last executing test programs:

5m11.945162871s ago: executing program 1 (id=361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)

5m11.634719438s ago: executing program 1 (id=365):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m11.383823576s ago: executing program 1 (id=369):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="5d119872", 0x4}], 0x1, 0x2)

5m11.155332456s ago: executing program 1 (id=372):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
socket(0x22, 0x2, 0x4)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delqdisc={0x2c, 0x25, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0x7}, {0xfff1, 0x5}, {0x9, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xfe}}]}, 0x2c}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, <r12=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0xffffff81, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)
unshare(0x26020480)
ppoll(&(0x7f0000000340)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28)

5m11.154322997s ago: executing program 0 (id=373):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080080003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

5m10.907548225s ago: executing program 0 (id=375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5m10.856495008s ago: executing program 0 (id=377):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt(r0, 0x1, 0x1, &(0x7f00000003c0)=""/159, &(0x7f0000000480)=0x9f)

5m10.776306395s ago: executing program 0 (id=378):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f00000001c0)=0x13)

5m10.681969518s ago: executing program 2 (id=379):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004)

5m10.681327855s ago: executing program 1 (id=380):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}}, 0x0)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/13, 0xd)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x2, 0x8000)
r5 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
shutdown(r6, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

5m10.625572045s ago: executing program 2 (id=381):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000012140104020000000000000008004b001300000008"], 0x38}}, 0x80)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5m10.625333341s ago: executing program 0 (id=382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0)

5m10.376435838s ago: executing program 2 (id=383):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0xffffffffffffff8b, {0xa, 0x4e23, 0x4, @empty, 0xa05}}, 0x24)

5m10.242326889s ago: executing program 2 (id=384):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

5m10.241865745s ago: executing program 0 (id=385):
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x118, 0x4a, 0xdf, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10)
socket(0x840000000002, 0x3, 0x100)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff)

5m9.861916055s ago: executing program 2 (id=386):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x4000006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="c6d3ffb6018f3252c0e0abd6f658286a85230100e6255511", 0xfffffdc9, 0x1, 0x0, 0xf)
shutdown(r0, 0x1)

5m2.142154838s ago: executing program 1 (id=387):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)

5m2.141915269s ago: executing program 2 (id=388):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}}, 0x20000000)

4m30.478384055s ago: executing program 32 (id=385):
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
socket$packet(0x11, 0x3, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x118, 0x4a, 0xdf, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10)
socket(0x840000000002, 0x3, 0x100)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000840, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff)

3m17.954657476s ago: executing program 33 (id=387):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f", 0x2)

2m45.771320393s ago: executing program 34 (id=388):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}}, 0x20000000)

2m0.286788451s ago: executing program 5 (id=898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x3300, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/162, 0xa2}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4083, 0xff3}, {&(0x7f0000000c40)=""/171, 0xab}], 0x8}, 0x9}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xb68b}], 0x9, 0x40002000, 0x0)

2m0.285773582s ago: executing program 5 (id=899):
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0000000260000042cbd7000fcdbdf252000000071f28b545da08a5d9d94fe73d08e39e49c14003b0004000000000000000000ffff640101026c002280c39a9d5949c4fbe3df416d47b9357661a40d8712d700ffffff47159ff61403dec658ed0f2414e3f26476e011331256bba565973d426ba0592fc135abf818002d0000000400c200cab77cb20d400930f225f5cce8df7cfbaa961d81ba0400fa800000d79154f2714600"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010)

2m0.208311896s ago: executing program 5 (id=900):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x1e)

2m0.208014313s ago: executing program 5 (id=901):
r0 = socket(0x25, 0x5, 0x3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
r3 = socket(0x21, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102000000", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x1c}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x1003, r2}, 0x38)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000002c0)=0x4)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x86, &(0x7f0000002600)}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000000037c00000c00018008000600ffffffff0400028000"/36], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x3, 0x4, 0x1, 0xfffffffffffffffb})
ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x4008af25, &(0x7f0000000180)={0x0, 0x96, ""/150})

2m0.090500735s ago: executing program 5 (id=903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xefff, &(0x7f0000000140)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfe, {0x80, 0x14, 0x14, 0x0, 0x3, 0x2, 0xfe, 0xa, 0x1d00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x48804)

1m59.859187167s ago: executing program 5 (id=907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58)

1m59.778279708s ago: executing program 35 (id=907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000b0601"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58)

1m30.35564099s ago: executing program 4 (id=1427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfe, {0x80, 0x14, 0x14, 0x0, 0x3, 0x2, 0xfe, 0xa, 0x1d00}, ["", ""]}, 0x1c}, 0x1, 0x300, 0x0, 0x48001}, 0x48804)

1m30.354738802s ago: executing program 4 (id=1428):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'}) (async)
r2 = socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x50, 0x0, &(0x7f0000000100)=0x2e) (async)
socket$kcm(0x2, 0x5, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r2, 0x29, 0x48, &(0x7f0000000100)=r4, 0x120) (async)
socket(0x1e, 0x4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls}, 0x94)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback, 0xff72aab9, 0x4}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001540)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='.\x00'/12, @ANYRES32, @ANYBLOB="d926d7cc88e14a1bc7978ea19f11c30c8ff05888e3801aede3cd06000000000000000518a0a87f5491cf1dd394ff7b5f", @ANYRES64=0x0], 0x20) (async)
socket$xdp(0x2c, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
close(0x3) (async)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800ef0a0ad317180a7b00001811000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000018150000", @ANYRES32=r6, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0xa82}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r9=>0x0}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x0, r8}, 0x5)

1m30.2674645s ago: executing program 4 (id=1429):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003", @ANYRESOCT=r3], 0x140}}, 0x0)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r4 = socket$inet(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8)

1m30.202468387s ago: executing program 4 (id=1431):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x250, 0x250, 0x320, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffe, 0x4828da170d611133, 0x1, [0xb, 0x3, 0x8, 0x1, 0x7, 0x7, 0x9, 0xf5, 0x3, 0x4, 0x0, 0x10, 0x1, 0xe, 0x2, 0xcda6], 0x1}}, @common=@rt={{0x138}, {0x4, [0x2, 0x9], 0x5, 0x30, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00', @private1, @dev={0xfe, 0x80, '\x00', 0x13}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @mcast1, @rand_addr=' \x01\x00', @loopback, @private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local], 0xa}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xff], 'veth1_to_team\x00', 'netpci0\x00', {}, {0xff}, 0x6c, 0x7, 0x1, 0x24}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@rand_addr=' \x01\x00', @private2, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff], 'netdevsim0\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x2, 0x4, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x10, 0x4, 0xfa, 0x5, 0x90a, 0x284}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000bc0)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/32, 0x20}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}, {&(0x7f0000000a80)=""/130, 0x82}], 0x8}, 0x2162) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d0008f227bd7000000000000500000014000a0002000000000000000000000000000001"], 0x28}}, 0x84) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000f00)={<r7=>0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x2, 0x16}, &(0x7f0000000d40)=0x90)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000002040)={r7, 0x9}, &(0x7f0000002080)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000e00)={0xd0, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x2c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3af}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x85}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r3], 0x24}}, 0x0)

1m30.199939733s ago: executing program 4 (id=1432):
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x8000}, 0x10)
close(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
close(0x3)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x4000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}], 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x41, 0x0, 0x1, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004040)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd)

