last executing test programs:

36.4179962s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

30.642782284s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

24.367135646s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

18.015573538s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

11.629057871s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.801336103s ago: executing program 2 (id=123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

679.477097ms ago: executing program 0 (id=392):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0xd0060)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x2c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7b}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x87}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x57, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4001840)

531.825521ms ago: executing program 0 (id=393):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={<r4=>0x0, @multicast1, @broadcast}, &(0x7f0000000180)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x0, 0x6}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

381.873037ms ago: executing program 0 (id=395):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80003, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x20000080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000400)={0x80, 0x0, 0x6}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a000100ffffffff000000000a8000"/28], 0x24}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x6f0, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0xd}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val={0x1, 0x7, [{0x18, 0x1}, {0x12}, {0x2}, {0x48, 0x1}, {0xb7, 0x1}, {0xc, 0x1}, {0x12}]}, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x634, 0x91, "04ff8239e3cc3aea9a26d1d0c7ad1383efaaeb895eb1cdc38538d062b0395dc7b61fbc4e97c47d073eb2797be2d0857cb9503f610591ef2147a4cf5cb19ffe477f59b8447c0ba9fd475bec8fb41b5fbafd4be18b0214a7711b49c63b22bd5c554e9c4b741171c4cd84952532d80b5f88145f36da31cde66c70243be4a2f71871a0b89cc20f98dba329bf089687d6003592ca25e1be39440345812d7dadd72890b23259d4d83ccce028cece919e2c3b23dc8ca555f196b46b526eac21656e3d4f417d2ba13defa48d43eced3df60d2b197661998a2a2a6c63fda16355718ecf562d3741549a13cc494436224cbcd6cff959fb204e16c8da5094fb42b98e288945d05e2f349b0f103dd62a07c10d4e999e22bcfe1f4f556084443998522ad3945f31512705286ae54118391203080b223eba25498756da55c32a8a96845e191cf4292a64d02fb4c041a16363a95d346774b2cc3411013b485c50fc1617bd8f1e8f52f8f08be59ac7ff13c75bd5f739406b13202956cb6c83cd6c8b00e042b9339ca3df972ba5b76000651ecdd4507306e4650bfcc90784a86885f676c9818fdf523112907e9c336d2fe234f72c7f6137ceb9130eba4f0fa41ebcc6c4a0c5bab4e926aef6e19a63cd82a6caa2cb4ce17fe6029ea733ab9a50aec76843e4fc5066c1c09319a39a62551ce4288ecdeb58f6c48c1794908f68654634f0c6f03ecf74f80df42c54fe1010bd8395558889b52e70ce315f926aaa76a2d4b108842d1931a94f349dec08c47689726e10a8ccfa5a7fedbf068b0d4119aa02287fcdc582bc42b685e3ffce443f4317b0b19251baddc0dd6913890f03fc01fb03d0d497ace76c74350518dd3b26e38322ccdec5d1120e3a3d814f3cb25d4d37e3290b0e5500f78bd06ec11b4973c180e507e2b1c836ecece2409dbd95d9a7a4357b7f734fbb853d1d4f78d4b081efc371852ae5e149dd9e129d929343a48979a87019e9dbb7856a04871f2c13dc29b3e1f99dac2442c9485d8828ae80d03ea7e1af45c36553209e9e61b6cb873d7a6ed0ffcbbafc86f88be674d7dcde669b9d12a63ba414e9a9f6e5eb6dcd5b488d150282641d79f35085b24a1debb37b632c30b6baf6c6056feefad29c820e37b98ec2effe915833a70be8bfc8167428732ad6c482379c5088b62e14a09eda8a5ee125743ca3947c163dd7d3f9c7a995d33e5a6940badbffae1f0d9daf981f40d32b02c4dd23314b09287254546e3dc06a1d1c75f6b2593044606243a9b922f3758749e732163093bb1cd457c59b700d9d4c166965fbcdbc5f1651b270517dd67b0a08ded9b4dbc36e51722f51b31d0dd2ecda8842ba03709bd68f9d832c5a43b850d47d68522947caa6945b538cafe149b5b3c23c57e0c0e6a8e0892de00f80355c74b600b9c949b82b9a67683b73f0c270e499815b9a4fb70b1b64110a4a0e48d0943e259ddbe2a2bd04a03a7c727a0554daa3471fd1621afe7b94e480b935222ecffb039b76ac080e952d7e36d2bdff21d1a6eb4ff81af43a248c592b6c900c9cb8a3b0db2d60dc9f4bbfa4080421bf4fa715b30b178d890b6a2cd209d867186993e3f3f6e94ccedf7ea008590fc215843387f2f754da9a3ec65e5c19e5c733d82dc541f00dd81e0466ed51ebd3cdf69e0617adb5d3734a40ffd3260adbb3254dfea8bb1fd98e9ac82adac2734e7fd27edbdd76859b4737a3568b0c8dd90091f5b8b94d13cd11abd957deda3689a87a9b7adf8bbd5320d29a1555769c0071612ebc9574048dccacc8e97d46c2bab6256ad8f42a4f744e86d67b123c19bd63b433f50f7e62a478edcaa8aef855afd387f040ae090154614da74424cc4d599b2de64d77506b629aab7787a4436450f7dd04dd14be68ee964ba6704bf906744d2bcf219d61e8d6f1a6daaffb693891072d1f43f447c4c4d757c28ab88c00519136c2d10c322cff68123c55881785853b93491f4dd9bafb593ac8b21b221791c850d77432194b2bfbe683fd8f75d14258f1099cb0fcde41958e4d18078c2b7631ae1c1242ba4232eab12214f99bcf9faef280b73e63971f87ada866d973e2b421abd442b900a8d0a570aaf8abf94a4d441dad6aae6ca74411720d1d0197fc2afe2fc483acf6bc510f3da7f2daf1e7a99ebd7798219142c0ede3fe7b5acfc49935c12d49b1a80513e3a0f905ccc659268f4f8fbc38c982d3404e7c682cda539868245b6ea90151491f07"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x6f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x77}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x80)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff08d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000009}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000e40)=0x4)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002da17000ffdbdf255700000008000300", @ANYRESOCT=r12, @ANYBLOB="06009500faff0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})

302.507665ms ago: executing program 0 (id=396):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0xd, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="450a0000000000006111b000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000004813656b71604e4700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000e36ad68500"/28], 0x48)
close(r4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000006800010000000000fedbdf250a00000000000000140006000000000000000000000000000000000108000500", @ANYRES32=r6], 0x34}}, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x5, 0x18}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000300"/28], 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r10=>r1, 0x1, 0x8, 0x8000})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf93}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x1, 0x6, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x1, 0x18}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xcc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x1e, 0x19, &(0x7f00000001c0)=""/25, 0x40f00, 0x20, '\x00', r6, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x7, 0xf5a, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r7, r8, 0x1, r9, r10]}, 0x94)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x100, 0x4)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r1, 0x0)

