last executing test programs:

42.092131116s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

35.327398556s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

27.631442014s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

20.089667758s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

12.237989969s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

5.118189513s ago: executing program 2 (id=111):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0xa, 0x5, 0x7)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x40, 0x4)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0xb, 0x98, &(0x7f0000000040)=""/152})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000200)=0x3, 0x8)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/time\x00')
listen(r1, 0x1)
r4 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
clock_gettime(0x0, &(0x7f0000008f40)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r4, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f0000000700)=""/157, 0x9d}, {&(0x7f00000007c0)=""/33, 0x21}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000a00)=""/162, 0xa2}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/114, 0x72}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/201, 0xc9}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/141, 0x8d}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/232, 0xe8}, {&(0x7f0000001480)=""/127, 0x7f}], 0x5, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/196, 0xc4}], 0x1, &(0x7f0000001780)=[@rights={{0x24, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000017c0)=""/250, 0xfa}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/153, 0x99}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/101, 0x65}, {&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x5, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000007200)=[{&(0x7f0000003e40)=""/43, 0x2b}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/233, 0xe9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/6, 0x6}, {&(0x7f0000005fc0)=""/4096, 0x1000}, {&(0x7f0000006fc0)=""/102, 0x66}, {&(0x7f0000007040)=""/149, 0x95}, {&(0x7f0000007100)=""/55, 0x37}, {&(0x7f0000007140)=""/160, 0xa0}], 0xa, &(0x7f00000072c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000007380)=@abs, 0x6e, &(0x7f0000007880)=[{&(0x7f0000007400)=""/190, 0xbe}, {&(0x7f00000074c0)=""/248, 0xf8}, {&(0x7f00000075c0)=""/18, 0x12}, {&(0x7f0000007600)=""/112, 0x70}, {&(0x7f0000007680)=""/198, 0xc6}, {&(0x7f0000007780)=""/248, 0xf8}], 0x6, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000079c0)=@abs, 0x6e, &(0x7f0000008c40)=[{&(0x7f0000007a40)=""/182, 0xb6}, {&(0x7f0000007b00)=""/4096, 0x1000}, {&(0x7f0000008b00)=""/235, 0xeb}, {&(0x7f0000008c00)=""/59, 0x3b}], 0x4, &(0x7f0000008c80)=[@rights={{0x24, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x9, 0x100, &(0x7f0000008f80)={r5, r6+60000000})
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$qrtr(r12, &(0x7f0000008fc0)={0x2a, 0xffffffff, 0x4000}, 0xc)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009040), r15)
sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000009100)={&(0x7f0000009000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000090c0)={&(0x7f0000009080)={0x1c, r18, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
write$tun(r7, &(0x7f0000009140)={@val={0x0, 0x88e5}, @val={0x3, 0x80, 0x81, 0x8000, 0x9a, 0x4}, @mpls={[{0xa}, {0x9}, {0x3, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x6, 0x6, "d584d2", 0x159, 0x21, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x3a, 0x2, 0x1, 0x7, 0x0, [@private1]}, @hopopts={0x62, 0xb, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x9, 0x8000}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8e, 0x3, [0x79c, 0x80, 0x5, 0x633b]}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim]}, @srh={0x78, 0xa, 0x4, 0x5, 0x5, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1, @mcast1]}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x9, 0x6, "d90c82", 0xc, "07cc16"}, "8606fb2a842c2ac97e19688e099d68b2e44b3e7f9fb00e4d3872938d4009fa1804522e90e19c5b6ff8d595f2f2af7edacd6d3417cd9a387a99949e762c575ded390e065f51c3d33334716436861bf0970d81608989a0e206d3"}}}}}, 0x1a7)
ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000009300))
socket$inet6(0xa, 0x4, 0x275d)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000009340)='cgroup.procs\x00', 0x2, 0x0)
listen(r11, 0xe0)
close(r13)
splice(r16, &(0x7f0000009380)=0x6, r14, &(0x7f00000093c0)=0x80000000, 0x9, 0x8)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009440), r17)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000009480)={'wpan4\x00', <r20=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000009580)={&(0x7f0000009400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009540)={&(0x7f00000094c0)={0x5c, r19, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_init_net_socket$ax25(0x3, 0x1, 0xc4)
connect$pptp(r8, &(0x7f00000095c0)={0x18, 0x2, {0x1, @local}}, 0x1e)

1.250685934s ago: executing program 0 (id=1027):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x5, 0x9, 0x9, 0x6}, {0x4, 0x1, 0x4, 0x9ea}, {0x4, 0xa5, 0x62, 0x8}, {0x5, 0x7, 0x3, 0x54d1}, {0x8, 0x4, 0x5}, {0xf, 0x4, 0xd0, 0x3}, {0x2, 0x9, 0x7, 0x401}]})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000200))
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000002060102000000001400078008000b400000007a080008400000000438000300686173683a6e65742c706f72742c6e657400000016000300686173683a6e65742c706f72742c6e657400"/96], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24010)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6}]})
write$ppp(r4, &(0x7f0000000480)='3I', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random})
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0, 0x3c}}, 0x0)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
ppoll(&(0x7f0000000700)=[{r5, 0xa00}], 0x1, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)="3373c4afd5922a65f55bc7d3e64bcbd10b716f30e87138f5cc07b5adfb8fdadb5f72d664018c7506e149853614f562ef1678cf2f148a8bd3d3410e2c0aae03cc4b0cf84ea3107b7d62dd4b8bd08999e98275ca5355462ee569ebd80574ee2aab94bb7b05042f8d85ef5f6ab1942bad62e67a3801864b3c7621576087723e9bd6bea3b9176e325a22ce38466929329603f385873b06376a45e0f1944cd88041b3697e711b7951e5d3a2b2c77e81b5870168b2e7a7fb49e07026d959a0ce64a7bd416488a46b3d7f04a414d5316b7f1a723451ddd278ea091bf803b578af06aabbbe944cb4e5f86ce310e70d7c699bac465623975801388e5ca6c4381a01b9cdbf6865fbe80f2b309f6d793503e545adfa050317520d731ebcbea89fb7f4e04aa5e53e815a5b2cafaa789fd2f183580c27486c224c2d4f0929cdc5668b3d617eb082a9949b0166944d26c32f72af860b91355d6bf60eb03737a5e332b0967ca68ae604c23e3fc5c5dfc2829f7decd9ae5c64bbd46fa0f3af707a8879b123e16c480bd2b1813f1e6f421e9b9777fd2f91dc8b8729c6301e9c5e14e5934b068106a62aec82b76443b5c99b1745b00e5cafa016eb711575e0cde4f6866efa230fef21bd238ecd5581b98c0f8c5681c2683ee48dcaf32f8b6e198882515136570d4b5861556e5aeb5d20e68e34cc6d16ad4970b6bd50907d829fe4a03dca114e509dc7d8fc1e81f908c3d4c7afc2b0bda446b2452539b7797c987bdf9fc6548b773f2eb4f955fac1857a3af6b1848a63aeba9c1ab0ff59f691509212b6bce905b39b73ddcb1419299602d0b4640fa8e77dbaee99bfc213bdcd6b360f2ef7b9685af43f04fa0d408938152c926db718fb614eb2fc5634abaf77ba92e7772f9b0dc7b50ece3b1fd5fb15fa91b9ffbe8da686d082c0db01c50bcaf242842cc8a12600fcdde884d5cdd7ab9bff3b607163d4a06b881cf43fd7fd93281eb4741dba9e3908435c92f076450365bc4461370225d171d69cf525151892f8dae47013c8bf5e3ffd8846e26161e690e7c1c9bb7b68ee103fdee891759255a200d72281a4ee5861b3ef28d8cae16356419667bb4cc6d6510679c0a41acad979eaae214f901564628717cecaa5f4f8803c90b4d132d3a5ea748092cccde4caa0723dab2a33900e6979306765e4526375607a1f332684b2faf29774241552b7f3a894ed7e1162b53c225494a7d13eed6dd9b04532ddfe1554f9421c4c1bb4a8f4d4d53224acf9460633f07db090d75f223332b969b2f319effe7bf1874d25053fc856208afbef2437532b5576022ba0181905b39e77283291323a537ae37d0ee241e26d1007e07b2b518cde327e9dc273eaa053f209944d956dfe3001906af573df", 0x3d8}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="5197d3e195e4", 0x6}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000640)}, {&(0x7f0000002b80)}], 0x2}}], 0x3, 0x4048040)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
close(0x3)

529.032157ms ago: executing program 1 (id=1032):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000fbc2add888bc6aa8100008002a000800450000540018000000069078ac1414bbac1414aa00004e223ebda0b4f36f5cb50a11ec672515e8190f40fe1d1c0b013122b0b34aa42f5876c474ce7abb28e7c3015428b6d03169fede9924a578c563b710fc59baaee3955e5834d1472c2d6067e5a7e0f3199407c22352f5e40ec67934e5c5c469aaed1f89650dad37c3f53ba82c822e3f86e5174a0313baba5d95b4c6018dda45edc0bb1d815da770ee68a81170cf44e4a8895df93a66d1ca7f5115689b791d62d938", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0400000090780000010100020403001312ab519c9940eb739563a3c52b43aee4a2011312625fbe96fc97dc524d8a397b7b38957f"], 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x88914, &(0x7f0000000300))
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x1, @remote}, 0xc, 0x3, 0x3}}, 0x26)
sendmmsg$inet(r12, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

430.558944ms ago: executing program 1 (id=1033):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x2c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

340.618532ms ago: executing program 0 (id=1034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000f700004800", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000050}, 0x20000004)

340.146181ms ago: executing program 1 (id=1035):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8850}, 0x0)

239.312369ms ago: executing program 1 (id=1036):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRES64=r1, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x28045}, 0x8090)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000014c0)={0x1100, 0x1, 0x52, 0xf6a})
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100))
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x7, &(0x7f0000000080)=0x1)

238.490319ms ago: executing program 0 (id=1037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00082abd7000fbdbdf251600000008000300", @ANYRES32=r3, @ANYBLOB="d7175767f83be5e1ddee60cfaafdd097298a5eb865957884a19ec6e76f4a0bb9a058284c9bd015519af7d85a6b275f186cdf551c99036c53d4ea5aae8dccd0bbf352d70aae5eba2a4ccf9c1f63c32d6f900255edd10edf86f7b38283bf054a436ef01e29bd91e165dcc021beec586cee899a3838b953d8fc541ccccf0708c4c07207b79843bf96d5157f2f000100008bfd706894243e85d23f0437f2317d"], 0x1c}}, 0x24000001)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="930b7ff022790e2e8c2501000000100002800c00018008000100feffff7f04000180"], 0x28}}, 0x804) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7)
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x200480a0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4040000) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}}, 0x0)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x4, @empty, 0x0, 0xd4ff738c0a75a82a, 'ip6gretap0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xff000000, 'veth0_virt_wifi\x00', 'bond_slave_1\x00', {}, {0xff}, 0x2, 0x2, 0x20}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x5, 0xe7a786dd83d11f72, 0x3], 0x4, 0x1}}}, @common=@ttl={{0x28}, {0x0, 0x8}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x40000000, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x4c}}, 0x28000000)

179.119412ms ago: executing program 1 (id=1038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0x100, 0xd1e}]}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

177.726996ms ago: executing program 0 (id=1039):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000003c40), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x800)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

109.349409ms ago: executing program 1 (id=1040):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private0, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0xd91280f7, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={<r2=>0x0, 0x8}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0000c11"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x4004d, 0x4)
recvmmsg(r4, &(0x7f0000000480), 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000005c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x85, 0x2, 0xc}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x2}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=r12, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB="0a00340002020202020200000a000608115fe9dcc001f71f59ab58799bfc00080211000000000008"], 0x44}}, 0x4010)

108.829099ms ago: executing program 0 (id=1041):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x78, r5})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