1m30.070699436s ago: executing program 4 (id=1434):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x3ff, {{0x21, 0x4, 0x1, 0x1b, 0x84, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0xf4, 0x1, 0x1}, @generic={0x83, 0x5, 'x{N'}, @end, @noop, @lsrr={0x83, 0x2b, 0xc1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @multicast1, @remote, @broadcast, @private=0xa010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x7, [{@loopback}, {@remote, 0x8919}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x11}, {@local, 0x400}, {@loopback}, {@loopback, 0x2fb}]}]}}}}})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x85)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x5431000)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r6, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfe, 0x0, 0x0}, 0x30)

52.263193049s ago: executing program 36 (id=1434):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x9, 0x3ff, {{0x21, 0x4, 0x1, 0x1b, 0x84, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x4, 0xf4, 0x1, 0x1}, @generic={0x83, 0x5, 'x{N'}, @end, @noop, @lsrr={0x83, 0x2b, 0xc1, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @multicast1, @remote, @broadcast, @private=0xa010100, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x7, [{@loopback}, {@remote, 0x8919}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x11}, {@local, 0x400}, {@loopback}, {@loopback, 0x2fb}]}]}}}}})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x85)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x5431000)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r6, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfe, 0x0, 0x0}, 0x30)

42.610708483s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

36.677594776s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

28.975135681s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

22.055542358s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

13.23730871s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

6.194508818s ago: executing program 7 (id=1551):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvfrom$packet(r3, &(0x7f0000000780)=""/74, 0x4a, 0x40, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
close(0x3)
listen(r4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x4e, "4b721b782a17a7b6a00d963e3f7fdafd95073830fb8cfb34eb7cbd173ef6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f30500"}})
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x5, 0x0, @private2, 0xa7a}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f00000000c0))
ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0x2, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x4000000)

3.362099404s ago: executing program 6 (id=1954):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000580)={'veth0\x00', {0x2, 0x4e23, @empty}}) (async)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x4, 0x10000000}}, 0x10) (async)
r3 = socket(0x1, 0xeff00b50a7d959ef, 0x9) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="c6000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf250c0000000c00058007000100696200000c00098008000200001000006000018044000400200001000a004e2300000002fc00000000000000000000000000000100080000200002000a004e2400000006fc000000000000000000000000000000060000000800030010f10000080003004e08000008000300000000003800048014000780080001000000000008000300030000000900010073797a31000000001400078008000100140000000800010003200000"], 0xc4}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) (async)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64)
close(r3) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0x8}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x80006}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0x2, 0xb}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}}, 0x10008844) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.239886695s ago: executing program 6 (id=1956):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x11, 0xa, 0x300)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={<r6=>0x0}, &(0x7f0000000240)=0xc)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40090)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r7, 0x8b1a, &(0x7f0000000040))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000340)=r6)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000003c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xd3e8c393af12bcc7, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x80108906, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r12=>0x0})
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2.080030311s ago: executing program 6 (id=1960):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfe, {0x80, 0x14, 0x14, 0x0, 0x3, 0x2, 0xfe, 0xa, 0x1d00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0xa888, 0x48001}, 0x48804)

2.009402312s ago: executing program 6 (id=1962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0x10c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xc4, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}]}, 0x10c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000240)=ANY=[@ANYBLOB="50000000080211ac00000108021100000008021100000000000005000000000000640001000100"], 0x26)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000cf311000005080211000000080211000479d000000002000000"], 0x1e)

1.369630857s ago: executing program 6 (id=1969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r4, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

1.238809113s ago: executing program 6 (id=1972):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x86, &(0x7f0000002600)}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x0, 0x1, [0x40]}, 0xa)
recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)
ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24")
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000180)={0x8}, 0x8)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010040000000500008006020100031c0003000200000000000000000000ba8d625d0e9f130107"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0xc201})
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}}, 0x0, 0x0, 0x3, 0x0, "18df1a21ed60e7fa6a06a6bea4c07991d6ce74a8c97bc88550a5dbf4ec340d49bda2aad0bd9cfcea78d0d54f2c98ecccb4705d119f81a3aaf278275be0abc053f0a2958d69789dfdce938cd8f3161f1a"}, 0xd8)

588.504643ms ago: executing program 3 (id=1977):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1, 0x0, 0x8dff}}], 0x1, 0x0)

479.974609ms ago: executing program 3 (id=1978):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES32=0x0], 0x78}}, 0x0)

310.373707ms ago: executing program 3 (id=1979):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xfe}, 0x2c)

249.089284ms ago: executing program 3 (id=1980):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r2, @ANYBLOB="040013000600129204000000060d1000fa0000000a000600ffffffffffa8bdc05a00"/45], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

199.724608ms ago: executing program 3 (id=1981):
close(0x3) (async, rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {0xfff3, 0xfff1}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0) (async, rerun: 64)
close(0x3)

0s ago: executing program 3 (id=1982):
socket$key(0xf, 0x3, 0x2)
socket(0x2, 0x80805, 0x0)
close(0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6afc}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

kernel console output (not intermixed with test programs):