301.467856ms ago: executing program 1 (id=397):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x428, 0x0, 0x340, 0x210, 0x340, 0x340, 0x340, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 0x3, 0x2, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="74ec21bda804", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x2, 0xffff, 0x5, 0x5, 0x1, 'veth1_virt_wifi\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x202}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x8, {0x1}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x6, 0x0, 0x1, 0x0, "8e9a62c88caf1a68d23183fb49ab23039a6da4e402da7dcfc6e46e16bba94b04d45a925075879ad3003c99daed209bf29cd796588814b5e0c7a36ba81d8bc161"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x478)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000540)=@short={0xb, @remote, @bcast, 0x1, @null}, &(0x7f0000000580)=0x1c, 0x80800)
r3 = accept4$rose(r2, &(0x7f00000005c0)=@full={0xb, @remote, @default, 0x0, [@bcast, @netrom, @bcast, @bcast, @remote, @rose]}, &(0x7f0000000600)=0x40, 0x80800)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000640)=0x6, 0x4)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000006c0)='scalable\x00', 0x9)
r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
write(r6, &(0x7f0000000700)="ccbabb09c38f0b1fac27c7d5e7bfcff6ae104a33a4010c458d01d35c81d7883059b986137d5df1de623f66099e1c7ff1ca507cf25206b500aced8ae80f1fcc204c4b269e8d9f5602579bf667a81aa47e1762d210c27425e6013b1a87e115889e103bb404ae1da5bb916ec8b0c52f8d2f20164af6310cdd6ccdda6ea67fc5b5a43dc842462067e77bd137274b1a61bb0817db58bb27d43edc1408480ff6d45ba0453ae15ac56944e113101cb7a4ad5d2926c858425036a8c13fc8c019", 0xbc)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
r7 = openat$cgroup_ro(r4, &(0x7f0000000840)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001580)=@nat={'nat\x00', 0x19, 0x4, 0xc88, [0x2000000008c0, 0x0, 0x0, 0x2000000011c6, 0x2000000013c2], 0x0, &(0x7f0000000880), &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0xa, 0x809b, 'sit0\x00', 'batadv0\x00', 'caif0\x00', 'virt_wifi0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @random="40e2326ee5a8", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x856, 0x89e, 0x8d6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x1d, 0x1}, {0xd, 0x1}, {0x8, 0x1}, {}, {0xe, 0x2}, {0xb}, {0x956}, {0x1ff, 0x1}, {0x99a}, {0xe00}, {0x6}], [{0x430cb471, 0x9}, {0x8, 0x2}, {0x9, 0x5422}, {0x6, 0x44c1}, {0xfffffffb, 0x5}, {0x42e0, 0x9}, {0x7, 0x7fff}, {0x1, 0x7}, {0x5, 0x5}, {0x1800, 0x993}, {0x6, 0x9}], 0x3, 0x2}, {[{0xff, 0x2}, {0x7f3cd560, 0x1}, {0x3, 0xe669d82c9b2f28e5}, {0x6}, {0x0, 0x3}, {0x8, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x7}, {0x3c7a955c, 0x1}, {0xfffffff9, 0x2}], [{0x9, 0xfff}, {0x3, 0xd}, {0xe, 0xa}, {0x7, 0x8}, {0x100, 0x8}, {0x7, 0x1}, {0x11d6, 0x3}, {0x10000000, 0x3}, {0x7, 0x2}, {0x2d45, 0x1}, {0x6000000, 0x3}], 0xa, 0xa}, {[{0x6, 0x3}, {0x3, 0x2}, {0x6d}, {0x8, 0x3}, {0xfffffffd}, {0xfffffffd, 0x1}, {0x5, 0x3}, {0xa7b, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0xc5}], [{0x197, 0x4}, {0x9, 0xfff}, {0x842d, 0x3ff}, {0x6, 0x10000}, {0x8, 0x6}, {0xc, 0x81}, {0x3ff, 0x1}, {0x689a}, {0x5, 0x1}, {0x8, 0xfffffffd}, {0x0, 0x8}], 0x7, 0x2}, {[{0x6, 0x3}, {0x5, 0x3}, {0x2, 0xaa1d045cc1ca9ea3}, {0xd, 0x3}, {0x7}, {0x80, 0x1}, {0x7}, {0xffff, 0x1}, {0x2, 0x2}, {0x3, 0x2}, {0x3ff, 0x1}], [{0x0, 0x3}, {0x0, 0x3d1a8774}, {0x9b5, 0x6}, {0x4, 0x6}, {0x1, 0xff}, {0xd, 0xfffffffe}, {0x855, 0x48a}, {0x4, 0x6}, {0xf}, {0x2ed2, 0x401}, {0x2, 0x8}], 0x2, 0x1}, {[{0x8, 0x3}, {0x6, 0x3}, {0x9, 0x1}, {0x5, 0x3}, {0x2}, {0x8, 0x3}, {0xffffffc3, 0x1}, {0x800}, {0x0, 0x3}, {0x3}, {0x3, 0x3}], [{0xc, 0x9ed}, {0x14, 0x8}, {0x10000, 0x10}, {0x4, 0x3}, {0x7fffffff, 0x8000}, {0x80000000, 0x5}, {0x9}, {0x80, 0xb43}, {0xcf, 0x1}, {0x200, 0xfffffffd}, {0x1, 0x4}], 0x8, 0x3}, {[{0x2}, {0x80000001, 0x2}, {0x1}, {0x3ff}, {0x5, 0x3}, {0xfffffffc, 0x1}, {0x1, 0x2}, {0x4049, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x1, 0x1}], [{0x1e8820, 0x70d7ce27}, {0x8, 0x7}, {0x7, 0x800}, {0x7, 0x7}, {0x9, 0x5}, {0x101, 0x3a}, {0x8, 0x9}, {0x6, 0x8}, {0xfffffc01, 0x2}, {0x2, 0x5}, {0x14000000}], 0xa, 0x6}, {[{0xfffffff8}, {0x1e3, 0x3}, {0xfffffffd, 0x1}, {0xedb, 0x3}, {0x2, 0x3}, {0x2, 0x3}, {0xc, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}], [{0x6, 0x6}, {0x1, 0x4}, {0x3, 0x1ff}, {0x7, 0xa2}, {0x92e, 0x371}, {0x2, 0x9e2b}, {0x0, 0x6}, {0x0, 0x86}, {0x4, 0x85}, {0x73, 0x30}, {0x91d1}], 0x1, 0x1}, {[{0x6, 0x3}, {0x5, 0x3}, {0xd, 0x3}, {0x7a, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x3ff, 0x1}, {0x29}, {0x8}, {0x8, 0x2}], [{0x3, 0x101}, {0xbc, 0xaffe}, {0x9, 0x10000}, {0x7fffffff, 0x1}, {0x5, 0x1}, {0xfffffe00, 0x90}, {0x2, 0x22a3}, {0x3ff, 0x1}, {0x6, 0x81}, {0xd}, {0x84a, 0xa}], 0x5}, {[{0x80}, {0x120000, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0xffffff01}, {0x1, 0x1}, {0xf}, {0x91}, {0x3, 0x2}, {0x7, 0x1}, {0x9, 0x2}], [{0x61125ace, 0x4}, {0x3ff, 0x3ff}, {0x7, 0xa}, {0x8, 0x7fffffff}, {0x80000001, 0x7}, {0x5b371b4a, 0x1}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x45f}, {0xffff, 0x4}, {0x7fff, 0x7}], 0x3, 0x7}, {[{0xc, 0x2}, {0x200, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x1}, {0x80000000, 0x3}, {0x1000, 0x3}, {0x20000000, 0x1}, {}, {0x6}], [{0x80, 0x8}, {0x3, 0x75ae}, {0x3, 0x100}, {0x23e, 0x1}, {0xfffffff4, 0x4}, {0x2, 0x6}, {0x7d02, 0xbeb2}, {0x0, 0xfffffff8}, {0xffffffff, 0x2}, {0x3, 0x7}, {0x4, 0x3}], 0x8, 0x5}, {[{0x4, 0x3}, {0x1ff}, {0x10001, 0x2}, {0xf, 0x3}, {0xcabb, 0x3}, {0xc, 0x1}, {0x2, 0x3}, {0xee6174a0, 0x2}, {0x9, 0x1}, {0x4}, {0x2b5}], [{0x3, 0xb}, {0xffff, 0x5}, {0x3, 0x5}, {0x3ff, 0x3}, {0x10, 0x7}, {0x2, 0x5}, {0x7, 0x1ff}, {0x4, 0x2}, {0x0, 0x2}, {0x400, 0xfffffff8}, {0x6, 0x3}], 0x0, 0x2}], 0x8, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x7, {0x6}}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{0x5, 0x2, 0xf8, 'bond_slave_0\x00', 'batadv0\x00', 'vcan0\x00', 'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0xff, 0x0, 0x0, 0x0, 0x101, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}, {0x3, 0x48, 0x6558, 'macsec0\x00', 'nr0\x00', 'pimreg0\x00', 'vlan0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xb6, 0xee, 0x126, [@ip={{'ip\x00', 0x0, 0x20}, {{@loopback, @multicast1, 0x0, 0x0, 0x1, 0xc, 0x28, 0xe, 0x4e20, 0x4e20, 0x4e22, 0x4e20}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="fc8dc1c5643a", 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x3, 0x10, 0x885e, 'veth1_to_bridge\x00', 'wlan1\x00', 'ip_vti0\x00', 'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @random="e2c1a3d5306e", [0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x10e, 0x156, [@state={{'state\x00', 0x0, 0x8}, {{0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"f44b6db906e80fe13613379860e67c080d020ad23786ccaf273d44ad38c6"}}}]}]}, 0xd00)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001680)={'gre0\x00', &(0x7f0000001600)={'gretap0\x00', 0x0, 0x40, 0x700, 0x5, 0xd5b, {{0xb, 0x4, 0x0, 0xa, 0x2c, 0x68, 0x0, 0x81, 0x2f, 0x0, @local, @remote, {[@end, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x0, [0x7, 0x77, 0x9, 0x0]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001680)={'gre0\x00', &(0x7f0000001600)={'gretap0\x00', <r9=>0x0, 0x40, 0x700, 0x5, 0xd5b, {{0xb, 0x4, 0x0, 0xa, 0x2c, 0x68, 0x0, 0x81, 0x2f, 0x0, @local, @remote, {[@end, @timestamp={0x44, 0x14, 0x9e, 0x0, 0x0, [0x7, 0x77, 0x9, 0x0]}]}}}}})
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000016c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, r9}, 0xc) (async)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000016c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, r9}, 0xc)
sendto$inet(r1, &(0x7f0000001700)="46e1947fc6cc14f42f87ad5b4710de5eb77f4440e526436b47b174de", 0x1c, 0x20004080, &(0x7f0000001740)={0x2, 0x4e22, @local}, 0x10) (async)
sendto$inet(r1, &(0x7f0000001700)="46e1947fc6cc14f42f87ad5b4710de5eb77f4440e526436b47b174de", 0x1c, 0x20004080, &(0x7f0000001740)={0x2, 0x4e22, @local}, 0x10)
unshare(0x16000600) (async)
unshare(0x16000600)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=@getae={0x50, 0x1f, 0x200, 0x70bd2a, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0xa, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa6a, 0x34ff}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x10, 0x15, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x5, 0x178, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x9, 0x9, 0x18, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xd, 0x4, 0x2, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @fallback=0x26, r4, 0x8, &(0x7f00000019c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000001a00)=[r4, r3, r4, r7, r7, r4, r4, r7], &(0x7f0000001a40)=[{0x3, 0x4, 0x3, 0x5}, {0x3, 0x2, 0x8}]}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x10, 0x15, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x5, 0x178, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x9, 0x9, 0x18, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xd, 0x4, 0x2, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @fallback=0x26, r4, 0x8, &(0x7f00000019c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000001a00)=[r4, r3, r4, r7, r7, r4, r4, r7], &(0x7f0000001a40)=[{0x3, 0x4, 0x3, 0x5}, {0x3, 0x2, 0x8}]}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001b40)={r3, r10})
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001b80)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000001c80)=0xe8)
ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000001cc0)={0x3, @default, r11}) (async)
ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000001cc0)={0x3, @default, r11})
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001d00)={0x2, {{0x2, 0x4e21, @local}}, 0x0, 0x7, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x81, @multicast2}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x410) (async)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001d00)={0x2, {{0x2, 0x4e21, @local}}, 0x0, 0x7, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x81, @multicast2}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @private=0xa010101}}]}, 0x410)
bind$netlink(0xffffffffffffffff, &(0x7f0000002140)={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc)

242.406723ms ago: executing program 0 (id=398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x800)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
recvmmsg(r10, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0)
r11 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0)
r14 = socket(0x1, 0x803, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r16}]}, 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r17=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r17}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

239.264071ms ago: executing program 1 (id=399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000110a0104f4ff0000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000184c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffd140000001000010000000000000000000084000a"], 0xe0}}, 0x0)

238.540233ms ago: executing program 1 (id=400):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) (async)
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$rds(0x15, 0x5, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x57, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0}}], 0x58}, 0x0) (async, rerun: 32)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (rerun: 32)

152.513508ms ago: executing program 1 (id=401):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000000)=0x7b, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="674309951aab8c285a64b8be00c9612328ec16e0dfaebff7468feb939615aeb5522da35b9e2435fa444667e304dd701f91d08523d720b1eeb47c533a32f66b09f96ef6d59066fd071eb02db42a5f2abd1f3013a051d0324bff8438e8a0ac3aa971bdc9a60b32367182944cb432865c419b3a25bd899ecaa49d5b0ac085a93a6df761fe1f31b769ccc62fb31dff82eb5d2b96a9852b", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000000)=0x7b, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000001140), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="674309951aab8c285a64b8be00c9612328ec16e0dfaebff7468feb939615aeb5522da35b9e2435fa444667e304dd701f91d08523d720b1eeb47c533a32f66b09f96ef6d59066fd071eb02db42a5f2abd1f3013a051d0324bff8438e8a0ac3aa971bdc9a60b32367182944cb432865c419b3a25bd899ecaa49d5b0ac085a93a6df761fe1f31b769ccc62fb31dff82eb5d2b96a9852b", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) (async)

152.232118ms ago: executing program 1 (id=402):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0xc9)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="1c005e80080007006f0000e8070005005b"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x20)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket(0x5, 0x1, 0x100)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010003000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0)

845.572µs ago: executing program 1 (id=403):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff4d)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="eb8f000000000000000007"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40030003)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="20dbdf2500000000000000000000da0dd30100", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000b80)="4cf80c33db588500f6796f210c5c25a3c17f77eb7cd6135744495e689f0308505dc9dc7d504e269ad5b9028ece1daae10a67942da326a929904a1762df7f5b7c35", 0x41)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
sendmmsg(r6, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r9, 0x75)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

