last executing test programs:

2.551008725s ago: executing program 0 (id=844):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000980)=""/189, 0xbd}], 0x3}}], 0x1, 0x41, 0x0)
recvmsg$can_raw(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/187, 0xbb}], 0x3}, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000440)=0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

2.451213256s ago: executing program 0 (id=845):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000009540), r5)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e1e, @local}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000009600)={0x0, 0x0, &(0x7f00000095c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400484c}, 0x400881c)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2.359464034s ago: executing program 2 (id=846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

2.112548664s ago: executing program 0 (id=847):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x13, 0xe}, {0xb, 0xb}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x1a, 0x0, 0x0) (async)
ioctl$FICLONE(r1, 0x40049409, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff010000ffdba4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x84, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x2, 0xb56, 0x10a, 0xffffffff, 0x6, 0x9}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x5}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x2, 0x6, 0x234, 0x3ff, 0x3ff}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

2.014608158s ago: executing program 2 (id=849):
getpid()
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000e2c0000440012800b000100697036746e6c0000340002801400030020010000000000000000000000000002050009002900000014000300ff0100000000000000000000003fa3ef00000108000400bf01000032903233ef8b8e907ca8049aebd3d893d4c6098da3847df138ab1763302eda6c754deb0ce481a6f5568d19403e6e25c77ada25d36f77deca5ae3cfc5f5ad1fd3fc8ded64962316eab8e79111f600aba667745f44945de48dccfb105aacc6f6940c80943e94b10203dfbca03f991beb1a2b243bf9baf7d6e281dcf110d226a20ead6262cafe22ed63332077af74ee5eff5089811084e1eee330817531445476c5d3125bf9cb5c45d789b753633b4bd97d0cf5755d501e3b02e0ed584d91"], 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000001300)="d7b5", 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x44, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298"}]}]}, 0x58}}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={0x0}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000040))
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000d80)={0x48, 0x1401, 0x1, 0x70bf2c, 0x25dfdbf9, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r12, 0x8f07, 0x20, 0x9, 0x101, {{0x1f, 0x4, 0x2, 0x31, 0x7c, 0x67, 0x0, 0xc, 0x29, 0x0, @private=0xa010100, @multicast1, {[@ssrr={0x89, 0x7, 0xfd, [@empty]}, @ssrr={0x89, 0x27, 0xf3, [@remote, @local, @rand_addr=0x64010101, @broadcast, @private=0xa010102, @empty, @empty, @rand_addr=0x64010101, @multicast1]}, @cipso={0x86, 0x37, 0x2, [{0x1, 0xe, "f030a5b37e02d3f506ea9d39"}, {0x1, 0x8, "90fb02fb931d"}, {0x0, 0x4, "2dca"}, {0x5, 0x11, "54437ac61aad06fe0d6703864ce30d"}, {0x2, 0x6, "b7b31c1e"}]}]}}}}})

1.500675734s ago: executing program 0 (id=851):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtclass={0x64, 0x28, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe1}, {0x6, 0x1}, {0xe, 0xfff2}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x47, 0x7}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xc840)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg1\x00'})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8}, 0x90)
socket(0x10, 0x2, 0x0) (async)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001600010a0002000000000000110000000400000008000600000000006209014b6834697fee017247888ee4676fcc96b52ef3b3c6da5ba429860944d20500076677fbad95c1dbb42ca3962dcf74a4cbb59d7f7efbaf705557da7e88af42373ede8d75882357c0b902c89e749002d810b51a1a63eb01be15"], 0x20}}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', <r7=>0x0, 0x7, 0x8000, 0x8, 0x100, {{0x1c, 0x4, 0x2, 0xe, 0x70, 0x64, 0x0, 0xee, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x20, 0x47, 0x0, 0x4, [0x51, 0x3, 0xffffffff, 0xfffffff9, 0x6, 0xa, 0x6]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x26, 0x0, 0x0, [0x5, 0x4, 0x641f, 0x1, 0xc, 0x8001]}, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0xa, [{@local, 0x4}, {@private=0xa010100, 0x8}, {@private=0xa010101, 0x8}]}]}}}}})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0xffff0000, 0x400, 0xf, 0x500, 0x8, 0x400004, r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030428bd78294167bb0000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.089461351s ago: executing program 2 (id=852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000000)='nl80211\x00', &(0x7f0000000140)='#@.\x00', 0xffffffffffffffce})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, r1, 0x701, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

1.079818107s ago: executing program 2 (id=853):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4)
listen(r2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, r4, 0xfcea6000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00ff8000001400", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
shutdown(r0, 0x1)

980.672549ms ago: executing program 0 (id=854):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xec3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40880)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000500)={<r4=>0xffffffffffffffff, &(0x7f0000000400)=')\x00', 0x20200, &(0x7f0000000440)={@align=0x4, {0x7fff, 0x0, 0x9, 0x401}}, 0x8, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xffffffa0})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={<r5=>r4, &(0x7f0000000540)='wpan3\x00', 0x54481, &(0x7f0000000580)={@align=0x5, {0x800, 0x2, 0x9, 0x4}}, 0x7fffffff, &(0x7f00000005c0), &(0x7f0000000600)})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x326, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000940), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', <r10=>0x0, 0x4, 0xb7, 0x17, 0x0, 0x16, @mcast1, @private1, 0x700, 0x80, 0x0, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a80)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x16c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc000010}, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x50)
pipe(&(0x7f0000000e40)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x8, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa4a}, [@ldst={0x0, 0x3, 0x1, 0xa, 0x1, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @alu={0x7, 0x0, 0x5, 0x1, 0x4, 0x30, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000e00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', r9, 0x0, r12, 0x8, &(0x7f0000000e80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0xb, 0x562, 0x2b3c}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f00)=[0x1], &(0x7f0000000f40)=[{0x5, 0x1, 0xa, 0x8}], 0x10, 0x8}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@newnexthop={0x64, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r11}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x40}}, @NHA_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc8b4}, 0x1)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000001180)=r10)
r14 = openat$cgroup_ro(r13, &(0x7f00000011c0)='memory.events.local\x00', 0x0, 0x0)
r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001240), r13)
sendmsg$SEG6_CMD_GET_TUNSRC(r14, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x74, r15, 0xa387e30c652e8f4d, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x41)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001380)={'wpan1\x00'})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0x9, <r16=>0x0}, 0x8)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x10001, '\x00', r11, r4, 0x5, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x1d, 0xe, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1993}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7f}, @generic={0x80, 0x1, 0x8, 0xa20, 0x6}]}, &(0x7f0000001440)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000001480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0xa, 0x2, 0x5}, 0x10, r16, 0x0, 0x0, &(0x7f00000015c0)=[r14, 0xffffffffffffffff, r4, r17, r4], 0x0, 0x10, 0xfc}, 0x94)

619.180519ms ago: executing program 1 (id=857):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000580)={0x1, 0xfffffffffffffc01, 0x9d, &(0x7f00000004c0)=""/157})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000007010800000000000000000000000009000100"], 0x20}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000813b0100280012800e0001f5a2398e4488c80069703667526574617000000014000280060002000000000006"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000813b0100280012800e0001f5a2398e4488c80069703667526574617000000014000280060002000000000006"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

551.38169ms ago: executing program 1 (id=858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0xd, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408d5}, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
epoll_create(0x8)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee)
bind$can_j1939(r5, &(0x7f0000000300)={0x1d, r7, 0x0, {0x1, 0xf0, 0x2}, 0xfd}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000700000505000400030000000900020073797a320000000014000780050015000000000008001240000200000500050002000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r10 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df006111700000000000850000004c00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x490, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xffffffff, 0xffffffff, 0x8ef5cc05b6b6d727], [0xff, 0xffffffff, 0xff000000, 0xff000000], 'ip_vti0\x00', 'veth1_to_batadv\x00', {}, {}, 0x3c, 0x4, 0xd, 0x11}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x31, 0x4, {0x5}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, [0xffffff00, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffffff, 0xffff00, 0xffffff00], 'bridge_slave_1\x00', 'pimreg1\x00', {}, {}, 0xc, 0x0, 0x4, 0x2d}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x57f], 0x8, 0x20, 0x2, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @mcast2, @loopback, @empty, @local, @empty, @private2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}}]}, @REJECT={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'veth0\x00', 'netpci0\x00', {}, {}, 0x0, 0x80, 0x5, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x0)

271.553738ms ago: executing program 1 (id=859):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@getqdisc={0xfffffffffffffe06, 0x26, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x5, 0xd}, {0xc, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r6 = socket$inet6(0xa, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r8, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) (async)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)
socket$netlink(0x10, 0x3, 0x10) (async)
r9 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r11, @ANYBLOB="1f00"], 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r14 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="a000000003080108000000000000000001000001050003001100000006000240886c00000600024060040000f100010073797a30000000003c000480080003400000003c08000840000000060800014000000006080002400000000708000240ffffffff080001400000000208000840000010000600024022e300000600024088ca000005d077331ce199749276640003000600024086dd0000000000000000fcd10df80000000000009fcca01c5acb385778b67d935e0b3725912d8bc358ea8d4910cc2b0020d5f99a416661d32716da33aa2ee0ee79735e99f56b355282449b0253b975cf4c3813883137c5d11b1a171cab33fa6b5eecd043dc7714940b4145f46eff8de2ba66b72a24fe335a0aa16eee361f121b75ffe0762e1bdcf43c9568237fbeb96fd48cd66117"], 0xa0}, 0x1, 0x0, 0x0, 0x20040044}, 0x40)
socket$inet_sctp(0x2, 0x1, 0x84)

200.583458ms ago: executing program 0 (id=860):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac2"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9)
recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001680)=""/139, 0x8b}, {&(0x7f0000000380)=""/160, 0xc4}, {&(0x7f00000005c0)=""/4107, 0x1014}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f00000027c0)=""/4096}], 0x5}, 0x22)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newnexthop={0x9c, 0x68, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x0, 0xe}, {0x0, 0x6}, {0x2, 0x3}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x7}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x90)
sendmsg$inet6(r4, &(0x7f0000003b00)={&(0x7f0000000280)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002340)="c94df4b44d99ed0debf51523b605ccd0247260df04f34d608be0253b6e08ec97caca20f556cd535844c6a33291ed8632b41344f735ac3c622cc6efb9c127d998861657aa10d138d0c315e56e3c8b845ab5d21e3aed3fb23fe7da707a0a6e10f60d4973d95f8052c6b23f14af197efdd58e4fd2da8519f969497f331dd0ccefef6d3cf8f7e924d736208dd8537cfe610020ab25bb52e1dcf67726a6db2204dc79d754d687826cb717ad77fe03618a6bfa4fb32c0ee4b89dfac0b0b27bbfa37ea28d2713f517daf7c3595a6d79577ae28a90f21c", 0xd3}, {&(0x7f0000002440)="257af8e6cb74b88ff36df19a17f2b1c14d7e", 0x12}], 0x2, &(0x7f00000037c0)=[@rthdr={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x0, 0xb, 0x0, [@loopback, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, @remote]}}}, @rthdr={{0x58, 0x29, 0x39, {0x6c, 0x8, 0x3, 0x8, 0x0, [@private1, @local, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x2c, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x48, {0x0, 0x10, 0x3, 0x0, [0x5, 0x8, 0x4, 0x7, 0x5, 0x6, 0x8, 0x4]}}, @ra={0x5, 0x2, 0xfff8}, @generic={0x3, 0x75, "4fdb173d3e7e7aa5b722a98edb7f721374d85ad35ec96bb6b02ed002d66421b66259344878c3d1ead019745ab094691ce5efa46c00b38c15e646e69aee8983e2a95597ac169c745453db3b737f8227a85f15e5fb122617c49a0432df97d517bbb315fd508e44480342ecf7844ff2765c242d036861"}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x5, [0x3, 0x18]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r0}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x16, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x5}, @pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x40, [0xe84, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x401, 0xb, 0x5, 0xffffffff]}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3c, 0x10, 0x2, 0x9, 0x0, [@empty, @mcast1, @mcast1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x338}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

199.730236ms ago: executing program 2 (id=861):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x5, 0x4, "dd197221"}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400), 0x8)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ts_info})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x40004)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvmmsg(r6, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000700)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/4108, 0x100c}, {&(0x7f0000000940)=""/61, 0x3d}, {&(0x7f0000000840)=""/255, 0xff}], 0x5}, 0x5d}, {{&(0x7f00000004c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000ac0)=""/146, 0x92}, {&(0x7f0000000b80)=""/10, 0xa}, {&(0x7f0000000bc0)=""/120, 0x78}], 0x5, &(0x7f0000000cc0)=""/6, 0x6}, 0x2}, {{&(0x7f0000000d00)=@rc, 0x80, &(0x7f0000002200)=[{&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/27, 0x1b}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/142, 0x8e}, {&(0x7f0000002100)=""/204, 0xcc}], 0x5}, 0x3ff}], 0x3, 0x122, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000f600000000000000", @ANYRES32=0x1, @ANYBLOB="d75b0000e4ff8000004000000000010000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="040000000500"/28], 0x50)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r12, r10, 0x25, 0x0, @val=@tcx={@void, @value=r11}}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r8, 0x0, '\x00', r10}, 0x50)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, 0x0, 0x0)

100.994887ms ago: executing program 1 (id=862):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x100, 0x28}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000001, 0x80}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4880)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x824, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4001)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000640)=0xe8)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000680)=0x2f07, 0x4)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40d0}, 0x4002000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048084}, 0x40)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r9, 0x8004af7a, &(0x7f0000000980))
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000009c0)={0x3, 0x5}, &(0x7f0000000a00)=0x10)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x4040081)
r11 = socket$kcm(0x29, 0x0, 0x0)
readv(r11, &(0x7f0000001c00)=[{&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_ID={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r13, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40010)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r13, 0x40109441, &(0x7f0000001e40)={0x9, 0x1, 0xe})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002040), 0x4)

9.287936ms ago: executing program 1 (id=863):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.164923ms ago: executing program 2 (id=864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfffd, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x7a2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xffffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x6}}]}}}]}, 0x9c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfffd, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x7a2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xffffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x6}}]}}}]}, 0x9c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc)
socket$netlink(0x10, 0x3, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="1f00"], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="1f00"], 0x20)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r12, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r13=>0x0}, 0x8)
r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r13, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r14, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=865):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
read$alg(r2, &(0x7f0000000100)=""/243, 0xf3)
sendfile(r1, r1, &(0x7f00000000c0)=0x4, 0x38c6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54559' (ED25519) to the list of known hosts.