eleased netlink socket, switching to perfect channel medium
[  259.356767][ T7902] IPVS: using max 61 ests per chain, 146400 per kthread
[  260.321513][ T7936] netlink: 'syz.3.611': attribute type 1 has an invalid length.
[  260.324456][ T7936] __nla_validate_parse: 20 callbacks suppressed
[  260.324465][ T7936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.611'.
[  260.473391][ T7941] bond0: (slave rose0): Enslaving as an active interface with an up link
[  260.499594][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'.
[  260.562863][ T7943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.614'.
[  260.566776][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  260.840629][ T7970] netlink: 'syz.3.619': attribute type 16 has an invalid length.
[  260.843202][ T7970] netlink: 'syz.3.619': attribute type 17 has an invalid length.
[  260.868397][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'.
[  260.892732][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.621'.
[  261.665304][ T7977] netlink: 64 bytes leftover after parsing attributes in process `syz.4.622'.
[  261.670383][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  261.803078][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'.
[  261.819179][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'.
[  261.819404][ T5719] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  261.825969][ T5719] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  261.832058][ T5719] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.836875][ T5719] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.890246][ T7998] team0: Mode changed to "activebackup"
[  262.016325][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.140582][ T8015] netlink: 'syz.3.635': attribute type 1 has an invalid length.
[  262.386490][ T8041] netlink: 'syz.5.643': attribute type 1 has an invalid length.
[  263.044661][ T8099] netlink: 'syz.5.664': attribute type 3 has an invalid length.
[  263.133972][ T8099] syz_tun: entered allmulticast mode
[  263.149942][ T8099] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  263.161013][ T8099] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  263.199853][ T8107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.209347][ T8098] syz_tun: left allmulticast mode
[  263.371005][ T8116] netlink: 'syz.5.667': attribute type 10 has an invalid length.
[  263.814533][ T8152] bridge_slave_1: default FDB implementation only supports local addresses
[  263.851675][ T8153] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  263.933212][ T8158] netlink: 'syz.4.678': attribute type 1 has an invalid length.
[  264.382688][ T8189] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  264.425652][ T8192] netlink: 'syz.4.688': attribute type 10 has an invalid length.
[  264.606528][ T8205] Bluetooth: MGMT ver 1.23
[  265.221249][ T8274] syzkaller1: entered promiscuous mode
[  265.226237][ T8277] netlink: 'syz.3.712': attribute type 10 has an invalid length.
[  265.228986][ T8274] syzkaller1: entered allmulticast mode
[  265.366312][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.453902][ T8297] wireguard0: entered promiscuous mode
[  265.455741][ T8297] wireguard0: entered allmulticast mode
[  265.482959][ T8295] vlan3: entered allmulticast mode
[  265.484949][ T8295] bridge_slave_0: entered allmulticast mode
[  265.641324][ T8310] __nla_validate_parse: 21 callbacks suppressed
[  265.641336][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'.
[  265.734825][ T8317] sock: sock_timestamping_bind_phc: sock not bind to device
[  265.832588][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'.
[  265.934707][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'.
[  266.008596][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'.
[  266.619249][ T8392] tipc: Started in network mode
[  266.624464][ T8392] tipc: Node identity 4a062113dc1, cluster identity 4711
[  266.630739][ T8392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.639964][ T8392] syzkaller0: entered promiscuous mode
[  266.641958][ T8392] syzkaller0: entered allmulticast mode
[  266.809002][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'.
[  266.812004][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.854492][ T8411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.894006][ T8414] IPv6: Can't replace route, no match found
[  266.945371][ T8418] netlink: 'syz.4.739': attribute type 10 has an invalid length.
[  267.310267][ T8385] tipc: Resetting bearer <eth:syzkaller0>
[  267.331178][ T8385] tipc: Disabling bearer <eth:syzkaller0>
[  267.446477][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'.
[  267.563598][ T8473] netlink: 108 bytes leftover after parsing attributes in process `syz.5.752'.
[  267.698748][ T8483] netlink: 'syz.3.756': attribute type 3 has an invalid length.
[  268.300999][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'.
[  268.305643][ T8494] bond0: option mode: unable to set because the bond device has slaves
[  268.351892][ T8496] netlink: 'syz.4.760': attribute type 12 has an invalid length.
[  268.354907][ T8496] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.760'.
[  268.493394][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.761'.
[  268.555874][ T8508] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  268.558544][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.750826][ T8522] netlink: 'syz.5.767': attribute type 2 has an invalid length.
[  268.754364][ T8522] netlink: 'syz.5.767': attribute type 1 has an invalid length.
[  268.757351][ T8522] netlink: 'syz.5.767': attribute type 1 has an invalid length.
[  268.763772][ T8525] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  268.770584][ T8522] IPVS: stopping backup sync thread 8525 ...
[  268.833936][ T8527] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  268.856945][ T8524] nbd4: detected capacity change from 0 to 63
[  268.868553][   T56] block nbd4: Receive control failed (result -104)
[  269.030571][ T8541] netlink: 'syz.4.772': attribute type 10 has an invalid length.
[  269.142263][ T8549] syzkaller1: entered promiscuous mode
[  269.144626][ T8549] syzkaller1: entered allmulticast mode
[  269.628297][ T8587] netlink: 'syz.4.788': attribute type 1 has an invalid length.
[  272.746557][ T8602] __nla_validate_parse: 5 callbacks suppressed
[  272.746573][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'.
[  272.789228][ T8608] netlink: 'syz.4.797': attribute type 1 has an invalid length.
[  272.871264][ T8613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.798'.
[  273.023086][ T8622] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.032741][ T8622] Bluetooth: MGMT ver 1.23
[  273.125343][ T8639] netlink: 84 bytes leftover after parsing attributes in process `syz.4.807'.
[  273.132012][ T8639] netlink: 'syz.4.807': attribute type 27 has an invalid length.
[  273.225062][ T8649] netlink: 'syz.5.811': attribute type 74 has an invalid length.
[  273.234463][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'.
[  273.251678][ T8652] netlink: 'syz.3.812': attribute type 10 has an invalid length.
[  273.364533][ T8655] veth1_to_batadv: entered promiscuous mode
[  273.421591][ T8669] netlink: 'syz.5.818': attribute type 13 has an invalid length.
[  273.456305][ T8669] gretap0: refused to change device tx_queue_len
[  273.461272][ T8669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  273.476124][ T8672] netlink: 'syz.4.820': attribute type 4 has an invalid length.
[  273.498350][ T8677] netlink: 52 bytes leftover after parsing attributes in process `syz.5.821'.
[  273.502058][ T8677] netlink: 52 bytes leftover after parsing attributes in process `syz.5.821'.
[  273.505645][ T8677] netlink: 52 bytes leftover after parsing attributes in process `syz.5.821'.
[  273.517133][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.821'.
[  273.805426][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.823'.
[  274.520523][ T8704] sctp: [Deprecated]: syz.4.824 (pid 8704) Use of int in max_burst socket option deprecated.
[  274.520523][ T8704] Use struct sctp_assoc_value instead
[  274.799017][ T8732] bridge1: entered promiscuous mode
[  274.801014][ T8732] bridge1: entered allmulticast mode
[  274.888649][ T8758] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.832'.
[  275.086981][ T5853] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  275.087038][ T5860] Bluetooth: hci2: command 0x0401 tx timeout
[  275.390811][ T8779] ieee802154 phy0 wpan0: encryption failed: -22
[  275.658392][ T8813] syzkaller1: entered promiscuous mode
[  275.660527][ T8813] syzkaller1: entered allmulticast mode
[  275.678758][ T8813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.682805][ T8813] syzkaller0: entered promiscuous mode
[  275.685462][ T8813] syzkaller0: entered allmulticast mode
[  275.691490][ T8813] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  275.723889][ T8813] tipc: Resetting bearer <eth:syzkaller0>
[  275.731389][ T8812] tipc: Resetting bearer <eth:syzkaller0>
[  275.763369][ T8812] tipc: Disabling bearer <eth:syzkaller0>
[  275.787750][ T8823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  275.790758][ T8823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.570084][ T8856] netlink: 'syz.4.863': attribute type 1 has an invalid length.
[  276.786464][ T8868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.855736][ T8875] dvmrp1: tun_chr_ioctl cmd 1074025677
[  276.859628][ T8875] dvmrp1: linktype set to 773
[  276.961858][ T8884] syzkaller0: entered promiscuous mode
[  276.963751][ T8884] syzkaller0: entered allmulticast mode
[  277.233374][ T8899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.418498][ T6918] IPVS: starting estimator thread 0...
[  277.483239][ T8914] vlan2: entered promiscuous mode
[  277.485713][ T8914] bridge0: entered promiscuous mode
[  277.516781][ T8912] IPVS: using max 61 ests per chain, 146400 per kthread
[  277.627724][   T12] IPVS: stop unused estimator thread 0...
[  277.725971][ T8930] netlink: 'syz.3.885': attribute type 10 has an invalid length.
[  277.786557][ T8934] __nla_validate_parse: 7 callbacks suppressed
[  277.786572][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.887'.
[  277.846831][ T8940] netlink: 'syz.5.887': attribute type 1 has an invalid length.
[  277.849504][ T8940] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.887'.