0s ago: executing program 0 (id=1042):
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f00000001c0)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d80)={&(0x7f0000002c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x3, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x30]}}, 0x0, 0x2a, 0x0, 0x1, 0x6}, 0x28)
sendmmsg$inet6(r3, &(0x7f0000003d00)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf918, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x824c88451cc286e7, 0x9}}}, @hoplimit={{0x14, 0x29, 0x34, 0x39943c74}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x0, 0x0, [@local]}}}], 0x28}}], 0x2, 0x4001c00)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000003d000107000000000000000003000000352e"], 0x20}}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000100))
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.936849][ T7554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.996420][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.998825][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.006606][ T7685] vxcan1 speed is unknown, defaulting to 1000
[   97.028081][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.030778][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.077749][ T7691] tipc: Resetting bearer <eth:team0>
[   97.275441][ T7693] vxcan1 speed is unknown, defaulting to 1000
[   97.553481][ T7701] vlan3: entered promiscuous mode
[   97.555129][ T7701] macvlan1: entered promiscuous mode
[   97.557166][ T7701] vlan3: entered allmulticast mode
[   97.664923][ T7703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.672957][ T7703] syzkaller0: entered promiscuous mode
[   97.681267][ T7703] syzkaller0: entered allmulticast mode
[   97.747996][ T7703] tipc: Resetting bearer <eth:syzkaller0>
[   97.755698][ T7702] tipc: Resetting bearer <eth:syzkaller0>
[   97.763549][ T7702] tipc: Disabling bearer <eth:syzkaller0>
[   97.832319][ T7710] nbd: socks must be embedded in a SOCK_ITEM attr
[   97.837162][ T7710] block nbd0: shutting down sockets
[   97.905836][ T7710] netlink: 'syz.1.465': attribute type 7 has an invalid length.
[   97.908269][ T7710] netlink: 'syz.1.465': attribute type 8 has an invalid length.
[   97.928832][ T7714] netlink: 'syz.0.466': attribute type 2 has an invalid length.
[   97.936076][ T7714] syzkaller0: entered promiscuous mode
[   97.937829][ T7714] syzkaller0: entered allmulticast mode
[   98.144875][ T7717] veth0: entered promiscuous mode
[   98.156387][ T7717] veth0 (unregistering): left promiscuous mode
[   98.817119][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.884660][ T7725] vxcan1 speed is unknown, defaulting to 1000
[   99.059842][ T7724] vxcan1 speed is unknown, defaulting to 1000
[   99.723024][ T7733] __nla_validate_parse: 8 callbacks suppressed
[   99.723035][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   99.734101][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   99.776331][ T7735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   99.824099][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'.
[   99.862883][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.866352][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.867620][ T7743] vlan2: entered promiscuous mode
[   99.870331][ T7743] vlan2: entered allmulticast mode
[   99.870391][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.875681][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.879534][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.918274][ T7741] vxcan1 speed is unknown, defaulting to 1000
[   99.968420][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[   99.975261][ T7745] pim6reg: entered allmulticast mode
[   99.978616][ T7754] netlink: 'syz.1.477': attribute type 4 has an invalid length.
[   99.989841][ T7745] pim6reg: left allmulticast mode
[  100.014425][ T7757] 8021q: VLANs not supported on syzkaller0
[  100.053117][ T7761] netlink: 'syz.1.479': attribute type 4 has an invalid length.
[  100.059872][ T7761] netlink: 'syz.1.479': attribute type 4 has an invalid length.
[  100.099175][ T7765] netlink: 'syz.1.480': attribute type 1 has an invalid length.
[  100.119156][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  100.123435][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[  100.139123][ T7765] 8021q: adding VLAN 0 to HW filter on device bond10
[  100.145115][ T7765] bond9: (slave bond10): making interface the new active one
[  100.147758][ T7765] bond9: (slave bond10): Enslaving as an active interface with an up link
[  100.153822][ T7741] chnl_net:caif_netlink_parms(): no params data found
[  100.154510][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'.
[  100.162104][ T7765] 8021q: adding VLAN 0 to HW filter on device bond9
[  100.211744][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.214200][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.216493][ T7741] bridge_slave_0: entered allmulticast mode
[  100.219321][ T7741] bridge_slave_0: entered promiscuous mode
[  100.225044][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.227486][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.229848][ T7741] bridge_slave_1: entered allmulticast mode
[  100.237838][ T7741] bridge_slave_1: entered promiscuous mode
[  100.257568][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'.
[  100.262642][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.267342][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.297660][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[  100.312517][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.320515][ T7741] team0: Port device team_slave_0 added
[  100.331726][ T7741] team0: Port device team_slave_1 added
[  100.354816][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.371949][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.374091][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.383366][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.387648][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.389776][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.399544][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.432829][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.452990][ T7741] hsr_slave_0: entered promiscuous mode
[  100.455327][ T7741] hsr_slave_1: entered promiscuous mode
[  100.457559][ T7741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.459780][ T7741] Cannot create hsr debugfs directory
[  100.585378][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'.
[  100.589892][   T12] bridge_slave_1: left allmulticast mode
[  100.596234][   T12] bridge_slave_1: left promiscuous mode
[  100.601720][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.610707][   T12] bridge_slave_0: left allmulticast mode
[  100.615073][   T12] bridge_slave_0: left promiscuous mode
[  100.619546][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.903984][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.908216][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.912089][   T12] bond0 (unregistering): Released all slaves
[  100.949274][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  100.953007][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  100.955595][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  100.963513][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  100.966116][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  100.968561][ T7791] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  101.282578][ T7810] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  101.284808][ T7810] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  101.297897][ T7810] tipc: Resetting bearer <eth:syzkaller0>
[  101.302331][ T7810] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  101.305295][ T7812] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  101.366326][   T12] hsr_slave_0: left promiscuous mode
[  101.368821][   T12] hsr_slave_1: left promiscuous mode
[  101.370937][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.373432][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.376304][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.378719][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.392848][   T12] veth1_macvtap: left promiscuous mode
[  101.394655][   T12] veth0_macvtap: left promiscuous mode
[  101.396533][   T12] veth1_vlan: left promiscuous mode
[  101.398254][   T12] veth0_vlan: left promiscuous mode
[  101.649887][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.673590][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.961597][   T53] Bluetooth: hci0: command tx timeout
[  102.179469][ T7834] 8021q: adding VLAN 0 to HW filter on device bond6
[  102.228992][ T7839] bond6: (slave gretap2): making interface the new active one
[  102.235358][ T7839] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  102.250062][ T7741] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.266737][ T7741] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.277809][ T7741] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.296765][ T7741] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.303276][ T7837] delete_channel: no stack
[  102.545469][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.573229][ T7741] 8021q: adding VLAN 0 to HW filter on device team0
[  102.578496][  T996] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.580667][  T996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.596984][  T996] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.599170][  T996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.629701][ T7741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.634067][ T7741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.700361][ T7885] vxcan1 speed is unknown, defaulting to 1000
[  102.755453][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.805309][ T7741] veth0_vlan: entered promiscuous mode
[  102.841814][ T7741] veth1_vlan: entered promiscuous mode
[  102.969975][ T7741] veth0_macvtap: entered promiscuous mode
[  102.975888][ T7741] veth1_macvtap: entered promiscuous mode
[  102.997237][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.008656][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.017842][ T7741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.020806][ T7741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.025277][ T7741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.028498][ T7741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.100858][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.122794][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.159958][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.166294][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.702525][ T7916] delete_channel: no stack
[  103.735750][ T7922] vxcan1 speed is unknown, defaulting to 1000
[  103.785834][ T7930] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002
[  103.833245][ T7932] vlan2: entered promiscuous mode
[  103.834945][ T7932] vlan2: entered allmulticast mode
[  103.959575][ T7935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.962765][ T7935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.965420][ T7935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.968100][ T7935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.970752][ T7935] geneve2: entered promiscuous mode
[  104.013291][    T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  104.085759][    T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  104.468374][ T7971] dummy0: left allmulticast mode
[  104.471340][ T7971] dummy0: left promiscuous mode
[  104.473072][ T7971] bridge0: port 1(dummy0) entered disabled state
[  104.805252][ T7996] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.811979][ T7996] team0: Port device bond7 added
[  104.818359][   T27] tipc: Resetting bearer <eth:team0>
[  104.842626][ T8002] vxcan1 speed is unknown, defaulting to 1000
[  104.902241][ T7621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.950162][ T8008] dvmrp8: entered allmulticast mode
[  105.005959][ T5701] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  105.016634][ T8006] dvmrp8: left allmulticast mode
[  106.034494][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.038483][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.044204][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.048032][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.052198][ T5863] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  106.057948][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.066061][ T5863] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  106.090079][ T8020] vxcan1 speed is unknown, defaulting to 1000
[  106.152060][ T8023] __nla_validate_parse: 20 callbacks suppressed
[  106.152078][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  106.281709][    T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  106.326316][ T7621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.367718][ T8020] chnl_net:caif_netlink_parms(): no params data found
[  106.388801][ T7621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.500510][ T7621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.528864][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv1
[  106.532832][ T8042] team0: Port device batadv1 added
[  106.534959][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.537198][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.539417][ T8020] bridge_slave_0: entered allmulticast mode
[  106.542453][ T8020] bridge_slave_0: entered promiscuous mode
[  106.545708][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.547888][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.550024][ T8020] bridge_slave_1: entered allmulticast mode
[  106.555227][ T8020] bridge_slave_1: entered promiscuous mode
[  106.581879][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.589502][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.611560][ T8042] vxcan1 speed is unknown, defaulting to 1000
[  106.656581][ T8020] team0: Port device team_slave_0 added
[  106.680622][ T8020] team0: Port device team_slave_1 added
[  106.732621][ T7621] bridge_slave_1: left allmulticast mode
[  106.734751][ T7621] bridge_slave_1: left promiscuous mode
[  106.737044][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.782147][ T7621] bridge_slave_0: left allmulticast mode
[  106.784308][ T7621] bridge_slave_0: left promiscuous mode
[  106.790050][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.054851][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.059224][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.063614][ T7621] bond0 (unregistering): Released all slaves
[  107.081890][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.112253][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.114577][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.126269][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.130877][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.133187][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.144975][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.245665][ T8020] hsr_slave_0: entered promiscuous mode
[  107.248035][ T8020] hsr_slave_1: entered promiscuous mode
[  107.377835][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'.
[  107.380537][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'.
[  107.387299][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'.
[  107.411629][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.541'.
[  107.549444][ T7621] hsr_slave_0: left promiscuous mode
[  107.553323][ T7621] hsr_slave_1: left promiscuous mode
[  107.556635][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.559380][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.563236][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.565624][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.584364][ T7621] veth1_macvtap: left promiscuous mode
[  107.586220][ T7621] veth0_macvtap: left promiscuous mode
[  107.587955][ T7621] veth1_vlan: left promiscuous mode
[  107.589567][ T7621] veth0_vlan: left promiscuous mode
[  107.668337][ T8071] validate_nla: 16 callbacks suppressed
[  107.668347][ T8071] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[  107.928804][ T7621] team0 (unregistering): Port device team_slave_1 removed
[  107.952848][ T7621] team0 (unregistering): Port device team_slave_0 removed
[  108.208097][ T8059] syzkaller0: entered promiscuous mode
[  108.209907][ T8059] syzkaller0: entered allmulticast mode
[  108.429477][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'.
[  108.633474][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[  108.715769][ T8097] netlink: 'syz.1.550': attribute type 62 has an invalid length.
[  108.771833][ T8020] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.778754][ T8020] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.784919][ T8020] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.793279][ T8020] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.866020][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.879326][ T8020] 8021q: adding VLAN 0 to HW filter on device team0
[  108.888415][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.890638][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.902991][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.905449][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.947842][ T8105] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[  109.083345][ T8116] wireguard0: entered promiscuous mode