syzkaller login: [   56.027185][ T5550] cgroup: Unknown subsys name 'net'
[   56.115756][ T5550] cgroup: Unknown subsys name 'cpuset'
[   56.119712][ T5550] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.877750][ T5550] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.449287][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.454110][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.458277][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.464452][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.476947][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.481023][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.485923][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.489574][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.496907][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.500786][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.581197][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.586210][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.591312][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.596167][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.599581][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.127110][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.130270][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.134707][ T5608] bridge_slave_0: entered allmulticast mode
[   64.138317][ T5608] bridge_slave_0: entered promiscuous mode
[   64.163080][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.166049][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.168326][ T5608] bridge_slave_1: entered allmulticast mode
[   64.171022][ T5608] bridge_slave_1: entered promiscuous mode
[   64.202427][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.222843][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.262724][ T5608] team0: Port device team_slave_0 added
[   64.274186][ T5608] team0: Port device team_slave_1 added
[   64.316100][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.318650][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.321182][ T5612] bridge_slave_0: entered allmulticast mode
[   64.325420][ T5612] bridge_slave_0: entered promiscuous mode
[   64.329989][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.332717][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.340396][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.354307][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.356863][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.359201][ T5612] bridge_slave_1: entered allmulticast mode
[   64.362817][ T5612] bridge_slave_1: entered promiscuous mode
[   64.365736][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.367822][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.375742][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.417486][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.436498][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.477810][ T5608] hsr_slave_0: entered promiscuous mode
[   64.482081][ T5608] hsr_slave_1: entered promiscuous mode
[   64.485294][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.487714][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.490222][ T5621] bridge_slave_0: entered allmulticast mode
[   64.493350][ T5621] bridge_slave_0: entered promiscuous mode
[   64.497100][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.499365][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.501796][ T5621] bridge_slave_1: entered allmulticast mode
[   64.504533][ T5621] bridge_slave_1: entered promiscuous mode
[   64.516675][ T5612] team0: Port device team_slave_0 added
[   64.536791][ T5612] team0: Port device team_slave_1 added
[   64.549251][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.567028][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.595611][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.597702][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.605376][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.623355][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.625421][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.633032][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.648389][ T5621] team0: Port device team_slave_0 added
[   64.668807][ T5621] team0: Port device team_slave_1 added
[   64.708855][ T5612] hsr_slave_0: entered promiscuous mode
[   64.712057][ T5612] hsr_slave_1: entered promiscuous mode
[   64.715012][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   64.717244][ T5612] Cannot create hsr debugfs directory
[   64.737076][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.739958][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.750189][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.769871][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.772963][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.783452][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.899599][ T5621] hsr_slave_0: entered promiscuous mode
[   64.902871][ T5621] hsr_slave_1: entered promiscuous mode
[   64.905613][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   64.907810][ T5621] Cannot create hsr debugfs directory
[   65.067800][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.089974][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.110554][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.117275][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.120234][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.125836][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.144567][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.149695][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.219140][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.230355][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.238007][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.245922][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.250050][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.257897][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.270081][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.274935][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.351381][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.358170][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.362704][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.368079][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.380964][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.386957][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.395697][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.403510][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.496513][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.547501][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.552598][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   65.553189][ T5613] Bluetooth: hci1: command tx timeout
[   65.555677][ T5611] Bluetooth: hci0: command tx timeout
[   65.576092][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.579065][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.595086][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.597299][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.605868][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.617380][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   65.631018][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.633730][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.636249][ T5611] Bluetooth: hci2: command tx timeout
[   65.664521][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.666674][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.674020][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   65.690547][  T799] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.693121][  T799] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.714551][  T799] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.716848][  T799] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.039395][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.080613][ T5612] veth0_vlan: entered promiscuous mode
[   66.086977][ T5612] veth1_vlan: entered promiscuous mode
[   66.107142][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.131326][ T5612] veth0_macvtap: entered promiscuous mode
[   66.137707][ T5612] veth1_macvtap: entered promiscuous mode
[   66.149491][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.161306][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.172649][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.193609][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.197150][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.200851][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.208689][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.217728][ T5608] veth0_vlan: entered promiscuous mode
[   66.240213][ T5608] veth1_vlan: entered promiscuous mode
[   66.273494][ T5621] veth0_vlan: entered promiscuous mode
[   66.308786][ T5621] veth1_vlan: entered promiscuous mode
[   66.365841][ T5608] veth0_macvtap: entered promiscuous mode
[   66.375349][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.381084][ T5608] veth1_macvtap: entered promiscuous mode
[   66.392357][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.442424][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.445792][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.450242][ T5621] veth0_macvtap: entered promiscuous mode
[   66.468051][ T5621] veth1_macvtap: entered promiscuous mode
[   66.475492][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.488937][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.497077][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.499275][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.506352][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.520093][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.531125][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.541456][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.588949][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.622525][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.631028][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.641245][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.649320][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.709729][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.714037][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.786304][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.791933][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.823380][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.827123][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.870789][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.875428][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.063986][ T5734] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.074454][ T5733] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.101407][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.105225][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.121268][ T5736] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   67.129352][ T5736] bond1 (unregistering): Released all slaves
[   67.164043][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.185435][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.197563][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.210947][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.299068][ T5733] Zero length message leads to an empty skb
[   67.302356][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.327005][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.436091][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   67.523005][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   67.584548][ T5764] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   67.631958][ T5611] Bluetooth: hci0: command tx timeout
[   67.633090][ T5613] Bluetooth: hci1: command tx timeout
[   67.724105][ T5613] Bluetooth: hci2: command tx timeout
[   67.779922][ T5779] : renamed from veth0_to_bond (while UP)
[   67.896716][ T5666] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.901415][ T5666] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.905174][ T5666] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.908668][ T5666] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.982401][ T5783] veth0: entered promiscuous mode
[   67.989419][ T5794] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   68.019092][ T5796] xt_hashlimit: size too large, truncated to 1048576
[   68.021448][ T5796] xt_hashlimit: max too large, truncated to 1048576
[   68.110852][ T5796] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   68.149009][ T5798] netlink: 'syz.2.24': attribute type 1 has an invalid length.
[   68.164335][ T5798] vlan3: entered allmulticast mode
[   68.168230][ T5798] bond_slave_0: entered allmulticast mode
[   68.219034][ T5803] netlink: 'syz.0.26': attribute type 13 has an invalid length.
[   68.221779][ T5803] netlink: 'syz.0.26': attribute type 17 has an invalid length.
[   68.469824][ T5807] bond0: (slave bond_slave_1): Releasing backup interface
[   68.569058][ T5819] tipc: Started in network mode
[   68.572662][ T5819] tipc: Node identity eec3f12fa691, cluster identity 4711
[   68.575538][ T5819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.578809][ T5819] syzkaller0: entered promiscuous mode
[   68.581409][ T5819] syzkaller0: entered allmulticast mode
[   68.618483][ T5819] tipc: Resetting bearer <eth:syzkaller0>
[   68.658564][ T5816] tipc: Resetting bearer <eth:syzkaller0>
[   68.679652][ T5816] tipc: Disabling bearer <eth:syzkaller0>
[   68.692187][ T5782] veth0: left promiscuous mode
[   68.775421][ T5829] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   68.789939][ T5829] netlink: 'syz.0.32': attribute type 4 has an invalid length.
[   69.010441][ T5842] team0: Port device team_slave_0 removed
[   69.092584][ T5832] x9: renamed from bridge_slave_0 (while UP)
[   69.244431][ T5852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.264157][ T5852] syz.1.39 uses obsolete (PF_INET,SOCK_PACKET)
[   69.502907][ T5868] veth0_to_bond: default FDB implementation only supports local addresses
[   69.712106][ T5613] Bluetooth: hci1: command tx timeout
[   69.721675][ T5613] Bluetooth: hci0: command tx timeout
[   69.789516][ T5879] ipvlan2: entered promiscuous mode
[   69.792451][ T5613] Bluetooth: hci2: command tx timeout
[   70.041472][ T5894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.390569][ T5912] block nbd0: Unsupported socket: should be TCP or UNIX.
[   70.439793][ T5912] block nbd0: Unsupported socket: should be TCP or UNIX.
[   70.527608][ T5921] hsr_slave_1 (unregistering): left promiscuous mode
[   70.572372][ T5926] bridge_slave_0: left allmulticast mode
[   70.586023][ T5926] bridge_slave_0: left promiscuous mode
[   70.592510][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.611047][ T5926] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   70.669660][ T5937] bridge_slave_0: entered promiscuous mode
[   70.810399][ T5949] bond1: option broadcast_neighbor: invalid value (30)
[   70.813905][ T5949] bond1 (unregistering): Released all slaves
[   70.884724][ T5952] gretap0: entered promiscuous mode
[   70.895323][ T5949] 0{X: renamed from gretap0
[   70.899395][ T5949] 0{X: left promiscuous mode
[   70.901362][ T5949] 0{X: entered allmulticast mode
[   70.905366][ T5949] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   71.104122][ T5960] 5n: entered promiscuous mode
[   71.126638][ T5960] bond1: entered promiscuous mode
[   71.129117][ T5960] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.348479][ T5976] pim6reg1: entered promiscuous mode
[   71.350189][ T5976] pim6reg1: entered allmulticast mode
[   71.439577][ T5980] bridge_slave_1: left allmulticast mode
[   71.441405][ T5980] bridge_slave_1: left promiscuous mode
[   71.445963][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.455084][ T5980] bond0: (slave bond_slave_0): Releasing backup interface
[   71.459675][ T5980] bond0: (slave bond_slave_1): Releasing backup interface
[   71.469200][ T5980] team0: Port device team_slave_1 removed
[   71.471478][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.475125][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.478383][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.480573][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.485442][ T5980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   71.599916][ T5989] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.793340][ T5613] Bluetooth: hci0: command tx timeout
[   71.795578][ T5611] Bluetooth: hci1: command tx timeout
[   71.874604][ T5611] Bluetooth: hci2: command tx timeout
[   72.241460][ T6019] xt_SECMARK: invalid mode: 4
[   72.305728][ T6021] __nla_validate_parse: 30 callbacks suppressed
[   72.305741][ T6021] netlink: 424 bytes leftover after parsing attributes in process `syz.2.78'.
[   72.310713][ T6021] validate_nla: 9 callbacks suppressed
[   72.310721][ T6021] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[   72.357426][ T6026] netlink: 'syz.0.80': attribute type 4 has an invalid length.
[   72.364391][ T6026] netlink: 17 bytes leftover after parsing attributes in process `syz.0.80'.
[   72.448666][ T6026] batadv0: entered promiscuous mode
[   72.450270][ T6032] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[   72.452081][ T6026] macsec1: entered promiscuous mode
[   72.456911][ T6026] 8021q: adding VLAN 0 to HW filter on device macsec1
[   72.460076][ T6026] batadv0: left promiscuous mode
[   72.486542][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[   72.490816][ T6033] netlink: 104 bytes leftover after parsing attributes in process `syz.2.81'.
[   72.495022][ T6032] netlink: 104 bytes leftover after parsing attributes in process `syz.2.81'.
[   72.636620][ T5691] IPVS: starting estimator thread 0...
[   72.738426][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'.
[   72.742027][ T6044] IPVS: using max 64 ests per chain, 153600 per kthread
[   72.876486][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'.
