[  680.921456][T27104] veth0_macvtap: left promiscuous mode
[  680.928691][T27104] veth0_macvtap: entered promiscuous mode
[  680.932038][T27104] veth1_macvtap: entered promiscuous mode
[  680.942817][T27104] 8021q: adding VLAN 0 to HW filter on device bond1
[  680.948063][T27104] 8021q: adding VLAN 0 to HW filter on device bond2
[  680.955876][T27104] batman_adv: batadv0: Interface activated: gretap1
[  680.961920][T27104] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  681.012787][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.020538][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.028267][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.032327][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.237441][T27111] __nla_validate_parse: 2 callbacks suppressed
[  681.237456][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'.
[  681.305504][T27114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5742'.
[  681.388261][T27118] bond24 (unregistering): Released all slaves
[  683.649905][T27127] lo speed is unknown, defaulting to 1000
[  684.347755][T27119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.467738][T27140] netlink: 'syz.2.5748': attribute type 29 has an invalid length.
[  684.477209][T27140] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5748'.
[  684.528367][T27144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5750'.
[  684.564103][T27147] ieee802154 phy0 wpan0: encryption failed: -22
[  684.607186][T27149] netlink: 'syz.2.5752': attribute type 1 has an invalid length.
[  684.695202][T27158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5754'.
[  684.718112][T27158] vlan3: entered allmulticast mode
[  684.720279][T27158] bridge5: entered allmulticast mode
[  684.724180][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'.
[  684.767287][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'.
[  684.976852][T24063] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  684.989527][T24063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  684.996747][T24063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  685.002902][T24063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  685.006574][T24063] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  685.022363][T27181] tipc: Resetting bearer <eth:syz_tun>
[  685.041519][T27181] tipc: Resetting bearer <eth:team0>
[  685.109442][T27181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  685.189988][T27190] ieee802154 phy0 wpan0: encryption failed: -22
[  685.259479][T27197] x_tables: duplicate entry at hook 1
[  685.315234][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5765'.
[  685.325795][T27202] ieee802154 phy0 wpan0: encryption failed: -22
[  685.337863][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5764'.
[  685.348540][T27197] netlink: 'syz.2.5764': attribute type 1 has an invalid length.
[  685.393047][T27176] lo speed is unknown, defaulting to 1000
[  685.469822][T27214] ieee802154 phy0 wpan0: encryption failed: -22
[  685.501140][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5770'.
[  685.744404][T27176] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.748072][T27176] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.754188][T27176] bridge_slave_0: entered allmulticast mode
[  685.759871][T27176] bridge_slave_0: entered promiscuous mode
[  685.770127][T27176] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.774654][T27176] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.781874][T27176] bridge_slave_1: entered allmulticast mode
[  685.785610][T27176] bridge_slave_1: entered promiscuous mode
[  685.825036][T27176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.841783][T27176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  685.892314][T27176] team0: Port device team_slave_0 added
[  685.897768][T27176] team0: Port device team_slave_1 added
[  685.918964][T27176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  685.921244][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.931194][T27176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  685.935988][T27252] lo speed is unknown, defaulting to 1000
[  685.937050][T27176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  685.940832][T27176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  685.949363][T27176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.969451][T27253] syzkaller1: entered promiscuous mode
[  685.971799][T27253] syzkaller1: entered allmulticast mode
[  686.021548][T27176] hsr_slave_0: entered promiscuous mode
[  686.024133][T27176] hsr_slave_1: entered promiscuous mode
[  686.026465][T27176] debugfs: 'hsr0' already exists in 'hsr'
[  686.028298][T27176] Cannot create hsr debugfs directory
[  686.045129][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  686.249685][T27258] __nla_validate_parse: 4 callbacks suppressed
[  686.249699][T27258] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5778'.
[  686.269032][T11661] lo speed is unknown, defaulting to 1000
[  686.270545][T27256] lo speed is unknown, defaulting to 1000
[  686.273786][T11661] syz2: Port: 1 Link ACTIVE
[  686.278038][T27258] netlink: 'syz.3.5778': attribute type 4 has an invalid length.
[  686.314587][T11661] lo speed is unknown, defaulting to 1000
[  686.316944][T11661] syz2: Port: 1 Link DOWN
[  686.348199][T27176] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  686.353087][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  686.365861][T27176] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  686.370768][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  686.378386][T27176] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  686.382909][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  686.391660][T27176] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  686.400036][T27176] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  686.447543][T27267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5779'.
[  686.469645][T27176] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.471856][T27176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.474191][T27176] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.476402][T27176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.565338][T27273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5781'.
[  686.582071][T27176] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.612123][T19922] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.618357][T19922] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.627927][T27275] netlink: 'syz.2.5784': attribute type 2 has an invalid length.
[  686.637141][T27176] 8021q: adding VLAN 0 to HW filter on device team0
[  686.640042][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5783'.
[  686.644490][T19922] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.647069][T19922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.655611][T27277] netlink: 'syz.3.5783': attribute type 25 has an invalid length.
[  686.659395][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5783'.
[  686.660606][T19922] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.665337][T19922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.761528][T27281] sctp: [Deprecated]: syz.2.5785 (pid 27281) Use of struct sctp_assoc_value in delayed_ack socket option.
[  686.761528][T27281] Use struct sctp_sack_info instead
[  686.812920][T27285] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[  686.865622][T27289] lo speed is unknown, defaulting to 1000
[  687.013149][T27300] lo speed is unknown, defaulting to 1000
[  687.079253][ T5620] Bluetooth: hci5: command tx timeout
[  687.122899][T27176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.277646][T27176] veth0_vlan: entered promiscuous mode
[  687.289210][T27176] veth1_vlan: entered promiscuous mode
[  687.292520][T27300] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5789'.