0s ago: executing program 0 (id=404):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r5=>r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001200017000626f002dd52b7fb8e77296944c793e041ec7355da7b34ae1e9c6dbd9bbcbaeade3beffb82eb930de6a25dc6acb30841c6e49c5b8639903a5cdba3e987efab97dbbaca667455f5aedd12c7ae997bd086e2ebf976132951987a9354baed6714b4839e12c4f7ad1d99341ee4faf5f5b4b018617d936363645dfd10000f779ee5dd1415530c298e2d6829902a588fd46e2396df9aed73b4438beb28e091c5c485161e43b03e23efe3d08e62836cba4fdedc10cf3f8ed5d644c0b02bf323b93fc39174510bf917be82cfba3d26d7c1ce71019e4e55353ff1313a5e55586279d00"/250, @ANYRES32, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
socket(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r7, @ANYBLOB="5ddf12341c664d0ece854256b4385bc67771eda709f90dde90f6297b24f9cfa5d1d42fad9efd8c3c62f23eafdd0f18fa44966a985c29fec122e529b5880d21e6c33e538b5bb1db748f2e87021f0c74c02dd66452bba06fd94e64d5741c41d72f829dbcfd09903ed1ce0f47573d6ab2be2d538bcc3e4ea98c18fe961e4a7f0c00bd3d23a5adeaa6616de385eeaec938d788c37d8fdb7ad82e2acba39f99cffc4a4d4265f2fd8f22edfccd8150908dfb9dac6ba64cf42e9301ca6a29142bcef973", @ANYRES16=0x0], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xb, 0x2}, {0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x0)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r13 = accept4(r12, 0x0, 0x0, 0x0)
sendmmsg$inet(r13, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)="de5ec5d04df414658f0f4baaed9eee6d9ec3d78aa7facd50921a9b84762e5d57a38f80254fcbc1cfab0f77c4eb", 0x2d}, {&(0x7f0000000dc0)="a7", 0x1}], 0x2}}], 0x1, 0x6004)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r14], 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18796' (ED25519) to the list of known hosts.
syzkaller login: [   47.743480][ T5789] cgroup: Unknown subsys name 'net'
[   47.847014][ T5789] cgroup: Unknown subsys name 'cpuset'
[   47.852835][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.390946][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.572569][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.575620][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.578855][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.581766][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.593501][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.599780][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.602433][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.606965][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.610614][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.633500][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.688156][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.691068][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.703981][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.707274][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.710476][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.856365][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   53.897569][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   53.977760][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.980585][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.983067][ T5820] bridge_slave_0: entered allmulticast mode
[   53.986182][ T5820] bridge_slave_0: entered promiscuous mode
[   54.004872][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.007285][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.009842][ T5820] bridge_slave_1: entered allmulticast mode
[   54.012798][ T5820] bridge_slave_1: entered promiscuous mode
[   54.023788][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.045409][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.047857][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.050404][ T5816] bridge_slave_0: entered allmulticast mode
[   54.053097][ T5816] bridge_slave_0: entered promiscuous mode
[   54.060806][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.064132][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.066931][ T5816] bridge_slave_1: entered allmulticast mode
[   54.069993][ T5816] bridge_slave_1: entered promiscuous mode
[   54.075926][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.109053][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.119379][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.141740][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.185026][ T5816] team0: Port device team_slave_0 added
[   54.202293][ T5820] team0: Port device team_slave_0 added
[   54.207712][ T5820] team0: Port device team_slave_1 added
[   54.211912][ T5816] team0: Port device team_slave_1 added
[   54.231147][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.234412][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.237395][ T5827] bridge_slave_0: entered allmulticast mode
[   54.241189][ T5827] bridge_slave_0: entered promiscuous mode
[   54.277621][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.280619][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.285054][ T5827] bridge_slave_1: entered allmulticast mode
[   54.288991][ T5827] bridge_slave_1: entered promiscuous mode
[   54.301655][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.304295][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.312624][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.318128][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.321063][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.331876][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.339972][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.342979][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.354469][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.371378][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.375349][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.384973][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.412806][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.420693][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.474607][ T5816] hsr_slave_0: entered promiscuous mode
[   54.477858][ T5816] hsr_slave_1: entered promiscuous mode
[   54.496413][ T5827] team0: Port device team_slave_0 added
[   54.500114][ T5827] team0: Port device team_slave_1 added
[   54.507432][ T5820] hsr_slave_0: entered promiscuous mode
[   54.510563][ T5820] hsr_slave_1: entered promiscuous mode
[   54.513422][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.516850][ T5820] Cannot create hsr debugfs directory
[   54.555050][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.557373][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.567846][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.579491][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.582008][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.592559][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.699086][ T5827] hsr_slave_0: entered promiscuous mode
[   54.702286][ T5827] hsr_slave_1: entered promiscuous mode
[   54.706522][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.709547][ T5827] Cannot create hsr debugfs directory
[   54.884627][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.912753][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.920077][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.925961][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.985769][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.991626][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.005351][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.011609][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.057396][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.065566][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.076795][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.092058][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.181509][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.211005][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   55.229625][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.232469][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.245946][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.248371][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.269507][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.316873][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   55.340051][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.342694][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.361189][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.387858][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.390366][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.402421][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.442555][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.445636][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.467460][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.470585][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.511187][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.603019][ T5816] veth0_vlan: entered promiscuous mode
[   55.622252][ T5816] veth1_vlan: entered promiscuous mode
[   55.632827][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.636015][   T54] Bluetooth: hci0: command tx timeout
[   55.662472][ T5816] veth0_macvtap: entered promiscuous mode
[   55.674385][ T5816] veth1_macvtap: entered promiscuous mode
[   55.687798][ T5820] veth0_vlan: entered promiscuous mode
[   55.698495][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.706025][ T5820] veth1_vlan: entered promiscuous mode
[   55.711296][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.714072][   T54] Bluetooth: hci1: command tx timeout
[   55.726623][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.730108][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.733167][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.736915][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.761895][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.791972][ T5820] veth0_macvtap: entered promiscuous mode
[   55.802340][ T5820] veth1_macvtap: entered promiscuous mode
[   55.804097][   T54] Bluetooth: hci2: command tx timeout
[   55.861179][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.870963][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.872478][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.897315][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.928683][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.931794][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.935520][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.938576][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.948489][ T5827] veth0_vlan: entered promiscuous mode
[   55.954296][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.957079][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.985947][ T5827] veth1_vlan: entered promiscuous mode
[   55.996100][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.030287][ T5827] veth0_macvtap: entered promiscuous mode
[   56.045494][ T5827] veth1_macvtap: entered promiscuous mode
[   56.054808][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.057773][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.102068][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.108432][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.112866][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.134355][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.146474][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.149983][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.155243][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.158852][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.219775][ T5886] bridge_slave_0: left allmulticast mode
[   56.221794][ T5886] bridge_slave_0: left promiscuous mode
[   56.231361][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.244256][ T5886] bridge_slave_1: left allmulticast mode
[   56.246112][ T5886] bridge_slave_1: left promiscuous mode
[   56.248320][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.264045][ T5886] bond0: (slave bond_slave_0): Releasing backup interface
[   56.269456][ T5886] bond0: (slave bond_slave_1): Releasing backup interface
[   56.279352][ T5886] team0: Port device team_slave_0 removed
[   56.286176][ T5886] team0: Port device team_slave_1 removed
[   56.288766][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.291146][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.294793][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.297118][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.319203][ T5890] bridge0: port 3(erspan0) entered blocking state
[   56.321857][ T5890] bridge0: port 3(erspan0) entered disabled state
[   56.327962][ T5890] erspan0: entered allmulticast mode
[   56.330939][ T5890] erspan0: entered promiscuous mode
[   56.333144][ T5890] bridge0: port 3(erspan0) entered blocking state
[   56.335529][ T5890] bridge0: port 3(erspan0) entered forwarding state
[   56.361288][ T5888] erspan0: left allmulticast mode
[   56.365303][ T5888] erspan0: left promiscuous mode
[   56.367828][ T5888] bridge0: port 3(erspan0) entered disabled state
[   56.382867][ T5888] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.410928][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.414132][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.473827][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.482109][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.500899][ T5892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.555770][ T5894] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   56.563980][ T5894] vxlan: entered promiscuous mode
[   56.625690][ T5897] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.773685][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   56.777323][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   56.781362][ T5900] tipc: Started in network mode
[   56.784954][ T5900] tipc: Node identity daed983ba09d, cluster identity 4711
[   56.787887][ T5900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.791055][ T5900] syzkaller0: entered promiscuous mode
[   56.796334][ T5900] syzkaller0: entered allmulticast mode
[   56.805916][ T5900] tipc: Resetting bearer <eth:syzkaller0>
[   56.810102][ T5899] tipc: Resetting bearer <eth:syzkaller0>
[   56.819141][ T5899] tipc: Disabling bearer <eth:syzkaller0>
[   57.425306][ T5903] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[   57.437539][ T5903] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   57.440099][ T5903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.443112][ T5903] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   57.450974][ T5907] x_tables: unsorted entry at hook 1
[   57.561155][ T5909] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   57.581788][ T5909] bond1: entered promiscuous mode
[   57.584995][ T5909] bond1: entered allmulticast mode
[   57.586939][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.603876][ T5909] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   57.610492][ T5909] bridge0: port 3(gretap1) entered blocking state
[   57.613849][ T5909] bridge0: port 3(gretap1) entered disabled state
[   57.616636][ T5909] gretap1: entered allmulticast mode
[   57.635317][ T5909] gretap1: entered promiscuous mode
[   57.706170][ T5912] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   57.724303][   T54] Bluetooth: hci0: command tx timeout
[   57.784871][ T5924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.793523][ T5916] Cannot find add_set index 0 as target
[   57.803673][   T54] Bluetooth: hci1: command tx timeout
[   57.825727][ T5916] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   57.826078][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.857068][ T5918] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[   57.874437][   T54] Bluetooth: hci2: command tx timeout