[   72.928723][ T6051] bond1 (unregistering): Released all slaves
[   73.013501][ T6055] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   73.041253][ T6055] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.079919][ T6055] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.085151][ T6055] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   73.090241][ T6055] bond2: (slave vcan1): Error -95 calling set_mac_address
[   73.114789][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[   73.186920][ T6063] hmac(sha2: entered promiscuous mode
[   73.451349][ T6073] team0: entered promiscuous mode
[   73.455110][ T6073] team_slave_0: entered promiscuous mode
[   73.461962][ T6073] team_slave_1: entered promiscuous mode
[   73.477313][ T6073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   73.690227][ T6088] : entered promiscuous mode
[   73.740377][ T6089] netlink: 'syz.0.98': attribute type 29 has an invalid length.
[   73.888130][ T6095] netlink: 52 bytes leftover after parsing attributes in process `syz.0.100'.
[   73.900131][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.904002][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.932210][ T6095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.100'.
[   73.942290][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.944489][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.948106][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.950351][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.957229][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.959552][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.074023][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.077354][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.119393][ T6105] ipvlan2: left promiscuous mode
[   74.126023][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.129356][ T6105] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.199192][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.203228][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.755966][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.759685][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   77.248237][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.252543][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.337971][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.344771][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.441157][ T6131] __nla_validate_parse: 5 callbacks suppressed
[   77.441168][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[   77.557072][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.561907][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.576422][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.581116][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.625866][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.637246][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.656450][ T6133] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   77.727918][ T6135] openvswitch: netlink: IPv6 tunnel dst address is zero
[   77.756374][ T6133] bond1: entered promiscuous mode
[   77.762964][ T6133] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.769541][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.776606][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.800783][ T6135] ipvlan2: entered allmulticast mode
[   77.807902][ T6135] bond1: entered allmulticast mode
[   77.858886][ T6133] bond1: (slave bridge1): making interface the new active one
[   77.862548][ T6133] bridge1: entered promiscuous mode
[   77.865685][ T6133] bridge1: entered allmulticast mode
[   77.873819][ T6133] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   77.987079][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   77.987406][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'.
[   78.018961][ T6142] erspan0: entered promiscuous mode
[   78.022604][ T6142] macvtap1: entered promiscuous mode
[   78.026173][ T6142] macvtap1: entered allmulticast mode
[   78.027872][ T6142] erspan0: entered allmulticast mode
[   78.036119][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   78.041377][ T6142] erspan0: left allmulticast mode
[   78.053048][ T6142] erspan0: left promiscuous mode
[   78.056150][ T6142] macvtap1: left promiscuous mode
[   78.059579][ T6142] macvtap1: left allmulticast mode
[   78.179726][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[   78.195523][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[   78.203951][ T6149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.292196][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'.
[   78.326541][ T6159] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   78.330565][ T6163] bond0: entered promiscuous mode
[   78.337667][ T6163] bond_slave_0: entered promiscuous mode
[   78.343432][ T6163] batadv0: entered promiscuous mode
[   78.350397][ T6163] 8021q: adding VLAN 0 to HW filter on device hsr1
[   78.477897][ T6178] netlink: 'syz.1.124': attribute type 8 has an invalid length.
[   78.486270][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'.
[   78.515468][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'.
[   78.531325][ T6171] nbd: must specify at least one socket
[   78.574822][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'.
[   78.580399][ T6186] netlink: 'syz.0.126': attribute type 7 has an invalid length.
[   78.583599][ T6186] netlink: 'syz.0.126': attribute type 8 has an invalid length.
[   78.734889][ T5666] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.739275][ T5666] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.745661][ T5666] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.753830][ T5666] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.763305][ T5666] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.765779][ T5666] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.768963][ T5666] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.779147][ T5666] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.989428][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.992390][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.995324][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.997864][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.006129][ T6204] team0: left promiscuous mode
[   79.007974][ T6204] team_slave_0: left promiscuous mode
[   79.009740][ T6204] team_slave_1: left promiscuous mode
[   79.012772][ T6204] 8021q: adding VLAN 0 to HW filter on device team0
[   79.094755][ T6204] bond1: left promiscuous mode
[   79.096632][ T6204] bridge1: left promiscuous mode
[   79.100894][ T6204] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   79.145984][ T6206] ipip0: entered promiscuous mode
[   79.213117][ T6208] syzkaller1: entered promiscuous mode
[   79.215251][ T6208] syzkaller1: entered allmulticast mode
[   79.255563][ T6208] syzkaller0: entered promiscuous mode
[   79.259047][ T6208] syzkaller0: entered allmulticast mode
[   79.289362][ T6218] veth3: entered allmulticast mode
[   79.295753][ T6218] bond3: (slave veth3): Enslaving as an active interface with an up link
[   79.378033][ T6222] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   79.381241][ T6224] bond3 (unregistering): (slave veth3): Releasing backup interface
[   79.385755][ T6224] bond3 (unregistering): Released all slaves
[   79.496300][ T6228] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[   79.687944][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.690477][ T6230] bridge0: port 1(1x9) entered disabled state
[   79.783064][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.791019][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.891438][ T5666] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.894611][ T5666] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.902021][ T5666] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.905600][ T5666] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.014656][ T6258] bond0: Unable to set down delay as MII monitoring is disabled
[   80.018229][ T6259] bond0: Unable to set down delay as MII monitoring is disabled
[   80.058863][ T6258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.214229][ T6279] pimreg: entered allmulticast mode
[   80.217484][ T6278] pimreg: left allmulticast mode
[   80.369402][ T6288] batman_adv: batadv0: Adding interface: dummy0
[   80.373602][ T6288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.383883][ T6288] batman_adv: batadv0: Interface activated: dummy0
[   80.397785][ T6288] batadv0: mtu less than device minimum
[   80.405405][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.409530][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.414162][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.418172][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.422573][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.427544][ T6288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.555246][ T6300] Cannot find add_set index 0 as target
[   80.709072][ T6316] netlink: 'syz.0.149': attribute type 11 has an invalid length.
[   80.720507][ T6316] netlink: 'syz.0.149': attribute type 11 has an invalid length.
[   80.720519][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.729352][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.732785][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.735465][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.940268][ T6333] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   80.944882][ T6333] batman_adv: batadv0: Adding interface: ip6gretap1
[   80.946940][ T6333] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.955633][ T6333] batman_adv: batadv0: Interface activated: ip6gretap1
[   81.505904][ T6357] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   81.567510][ T6361] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[   81.666056][ T6361] bond3: (slave bridge3): making interface the new active one
[   81.677042][ T6361] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   81.731241][ T6361] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   81.737423][ T6361] bond3: entered promiscuous mode
[   81.739842][ T6361] bridge3: entered promiscuous mode
[   81.742989][ T6361] bond3: entered allmulticast mode
[   81.745026][ T6361] bridge3: entered allmulticast mode
[   81.747848][ T6361] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.836197][ T6376] netlink: 'syz.1.164': attribute type 32 has an invalid length.
[   81.867241][ T6376] bond4: Setting coupled_control to off (0)
[   82.035316][ T6390] bond2: option ad_user_port_key: invalid value (65535)
[   82.038327][ T6390] bond2: option ad_user_port_key: allowed values 0 - 1023
[   82.043550][ T6390] bond2 (unregistering): Released all slaves
[   82.083136][ T6392] bond2: option ad_user_port_key: invalid value (65535)
[   82.085336][ T6392] bond2: option ad_user_port_key: allowed values 0 - 1023
[   82.088501][ T6392] bond2 (unregistering): Released all slaves
[   82.187553][ T6404] syzkaller0: entered promiscuous mode
[   82.189547][ T6404] syzkaller0: entered allmulticast mode
[   82.332219][ T6412] batadv1: entered promiscuous mode
[   82.333791][ T6412] batadv1: entered allmulticast mode
[   82.480342][ T6415] __nla_validate_parse: 34 callbacks suppressed
[   82.480355][ T6415] netlink: 18 bytes leftover after parsing attributes in process `syz.0.171'.
[   82.815201][ T6445] net_ratelimit: 14 callbacks suppressed
[   82.815217][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.851274][ T6452] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.855543][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.908906][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'.
[   82.914107][ T6455] nbd: must specify at least one socket
[   82.924339][ T6445] IPVS: sed: FWM 3 0x00000003 - no destination available
[   82.926621][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[   82.990203][ T6458] validate_nla: 4 callbacks suppressed
[   82.990214][ T6458] netlink: 'syz.0.180': attribute type 1 has an invalid length.
[   83.012472][ T6458] bond2 (unregistering): Released all slaves
[   83.119102][ T6463] x_tables: duplicate underflow at hook 1
[   83.625892][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'.
[   83.630666][ T6470] netlink: 43 bytes leftover after parsing attributes in process `syz.2.183'.
[   83.635007][ T6470] netlink: 'syz.2.183': attribute type 5 has an invalid length.
[   83.639002][ T6470] netlink: 43 bytes leftover after parsing attributes in process `syz.2.183'.
[   83.705837][ T6472] batadv_slave_0: entered promiscuous mode
[   83.723417][ T6472] batadv_slave_0: left promiscuous mode
[   83.914143][ T6488] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.188'.
[   84.053573][ T6494] bond2: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[   84.056383][ T6494] bond2: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[   84.123297][ T6499] netlink: 'syz.0.191': attribute type 64 has an invalid length.
[   84.165805][ T6497] syzkaller0: entered promiscuous mode
[   84.173464][ T6497] syzkaller0: entered allmulticast mode
[   84.223203][ T6504] netlink: 'syz.0.192': attribute type 5 has an invalid length.
[   84.226096][ T6504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.239226][ T6504] ip6tnl1: entered allmulticast mode
[   84.243403][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   84.247951][ T6504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.345254][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'.
[   84.412332][ T6510] syzkaller0: entered promiscuous mode
[   84.414436][ T6510] syzkaller0: entered allmulticast mode
[   84.469732][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'.
[   84.520570][ T6517] bond3: option miimon: invalid value (18446744073709551607)
[   84.523354][ T6517] bond3: option miimon: allowed values 0 - 2147483647
[   84.527234][ T6517] bond3 (unregistering): Released all slaves
[   84.549928][ T6518] bond3: option miimon: invalid value (18446744073709551607)
[   84.552205][ T6518] bond3: option miimon: allowed values 0 - 2147483647
[   84.555854][ T6518] bond3 (unregistering): Released all slaves
[   84.656298][ T6523] xt_l2tp: v2 sid > 0xffff: 8388608
[   84.763875][ T6532] Illegal XDP return value 4294967274 on prog  (id 37) dev N/A, expect packet loss!
[   85.771023][ T6547] netlink: 'syz.1.204': attribute type 32 has an invalid length.
[   85.797608][ T6547] bond6: option coupled_control: invalid value (12)
[   85.803391][ T6547] bond6 (unregistering): Released all slaves
[   86.179128][ T6562] ip6erspan0: entered allmulticast mode
[   86.262449][ T6565] syzkaller0: entered promiscuous mode
[   86.264876][ T6565] syzkaller0: entered allmulticast mode
[   87.045048][  T796] cfg80211: failed to load regulatory.db
[   87.466378][ T6572] : renamed from wg2
[   87.535897][ T6578] __nla_validate_parse: 5 callbacks suppressed
[   87.535908][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   87.549153][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   87.721041][ T6598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.218'.
[   87.724486][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[   87.740357][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'.
[   87.784910][ T6601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'.
[   87.880739][ T6606] syzkaller0: entered promiscuous mode
[   87.883020][ T6606] syzkaller0: entered allmulticast mode
[   87.895085][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'.
[   88.074399][ T6627] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   88.112043][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   88.189870][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   88.206854][ T6633] bond6: (slave bridge4): making interface the new active one
[   88.210829][ T6633] bond6: (slave bridge4): Enslaving as an active interface with an up link
[   88.249564][ T6641] team0: Port device team_slave_0 removed
[   88.273008][ T6640] batman_adv: batadv0: Adding interface: ipvlan3
[   88.274956][ T6640] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.283925][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.287011][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.289839][ T6640] batman_adv: batadv0: Interface activated: ipvlan3
[   88.296659][ T6640] batadv0: mtu less than device minimum
[   88.301347][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.306481][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.311384][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.316199][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.321027][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.326005][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.330447][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.334917][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.338820][ T6640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   88.355158][ T6633] macvlan2: entered promiscuous mode
[   88.356807][ T6633] macvlan2: entered allmulticast mode
[   88.359089][ T6633] bond6: entered promiscuous mode
[   88.362056][ T6633] bridge4: entered promiscuous mode
[   88.364369][ T6633] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.367337][ T6633] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   88.372964][ T6633] bond6: left promiscuous mode
[   88.375204][ T6633] bridge4: left promiscuous mode
[   88.558008][ T6654] netlink: 'syz.1.234': attribute type 1 has an invalid length.
[   88.565033][ T6655] netlink: 'syz.1.234': attribute type 1 has an invalid length.
[   88.599352][ T6657] netlink: 'syz.2.235': attribute type 49 has an invalid length.