[  278.080779][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'.
[  278.205204][ T8975] vxlan0: entered promiscuous mode
[  278.208301][ T8975] vxlan0: entered allmulticast mode
[  278.210562][ T5719] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.214720][ T5719] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.219382][ T5719] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.223129][ T5719] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.301197][ T6918] IPVS: starting estimator thread 0...
[  278.310900][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  278.370203][ T8982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.902'.
[  278.390797][ T8983] IPVS: using max 61 ests per chain, 146400 per kthread
[  278.635186][ T5719] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.641999][ T5719] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.720940][ T5719] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.725581][ T5719] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.749746][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'.
[  278.752945][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'.
[  278.819371][ T5719] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.823306][ T5719] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.905079][ T5719] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.909239][ T5719] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.927062][ T9008] batadv_slave_0: entered promiscuous mode
[  278.932683][ T9004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.945830][ T9004] batadv_slave_0: left promiscuous mode
[  279.039633][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.049784][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.054950][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.063724][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.070548][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.292377][ T9021] netlink: 'syz.3.914': attribute type 4 has an invalid length.
[  279.418688][ T5719] bond0 (unregistering): Released all slaves
[  279.428540][ T5719] bond1 (unregistering): Released all slaves
[  279.538163][ T5719] tipc: Left network mode
[  279.701103][ T9013] chnl_net:caif_netlink_parms(): no params data found
[  279.742747][ T5719] hsr_slave_0: left promiscuous mode
[  279.745388][ T5719] hsr_slave_1: left promiscuous mode
[  279.764344][ T5719] veth1_macvtap: left promiscuous mode
[  279.766532][ T5719] veth0_macvtap: left promiscuous mode
[  279.772465][ T5719] veth1_vlan: left promiscuous mode
[  279.774635][ T5719] veth0_vlan: left promiscuous mode
[  280.323963][ T9047] netlink: 'syz.4.919': attribute type 8 has an invalid length.
[  280.544708][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'.
[  280.545009][ T9053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'.
[  280.589178][ T9052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'.
[  280.619973][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.622863][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.625451][ T9013] bridge_slave_0: entered allmulticast mode
[  280.629138][ T9013] bridge_slave_0: entered promiscuous mode
[  280.647206][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.649463][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.651917][ T9013] bridge_slave_1: entered allmulticast mode
[  280.658610][ T9013] bridge_slave_1: entered promiscuous mode
[  280.731331][ T9013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.745056][ T9013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.806358][ T9013] team0: Port device team_slave_0 added
[  280.812134][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.826139][ T5719] IPVS: stop unused estimator thread 0...
[  280.832312][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.835419][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.844850][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.852541][ T9013] team0: Port device team_slave_1 added
[  281.063950][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.069726][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.078157][ T9013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.083685][ T9013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.086271][ T9013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.096444][ T9013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.145148][ T9013] hsr_slave_0: entered promiscuous mode
[  281.148264][ T9013] hsr_slave_1: entered promiscuous mode
[  281.176951][ T5858] Bluetooth: hci0: command tx timeout
[  281.209013][ T9077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.282810][ T9077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.322736][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.326042][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.347976][ T9077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.405243][ T9077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.455380][ T9013] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  281.460920][ T9013] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  281.465760][ T9013] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  281.473662][ T9013] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  281.516097][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.522034][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.534809][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.539505][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.541824][ T9013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.544284][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.546560][ T9013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.557666][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.578517][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.582959][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.634073][ T9013] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.655543][ T9013] 8021q: adding VLAN 0 to HW filter on device team0
[  281.679462][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.682316][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.691359][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.694245][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.790586][ T9097] netlink: 'syz.3.928': attribute type 1 has an invalid length.
[  281.851664][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.061748][ T9013] veth0_vlan: entered promiscuous mode
[  282.071515][ T9013] veth1_vlan: entered promiscuous mode
[  282.101820][ T9013] veth0_macvtap: entered promiscuous mode
[  282.109734][ T9013] veth1_macvtap: entered promiscuous mode
[  282.120466][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.127261][ T9013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.134161][ T5719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.140208][ T5719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.143864][ T5719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.152172][ T5719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.196518][ T8726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.199226][ T8726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.221503][ T8726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.223952][ T8726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.489707][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.540117][ T9123] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  282.949594][ T9140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.952373][ T9140] syzkaller0: entered promiscuous mode
[  282.954103][ T9140] syzkaller0: entered allmulticast mode
[  282.968477][ T9140] tipc: Resetting bearer <eth:syzkaller0>
[  282.972147][ T9139] tipc: Resetting bearer <eth:syzkaller0>
[  282.980297][ T9139] tipc: Disabling bearer <eth:syzkaller0>
[  283.065715][ T9144] openvswitch: netlink: Missing key (keys=40, expected=80)
[  283.112052][ T9144] openvswitch: netlink: Missing key (keys=40, expected=80)
[  283.157892][ T9151] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.207600][ T9152] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  283.210648][ T9152] __nla_validate_parse: 10 callbacks suppressed
[  283.210657][ T9152] netlink: 208 bytes leftover after parsing attributes in process `syz.3.942'.
[  283.231871][ T9151] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.247005][ T5858] Bluetooth: hci0: command tx timeout
[  283.314963][ T9151] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.365443][ T9151] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  283.451432][ T6947] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.466195][ T6947] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  283.476218][ T6947] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  283.495762][ T9165] netlink: 'syz.4.945': attribute type 9 has an invalid length.
[  283.498853][ T5719] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  283.500250][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.945'.
[  283.742909][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'.
[  283.748266][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'.
[  283.802960][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'.
[  283.864576][ T9195] dvmrp0: entered allmulticast mode
[  283.875156][ T9194] netlink: 72 bytes leftover after parsing attributes in process `syz.4.955'.
[  283.880287][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.955'.
[  284.047863][ T9210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.106561][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'.
[  284.162053][ T9221] netlink: 'syz.3.963': attribute type 10 has an invalid length.
[  284.164508][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'.
[  284.165502][ T9220] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  284.173850][ T9221] bond0: option arp_all_targets: invalid value (196616)
[  284.347437][ T9220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.514504][ T5719] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.521531][ T5719] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.525571][ T5719] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.537694][ T5719] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.548117][ T5719] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.551746][ T5719] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.555304][ T5719] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.560788][ T5719] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.636330][ T9234] netlink: 104 bytes leftover after parsing attributes in process `syz.4.968'.