[  687.322995][T27176] veth0_macvtap: entered promiscuous mode
[  687.331037][T27176] veth1_macvtap: entered promiscuous mode
[  687.409556][T27176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.421621][T27176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.437833][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.444298][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.476965][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.498916][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.621484][T19922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.626473][T19922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.663082][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.667330][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.746708][T27322] syzkaller0: entered promiscuous mode
[  687.748978][T27322] syzkaller0: entered allmulticast mode
[  688.792710][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5795'.
[  688.908987][T27345] ieee802154 phy0 wpan0: encryption failed: -22
[  688.954782][T27347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5797'.
[  688.987636][T27347] team0: Port device team_slave_0 added
[  689.038614][T27349] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  689.100479][T27352] netlink: 'syz.3.5799': attribute type 29 has an invalid length.
[  689.163712][ T5620] Bluetooth: hci5: command tx timeout
[  689.282614][T27355] vlan3: left allmulticast mode
[  689.288490][T27355] bridge5: left allmulticast mode
[  689.300020][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'.
[  689.377435][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5801'.
[  689.403295][T27358] xt_hashlimit: size too large, truncated to 1048576
[  689.403310][T27357] xt_hashlimit: size too large, truncated to 1048576
[  689.481278][T27361] netlink: 'syz.3.5801': attribute type 1 has an invalid length.
[  689.481303][T27358] netlink: 'syz.3.5801': attribute type 1 has an invalid length.
[  689.699873][T27371] netlink: 'syz.3.5804': attribute type 46 has an invalid length.
[  689.737012][T27371] lo speed is unknown, defaulting to 1000
[  690.080620][T27390] lo speed is unknown, defaulting to 1000
[  690.125290][T27390] syzkaller1: entered promiscuous mode
[  690.127077][T27390] syzkaller1: entered allmulticast mode
[  690.217527][T27393] netlink: 'syz.5.5808': attribute type 58 has an invalid length.
[  691.233729][ T5620] Bluetooth: hci5: command tx timeout
[  692.759411][T27374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.850617][T27405] lo: Caught tx_queue_len zero misconfig
[  692.904998][T27403] 8021q: adding VLAN 0 to HW filter on device bond0
[  692.907847][T27403] 8021q: adding VLAN 0 to HW filter on device team0
[  692.926294][T27403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.944466][T27413] __nla_validate_parse: 4 callbacks suppressed
[  692.944484][T27413] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5810'.
[  692.955439][T27403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  692.958694][T27403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  692.967610][T27403] veth1_vlan: left promiscuous mode
[  692.970378][T27403] veth0_vlan: left promiscuous mode
[  692.973964][T27403] veth0_vlan: entered promiscuous mode
[  692.978250][T27403] veth1_vlan: entered promiscuous mode
[  692.986324][T27403] veth1_macvtap: left promiscuous mode
[  692.989550][T27403] veth0_macvtap: left promiscuous mode
[  692.992757][T27403] veth0_macvtap: entered promiscuous mode
[  692.999436][T27403] veth1_macvtap: entered promiscuous mode
[  693.069921][T27403] 8021q: adding VLAN 0 to HW filter on device eth0
[  693.075090][T27403] 8021q: adding VLAN 0 to HW filter on device eth1
[  693.078096][T27403] 8021q: adding VLAN 0 to HW filter on device eth2
[  693.081014][T27403] 8021q: adding VLAN 0 to HW filter on device eth3
[  693.086111][T27403] 8021q: adding VLAN 0 to HW filter on device batadv1
[  693.089718][T27403] batman_adv: batadv0: Interface activated: gretap1
[  693.095027][T27403] 8021q: adding VLAN 0 to HW filter on device bond1
[  693.099707][T27403] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  693.106540][T27403] bridge4: left promiscuous mode
[  693.115902][T27403] 8021q: adding VLAN 0 to HW filter on device bond2
[  693.118910][T27403] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  693.125691][ T5683] lo speed is unknown, defaulting to 1000
[  693.128177][ T5683] syz2: Port: 1 Link ACTIVE
[  693.133116][   T24] bridge4: entered promiscuous mode
[  693.166900][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  693.169781][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.173101][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  693.176850][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.190058][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  693.203048][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.212084][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  693.221668][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.257460][   T12] ip6_tnl_xmit_ctl: 46 callbacks suppressed
[  693.257479][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  693.271787][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  693.277571][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  693.280312][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  693.283960][T11661] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  693.287020][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  693.290454][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  693.299631][   T12] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  693.302563][   T12] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  693.318961][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  693.331170][ T5620] Bluetooth: hci5: command tx timeout
[  693.385782][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5815'.
[  693.536763][T27440] netlink: 'syz.5.5817': attribute type 49 has an invalid length.
[  693.621940][T27442] lo speed is unknown, defaulting to 1000
[  693.667481][T27445] syzkaller1: entered promiscuous mode
[  693.675461][T27445] syzkaller1: entered allmulticast mode
[  693.829661][T27457] netlink: 'syz.5.5822': attribute type 2 has an invalid length.
[  693.832846][T27456] netlink: 'syz.5.5822': attribute type 2 has an invalid length.
[  693.854616][T27448] lo speed is unknown, defaulting to 1000
[  693.872039][T27457] : entered promiscuous mode
[  693.959329][T27461] syzkaller1: entered promiscuous mode
[  693.963152][T27461] syzkaller1: entered allmulticast mode
[  694.374368][T27468] syz_tun: entered allmulticast mode
[  694.378343][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5826'.