[   88.617034][ T6654] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.675559][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   88.697729][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[   89.252134][ T6691] warning: `syz.2.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.647540][ T6710] netlink: 'syz.2.249': attribute type 10 has an invalid length.
[   89.651236][ T6712] veth0_macvtap: left promiscuous mode
[   89.698654][ T6714] netlink: 'syz.2.249': attribute type 10 has an invalid length.
[   89.725647][ T6712] veth0_macvtap: entered promiscuous mode
[   89.772575][ T6710] team0: Port device dummy0 added
[   89.786527][ T6713] pimreg: entered allmulticast mode
[   89.805199][ T6714] team0: Port device dummy0 removed
[   89.824100][ T6714] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.893761][   T33] audit: type=1804 audit(1778498465.559:2): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.251" name="/newroot/100/memory.events" dev="tmpfs" ino=523 res=1 errno=0
[   89.913214][   T33] audit: type=1800 audit(1778498465.559:3): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="memory.events" dev="tmpfs" ino=523 res=0 errno=0
[   89.991247][ T6718] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   90.002074][ T6718] bond3 (unregistering): Released all slaves
[   90.175327][ T6738] syzkaller1: entered promiscuous mode
[   90.189222][ T6738] syzkaller1: entered allmulticast mode
[   90.444753][ T6754] pimreg9: entered allmulticast mode
[   90.449209][ T6756] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   90.483230][ T6756] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.128410][ T6791] veth0: entered promiscuous mode
[   91.136608][ T6791] veth0: left promiscuous mode
[   91.263542][ T6788] syzkaller1: entered promiscuous mode
[   91.265418][ T6788] syzkaller1: entered allmulticast mode
[   91.386459][ T6801] bond8: (slave bridge5): Enslaving as an active interface with an up link
[   91.491448][   T13] tipc: Subscription rejected, illegal request
[   91.498060][ T6809] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   91.513687][ T6809] 8021q: adding VLAN 0 to HW filter on device bond9
[   92.130679][ T6824] : renamed from dummy0 (while UP)
[   92.217342][ T6828] bridge3: the hash_elasticity option has been deprecated and is always 16
[   92.222387][ T6828] bridge3: entered allmulticast mode
[   92.325713][ T6834] team0: Port device veth5 added
[   92.360987][ T6842] netlink: 'syz.0.281': attribute type 3 has an invalid length.
[   92.658235][ T6864] __nla_validate_parse: 46 callbacks suppressed
[   92.658248][ T6864] netlink: 44 bytes leftover after parsing attributes in process `syz.0.286'.
[   92.990484][ T6880] netlink: 'syz.2.290': attribute type 1 has an invalid length.
[   92.999538][ T6881] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.290'.
[   93.006908][ T6880] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.290'.
[   93.028583][ T6882] bond4: entered promiscuous mode
[   93.030457][ T6882] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.096554][ T6891] validate_nla: 4 callbacks suppressed
[   93.096564][ T6891] netlink: 'syz.2.293': attribute type 1 has an invalid length.
[   93.101304][ T6891] netlink: 240 bytes leftover after parsing attributes in process `syz.2.293'.
[   93.205147][ T6896] netlink: 'syz.0.295': attribute type 4 has an invalid length.
[   93.260519][ T6897] netlink: 'syz.0.295': attribute type 4 has an invalid length.
[   93.358670][ T6896] net_ratelimit: 12 callbacks suppressed
[   93.358687][ T6896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.697595][ T6904] netlink: 'syz.1.297': attribute type 11 has an invalid length.
[   95.040727][ T6903] netlink: 'syz.1.297': attribute type 9 has an invalid length.
[   95.381747][   T33] audit: type=1800 audit(1778498471.039:4): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.303" name="memory.events" dev="tmpfs" ino=641 res=0 errno=0
[   95.392806][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'.
[   95.445899][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   95.961821][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   96.059439][ T6939] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.305'.
[   96.243960][   T10] IPVS: starting estimator thread 0...
[   96.247701][ T6946] netlink: 'syz.2.308': attribute type 64 has an invalid length.
[   96.335377][ T6950] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   96.342836][ T6947] IPVS: using max 42 ests per chain, 100800 per kthread
[   96.373239][ T6950] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.384364][ T6950] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   96.396957][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[   96.530570][ T6960] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   96.538790][ T6950] bond5: option mode: unable to set because the bond device is up
[   96.549976][ T6960] gre0: entered promiscuous mode
[   96.560962][ T6960] gre0: entered allmulticast mode
[   96.683237][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   96.686652][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   96.692858][ T6969] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   96.713130][ T6969] bond6: entered promiscuous mode
[   96.715537][ T6969] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.815603][ T6975] syzkaller1: entered promiscuous mode
[   96.817477][ T6975] syzkaller1: entered allmulticast mode
[   96.898958][ T6980] geneve2: entered promiscuous mode
[   96.900644][ T6980] geneve2: entered allmulticast mode
[   96.913642][ T6981] geneve2: entered promiscuous mode
[   96.915575][ T6981] geneve2: entered allmulticast mode
[   97.092236][ T6992] batadv_slave_1: entered promiscuous mode
[   97.104966][ T6993] batadv_slave_1: left promiscuous mode
[   97.203243][ T7000] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[   97.324901][ T6246] tipc: Subscription rejected, illegal request
[   97.806237][ T7020] syzkaller0: entered promiscuous mode
[   97.808112][ T7020] syzkaller0: entered allmulticast mode
[   99.087129][ T7033] __nla_validate_parse: 4 callbacks suppressed
[   99.087140][ T7033] netlink: 128 bytes leftover after parsing attributes in process `syz.1.327'.
[   99.155022][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'.
[   99.166277][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'.
[   99.172891][ T7033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'.
[   99.189186][ T7040] geneve2: entered promiscuous mode
[   99.191487][ T7040] geneve2: entered allmulticast mode
[   99.278920][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[   99.349042][   T33] audit: type=1804 audit(1778498474.999:5): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.334" name="/newroot/91/memory.events" dev="tmpfs" ino=486 res=1 errno=0
[   99.383619][ T7066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'.
[   99.387758][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'.
[   99.391331][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'.
[   99.551842][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.554686][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.588568][ T7061] batman_adv: batadv0: Interface deactivated: 
[   99.787048][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.815129][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.149938][ T7061] ipvlan2: left allmulticast mode
[  100.153512][ T7061] bond1: left allmulticast mode
[  100.155519][ T7061] bridge1: left allmulticast mode
[  100.198639][ T7061] ip6tnl1: left allmulticast mode
[  100.223884][ T7061] batman_adv: batadv0: Interface deactivated: ipvlan3
[  100.240647][ T7061] bridge3: left allmulticast mode
[  100.249561][ T7061] bond4: left promiscuous mode
[  100.288806][ T7061] bond6: left promiscuous mode
[  100.294245][ T7061] geneve2: left promiscuous mode
[  100.297763][ T7061] geneve2: left allmulticast mode
[  100.399630][ T6246] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.409420][ T6246] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.419801][ T6246] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.433805][ T6246] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.448870][ T6246] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.454571][ T6246] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.461021][ T6246] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.467262][ T6246] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.471460][ T6246] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.474785][ T6246] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.479590][ T6246] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.485603][ T6246] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.517303][ T7094] bridge0: port 1(erspan0) entered blocking state
[  100.525697][ T7094] bridge0: port 1(erspan0) entered disabled state
[  100.532974][ T7094] erspan0: entered allmulticast mode
[  100.545559][ T7094] erspan0: left allmulticast mode
[  100.555008][ T7094] netlink: 68 bytes leftover after parsing attributes in process `syz.2.338'.
[  100.561231][ T7094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.338'.
[  100.634308][ T7104] ipip0: left promiscuous mode
[  100.637705][ T7104] veth3: left allmulticast mode
[  100.643688][ T7104] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  100.654398][ T7104] bond3: left promiscuous mode
[  100.655855][ T7104] bridge3: left promiscuous mode
[  100.665764][ T7104] bond3: left allmulticast mode
[  100.673774][ T7104] bridge3: left allmulticast mode
[  100.684729][ T7104] ip6erspan0: left allmulticast mode
[  100.694630][ T7103] batadv_slave_0: entered promiscuous mode
[  100.701491][ T6246] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.713492][ T6246] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.722633][ T6246] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.741334][ T7107] macvtap2: entered promiscuous mode
[  100.746465][ T7107] ip6gretap0: entered promiscuous mode
[  100.749704][ T7107] macvtap2: entered allmulticast mode
[  100.755981][ T7107] ip6gretap0: entered allmulticast mode
[  100.770356][ T7108] ip6gretap0: left allmulticast mode
[  100.775476][ T7108] ip6gretap0: left promiscuous mode
[  100.779127][ T7108] macvtap2: left promiscuous mode
[  100.782447][ T7108] macvtap2: left allmulticast mode
[  100.793239][ T6246] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.802481][ T7103] bridge_slave_1: left allmulticast mode
[  100.816606][ T7103] bridge_slave_1: left promiscuous mode
[  100.830329][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.851658][ T7103] bridge_slave_0: left allmulticast mode
[  100.870973][ T7103] bridge_slave_0: left promiscuous mode
[  100.873852][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.977478][ T7132] bond0: Unable to set down delay as MII monitoring is disabled
[  100.998186][ T7132] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  101.007686][ T7132] bond10 (unregistering): Released all slaves
[  101.028005][ T7139] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[  101.055969][ T7139] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.062942][ T7139] macvlan2: entered promiscuous mode
[  101.065187][ T7139] macvlan2: entered allmulticast mode
[  101.067565][ T7139] bond3: entered allmulticast mode
[  101.069367][ T7139] bond3: entered promiscuous mode
[  101.071691][ T7139] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  101.075437][ T7139] team0: Port device macvlan2 added
[  101.094352][ T7139] bond3: (slave ip6gretap1): making interface the new active one
[  101.096856][ T7139] ip6gretap1: entered promiscuous mode
[  101.098774][ T7139] ip6gretap1: entered allmulticast mode
[  101.102664][ T7139] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  101.113492][ T7139] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[  101.187304][ T7148] netlink: 'syz.1.349': attribute type 1 has an invalid length.
[  101.200979][ T7148] 8021q: adding VLAN 0 to HW filter on device bond10
[  101.240442][ T7148] vlan4: entered allmulticast mode
[  101.243253][ T7148] bond10: entered allmulticast mode
[  101.260843][ T7148] bond10: (slave geneve2): making interface the new active one
[  101.263747][ T7148] geneve2: entered allmulticast mode
[  101.268307][ T7148] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  101.273307][ T6246] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.277219][ T6246] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.283621][ T6246] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.288207][ T6246] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.329923][ T7102] batadv_slave_0: left promiscuous mode
[  101.432103][ T7154] bond11: (slave bridge6): Enslaving as an active interface with an up link
[  101.526835][ T7165] syzkaller0: entered promiscuous mode
[  101.528849][ T7165] syzkaller0: entered allmulticast mode
[  101.599869][ T7167] netlink: 'syz.1.353': attribute type 4 has an invalid length.
[  101.609475][ T7167] netlink: 'syz.1.353': attribute type 4 has an invalid length.
[  101.625639][ T7167] netlink: 'syz.1.353': attribute type 4 has an invalid length.
[  101.632402][ T7166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.750166][ T7169] netlink: 'syz.0.354': attribute type 1 has an invalid length.
[  101.778737][ T7169] bond7: (slave veth7): Enslaving as an active interface with a down link
[  101.794906][ T7169] bond7: (slave veth9): Enslaving as an active interface with a down link
[  102.160781][ T7193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.173712][ T7193] syzkaller0: entered promiscuous mode
[  102.181998][ T7193] syzkaller0: entered allmulticast mode
[  102.212723][ T7197] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[  102.220083][ T7200] netlink: 'syz.1.360': attribute type 1 has an invalid length.
[  102.239718][ T7197] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.244735][ T7192] tipc: Resetting bearer <eth:syzkaller0>
[  102.264151][ T7192] tipc: Disabling bearer <eth:syzkaller0>
[  102.292608][ T7200] 8021q: adding VLAN 0 to HW filter on device bond12
[  102.385221][ T7207] vlan2: entered promiscuous mode
[  102.391640][ T7207] bridge0: entered promiscuous mode
[  102.407712][ T7209] netlink: 'syz.2.361': attribute type 4 has an invalid length.