[  284.720822][ T9242] bridge_slave_0: left allmulticast mode
[  284.723012][ T9242] bridge_slave_0: left promiscuous mode
[  284.725216][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.731994][ T9242] bridge_slave_1: left allmulticast mode
[  284.734001][ T9242] bridge_slave_1: left promiscuous mode
[  284.736100][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.742276][ T9242] bond0: (slave bond_slave_0): Releasing backup interface
[  284.751474][ T9242] bond0: (slave bond_slave_1): Releasing backup interface
[  284.763320][ T9242] team0: Port device team_slave_0 removed
[  284.773210][ T9242] team0: Port device team_slave_1 removed
[  284.775514][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.781560][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.786539][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.790716][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.806149][ T5315] syz1: Port: 1 Link DOWN
[  284.964126][ T9254] netlink: 'syz.4.975': attribute type 1 has an invalid length.
[  285.003286][ T9254] bond2: entered promiscuous mode
[  285.005672][ T9254] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.009506][ T9255] netlink: 'syz.6.973': attribute type 4 has an invalid length.
[  285.046861][ T9254] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.052917][ T9254] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  285.060380][ T9254] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  285.071763][ T9261] netlink: 'syz.3.977': attribute type 1 has an invalid length.
[  285.081916][ T9254] bond2: (slave wireguard0): making interface the new active one
[  285.086247][ T9262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.089796][ T9262] IPv6: NLM_F_CREATE should be set when creating new route
[  285.092193][ T9254] wireguard0: entered promiscuous mode
[  285.092853][ T9262] IPv6: NLM_F_CREATE should be set when creating new route
[  285.101116][ T9262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.127699][ T9254] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  285.211897][ T9267] netlink: 'syz.4.979': attribute type 10 has an invalid length.
[  285.305281][ T9274] can: request_module (can-proto-0) failed.
[  285.468323][ T9292] netlink: 'syz.4.989': attribute type 11 has an invalid length.
[  285.900516][ T9261] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  286.063026][ T9329] syzkaller0: entered promiscuous mode
[  286.065411][ T9329] syzkaller0: entered allmulticast mode
[  286.491494][ T9340] netlink: 'syz.3.1006': attribute type 10 has an invalid length.
[  286.911065][ T9374] netlink: 'syz.6.1018': attribute type 2 has an invalid length.
[  286.919386][ T9374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.117942][ T9385] netlink: 'syz.3.1023': attribute type 4 has an invalid length.
[  287.121086][ T9385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.123342][ T9385] IPv6: NLM_F_CREATE should be set when creating new route
[  287.125765][ T9385] IPv6: NLM_F_CREATE should be set when creating new route
[  287.169040][ T9387] Bluetooth: MGMT ver 1.23
[  287.478780][ T9404] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  287.769580][ T9436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.772239][ T9436] syzkaller0: entered promiscuous mode
[  287.773907][ T9436] syzkaller0: entered allmulticast mode
[  287.785677][ T9436] tipc: Resetting bearer <eth:syzkaller0>
[  287.791841][ T9435] tipc: Resetting bearer <eth:syzkaller0>
[  287.810006][ T9435] tipc: Disabling bearer <eth:syzkaller0>
[  287.827918][ T9442] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  288.001506][ T9455] vlan2: entered allmulticast mode
[  288.003648][ T9455] bridge0: entered allmulticast mode
[  288.262129][ T9474] validate_nla: 4 callbacks suppressed
[  288.262146][ T9474] netlink: 'syz.3.1055': attribute type 1 has an invalid length.
[  288.455939][ T9488] __nla_validate_parse: 15 callbacks suppressed
[  288.455953][ T9488] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1059'.
[  288.489381][ T9488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1059'.
[  288.502407][ T9488] bond0: option arp_validate: invalid value (18446744073491447809)
[  288.826400][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'.
[  288.850851][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'.
[  289.343423][ T9516] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'.
[  289.381877][ T9519] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  289.390701][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1069'.
[  289.655648][ T9538] netlink: 'syz.3.1076': attribute type 10 has an invalid length.
[  290.152008][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1092'.
[  290.154955][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'.
[  290.466272][ T9612] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1104'.
[  290.521204][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1105'.
[  290.524344][ T9615] block nbd0: not configured, cannot reconfigure
[  290.563567][ T9618] netlink: 'syz.4.1106': attribute type 4 has an invalid length.
[  290.567552][ T9619] netlink: 'syz.4.1106': attribute type 4 has an invalid length.
[  290.570239][ T9618] netlink: 'syz.4.1106': attribute type 4 has an invalid length.
[  290.802998][ T9627] pim6reg1: entered promiscuous mode
[  290.805239][ T9627] pim6reg1: entered allmulticast mode
[  291.242739][ T9632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.271676][ T9633] veth0_to_team: entered promiscuous mode
[  291.278440][ T9633] veth0_to_team: entered allmulticast mode
[  291.904774][ T9654] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  291.940078][ T9650] bridge2: port 1(veth3) entered blocking state
[  291.942309][ T9650] bridge2: port 1(veth3) entered disabled state
[  291.944535][ T9650] veth3: entered allmulticast mode
[  291.952426][ T9650] veth3: entered promiscuous mode
[  291.961597][ T9650] veth0_to_bond: left allmulticast mode
[  291.963690][ T9650] bridge2: port 2(veth0_to_bond) entered blocking state
[  291.969816][ T9650] bridge2: port 2(veth0_to_bond) entered disabled state
[  291.972375][ T9650] veth0_to_bond: entered allmulticast mode
[  291.977572][ T9650] veth0_to_bond: entered promiscuous mode
[  292.103701][ T9668] netlink: 'syz.6.1126': attribute type 7 has an invalid length.
[  292.106408][ T9668] netlink: 'syz.6.1126': attribute type 8 has an invalid length.
[  292.115734][ T9668] ip6gretap0: entered promiscuous mode
[  292.125244][ T9668] syz_tun: entered promiscuous mode
[  292.130416][ T9668] ip6gretap0: left promiscuous mode
[  292.132871][ T9668] syz_tun: left promiscuous mode
[  292.318542][ T9675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.340378][ T9675] siw: device registration error -23
[  292.502772][ T9693] veth0_virt_"ifi: renamed from veth0_vlan
[  292.525049][ T9693] netlink: 'syz.4.1133': attribute type 10 has an invalid length.
[  292.783107][ T9708] netlink: 'syz.4.1138': attribute type 8 has an invalid length.
[  293.164849][ T9722] 8021q: adding VLAN 0 to HW filter on device batadv1
[  293.174752][ T9722] team0: Failed to send options change via netlink (err -105)
[  293.178812][ T9722] team0: Port device batadv1 added
[  293.213812][ T9725] netlink: 'syz.6.1144': attribute type 1 has an invalid length.
[  293.512451][ T9744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.531203][ T9744] __nla_validate_parse: 12 callbacks suppressed
[  293.531215][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1148'.
[  293.646380][ T9751] bond0: option mode: unable to set because the bond device has slaves
[  293.809775][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'.
[  294.087645][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'.
[  294.166559][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'.
[  294.182930][ T9775] netlink: 'syz.4.1157': attribute type 1 has an invalid length.
[  294.367682][ T9782] netlink: 'syz.6.1160': attribute type 1 has an invalid length.
[  294.370740][ T9782] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1160'.
[  294.412073][ T9784] dvmrp1: entered allmulticast mode
[  294.575446][ T9788] vlan0: entered promiscuous mode
[  294.581235][ T9788] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  294.641570][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  295.051327][ T9819] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1171'.
[  295.106603][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'.
[  295.117346][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  295.129376][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'.
[  295.555730][ T9858] netlink: 'syz.3.1183': attribute type 10 has an invalid length.
[  296.223561][ T9891] syzkaller1: entered promiscuous mode
[  296.225568][ T9891] syzkaller1: entered allmulticast mode
[  296.250564][ T9883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.798198][ T9915] netlink: 'syz.4.1202': attribute type 1 has an invalid length.
[  296.853801][ T9917] syzkaller1: entered promiscuous mode
[  296.855852][ T9917] syzkaller1: entered allmulticast mode
[  297.305803][ T9930] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  297.477655][ T9939] netlink: 'syz.6.1210': attribute type 1 has an invalid length.
[  297.598408][ T9943] batadv_slave_1: entered promiscuous mode
[  297.998859][ T9960] netlink: 'syz.4.1219': attribute type 10 has an invalid length.
[  298.387295][ T9991] netlink: 'syz.6.1229': attribute type 1 has an invalid length.
[  298.660199][T10004] __nla_validate_parse: 21 callbacks suppressed
[  298.660210][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1235'.
[  298.678902][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.681998][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.691976][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.700622][T10009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.758885][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.768266][T10010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.774649][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.781295][T10010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1236'.