[  694.391219][T27467] syz_tun: left allmulticast mode
[  694.397577][T27470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  694.409750][T27470] team0: Device xfrm0 is of different type
[  694.419985][T27470] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  694.545511][T27479] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5830'.
[  694.590946][T27480] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.593850][T27480] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.651058][T27480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.662533][T27480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.799987][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.806158][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.818196][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.826494][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  694.954567][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5833'.
[  694.972785][T27491] lo speed is unknown, defaulting to 1000
[  695.359371][T27503] lo speed is unknown, defaulting to 1000
[  695.411519][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5837'.
[  695.547206][T27515] Cannot find add_set index 1 as target
[  695.659364][T27529] ip6gre1: entered promiscuous mode
[  695.661554][T27529] ip6gre1: entered allmulticast mode
[  695.797870][T27533] netlink: 292 bytes leftover after parsing attributes in process `syz.5.5843'.
[  695.994775][T27542] sctp: [Deprecated]: syz.5.5846 (pid 27542) Use of int in maxseg socket option.
[  695.994775][T27542] Use struct sctp_assoc_value instead
[  696.269856][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5850'.
[  696.301262][T27553] lo speed is unknown, defaulting to 1000
[  696.355109][T27553] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5849'.
[  696.377357][T27558] lo speed is unknown, defaulting to 1000
[  696.416059][T27559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5851'.
[  696.516720][T27558] netlink: 'syz.3.5851': attribute type 4 has an invalid length.
[  696.682331][T27573] netlink: 'syz.2.5856': attribute type 1 has an invalid length.
[  696.996397][T27585] tipc: Resetting bearer <eth:syz_tun>
[  697.000573][T27585] tipc: Resetting bearer <eth:team0>
[  697.097725][T27594] lo speed is unknown, defaulting to 1000
[  697.119804][T27595] lo speed is unknown, defaulting to 1000
[  697.739593][T27635] lo speed is unknown, defaulting to 1000
[  697.776494][T27640] netlink: 'syz.5.5872': attribute type 29 has an invalid length.
[  697.956468][T27648] __nla_validate_parse: 7 callbacks suppressed
[  697.956479][T27648] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5875'.
[  698.159361][T27661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5879'.
[  698.309851][T27673] lo speed is unknown, defaulting to 1000
[  698.334687][T27672] lo speed is unknown, defaulting to 1000
[  698.379841][T27679] lo speed is unknown, defaulting to 1000
[  698.430073][T27670] netdevsim netdevsim5: Direct firmware load for .. failed with error -2
[  698.442662][T27670] netdevsim netdevsim5: Falling back to sysfs fallback for: ..
[  698.554810][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'.
[  698.811231][T27691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5888'.
[  699.021530][T27689] batman_adv: batadv0: Interface deactivated: gretap1
[  699.056131][ T5676] lo speed is unknown, defaulting to 1000
[  699.058724][ T5676] syz2: Port: 1 Link DOWN
[  699.060172][T27691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5888'.
[  699.069468][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5888'.
[  699.086622][ T5648] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.094030][ T5648] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.099772][ T5648] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.102438][ T5648] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.109479][ T5648] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.115802][ T5648] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.126194][ T5648] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  699.133401][ T5648] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.137388][T27700] netlink: 'syz.3.5889': attribute type 1 has an invalid length.
[  699.196478][T27700] bond3: entered promiscuous mode
[  699.198963][T27700] 8021q: adding VLAN 0 to HW filter on device bond3
[  699.209320][T27704] 8021q: adding VLAN 0 to HW filter on device bond3
[  699.211724][T27704] bond3: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  699.221007][T27704] bond3: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[  699.227061][T27704] bond3: (slave ip6gre4): making interface the new active one
[  699.229439][T27704] ip6gre4: entered promiscuous mode
[  699.232030][T27704] bond3: (slave ip6gre4): Enslaving as an active interface with an up link
[  699.236628][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5890'.
[  699.274745][T27706] lo speed is unknown, defaulting to 1000
[  699.319359][T27712] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5890'.
[  699.376581][T27711] lo speed is unknown, defaulting to 1000
[  699.379404][T27713] syzkaller1: entered promiscuous mode
[  699.382242][T27713] syzkaller1: entered allmulticast mode
[  699.550238][T27718] bond0: (slave ip6tnl0): refused to change device type
[  699.611204][T27718] ip6erspan2: entered allmulticast mode
[  699.717630][T27721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5894'.
[  699.798767][T27725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5896'.
[  699.947019][T27731] lo speed is unknown, defaulting to 1000
[  699.984043][T27732] netlink: 'syz.2.5899': attribute type 4 has an invalid length.
[  700.079368][T27735] lo speed is unknown, defaulting to 1000
[  700.199095][T27739] netlink: 'syz.5.5901': attribute type 1 has an invalid length.
[  700.221263][T27739] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  700.436046][T27748] netdevsim netdevsim5: Direct firmware load for .. failed with error -2
[  700.442752][T27748] netdevsim netdevsim5: Falling back to sysfs fallback for: ..