[  109.085178][ T8116] wireguard0: entered allmulticast mode
[  109.092800][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'.
[  109.096667][ T8116] openvswitch: netlink: Missing key (keys=40, expected=100)
[  109.100203][ T8116] netlink: 'syz.1.552': attribute type 4 has an invalid length.
[  109.104258][ T8116] netlink: 17 bytes leftover after parsing attributes in process `syz.1.552'.
[  109.176565][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.205549][ T8020] veth0_vlan: entered promiscuous mode
[  109.211426][ T8020] veth1_vlan: entered promiscuous mode
[  109.258575][ T8020] veth0_macvtap: entered promiscuous mode
[  109.271072][ T8020] veth1_macvtap: entered promiscuous mode
[  109.284787][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.296287][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.303593][ T8020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.306704][ T8020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.309443][ T8020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.313172][   T33] audit: type=1804 audit(1752642181.243:3): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.553" name="/newroot/271/cgroup.controllers" dev="tmpfs" ino=1394 res=1 errno=0
[  109.313724][ T8020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.319817][   T33] audit: type=1800 audit(1752642181.243:4): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.553" name="cgroup.controllers" dev="tmpfs" ino=1394 res=0 errno=0
[  109.346305][ T8130] gtp2: entered promiscuous mode
[  109.347861][ T8130] gtp2: entered allmulticast mode
[  109.404074][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.409944][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.434458][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.444406][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.575348][ T8145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.584993][ T8142] netlink: 3 bytes leftover after parsing attributes in process `syz.0.556'.
[  109.613231][ T8142] batadv2: entered promiscuous mode
[  109.614897][ T8142] batadv2: entered allmulticast mode
[  109.843197][ T8172] veth1: entered promiscuous mode
[  109.958376][ T8185] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  109.961450][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  109.977191][ T8185] bond6: (slave gretap2): Releasing active interface
[  109.986400][ T8185] team0: Port device bond7 removed
[  109.995452][ T8185] team0: Port device batadv1 removed
[  109.999601][ T3027] tipc: Resetting bearer <eth:team0>
[  110.012615][ T5870] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  110.198031][ T8200] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  110.355244][ T8210] batadv_slave_0: entered promiscuous mode
[  110.370622][ T8210] batadv_slave_0: left promiscuous mode
[  110.393070][ T8215] netlink: 'syz.0.573': attribute type 21 has an invalid length.
[  110.493839][ T8221] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[  110.530961][ T8221] vxcan1 speed is unknown, defaulting to 1000
[  110.765500][ T8229] netlink: 'syz.1.577': attribute type 2 has an invalid length.
[  110.841812][  T790] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  110.846250][ T8232] bond8 (unregistering): Released all slaves
[  110.946131][ T8243] netlink: 'syz.1.580': attribute type 10 has an invalid length.
[  111.051144][ T8252] delete_channel: no stack
[  111.165322][ T8268] vlan0: entered promiscuous mode
[  111.168046][ T8268] vlan0: entered allmulticast mode
[  111.243500][ T8268] __nla_validate_parse: 43 callbacks suppressed
[  111.243512][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'.
[  111.252120][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[  111.265205][ T8050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.311467][ T8270] vlan2: entered promiscuous mode
[  112.314256][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'.
[  112.317063][ T8284] netlink: 80 bytes leftover after parsing attributes in process `syz.1.592'.
[  112.395623][ T8283] delete_channel: no stack
[  112.440214][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'.
[  112.441636][ T8291] netlink: 96 bytes leftover after parsing attributes in process `syz.0.593'.
[  112.454163][ T8291] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  112.456825][ T8291] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  112.459570][ T8291] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  112.466808][ T8293] netlink: 'syz.1.594': attribute type 1 has an invalid length.
[  112.469883][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.594'.
[  112.485468][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.489584][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.495239][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.498231][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.501307][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.538908][ T8294] vxcan1 speed is unknown, defaulting to 1000
[  112.577466][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'.
[  112.605366][ T8302] veth9: entered promiscuous mode
[  112.607257][ T8302] bridge0: port 1(veth9) entered blocking state
[  112.609216][ T8302] bridge0: port 1(veth9) entered disabled state
[  112.613456][ T8302] veth9: entered allmulticast mode
[  112.620104][ T8302] bridge0: port 2(veth0_to_bond) entered blocking state
[  112.622990][ T8302] bridge0: port 2(veth0_to_bond) entered disabled state
[  112.625146][ T8302] veth0_to_bond: entered allmulticast mode
[  112.627975][ T8302] veth0_to_bond: entered promiscuous mode
[  112.636704][ T8302] vlan2: entered allmulticast mode
[  112.639202][ T8302] veth1: entered allmulticast mode
[  112.642111][ T8302] bridge0: port 3(vlan2) entered blocking state
[  112.644648][ T8302] bridge0: port 3(vlan2) entered disabled state
[  112.647558][ T8302] vlan2: entered promiscuous mode
[  112.695289][ T8306] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[  112.697581][ T8306] netlink: 224 bytes leftover after parsing attributes in process `syz.1.598'.
[  112.697610][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[  112.811945][ T8311] delete_channel: no stack
[  112.914525][ T8294] chnl_net:caif_netlink_parms(): no params data found
[  112.954811][ T8325] pim6reg1: entered promiscuous mode
[  112.956953][ T8325] pim6reg1: entered allmulticast mode
[  112.992076][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.994446][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.996740][ T8294] bridge_slave_0: entered allmulticast mode
[  113.004594][ T8294] bridge_slave_0: entered promiscuous mode
[  113.012282][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.015518][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.017733][ T8294] bridge_slave_1: entered allmulticast mode
[  113.033615][ T8294] bridge_slave_1: entered promiscuous mode
[  113.055893][ T8050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.079914][ T8331] bond8: entered promiscuous mode
[  113.083291][ T8331] bond8: entered allmulticast mode
[  113.096725][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.105536][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.135658][ T8050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.160442][ T8294] team0: Port device team_slave_0 added
[  113.174926][ T8050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.182201][ T8334] netlink: 'syz.0.604': attribute type 11 has an invalid length.
[  113.183516][ T8294] team0: Port device team_slave_1 added
[  113.227245][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.230315][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.238260][ T8294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.244370][ T8294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.246503][ T8294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.265133][ T8294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.339986][ T8294] hsr_slave_0: entered promiscuous mode
[  113.352846][ T8294] hsr_slave_1: entered promiscuous mode
[  113.355026][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.357287][ T8294] Cannot create hsr debugfs directory
[  113.361088][ T8050] bridge_slave_1: left allmulticast mode
[  113.365182][ T8050] bridge_slave_1: left promiscuous mode
[  113.366986][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.370718][ T8050] bridge_slave_0: left allmulticast mode
[  113.373026][ T8050] bridge_slave_0: left promiscuous mode
[  113.374951][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.627518][ T8050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.632708][ T8050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.636764][ T8050] bond0 (unregistering): Released all slaves
[  113.652277][ T8339] lo speed is unknown, defaulting to 1000
[  113.664603][ T8344] tipc: Resetting bearer <eth:team0>
[  113.672695][ T8344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.714915][ T8339] lo speed is unknown, defaulting to 1000
[  113.717110][ T8339] lo speed is unknown, defaulting to 1000
[  113.925710][ T8339] infiniband syz0: set active
[  113.928499][ T8339] infiniband syz0: added lo
[  113.938742][    T9] lo speed is unknown, defaulting to 1000
[  114.009631][ T8339] RDS/IB: syz0: added
[  114.010974][ T8339] smc: adding ib device syz0 with port count 1
[  114.056818][ T8339] smc:    ib device syz0 port 1 has pnetid 
[  114.058777][    T9] lo speed is unknown, defaulting to 1000
[  114.066197][ T8339] lo speed is unknown, defaulting to 1000
[  114.386888][ T8339] lo speed is unknown, defaulting to 1000
[  114.395069][ T8294] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.413934][ T8294] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.446835][ T8294] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.466220][ T8294] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.522653][   T53] Bluetooth: hci0: command tx timeout
[  114.547193][ T8339] lo speed is unknown, defaulting to 1000
[  114.594456][ T8050] hsr_slave_0: left promiscuous mode
[  114.596759][ T8050] hsr_slave_1: left promiscuous mode
[  114.598961][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.604849][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.613656][ T8050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.616825][ T8050] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.632863][ T8050] veth1_macvtap: left promiscuous mode
[  114.634630][ T8050] veth0_macvtap: left promiscuous mode
[  114.636337][ T8050] veth1_vlan: left promiscuous mode
[  114.638805][ T8050] veth0_vlan: left promiscuous mode
[  114.994706][ T8050] team0 (unregistering): Port device team_slave_1 removed
[  115.021686][ T8050] team0 (unregistering): Port device team_slave_0 removed
[  115.330813][ T8386] vlan3: entered promiscuous mode
[  115.333944][ T8386] bridge0: entered promiscuous mode
[  115.335630][ T8386] vlan3: entered allmulticast mode
[  115.337193][ T8386] bridge0: entered allmulticast mode
[  115.387898][ T8405] netlink: 'syz.1.615': attribute type 32 has an invalid length.
[  115.426368][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.437683][ T8294] 8021q: adding VLAN 0 to HW filter on device team0
[  115.447516][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.449791][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.466862][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.469059][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.488232][ T8294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.629781][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.660378][ T8294] veth0_vlan: entered promiscuous mode
[  115.667905][ T8294] veth1_vlan: entered promiscuous mode
[  115.685616][ T8294] veth0_macvtap: entered promiscuous mode
[  115.689555][ T8294] veth1_macvtap: entered promiscuous mode
[  115.700446][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.707782][ T8294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.714821][ T8294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.717536][ T8294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.720143][ T8294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.722970][ T8294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.768547][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.770979][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.788832][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.793835][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.434800][ T8426] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  116.505538][ T8430] netlink: 'syz.1.623': attribute type 1 has an invalid length.
[  116.520340][ T8430] netlink: 'syz.1.623': attribute type 4 has an invalid length.
[  116.528419][ T8430] __nla_validate_parse: 15 callbacks suppressed
[  116.528431][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'.
[  116.535609][ T8432] netlink: 'syz.1.623': attribute type 1 has an invalid length.
[  116.563302][ T8436] netlink: 'syz.1.624': attribute type 10 has an invalid length.
[  116.565796][ T8436] team0: Device ipvlan1 is of different type
[  116.673052][ T8438] netlink: 'syz.1.625': attribute type 11 has an invalid length.
[  116.727176][ T8447] netlink: 'syz.1.628': attribute type 32 has an invalid length.
[  116.734625][ T8449] netlink: 'syz.0.629': attribute type 4 has an invalid length.
[  116.738864][ T8447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'.
[  116.744648][ T6672] lo speed is unknown, defaulting to 1000
[  116.746799][ T6672] syz0: Port: 1 Link DOWN
[  116.752681][ T6672] lo speed is unknown, defaulting to 1000
[  116.756035][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'.
[  116.756760][ T5884] lo speed is unknown, defaulting to 1000
[  116.761056][ T6672] syz0: Port: 1 Link ACTIVE
[  116.794901][ T8452] netlink: 208 bytes leftover after parsing attributes in process `syz.0.630'.
[  116.867098][ T8461] @: renamed from bond_slave_0
[  116.939693][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'.
[  116.976843][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[  116.980910][ T8472] chnl_net:caif_netlink_parms(): no params data found
[  117.028517][ T8468] delete_channel: no stack
[  117.197236][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[  117.212309][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'.
[  117.232256][ T8490] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  117.235496][ T7621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.205003][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  118.211629][ T7621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.403789][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'.
[  118.414530][ T8497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'.
[  118.422484][ T8495] veth0_to_bond: left allmulticast mode
[  118.424186][ T8495] veth0_to_bond: left promiscuous mode
[  118.425973][ T8495] bridge0: port 2(veth0_to_bond) entered disabled state
[  118.471772][ T8498] vxcan1 speed is unknown, defaulting to 1000
[  118.577842][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.581580][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.585967][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.586877][ T8507] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  118.593800][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.597069][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.666711][ T8498] lo speed is unknown, defaulting to 1000
[  118.666847][ T8510] vxcan1 speed is unknown, defaulting to 1000
[  118.847467][ T8510] lo speed is unknown, defaulting to 1000
[  118.940283][ T7621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.984877][ T8528] 8021q: adding VLAN 0 to HW filter on device bond15
[  119.042715][ T7621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.059530][ T8531] validate_nla: 5 callbacks suppressed
[  119.059540][ T8531] netlink: 'syz.1.649': attribute type 7 has an invalid length.
[  119.064103][ T8531] netlink: 'syz.1.649': attribute type 8 has an invalid length.
[  119.181750][ T8531] vxcan1 speed is unknown, defaulting to 1000
[  119.274700][ T7621] bridge_slave_1: left allmulticast mode
[  119.276521][ T7621] bridge_slave_1: left promiscuous mode
[  119.278464][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.294939][ T7621] bridge_slave_0: left allmulticast mode
[  119.296965][ T7621] bridge_slave_0: left promiscuous mode
[  119.298861][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.617634][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.622481][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.626317][ T7621] bond0 (unregistering): Released all slaves
[  119.635166][ T8531] lo speed is unknown, defaulting to 1000
[  119.658017][ T8510] chnl_net:caif_netlink_parms(): no params data found
[  119.927792][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.930044][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.932587][ T8510] bridge_slave_0: entered allmulticast mode
[  119.936473][ T8510] bridge_slave_0: entered promiscuous mode
[  119.952417][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.954729][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.959445][ T8510] bridge_slave_1: entered allmulticast mode
[  119.962964][ T8510] bridge_slave_1: entered promiscuous mode
[  120.024236][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.048616][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.084952][ T8553] macvlan0: entered promiscuous mode