[  298.928642][   T25] block nbd4: Possible stuck request ffff8880226e0000: control (read@1024,1024B). Runtime 30 seconds
[  298.933234][   T25] block nbd4: Possible stuck request ffff8880226e0200: control (read@2048,1024B). Runtime 30 seconds
[  298.937872][   T25] block nbd4: Possible stuck request ffff8880226e0400: control (read@3072,1024B). Runtime 30 seconds
[  298.942609][   T25] block nbd4: Possible stuck request ffff8880226d8000: control (read@0,1024B). Runtime 30 seconds
[  299.110346][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'.
[  299.605736][T10052] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  299.611100][T10051] netlink: 'syz.6.1250': attribute type 1 has an invalid length.
[  299.623133][T10053] bridge_slave_0: left allmulticast mode
[  299.628471][T10053] bridge_slave_0: left promiscuous mode
[  299.631250][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.635234][T10053] bridge_slave_1: left allmulticast mode
[  299.638879][T10053] bridge_slave_1: left promiscuous mode
[  299.641448][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.645930][T10053] bond0: (slave bond_slave_0): Releasing backup interface
[  299.649917][T10053] bond0: (slave bond_slave_1): Releasing backup interface
[  299.654002][T10053] bond2: (slave wireguard0): Releasing backup interface
[  299.656351][T10053] wireguard0: left promiscuous mode
[  299.851121][T10068] netlink: 'syz.6.1257': attribute type 1 has an invalid length.
[  299.874847][T10066] netlink: 'syz.4.1256': attribute type 1 has an invalid length.
[  300.010413][T10072] netlink: 'syz.4.1259': attribute type 2 has an invalid length.
[  300.311466][T10089] netlink: 'syz.3.1267': attribute type 1 has an invalid length.
[  300.831644][T10122] netlink: 'syz.3.1279': attribute type 1 has an invalid length.
[  300.885400][T10129] netlink: 'syz.4.1283': attribute type 1 has an invalid length.
[  300.997375][T10142] netlink: 'syz.6.1288': attribute type 10 has an invalid length.
[  301.004751][T10137] geneve3: entered promiscuous mode
[  301.020601][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.023752][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.026264][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.044482][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.074349][T10148] netlink: 'syz.3.1290': attribute type 1 has an invalid length.
[  301.201337][T10153] IPVS: length: 49 != 24
[  301.205487][T10159] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.313984][T10166] netlink: 'syz.4.1298': attribute type 1 has an invalid length.
[  301.409179][T10171] can: request_module (can-proto-0) failed.
[  301.712162][T10203] sctp: [Deprecated]: syz.6.1309 (pid 10203) Use of int in maxseg socket option.
[  301.712162][T10203] Use struct sctp_assoc_value instead
[  301.778897][T10206] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma?
[  302.647325][T10222] tipc: Started in network mode
[  302.649043][T10222] tipc: Node identity 5299ff449739, cluster identity 4711
[  302.652918][T10222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.672430][T10222] tipc: Disabling bearer <eth:syzkaller0>
[  302.702672][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.705969][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.711517][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.714694][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.252881][T10269] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  303.386227][   T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.391719][   T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  303.399591][   T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.403055][   T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.499890][T10284] team0: Mode changed to "activebackup"
[  304.122926][T10327] vlan0: left promiscuous mode
[  304.127824][T10327] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  304.132251][T10327] bond2: left promiscuous mode
[  304.143122][   T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.149148][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.152746][   T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.158126][   T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.348307][T10338] __nla_validate_parse: 28 callbacks suppressed
[  304.348328][T10338] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1352'.
[  304.668504][T10350] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  304.680088][T10350] veth0_to_bond: left allmulticast mode
[  304.682183][T10350] veth0_to_bond: left promiscuous mode
[  304.684522][T10350] bridge2: port 2(veth0_to_bond) entered disabled state
[  304.694269][T10350] bond0: (slave wlan1): Releasing backup interface
[  304.699483][T10350] veth3: left allmulticast mode
[  304.701540][T10350] veth3: left promiscuous mode
[  304.703607][T10350] bridge2: port 1(veth3) entered disabled state
[  304.721181][T10350] team0: Port device batadv1 removed
[  304.772269][T10350] validate_nla: 12 callbacks suppressed
[  304.772283][T10350] netlink: 'syz.3.1357': attribute type 10 has an invalid length.
[  304.778795][T10350] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  304.783671][T10350] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  304.792996][T10350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.797036][T10350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.893468][T10361] lo: entered allmulticast mode
[  304.895930][T10361] lo: left allmulticast mode
[  304.902915][T10361] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1362'.
[  304.942379][T10363] netlink: 'syz.6.1363': attribute type 17 has an invalid length.
[  304.945658][T10363] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1363'.
[  304.949288][T10363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.955468][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'.
[  304.960486][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1363'.
[  305.096254][T10368] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.792664][T10401] netlink: 'syz.6.1377': attribute type 1 has an invalid length.
[  305.795073][T10401] netlink: 'syz.6.1377': attribute type 2 has an invalid length.
[  305.799222][T10401] netlink: 'syz.6.1377': attribute type 12 has an invalid length.
[  305.802872][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'.
[  305.805698][T10401] netlink: 'syz.6.1377': attribute type 30 has an invalid length.
[  305.810957][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'.
[  305.814531][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'.
[  305.863736][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1377'.
[  305.875637][T10401] netlink: 'syz.6.1377': attribute type 30 has an invalid length.
[  306.042017][T10416] netlink: 'syz.3.1382': attribute type 4 has an invalid length.
[  306.115279][T10424] netlink: 'syz.3.1384': attribute type 1 has an invalid length.
[  306.117728][T10424] netlink: 'syz.3.1384': attribute type 2 has an invalid length.
[  306.122542][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'.
[  306.458498][T10455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.471961][T10455] syzkaller0: entered promiscuous mode
[  306.474214][T10455] syzkaller0: entered allmulticast mode
[  306.494185][T10455] tipc: Resetting bearer <eth:syzkaller0>
[  306.499978][T10453] tipc: Resetting bearer <eth:syzkaller0>
[  306.523046][T10453] tipc: Disabling bearer <eth:syzkaller0>
[  306.534617][T10461] geneve2: entered promiscuous mode
[  306.877758][T10477] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  306.981702][T10488] vlan2: entered promiscuous mode
[  306.983412][T10488] vlan2: entered allmulticast mode
[  306.985068][T10488] hsr_slave_1: entered allmulticast mode
[  307.679653][T10519] : entered promiscuous mode
[  307.693426][T10519] trusted_key: syz.3.1418 sent an empty control message without MSG_MORE.
[  308.516748][  T792] IPVS: starting estimator thread 0...
[  308.608457][T10581] IPVS: using max 35 ests per chain, 84000 per kthread
[  309.368899][T10607] __nla_validate_parse: 15 callbacks suppressed
[  309.368914][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'.
[  309.412028][T10609] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1444'.
[  309.703308][T10619] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  309.870905][T10628] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  309.896296][T10634] validate_nla: 18 callbacks suppressed
[  309.896309][T10634] netlink: 'syz.6.1453': attribute type 1 has an invalid length.
[  309.902219][T10634] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1453'.
[  310.221402][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1458'.
[  310.452933][T10654] netlink: 'syz.6.1460': attribute type 1 has an invalid length.
[  310.455571][T10654] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1460'.
[  310.642372][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1463'.
[  310.643429][T10664] netlink: 'syz.3.1464': attribute type 10 has an invalid length.
[  310.677818][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1465'.
[  310.871115][T10674] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1468'.
[  311.013060][T10690] pimreg: entered allmulticast mode
[  311.017232][T10690] netlink: 'syz.3.1471': attribute type 41 has an invalid length.
[  311.021515][T10690] dvmrp0: left allmulticast mode
[  311.033124][T10690] pimreg: left allmulticast mode
[  311.300273][T10706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.303718][T10706] syzkaller0: entered promiscuous mode
[  311.305870][T10706] syzkaller0: entered allmulticast mode
[  311.325323][T10704] tipc: Resetting bearer <eth:syzkaller0>
[  311.359770][T10704] tipc: Disabling bearer <eth:syzkaller0>
[  311.373057][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'.
[  311.456329][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1478'.
[  311.651954][T10721] netlink: 'syz.6.1480': attribute type 3 has an invalid length.
[  311.710849][T10725] netlink: 'syz.6.1482': attribute type 3 has an invalid length.
[  312.979675][T10771] bridge0: port 1(veth0_to_bridge) entered blocking state
[  312.982765][T10771] bridge0: port 1(veth0_to_bridge) entered disabled state
[  312.985851][T10771] veth0_to_bridge: entered allmulticast mode
[  312.991218][T10771] veth0_to_bridge: entered promiscuous mode
[  313.178541][   T13] bond0: (slave wlan1): interface is now down