[   57.909268][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.925659][ T5931] xfrm1: entered promiscuous mode
[   57.927309][ T5931] xfrm1: entered allmulticast mode
[   57.936736][ T5931] Zero length message leads to an empty skb
[   57.975678][ T5934] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17'.
[   58.029999][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.040513][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.080203][ T5941] netlink: 'syz.1.19': attribute type 4 has an invalid length.
[   58.175671][ T5946] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   58.181928][ T5946] batadv1: entered promiscuous mode
[   58.185465][ T5946] batadv1: entered allmulticast mode
[   58.748816][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.879375][ T5974] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   59.032476][ T5985] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   59.462755][ T5999] netlink: 'syz.2.34': attribute type 32 has an invalid length.
[   59.569170][   T10] IPVS: starting estimator thread 0...
[   59.663438][ T6012] IPVS: using max 80 ests per chain, 192000 per kthread
[   59.671410][ T6017] bond3: entered promiscuous mode
[   59.674158][ T6017] 8021q: adding VLAN 0 to HW filter on device bond3
[   59.739446][ T6022] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   59.744807][ T6022] syz_tun: entered promiscuous mode
[   59.757645][ T6022] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   59.794992][   T54] Bluetooth: hci0: command tx timeout
[   59.875233][   T54] Bluetooth: hci1: command tx timeout
[   59.953829][   T54] Bluetooth: hci2: command tx timeout
[   60.158287][ T6051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.222688][ T6051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.347001][ T6051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.464901][ T6051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.609462][ T6051] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.626568][ T6051] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.637056][ T6073] macsec1: entered promiscuous mode
[   60.639352][ T6073] macsec1: entered allmulticast mode
[   60.684302][ T6051] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.699706][ T6051] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.709676][ T6076] gretap2: entered promiscuous mode
[   60.759705][ T6078] gretap2: entered promiscuous mode
[   60.765992][ T6075] syz.2.51 (6075) used greatest stack depth: 20096 bytes left
[   61.229414][ T6118] bridge_slave_0: left allmulticast mode
[   61.231239][ T6118] bridge_slave_0: left promiscuous mode
[   61.233165][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.252803][ T6118] bridge_slave_1: left allmulticast mode
[   61.257511][ T6118] bridge_slave_1: left promiscuous mode
[   61.259421][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.266635][ T6118] bond0: (slave bond_slave_0): Releasing backup interface
[   61.277904][ T6118] bond0: (slave bond_slave_1): Releasing backup interface
[   61.290678][ T6118] team0: Port device team_slave_0 removed
[   61.304166][ T6118] team0: Port device team_slave_1 removed
[   61.306624][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.309378][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.317199][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.319742][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.331646][ T6118] gretap1: left allmulticast mode
[   61.335418][ T6118] gretap1: left promiscuous mode
[   61.337262][ T6118] bridge0: port 3(gretap1) entered disabled state
[   61.351965][ T6122] bridge2: entered promiscuous mode
[   61.474982][ T4290] wlan0: Trigger new scan to find an IBSS to join
[   61.508879][ T6137] __nla_validate_parse: 15 callbacks suppressed
[   61.508889][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   61.675057][ T6144] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   61.677340][ T6144] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   61.830282][ T6154] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   61.874292][   T54] Bluetooth: hci0: command tx timeout
[   61.885962][ T6150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.70'.
[   61.954147][   T54] Bluetooth: hci1: command tx timeout
[   62.008314][ T6161] validate_nla: 3 callbacks suppressed
[   62.008330][ T6161] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   62.025623][ T6161] netlink: 3 bytes leftover after parsing attributes in process `syz.1.73'.
[   62.033959][   T54] Bluetooth: hci2: command tx timeout
[   62.042532][ T6161] batadv1: entered promiscuous mode
[   62.048356][ T6161] batadv1: entered allmulticast mode
[   62.222806][ T6161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.73'.
[   62.447514][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'.
[   62.475751][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.499380][ T6180] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.502731][ T6180] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   62.509379][ T6180] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   62.539166][ T6184] macvlan0: entered promiscuous mode
[   62.541454][ T6184] macvlan0: entered allmulticast mode
[   62.544626][ T6184] bond1: (slave macvlan0): Error -98 calling set_mac_address
[   62.614500][ T6188] tipc: Started in network mode
[   62.616259][ T6188] tipc: Node identity 861303993119, cluster identity 4711
[   62.618765][ T6188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.621566][ T6188] syzkaller0: entered promiscuous mode
[   62.624320][ T6188] syzkaller0: entered allmulticast mode
[   62.629398][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[   62.632294][ T6187] tipc: Resetting bearer <eth:syzkaller0>
[   62.641798][ T6187] tipc: Disabling bearer <eth:syzkaller0>
[   62.782956][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   62.814244][ T6192] netlink: 'syz.2.79': attribute type 10 has an invalid length.
[   62.855431][ T6200] netlink: 'syz.2.80': attribute type 10 has an invalid length.
[   62.869284][ T6200] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.991951][ T6205] netlink: 'syz.1.82': attribute type 10 has an invalid length.
[   63.014603][ T6205] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.068451][ T6209] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[   63.109451][ T6209] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.117980][ T6211] vlan2: entered promiscuous mode
[   63.119981][ T6211] vlan2: entered allmulticast mode
[   63.122181][ T6211] hsr_slave_1: entered allmulticast mode
[   63.138706][ T6209] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.141815][ T6209] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.147659][ T6209] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   63.170191][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'.
[   63.180469][ T6214] macvlan0: entered promiscuous mode
[   63.182677][ T6214] macvlan0: entered allmulticast mode
[   63.187100][ T6214] bond2: entered promiscuous mode
[   63.189945][ T6214] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   63.206524][ T6214] bond2: left promiscuous mode
[   63.286973][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'.
[   63.301441][ T6222] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   63.306996][ T6221] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   63.349933][ T6226] bridge0: entered promiscuous mode
[   63.460524][ T6240] netlink: 'syz.1.88': attribute type 1 has an invalid length.
[   63.475956][ T6240] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.481679][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   63.504173][ T6240] gretap1: entered promiscuous mode
[   63.615695][ T6251] tipc: Started in network mode
[   63.617512][ T6251] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   63.620411][ T6251] tipc: Enabled bearer <eth:team0>, priority 0
[   63.656081][ T6255] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.659074][ T6255] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.661823][ T6255] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.664750][ T6255] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.710833][ T6257] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   63.719160][ T6257] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   63.799736][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'.
[   63.818016][ T6262] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[   63.822613][ T6262] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[   63.826730][ T6262] bond4 (unregistering): Released all slaves
[   63.904150][ T6268] bridge0: left promiscuous mode
[   63.907803][ T6268] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   63.911546][ T6268] netlink: 'syz.2.98': attribute type 10 has an invalid length.
[   63.914996][ T6268] bridge0: port 1(team0) entered blocking state
[   63.917160][ T6268] bridge0: port 1(team0) entered disabled state
[   63.919280][ T6268] team0: entered allmulticast mode
[   64.208199][ T6282] IPv6: Can't replace route, no match found
[   64.433512][ T1089] wlan0: Trigger new scan to find an IBSS to join
[   64.735339][   T10] tipc: Node number set to 11578026
[   65.025751][ T6333] netlink: 'syz.2.115': attribute type 4 has an invalid length.
[   65.073637][ T6335] macsec1: entered promiscuous mode
[   65.078898][ T6335] macsec1: entered allmulticast mode
[   65.560494][ T6372] bridge0: port 3(erspan0) entered blocking state
[   65.563049][ T6372] bridge0: port 3(erspan0) entered disabled state
[   65.566062][ T6372] erspan0: entered allmulticast mode
[   65.569796][ T6372] erspan0: entered promiscuous mode
[   65.572478][ T6372] bridge0: port 3(erspan0) entered blocking state
[   65.575881][ T6372] bridge0: port 3(erspan0) entered forwarding state
[   65.589580][ T6372] erspan0: left allmulticast mode
[   65.591804][ T6372] erspan0: left promiscuous mode
[   65.595531][ T6372] bridge0: port 3(erspan0) entered disabled state
[   65.615403][ T5847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   65.618730][ T5847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.699415][ T5847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   65.705638][ T5847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.758340][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.762730][ T6377] bridge_slave_1: left allmulticast mode
[   65.765622][ T6377] bridge_slave_1: left promiscuous mode
[   65.767512][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.772761][ T6377] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   65.794987][ T5847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   65.813597][ T5847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.886279][ T5847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   65.890651][ T5847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.024617][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.030395][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.036467][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.040920][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.052819][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.087420][ T5847] team0: left allmulticast mode
[   66.089696][ T5847] bridge0: port 1(team0) entered disabled state
[   66.260661][ T5847] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   66.497282][ T5847] bond0 (unregistering): Released all slaves
[   66.552108][ T5847] bond1 (unregistering): Released all slaves
[   66.563126][ T5847] bond2 (unregistering): Released all slaves
[   66.625794][ T5847] bond3 (unregistering): Released all slaves
[   66.632278][ T5847] bond4 (unregistering): Released all slaves
[   66.648295][ T6385] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   66.650968][ T6385] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   66.676638][ T6391] syz_tun: left promiscuous mode
[   66.682608][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.758363][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.765378][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.811314][ T6391] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.814240][ T6391] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.817023][ T6391] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.820804][ T6391] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.837268][ T6391] macsec1: left promiscuous mode
[   66.839036][ T6391] macsec1: left allmulticast mode
[   66.861686][ T5847] tipc: Disabling bearer <eth:team0>
[   66.873945][ T5847] tipc: Left network mode
[   66.996715][ T6402] ip6gre2: entered promiscuous mode
[   67.226996][ T6426] __nla_validate_parse: 10 callbacks suppressed
[   67.227010][ T6426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.135'.
[   67.234055][ T5847] hsr_slave_0: left promiscuous mode
[   67.255760][ T5847] veth1_macvtap: left promiscuous mode
[   67.258338][ T5847] veth0_macvtap: left promiscuous mode
[   67.260276][ T5847] veth1_vlan: left promiscuous mode
[   67.262057][ T5847] veth0_vlan: left promiscuous mode
[   67.740508][ T6434] bond0: (slave wlan1): Releasing backup interface
[   67.772061][ T6387] chnl_net:caif_netlink_parms(): no params data found
[   67.850199][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.852505][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.856473][ T6387] bridge_slave_0: entered allmulticast mode
[   67.859091][ T6387] bridge_slave_0: entered promiscuous mode
[   67.871263][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.875271][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.877639][ T6387] bridge_slave_1: entered allmulticast mode
[   67.882948][ T6387] bridge_slave_1: entered promiscuous mode
[   67.915058][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.919614][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.946851][ T6387] team0: Port device team_slave_0 added
[   67.950529][ T6387] team0: Port device team_slave_1 added
[   67.994746][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.997077][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.011118][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.024956][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.027313][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.045302][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.084320][ T6387] hsr_slave_0: entered promiscuous mode
[   68.086588][ T6387] hsr_slave_1: entered promiscuous mode
[   68.092662][ T6387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.102599][ T6387] Cannot create hsr debugfs directory
[   68.113912][ T5819] Bluetooth: hci1: command tx timeout
[   68.184021][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   68.235582][ T6458] bond0: (slave syz_tun): Releasing backup interface
[   68.645950][ T6482] Bluetooth: MGMT ver 1.23
[   68.662301][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'.
[   68.697579][ T6482] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[   68.702880][ T6482] bond4: (slave vcan1): Error -95 calling set_mac_address
[   68.866302][ T6387] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.876262][ T6387] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.894525][ T6387] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.906956][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   68.911568][ T6387] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.916862][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   68.925570][ T6497] validate_nla: 2 callbacks suppressed
[   68.925583][ T6497] netlink: 'syz.1.145': attribute type 14 has an invalid length.
[   68.932185][ T6497] netlink: 'syz.1.145': attribute type 11 has an invalid length.
[   69.042966][ T6387] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.054760][ T6387] 8021q: adding VLAN 0 to HW filter on device team0