[  102.510460][ T7221] pim6reg1: entered promiscuous mode
[  102.514698][ T7221] pim6reg1: entered allmulticast mode
[  102.661126][ T7226] bridge7: entered promiscuous mode
[  102.668854][ T7226] bridge7: entered allmulticast mode
[  102.670024][ T7230] openvswitch: netlink: Multiple metadata blocks provided
[  102.691696][ T7224] team1: entered promiscuous mode
[  102.693615][ T7224] team1: entered allmulticast mode
[  102.696220][ T7224] 8021q: adding VLAN 0 to HW filter on device team1
[  102.704453][   T33] audit: type=1800 audit(1778498478.369:6): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.366" name="blkio.bfq.time_recursive" dev="tmpfs" ino=552 res=0 errno=0
[  102.847657][ T7239] bond0: entered promiscuous mode
[  102.849298][ T7239] bond_slave_0: entered promiscuous mode
[  102.851475][ T7239] bond_slave_1: entered promiscuous mode
[  102.855539][ T7239] gretap0: entered promiscuous mode
[  102.858787][ T7239] team0: entered promiscuous mode
[  102.860711][ T7239] team_slave_0: entered promiscuous mode
[  102.877907][ T7239] team_slave_1: entered promiscuous mode
[  102.884438][ T7239] debugfs: 'hsr1' already exists in 'hsr'
[  102.887152][ T7239] Cannot create hsr debugfs directory
[  102.889301][ T7239] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  102.893082][ T7239] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  102.896110][ T7239] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  102.900110][ T7239] hsr1: entered promiscuous mode
[  103.312747][ T7273] nftables ruleset with unbound chain
[  103.428557][ T7279] bridge0: port 3(vlan6) entered blocking state
[  103.431104][ T7279] bridge0: port 3(vlan6) entered disabled state
[  103.435731][ T7279] vlan6: entered allmulticast mode
[  103.437642][ T7279] geneve0: entered allmulticast mode
[  103.440864][ T7279] vlan6: entered promiscuous mode
[  103.443454][ T7279] geneve0: entered promiscuous mode
[  103.612517][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.167936][ T7261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  106.258161][ T7310] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  106.331038][ T7321] __nla_validate_parse: 23 callbacks suppressed
[  106.331053][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[  106.342578][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[  106.346229][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[  106.349630][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[  106.379059][ T7324] ip6gre1: entered allmulticast mode
[  106.397338][ T7324] ip6gre1: entered promiscuous mode
[  106.404191][ T7324] team0: Device ip6gre1 is of different type
[  106.421155][ T7318] syzkaller1: entered promiscuous mode
[  106.430596][ T7318] syzkaller1: entered allmulticast mode
[  106.577117][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'.
[  106.600237][ T7338] validate_nla: 5 callbacks suppressed
[  106.600252][ T7338] netlink: 'syz.0.395': attribute type 8 has an invalid length.
[  106.607843][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  106.616439][ T7336] bond13: entered promiscuous mode
[  106.618320][ T7336] 8021q: adding VLAN 0 to HW filter on device bond13
[  106.647079][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.651281][ T7341] team0: Device macvlan2 failed to change mtu
[  106.666185][ T7341] netlink: 'syz.2.396': attribute type 7 has an invalid length.
[  106.690439][ T7336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.394'.
[  106.698259][ T7341] tipc: Started in network mode
[  106.698374][ T7336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.394'.
[  106.700216][ T7341] tipc: Node identity ac1414aa, cluster identity 4711
[  106.706658][ T7341] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  106.710398][ T7341] tipc: Enabled bearer <udp:s>, priority 10
[  106.759830][ T7344] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  106.769342][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'.
[  106.821325][ T7346] syzkaller0: entered promiscuous mode
[  106.826853][ T7349] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.399'.
[  106.828219][ T7346] syzkaller0: entered allmulticast mode
[  106.842893][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  106.864807][ T7351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.981650][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.109246][ T7367] team_slave_0 (unregistering): left promiscuous mode
[  107.114068][ T7367] team0: Port device team_slave_0 removed
[  107.121695][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.141645][ T7373] syzkaller0: entered promiscuous mode
[  107.143653][ T7373] syzkaller0: entered allmulticast mode
[  107.168277][ T7379] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[  107.195907][ T7379] 8021q: adding VLAN 0 to HW filter on device bond14
[  107.236071][ T7379] bond14: (slave veth5): Enslaving as an active interface with a down link
[  107.261664][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.402909][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.410620][ T7391] batman_adv: batadv0: Adding interface: dummy0
[  107.417929][ T7391] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.433543][ T7391] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  107.541707][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.581172][ T7400] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[  107.609491][ T7402] netlink: 'syz.1.414': attribute type 39 has an invalid length.
[  107.612362][ T7403] netlink: 'syz.1.414': attribute type 39 has an invalid length.
[  107.681785][    C1] net_ratelimit: 1 callbacks suppressed
[  107.681802][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.825895][ T5688] tipc: Node number set to 2886997162
[  107.917618][ T7424] netlink: 'syz.0.418': attribute type 1 has an invalid length.
[  107.938949][ T7416] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  107.948941][ T7428] netlink: 'syz.2.420': attribute type 5 has an invalid length.
[  107.958140][ T7428] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[  107.961702][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.973868][ T7423] bond9: (slave veth11): Enslaving as an active interface with a down link
[  107.998486][ T7428] veth7: entered promiscuous mode
[  108.000119][ T7428] veth7: entered allmulticast mode
[  108.231737][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  108.537049][ T7460] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  108.543553][ T7460] bond10 (unregistering): Released all slaves
[  108.761765][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  108.917597][ T7486] bond10: entered promiscuous mode
[  108.922307][ T7486] 8021q: adding VLAN 0 to HW filter on device bond10
[  109.112212][ T7499] syzkaller0: entered promiscuous mode
[  109.125609][ T7499] syzkaller0: entered allmulticast mode
[  109.153986][ T7501] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  109.163907][ T7491] sctp: [Deprecated]: syz.2.432 (pid 7491) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.163907][ T7491] Use struct sctp_sack_info instead
[  109.337888][ T7516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.474217][ T7522] Bluetooth: MGMT ver 1.23
[  109.764729][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.771439][ T7540] 8021q: adding VLAN 0 to HW filter on device team0
[  109.792250][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  109.801073][ T7540] batman_adv: batadv0: Interface activated: dummy0
[  109.806235][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.827330][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.830931][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.838789][  T799] bridge0: port 1(1x9) entered blocking state
[  109.841643][  T799] bridge0: port 1(1x9) entered forwarding state
[  109.851211][  T799] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.854229][  T799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.909504][ T7545] ipvlan0: entered allmulticast mode
[  109.916665][ T5611] Bluetooth: hci2: link tx timeout
[  109.919119][ T7545] veth0_vlan: entered allmulticast mode
[  109.921690][ T5611] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.929841][ T7545] team0: Device ipvlan0 failed to register rx_handler
[  109.943695][ T7545] team0: Device ipvlan0 failed to register rx_handler
[  109.997604][ T7550] ksmbd: Unknown IPC event: 1, ignore.
[  110.065195][ T7550] bond5: (slave geneve2): making interface the new active one
[  110.070339][ T7550] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  110.074346][ T5666] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  110.080573][ T5666] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  110.089467][ T5666] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  110.098646][ T5666] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  110.255957][ T7564] netem: change failed
[  110.281384][ T7559] bond15: entered promiscuous mode
[  110.285257][ T7559] bond15: entered allmulticast mode
[  110.298262][ T7564] bond0: entered promiscuous mode
[  110.300360][ T7564] dummy0: entered promiscuous mode
[  110.316621][ T7564] batadv_slave_0: entered promiscuous mode
[  110.318865][ T7564] debugfs: 'hsr1' already exists in 'hsr'
[  110.320644][ T7564] Cannot create hsr debugfs directory
[  110.408651][ T7571] ip6gre1: entered promiscuous mode
[  110.410621][ T7571] ip6gre1: entered allmulticast mode
[  110.420034][ T7573] vti0: entered promiscuous mode
[  110.484696][ T7577] SET target dimension over the limit!
[  110.591432][ T7584] bond0: Device is already in use.
[  110.831871][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  110.998211][ T7595] 8021q: adding VLAN 0 to HW filter on device bond16
[  111.029775][ T7595] bond16: (slave veth7): Enslaving as an active interface with a down link
[  111.060430][ T7595] bond16: (slave veth9): Enslaving as an active interface with a down link
[  111.089715][ T7595] bond16: (slave bridge12): Enslaving as an active interface with a down link
[  111.245570][ T7606] 8021q: adding VLAN 0 to HW filter on device bond17
[  111.421167][ T7623] __nla_validate_parse: 34 callbacks suppressed
[  111.421184][ T7623] netlink: 192 bytes leftover after parsing attributes in process `syz.1.471'.
[  111.533961][ T7636] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20003
[  111.656840][ T5613] Bluetooth: hci2: link tx timeout
[  111.658802][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.845198][ T7596] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  111.848590][ T7596] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  111.859176][ T7596] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  111.862525][ T7596] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  111.871754][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  111.902712][ T7641] block nbd0: server does not support multiple connections per device.
[  111.910452][ T7641] block nbd0: shutting down sockets
[  111.919514][ T7642] bridge0: port 1(vlan2) entered blocking state
[  111.922457][ T7642] bridge0: port 1(vlan2) entered disabled state
[  111.926302][ T7642] vlan2: entered allmulticast mode
[  111.930787][ T7642] geneve0: entered allmulticast mode
[  111.935406][ T7642] vlan2: entered promiscuous mode
[  111.937714][ T7642] geneve0: entered promiscuous mode
[  111.951738][ T5613] Bluetooth: hci2: command 0x0406 tx timeout
[  111.972349][ T7596] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  111.974525][ T7596] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  112.119667][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[  112.253804][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'.
[  112.469809][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  112.474725][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'.
[  112.487597][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  112.491677][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.480'.
[  112.546909][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[  112.552126][ T7680] validate_nla: 9 callbacks suppressed
[  112.552137][ T7680] netlink: 'syz.1.481': attribute type 5 has an invalid length.
[  112.556561][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'.
[  112.570543][ T7683] netlink: 5 bytes leftover after parsing attributes in process `syz.2.482'.
[  112.577781][ T7680] geneve3: entered promiscuous mode
[  112.581458][ T7680] geneve3: entered allmulticast mode
[  112.588376][ T5666] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  112.593079][ T5666] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  112.600836][ T5666] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  112.607555][ T5666] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  112.685814][ T7692] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[  113.188600][ T7729] infiniband syz0: set down
[  113.198249][ T7729] infiniband syz0: added bridge_slave_1
[  113.264529][ T7729] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  113.279736][ T7729] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  113.291356][ T7729] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  113.352820][ T7754] syz_tun: entered allmulticast mode
[  113.369874][ T7729] RDS/IB: syz0: added
[  113.372216][ T7729] smc: adding ib device syz0 with port count 1
[  113.374744][ T7729] smc:    ib device syz0 port 1 has no pnetid
[  113.403560][ T7759] syzkaller1: entered promiscuous mode
[  113.408371][ T7759] syzkaller1: entered allmulticast mode
[  113.878920][ T7781] Bluetooth: MGMT ver 1.23
[  113.921481][ T7781] bond0 (unregistering): left promiscuous mode
[  113.935374][ T7781] bond_slave_0: left promiscuous mode
[  113.942183][ T7781] bond_slave_1: left promiscuous mode
[  113.960067][ T7781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.990935][ T7781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.999572][ T7781] bond0 (unregistering): Released all slaves
[  114.091000][ T7786] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  114.095830][ T7786] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  114.196579][ T7790] netlink: 'syz.1.503': attribute type 20 has an invalid length.
[  114.198253][ T7791] syzkaller1: entered promiscuous mode
[  114.202049][ T7791] syzkaller1: entered allmulticast mode
[  114.221216][ T6246] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.224666][ T6246] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.228002][ T7790] netlink: 'syz.1.503': attribute type 20 has an invalid length.
[  114.233674][ T6246] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.240543][ T6246] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.344784][ T7793] netlink: 'syz.1.504': attribute type 29 has an invalid length.
[  114.399013][ T7795] batman_adv: batadv0: Adding interface: ipvlan4
[  114.403084][ T7795] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.421805][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.429911][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.443371][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan3
[  114.455646][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.467318][ T7795] batman_adv: batadv0: Interface activated: ipvlan4
[  114.614227][ T7815] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  114.618463][ T7817] netlink: 'syz.2.512': attribute type 29 has an invalid length.
[  114.690313][ T7822] netlink: 'syz.2.514': attribute type 6 has an invalid length.
[  114.812182][ T7831] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  114.871138][ T7836] netlink: 'syz.0.515': attribute type 10 has an invalid length.
[  114.877082][ T7836] : entered promiscuous mode
[  114.879468][ T7836] batman_adv: batadv0: Interface activated: 
[  114.882567][ T7836] batadv0: mtu less than device minimum
[  114.885996][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.891199][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.896491][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.901747][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.906813][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.912031][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.917250][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.922599][ T7836] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.949579][ T7836] batman_adv: batadv0: Interface deactivated: 
[  114.954177][ T7836] batman_adv: batadv0: Removing interface: 
[  115.327710][ T7856] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.328155][   T55] block nbd0: Receive control failed (result -32)
[  115.335124][ T7862] block nbd0: Receive control failed (result -32)
[  115.372057][ T7856] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.419025][ T7856] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.478083][ T7856] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  115.589137][ T5666] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  115.648622][ T5666] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  115.712973][ T5666] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  115.778793][ T5467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  115.913885][ T7892] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  115.919310][ T7892] bond7 (unregistering): Released all slaves
[  116.078232][ T7898] ip6gre2: entered allmulticast mode
[  116.083732][ T7898] team0: Device ip6gre2 is of different type
[  116.333557][ T7910] gretap0: entered promiscuous mode
[  116.449696][ T7914] netlink: 'syz.0.538': attribute type 1 has an invalid length.