[  313.182683][T10779] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.199617][   T13] bond0: (slave wlan1): interface is now down
[  313.207578][   T13] bond0: now running without any active interface!
[  313.491142][T10796] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.494844][T10796] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.541198][T10796] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.542893][T10802] netlink: 'syz.6.1505': attribute type 1 has an invalid length.
[  313.545557][T10796] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.614631][T10796] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.618642][T10796] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.632625][T10808] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  313.634916][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.652722][T10796] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  313.655661][T10796] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.719670][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  313.722659][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.734722][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  313.738953][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.752861][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  313.755963][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.765069][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  313.768204][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.781749][T10814] netlink: 'syz.6.1510': attribute type 1 has an invalid length.
[  314.098881][T10838] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  314.194327][T10847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.231531][T10851] netlink: 'syz.6.1524': attribute type 10 has an invalid length.
[  314.417172][T10862] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  314.434698][T10862] veth0_to_bridge: left allmulticast mode
[  314.437382][T10862] veth0_to_bridge: left promiscuous mode
[  314.439343][T10862] bridge0: port 1(veth0_to_bridge) entered disabled state
[  314.444080][T10862] bond0: (slave wlan1): Releasing backup interface
[  314.498801][T10862] netlink: 'syz.3.1534': attribute type 10 has an invalid length.
[  314.501942][T10862] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  314.508118][   T13] bond0: (slave wlan1): interface is now down
[  314.512439][T10862] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  314.526960][   T12] bond0: (slave wlan1): interface is now down
[  314.529934][   T12] bond0: now running without any active interface!
[  314.644231][T10877] pim6reg: entered allmulticast mode
[  314.652788][T10876] pim6reg: left allmulticast mode
[  314.780760][T10884] pim6reg1: entered promiscuous mode
[  314.782920][T10884] pim6reg1: entered allmulticast mode
[  314.961311][T10892] __nla_validate_parse: 11 callbacks suppressed
[  314.961332][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1539'.
[  315.003928][T10895] pim6reg: entered allmulticast mode
[  315.411553][T10903] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1542'.
[  315.550743][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1544'.
[  315.554859][T10910] validate_nla: 3 callbacks suppressed
[  315.554872][T10910] netlink: 'syz.6.1544': attribute type 29 has an invalid length.
[  315.603763][T10883] pim6reg: left allmulticast mode
[  315.746387][T10922] netlink: 800 bytes leftover after parsing attributes in process `syz.3.1547'.
[  316.551698][T10928] IPv6: addrconf: prefix option has invalid lifetime
[  329.008272][   T25] block nbd4: Possible stuck request ffff8880226e0000: control (read@1024,1024B). Runtime 60 seconds
[  329.012018][   T25] block nbd4: Possible stuck request ffff8880226e0200: control (read@2048,1024B). Runtime 60 seconds
[  329.015615][   T25] block nbd4: Possible stuck request ffff8880226e0400: control (read@3072,1024B). Runtime 60 seconds
[  329.019633][   T25] block nbd4: Possible stuck request ffff8880226d8000: control (read@0,1024B). Runtime 60 seconds
[  346.283060][   T33] audit: type=1804 audit(1755269140.313:2): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1550" name="/newroot/382/cgroup.controllers" dev="tmpfs" ino=1955 res=1 errno=0
[  346.310706][   T33] audit: type=1800 audit(1755269140.313:3): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1550" name="cgroup.controllers" dev="tmpfs" ino=1955 res=0 errno=0
[  346.489666][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1554'.
[  346.534510][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.538665][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.541502][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.544893][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.548331][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.678512][T10949] netlink: 'syz.6.1556': attribute type 4 has an invalid length.
[  346.682750][T10949] lo speed is unknown, defaulting to 1000
[  346.685761][T10949] lo speed is unknown, defaulting to 1000
[  346.688591][T10949] lo speed is unknown, defaulting to 1000
[  346.759013][T10953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.763786][T10944] chnl_net:caif_netlink_parms(): no params data found
[  346.828074][T10944] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.830397][T10944] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.832851][T10944] bridge_slave_0: entered allmulticast mode
[  346.835623][T10944] bridge_slave_0: entered promiscuous mode
[  346.839217][T10944] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.841961][T10944] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.844327][T10949] infiniband syz0: set active
[  346.844861][T10944] bridge_slave_1: entered allmulticast mode
[  346.846573][T10949] infiniband syz0: added lo
[  346.851316][T10944] bridge_slave_1: entered promiscuous mode
[  346.870500][ T7019] lo speed is unknown, defaulting to 1000
[  346.887365][T10944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.888959][T10949] RDS/IB: syz0: added
[  346.892724][T10949] smc: adding ib device syz0 with port count 1
[  346.893762][T10944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.894855][T10949] smc:    ib device syz0 port 1 has pnetid 
[  346.913224][ T7019] lo speed is unknown, defaulting to 1000
[  346.930433][T10949] lo speed is unknown, defaulting to 1000
[  346.932648][T10944] team0: Port device team_slave_0 added
[  346.937956][T10944] team0: Port device team_slave_1 added
[  346.959989][T10944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.962442][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.971332][T10944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.975959][T10944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.979025][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.987502][T10944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.024587][T10944] hsr_slave_0: entered promiscuous mode
[  347.027245][T10944] hsr_slave_1: entered promiscuous mode
[  347.029520][T10944] debugfs: 'hsr0' already exists in 'hsr'
[  347.031440][T10944] Cannot create hsr debugfs directory
[  347.063708][T10949] lo speed is unknown, defaulting to 1000
[  347.159174][T10944] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.163969][T10944] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.168765][T10944] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  347.174197][T10944] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  347.188171][T10949] lo speed is unknown, defaulting to 1000
[  347.198119][T10944] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.200616][T10944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.203273][T10944] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.206113][T10944] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.256292][T10965] netlink: 'syz.3.1557': attribute type 1 has an invalid length.
[  347.295202][T10944] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.305063][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.309828][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.322175][T10944] 8021q: adding VLAN 0 to HW filter on device team0
[  347.339220][T10965] veth7: entered promiscuous mode
[  347.359088][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.361415][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.367679][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.369982][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.372795][T10949] lo speed is unknown, defaulting to 1000
[  347.445678][T10968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1558'.
[  347.451430][T10968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1558'.
[  347.455117][T10968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1558'.
[  347.476415][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'.
[  347.611535][T10944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.719793][T10981] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  347.723077][T10981] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1561'.
[  347.806317][T10986] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1562'.
[  347.866062][T10944] veth0_vlan: entered promiscuous mode
[  347.900639][T10944] veth1_vlan: entered promiscuous mode
[  347.935990][T10944] veth0_macvtap: entered promiscuous mode
[  347.940954][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'.
[  347.949948][T10944] veth1_macvtap: entered promiscuous mode
[  347.953340][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1564'.
[  347.980272][T10944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.000143][T10944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.023015][ T5719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.046995][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.051476][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.054650][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.610605][ T5860] Bluetooth: hci1: command tx timeout
[  349.851346][T11024] "syz.3.1574" (11024) uses obsolete ecb(arc4) skcipher
[  349.928479][T11030] netlink: 'syz.6.1577': attribute type 1 has an invalid length.
[  349.953984][T11030] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1577'.
[  350.515808][T11079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.520063][T11079] syzkaller0: entered promiscuous mode
[  350.522047][T11079] syzkaller0: entered allmulticast mode
[  350.539672][T11079] tipc: Resetting bearer <eth:syzkaller0>