[  120.087008][ T8553] macvlan0: left allmulticast mode
[  120.092568][ T8553] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  120.096995][ T8553] netlink: 'syz.0.651': attribute type 2 has an invalid length.
[  120.224215][ T8510] team0: Port device team_slave_0 added
[  120.228201][ T8510] team0: Port device team_slave_1 added
[  120.340308][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.343484][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.352609][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.463523][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.467200][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.482572][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.495503][ T7621] hsr_slave_0: left promiscuous mode
[  120.507925][ T7621] hsr_slave_1: left promiscuous mode
[  120.510642][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.513815][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.524191][ T7621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.527049][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.562979][ T7621] veth1_macvtap: left promiscuous mode
[  120.564794][ T7621] veth0_macvtap: left promiscuous mode
[  120.566513][ T7621] veth1_vlan: left promiscuous mode
[  120.571358][ T7621] veth0_vlan: left promiscuous mode
[  120.685385][ T5833] Bluetooth: hci0: command tx timeout
[  120.870260][ T7621] team0 (unregistering): Port device team_slave_1 removed
[  120.890366][ T7621] team0 (unregistering): Port device team_slave_0 removed
[  121.227117][ T8510] hsr_slave_0: entered promiscuous mode
[  121.230009][ T8510] hsr_slave_1: entered promiscuous mode
[  121.554221][ T8592] __nla_validate_parse: 9 callbacks suppressed
[  121.554232][ T8592] netlink: 124 bytes leftover after parsing attributes in process `syz.1.660'.
[  121.563153][ T8591] netlink: 124 bytes leftover after parsing attributes in process `syz.1.660'.
[  121.570694][ T8591] netlink: 'syz.1.660': attribute type 10 has an invalid length.
[  121.683174][ T8592] netlink: 'syz.1.660': attribute type 10 has an invalid length.
[  121.719834][ T8600] netlink: 'syz.1.661': attribute type 2 has an invalid length.
[  121.726881][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'.
[  121.785982][ T8510] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  121.794703][ T8510] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  121.808858][ T8510] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  121.819084][ T8510] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.913162][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.942353][ T8510] 8021q: adding VLAN 0 to HW filter on device team0
[  121.948080][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.950266][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.963576][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.965911][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.005670][ T8619] netlink: 56 bytes leftover after parsing attributes in process `syz.1.663'.
[  122.136559][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.188104][ T8510] veth0_vlan: entered promiscuous mode
[  122.198444][ T8510] veth1_vlan: entered promiscuous mode
[  122.220679][ T8510] veth0_macvtap: entered promiscuous mode
[  122.228835][ T8510] veth1_macvtap: entered promiscuous mode
[  122.240258][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.263223][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.286826][ T8510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.289494][ T8510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.304295][ T8510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.306957][ T8510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.382957][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.389605][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.413846][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.416726][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.494917][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'.
[  122.627345][ T8652] delete_channel: no stack
[  122.769267][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'.
[  122.777846][ T8669] : entered promiscuous mode
[  122.809659][ T8672] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  122.826012][ T8672] 8021q: adding VLAN 0 to HW filter on device bond16
[  122.835800][ T8672] bond16: (slave bridge8): making interface the new active one
[  122.838894][ T8672] bond16: (slave bridge8): Enslaving as an active interface with an up link
[  122.847507][ T8672] macvlan2: entered promiscuous mode
[  122.849246][ T8672] macvlan2: entered allmulticast mode
[  122.851159][ T8672] bond16: entered promiscuous mode
[  122.853432][ T8672] bridge8: entered promiscuous mode
[  122.855799][ T8672] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  122.858408][ T8672] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  122.863890][ T8672] bond16: left promiscuous mode
[  122.865379][ T8672] bridge8: left promiscuous mode
[  122.959766][ T8686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.015990][ T8686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.084850][ T8686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.144787][ T8686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.218849][ T8686] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.237452][ T8686] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.258618][ T8686] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.267367][ T8686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.432625][ T8715] netlink: 'syz.0.681': attribute type 9 has an invalid length.
[  123.567247][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'.
[  123.592578][ T8729] delete_channel: no stack
[  123.743558][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'.
[  123.747707][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'.
[  123.787631][ T8739] netlink: 'syz.0.688': attribute type 4 has an invalid length.
[  123.793805][ T5899] lo speed is unknown, defaulting to 1000
[  123.795581][ T5899] syz0: Port: 1 Link DOWN
[  123.800217][ T5899] lo speed is unknown, defaulting to 1000
[  123.804050][ T6672] lo speed is unknown, defaulting to 1000
[  123.805811][ T6672] syz0: Port: 1 Link ACTIVE
[  124.481160][ T5701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.733299][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  125.761559][ T8744] batadv_slave_1 (unregistering): left promiscuous mode
[  125.855753][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.859892][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.864384][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.867880][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.870833][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.898458][ T8753] vxcan1 speed is unknown, defaulting to 1000
[  125.926657][ T8752] validate_nla: 1 callbacks suppressed
[  125.926667][ T8752] netlink: 'syz.1.691': attribute type 10 has an invalid length.
[  126.027364][ T8756] delete_channel: no stack
[  126.071093][ T8753] lo speed is unknown, defaulting to 1000
[  126.120043][ T8776] netlink: 'syz.1.696': attribute type 1 has an invalid length.
[  126.146526][ T8779] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  126.150644][ T8779] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  126.154598][ T8779] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  126.157161][ T8779] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  126.162530][ T8779] bond17: (slave geneve3): making interface the new active one
[  126.165950][ T8779] bond17: (slave geneve3): Enslaving as an active interface with an up link
[  126.234086][ T5701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.246222][ T8786] 8021q: adding VLAN 0 to HW filter on device bond17
[  126.288423][ T8791] netlink: 'syz.1.698': attribute type 4 has an invalid length.
[  126.293484][ T8791] netlink: 'syz.1.698': attribute type 4 has an invalid length.
[  126.317008][ T5701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.377087][ T5701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.426991][ T8797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.437757][ T8797] ipvlan2: entered promiscuous mode
[  126.439745][ T8797] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  126.443582][ T8797] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  126.460579][ T8753] chnl_net:caif_netlink_parms(): no params data found
[  126.613185][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.615457][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.617646][ T8753] bridge_slave_0: entered allmulticast mode
[  126.632549][ T8753] bridge_slave_0: entered promiscuous mode
[  126.659670][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.664980][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.667152][ T8753] bridge_slave_1: entered allmulticast mode
[  126.669829][ T8753] bridge_slave_1: entered promiscuous mode
[  126.689615][ T5701] bridge_slave_1: left allmulticast mode
[  126.693449][ T5701] bridge_slave_1: left promiscuous mode
[  126.695270][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.699363][ T5701] bridge_slave_0: left allmulticast mode
[  126.701142][ T5701] bridge_slave_0: left promiscuous mode
[  126.705314][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.737202][ T8833] netlink: 'syz.0.705': attribute type 4 has an invalid length.
[  126.789700][ T8838] netlink: 'syz.0.705': attribute type 4 has an invalid length.
[  126.940430][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.945059][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.948791][ T5701] bond0 (unregistering): Released all slaves
[  126.968600][ T8839] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.976213][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.978966][ T5898] lo speed is unknown, defaulting to 1000
[  126.980634][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.000367][ T5898] lo speed is unknown, defaulting to 1000
[  127.006284][ T8836] xt_l2tp: v2 doesn't support IP mode
[  127.046082][ T8844] __nla_validate_parse: 5 callbacks suppressed
[  127.046093][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'.
[  127.050132][ T8753] team0: Port device team_slave_0 added
[  127.060056][    T9] lo speed is unknown, defaulting to 1000
[  127.087930][ T8753] team0: Port device team_slave_1 added
[  127.131821][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.133899][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.155430][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.165589][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.167668][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.177432][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.188444][ T8857] macsec0: entered promiscuous mode
[  127.196126][ T8857] macsec0: entered allmulticast mode
[  127.197728][ T8857] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  127.232508][ T8861] netlink: 17 bytes leftover after parsing attributes in process `syz.1.712'.
[  127.294262][ T8753] hsr_slave_0: entered promiscuous mode
[  127.296709][ T8753] hsr_slave_1: entered promiscuous mode
[  127.298748][ T8753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.301113][ T8753] Cannot create hsr debugfs directory
[  127.317583][ T8861] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.320962][ T8861] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  127.324333][ T8861] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  127.331609][ T8861] tipc: Resetting bearer <eth:syzkaller0>
[  127.509592][ T8867] vxcan1 speed is unknown, defaulting to 1000
[  127.655509][ T8879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'.
[  127.658871][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'.
[  127.686137][ T5701] hsr_slave_0: left promiscuous mode
[  127.688924][ T5701] hsr_slave_1: left promiscuous mode
[  127.695289][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.698161][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.702318][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.705075][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.718780][ T5701] veth1_macvtap: left promiscuous mode
[  127.720508][ T5701] veth0_macvtap: left promiscuous mode
[  127.724393][ T5701] veth1_vlan: left promiscuous mode
[  127.726000][ T5701] veth0_vlan: left promiscuous mode
[  127.961989][   T53] Bluetooth: hci0: command tx timeout
[  128.008951][ T5701] team0 (unregistering): Port device team_slave_1 removed
[  128.030234][ T5701] team0 (unregistering): Port device team_slave_0 removed
[  128.332537][ T8879] tipc: Resetting bearer <eth:syzkaller0>
[  128.337004][ T8879] team0: Port device gtp0 removed
[  128.340201][ T8879] bond9: (slave bond10): Releasing backup interface
[  128.346547][ T8879] veth9: left allmulticast mode
[  128.348415][ T8879] bridge0: port 1(veth9) entered disabled state
[  128.354486][ T8879] vlan2: left promiscuous mode
[  128.356684][ T8879] bridge0: port 3(vlan2) entered disabled state
[  128.364231][ T8879] bond16: (slave bridge8): Releasing active interface
[  128.375659][ T8879] bond17: (slave geneve3): Releasing active interface
[  128.379468][ T8879] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.382000][ T8879] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.384585][ T8879] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.386972][ T8879] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.393126][ T8867] lo speed is unknown, defaulting to 1000
[  128.562895][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'.
[  128.681966][ T8891] netlink: 260 bytes leftover after parsing attributes in process `syz.1.719'.
[  128.684639][ T8891] netlink: 260 bytes leftover after parsing attributes in process `syz.1.719'.
[  128.788398][ T8896] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  128.799401][ T8753] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  128.809186][ T8896] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  128.815608][ T8753] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  128.820285][ T8753] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  128.836689][ T8753] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  128.913220][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'.
[  128.996993][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.017701][ T8753] 8021q: adding VLAN 0 to HW filter on device team0
[  129.026222][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.028410][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.039446][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.041760][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.283169][ T8927] netlink: 84 bytes leftover after parsing attributes in process `syz.0.724'.
[  129.310309][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.388138][ T8753] veth0_vlan: entered promiscuous mode
[  129.402659][ T8753] veth1_vlan: entered promiscuous mode
[  129.433806][ T8753] veth0_macvtap: entered promiscuous mode
[  129.437621][ T8753] veth1_macvtap: entered promiscuous mode
[  129.447599][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.455817][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.459643][ T8753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.463007][ T8753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.466241][ T8753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.469333][ T8753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.530848][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.540542][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.562159][ T8947] 8021q: adding VLAN 0 to HW filter on device bond18
[  129.587702][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.590300][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.607701][ T8955] netlink: 6 bytes leftover after parsing attributes in process `syz.1.731'.
[  129.616310][   T33] audit: type=1800 audit(1752642201.553:5): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.731" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1883 res=0 errno=0
[  129.725795][ T8967] tipc: Resetting bearer <eth:syzkaller0>
[  129.728080][ T8967] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  129.730250][ T8967] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  129.734084][ T8967] bond2: left promiscuous mode
[  129.735834][ T8967] veth3: left allmulticast mode
[  129.737808][ T8967] ip6erspan0: left allmulticast mode
[  129.739644][ T8967] xfrm1: left promiscuous mode
[  129.741094][ T8967] xfrm1: left allmulticast mode
[  129.743281][ T8967] bond5: left promiscuous mode
[  129.745309][ T8967] bond7: left promiscuous mode
[  129.746981][ T8967] gretap2: left promiscuous mode
[  129.764542][ T8967] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.767814][ T8967] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.771409][ T8967] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.774590][ T8967] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.777992][ T8967] geneve2: left promiscuous mode
[  129.794078][ T8967] wireguard0: left promiscuous mode
[  129.796123][ T8967] wireguard0: left allmulticast mode
[  129.799405][ T8967] gtp2: left promiscuous mode
[  129.803822][ T8967] gtp2: left allmulticast mode
[  129.810157][ T8967] veth1: left promiscuous mode
[  129.815623][ T8967] veth9: left promiscuous mode
[  129.817634][ T8967] vlan2: left allmulticast mode
[  129.819634][ T8967] veth1: left allmulticast mode
[  129.821995][ T8967] vlan3: left promiscuous mode