[  116.473415][ T7914] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  116.477912][ T7914] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  116.515120][ T7918] 8021q: adding VLAN 0 to HW filter on device bond7
[  116.526649][ T7914] __nla_validate_parse: 23 callbacks suppressed
[  116.526660][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.538'.
[  116.535912][ T7918] : renamed from bond_slave_0
[  116.617352][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[  116.632720][ T7932] 8021q: VLANs not supported on lo
[  116.731020][ T7934] netlink: 72 bytes leftover after parsing attributes in process `syz.0.543'.
[  116.738889][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'.
[  116.745500][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[  116.906686][ T7950] bridge0: port 4(erspan0) entered blocking state
[  116.909369][ T7950] bridge0: port 4(erspan0) entered disabled state
[  116.912419][ T7950] erspan0: entered allmulticast mode
[  116.917858][ T7950] erspan0: left allmulticast mode
[  116.927763][ T7950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.546'.
[  116.931183][ T7950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.546'.
[  117.040656][ T7960] tipc: MTU too low for tipc bearer
[  117.111292][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'.
[  117.135702][ T7968] geneve3: entered promiscuous mode
[  117.141252][ T7968] geneve3: entered allmulticast mode
[  117.374174][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'.
[  117.377338][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'.
[  117.414567][ T7987] bond8 (unregistering): Released all slaves
[  117.444884][ T7995] macvtap0: entered promiscuous mode
[  117.447132][ T7995] erspan0: entered promiscuous mode
[  117.451120][ T7995] macvtap0: entered allmulticast mode
[  117.455267][ T7995] erspan0: entered allmulticast mode
[  117.518778][ T7998] syzkaller0: entered promiscuous mode
[  117.524175][ T7998] syzkaller0: entered allmulticast mode
[  117.597067][ T8007] validate_nla: 3 callbacks suppressed
[  117.597088][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.604336][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.607557][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.610635][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.615027][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.618251][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.621461][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.625724][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.628972][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.633903][ T8007] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  117.675969][ T8008] macsec1: entered promiscuous mode
[  117.991826][ T8019] xt_l2tp: invalid flags combination: 8
[  117.996667][ T8019] gre0: entered promiscuous mode
[  117.998684][ T8019] gre0: entered allmulticast mode
[  118.195991][ T8036] bridge14: entered allmulticast mode
[  118.205318][ T8037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.507444][ T8052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.585856][ T8054] tipc: Resetting bearer <eth:syzkaller0>
[  119.205241][ T8065] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  119.226659][ T8065] veth11: entered promiscuous mode
[  119.231490][ T8065] bond0: (slave veth11): Enslaving as a backup interface with a down link
[  119.239010][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.292904][ T8072] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.367060][ T8078] veth0_macvtap: entered allmulticast mode
[  119.633954][   T10] tipc: Node number set to 1213395247
[  119.731070][ T8105] bond12: entered promiscuous mode
[  119.736620][ T8105] bond12: entered allmulticast mode
[  119.739474][ T8105] 8021q: adding VLAN 0 to HW filter on device bond12
[  119.757970][ T8105] erspan2: entered allmulticast mode
[  119.768713][ T8105] bond12: (slave erspan2): making interface the new active one
[  119.771943][ T8105] erspan2: entered promiscuous mode
[  119.775432][ T8105] bond12: (slave erspan2): Enslaving as an active interface with an up link
[  119.814448][ T8105] syz.0.582 (8105) used obsolete PPPIOCDETACH ioctl
[  120.139815][ T8139] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  120.144482][ T8139] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  120.335834][ T8147] bond19: (slave bridge16): making interface the new active one
[  120.340123][ T8147] bond19: (slave bridge16): Enslaving as an active interface with an up link
[  120.353099][ T8147] bond19: entered promiscuous mode
[  120.355237][ T8147] bridge16: entered promiscuous mode
[  120.357707][ T8147] bond19: entered allmulticast mode
[  120.359840][ T8147] bridge16: entered allmulticast mode
[  120.364583][ T8147] 8021q: adding VLAN 0 to HW filter on device bond19
[  120.449932][ T8155] bond20: option packets_per_slave: invalid value (65560)
[  120.452974][ T8155] bond20: option packets_per_slave: allowed values 0 - 65535
[  120.459769][ T8155] bond20 (unregistering): Released all slaves
[  120.498484][ T8153] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  120.628319][ T8163] syzkaller1: tun_chr_ioctl cmd 1074025677
[  120.639499][ T8163] syzkaller1: Linktype set failed because interface is up
[  120.706420][ T8168] net_ratelimit: 16 callbacks suppressed
[  120.709682][ T8168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.805518][ T8177] macvlan0: entered promiscuous mode
[  121.285123][ T8200] bond13 (unregistering): Released all slaves
[  121.299613][ T8204] bond0: (slave dummy0): Releasing backup interface
[  121.304375][ T8204] dummy0: left promiscuous mode
[  121.318622][ T8204] batman_adv: batadv0: Adding interface: dummy0
[  121.320782][ T8204] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.333667][ T8204] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  121.516687][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.534339][ T8215] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  121.539946][ T8215] bond13: (slave lo): Enslaving as an active interface with an up link
[  121.544666][ T8215] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  121.651369][ T8221] gretap0: left promiscuous mode
[  121.674782][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.678258][ T8221] 8021q: adding VLAN 0 to HW filter on device team0
[  121.683464][ T8221] : left promiscuous mode
[  121.686896][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.727104][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.737545][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.743451][ T8221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  121.746527][ T8221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.751429][ T8221] veth1_vlan: left promiscuous mode
[  121.758256][ T8221] veth0_vlan: left promiscuous mode
[  121.761176][ T8221] veth0_vlan: entered promiscuous mode
[  121.765266][ T8221] veth1_vlan: entered promiscuous mode
[  121.778697][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  121.781850][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  121.784932][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  121.787741][ T8221] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  121.790023][ T8221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.840966][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.849294][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.868850][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.872500][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.144896][ T8260] __nla_validate_parse: 26 callbacks suppressed
[  122.144909][ T8260] netlink: 9 bytes leftover after parsing attributes in process `syz.1.622'.
[  122.162408][ T8260] 0: renamed from hsr0
[  122.198393][ T8260] 0: entered allmulticast mode
[  122.207055][ T8260] hsr_slave_0: entered allmulticast mode
[  122.222979][ T8260] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  122.237554][ T8270] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  122.307146][ T8278] netlink: 120 bytes leftover after parsing attributes in process `syz.0.624'.
[  122.321152][ T8281] syzkaller0: left promiscuous mode
[  122.324081][ T8278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.624'.
[  122.326837][ T8281] syzkaller0: left allmulticast mode
[  122.408310][ T8287] ip6gre2: entered promiscuous mode
[  122.409892][ T8287] ip6gre2: entered allmulticast mode
[  122.437098][ T8289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.456399][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  122.459422][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  122.500280][ T8292] syz_tun (unregistering): left allmulticast mode
[  122.528168][ T8299] ip6tnl3: entered allmulticast mode
[  122.531002][ T5666] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  122.533154][ T8299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.576575][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  122.723850][ T8303] netlink: 9 bytes leftover after parsing attributes in process `syz.1.631'.
[  122.731471][ T8303] 1: renamed from c0 (while UP)
[  122.739085][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.632'.
[  125.608629][ T8303] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  125.840478][ T8337] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  125.854524][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  125.932241][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'.
[  125.937464][ T8342] gre0: left promiscuous mode
[  125.939362][ T8342] gre0: left allmulticast mode
[  125.948835][ T8342] 0{X: left allmulticast mode
[  125.961309][ T8342] 8021q: adding VLAN 0 to HW filter on device team0
[  125.969616][ T8342] batman_adv: batadv0: Interface activated: dummy0
[  125.974482][ T8342] batadv0: mtu less than device minimum
[  125.979088][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  125.984379][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  125.990160][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  125.995328][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.000340][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.005541][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.010659][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.015861][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.020938][ T8342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  126.044738][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.133101][ T8342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.137547][ T8342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.146896][ T8342] veth1_vlan: left promiscuous mode
[  126.152158][ T8342] veth0_vlan: left promiscuous mode
[  126.158773][ T8342] veth0_vlan: entered promiscuous mode
[  126.164877][ T8342] veth1_vlan: entered promiscuous mode
[  126.176914][ T8342] veth1_macvtap: left promiscuous mode
[  126.179571][ T8342] veth0_macvtap: left promiscuous mode
[  126.181375][ T8342] veth0_macvtap: left allmulticast mode
[  126.184405][ T8342] veth0_macvtap: entered promiscuous mode
[  126.187086][ T8342] veth1_macvtap: entered promiscuous mode
[  126.313017][   T31] syz0: Port: 1 Link ACTIVE
[  126.316033][ T6246] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  126.321766][ T6246] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  126.350662][ T6246] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  126.357005][ T6246] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  126.505914][ T8378] validate_nla: 31 callbacks suppressed
[  126.505933][ T8378] netlink: 'syz.0.643': attribute type 10 has an invalid length.
[  126.541194][ T8378] : entered promiscuous mode
[  126.544102][ T8378] bond0: (slave ): Enslaving as an active interface with an up link
[  126.611880][ T8385] vlan6: entered promiscuous mode
[  126.618819][ T8385] bridge0: entered promiscuous mode
[  126.726883][ T8395] block nbd0: reconnected socket
[  126.729755][ T8395] block nbd0: reconnected socket
[  126.737603][ T8395] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[  126.752627][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  126.779975][ T8395] 8021q: adding VLAN 0 to HW filter on device bond14
[  126.813588][ T7862] block nbd0: Receive control failed (result -32)
[  126.817769][   T55] block nbd0: Receive control failed (result -32)
[  127.157269][ T8414] sctp: [Deprecated]: syz.0.653 (pid 8414) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.157269][ T8414] Use struct sctp_sack_info instead
[  127.250249][ T8418] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  127.254165][ T8419] IPv6: NLM_F_CREATE should be specified when creating new route
[  127.257738][ T8419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.262117][ T8419] IPv6: NLM_F_CREATE should be set when creating new route
[  127.399131][ T8421] __nla_validate_parse: 64 callbacks suppressed
[  127.399147][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.654'.
[  127.578568][ T8432] netlink: 'syz.1.658': attribute type 13 has an invalid length.
[  127.649960][ T8435] netlink: 'syz.2.659': attribute type 14 has an invalid length.
[  127.653262][ T8434] netlink: 'syz.2.659': attribute type 14 has an invalid length.
[  127.661825][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[  127.669664][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'.
[  127.680002][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'.
[  127.728806][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  127.870282][ T8444] bond20: option arp_interval: invalid value (18446744073709551615)
[  127.873775][ T8444] bond20: option arp_interval: allowed values 0 - 2147483647
[  127.878956][ T8444] bond20 (unregistering): Released all slaves
[  128.194190][ T8456] netlink: 192 bytes leftover after parsing attributes in process `syz.0.665'.
[  128.520059][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.0.670'.
[  128.525991][ T8472] netlink: 2 bytes leftover after parsing attributes in process `syz.0.670'.
[  128.575483][ T8472] bond16: entered allmulticast mode
[  128.583102][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'.
[  128.586065][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'.
[  128.587596][ T8472] macvlan4: entered promiscuous mode
[  128.591174][ T8472] macvlan4: entered allmulticast mode
[  128.597166][ T8472] bond16: (slave macvlan4): Opening slave failed
[  128.933924][ T8481] syzkaller1: entered promiscuous mode
[  128.937400][ T8481] syzkaller1: entered allmulticast mode
[  129.028430][ T8488] ip6gre3: entered allmulticast mode
[  129.037289][ T8488] team0: Device ip6gre3 is of different type
[  129.107247][ T8496] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  129.147286][ T8498] lo speed is unknown, defaulting to 1000
[  129.152392][ T8498] lo speed is unknown, defaulting to 1000
[  129.161018][ T8498] lo speed is unknown, defaulting to 1000
[  129.164901][ T8498] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  129.169645][ T8498] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  129.177270][ T8498] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  129.185077][ T8498] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  129.195303][ T8498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  129.213303][ T8498] lo speed is unknown, defaulting to 1000
[  129.228517][ T8498] lo speed is unknown, defaulting to 1000
[  129.235645][ T8498] lo speed is unknown, defaulting to 1000
[  129.285305][ T8509] pim6reg: entered allmulticast mode
[  129.315343][ T8512] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  129.336671][ T8512] bond20: entered promiscuous mode
[  129.338855][ T8512] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.356362][ T8512] pim6reg: entered allmulticast mode
[  129.358333][ T8512] pim6reg: left allmulticast mode
[  129.497490][ T8521] bond17: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  129.504062][ T8521] bond17 (unregistering): Released all slaves
[  129.533515][ T8526] netlink: 'syz.2.685': attribute type 10 has an invalid length.