[  701.324664][ T5669] ip6_tnl_xmit_ctl: 38 callbacks suppressed
[  701.324704][ T5669] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  701.402881][T27760] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.406932][T27760] 8021q: adding VLAN 0 to HW filter on device team0
[  701.412049][T27760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  701.438502][T27760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  701.441942][T27760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  701.449500][T27760] veth1_vlan: left promiscuous mode
[  701.452125][T27760] veth0_vlan: left promiscuous mode
[  701.455278][T27760] veth0_vlan: entered promiscuous mode
[  701.458218][T27760] veth1_vlan: entered promiscuous mode
[  701.466229][T27760] veth1_macvtap: left promiscuous mode
[  701.468735][T27760] veth0_macvtap: left promiscuous mode
[  701.471201][T27760] veth0_macvtap: entered promiscuous mode
[  701.474132][T27760] veth1_macvtap: entered promiscuous mode
[  701.503815][T10246] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  701.506885][T10246] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  701.511478][T10246] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  701.530158][T27760] 8021q: adding VLAN 0 to HW filter on device eth0
[  701.532942][T27760] 8021q: adding VLAN 0 to HW filter on device eth1
[  701.537245][T27760] 8021q: adding VLAN 0 to HW filter on device eth2
[  701.540009][T27760] 8021q: adding VLAN 0 to HW filter on device eth3
[  701.544677][T27760] 8021q: adding VLAN 0 to HW filter on device batadv1
[  701.548068][T27760] batman_adv: batadv0: Interface activated: gretap1
[  701.552617][T27760] 8021q: adding VLAN 0 to HW filter on device bond1
[  701.557831][T10246] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  701.560767][T10246] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  701.564505][T27760] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  701.566871][T10246] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  701.570923][T27760] bridge4: left promiscuous mode
[  701.574755][T10246] ip6_tunnel: ip6tnl15 xmit: Local address not yet configured!
[  701.579888][T10246] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  701.584630][T27760] 8021q: adding VLAN 0 to HW filter on device bond2
[  701.587416][T27760] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  701.595479][ T5669] lo speed is unknown, defaulting to 1000
[  701.597746][T27061] bridge4: entered promiscuous mode
[  701.600123][ T5669] syz2: Port: 1 Link ACTIVE
[  701.601907][T27762] bridge_slave_0: left allmulticast mode
[  701.604158][T27762] bridge_slave_0: left promiscuous mode
[  701.606565][T27762] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.610497][T27762] bridge_slave_1: left allmulticast mode
[  701.612381][T27762] bridge_slave_1: left promiscuous mode
[  701.614968][T27762] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.620227][T27762] bond0: (slave bond_slave_0): Releasing backup interface
[  701.625068][T27762] bond0: (slave bond_slave_1): Releasing backup interface
[  701.629092][T27762] team0: Port device team_slave_0 removed
[  701.631953][T27762] team0: Port device team_slave_1 removed
[  701.634448][T27762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.637365][T27762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.640153][T27762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  701.644127][ T5669] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  701.675162][ T5648] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  701.679949][ T5648] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.686458][ T5648] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  701.693766][ T5648] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.701786][ T5648] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  701.706225][ T5648] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.713687][ T5648] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  701.717904][ T5648] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  701.860424][T27775] lo speed is unknown, defaulting to 1000
[  701.960122][T27775] netlink: 'syz.3.5912': attribute type 23 has an invalid length.
[  702.292091][T27790] netlink: 'syz.3.5915': attribute type 40 has an invalid length.
[  702.381960][T27792] lo speed is unknown, defaulting to 1000
[  702.454836][T27797] syzkaller0: entered promiscuous mode
[  702.459447][T27797] syzkaller0: entered allmulticast mode
[  702.616183][T27800] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  702.619718][T27800] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  703.541833][T27811] __nla_validate_parse: 6 callbacks suppressed
[  703.541846][T27811] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5921'.
[  703.551225][T27812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5921'.
[  703.603015][T27814] ieee802154 phy0 wpan0: encryption failed: -22
[  703.704881][T27815] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.708059][T27815] 8021q: adding VLAN 0 to HW filter on device team0
[  703.721810][T27814] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5922'.
[  703.725214][T27815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  703.795919][T27815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  703.799617][T27815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  703.811836][T27815] veth1_vlan: left promiscuous mode
[  703.816182][T27815] veth0_vlan: left promiscuous mode
[  703.819768][T27815] veth0_vlan: entered promiscuous mode
[  703.825248][T27815] veth1_vlan: entered promiscuous mode
[  703.832885][T27815] veth1_macvtap: left promiscuous mode
[  703.837288][T27815] veth0_macvtap: left promiscuous mode
[  703.840618][T27815] veth0_macvtap: entered promiscuous mode
[  703.845054][T27815] veth1_macvtap: entered promiscuous mode
[  703.858007][T27815] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  703.862305][T27815] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  703.867710][T27815] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  703.871939][T27815] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  703.881738][T27815] ip6gre1: left promiscuous mode
[  703.945434][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  703.952640][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  703.963544][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  703.969506][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.336979][T27826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5925'.
[  704.862887][T27829] x_tables: duplicate entry at hook 1
[  704.885751][T27828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5926'.
[  704.889619][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5926'.
[  704.905740][T27828] netlink: 'syz.3.5926': attribute type 1 has an invalid length.
[  704.906479][T27829] netlink: 'syz.3.5926': attribute type 1 has an invalid length.
[  705.192983][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5928'.
[  705.442468][T27835] ip6gre1: left allmulticast mode
[  705.481155][ T5668] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.489670][ T5668] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.494524][ T5668] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.507683][ T5668] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.719708][T27848] lo speed is unknown, defaulting to 1000
[  705.759377][T27849] syzkaller1: entered promiscuous mode
[  705.762782][T27849] syzkaller1: entered allmulticast mode
[  705.980018][T27859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5933'.
[  706.018126][T27861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5934'.
[  706.053086][T27861] lo speed is unknown, defaulting to 1000
[  706.093050][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5934'.