[  129.823899][ T8967] bridge0: left promiscuous mode
[  129.826238][ T8967] vlan3: left allmulticast mode
[  129.828238][ T8967] bridge0: left allmulticast mode
[  129.900967][ T8971] vxcan1 speed is unknown, defaulting to 1000
[  130.001038][ T8971] lo speed is unknown, defaulting to 1000
[  130.310841][ T8979] netlink: 'syz.1.738': attribute type 4 has an invalid length.
[  130.317403][ T8979] netlink: 'syz.1.738': attribute type 4 has an invalid length.
[  130.527046][ T8996] pim6reg1: entered promiscuous mode
[  130.528856][ T8996] pim6reg1: entered allmulticast mode
[  130.662399][ T9009] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  130.664683][ T9009] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  130.667203][ T9009] tipc: Resetting bearer <eth:syzkaller0>
[  130.729657][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.956491][ T9035] validate_nla: 1 callbacks suppressed
[  130.956501][ T9035] netlink: 'syz.1.752': attribute type 10 has an invalid length.
[  131.105279][ T9044] netlink: 'syz.1.755': attribute type 10 has an invalid length.
[  131.183854][ T9053] netlink: 'syz.1.758': attribute type 10 has an invalid length.
[  131.261530][ T5701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.297125][ T9054] vxcan1 speed is unknown, defaulting to 1000
[  131.403432][ T9054] lo speed is unknown, defaulting to 1000
[  132.386746][ T5701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.705974][ T5701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.755328][ T9071] xt_hashlimit: size too large, truncated to 1048576
[  132.773366][ T5701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.790633][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.794170][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.796801][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.825534][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.831732][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.908012][ T9067] __nla_validate_parse: 10 callbacks suppressed
[  132.908024][ T9067] netlink: 14 bytes leftover after parsing attributes in process `syz.0.761'.
[  132.941802][ T9073] vxcan1 speed is unknown, defaulting to 1000
[  133.162481][ T5701] bridge_slave_1: left allmulticast mode
[  133.168857][ T5701] bridge_slave_1: left promiscuous mode
[  133.177671][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.194682][ T5701] bridge_slave_0: left allmulticast mode
[  133.196538][ T5701] bridge_slave_0: left promiscuous mode
[  133.204121][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.546565][ T9082] netlink: 48 bytes leftover after parsing attributes in process `syz.1.762'.
[  133.657011][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.662832][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.666442][ T5701] bond0 (unregistering): Released all slaves
[  133.675138][ T9073] lo speed is unknown, defaulting to 1000
[  133.805578][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  133.808946][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  133.825944][ T9098] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.829032][ T9098] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.832385][ T9098] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.835314][ T9098] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.967174][ T9106] bridge0: port 1(erspan0) entered blocking state
[  133.969321][ T9106] bridge0: port 1(erspan0) entered disabled state
[  133.972737][ T9106] erspan0: entered allmulticast mode
[  133.975565][ T9106] erspan0: left allmulticast mode
[  134.201459][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  134.405903][ T9073] chnl_net:caif_netlink_parms(): no params data found
[  134.497007][ T5701] hsr_slave_0: left promiscuous mode
[  134.506461][ T5701] hsr_slave_1: left promiscuous mode
[  134.508558][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.510867][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.533060][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.535316][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.554138][ T5701] veth1_macvtap: left promiscuous mode
[  134.555872][ T5701] veth0_macvtap: left promiscuous mode
[  134.567869][ T5701] veth1_vlan: left promiscuous mode
[  134.569503][ T5701] veth0_vlan: left promiscuous mode
[  134.589017][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.773'.
[  134.646116][ T9146] netlink: 'syz.1.771': attribute type 25 has an invalid length.
[  134.666501][ T9146] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.771'.
[  134.728521][ T9147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  134.841468][ T5833] Bluetooth: hci0: command tx timeout
[  134.899730][ T5701] team0 (unregistering): Port device team_slave_1 removed
[  134.921550][ T5701] team0 (unregistering): Port device team_slave_0 removed
[  135.268165][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.270612][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.273395][ T9073] bridge_slave_0: entered allmulticast mode
[  135.276793][ T9073] bridge_slave_0: entered promiscuous mode
[  135.281133][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.283811][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.286075][ T9073] bridge_slave_1: entered allmulticast mode
[  135.288791][ T9073] bridge_slave_1: entered promiscuous mode
[  135.317049][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.322020][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.363776][ T9073] team0: Port device team_slave_0 added
[  135.372785][ T9073] team0: Port device team_slave_1 added
[  135.416792][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.418922][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.438601][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.458279][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.463883][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.475658][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.570046][ T9073] hsr_slave_0: entered promiscuous mode
[  135.583208][ T9073] hsr_slave_1: entered promiscuous mode
[  135.888369][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.783'.
[  135.891142][ T9189] netlink: 72 bytes leftover after parsing attributes in process `syz.0.783'.
[  135.988954][ T9187] delete_channel: no stack
[  136.014257][ T9190] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.782'.
[  136.019710][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[  136.329350][ T9211] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  136.373889][ T9211] xt_CT: No such helper "snmp"
[  136.455278][ T9073] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  136.466505][ T9073] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  136.488738][ T9073] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  136.498974][ T9073] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  136.636904][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.658866][ T9073] 8021q: adding VLAN 0 to HW filter on device team0
[  136.674344][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.676516][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.700375][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.702978][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.720148][ T9260] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  136.728190][ T9250] tipc: Resetting bearer <eth:syzkaller0>
[  136.744281][ T9250] netlink: 'syz.1.794': attribute type 10 has an invalid length.
[  136.782067][ T9260] tipc: Resetting bearer <eth:team0>
[  136.819768][ T9260] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.823173][ T9260] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.825847][ T9260] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.828427][ T9260] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.895816][ T9260] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  136.910188][ T9260] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.913719][ T9260] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.916340][ T9260] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.919171][ T9260] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.923220][ T5833] Bluetooth: hci0: command tx timeout
[  136.930071][ T6672] lo speed is unknown, defaulting to 1000
[  136.935599][ T6672] syz0: Port: 1 Link DOWN
[  136.937144][ T6672] lo speed is unknown, defaulting to 1000
[  136.966361][ T9073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.055492][ T9282] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  137.092482][ T9282] 8021q: adding VLAN 0 to HW filter on device bond10
[  137.109508][ T9282] bond10: (slave ip6gretap4): making interface the new active one
[  137.112931][ T9282] bond10: (slave ip6gretap4): Enslaving as an active interface with an up link
[  137.136724][ T9282] veth5: entered promiscuous mode
[  137.140224][ T9282] bond10: (slave veth5): Enslaving as an active interface with a down link
[  137.148152][ T9282] erspan0: entered allmulticast mode
[  137.177397][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.180720][ T9291] netlink: 'syz.1.799': attribute type 10 has an invalid length.
[  137.246503][ T9073] veth0_vlan: entered promiscuous mode
[  137.260366][ T9073] veth1_vlan: entered promiscuous mode
[  137.308056][ T9073] veth0_macvtap: entered promiscuous mode
[  137.313986][ T9073] veth1_macvtap: entered promiscuous mode
[  137.328856][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.337613][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.342942][ T9073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.346135][ T9073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.349052][ T9073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.353002][ T9073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.427925][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.435562][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.473466][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.479065][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.609852][ T9321] lo: entered allmulticast mode
[  137.611747][ T9321] tunl0: entered allmulticast mode
[  137.613359][ T9321] gre0: entered allmulticast mode
[  137.614976][ T9321] gretap0: entered allmulticast mode
[  137.616748][ T9321] ip_vti0: entered allmulticast mode
[  137.618457][ T9321] ip6_vti0: entered allmulticast mode
[  137.620103][ T9321] sit0: entered allmulticast mode
[  137.623109][ T9321] ip6tnl0: entered allmulticast mode
[  137.625021][ T9321] ip6gre0: entered allmulticast mode
[  137.626869][ T9321] ip6gretap0: entered allmulticast mode
[  137.628780][ T9321] team0: entered allmulticast mode
[  137.630605][ T9321] dummy0: entered allmulticast mode
[  137.633365][ T9321] nlmon0: entered allmulticast mode
[  137.635168][ T9321] caif0: entered allmulticast mode
[  137.639302][ T9321] macvlan0: left promiscuous mode
[  137.640887][ T9321] macvlan0: entered allmulticast mode
[  137.646073][ T9321] geneve0: entered allmulticast mode
[  137.648037][ T9321] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  137.650124][ T9321] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  137.654700][ T9321] gretap1: entered allmulticast mode
[  137.656594][ T9321] netdevsim netdevsim0 eth0: entered allmulticast mode
[  137.658947][ T9321] netdevsim netdevsim0 eth1: entered allmulticast mode
[  137.661831][ T9321] netdevsim netdevsim0 eth2: entered allmulticast mode
[  137.664260][ T9321] netdevsim netdevsim0 eth3: entered allmulticast mode
[  137.666684][ T9321] macvlan2: left promiscuous mode
[  137.668446][ T9321] geneve2: entered allmulticast mode
[  137.670398][ T9321] vxlan0: entered allmulticast mode
[  137.673387][ T9321] bond1: entered allmulticast mode
[  137.675306][ T9321] geneve3: entered allmulticast mode
[  137.677253][ T9321] ip6gretap1: entered allmulticast mode
[  137.679235][ T9321] ip6erspan0: entered allmulticast mode
[  137.681134][ T9321] ip6gretap2: entered allmulticast mode
[  137.683657][ T9321] : entered allmulticast mode
[  137.685424][ T9321] bond2: entered allmulticast mode
[  137.687269][ T9321] hsr1: entered allmulticast mode
[  137.689096][ T9321] ip6tnl1: entered allmulticast mode
[  137.691985][ T9321] : entered allmulticast mode
[  137.693982][ T9321] bridge1: entered allmulticast mode
[  137.695911][ T9321] vxcan2: entered allmulticast mode
[  137.697781][ T9321] vxcan3: entered allmulticast mode
[  137.699605][ T9321] vxlan1: entered allmulticast mode
[  137.701925][ T9321] bridge2: entered allmulticast mode
[  137.703750][ T9321] veth2: entered allmulticast mode
[  137.705586][ T9321] syztnl2: entered allmulticast mode
[  137.707485][ T9321] bond0: entered allmulticast mode
[  137.709256][ T9321] bond3: entered allmulticast mode
[  137.711027][ T9321] bond4: entered allmulticast mode
[  137.713071][ T9321] gre1: entered allmulticast mode
[  137.715123][ T9321] vlan2: left promiscuous mode
[  137.716806][ T9321] bridge0: left promiscuous mode
[  137.718675][ T9321] bond5: entered allmulticast mode
[  137.720397][ T9321] bond6: entered allmulticast mode
[  137.722416][ T9321] gretap2: entered allmulticast mode
[  137.724533][ T9321] bridge3: entered allmulticast mode
[  137.726375][ T9321] ip6gretap3: entered allmulticast mode
[  137.728363][ T9321] bond7: entered allmulticast mode
[  137.730130][ T9321] batadv1: entered allmulticast mode
[  137.732907][ T9321] vxlan2: entered allmulticast mode
[  137.734727][ T9321] syztnl0: entered allmulticast mode
[  137.736526][ T9321] bond8: left promiscuous mode
[  137.738230][ T9321] bond9: entered allmulticast mode
[  137.740717][ T9321] bridge4: entered allmulticast mode
[  137.743062][ T9321] macvlan3: entered allmulticast mode
[  137.745006][ T9321] bridge5: entered allmulticast mode
[  137.746846][ T9321] macsec0: left promiscuous mode
[  137.748585][ T9321] vxlan3: entered allmulticast mode
[  137.750361][ T9321] gtp0: entered allmulticast mode
[  137.755032][ T9321] bond10: entered allmulticast mode
[  137.756799][ T9321] ip6gretap4: entered allmulticast mode
[  137.762977][ T9321] veth4: entered allmulticast mode
[  137.765925][ T9321] veth5: left promiscuous mode
[  137.767518][ T9321] veth5: entered allmulticast mode
[  137.771316][ T9321] syzkaller0: entered allmulticast mode
[  137.857541][ T9334] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  137.976223][ T9344] __nla_validate_parse: 9 callbacks suppressed
[  137.976237][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'.
[  138.064133][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'.
[  138.112568][ T9354] netlink: 'syz.0.809': attribute type 4 has an invalid length.
[  138.116199][ T9354] netlink: 'syz.0.809': attribute type 4 has an invalid length.
[  138.128452][ T5898] lo speed is unknown, defaulting to 1000
[  138.130205][ T5898] syz0: Port: 1 Link ACTIVE
[  138.132408][ T5898] lo speed is unknown, defaulting to 1000
[  138.150853][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'.
[  138.155715][ T9357] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[  138.188400][ T9357] bond11: (slave gretap3): making interface the new active one
[  138.191154][ T9357] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  138.238344][ T9361] netlink: 'syz.1.812': attribute type 10 has an invalid length.
[  138.244862][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'.
[  138.365174][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  138.406779][ T5898] lo speed is unknown, defaulting to 1000
[  138.408664][ T5898] syz0: Port: 1 Link DOWN
[  138.414002][ T5898] lo speed is unknown, defaulting to 1000
[  138.415729][  T789] lo speed is unknown, defaulting to 1000
[  138.417498][ T5898] syz0: Port: 1 Link ACTIVE
[  138.483445][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.818'.
[  138.486095][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz.0.818'.
[  138.493737][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.496133][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.518579][ T9376] delete_channel: no stack
[  138.547871][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'.
[  138.668668][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  138.705294][ T9390] wg1: left allmulticast mode
[  138.708523][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'.
[  139.156865][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.234943][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.332826][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.372775][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.460744][ T5863] bridge_slave_1: left allmulticast mode
[  140.464681][ T5863] bridge_slave_1: left promiscuous mode
[  140.467521][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.471585][ T5863] bridge_slave_0: left allmulticast mode
[  140.473517][ T5863] bridge_slave_0: left promiscuous mode
[  140.475323][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.744007][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.749369][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.753737][ T5863] bond0 (unregistering): Released all slaves
[  140.761477][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.780052][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.784038][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.791597][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.794611][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.822127][ T9413] vxcan1 speed is unknown, defaulting to 1000