[  129.566514][ T8526] team0: Device macvlan2 failed to change mtu
[  129.566544][ T8526] bond0: (slave team0): Error -22 calling dev_set_mtu
[  129.812611][ T8549] netlink: 'syz.2.693': attribute type 4 has an invalid length.
[  129.829029][ T8549] netlink: 'syz.2.693': attribute type 4 has an invalid length.
[  129.968838][ T8561] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  129.985426][ T8561] 8021q: adding VLAN 0 to HW filter on device bond21
[  130.155971][ T8577] bridge7: entered promiscuous mode
[  130.300631][ T8581] syzkaller1: entered promiscuous mode
[  130.304184][ T8581] syzkaller1: entered allmulticast mode
[  130.924093][ T8588] 8021q: adding VLAN 0 to HW filter on device team0
[  131.023385][ T8588] net_ratelimit: 58 callbacks suppressed
[  131.023396][ T8588] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  131.121891][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  131.242726][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  131.245975][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  131.252238][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  131.372104][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  131.491793][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  131.532675][ T8606] validate_nla: 1 callbacks suppressed
[  131.532685][ T8606] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[  131.622253][ T8606] bond22: (slave bridge18): making interface the new active one
[  131.637767][ T8606] bond22: (slave bridge18): Enslaving as an active interface with an up link
[  131.683524][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  131.755653][ T8613] block nbd0: NBD_DISCONNECT
[  131.757490][ T8613] block nbd0: Send disconnect failed -32
[  131.759104][ T8609] 8021q: adding VLAN 0 to HW filter on device bond22
[  131.765231][ T8613] block nbd0: Send disconnect failed -32
[  131.767616][ T8613] block nbd0: shutting down sockets
[  131.787881][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  131.792385][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  132.176414][ T8637] vxlan0: entered promiscuous mode
[  132.178131][ T8637] vxlan0: entered allmulticast mode
[  132.218968][ T5666] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.223851][ T5666] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.247772][ T5666] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.253564][ T5666] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.493790][ T8649] __nla_validate_parse: 11 callbacks suppressed
[  132.493802][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  132.501454][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  132.516666][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'.
[  132.549727][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'.
[  132.580217][ T8653] xt_l2tp: invalid flags combination: 8
[  132.625791][ T8653] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  132.633555][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  132.746867][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'.
[  132.838056][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.725'.
[  132.903573][ T8639] lo speed is unknown, defaulting to 1000
[  133.185196][ T8676] netlink: 876 bytes leftover after parsing attributes in process `syz.0.727'.
[  133.189109][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  133.411007][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'.
[  133.826636][ T8690] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004
[  134.066514][ T8695] lo speed is unknown, defaulting to 1000
[  134.686752][ T8724] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  134.840028][ T8735] vlan7: entered allmulticast mode
[  134.852327][ T8735] bond0: entered allmulticast mode
[  135.243182][ T8753] netlink: 'syz.1.746': attribute type 1 has an invalid length.
[  135.296150][ T8747] lo speed is unknown, defaulting to 1000
[  135.632484][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  136.171685][   T13] net_ratelimit: 46 callbacks suppressed
[  136.171698][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  136.215914][ T8777] syzkaller1: entered promiscuous mode
[  136.219582][ T8777] syzkaller1: entered allmulticast mode
[  136.358983][ T8788] team0: No ports can be present during mode change
[  136.362328][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  136.413705][ T6246] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  136.417830][ T6246] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  136.472113][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  136.491047][ T8797] unsupported nla_type 216
[  136.508059][ T8797] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  136.593299][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  136.640809][ T8801] bond23: (slave bridge19): Enslaving as an active interface with an up link
[  136.686466][ T8803] netlink: 'syz.0.757': attribute type 1 has an invalid length.
[  136.701893][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  136.880120][ T8803] bond19: entered promiscuous mode
[  136.882280][ T8803] 8021q: adding VLAN 0 to HW filter on device bond19
[  136.951758][ T6246] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  136.955754][ T6246] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  137.026510][ T8799] 8021q: adding VLAN 0 to HW filter on device bond19
[  137.048690][ T8799] bond19: (slave vcan0): The slave device specified does not support setting the MAC address
[  137.072025][ T8799] bond19: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  137.094510][ T8799] bond19: (slave vcan0): making interface the new active one
[  137.097717][ T8799] vcan0: entered promiscuous mode
[  137.101220][ T8799] bond19: (slave vcan0): Enslaving as an active interface with an up link
[  137.293081][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  137.406871][ T8824] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  137.418052][ T8824] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  137.449483][ T5688] lo speed is unknown, defaulting to 1000
[  137.465442][ T8824] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  137.477371][ T5688] syz2: Port: 1 Link ACTIVE
[  137.541087][ T5688] lo speed is unknown, defaulting to 1000
[  137.548748][ T8827] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[  137.558651][ T5688] syz2: Port: 1 Link DOWN
[  137.575095][ T8828] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[  137.656333][ T8827] bond20: entered promiscuous mode
[  137.660251][ T8827] 8021q: adding VLAN 0 to HW filter on device bond20
[  137.667202][ T8828] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  137.758817][ T8833] bond24: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  137.777683][ T8833] bond24 (unregistering): Released all slaves
[  137.818799][ T8840] bridge0: entered allmulticast mode
[  138.025066][ T8847] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  138.080436][ T8847] 8021q: adding VLAN 0 to HW filter on device bond24
[  138.335632][ T7075] hsr0: entered promiscuous mode
[  138.337928][ T8853] __nla_validate_parse: 13 callbacks suppressed
[  138.337950][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'.
[  138.466569][ T8857] bond21: Removing last ns target with arp_interval on
[  138.564884][ T8865] netlink: 120 bytes leftover after parsing attributes in process `syz.2.772'.
[  138.655449][ T8868] geneve4: entered promiscuous mode
[  138.658003][ T8868] geneve4: entered allmulticast mode
[  138.665109][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  138.688633][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  138.695306][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  138.699450][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  138.978921][ T8883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'.
[  139.256223][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'.
[  139.424197][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'.
[  139.427499][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.781'.
[  139.576959][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[  139.596971][ T8907] netlink: 'syz.1.783': attribute type 5 has an invalid length.
[  139.601115][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  139.614198][ T8907] bond_slave_0: entered promiscuous mode
[  139.743817][ T8916] netlink: 84 bytes leftover after parsing attributes in process `syz.2.786'.
[  139.746939][ T8916] netlink: 'syz.2.786': attribute type 2 has an invalid length.
[  139.751186][ T8916] netlink: 84 bytes leftover after parsing attributes in process `syz.2.786'.
[  139.982756][ T8923] lo speed is unknown, defaulting to 1000
[  140.574301][ T8936] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  140.618125][ T8936] 8021q: adding VLAN 0 to HW filter on device bond22
[  140.665253][ T8939] vlan3: entered allmulticast mode
[  140.674682][ T8939] bond22: entered allmulticast mode
[  140.852722][ T8954] bond0: Device is already in use.
[  140.874535][ T8952] gre0: left promiscuous mode
[  140.879122][ T8952] gre0: left allmulticast mode
[  140.981115][ T8952] bond_slave_0: left promiscuous mode
[  141.012904][ T8952] 1: left allmulticast mode
[  141.014435][ T8952] hsr_slave_0: left allmulticast mode
[  141.022166][ T5688] lo speed is unknown, defaulting to 1000
[  141.026634][ T5688] syz2: Port: 1 Link ACTIVE
[  141.032812][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.072507][ T8955] bridge_slave_1 (unregistering): left allmulticast mode
[  141.075149][ T8955] bridge_slave_1 (unregistering): left promiscuous mode
[  141.077464][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.114849][ T8958] rose0: entered promiscuous mode
[  141.241712][ T5666] net_ratelimit: 46 callbacks suppressed
[  141.241731][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  141.418046][   T33] audit: type=1804 audit(1778498517.079:7): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.799" name="/newroot/266/memory.events" dev="tmpfs" ino=1371 res=1 errno=0
[  141.442079][   T33] audit: type=1800 audit(1778498517.079:8): pid=8973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.799" name="memory.events" dev="tmpfs" ino=1371 res=0 errno=0
[  141.472981][ T8969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.555584][   T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  141.560752][   T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  141.675608][ T8973] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  141.681428][ T8973] bond10 (unregistering): Released all slaves
[  141.722392][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  141.846684][ T8969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.916549][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  141.953790][ T8969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.082298][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  142.087184][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  142.146382][ T8969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.164736][ T8990] dvmrp6: entered allmulticast mode
[  142.207494][ T8990] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check.
[  142.221997][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  142.242893][ T8990] xt_connbytes: Forcing CT accounting to be enabled
[  142.267659][ T8990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.469311][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.698198][ T6246] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.884229][ T9021] tipc: Resetting bearer <eth:syzkaller0>
[  142.905941][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.928454][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.228188][ T9035] validate_nla: 2 callbacks suppressed
[  143.228209][ T9035] netlink: 'syz.1.814': attribute type 4 has an invalid length.
[  143.571435][ T9046] lo speed is unknown, defaulting to 1000
[  143.960799][ T5688] lo speed is unknown, defaulting to 1000
[  143.971385][ T9061] __nla_validate_parse: 12 callbacks suppressed
[  143.971398][ T9061] netlink: 88 bytes leftover after parsing attributes in process `syz.1.819'.
[  143.976480][ T5688] syz2: Port: 1 Link DOWN
[  144.017643][ T6246] tipc: Subscription rejected, illegal request
[  144.955652][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  144.958619][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'.
[  144.976823][ T9082] x_tables: unsorted underflow at hook 2
[  145.012357][ T9082] SET target dimension over the limit!
[  145.020875][ T9082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.824'.
[  145.634667][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'.
[  145.707406][ T9104] syzkaller0: entered promiscuous mode
[  145.709710][ T9104] syzkaller0: entered allmulticast mode
[  145.918942][ T9112] bond23: option ad_select: invalid value (34)
[  145.924194][ T9112] bond23 (unregistering): Released all slaves
[  145.945884][ T9110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.026483][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[  146.094462][ T9120] netlink: 'syz.0.833': attribute type 10 has an invalid length.
[  146.136489][ T9120] team0 (unregistering): Port device team_slave_1 removed
[  146.142241][ T9120] team0 (unregistering): Port device veth5 removed
[  146.292821][ T6246] net_ratelimit: 44 callbacks suppressed
[  146.292841][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.349805][ T9127] netlink: 84 bytes leftover after parsing attributes in process `syz.0.835'.
[  146.405558][ T9127] syzkaller0: mtu less than device minimum
[  146.433044][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.542347][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.608053][ T9139] netlink: 'syz.0.839': attribute type 3 has an invalid length.
[  146.613084][ T9139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.664875][ T9139] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.839'.
[  146.671964][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.702366][   T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  146.707128][   T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  146.775386][ T9131] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  146.780338][ T9131] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.786185][ T9131] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.789278][ T9131] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  146.803117][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.818000][ T9131] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  146.821267][ T9131] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.824653][ T9131] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.828273][ T9131] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  146.883373][ T9131] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  146.887209][ T9131] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.894059][ T9131] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.897861][ T9131] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  146.932149][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  146.965199][ T9131] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  146.969067][ T9131] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.974911][ T9131] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.978689][ T9131] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  147.038833][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  147.046139][ T9145] netlink: 'syz.2.840': attribute type 13 has an invalid length.
[  147.068966][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.840'.
[  147.091068][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.095936][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  147.099170][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  147.102071][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  147.113859][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.117884][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  147.120378][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  147.123039][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  147.132402][ T6246] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.135407][ T6246] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  147.138335][ T6246] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  147.145312][ T6246] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  147.165189][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.168567][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  147.171434][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  147.174305][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  147.443317][ T9151] netlink: 'syz.1.842': attribute type 83 has an invalid length.
[  147.595790][ T9151] netlink: 'syz.1.842': attribute type 21 has an invalid length.
[  147.616138][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.842'.
[  147.741896][ T9158] trusted_key: syz.0.844 sent an empty control message without MSG_MORE.
[  147.816212][ T9148] lo speed is unknown, defaulting to 1000
[  148.527906][ T9182] netlink: 'syz.2.849': attribute type 4 has an invalid length.
[  148.569145][ T9182] netlink: 'syz.2.849': attribute type 1 has an invalid length.
[  149.509058][ T7069] lo speed is unknown, defaulting to 1000
[  149.652710][ T9210] __nla_validate_parse: 2 callbacks suppressed
[  149.652724][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.857'.
[  149.658526][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.857'.
[  149.710630][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.858'.