[  706.188379][T27865] lo speed is unknown, defaulting to 1000
[  706.395559][T27869] xt_cgroup: path and classid specified
[  706.452505][T27869] xt_cgroup: path and classid specified
[  706.536062][T27874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  706.541558][T27875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  706.776850][T27877] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  706.826912][T27880] netlink: 'syz.3.5938': attribute type 48 has an invalid length.
[  707.243705][    C0] ip6_tnl_xmit_ctl: 51 callbacks suppressed
[  707.243720][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  707.746490][T27895] x_tables: duplicate entry at hook 1
[  707.765877][T27895] netlink: 'syz.3.5944': attribute type 1 has an invalid length.
[  708.029960][T27905] lo speed is unknown, defaulting to 1000
[  708.337257][T27922] lo speed is unknown, defaulting to 1000
[  708.611521][T27928] syzkaller0: entered promiscuous mode
[  708.616023][T27928] syzkaller0: entered allmulticast mode
[  708.843345][T27933] __nla_validate_parse: 7 callbacks suppressed
[  708.843363][T27933] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5955'.
[  708.845455][T27932] xt_cgroup: path and classid specified
[  708.900009][T27935] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5956'.
[  708.930344][T27935] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5956'.
[  709.044386][T27937] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.050438][T27937] 8021q: adding VLAN 0 to HW filter on device team0
[  709.070314][T27937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.165931][T27937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  709.179718][T27937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  709.191219][T27937] veth1_vlan: left promiscuous mode
[  709.194944][T27944] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5957'.
[  709.200170][T27937] veth0_vlan: left promiscuous mode
[  709.200175][T27945] netlink: 'syz.3.5958': attribute type 1 has an invalid length.
[  709.203236][T27937] veth0_vlan: entered promiscuous mode
[  709.207936][T27937] veth1_vlan: entered promiscuous mode
[  709.213364][T27937] veth1_macvtap: left promiscuous mode
[  709.216873][T27937] veth0_macvtap: left promiscuous mode
[  709.219288][T27937] veth0_macvtap: entered promiscuous mode
[  709.222629][T27937] veth1_macvtap: entered promiscuous mode
[  709.229144][T27937] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  709.232387][T27937] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  709.236520][T27937] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  709.239798][T27937] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  709.252688][T27946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5958'.
[  709.260325][T20858] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  709.264536][T20858] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  709.268093][T20858] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  709.270878][T20858] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  709.284139][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  709.294396][ T5669] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  709.346361][ T5669] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  709.354762][ T5669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  709.439148][T27945] 8021q: adding VLAN 0 to HW filter on device bond4
[  709.441932][ T5668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.447392][ T5668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.452263][T20858] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  709.458978][T27950] netlink: 'syz.3.5958': attribute type 4 has an invalid length.
[  709.482584][ T5668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.489175][ T5668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  709.728707][T27962] netlink: 'syz.5.5960': attribute type 1 has an invalid length.
[  709.772510][T27962] bond1: entered promiscuous mode
[  709.774516][T27962] 8021q: adding VLAN 0 to HW filter on device bond1
[  709.797147][T27962] 8021q: adding VLAN 0 to HW filter on device bond1
[  709.804479][T27962] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  709.807955][T27962] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  709.828323][T27962] bond1: (slave ip6gre2): making interface the new active one
[  709.835100][T27962] ip6gre2: entered promiscuous mode
[  709.842807][T27962] bond1: (slave ip6gre2): Enslaving as an active interface with an up link
[  710.660120][T27980] syzkaller0: entered promiscuous mode
[  710.662044][T27980] syzkaller0: entered allmulticast mode
[  710.689204][T27980] lo speed is unknown, defaulting to 1000
[  710.726554][T27981] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5964'.
[  710.743102][T27980] netlink: 'syz.3.5964': attribute type 4 has an invalid length.
[  710.982600][T27997] syzkaller1: entered promiscuous mode
[  710.986518][T27997] syzkaller1: entered allmulticast mode
[  711.352104][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5969'.
[  711.410589][T28011] lo speed is unknown, defaulting to 1000
[  711.467900][T27061] lo speed is unknown, defaulting to 1000
[  711.474567][T11661] lo speed is unknown, defaulting to 1000
[  711.476468][T27061] syz2: Port: 1 Link DOWN
[  711.482683][T28013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5971'.
[  711.519183][T28013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  711.730617][T28028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5975'.
[  711.782874][T28035] netlink: 'syz.5.5977': attribute type 2 has an invalid length.
[  711.847151][T28037] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5978'.
[  711.939362][T28045] lo speed is unknown, defaulting to 1000
[  711.968077][T28046] lo speed is unknown, defaulting to 1000
[  712.325769][T28056] lo speed is unknown, defaulting to 1000
[  712.561406][T28062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.693283][T28067] lo speed is unknown, defaulting to 1000
[  712.796504][   T13] ip6_tnl_xmit_ctl: 15 callbacks suppressed
[  712.796515][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  712.805777][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  712.856001][T28074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.907693][ T5683] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  712.924965][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  712.982527][T28081] lo speed is unknown, defaulting to 1000
[  713.414688][ T5676] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  713.419058][ T5676] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  713.426349][ T5676] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  713.436093][ T5676] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  713.553735][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  713.556276][    C0] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  713.741071][T28108] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  713.756683][ T5676] lo speed is unknown, defaulting to 1000
[  713.760799][ T5676] syz2: Port: 1 Link ACTIVE
[  713.956070][T28112] __nla_validate_parse: 3 callbacks suppressed
[  713.956086][T28112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5994'.
[  713.992782][T28114] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5995'.