[   69.060084][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.062660][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.070962][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.073634][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.102074][ T6387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   69.108246][ T6387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.266457][ T6387] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.338406][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'.
[   69.339947][ T6387] veth0_vlan: entered promiscuous mode
[   69.349379][ T6387] veth1_vlan: entered promiscuous mode
[   69.354144][ T6530] gre0: entered allmulticast mode
[   69.394536][ T6387] veth0_macvtap: entered promiscuous mode
[   69.401629][ T6387] veth1_macvtap: entered promiscuous mode
[   69.422491][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.430575][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.439342][ T6387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.444145][ T6387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.447258][ T6387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.450248][ T6387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.562955][ T6544] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   69.569467][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.577977][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.582516][ T6544] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   69.611275][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.616663][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.472631][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.476185][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.479757][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.481759][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'.
[   70.807858][ T6584] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   70.810790][ T6584] openvswitch: netlink: Message has 8454 unknown bytes.
[   70.958140][ T6594] ipvlan2: entered promiscuous mode
[   70.996580][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.141524][ T6591] infiniband syz0: set active
[   71.144464][ T6591] infiniband syz0: added batadv_slave_1
[   71.170498][ T6591] RDS/IB: syz0: added
[   71.172101][ T6591] smc: adding ib device syz0 with port count 1
[   71.175131][ T6591] smc:    ib device syz0 port 1 has pnetid 
[   71.400320][ T5847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.732840][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.737343][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.741127][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.747737][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.751584][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.183085][ T6611] chnl_net:caif_netlink_parms(): no params data found
[   72.239689][ T6634] __nla_validate_parse: 6 callbacks suppressed
[   72.239704][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   72.263505][ T6634] 8021q: VLANs not supported on caif0
[   72.266153][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.269227][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.271859][ T6611] bridge_slave_0: entered allmulticast mode
[   72.276090][ T6611] bridge_slave_0: entered promiscuous mode
[   72.281108][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.285101][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.288441][ T6611] bridge_slave_1: entered allmulticast mode
[   72.292341][ T6611] bridge_slave_1: entered promiscuous mode
[   72.357135][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.365547][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.428981][ T6611] team0: Port device team_slave_0 added
[   72.435881][ T6611] team0: Port device team_slave_1 added
[   72.468510][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.470946][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.482387][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.490787][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.494538][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.507659][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.533486][ T5847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.600283][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[   72.617788][ T6611] hsr_slave_0: entered promiscuous mode
[   72.621783][ T6611] hsr_slave_1: entered promiscuous mode
[   72.628628][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.632550][ T6611] Cannot create hsr debugfs directory
[   72.654833][ T6651] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002
[   72.718689][ T5847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.737407][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'.
[   72.751123][ T6653] ip6gre2: left promiscuous mode
[   72.781699][ T5847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.918681][ T6662] x_tables: duplicate underflow at hook 1
[   72.927357][ T5847] bridge_slave_1: left allmulticast mode
[   72.929577][ T5847] bridge_slave_1: left promiscuous mode
[   72.932455][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.956565][ T5847] bridge_slave_0: left allmulticast mode
[   72.958995][ T5847] bridge_slave_0: left promiscuous mode
[   72.961393][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.035757][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   73.087788][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'.
[   73.090822][ T6669] nbd: must specify at least one socket
[   73.146524][ T6672] netlink: 'syz.0.180': attribute type 39 has an invalid length.
[   73.210805][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'.
[   73.266023][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.271951][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.278706][ T5847] bond0 (unregistering): Released all slaves
[   73.517319][ T6693] syzkaller0: entered promiscuous mode
[   73.519088][ T6693] syzkaller0: entered allmulticast mode
[   73.667722][ T6697] x_tables: duplicate underflow at hook 3
[   73.795446][   T54] Bluetooth: hci1: command tx timeout
[   74.318745][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   74.450596][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   74.622948][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[   74.626648][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'.
[   74.666743][ T5847] hsr_slave_0: left promiscuous mode
[   74.669779][ T5847] hsr_slave_1: left promiscuous mode
[   74.683632][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.691455][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.700382][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.709563][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.742131][ T5847] veth1_macvtap: left promiscuous mode
[   74.744898][ T5847] veth0_macvtap: left promiscuous mode
[   74.747401][ T5847] veth1_vlan: left promiscuous mode
[   74.749745][ T5847] veth0_vlan: left promiscuous mode
[   75.015270][ T5847] team0 (unregistering): Port device team_slave_1 removed
[   75.032598][ T5847] team0 (unregistering): Port device team_slave_0 removed
[   75.317706][ T6724] Cannot find add_set index 0 as target
[   75.362889][ T6611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.376988][ T6611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.404458][ T6611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.419858][ T6611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.607997][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.665375][ T6611] 8021q: adding VLAN 0 to HW filter on device team0
[   75.671059][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.673568][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.695043][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.697962][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.741817][ T6761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.750266][ T6761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.752857][ T6761] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.763287][ T6761] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.769953][ T6761] geneve2: entered allmulticast mode
[   75.840541][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.846147][ T6761] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   75.881780][   T54] Bluetooth: hci1: command tx timeout
[   76.051420][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.120020][ T6611] veth0_vlan: entered promiscuous mode
[   76.200915][ T6787] netlink: 'syz.1.198': attribute type 9 has an invalid length.
[   76.204423][ T6787] netlink: 'syz.1.198': attribute type 7 has an invalid length.
[   76.206788][ T6787] netlink: 'syz.1.198': attribute type 8 has an invalid length.
[   76.211108][ T6611] veth1_vlan: entered promiscuous mode
[   76.263443][ T6611] veth0_macvtap: entered promiscuous mode
[   76.268520][ T6611] veth1_macvtap: entered promiscuous mode
[   76.289668][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.300663][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.322130][ T6611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.340658][ T6611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.346598][ T6611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.354015][ T6611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.412686][ T6799] openvswitch: netlink: IPv4 tunnel dst address is zero
[   76.457014][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.460183][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.492628][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.501350][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.750989][ T6381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.942308][ T6851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.048725][ T6860] x_tables: duplicate underflow at hook 1
[   78.110500][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.116541][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.120093][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.123168][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.127839][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.215280][ T6869] __nla_validate_parse: 18 callbacks suppressed
[   78.215299][ T6869] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.214'.
[   78.243917][ T6867] block nbd0: server does not support multiple connections per device.
[   78.248521][ T6867] block nbd0: shutting down sockets
[   78.419525][ T6874] netlink: 'syz.0.217': attribute type 2 has an invalid length.
[   78.437919][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'.
[   78.475044][ T6865] chnl_net:caif_netlink_parms(): no params data found
[   78.564748][ T6878] pim6reg: entered allmulticast mode
[   78.576110][ T6878] netlink: 148 bytes leftover after parsing attributes in process `syz.1.218'.
[   78.583485][ T6878] pim6reg: left allmulticast mode
[   78.602773][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.606722][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.609008][ T6865] bridge_slave_0: entered allmulticast mode
[   78.612240][ T6865] bridge_slave_0: entered promiscuous mode
[   78.622602][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.626173][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.628600][ T6865] bridge_slave_1: entered allmulticast mode
[   78.631933][ T6865] bridge_slave_1: entered promiscuous mode
[   78.712120][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.718506][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.772630][ T6865] team0: Port device team_slave_0 added
[   78.780133][ T6865] team0: Port device team_slave_1 added
[   78.829069][ T6381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.840300][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.842730][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.851418][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.868271][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.870646][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.878798][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.932801][ T6865] hsr_slave_0: entered promiscuous mode
[   78.943861][ T6865] hsr_slave_1: entered promiscuous mode
[   78.946015][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.948459][ T6865] Cannot create hsr debugfs directory
[   79.025682][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[   79.046996][ T6896] xt_limit: Overflow, try lower: 262144/524288
[   79.056878][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[   79.060369][ T6896] netlink: 'syz.0.223': attribute type 30 has an invalid length.
[   79.081641][ T6896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.085198][ T6896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.088479][ T6896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.091691][ T6896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.097163][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'.
[   79.100678][ T6896] netlink: 'syz.0.223': attribute type 30 has an invalid length.
[   79.182288][ T6902] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[   79.189969][ T6902] netlink: 144 bytes leftover after parsing attributes in process `syz.1.225'.
[   79.195975][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'.
[   79.220040][ T6902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.225'.
[   79.233041][ T6381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.290904][ T6909] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   79.336555][ T6909] bond6: (slave gretap1): making interface the new active one
[   79.340691][ T6909] bond6: (slave gretap1): Enslaving as an active interface with an up link
[   79.418548][ T6381] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.444597][ T6917] netlink: 76 bytes leftover after parsing attributes in process `syz.1.228'.
[   79.586266][ T6381] bridge_slave_1: left allmulticast mode
[   79.589847][ T6381] bridge_slave_1: left promiscuous mode
[   79.592548][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.599730][ T6381] bridge_slave_0: left allmulticast mode
[   79.602330][ T6381] bridge_slave_0: left promiscuous mode
[   79.608095][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.096071][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.108024][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.112528][ T6381] bond0 (unregistering): Released all slaves
[   80.193482][   T54] Bluetooth: hci1: command tx timeout
[   80.313940][ T6960] dvmrp0: entered allmulticast mode
[   80.316390][ T6962] tipc: Enabling <ib:lo> not permitted
[   80.318233][ T6962] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   80.335348][ T6962] veth1_macvtap: left promiscuous mode
[   80.841406][ T6998] macsec3: entered promiscuous mode
[   80.850413][ T6998] macsec3: entered allmulticast mode
[   80.852376][ T6995] bridge_slave_0: left allmulticast mode
[   80.856310][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.861668][ T6995] bond0: (slave bridge_slave_1): Releasing backup interface
[   80.867018][ T6995] bond0: (slave bond_slave_0): Releasing backup interface
[   80.873987][ T6995] bond0: (slave bond_slave_1): Releasing backup interface
[   80.904136][ T6995] team0: Port device team_slave_0 removed
[   80.907550][ T6995] team0: Port device team_slave_1 removed
[   80.909786][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.912754][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.920811][ T6381] hsr_slave_0: left promiscuous mode
[   80.922921][ T6381] hsr_slave_1: left promiscuous mode
[   80.926266][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.928724][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.931834][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.935085][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.946290][ T6381] veth1_macvtap: left promiscuous mode
[   80.948103][ T6381] veth0_macvtap: left promiscuous mode
[   80.949944][ T6381] veth1_vlan: left promiscuous mode