[  140.863929][ T9420] gre2: entered allmulticast mode
[  141.026734][ T9427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.118641][ T9438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.124126][ T9413] lo speed is unknown, defaulting to 1000
[  141.132955][ T9438] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  141.294244][ T9452] ipvlan1: left allmulticast mode
[  141.308404][ T9452] bridge0: entered promiscuous mode
[  141.368514][ T9444] vxcan1 speed is unknown, defaulting to 1000
[  141.682927][ T5863] hsr_slave_0: left promiscuous mode
[  141.687744][ T5863] hsr_slave_1: left promiscuous mode
[  141.690754][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.697888][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.701978][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.711498][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.741267][ T5863] veth1_macvtap: left promiscuous mode
[  141.744356][ T5863] veth0_macvtap: left promiscuous mode
[  141.748524][ T5863] veth1_vlan: left promiscuous mode
[  141.755478][ T5863] veth0_vlan: left promiscuous mode
[  142.052834][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  142.081142][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  142.396889][ T9444] lo speed is unknown, defaulting to 1000
[  142.419841][ T9413] chnl_net:caif_netlink_parms(): no params data found
[  142.616690][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.619449][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.629785][ T9413] bridge_slave_0: entered allmulticast mode
[  142.635788][ T9413] bridge_slave_0: entered promiscuous mode
[  142.646312][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.648800][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.651763][ T9413] bridge_slave_1: entered allmulticast mode
[  142.662550][ T9413] bridge_slave_1: entered promiscuous mode
[  142.686581][ T9481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.706855][ T9481] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  142.709448][ T9481] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  142.715451][ T9413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.725677][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  142.729241][ T9413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.803256][ T9413] team0: Port device team_slave_0 added
[  142.815853][ T9413] team0: Port device team_slave_1 added
[  142.840999][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.841505][   T53] Bluetooth: hci0: command tx timeout
[  142.844151][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.855119][ T9413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.865537][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.868248][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.884078][ T9413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.971731][ T9413] hsr_slave_0: entered promiscuous mode
[  142.980824][ T9413] hsr_slave_1: entered promiscuous mode
[  143.122485][ T9508] sit0: left allmulticast mode
[  143.522778][ T9524] __nla_validate_parse: 4 callbacks suppressed
[  143.522789][ T9524] netlink: 248 bytes leftover after parsing attributes in process `syz.1.846'.
[  143.673384][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[  143.694558][ T9537] chnl_net:caif_netlink_parms(): no params data found
[  143.715066][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'.
[  143.717850][ T9539] netlink: 68 bytes leftover after parsing attributes in process `syz.0.849'.
[  143.769821][ T9530] delete_channel: no stack
[  143.826582][ T9546] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.851'.
[  143.829571][ T9546] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.851'.
[  143.835874][ T9413] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  143.840259][ T9545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.845459][ T9545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.848171][ T9545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.854953][ T9546] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.851'.
[  143.865036][ T9413] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  143.879568][ T9413] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  143.894594][ T9549] vlan4: entered allmulticast mode
[  143.896266][ T9549] bridge_slave_0: entered allmulticast mode
[  143.927992][ T9413] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.073870][ T9570] pim6reg1: entered promiscuous mode
[  144.077384][ T9570] pim6reg1: entered allmulticast mode
[  144.149408][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.170171][ T9413] 8021q: adding VLAN 0 to HW filter on device team0
[  144.171684][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'.
[  144.185684][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.187960][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.217554][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'.
[  144.257313][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.259537][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.355121][ T9584] syz.1.857: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.375315][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.1.857 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  144.375331][ T9584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.375338][ T9584] Call Trace:
[  144.375342][ T9584]  <TASK>
[  144.375348][ T9584]  dump_stack_lvl+0x189/0x250
[  144.375369][ T9584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.375379][ T9584]  ? __pfx__printk+0x10/0x10
[  144.375394][ T9584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.375408][ T9584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.375419][ T9584]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  144.375431][ T9584]  warn_alloc+0x214/0x310
[  144.375444][ T9584]  ? stack_depot_save_flags+0x40/0x900
[  144.375458][ T9584]  ? __pfx_warn_alloc+0x10/0x10
[  144.375470][ T9584]  ? kasan_save_track+0x4f/0x80
[  144.375481][ T9584]  ? xskq_create+0x56/0x170
[  144.375494][ T9584]  ? xsk_init_queue+0xb0/0x110
[  144.375504][ T9584]  ? xsk_setsockopt+0x43f/0x710
[  144.375514][ T9584]  ? do_sock_setsockopt+0x25a/0x3e0
[  144.375524][ T9584]  ? __x64_sys_setsockopt+0x18b/0x220
[  144.375532][ T9584]  ? do_syscall_64+0xfa/0x3b0
[  144.375540][ T9584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.375552][ T9584]  __vmalloc_node_range_noprof+0x125/0x12f0
[  144.375579][ T9584]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.375593][ T9584]  ? __kasan_kmalloc+0x93/0xb0
[  144.375603][ T9584]  vmalloc_user_noprof+0xad/0xf0
[  144.375615][ T9584]  ? xskq_create+0xbf/0x170
[  144.375626][ T9584]  xskq_create+0xbf/0x170
[  144.375639][ T9584]  xsk_init_queue+0xb0/0x110
[  144.375652][ T9584]  xsk_setsockopt+0x43f/0x710
[  144.375664][ T9584]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.375674][ T9584]  ? __lock_acquire+0xab9/0xd20
[  144.375687][ T9584]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  144.375700][ T9584]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.375712][ T9584]  do_sock_setsockopt+0x25a/0x3e0
[  144.375723][ T9584]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  144.375735][ T9584]  ? __fget_files+0x2a/0x420
[  144.375750][ T9584]  __x64_sys_setsockopt+0x18b/0x220
[  144.375762][ T9584]  do_syscall_64+0xfa/0x3b0
[  144.375769][ T9584]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.375782][ T9584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.375790][ T9584]  ? exc_page_fault+0x9f/0xf0
[  144.375802][ T9584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.375810][ T9584] RIP: 0033:0x7f987958e929
[  144.375820][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.375828][ T9584] RSP: 002b:00007f987a393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.375838][ T9584] RAX: ffffffffffffffda RBX: 00007f98797b5fa0 RCX: 00007f987958e929
[  144.375852][ T9584] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000f
[  144.375859][ T9584] RBP: 00007f9879610b39 R08: 0000000000000004 R09: 0000000000000000
[  144.375865][ T9584] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.375870][ T9584] R13: 0000000000000000 R14: 00007f98797b5fa0 R15: 00007ffefbfcf108
[  144.375883][ T9584]  </TASK>
[  144.375888][ T9584] Mem-Info:
[  144.501281][ T9584] active_anon:5657 inactive_anon:0 isolated_anon:0
[  144.501281][ T9584]  active_file:1211 inactive_file:38268 isolated_file:0
[  144.501281][ T9584]  unevictable:1768 dirty:34 writeback:0
[  144.501281][ T9584]  slab_reclaimable:9553 slab_unreclaimable:61923
[  144.501281][ T9584]  mapped:18197 shmem:2431 pagetables:1089
[  144.501281][ T9584]  sec_pagetables:0 bounce:0
[  144.501281][ T9584]  kernel_misc_reclaimable:0
[  144.501281][ T9584]  free:289306 free_pcp:17115 free_cma:0
[  144.532369][ T9413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.543488][ T9584] Node 0 active_anon:14348kB inactive_anon:0kB active_file:3664kB inactive_file:135992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43060kB dirty:92kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5024kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.573926][ T9584] Node 1 active_anon:8620kB inactive_anon:0kB active_file:1180kB inactive_file:17080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29728kB dirty:44kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7408kB pagetables:1820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.588610][ T9413] veth0_vlan: entered promiscuous mode
[  144.595385][ T9413] veth1_vlan: entered promiscuous mode
[  144.616474][ T9584] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.625635][ T9413] veth0_macvtap: entered promiscuous mode
[  144.636961][ T9584] lowmem_reserve[]: 0 812 812 812 812
[  144.638687][ T9584] Node 0 DMA32 free:251984kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14348kB inactive_anon:0kB active_file:3664kB inactive_file:135992kB unevictable:3536kB writepending:92kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:35572kB local_pcp:18416kB free_cma:0kB
[  144.650685][ T9413] veth1_macvtap: entered promiscuous mode
[  144.653519][ T9584] lowmem_reserve[]: 0 0 0 0 0
[  144.662373][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.668105][ T9584] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  144.682071][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.687450][ T9413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.692826][ T9413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.695737][ T9413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.698630][ T9413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.701785][ T9584] lowmem_reserve[]: 0 0 854 854 854
[  144.705640][ T9584] Node 1 Normal free:430060kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8552kB inactive_anon:0kB active_file:1180kB inactive_file:17080kB unevictable:3536kB writepending:44kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33972kB local_pcp:22472kB free_cma:0kB
[  144.719269][ T9584] lowmem_reserve[]: 0 0 0 0 0
[  144.720919][ T9584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  144.729467][ T9584] Node 0 DMA32: 124*4kB (UM) 188*8kB (UME) 178*16kB (UME) 217*32kB (UME) 87*64kB (UME) 111*128kB (UME) 55*256kB (UM) 21*512kB (UME) 11*1024kB (UME) 2*2048kB (UM) 44*4096kB (UM) = 251984kB
[  144.780482][ T9584] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  144.811287][ T9584] Node 1 Normal: 134*4kB (UME) 199*8kB (UM) 742*16kB (UM) 443*32kB (UME) 196*64kB (UM) 105*128kB (UM) 41*256kB (UME) 14*512kB (UM) 7*1024kB (UME) 3*2048kB (UM) 86*4096kB (M) = 437392kB
[  144.816760][ T9584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.819594][ T9584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.833690][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.836312][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.865081][ T9584] 42573 total pagecache pages
[  144.867630][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.870200][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.873835][ T9584] 0 pages in swap cache
[  144.875459][ T9584] Free swap  = 124996kB
[  144.876846][ T9584] Total swap = 124996kB
[  144.878227][ T9584] 786301 pages RAM
[  144.879485][ T9584] 0 pages HighMem/MovableOnly
[  144.881065][ T9584] 241085 pages reserved
[  144.886343][ T9584] 0 pages cma reserved
[  144.931734][   T53] Bluetooth: hci0: command tx timeout
[  145.028061][ T9626] Cannot find set identified by id 2 to match
[  145.129586][ T9637] xt_hashlimit: size too large, truncated to 1048576
[  145.259742][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  145.375850][ T9651] ip6_vti0: entered promiscuous mode
[  145.416590][ T9655] _Z`Ԁ@: entered promiscuous mode
[  145.443743][ T9657] @: renamed from veth0_vlan
[  145.526187][ T9658] delete_channel: no stack
[  145.559728][ T9662] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  145.778459][ T9688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.164627][ T9721] 8021q: adding VLAN 0 to HW filter on device bond12
[  146.206412][ T9721] macvlan4: entered promiscuous mode
[  146.208180][ T9721] macvlan4: entered allmulticast mode
[  146.210559][ T9721] bond12: (slave macvlan4): Opening slave failed
[  146.286879][ T9736] trusted_key: syz.0.884 sent an empty control message without MSG_MORE.
[  146.524423][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.058309][ T9756] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.163417][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.166145][ T9768] pim6reg9: entered allmulticast mode
[  148.168939][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.177439][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.180344][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.183598][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.186588][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.189537][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.201562][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.204706][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.210508][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.257467][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.266435][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.271113][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.276559][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.280610][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.294178][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.325370][ T9771] vxcan1 speed is unknown, defaulting to 1000
[  148.340374][ T9778] veth1: entered promiscuous mode
[  148.343354][ T9778] veth1: left allmulticast mode
[  148.391072][ T9784] validate_nla: 4 callbacks suppressed
[  148.391083][ T9784] netlink: 'syz.1.893': attribute type 1 has an invalid length.
[  148.392293][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.404247][ T9782] bond0: Device is already in use.
[  148.426075][ T9784] bond19: entered promiscuous mode
[  148.427628][ T9784] bond19: entered allmulticast mode
[  148.447128][ T9784] bridge11: the hash_elasticity option has been deprecated and is always 16
[  148.453763][ T9784] bond19: (slave bridge11): making interface the new active one
[  148.456047][ T9784] bridge11: entered promiscuous mode
[  148.457691][ T9784] bridge11: entered allmulticast mode
[  148.459856][ T9784] bond19: (slave bridge11): Enslaving as an active interface with an up link
[  148.504289][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.519365][ T9771] lo speed is unknown, defaulting to 1000
[  148.666577][ T5863] bridge_slave_1: left allmulticast mode
[  148.668370][ T5863] bridge_slave_1: left promiscuous mode
[  148.670323][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.707777][ T5863] bridge_slave_0: left allmulticast mode
[  148.715174][ T5863] bridge_slave_0: left promiscuous mode
[  148.716949][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.720567][ T9803] __nla_validate_parse: 14 callbacks suppressed
[  148.720576][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  148.948928][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.953222][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.956793][ T5863] bond0 (unregistering): Released all slaves
[  149.019611][ T9814] sctp: [Deprecated]: syz.1.902 (pid 9814) Use of int in max_burst socket option.
[  149.019611][ T9814] Use struct sctp_assoc_value instead
[  149.090266][ T9822] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  149.118697][ T9822] 8021q: adding VLAN 0 to HW filter on device bond20
[  149.207650][ T9822] 8021q: adding VLAN 0 to HW filter on device bond20
[  149.209918][ T9822] bond20: (slave vxcan7): The slave device specified does not support setting the MAC address
[  149.223133][ T9822] bond20: (slave vxcan7): Error -95 calling set_mac_address
[  149.269737][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  149.304284][ T9822] macvlan2: entered promiscuous mode
[  149.305961][ T9822] macvlan2: entered allmulticast mode
[  149.344765][ T9771] chnl_net:caif_netlink_parms(): no params data found
[  149.413778][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  149.424143][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'.
[  149.518423][ T9844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.581401][ T5863] hsr_slave_0: left promiscuous mode
[  149.587473][ T5863] hsr_slave_1: left promiscuous mode