[  714.187111][T28123] syzkaller1: entered promiscuous mode
[  714.189513][T28123] syzkaller1: entered allmulticast mode
[  716.193736][ T5620] Bluetooth: hci5: command tx timeout
[  719.488385][T27736] tipc: Disabling bearer <eth:syz_tun>
[  719.592718][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.661569][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.712310][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.779484][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.967798][   T13] vlan3: left allmulticast mode
[  719.970158][   T13] geneve0: left allmulticast mode
[  719.978850][   T13] vlan3: left promiscuous mode
[  719.984125][   T13] geneve0: left promiscuous mode
[  719.988889][   T13] bridge0: port 1(vlan3) entered disabled state
[  720.060856][   T13] batman_adv: batadv0: Interface deactivated: gretap1
[  720.148766][   T13] bond3 (unregistering): (slave ip6gre4): Releasing backup interface
[  720.202165][   T13] batman_adv: batadv0: Removing interface: ip6gretap2
[  720.562196][   T13] batman_adv: batadv0: Removing interface: gretap1
[  720.598859][    C0] ip6_tnl_xmit_ctl: 30 callbacks suppressed
[  720.598873][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  720.644226][   T13] bond8 (unregistering): (slave gretap0): Releasing active interface
[  721.622090][   T13] bond18 (unregistering): (slave gretap3): Releasing backup interface
[  721.788381][   T13] bond2 (unregistering): (slave bridge1): Releasing active interface
[  721.799390][   T13] team0: Port device bridge2 removed
[  721.831256][   T13] team0: Port device bridge4 removed
[  721.914592][   T13] .` (unregistering): Released all slaves
[  721.921833][   T13] bond1 (unregistering): Released all slaves
[  721.941266][   T13] bond2 (unregistering): Released all slaves
[  721.969624][   T13] bond3 (unregistering): Released all slaves
[  721.982700][   T13] bond4 (unregistering): Released all slaves
[  722.000567][   T13] bond5 (unregistering): Released all slaves
[  722.021161][   T13] bond6 (unregistering): Released all slaves
[  722.037756][   T13] bond7 (unregistering): Released all slaves
[  722.052728][   T13] bond8 (unregistering): Released all slaves
[  722.072582][   T13] bond9 (unregistering): Released all slaves
[  722.085381][   T13] bond10 (unregistering): Released all slaves
[  722.098706][   T13] bond11 (unregistering): Released all slaves
[  722.122877][   T13] bond12 (unregistering): (slave veth7): Releasing active interface
[  722.132754][   T13] bond12 (unregistering): (slave batadv1): Releasing active interface
[  722.137190][   T13] bond12 (unregistering): Released all slaves
[  722.150163][   T13] bond13 (unregistering): Released all slaves
[  722.162655][   T13] bond14 (unregistering): Released all slaves
[  722.186875][   T13] bond15 (unregistering): Released all slaves
[  722.209036][   T13] bond16 (unregistering): Released all slaves
[  722.221562][   T13] bond0 (unregistering): Released all slaves
[  722.246948][   T13] bond17 (unregistering): (slave veth11): Releasing active interface
[  722.251921][   T13] bond17 (unregistering): (slave veth13): Releasing active interface
[  722.256217][   T13] bond17 (unregistering): Released all slaves
[  722.269139][   T13] bond18 (unregistering): (slave bond19): Releasing backup interface
[  722.272232][   T13] bond18 (unregistering): Released all slaves
[  722.284593][   T13] bond19 (unregistering): Released all slaves
[  722.292412][   T13] bond20 (unregistering): Released all slaves
[  722.301077][   T13] bond21 (unregistering): Released all slaves
[  722.310714][   T13] bond22 (unregistering): Released all slaves
[  722.320662][   T13] bond23 (unregistering): Released all slaves
[  722.336741][ T5351] 8021q: adding VLAN 0 to HW filter on device eth1
[  722.524303][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  722.527952][   T13] : left promiscuous mode
[  722.670547][   T13] tipc: Disabling bearer <eth:team0>
[  722.684204][   T13] tipc: Disabling bearer <udp:syz2>
[  722.688322][   T13] tipc: Left network mode
[  722.786161][ T5351] 8021q: adding VLAN 0 to HW filter on device eth2
[  723.088948][ T5351] 8021q: adding VLAN 0 to HW filter on device eth3
[  723.153882][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  723.305175][ T5351] 8021q: adding VLAN 0 to HW filter on device eth4
[  723.709894][   T13] hsr_slave_0: left promiscuous mode
[  723.712131][   T13] hsr_slave_1: left promiscuous mode
[  723.717270][   T13] veth1_macvtap: left promiscuous mode
[  723.720012][   T13] veth0_macvtap: left promiscuous mode
[  723.724154][   T13] veth1_vlan: left promiscuous mode
[  723.726288][   T13] veth0_vlan: left promiscuous mode
[  724.538114][   T13] IPVS: stop unused estimator thread 0...
[  725.073716][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  728.274269][    C0] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  728.277350][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  729.073983][T24063] Bluetooth: hci3: command 0x0406 tx timeout
[  729.564111][    C0] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  729.566815][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  730.835990][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  731.483885][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  732.114208][    C0] ip6_tunnel: ip6tnl15 xmit: Local address not yet configured!