[   80.952136][ T6381] veth0_vlan: left promiscuous mode
[   81.234834][  T791] cfg80211: failed to load regulatory.db
[   81.298700][ T6381] team0 (unregistering): Port device team_slave_1 removed
[   81.320459][ T6381] team0 (unregistering): Port device team_slave_0 removed
[   81.606626][ T6865] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.622911][ T6865] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.638295][ T6865] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.650763][ T6865] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.711675][ T7017] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   81.788929][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.835369][ T6865] 8021q: adding VLAN 0 to HW filter on device team0
[   81.868836][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.871744][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.900955][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.904010][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.982640][ T7026] vxcan3: entered allmulticast mode
[   82.198348][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.235982][ T6865] veth0_vlan: entered promiscuous mode
[   82.242614][ T6865] veth1_vlan: entered promiscuous mode
[   82.273792][   T54] Bluetooth: hci1: command tx timeout
[   82.285189][ T7040] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   82.289454][ T6865] veth0_macvtap: entered promiscuous mode
[   82.360078][ T6865] veth1_macvtap: entered promiscuous mode
[   82.399155][ T7044] 8021q: adding VLAN 0 to HW filter on device bond8
[   82.402981][ T7044] bond7: (slave bond8): making interface the new active one
[   82.424780][ T7044] bond7: (slave bond8): Enslaving as an active interface with an up link
[   82.457834][ T7040] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[   82.470399][ T7044] 8021q: adding VLAN 0 to HW filter on device bond7
[   82.499405][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.531382][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.587614][ T6865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.590603][ T6865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.597322][ T6865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.600329][ T6865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.643144][ T7066] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   82.660895][ T7066] netlink: 'syz.1.255': attribute type 2 has an invalid length.
[   82.732528][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.741961][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.748757][ T7072] netlink: 'syz.1.256': attribute type 39 has an invalid length.
[   82.785445][ T7074] !: renamed from dummy0
[   82.787178][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.789913][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.064770][ T7092] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   83.073129][ T7092] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   83.237853][ T7102] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   83.376026][ T7117] __nla_validate_parse: 11 callbacks suppressed
[   83.376039][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'.
[   83.458849][ T7125] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   83.462490][ T7125] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.262'.
[   83.812620][ T7164] netlink: 'syz.1.263': attribute type 1 has an invalid length.
[   83.824368][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[   83.828484][ T7164] netlink: 'syz.1.263': attribute type 10 has an invalid length.
[   83.898753][ T7172] netlink: 92 bytes leftover after parsing attributes in process `syz.0.265'.
[   83.901738][ T7172] tc_dump_action: action bad kind
[   84.022118][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'.
[   84.147793][ T6381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.663896][ T7178] netlink: 172 bytes leftover after parsing attributes in process `syz.1.267'.
[   84.677579][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'.
[   84.681400][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'.
[   84.690065][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'.
[   84.733980][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'.
[   84.797436][ T7180] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   84.869434][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.872964][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.877779][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.881618][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.894330][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.928299][ T7190] bridge2: entered promiscuous mode
[   84.930516][ T7190] bridge2: entered allmulticast mode
[   84.940912][ T7190] team0: Port device bridge2 added
[   85.021261][ T7199] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   85.036413][ T7199] bond10: entered promiscuous mode
[   85.038900][ T7199] 8021q: adding VLAN 0 to HW filter on device bond10
[   85.107873][ T7204] netlink: 'syz.1.275': attribute type 12 has an invalid length.
[   85.152025][ T7207] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   85.294890][ T7185] chnl_net:caif_netlink_parms(): no params data found
[   85.394685][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.398046][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.401135][ T7185] bridge_slave_0: entered allmulticast mode
[   85.406341][ T7185] bridge_slave_0: entered promiscuous mode
[   85.433651][ T6381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.450750][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.455197][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.458349][ T7185] bridge_slave_1: entered allmulticast mode
[   85.462078][ T7185] bridge_slave_1: entered promiscuous mode
[   85.512761][ T6381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.526837][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.547378][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.596863][ T7185] team0: Port device team_slave_0 added
[   85.600825][ T7185] team0: Port device team_slave_1 added
[   85.612037][ T6381] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.640768][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.644273][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.655745][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.661952][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.669017][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.680161][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.751461][ T7185] hsr_slave_0: entered promiscuous mode
[   85.762648][ T7185] hsr_slave_1: entered promiscuous mode
[   85.765796][ T7185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.769349][ T7185] Cannot create hsr debugfs directory
[   85.868088][ T7237] tipc: Can't bind to reserved service type 0
[   85.897544][ T6381] bridge_slave_1: left allmulticast mode
[   85.899396][ T6381] bridge_slave_1: left promiscuous mode
[   85.901608][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.918851][ T6381] bridge_slave_0: left allmulticast mode
[   85.920670][ T6381] bridge_slave_0: left promiscuous mode
[   85.922706][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.192334][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.197548][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.201101][ T6381] bond0 (unregistering): Released all slaves
[   86.218314][ T7247] vlan3: entered promiscuous mode
[   86.220081][ T7247] vlan3: entered allmulticast mode
[   86.221829][ T7247] hsr_slave_1: entered allmulticast mode
[   86.457466][ T7256] 8021q: adding VLAN 0 to HW filter on device bond11
[   86.461899][ T7256] bond0: (slave bond11): Enslaving as an active interface with an up link
[   86.560638][ T7262] !: renamed from dummy0 (while UP)
[   86.705925][ T6381] hsr_slave_0: left promiscuous mode
[   86.710056][ T6381] hsr_slave_1: left promiscuous mode
[   86.713737][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.717169][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.741263][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.757446][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.781848][ T6381] veth1_macvtap: left promiscuous mode
[   86.794538][ T6381] veth0_macvtap: left promiscuous mode
[   86.797072][ T6381] veth1_vlan: left promiscuous mode
[   86.799461][ T6381] veth0_vlan: left promiscuous mode
[   86.915080][ T5819] Bluetooth: hci1: command tx timeout
[   87.526906][ T6381] team0 (unregistering): Port device team_slave_1 removed
[   87.589296][ T6381] team0 (unregistering): Port device team_slave_0 removed
[   87.807978][ T7278] bridge0: port 1(macvlan2) entered blocking state
[   87.811327][ T7278] bridge0: port 1(macvlan2) entered disabled state
[   87.816067][ T7278] macvlan2: entered allmulticast mode
[   87.818150][ T7278] bridge0: entered allmulticast mode
[   87.821781][ T7278] macvlan2: left allmulticast mode
[   87.823789][ T7278] bridge0: left allmulticast mode
[   87.895140][ T7185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.905550][ T7185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.912389][ T7185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.924880][ T7185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.061805][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.121257][ T7185] 8021q: adding VLAN 0 to HW filter on device team0
[   88.139287][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.142171][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.149535][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.151876][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.209546][ T7346] macsec0: entered promiscuous mode
[   88.225151][ T7346] macsec0 (unregistering): left promiscuous mode
[   88.382298][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.428584][ T7185] veth0_vlan: entered promiscuous mode
[   88.442092][ T7185] veth1_vlan: entered promiscuous mode
[   88.485767][ T7185] veth0_macvtap: entered promiscuous mode
[   88.492394][ T7185] veth1_macvtap: entered promiscuous mode
[   88.510047][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.518394][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.526362][ T7185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.529310][ T7185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.531984][ T7185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.543348][ T7185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.596319][ T7363] bridge0: port 1(erspan0) entered blocking state
[   88.598924][ T7363] bridge0: port 1(erspan0) entered disabled state
[   88.601441][ T7363] erspan0: entered allmulticast mode
[   88.604607][ T7363] erspan0: entered promiscuous mode
[   88.612674][ T7363] erspan0: left allmulticast mode
[   88.614881][ T7363] erspan0: left promiscuous mode
[   88.616589][ T7363] bridge0: port 1(erspan0) entered disabled state
[   88.640701][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.654117][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.716697][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.720888][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.825361][ T7372] __nla_validate_parse: 12 callbacks suppressed
[   88.825375][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'.
[   88.899352][ T7372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'.
[   88.940525][ T7375] netlink: 52 bytes leftover after parsing attributes in process `syz.1.300'.
[   89.022966][ T7375] wireguard0: entered promiscuous mode
[   89.025139][ T7375] wireguard0: entered allmulticast mode
[   89.066161][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.300'.
[   89.272664][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'.
[   89.290491][ T7393] bond0: (slave macvlan2): Opening slave failed
[   89.339755][ T7396] validate_nla: 1 callbacks suppressed
[   89.339772][ T7396] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   89.353661][ T7395] 8021q: adding VLAN 0 to HW filter on device bond12
[   89.357116][ T7395] bridge0: port 1(bond12) entered blocking state
[   89.359234][ T7395] bridge0: port 1(bond12) entered disabled state
[   89.361791][ T7395] bond12: entered allmulticast mode
[   89.366344][ T7395] bond12: entered promiscuous mode
[   89.384482][ T7396] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.389345][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'.
[   89.392318][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'.
[   89.466287][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'.
[   89.496466][ T7404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.308'.
[   89.625553][ T7415] vlan2: entered promiscuous mode
[   89.627756][ T7415] bond0: entered promiscuous mode
[   89.631309][ T7418] xt_bpf: check failed: parse error
[   89.632233][ T7415] bond0: (slave vlan2): Opening slave failed
[   89.641583][ T7419] xt_bpf: check failed: parse error
[   89.761482][ T7427] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   89.769280][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'.
[   89.808574][ T7427] bond6: (slave gretap1): Releasing active interface
[   89.818593][ T7427] bond7: (slave bond8): Releasing backup interface
[   89.821124][ T7427] bond7: (slave bond8): the permanent HWaddr of slave - 4e:7a:93:4b:85:8d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   89.831661][ T7427] bond7: (slave gretap2): making interface the new active one
[   89.836484][ T7431] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   89.842344][ T7427] bond7: (slave gretap2): Releasing backup interface
[   89.848749][ T7427] bond0: (slave bond11): Releasing backup interface
[   89.857347][ T7427] bond12: left allmulticast mode
[   89.859481][ T7427] bond12: left promiscuous mode
[   89.861734][ T7427] bridge0: port 1(bond12) entered disabled state
[   89.868879][ T7431] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   89.874937][ T7431] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.891137][ T7432] netlink: 'syz.0.316': attribute type 10 has an invalid length.
[   89.891545][ T7427] syz.1.315 (7427) used greatest stack depth: 17096 bytes left
[   89.900481][ T7432] netlink: 'syz.0.316': attribute type 21 has an invalid length.
[   89.904451][ T7432] netlink: 'syz.0.316': attribute type 13 has an invalid length.
[   89.907275][ T7432] netlink: 'syz.0.316': attribute type 17 has an invalid length.
[   89.998921][ T7434] syzkaller1: tun_chr_ioctl cmd 1074025677
[   90.001625][ T7434] syzkaller1: linktype set to 804
[   90.323055][ T7444] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   90.412115][ T6381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.170523][ T7464] Unsupported ieee802154 address type: 0
[   91.179739][ T7463] Unsupported ieee802154 address type: 0
[   91.224113][ T7468] netlink: 'syz.1.322': attribute type 4 has an invalid length.
[   91.258633][ T7470] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   91.265831][ T7470] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   91.289287][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.293183][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.296896][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.300728][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.305067][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.538709][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.611307][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.611836][ T7472] chnl_net:caif_netlink_parms(): no params data found
[   91.672502][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.708452][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.711288][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.718626][ T7472] bridge_slave_0: entered allmulticast mode
[   91.721758][ T7472] bridge_slave_0: entered promiscuous mode