[  149.590109][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.595334][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.598476][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.600785][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.613762][ T5863] veth1_macvtap: left promiscuous mode
[  149.615589][ T5863] veth0_macvtap: left promiscuous mode
[  149.617365][ T5863] veth1_vlan: left promiscuous mode
[  149.619202][ T5863] veth0_vlan: left promiscuous mode
[  149.904287][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  149.927545][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  150.255893][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.258244][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.260551][ T9771] bridge_slave_0: entered allmulticast mode
[  150.264070][ T9771] bridge_slave_0: entered promiscuous mode
[  150.272017][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.283389][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.285672][ T9771] bridge_slave_1: entered allmulticast mode
[  150.288468][ T9771] bridge_slave_1: entered promiscuous mode
[  150.292816][ T9873] netlink: 'syz.1.913': attribute type 4 has an invalid length.
[  150.302452][ T9873] netlink: 'syz.1.913': attribute type 4 has an invalid length.
[  150.322378][ T9771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.328866][ T9771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.362939][ T5833] Bluetooth: hci0: command tx timeout
[  150.398715][ T9771] team0: Port device team_slave_0 added
[  150.407721][ T9771] team0: Port device team_slave_1 added
[  150.444042][ T9883] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[  150.484801][ T9883] 8021q: adding VLAN 0 to HW filter on device bond21
[  150.488534][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.490695][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.502056][ T9771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.526515][ T9886] netlink: 52 bytes leftover after parsing attributes in process `syz.0.916'.
[  150.527189][ T9883] 8021q: adding VLAN 0 to HW filter on device bond21
[  150.532902][ T9883] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address
[  150.537044][ T9883] bond21: (slave vxcan7): Error -95 calling set_mac_address
[  150.542634][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'.
[  150.550393][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.553716][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.561596][ T9771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.669060][ T9771] hsr_slave_0: entered promiscuous mode
[  150.687318][ T9771] hsr_slave_1: entered promiscuous mode
[  150.805391][ T9897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.069668][ T9901] bond10: (slave ip6gretap4): Releasing active interface
[  151.096153][ T9901] bond10: (slave ip6gretap4): the permanent HWaddr of slave - 72:db:e7:19:4f:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  151.148280][ T9901] bond10: (slave veth5): Releasing active interface
[  151.182892][ T9901] bond11: (slave gretap3): Releasing active interface
[  151.379533][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'.
[  151.379886][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'.
[  151.477765][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  151.543207][ T9921] dvmrp1: entered allmulticast mode
[  151.564843][ T9921] dvmrp1: left allmulticast mode
[  151.585925][ T9771] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.590429][ T9771] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.600918][ T9771] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.608118][ T9771] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  151.673181][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.686192][ T9771] 8021q: adding VLAN 0 to HW filter on device team0
[  151.692097][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.694361][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.702114][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.704279][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.715970][ T9940] netlink: 'syz.1.925': attribute type 5 has an invalid length.
[  151.719649][ T9940] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.925'.
[  151.843508][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.879012][ T9771] veth0_vlan: entered promiscuous mode
[  151.895922][ T9771] veth1_vlan: entered promiscuous mode
[  151.929673][ T9771] veth0_macvtap: entered promiscuous mode
[  151.939210][ T9950] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  151.951674][ T9771] veth1_macvtap: entered promiscuous mode
[  151.975802][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.988793][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.015131][ T9771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.024393][ T9771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.029400][ T9771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.037923][ T9771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.152144][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.154629][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.193373][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.196457][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.252644][ T9969] netlink: 'syz.1.926': attribute type 7 has an invalid length.
[  152.255116][ T9969] netlink: 'syz.1.926': attribute type 8 has an invalid length.
[  152.386507][ T9968] delete_channel: no stack
[  152.567946][ T9993] vxcan1 speed is unknown, defaulting to 1000
[  152.685535][ T9993] lo speed is unknown, defaulting to 1000
[  154.293356][T10061] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  154.344029][ T5701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.948095][T10070] net_ratelimit: 57 callbacks suppressed
[  155.948130][T10070] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.994192][T10072] netlink: 'syz.1.954': attribute type 1 has an invalid length.
[  156.047730][ T5701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.064955][T10078] __nla_validate_parse: 76 callbacks suppressed
[  156.064969][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'.
[  156.072117][T10078] netlink: 'syz.0.955': attribute type 7 has an invalid length.
[  156.074491][T10078] netlink: 'syz.0.955': attribute type 8 has an invalid length.
[  156.076963][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'.
[  156.109830][T10077] delete_channel: no stack
[  156.116044][ T5701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.167154][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.172573][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.176927][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.180052][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.184121][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.201015][ T5701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.230385][T10085] vxcan1 speed is unknown, defaulting to 1000
[  156.262699][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[  156.363674][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'.
[  156.370008][T10091] netlink: 'syz.0.958': attribute type 14 has an invalid length.
[  156.373909][ T5701] bridge_slave_1: left allmulticast mode
[  156.381950][ T5701] bridge_slave_1: left promiscuous mode
[  156.383897][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.392152][ T5701] bridge_slave_0: left allmulticast mode
[  156.393979][ T5701] bridge_slave_0: left promiscuous mode
[  156.395814][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.649362][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.654449][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.658390][ T5701] bond0 (unregistering): Released all slaves
[  156.665342][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'.
[  156.668022][T10091] netlink: 'syz.0.958': attribute type 14 has an invalid length.
[  156.670670][T10085] lo speed is unknown, defaulting to 1000
[  156.719498][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  156.857552][T10110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.875495][T10110] syzkaller0: mtu less than device minimum
[  157.173508][T10085] chnl_net:caif_netlink_parms(): no params data found
[  157.186831][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  157.197896][T10140] netlink: 'syz.1.967': attribute type 10 has an invalid length.
[  157.200259][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'.
[  157.261892][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'.
[  157.336169][T10145] bond0: entered promiscuous mode
[  157.342683][T10145] bond0: left promiscuous mode
[  157.378092][ T5701] hsr_slave_0: left promiscuous mode
[  157.380290][ T5701] hsr_slave_1: left promiscuous mode
[  157.386203][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.388516][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.397327][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.399581][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.435315][ T5701] veth1_macvtap: left promiscuous mode
[  157.437092][ T5701] veth0_macvtap: left promiscuous mode
[  157.438904][ T5701] veth1_vlan: left promiscuous mode
[  157.440575][ T5701] veth0_vlan: left promiscuous mode
[  157.459983][T10159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.970'.
[  157.746406][ T5701] team0 (unregistering): Port device team_slave_1 removed
[  157.774531][ T5701] team0 (unregistering): Port device team_slave_0 removed
[  158.063740][T10165] ip_vti0: mtu less than device minimum
[  158.110293][T10085] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.114504][T10085] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.117839][T10085] bridge_slave_0: entered allmulticast mode
[  158.120524][T10085] bridge_slave_0: entered promiscuous mode
[  158.130814][T10085] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.136694][T10085] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.138951][T10085] bridge_slave_1: entered allmulticast mode
[  158.142064][T10085] bridge_slave_1: entered promiscuous mode
[  158.200879][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.201381][ T5833] Bluetooth: hci0: command tx timeout
[  158.213263][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.322323][T10085] team0: Port device team_slave_0 added
[  158.334157][T10085] team0: Port device team_slave_1 added
[  158.370454][T10186] netlink: 'syz.1.975': attribute type 11 has an invalid length.
[  158.387229][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.389763][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.400805][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.413089][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.418065][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.427809][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.490745][T10085] hsr_slave_0: entered promiscuous mode
[  158.495604][T10085] hsr_slave_1: entered promiscuous mode
[  158.874784][T10220] netlink: 'syz.1.981': attribute type 4 has an invalid length.
[  158.879243][T10220] netlink: 'syz.1.981': attribute type 4 has an invalid length.
[  159.058352][T10085] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  159.064049][T10085] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  159.068199][T10085] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  159.072927][T10085] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  159.160676][T10085] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.179070][T10085] 8021q: adding VLAN 0 to HW filter on device team0
[  159.185442][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.187601][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.200974][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.203292][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.342275][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.373300][T10085] veth0_vlan: entered promiscuous mode
[  159.378905][T10085] veth1_vlan: entered promiscuous mode
[  159.396709][T10085] veth0_macvtap: entered promiscuous mode
[  159.404954][T10085] veth1_macvtap: entered promiscuous mode
[  159.423984][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.430998][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.437329][T10085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.440186][T10085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.443150][T10085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.445771][T10085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.567468][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.570481][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.643773][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.647654][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.806563][T10279] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[  159.836100][T10279] 8021q: adding VLAN 0 to HW filter on device bond13
[  159.853804][T10279] veth9: entered promiscuous mode
[  159.860827][T10279] bond13: (slave veth9): Enslaving as a backup interface with a down link
[  159.925910][T10285] x_tables: duplicate underflow at hook 1
[  160.555083][T10318] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  160.775233][T10325] vlan4: entered allmulticast mode
[  160.776843][T10325] bond23: entered allmulticast mode
[  160.964853][T10333] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  161.039805][T10337] vxcan1 speed is unknown, defaulting to 1000
[  161.147580][T10337] lo speed is unknown, defaulting to 1000
[  161.533693][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.029469][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.083187][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.132966][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.244204][T10347] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  163.246338][T10347] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  163.248515][T10347] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  163.289621][   T12] bridge_slave_1: left allmulticast mode
[  163.303002][   T12] bridge_slave_1: left promiscuous mode
[  163.304869][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.324995][   T12] bridge_slave_0: left allmulticast mode
[  163.326800][   T12] bridge_slave_0: left promiscuous mode
[  163.328645][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.355615][T10356] validate_nla: 3 callbacks suppressed
[  163.355626][T10356] netlink: 'syz.1.1009': attribute type 2 has an invalid length.
[  163.359881][T10356] __nla_validate_parse: 18 callbacks suppressed
[  163.359889][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  163.384938][T10357] netlink: 'syz.0.1008': attribute type 4 has an invalid length.
[  163.480015][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  163.488742][T10365] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  163.492194][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  163.499737][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  163.506437][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  163.513866][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.545177][T10366] netlink: 'syz.1.1010': attribute type 4 has an invalid length.
[  163.692877][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.698024][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.702128][   T12] bond0 (unregistering): Released all slaves
[  163.836357][T10363] vxcan1 speed is unknown, defaulting to 1000
[  163.840689][T10368] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  163.911864][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  163.921898][T10380] Bluetooth: MGMT ver 1.23
[  163.936292][T10380] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  164.073756][T10389] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  164.099164][T10389] 8021q: adding VLAN 0 to HW filter on device bond14
[  164.119042][T10363] lo speed is unknown, defaulting to 1000
[  164.248339][T10403] netlink: 'syz.0.1020': attribute type 10 has an invalid length.
[  164.330112][T10406] xt_CT: No such helper "pptp"
[  164.332096][T10409] netlink: 'syz.0.1021': attribute type 10 has an invalid length.
[  164.559763][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'.
[  164.559800][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'.
[  164.615266][T10426] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  164.655851][T10426] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  164.724146][   T12] hsr_slave_0: left promiscuous mode
[  164.741734][   T12] hsr_slave_1: left promiscuous mode
[  164.747503][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.750048][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.753760][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.756331][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.770945][   T12] veth1_macvtap: left promiscuous mode
[  164.774689][   T12] veth0_macvtap: left promiscuous mode
[  164.776544][   T12] veth1_vlan: left promiscuous mode
[  164.778303][   T12] veth0_vlan: left promiscuous mode
[  165.070689][   T12] team0 (unregistering): Port device team_slave_1 removed
[  165.096813][   T12] team0 (unregistering): Port device team_slave_0 removed
[  165.435797][T10441] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  165.438971][T10363] chnl_net:caif_netlink_parms(): no params data found
[  165.479152][T10445] xt_TPROXY: Can be used only with -p tcp or -p udp
[  165.494171][T10445] bridge0: entered allmulticast mode
[  165.496516][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  165.525976][T10440] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1027'.