[  732.117586][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  732.754198][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  734.683945][   T34] INFO: task syz.1.4858:23787 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  734.691804][   T34]       Not tainted syzkaller #0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  734.694262][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.699315][   T34] task:syz.1.4858      state:D stack:27320 pid:23787 tgid:23786 ppid:5619   task_flags:0x400140 flags:0x00080002
[  734.704320][   T34] Call Trace:
[  734.708194][   T34]  <TASK>
[  734.709416][   T34]  __schedule+0x17d9/0x56c0
[  734.711231][   T34]  ? __lock_acquire+0x683/0x2cf0
[  734.713165][   T34]  ? __lock_acquire+0x683/0x2cf0
[  734.715804][   T34]  ? __pfx___schedule+0x10/0x10
[  734.719588][   T34]  ? schedule+0x90/0x2b0
[  734.723554][   T34]  schedule+0x164/0x2b0
[  734.727779][   T34]  schedule_preempt_disabled+0x13/0x30
[  734.733539][   T34]  __mutex_lock+0x7bf/0x1550
[  734.737346][   T34]  ? __mutex_lock+0x5d4/0x1550
[  734.740777][   T34]  ? nfsd_nl_listener_set_doit+0x135/0x1750
[  734.754094][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  734.760170][   T34]  ? __asan_memset+0x22/0x50
[  734.773657][   T34]  ? __nla_validate_parse+0x2429/0x2d50
[  734.779074][   T34]  nfsd_nl_listener_set_doit+0x135/0x1750
[  734.784550][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  734.789071][   T34]  ? rcu_is_watching+0x15/0xb0
[  734.797214][   T34]  ? trace_kmalloc+0x2a/0xf0
[  734.802222][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  734.811062][   T34]  ? __nla_parse+0x40/0x60
[  734.816147][   T34]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  734.824787][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  734.831904][   T34]  genl_family_rcv_msg_doit+0x233/0x340
[  734.839621][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  734.853570][   T34]  ? bpf_lsm_capable+0x9/0x20
[  734.855530][   T34]  ? security_capable+0x7e/0x2c0
[  734.857500][   T34]  genl_rcv_msg+0x614/0x7a0
[  734.859310][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.861455][   T34]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  734.866000][   T34]  netlink_rcv_skb+0x226/0x4a0
[  734.868087][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.870394][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.872737][   T34]  ? down_read+0x2be/0x330
[  734.875514][   T34]  genl_rcv+0x28/0x40
[  734.877219][   T34]  netlink_unicast+0x7bb/0x940
[  734.878829][   T34]  netlink_sendmsg+0x813/0xb40
[  734.880409][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.882988][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  734.885798][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.888195][   T34]  sock_sendmsg_nosec+0x13a/0x180
[  734.890397][   T34]  ____sys_sendmsg+0x54e/0x850
[  734.892486][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  734.895772][   T34]  ? import_iovec+0x73/0xa0
[  734.897847][   T34]  ___sys_sendmsg+0x2a5/0x360
[  734.899983][   T34]  ? __lock_acquire+0x683/0x2cf0
[  734.902145][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  734.905100][   T34]  ? futex_wait+0x2a2/0x390
[  734.907665][   T34]  ? __fget_files+0x2a/0x420
[  734.909746][   T34]  ? __fget_files+0x3a2/0x420
[  734.911709][   T34]  __x64_sys_sendmsg+0x1b1/0x290
[  734.914475][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  734.916846][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.919409][   T34]  do_syscall_64+0x174/0x580
[  734.921375][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.924505][   T34] RIP: 0033:0x7fe2b3d9de99
[  734.926508][   T34] RSP: 002b:00007fe2b4d25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  734.929950][   T34] RAX: ffffffffffffffda RBX: 00007fe2b4025fa0 RCX: 00007fe2b3d9de99
[  734.933220][   T34] RDX: 0000000020040080 RSI: 0000200000000100 RDI: 0000000000000005
[  734.938063][   T34] RBP: 00007fe2b3e33eaf R08: 0000000000000000 R09: 0000000000000000
[  734.941385][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  734.945640][   T34] R13: 00007fe2b4026038 R14: 00007fe2b4025fa0 R15: 00007ffc0fddd138
[  734.948367][   T34]  </TASK>
[  734.955004][   T34] 
[  734.955004][   T34] Showing all locks held in the system:
[  734.966166][   T34] 1 lock held by khungtaskd/34:
[  734.970829][   T34]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  734.984190][   T34] 2 locks held by getty/5438:
[  734.986309][   T34]  #0: ffff88810ebb00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  734.989795][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  734.994273][   T34] 2 locks held by syz.0.4843/23736:
[  734.996279][   T34]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.999438][   T34]  #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750
[  735.003335][   T34] 2 locks held by syz.1.4858/23787:
[  735.005768][   T34]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  735.009028][   T34]  #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750
[  735.012027][   T34] 2 locks held by syz-executor/24060:
[  735.015232][   T34]  #0: ffff8881b1100ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  735.019119][   T34]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  735.024385][   T34] 2 locks held by syz.4.5665/26822:
[  735.026491][   T34]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  735.029141][   T34]  #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  735.032234][   T34] 3 locks held by kworker/0:13/27061:
[  735.035341][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  735.040203][   T34]  #1: ffffc90003a0fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  735.044812][   T34]  #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  735.054378][   T34] 1 lock held by dhcpcd-run-hook/28178:
[  735.056538][   T34] 
[  735.057491][   T34] =============================================
[  735.057491][   T34] 
[  735.068923][   T34] NMI backtrace for cpu 1
[  735.068938][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  735.068949][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  735.068955][   T34] Call Trace:
[  735.068960][   T34]  <TASK>
[  735.068964][   T34]  dump_stack_lvl+0xe8/0x150
[  735.068985][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  735.068996][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  735.069012][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  735.069022][   T34]  sys_info+0x135/0x170
[  735.069035][   T34]  watchdog+0xfd7/0x1030
[  735.069051][   T34]  ? watchdog+0x1c7/0x1030
[  735.069065][   T34]  kthread+0x388/0x470
[  735.069112][   T34]  ? __pfx_watchdog+0x10/0x10
[  735.069126][   T34]  ? __pfx_kthread+0x10/0x10
[  735.069142][   T34]  ret_from_fork+0x514/0xb70
[  735.069163][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  735.069184][   T34]  ? __switch_to+0xc89/0x1420
[  735.069205][   T34]  ? __pfx_kthread+0x10/0x10
[  735.069220][   T34]  ret_from_fork_asm+0x1a/0x30
[  735.069234][   T34]  </TASK>
[  735.069238][   T34] Sending NMI from CPU 1 to CPUs 0:
[  735.111631][    C0] NMI backtrace for cpu 0
[  735.111645][    C0] CPU: 0 UID: 0 PID: 28178 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) 
[  735.111656][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  735.111662][    C0] RIP: 0010:vfs_open+0x0/0x340
[  735.111681][    C0] Code: 49 83 ef 80 4c 89 ff 4c 89 f6 89 da 5b 41 5e 41 5f e9 04 bc 12 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 50 49 89 f7 48 89 fb e8
[  735.111689][    C0] RSP: 0018:ffffc900031dfa40 EFLAGS: 00000246
[  735.111698][    C0] RAX: ffffffff824b25fd RBX: 1ffff9200063bfc1 RCX: 0000000000000000
[  735.111704][    C0] RDX: ffff88810c679dc0 RSI: ffff8881120fc400 RDI: ffffc900031dfc20
[  735.111710][    C0] RBP: 0000000000000000 R08: ffff88810c679dc0 R09: 0000000000000002
[  735.111715][    C0] R10: 0000000000006000 R11: 0000000000000000 R12: ffffc900031dfc20
[  735.111721][    C0] R13: ffff8881120fc400 R14: 0000000000000000 R15: 0000000000000000
[  735.111726][    C0] FS:  00007fc3f2d2d380(0000) GS:ffff88818d954000(0000) knlGS:0000000000000000
[  735.111734][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  735.111739][    C0] CR2: 00007fc3f2f5e870 CR3: 00000001a5f08000 CR4: 00000000000006f0
[  735.111771][    C0] Call Trace:
[  735.111775][    C0]  <TASK>
[  735.111779][    C0]  path_openat+0x2e44/0x3830
[  735.111791][    C0]  ? kasan_save_track+0x3e/0x80
[  735.111803][    C0]  ? do_sys_openat2+0xcc/0x200
[  735.111813][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.111827][    C0]  do_file_open+0x23e/0x4a0
[  735.111836][    C0]  ? __pfx_do_file_open+0x10/0x10
[  735.111848][    C0]  ? _raw_spin_unlock+0x28/0x50
[  735.111857][    C0]  ? alloc_fd+0x651/0x6c0
[  735.111871][    C0]  do_sys_openat2+0x115/0x200
[  735.111881][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  735.111891][    C0]  ? exc_page_fault+0x6a/0xc0
[  735.111902][    C0]  ? do_user_addr_fault+0xc4a/0x1340
[  735.111917][    C0]  __x64_sys_openat+0x138/0x170
[  735.111927][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.111935][    C0]  do_syscall_64+0x174/0x580
[  735.111945][    C0]  ? trace_irq_disable+0x3b/0x140
[  735.111958][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.111966][    C0] RIP: 0033:0x7fc3f2e819a4
[  735.111974][    C0] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  735.111981][    C0] RSP: 002b:00007ffd4224a950 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  735.111989][    C0] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fc3f2e819a4
[  735.111995][    C0] RDX: 0000000000080000 RSI: 00007fc3f2d9e707 RDI: 00000000ffffff9c
[  735.112000][    C0] RBP: 00007fc3f2d9e707 R08: 0000000000000008 R09: 0000000000000001
[  735.112005][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
[  735.112010][    C0] R13: 00007fc3f2d9e7fc R14: 0000000000000001 R15: 0000000000000000
[  735.112020][    C0]  </TASK>
[  735.224189][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  735.226508][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  735.229309][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  735.232445][   T34] Call Trace:
[  735.233509][   T34]  <TASK>
[  735.234423][   T34]  vpanic+0x56c/0xa60
[  735.235658][   T34]  ? __pfx___schedule+0x10/0x10
[  735.237172][   T34]  ? __pfx_vpanic+0x10/0x10
[  735.238559][   T34]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  735.240891][   T34]  panic+0xc5/0xd0
[  735.242354][   T34]  ? __pfx_panic+0x10/0x10
[  735.244093][   T34]  ? preempt_schedule_common+0x82/0xd0
[  735.246190][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  735.248235][   T34]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  735.250544][   T34]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  735.252815][   T34]  watchdog+0x1030/0x1030
[  735.254457][   T34]  ? watchdog+0x1c7/0x1030
[  735.256145][   T34]  kthread+0x388/0x470
[  735.257682][   T34]  ? __pfx_watchdog+0x10/0x10
[  735.259477][   T34]  ? __pfx_kthread+0x10/0x10
[  735.261194][   T34]  ret_from_fork+0x514/0xb70
[  735.262947][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  735.264887][   T34]  ? __switch_to+0xc89/0x1420
[  735.266649][   T34]  ? __pfx_kthread+0x10/0x10
[  735.268464][   T34]  ret_from_fork_asm+0x1a/0x30
[  735.270341][   T34]  </TASK>
[  735.272090][   T34] Kernel Offset: disabled
[  735.273441][   T34] Rebooting in 86400 seconds..