[   91.726189][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.728578][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.731043][ T7472] bridge_slave_1: entered allmulticast mode
[   91.734574][ T7472] bridge_slave_1: entered promiscuous mode
[   91.779133][ T6381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.791393][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.796592][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.818875][ T7472] team0: Port device team_slave_0 added
[   91.822670][ T7472] team0: Port device team_slave_1 added
[   91.836899][ T6381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.862602][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.868622][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.879325][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.892500][ T6381] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.899842][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.902139][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.910657][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.979407][ T7472] hsr_slave_0: entered promiscuous mode
[   91.982714][ T7472] hsr_slave_1: entered promiscuous mode
[   91.985438][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.988059][ T7472] Cannot create hsr debugfs directory
[   92.026275][ T7494] netlink: 'syz.1.327': attribute type 21 has an invalid length.
[   92.028873][ T7494] netlink: 'syz.1.327': attribute type 22 has an invalid length.
[   92.032002][ T7494] netlink: 'syz.1.327': attribute type 23 has an invalid length.
[   92.069734][ T6381] bridge_slave_1: left allmulticast mode
[   92.071851][ T6381] bridge_slave_1: left promiscuous mode
[   92.074353][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.078559][ T6381] bridge_slave_0: left allmulticast mode
[   92.080521][ T6381] bridge_slave_0: left promiscuous mode
[   92.082466][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.351359][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.365319][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.370562][ T6381] bond0 (unregistering): Released all slaves
[   92.787407][ T7510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.811098][ T6381] hsr_slave_0: left promiscuous mode
[   92.814070][ T6381] hsr_slave_1: left promiscuous mode
[   92.816933][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.820863][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.844472][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.847571][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.866776][ T6381] veth1_macvtap: left promiscuous mode
[   92.869270][ T6381] veth0_macvtap: left promiscuous mode
[   92.872734][ T6381] veth1_vlan: left promiscuous mode
[   92.877485][ T6381] veth0_vlan: left promiscuous mode
[   93.183442][ T6381] team0 (unregistering): Port device team_slave_1 removed
[   93.216004][ T6381] team0 (unregistering): Port device team_slave_0 removed
[   93.394181][   T54] Bluetooth: hci1: command tx timeout
[   93.469931][ T7512] bond13: entered promiscuous mode
[   93.471950][ T7512] 8021q: adding VLAN 0 to HW filter on device bond13
[   93.484621][ T7513] bond13: (slave bridge7): making interface the new active one
[   93.487624][ T7513] bridge7: entered promiscuous mode
[   93.489898][ T7513] bond13: (slave bridge7): Enslaving as an active interface with an up link
[   93.590967][ T7472] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.612420][ T7472] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.619987][ T7472] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.640024][ T7472] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.760408][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.803620][ T7472] 8021q: adding VLAN 0 to HW filter on device team0
[   93.827814][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.830507][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.841703][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.844232][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.929189][ T7531] __nla_validate_parse: 11 callbacks suppressed
[   93.929248][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'.
[   93.934854][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'.
[   93.949482][ T7472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.952989][ T7472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.965658][ T7534] ieee802154 phy1 wpan1: encryption failed: -22
[   94.131537][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.169871][ T7472] veth0_vlan: entered promiscuous mode
[   94.177732][ T7472] veth1_vlan: entered promiscuous mode
[   94.201474][ T7472] veth0_macvtap: entered promiscuous mode
[   94.207360][ T7472] veth1_macvtap: entered promiscuous mode
[   94.218158][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.226479][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.241109][ T7472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.245256][ T7472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.248164][ T7472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.250999][ T7472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.361456][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.369739][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.408773][ T7150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.411520][ T7150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.685297][ T7550] validate_nla: 4 callbacks suppressed
[   94.685316][ T7550] netlink: 'syz.1.338': attribute type 12 has an invalid length.
[   95.362178][ T7562] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   95.366916][ T7562] netlink: 'syz.0.340': attribute type 2 has an invalid length.
[   95.373162][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   95.378367][ T7562] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   95.404686][ T7562] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.429783][ T7562] bond4: (slave veth7): Enslaving as an active interface with a down link
[   95.443738][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv1
[   95.447199][ T7562] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   95.541132][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'.
[   95.555677][ T7565] 8021q: adding VLAN 0 to HW filter on device bond14
[   95.591894][ T7565] 8021q: adding VLAN 0 to HW filter on device bond14
[   95.598877][ T7565] bond14: (slave vti0): The slave device specified does not support setting the MAC address
[   95.608545][ T7565] bond14: (slave vti0): Error -95 calling set_mac_address
[   95.617489][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'.
[   95.730599][ T7572] netlink: 'syz.1.343': attribute type 4 has an invalid length.
[   96.002799][ T7579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.036173][ T7587] netlink: 'syz.1.346': attribute type 10 has an invalid length.
[   96.039745][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.346'.
[   96.052980][ T7587] batman_adv: batadv0: Adding interface: virt_wifi0
[   96.066733][ T7587] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   96.076890][ T7587] batman_adv: batadv0: Interface activated: virt_wifi0
[   96.161004][ T7592] netlink: 'syz.0.348': attribute type 1 has an invalid length.
[   96.168703][ T7593] netlink: 'syz.0.348': attribute type 1 has an invalid length.
[   96.219003][ T7592] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   96.222287][ T7592] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   96.226459][ T7592] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   96.229378][ T7592] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   96.236802][ T7592] bond5: (slave geneve3): making interface the new active one
[   96.240352][ T7592] bond5: (slave geneve3): Enslaving as an active interface with an up link
[   96.249197][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'.
[   96.287929][ T5673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.308338][ T7593] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.983722][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.349'.
[   96.994798][ T7602] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[   96.997352][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'.
[   97.008621][ T7602] pim6reg1: entered allmulticast mode
[   97.078382][ T7606] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[   97.111899][ T7606] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.124278][ T7606] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.127496][ T7606] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[   97.127574][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.136576][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.137587][ T7606] bond6: (slave vxcan1): Error -95 calling set_mac_address
[   97.140015][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.145195][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.148023][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.169818][ T7610] erspan0: entered allmulticast mode
[   97.175845][ T7610] bond6: (slave erspan0): making interface the new active one
[   97.178844][ T7610] bond6: (slave erspan0): Enslaving as an active interface with an up link
[   97.252675][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'.
[   97.319045][ T7627] C: renamed from team_slave_0
[   97.412612][ T7614] chnl_net:caif_netlink_parms(): no params data found
[   97.478116][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.480580][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.483020][ T7614] bridge_slave_0: entered allmulticast mode
[   97.487112][ T7614] bridge_slave_0: entered promiscuous mode
[   97.489903][ T7645] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   97.492287][ T7645] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   97.495502][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.497898][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.500244][ T7614] bridge_slave_1: entered allmulticast mode
[   97.505695][ T7614] bridge_slave_1: entered promiscuous mode
[   97.531817][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.539315][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.580291][ T7614] team0: Port device team_slave_0 added
[   97.587463][ T7614] team0: Port device team_slave_1 added
[   97.642375][   T33] audit: type=1800 audit(1751700578.984:2): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="cgroup.controllers" dev="tmpfs" ino=711 res=0 errno=0
[   97.654417][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.656755][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.666611][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.672001][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.675007][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.684911][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.719673][ T7614] hsr_slave_0: entered promiscuous mode
[   97.721909][ T7614] hsr_slave_1: entered promiscuous mode
[   97.724629][ T7614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.727196][ T7614] Cannot create hsr debugfs directory
[   97.747693][ T7656] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   97.766504][  T152] smc: removing ib device syz0
[   97.772833][   T24] syz0: Port: 1 Link DOWN
[   97.980972][ T7663] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   97.984151][ T7663] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   98.146966][ T5673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.261946][ T5673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.302602][ T7673] bond7: (slave gretap1): making interface the new active one
[   98.309373][ T7673] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   98.359533][ T7676] netlink: 'syz.1.369': attribute type 11 has an invalid length.
[   98.380043][ T5673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.518630][ T5673] bridge_slave_1: left allmulticast mode
[   98.522542][ T5673] bridge_slave_1: left promiscuous mode
[   98.526430][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.530603][ T5673] bridge_slave_0: left allmulticast mode
[   98.532491][ T5673] bridge_slave_0: left promiscuous mode
[   98.534722][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.767584][ T5673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.772108][ T5673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.776526][ T5673] bond0 (unregistering): Released all slaves
[   98.885917][ T7701] pimreg: entered allmulticast mode
[   98.922247][ T7701] pimreg: left allmulticast mode
[   99.041337][ T7705] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   99.082389][ T5673] hsr_slave_0: left promiscuous mode
[   99.085867][ T5673] hsr_slave_1: left promiscuous mode
[   99.088754][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.091887][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.104325][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.106831][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.122267][ T5673] veth1_macvtap: left promiscuous mode
[   99.127267][ T5673] veth0_macvtap: left promiscuous mode
[   99.130097][ T5673] veth1_vlan: left promiscuous mode
[   99.132289][ T5673] veth0_vlan: left promiscuous mode
[   99.153852][   T54] Bluetooth: hci1: command tx timeout
[   99.171082][ T7711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.480884][ T5673] team0 (unregistering): Port device team_slave_1 removed
[   99.507768][ T5673] team0 (unregistering): Port device team_slave_0 removed
[   99.806018][ T7718] __nla_validate_parse: 8 callbacks suppressed
[   99.806034][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'.
[   99.832372][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[   99.969631][ T7614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.982230][ T7614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.997135][ T7614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.001477][ T7614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.068624][ T7727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.382'.
[  100.152817][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.167955][ T7739] dvmrp1: entered allmulticast mode
[  100.180228][ T7739] dvmrp0: left allmulticast mode
[  100.182952][ T7739] dvmrp1: left allmulticast mode
[  100.212066][ T7737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.226720][ T7737] syzkaller0: entered promiscuous mode
[  100.231088][ T7737] syzkaller0: entered allmulticast mode
[  100.246771][ T7614] 8021q: adding VLAN 0 to HW filter on device team0
[  100.274362][ T7737] tipc: Resetting bearer <eth:syzkaller0>
[  100.278544][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.280730][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'.
[  100.281789][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.302713][ T7743] tipc: Resetting bearer <eth:syzkaller0>
[  100.316871][ T7743] tipc: Disabling bearer <eth:syzkaller0>
[  100.339617][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.342607][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.431312][ T7749] xt_bpf: check failed: parse error
[  100.576161][ T7757] IPv6: syztnl1: Disabled Multicast RS
[  100.581687][ T7757] netlink: 9 bytes leftover after parsing attributes in process `syz.1.388'.
[  100.597987][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.611974][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'.
[  100.665667][ T7614] veth0_vlan: entered promiscuous mode
[  100.685065][ T7614] veth1_vlan: entered promiscuous mode
[  100.733023][ T7614] veth0_macvtap: entered promiscuous mode
[  100.737978][ T7614] veth1_macvtap: entered promiscuous mode
[  100.752507][ T7763] bond0: Unable to set down delay as MII monitoring is disabled