[  165.570213][T10363] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.577663][   T53] Bluetooth: hci0: command tx timeout
[  165.584752][T10363] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.586999][T10363] bridge_slave_0: entered allmulticast mode
[  165.589805][T10363] bridge_slave_0: entered promiscuous mode
[  165.598934][T10450] ip6_vti0: left promiscuous mode
[  165.604308][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  165.606705][T10450] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  165.608894][T10450] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  165.620005][T10450] bond19: left promiscuous mode
[  165.622867][T10450] bridge11: left promiscuous mode
[  165.624730][T10450] bond19: left allmulticast mode
[  165.626370][T10450] bridge11: left allmulticast mode
[  165.630490][T10450] macvlan2: left promiscuous mode
[  165.632590][T10450] macvlan2: left allmulticast mode
[  165.640169][T10363] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.643265][T10363] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.645744][T10363] bridge_slave_1: entered allmulticast mode
[  165.649526][T10363] bridge_slave_1: entered promiscuous mode
[  165.684711][T10363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.696048][T10363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.725722][T10363] team0: Port device team_slave_0 added
[  165.730605][T10363] team0: Port device team_slave_1 added
[  165.774164][T10363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.776361][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.791492][T10363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.805809][T10363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.807996][T10363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.821255][T10363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.879951][T10363] hsr_slave_0: entered promiscuous mode
[  165.884731][T10363] hsr_slave_1: entered promiscuous mode
[  166.026216][T10463] netlink: 'syz.1.1032': attribute type 1 has an invalid length.
[  166.040224][T10463] bond24: entered promiscuous mode
[  166.042931][T10463] 8021q: adding VLAN 0 to HW filter on device bond24
[  166.101024][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  166.111437][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'.
[  166.114212][T10467] netlink: 'syz.1.1033': attribute type 20 has an invalid length.
[  166.128847][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  166.136968][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'.
[  166.139762][T10467] netlink: 'syz.1.1033': attribute type 20 has an invalid length.
[  166.193418][T10472] gre0: left allmulticast mode
[  166.200404][T10472] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  166.374682][T10489] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.403304][T10489] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  166.470384][T10363] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  166.480241][T10363] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  166.494361][T10363] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  166.513738][T10363] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  166.607680][T10504] 
[  166.608572][T10504] ======================================================
[  166.610840][T10504] WARNING: possible circular locking dependency detected
[  166.613072][T10504] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  166.615588][T10504] ------------------------------------------------------
[  166.618410][T10504] syz.0.1042/10504 is trying to acquire lock:
[  166.620348][T10504] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  166.623354][T10504] 
[  166.623354][T10504] but task is already holding lock:
[  166.625807][T10504] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  166.628871][T10504] 
[  166.628871][T10504] which lock already depends on the new lock.
[  166.628871][T10504] 
[  166.632033][T10504] 
[  166.632033][T10504] the existing dependency chain (in reverse order) is:
[  166.634932][T10504] 
[  166.634932][T10504] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  166.637512][T10504]        lock_acquire+0x120/0x360
[  166.639157][T10504]        _raw_spin_lock_bh+0x36/0x50
[  166.640899][T10504]        nr_rt_ioctl+0x390/0xd50
[  166.642558][T10504]        sock_do_ioctl+0xdc/0x300
[  166.644224][T10504]        sock_ioctl+0x576/0x790
[  166.645824][T10504]        __se_sys_ioctl+0xfc/0x170
[  166.647491][T10504]        do_syscall_64+0xfa/0x3b0
[  166.649188][T10504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.651268][T10504] 
[  166.651268][T10504] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  166.653887][T10504]        lock_acquire+0x120/0x360
[  166.655498][T10504]        _raw_spin_lock_bh+0x36/0x50
[  166.657195][T10504]        nr_rt_ioctl+0x193/0xd50
[  166.658983][T10504]        sock_do_ioctl+0xdc/0x300
[  166.660572][T10504]        sock_ioctl+0x576/0x790
[  166.662141][T10504]        __se_sys_ioctl+0xfc/0x170
[  166.663729][T10504]        do_syscall_64+0xfa/0x3b0
[  166.665304][T10504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.667300][T10504] 
[  166.667300][T10504] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  166.669912][T10504]        validate_chain+0xb9b/0x2140
[  166.671513][T10504]        __lock_acquire+0xab9/0xd20
[  166.673152][T10504]        lock_acquire+0x120/0x360
[  166.674859][T10504]        _raw_spin_lock_bh+0x36/0x50
[  166.676837][T10504]        nr_rt_device_down+0xa9/0x720
[  166.678921][T10504]        nr_device_event+0x137/0x150
[  166.680788][T10504]        notifier_call_chain+0x1b6/0x3e0
[  166.682542][T10504]        __dev_notify_flags+0x18d/0x2e0
[  166.684246][T10504]        netif_change_flags+0xe8/0x1a0
[  166.686337][T10504]        dev_change_flags+0x130/0x260
[  166.688381][T10504]        dev_ioctl+0x7b4/0x1150
[  166.689910][T10504]        sock_do_ioctl+0x22c/0x300
[  166.691498][T10504]        sock_ioctl+0x576/0x790
[  166.693006][T10504]        __se_sys_ioctl+0xfc/0x170
[  166.694545][T10504]        do_syscall_64+0xfa/0x3b0
[  166.696080][T10504]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.698009][T10504] 
[  166.698009][T10504] other info that might help us debug this:
[  166.698009][T10504] 
[  166.700992][T10504] Chain exists of:
[  166.700992][T10504]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  166.700992][T10504] 
[  166.705037][T10504]  Possible unsafe locking scenario:
[  166.705037][T10504] 
[  166.707283][T10504]        CPU0                    CPU1
[  166.708885][T10504]        ----                    ----
[  166.710513][T10504]   lock(nr_neigh_list_lock);
[  166.711917][T10504]                                lock(&nr_node->node_lock);
[  166.714053][T10504]                                lock(nr_neigh_list_lock);
[  166.716159][T10504]   lock(nr_node_list_lock);
[  166.717514][T10504] 
[  166.717514][T10504]  *** DEADLOCK ***
[  166.717514][T10504] 
[  166.719871][T10504] 2 locks held by syz.0.1042/10504:
[  166.721398][T10504]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  166.723997][T10504]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  166.726987][T10504] 
[  166.726987][T10504] stack backtrace:
[  166.728805][T10504] CPU: 0 UID: 0 PID: 10504 Comm: syz.0.1042 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  166.728817][T10504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.728824][T10504] Call Trace:
[  166.728831][T10504]  <TASK>
[  166.728836][T10504]  dump_stack_lvl+0x189/0x250
[  166.728850][T10504]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.728861][T10504]  ? __pfx__printk+0x10/0x10
[  166.728873][T10504]  ? print_lock_name+0xde/0x100
[  166.728884][T10504]  print_circular_bug+0x2ee/0x310
[  166.728897][T10504]  check_noncircular+0x134/0x160
[  166.728908][T10504]  validate_chain+0xb9b/0x2140
[  166.728922][T10504]  __lock_acquire+0xab9/0xd20
[  166.728931][T10504]  ? nr_rt_device_down+0xa9/0x720
[  166.728939][T10504]  lock_acquire+0x120/0x360
[  166.728946][T10504]  ? nr_rt_device_down+0xa9/0x720
[  166.728956][T10504]  ? nr_rt_device_down+0xa9/0x720
[  166.728963][T10504]  _raw_spin_lock_bh+0x36/0x50
[  166.728977][T10504]  ? nr_rt_device_down+0xa9/0x720
[  166.728984][T10504]  nr_rt_device_down+0xa9/0x720
[  166.728992][T10504]  ? do_raw_spin_unlock+0x4d/0x240
[  166.729005][T10504]  nr_device_event+0x137/0x150
[  166.729017][T10504]  notifier_call_chain+0x1b6/0x3e0
[  166.729029][T10504]  __dev_notify_flags+0x18d/0x2e0
[  166.729040][T10504]  ? __pfx___dev_notify_flags+0x10/0x10
[  166.729049][T10504]  ? __dev_change_flags+0x4cc/0x6d0
[  166.729059][T10504]  ? __pfx___dev_change_flags+0x10/0x10
[  166.729068][T10504]  ? dev_ioctl+0x7a4/0x1150
[  166.729076][T10504]  ? full_name_hash+0x92/0xe0
[  166.729089][T10504]  netif_change_flags+0xe8/0x1a0
[  166.729100][T10504]  dev_change_flags+0x130/0x260
[  166.729110][T10504]  dev_ioctl+0x7b4/0x1150
[  166.729118][T10504]  sock_do_ioctl+0x22c/0x300
[  166.729134][T10504]  ? __pfx_sock_do_ioctl+0x10/0x10
[  166.729144][T10504]  ? __lock_acquire+0xab9/0xd20
[  166.729155][T10504]  sock_ioctl+0x576/0x790
[  166.729166][T10504]  ? __pfx_sock_ioctl+0x10/0x10
[  166.729176][T10504]  ? __fget_files+0x2a/0x420
[  166.729186][T10504]  ? __fget_files+0x3a0/0x420
[  166.729196][T10504]  ? __fget_files+0x2a/0x420
[  166.729205][T10504]  ? bpf_lsm_file_ioctl+0x9/0x20
[  166.729214][T10504]  ? __pfx_sock_ioctl+0x10/0x10
[  166.729224][T10504]  __se_sys_ioctl+0xfc/0x170
[  166.729233][T10504]  do_syscall_64+0xfa/0x3b0
[  166.729241][T10504]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.729252][T10504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.729267][T10504]  ? exc_page_fault+0x9f/0xf0
[  166.729279][T10504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.729289][T10504] RIP: 0033:0x7f3980b8e929
[  166.729300][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.729333][T10504] RSP: 002b:00007f398195f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.729343][T10504] RAX: ffffffffffffffda RBX: 00007f3980db5fa0 RCX: 00007f3980b8e929
[  166.729351][T10504] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000c
[  166.729358][T10504] RBP: 00007f3980c10b39 R08: 0000000000000000 R09: 0000000000000000
[  166.729364][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.729370][T10504] R13: 0000000000000000 R14: 00007f3980db5fa0 R15: 00007ffde1ba6a08
[  166.729379][T10504]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  166.926373][T10517] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  166.929187][T10517] caif:caif_disconnect_client(): nothing to disconnect
[  166.942894][T10517] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  166.945560][T10517] chnl_net:chnl_net_open(): state disconnected
[  166.947452][T10517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.499735][ T5701] erspan0 (unregistering): left promiscuous mode
[  168.078325][ T5701] bond1 (unregistering): Released all slaves
[  168.137525][ T5701] bond2 (unregistering): Released all slaves
[  168.143813][ T5701] smc: removing net device bond0 with user defined pnetid SYZ2
[  168.146329][ T5701] bond0 (unregistering): Released all slaves
[  168.150468][ T5701] bond3 (unregistering): Released all slaves
[  168.154767][ T5701] bond4 (unregistering): Released all slaves
[  168.159116][ T5701] bond5 (unregistering): Released all slaves
[  168.229637][ T5701] bond6 (unregistering): Released all slaves
[  168.290510][ T5701] bond7 (unregistering): Released all slaves
[  168.294811][ T5701] bond8 (unregistering): Released all slaves
[  168.298888][ T5701] bond9 (unregistering): Released all slaves
[  168.364062][ T5701] bond10 (unregistering): Released all slaves
[  168.368403][ T5701] bond11 (unregistering): Released all slaves
[  168.432475][ T5701] bond12 (unregistering): Released all slaves
[  168.490344][ T5701] bond13 (unregistering): (slave veth9): Releasing backup interface
[  168.493598][ T5701] bond13 (unregistering): Released all slaves
[  168.555032][ T5701] bond14 (unregistering): Released all slaves
[  168.632124][ T5701] : left promiscuous mode
[  168.672304][ T5701] : left promiscuous mode
[  168.707620][ T5701] _Z`Ԁ@: left promiscuous mode
[  168.745925][ T5701] tipc: Disabling bearer <eth:team0>
[  168.753425][ T5701] tipc: Disabling bearer <udp:syz1>
[  168.755024][ T5701] tipc: Disabling bearer <eth:syzkaller0>
[  168.757440][ T5701] tipc: Left network mode
[  168.981413][ T5701] hsr_slave_0: left promiscuous mode
[  169.007932][ T5701] pim6reg9 (unregistering): left allmulticast mode
[  169.351850][  T188] smc: removing ib device syz0
[  169.354867][  T790] lo speed is unknown, defaulting to 1000
[  169.356673][  T790] syz0: Port: 1 Link DOWN
[  169.568299][ T5701] IPVS: stop unused estimator thread 0...
[  169.940576][ T5701] bridge_slave_1: left allmulticast mode
[  169.942688][ T5701] bridge_slave_1: left promiscuous mode
[  169.944471][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.947457][ T5701] bridge_slave_0: left allmulticast mode
[  169.949252][ T5701] bridge_slave_0: left promiscuous mode
[  169.950952][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.036459][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.040461][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.044039][ T5701] bond0 (unregistering): Released all slaves
[  170.133514][ T5701] erspan0 (unregistering): left promiscuous mode
[  170.378725][ T5701] bridge0 (unregistering): left allmulticast mode
[  170.719234][ T5701] bond19 (unregistering): (slave bridge11): Releasing active interface
[  170.912101][ T5701] bond0 (unregistering): Released all slaves
[  170.916937][ T5701] bond1 (unregistering): Released all slaves
[  170.977334][ T5701] bond2 (unregistering): Released all slaves
[  171.033769][ T5701] bond3 (unregistering): Released all slaves
[  171.093680][ T5701] bond4 (unregistering): Released all slaves
[  171.154334][ T5701] bond5 (unregistering): Released all slaves
[  171.215957][ T5701] bond6 (unregistering): Released all slaves
[  171.276106][ T5701] bond7 (unregistering): Released all slaves
[  171.332862][ T5701] bond8 (unregistering): Released all slaves
[  171.393145][ T5701] bond9 (unregistering): Released all slaves
[  171.452478][ T5701] bond10 (unregistering): Released all slaves
[  171.456616][ T5701] bond11 (unregistering): Released all slaves
[  171.460751][ T5701] bond12 (unregistering): Released all slaves
[  171.465120][ T5701] bond13 (unregistering): Released all slaves
[  171.469859][ T5701] bond14 (unregistering): Released all slaves
[  171.539501][ T5701] bond15 (unregistering): Released all slaves
[  171.600024][ T5701] bond16 (unregistering): Released all slaves
[  171.659739][ T5701] bond17 (unregistering): Released all slaves
[  171.720917][ T5701] bond18 (unregistering): Released all slaves
[  171.725361][ T5701] bond19 (unregistering): Released all slaves
[  171.791037][ T5701] bond20 (unregistering): Released all slaves
[  171.856330][ T5701] bond21 (unregistering): Released all slaves
[  171.860594][ T5701] bond22 (unregistering): Released all slaves
[  171.864839][ T5701] bond23 (unregistering): Released all slaves
[  171.931727][ T5701] bond24 (unregistering): Released all slaves
[  172.033343][ T5701] : left promiscuous mode
[  172.073100][ T5701] tipc: Disabling bearer <eth:syzkaller0>
[  172.076144][ T5701] tipc: Left network mode
[  172.257790][ T5701] hsr_slave_0: left promiscuous mode
[  172.259800][ T5701] hsr_slave_1: left promiscuous mode
[  172.262250][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.264689][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.267695][ T5701] batadv_slave_1: left promiscuous mode
[  172.270679][ T5701] hsr_slave_0: left promiscuous mode
[  172.273609][ T5701] hsr_slave_1: left promiscuous mode
[  172.349620][ T5701] team0 (unregistering): Port device team_slave_1 removed
[  172.366907][ T5701] team0 (unregistering): Port device team_slave_0 removed
[  172.463662][ T5701] pimreg (unregistering): left allmulticast mode
[  172.730612][   T69] smc: removing ib device syz2
[  173.290830][ T5701] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
05:03:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003b66 RDI=0000000000003b67 RBP=00000000000003f8 RSP=ffffc900044bf030
R8 =ffff888021290237 R9 =1ffff11004252046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9895 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f398195f6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30514ff8 CR3=0000000038964000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000ff0000000000 0000ff0000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 ff00000000000000 XMM05=0000000000000000 00007fc80b011b1f
XMM06=0000000000000000 00007fc80b011b19 XMM07=0000000000000000 00007fc80b011b2d
XMM08=0000000000000000 00007fc80b011bb3 XMM09=0000000000000000 00007fc80b011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff3365401 RBX=000000000000b749 RCX=ffffffff822ed8bb RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88801ad14718 RBP=ffff88801ad146d0 RSP=ffffc900046ff560
R8 =ffff88801ad1471b R9 =1ffff110035a28e3 R10=dffffc0000000000 R11=ffffed10035a28e4
R12=0000000000000001 R13=0000000000000001 R14=ffffed10035a28e4 R15=1ffff110035a28e3
RIP=ffffffff8223a264 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4b5ebd8440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=6f2064696c61766e 69203a7325002d2d XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