[  150.353889][    C1] 
[  150.354702][    C1] ============================================
[  150.356553][    C1] WARNING: possible recursive locking detected
[  150.358380][    C1] syzkaller #0 Not tainted
[  150.359834][    C1] --------------------------------------------
[  150.361730][    C1] kworker/1:7/7069 is trying to acquire lock:
[  150.363574][    C1] ffff88810f279958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  150.366457][    C1] 
[  150.366457][    C1] but task is already holding lock:
[  150.368748][    C1] ffff88811331e158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  150.372122][    C1] 
[  150.372122][    C1] other info that might help us debug this:
[  150.375014][    C1]  Possible unsafe locking scenario:
[  150.375014][    C1] 
[  150.377523][    C1]        CPU0
[  150.378523][    C1]        ----
[  150.379545][    C1]   lock(&qdisc_xmit_lock_key#4);
[  150.381136][    C1]   lock(&qdisc_xmit_lock_key#4);
[  150.383101][    C1] 
[  150.383101][    C1]  *** DEADLOCK ***
[  150.383101][    C1] 
[  150.385803][    C1]  May be due to missing lock nesting notation
[  150.385803][    C1] 
[  150.388813][    C1] 13 locks held by kworker/1:7/7069:
[  150.390564][    C1]  #0: ffffc90000a08cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[  150.393968][    C1]  #1: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670
[  150.397616][    C1]  #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  150.400676][    C1]  #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  150.404308][    C1]  #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900
[  150.407519][    C1]  #5: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  150.410853][    C1]  #6: ffff88811267d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  150.415971][    C1]  #7: ffff88811331e158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  150.420208][    C1]  #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  150.423799][    C1]  #9: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  150.427494][    C1]  #10: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  150.430824][    C1]  #11: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  150.434686][    C1]  #12: ffff88817a02a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  150.439494][    C1] 
[  150.439494][    C1] stack backtrace:
[  150.441729][    C1] CPU: 1 UID: 0 PID: 7069 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) 
[  150.441743][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.441751][    C1] Workqueue:  0x0 (events)
[  150.441768][    C1] Call Trace:
[  150.441775][    C1]  <IRQ>
[  150.441780][    C1]  dump_stack_lvl+0xe8/0x150
[  150.441794][    C1]  print_deadlock_bug+0x279/0x290
[  150.441808][    C1]  __lock_acquire+0x253f/0x2cf0
[  150.441821][    C1]  ? unwind_next_frame+0xa6/0x2550
[  150.441836][    C1]  ? sch_direct_xmit+0x15f/0x4c0
[  150.441847][    C1]  lock_acquire+0x106/0x350
[  150.441856][    C1]  ? sch_direct_xmit+0x15f/0x4c0
[  150.441870][    C1]  _raw_spin_lock+0x2e/0x40
[  150.441881][    C1]  ? sch_direct_xmit+0x15f/0x4c0
[  150.441891][    C1]  sch_direct_xmit+0x15f/0x4c0
[  150.441903][    C1]  ? __pfx_sch_direct_xmit+0x10/0x10
[  150.441912][    C1]  ? arp_create+0x140/0x980
[  150.441927][    C1]  __dev_queue_xmit+0x180f/0x3950
[  150.441943][    C1]  ? __dev_queue_xmit+0x2b6/0x3950
[  150.441958][    C1]  ? arpt_do_table+0x256/0x1e30
[  150.441971][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  150.441986][    C1]  ? __pfx_arpt_do_table+0x10/0x10
[  150.441997][    C1]  ? trace_kmem_cache_alloc+0x29/0xe0
[  150.442014][    C1]  ? NF_HOOK+0xa2/0x3c0
[  150.442026][    C1]  NF_HOOK+0x33a/0x3c0
[  150.442039][    C1]  ? __pfx_arp_xmit_finish+0x10/0x10
[  150.442051][    C1]  ? NF_HOOK+0xa2/0x3c0
[  150.442063][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  150.442074][    C1]  ? lock_acquire+0x106/0x350
[  150.442083][    C1]  ? __pfx_arp_xmit_finish+0x10/0x10
[  150.442097][    C1]  ? inet_addr_type_dev_table+0x25/0x190
[  150.442121][    C1]  arp_xmit+0x16c/0x270
[  150.442133][    C1]  ? arp_xmit+0x23/0x270
[  150.442145][    C1]  arp_solicit+0xbe0/0xe40
[  150.442160][    C1]  ? arp_solicit+0x119/0xe40
[  150.442173][    C1]  ? __pfx_arp_solicit+0x10/0x10
[  150.442189][    C1]  ? __pfx_arp_solicit+0x10/0x10
[  150.442202][    C1]  __neigh_event_send+0xf05/0x14d0
[  150.442217][    C1]  neigh_resolve_output+0x198/0x750
[  150.442230][    C1]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  150.442253][    C1]  ? ip_finish_output2+0x3c2/0x1070
[  150.442262][    C1]  ip_finish_output2+0xca9/0x1070
[  150.442302][    C1]  ? ip_skb_dst_mtu+0x80b/0xa50
[  150.442318][    C1]  ? ip_finish_output+0x40e/0x530
[  150.442330][    C1]  ip_output+0x29f/0x450
[  150.442343][    C1]  ? ip_output+0x5b/0x450
[  150.442354][    C1]  iptunnel_xmit+0x621/0xd10
[  150.442368][    C1]  ip_tunnel_xmit+0x193a/0x1f20
[  150.442386][    C1]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  150.442399][    C1]  ? __pfx_gre_build_header+0x10/0x10
[  150.442414][    C1]  ? kfree+0x1c5/0x640
[  150.442426][    C1]  ? pskb_expand_head+0x458/0x1390
[  150.442440][    C1]  __gre_xmit+0x19e/0x240
[  150.442452][    C1]  ? __pfx___gre_xmit+0x10/0x10
[  150.442466][    C1]  erspan_xmit+0xa41/0x14d0
[  150.442480][    C1]  ? tcp_v4_rcv+0x2681/0x2ff0
[  150.442493][    C1]  ? __pfx_erspan_xmit+0x10/0x10
[  150.442507][    C1]  dev_hard_start_xmit+0x2cd/0x830
[  150.442530][    C1]  sch_direct_xmit+0x251/0x4c0
[  150.442547][    C1]  ? __pfx_sch_direct_xmit+0x10/0x10
[  150.442563][    C1]  __dev_queue_xmit+0x180f/0x3950
[  150.442583][    C1]  ? __dev_queue_xmit+0x2b6/0x3950
[  150.442605][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  150.442618][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  150.442637][    C1]  ? unwind_next_frame+0xa6/0x2550
[  150.442652][    C1]  ? lock_acquire+0x106/0x350
[  150.442672][    C1]  ? bond_do_alb_xmit+0x600/0x820
[  150.442687][    C1]  ? bond_dev_queue_xmit+0x9c/0x150
[  150.442700][    C1]  bond_start_xmit+0x766/0x1900
[  150.442722][    C1]  ? bond_start_xmit+0xb4/0x1900
[  150.442740][    C1]  ? __pfx_bond_start_xmit+0x10/0x10
[  150.442760][    C1]  ? __pfx_netif_skb_features+0x10/0x10
[  150.442783][    C1]  dev_hard_start_xmit+0x2cd/0x830
[  150.442808][    C1]  __dev_queue_xmit+0x14d9/0x3950
[  150.442829][    C1]  ? __dev_queue_xmit+0x2b6/0x3950
[  150.442853][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  150.442874][    C1]  ? ip6_output+0x340/0x550
[  150.442890][    C1]  ? lock_acquire+0x106/0x350
[  150.442904][    C1]  ? ip6_output+0x340/0x550
[  150.442923][    C1]  ? ip6_finish_output2+0xd39/0x13e0
[  150.442945][    C1]  ? ip6_output+0x126/0x550
[  150.442960][    C1]  ip6_output+0x340/0x550
[  150.442977][    C1]  ? __pfx_ip6_output+0x10/0x10
[  150.442992][    C1]  ndisc_send_skb+0xd0b/0x1670
[  150.443015][    C1]  ? ndisc_send_skb+0x215/0x1670
[  150.443037][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  150.443059][    C1]  ? __pfx_dst_output+0x10/0x10
[  150.443078][    C1]  addrconf_rs_timer+0x395/0x6d0
[  150.443098][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  150.443116][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.443138][    C1]  call_timer_fn+0x192/0x5e0
[  150.443153][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  150.443170][    C1]  ? call_timer_fn+0xd4/0x5e0
[  150.443185][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  150.443202][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.443218][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  150.443246][    C1]  __run_timer_base+0x652/0x8b0
[  150.443259][    C1]  ? ktime_get+0x45/0x220
[  150.443312][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  150.443330][    C1]  run_timer_softirq+0xb7/0x170
[  150.443344][    C1]  handle_softirqs+0x22a/0x840
[  150.443359][    C1]  ? __irq_exit_rcu+0xca/0x220
[  150.443375][    C1]  __irq_exit_rcu+0xca/0x220
[  150.443388][    C1]  irq_exit_rcu+0x9/0x30
[  150.443401][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  150.443420][    C1]  </IRQ>
[  150.443429][    C1]  <TASK>
[  150.443435][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  150.443449][    C1] RIP: 0010:finish_task_switch+0x427/0xbe0
[  150.443465][    C1] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 c6 ea 16 0a e8 c1 f3 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80
[  150.443477][    C1] RSP: 0018:ffffc900063d7a30 EFLAGS: 00000202
[  150.443490][    C1] RAX: 0000000000023d0b RBX: 1ffff110478c7784 RCX: 0000000080000001
[  150.443498][    C1] RDX: 0000000000000000 RSI: ffffffff8dfa8bc4 RDI: ffff88817484b428
[  150.443509][    C1] RBP: ffffc900063d7a90 R08: ffffffff9030cef7 R09: 1ffffffff20619de
[  150.443518][    C1] R10: dffffc0000000000 R11: fffffbfff20619df R12: ffff88823c63ae88
[  150.443529][    C1] R13: ffff888174849d80 R14: ffff8881b08c5880 R15: dffffc0000000000
[  150.443547][    C1]  __schedule+0x17bc/0x5680
[  150.443565][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  150.443587][    C1]  ? __pfx___schedule+0x10/0x10
[  150.443606][    C1]  ? schedule+0x90/0x360
[  150.443623][    C1]  schedule+0x164/0x360
[  150.443639][    C1]  worker_thread+0xc21/0xfc0
[  150.443663][    C1]  kthread+0x388/0x470
[  150.443680][    C1]  ? __pfx_worker_thread+0x10/0x10
[  150.443693][    C1]  ? __pfx_kthread+0x10/0x10
[  150.443709][    C1]  ret_from_fork+0x514/0xb70
[  150.443725][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  150.443738][    C1]  ? __switch_to+0xc79/0x1410
[  150.443759][    C1]  ? __pfx_kthread+0x10/0x10
[  150.443777][    C1]  ret_from_fork_asm+0x1a/0x30
[  150.443796][    C1]  </TASK>
[  150.716763][ T9256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.860'.
[  150.797315][ T9253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.801395][ T9253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.826953][ T9253] bond10: left promiscuous mode
[  150.829801][ T9253] vti0: left promiscuous mode
[  150.832861][ T9253] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  150.835438][ T9253] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  150.838098][ T9253] batman_adv: batadv0: Interface deactivated: ipvlan4
[  150.843021][ T9253] erspan0: left allmulticast mode
[  150.844721][ T9253] macvtap0: left promiscuous mode
[  150.846194][ T9253] macvtap0: left allmulticast mode
[  150.848666][ T9253] macsec1: left promiscuous mode
[  150.851331][ T9253] bond12: left promiscuous mode
[  150.853843][ T9253] erspan2: left promiscuous mode
[  150.855795][ T9253] bond12: left allmulticast mode
[  150.858424][ T9253] erspan2: left allmulticast mode
[  150.862126][ T9253] ip6gre2: left promiscuous mode
[  150.864028][ T9253] ip6gre2: left allmulticast mode
[  150.867868][ T9253] bond16: left allmulticast mode
[  150.870331][ T9253] bridge7: left promiscuous mode
[  150.877036][ T9253] bond19: left promiscuous mode
[  150.878545][ T9253] vcan0: left promiscuous mode
[  150.882296][ T9253] bond20: left promiscuous mode
[  150.885607][ T9253] vlan3: left allmulticast mode
[  150.887526][ T9253] bond22: left allmulticast mode
[  150.890519][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.893763][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.896417][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.899199][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.909356][ T9253] raw_sendmsg: syz.0.860 forgot to set AF_INET. Fix it!
[  151.321908][   T12] net_ratelimit: 46 callbacks suppressed
[  151.321927][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  151.330468][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  151.342107][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  151.452147][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  151.561966][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  151.671892][   T13] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  151.781745][ T6246] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  151.841744][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  151.845893][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  151.901954][   T12] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  152.271893][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  156.352106][ T5666] net_ratelimit: 55 callbacks suppressed
[  156.352126][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.451799][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  156.456172][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  156.461978][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.572035][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.682128][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.792119][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.902186][ T5666] bond0: (slave ip6gretap2): failed to get link speed/duplex
[  156.961943][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  156.967283][ T5666] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