[  100.777667][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.789021][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.792828][ T7614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.806727][ T7614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.811370][ T7614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.816869][ T7614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.024872][ T7150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.032571][ T7150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.082474][ T7150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.085643][ T7150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.153185][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'.
[  101.233785][   T54] Bluetooth: hci1: command 0x041b tx timeout
[  101.491825][ T7813] xt_hashlimit: size too large, truncated to 1048576
[  101.578662][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  101.612929][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  101.638903][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[  101.706585][ T7821] x_tables: duplicate underflow at hook 1
[  101.771847][ T7827] vlan2: entered promiscuous mode
[  101.775523][ T7827] vlan2: entered allmulticast mode
[  101.777257][ T7827] hsr_slave_1: entered allmulticast mode
[  101.912878][ T7838] validate_nla: 8 callbacks suppressed
[  101.912891][ T7838] netlink: 'syz.1.402': attribute type 5 has an invalid length.
[  101.973918][ T7843] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  101.977627][ T7843] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  101.987310][ T7845] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[  102.006313][ T7845] bond8: (slave gretap2): making interface the new active one
[  102.009450][ T7845] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  102.017910][ T7845] 8021q: adding VLAN 0 to HW filter on device bond8
[  102.045679][   T24] 
[  102.046570][   T24] ============================================
[  102.048620][   T24] WARNING: possible recursive locking detected
[  102.050647][   T24] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  102.054060][   T24] --------------------------------------------
[  102.056083][   T24] kworker/1:0/24 is trying to acquire lock:
[  102.058044][   T24] ffff8880202dd958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  102.061566][   T24] 
[  102.061566][   T24] but task is already holding lock:
[  102.064232][   T24] ffff88810b0c2558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  102.067463][   T24] 
[  102.067463][   T24] other info that might help us debug this:
[  102.070168][   T24]  Possible unsafe locking scenario:
[  102.070168][   T24] 
[  102.072691][   T24]        CPU0
[  102.073809][   T24]        ----
[  102.074924][   T24]   lock(&qdisc_xmit_lock_key#4);
[  102.076600][   T24]   lock(&qdisc_xmit_lock_key#4);
[  102.078257][   T24] 
[  102.078257][   T24]  *** DEADLOCK ***
[  102.078257][   T24] 
[  102.080932][   T24]  May be due to missing lock nesting notation
[  102.080932][   T24] 
[  102.083641][   T24] 14 locks held by kworker/1:0/24:
[  102.085341][   T24]  #0: ffff888020199548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  102.088882][   T24]  #1: ffffc900001c7bc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  102.093132][   T24]  #2: ffff88802aa0e538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0
[  102.096068][   T24]  #3: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80
[  102.099088][   T24]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  102.102155][   T24]  #5: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  102.105231][   T24]  #6: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0x101/0x1a90
[  102.108366][   T24]  #7: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  102.111561][   T24]  #8: ffff88811821b258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  102.115468][   T24]  #9: ffff88810b0c2558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  102.118835][   T24]  #10: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  102.122055][   T24]  #11: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  102.124933][   T24]  #12: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  102.128122][   T24]  #13: ffff88803cde7258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  102.132279][   T24] 
[  102.132279][   T24] stack backtrace:
[  102.134230][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  102.134240][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.134248][   T24] Workqueue: mld mld_ifc_work
[  102.134259][   T24] Call Trace:
[  102.134264][   T24]  <TASK>
[  102.134268][   T24]  dump_stack_lvl+0x189/0x250
[  102.134283][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.134293][   T24]  ? __pfx__printk+0x10/0x10
[  102.134300][   T24]  ? deref_stack_reg+0x19f/0x230
[  102.134313][   T24]  ? print_lock_name+0xde/0x100
[  102.134320][   T24]  print_deadlock_bug+0x28b/0x2a0
[  102.134328][   T24]  validate_chain+0x1a3f/0x2140
[  102.134335][   T24]  ? validate_xmit_xfrm+0xbf/0x1130
[  102.134346][   T24]  ? unwind_next_frame+0xa5/0x2390
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  102.134356][   T24]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  102.134367][   T24]  __lock_acquire+0xab9/0xd20
[  102.134378][   T24]  ? sch_direct_xmit+0x153/0x4b0
[  102.134385][   T24]  lock_acquire+0x120/0x360
[  102.134394][   T24]  ? sch_direct_xmit+0x153/0x4b0
[  102.134402][   T24]  _raw_spin_lock+0x2e/0x40
[  102.134412][   T24]  ? sch_direct_xmit+0x153/0x4b0
[  102.134418][   T24]  sch_direct_xmit+0x153/0x4b0
[  102.134425][   T24]  ? __pfx_sch_direct_xmit+0x10/0x10
[  102.134439][   T24]  __dev_queue_xmit+0x17b6/0x3a70
[  102.134448][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.134460][   T24]  ? __dev_queue_xmit+0x27e/0x3a70
[  102.134469][   T24]  ? arpt_do_table+0x1dc4/0x1fd0
[  102.134479][   T24]  ? __pfx___dev_queue_xmit+0x10/0x10
[  102.134490][   T24]  ? arpt_do_table+0x238/0x1fd0
[  102.134498][   T24]  ? __pfx_arpt_do_table+0x10/0x10
[  102.134507][   T24]  ? NF_HOOK+0x9e/0x3a0
[  102.134519][   T24]  ? NF_HOOK+0x9e/0x3a0
[  102.134528][   T24]  NF_HOOK+0x310/0x3a0
[  102.134538][   T24]  ? __pfx_arp_xmit_finish+0x10/0x10
[  102.134548][   T24]  ? NF_HOOK+0x9e/0x3a0
[  102.134557][   T24]  ? __pfx_NF_HOOK+0x10/0x10
[  102.134566][   T24]  ? __pfx_arp_xmit_finish+0x10/0x10
[  102.134577][   T24]  arp_xmit+0x16c/0x270
[  102.134586][   T24]  ? arp_xmit+0x23/0x270
[  102.134596][   T24]  arp_solicit+0xc1d/0xe60
[  102.134606][   T24]  ? arp_solicit+0x11a/0xe60
[  102.134616][   T24]  ? __pfx_arp_solicit+0x10/0x10
[  102.134627][   T24]  ? __neigh_event_send+0xf08/0x1560
[  102.134640][   T24]  ? __pfx_arp_solicit+0x10/0x10
[  102.134649][   T24]  __neigh_event_send+0xf70/0x1560
[  102.134661][   T24]  neigh_resolve_output+0x198/0x750
[  102.134668][   T24]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  102.134680][   T24]  ip_finish_output2+0xd40/0x1160
[  102.134690][   T24]  ? ip_skb_dst_mtu+0x147/0xc50
[  102.134700][   T24]  ? ip_finish_output2+0x452/0x1160
[  102.134710][   T24]  ? __pfx_ip_finish_output2+0x10/0x10
[  102.134719][   T24]  ? ip_skb_dst_mtu+0x147/0xc50
[  102.134727][   T24]  ? ip_skb_dst_mtu+0x147/0xc50
[  102.134736][   T24]  ? ip_skb_dst_mtu+0x970/0xc50
[  102.134745][   T24]  ? __ip_finish_output+0x336/0x3f0
[  102.134755][   T24]  iptunnel_xmit+0x571/0xa00
[  102.134764][   T24]  ip_tunnel_xmit+0x1c3c/0x2380
[  102.134778][   T24]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  102.134787][   T24]  ? gre_build_header+0x3fd/0xa40
[  102.134798][   T24]  ? __pfx_gre_build_header+0x10/0x10
[  102.134808][   T24]  gre_tap_xmit+0x590/0x7a0
[  102.134818][   T24]  ? __pfx_gre_tap_xmit+0x10/0x10
[  102.134826][   T24]  ? __lock_acquire+0xab9/0xd20
[  102.134835][   T24]  dev_hard_start_xmit+0x2d7/0x830
[  102.134846][   T24]  sch_direct_xmit+0x241/0x4b0
[  102.134853][   T24]  ? __pfx_sch_direct_xmit+0x10/0x10
[  102.134861][   T24]  __dev_queue_xmit+0x17b6/0x3a70
[  102.134869][   T24]  ? unwind_next_frame+0xa5/0x2390
[  102.134880][   T24]  ? __dev_queue_xmit+0x27e/0x3a70
[  102.134889][   T24]  ? __lock_acquire+0xab9/0xd20
[  102.134898][   T24]  ? __pfx___dev_queue_xmit+0x10/0x10
[  102.134908][   T24]  ? unwind_next_frame+0xa5/0x2390
[  102.134918][   T24]  ? __lock_acquire+0xab9/0xd20
[  102.134927][   T24]  ? bond_start_xmit+0x101/0x1a90
[  102.134937][   T24]  ? bond_start_xmit+0x101/0x1a90
[  102.134948][   T24]  bond_start_xmit+0x1207/0x1a90
[  102.134958][   T24]  ? __lock_acquire+0xab9/0xd20
[  102.134967][   T24]  ? bond_start_xmit+0x101/0x1a90
[  102.134976][   T24]  ? __pfx_bond_start_xmit+0x10/0x10
[  102.134985][   T24]  ? skb_network_protocol+0x508/0x760
[  102.134994][   T24]  ? validate_xmit_xfrm+0xbf/0x1130
[  102.135003][   T24]  ? __pfx_skb_network_protocol+0x10/0x10
[  102.135011][   T24]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  102.135021][   T24]  ? __pfx_passthru_features_check+0x10/0x10
[  102.135031][   T24]  dev_hard_start_xmit+0x2d7/0x830
[  102.135041][   T24]  __dev_queue_xmit+0x1adf/0x3a70
[  102.135050][   T24]  ? register_lock_class+0x51/0x320
[  102.135060][   T24]  ? __dev_queue_xmit+0x27e/0x3a70
[  102.135070][   T24]  ? __pfx___dev_queue_xmit+0x10/0x10
[  102.135078][   T24]  ? read_seqbegin+0x122/0x250
[  102.135084][   T24]  ? neigh_resolve_output+0x438/0x750
[  102.135090][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.135099][   T24]  ? read_seqbegin+0x1ac/0x250
[  102.135105][   T24]  ? __pfx_read_seqbegin+0x10/0x10
[  102.135110][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  102.135121][   T24]  ? eth_header+0x11b/0x200
[  102.135130][   T24]  ? __asan_memcpy+0x40/0x70
[  102.135140][   T24]  ? eth_header+0x11b/0x200
[  102.135148][   T24]  ? __pfx_eth_header+0x10/0x10
[  102.135155][   T24]  ? neigh_resolve_output+0x624/0x750
[  102.135163][   T24]  ip6_finish_output2+0x11fe/0x16a0
[  102.135174][   T24]  ? ip6_finish_output2+0x701/0x16a0
[  102.135183][   T24]  ? __pfx_ip6_finish_output2+0x10/0x10
[  102.135191][   T24]  ? ip6_mtu+0x7d/0x3f0
[  102.135199][   T24]  ? ip6_mtu+0x7d/0x3f0
[  102.135228][   T24]  ip6_finish_output+0x234/0x7d0
[  102.135236][   T24]  NF_HOOK+0x9e/0x380
[  102.135245][   T24]  ? NF_HOOK+0x101/0x380
[  102.135252][   T24]  ? __pfx_NF_HOOK+0x10/0x10
[  102.135260][   T24]  ? __pfx_dst_output+0x10/0x10
[  102.135267][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  102.135275][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  102.135282][   T24]  mld_sendpack+0x800/0xd80
[  102.135293][   T24]  ? mld_sendpack+0x1de/0xd80
[  102.135301][   T24]  ? __pfx_mld_sendpack+0x10/0x10
[  102.135311][   T24]  mld_ifc_work+0x835/0xde0
[  102.135319][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.135328][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  102.135340][   T24]  process_scheduled_works+0xae1/0x17b0
[  102.135353][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  102.135365][   T24]  worker_thread+0x8a0/0xda0
[  102.135378][   T24]  kthread+0x711/0x8a0
[  102.135386][   T24]  ? __pfx_worker_thread+0x10/0x10
[  102.135395][   T24]  ? __pfx_kthread+0x10/0x10
[  102.135404][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.135413][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.135422][   T24]  ? __pfx_kthread+0x10/0x10
[  102.135429][   T24]  ret_from_fork+0x3fc/0x770
[  102.135445][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  102.135455][   T24]  ? __switch_to_asm+0x39/0x70
[  102.135462][   T24]  ? __switch_to_asm+0x33/0x70
[  102.135468][   T24]  ? __pfx_kthread+0x10/0x10
[  102.135475][   T24]  ret_from_fork_asm+0x1a/0x30
[  102.135484][   T24]  </TASK>
[  102.151443][ T7853] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[  102.229462][ T7852] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[  102.247852][ T7853] bond9: entered promiscuous mode
[  102.378130][ T7853] 8021q: adding VLAN 0 to HW filter on device bond9
[  102.582716][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.628136][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.669103][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.713070][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.230945][   T13] bond13 (unregistering): (slave bridge7): Releasing backup interface
[  103.234701][   T13] bridge7 (unregistering): left promiscuous mode
[  103.334275][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  103.338550][   T13] bond0 (unregistering): Released all slaves
[  103.384966][   T13] bond1 (unregistering): Released all slaves
[  103.430635][   T13] bond2 (unregistering): Released all slaves
[  103.477844][   T13] bond3 (unregistering): Released all slaves
[  103.481798][   T13] bond4 (unregistering): Released all slaves
[  103.485956][   T13] bond5 (unregistering): Released all slaves
[  103.489843][   T13] bond6 (unregistering): Released all slaves
[  103.545000][   T13] bond7 (unregistering): Released all slaves
[  103.590178][   T13] bond8 (unregistering): Released all slaves
[  103.595492][   T13] bond9 (unregistering): Released all slaves
[  103.649537][   T13] bond10 (unregistering): Released all slaves
[  103.700507][   T13] bond11 (unregistering): Released all slaves
[  103.750922][   T13] bond12 (unregistering): Released all slaves
[  103.755934][   T13] bond13 (unregistering): Released all slaves
[  103.823409][   T13] bond14 (unregistering): Released all slaves
[  103.829732][   T13] bond15 (unregistering): Released all slaves
[  103.889415][   T13] tipc: Left network mode
[  104.145360][   T13] hsr_slave_0: left promiscuous mode
[  104.147751][   T13] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  104.150070][   T13] batman_adv: batadv0: Removing interface: virt_wifi0
[  104.154265][   T13] veth0_macvtap: left promiscuous mode
[  104.156091][   T13] veth1_vlan: left promiscuous mode
[  104.157846][   T13] veth0_vlan: left promiscuous mode
[  104.697706][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.737275][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.776964][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.817028][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.868363][   T13] bridge_slave_1: left allmulticast mode
[  104.870620][   T13] bridge_slave_1: left promiscuous mode
[  104.872617][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.876307][   T13] bridge_slave_0: left allmulticast mode
[  104.878141][   T13] bridge_slave_0: left promiscuous mode
[  104.880010][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.984324][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.989381][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.994659][   T13] bond0 (unregistering): Released all slaves
[  105.221004][   T13] hsr_slave_0: left promiscuous mode
[  105.223316][   T13] hsr_slave_1: left promiscuous mode
[  105.225682][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.228351][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.231385][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.235015][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.240356][   T13] veth1_macvtap: left promiscuous mode
[  105.242635][   T13] veth0_macvtap: left promiscuous mode
[  105.245357][   T13] veth1_vlan: left promiscuous mode
[  105.247486][   T13] veth0_vlan: left promiscuous mode
[  105.356790][   T13] team0 (unregistering): Port device team_slave_1 removed
[  105.377561][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
07:29:43  Registers:
info registers vcpu 0

CPU#0
RAX=994fd0afb47deb00 RBX=ffffffff81974d58 RCX=994fd0afb47deb00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc04b9e1440 CR3=000000010e3e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fab53411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001c5510
R8 =ffff888107fa8237 R9 =1ffff11020ff5046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f9 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fab540e5690 CR3=00000000357d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffff00000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fab53411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