[  350.544286][T11078] tipc: Resetting bearer <eth:syzkaller0>
[  350.564063][T11078] tipc: Disabling bearer <eth:syzkaller0>
[  350.643696][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.717703][T11082] netlink: 'syz.6.1597': attribute type 1 has an invalid length.
[  350.764577][T11084] netlink: 'syz.6.1598': attribute type 1 has an invalid length.
[  350.892769][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.896812][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.899768][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.902716][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.906303][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.942186][T11086] lo speed is unknown, defaulting to 1000
[  351.050514][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.250858][T11086] chnl_net:caif_netlink_parms(): no params data found
[  351.352714][T11086] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.355731][T11086] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.360062][T11086] bridge_slave_0: entered allmulticast mode
[  351.364087][T11086] bridge_slave_0: entered promiscuous mode
[  351.369736][T11086] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.372812][T11086] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.375786][T11086] bridge_slave_1: entered allmulticast mode
[  351.380020][T11086] bridge_slave_1: entered promiscuous mode
[  351.411026][T11086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.416738][T11086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.443282][T11086] team0: Port device team_slave_0 added
[  351.447224][T11086] team0: Port device team_slave_1 added
[  351.473978][T11086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.476406][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.484834][T11086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.491082][T11086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.493396][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.503662][T11086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.546008][T11086] hsr_slave_0: entered promiscuous mode
[  351.549598][T11086] hsr_slave_1: entered promiscuous mode
[  351.552512][T11086] debugfs: 'hsr0' already exists in 'hsr'
[  351.554817][T11086] Cannot create hsr debugfs directory
[  351.605323][T11111] netlink: 'syz.3.1605': attribute type 12 has an invalid length.
[  351.662934][T11113] netlink: 'syz.3.1606': attribute type 1 has an invalid length.
[  351.667863][T11113] __nla_validate_parse: 5 callbacks suppressed
[  351.667878][T11113] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1606'.
[  351.800490][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.837907][T11121] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  351.868324][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.957458][   T13] bridge_slave_1: left allmulticast mode
[  351.961830][   T13] bridge_slave_1: left promiscuous mode
[  351.964321][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.970349][   T13] bridge_slave_0: left allmulticast mode
[  351.972610][   T13] bridge_slave_0: left promiscuous mode
[  351.975028][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.281132][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.285821][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.292133][   T13] bond0 (unregistering): Released all slaves
[  352.605260][T11126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1611'.
[  352.611730][   T13] hsr_slave_0: left promiscuous mode
[  352.614898][   T13] hsr_slave_1: left promiscuous mode
[  352.620521][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.622878][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.626500][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.629448][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.654994][   T13] veth1_macvtap: left promiscuous mode
[  352.657179][   T13] veth0_macvtap: left promiscuous mode
[  352.658951][   T13] veth1_vlan: left promiscuous mode
[  352.660796][   T13] veth0_vlan: left promiscuous mode
[  352.927130][ T5858] Bluetooth: hci1: command tx timeout
[  353.002403][   T13] team0 (unregistering): Port device team_slave_1 removed
[  353.036698][   T13] team0 (unregistering): Port device team_slave_0 removed
[  353.479788][T11086] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  353.491579][T11086] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  353.504731][T11086] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  353.511831][T11086] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  353.616385][T11144] netlink: 'syz.6.1616': attribute type 1 has an invalid length.
[  353.620250][T11086] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.629451][T11144] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1616'.
[  353.636797][T11086] 8021q: adding VLAN 0 to HW filter on device team0
[  353.642832][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.645208][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.667892][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.670301][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.812091][T11086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.974574][T11086] veth0_vlan: entered promiscuous mode
[  353.985545][T11086] veth1_vlan: entered promiscuous mode
[  354.018882][T11086] veth0_macvtap: entered promiscuous mode
[  354.025806][T11086] veth1_macvtap: entered promiscuous mode
[  354.042985][T11086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.055944][T11086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.071657][ T5915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.075882][ T5915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.083437][ T5915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.088266][ T5915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.582842][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1622'.
[  354.656106][T11182] netlink: 'syz.6.1623': attribute type 12 has an invalid length.
[  354.725342][T11192] netlink: 'syz.3.1626': attribute type 12 has an invalid length.
[  354.735429][T11192] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.742749][T11192] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.786111][T11200] netlink: 'syz.3.1626': attribute type 12 has an invalid length.
[  354.798798][T11192] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.803687][T11192] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.848609][T11192] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.852413][T11192] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.900818][T11192] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.904230][T11192] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.971185][ T5719] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.974036][ T5719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.985251][ T5719] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.989250][ T5719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.000274][ T5719] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.003037][ T5719] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.006817][ T5858] Bluetooth: hci1: command 0x041b tx timeout
[  355.022620][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.025342][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.065537][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.071841][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.074828][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.078652][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.082553][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.092109][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'.
[  355.252215][T11226] netlink: 'syz.6.1633': attribute type 12 has an invalid length.
[  355.448080][T11240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.455610][T11239] tipc: Disabling bearer <eth:syzkaller0>
[  355.556396][T11243] netlink: 'syz.3.1639': attribute type 12 has an invalid length.
[  355.612451][T11246] netlink: 'syz.3.1641': attribute type 12 has an invalid length.
[  355.817185][T11261] openvswitch: netlink: Flow key attribute not present in set flow.
[  355.874980][T11267] netlink: 'syz.3.1652': attribute type 12 has an invalid length.
[  355.945302][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.108695][T11282] tc_dump_action: action bad kind
[  356.244998][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  356.249495][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  356.252382][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  356.255501][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  356.259555][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  356.289158][T11293] lo speed is unknown, defaulting to 1000
[  356.302773][T11301] netlink: 'syz.3.1661': attribute type 10 has an invalid length.
[  356.488155][T11293] chnl_net:caif_netlink_parms(): no params data found
[  356.563359][T11293] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.565946][T11293] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.568342][T11293] bridge_slave_0: entered allmulticast mode
[  356.571158][T11293] bridge_slave_0: entered promiscuous mode
[  356.575215][T11293] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.578765][T11293] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.581252][T11293] bridge_slave_1: entered allmulticast mode
[  356.584043][T11293] bridge_slave_1: entered promiscuous mode
[  356.612592][T11293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.617743][T11293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.653093][T11293] team0: Port device team_slave_0 added
[  356.657727][T11293] team0: Port device team_slave_1 added
[  356.707518][T11293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.710334][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.721497][T11293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.727360][T11293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.730080][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.741433][T11293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.792781][T11293] hsr_slave_0: entered promiscuous mode
[  356.796001][T11293] hsr_slave_1: entered promiscuous mode
[  356.799169][T11293] debugfs: 'hsr0' already exists in 'hsr'
[  356.801613][T11293] Cannot create hsr debugfs directory
[  356.902885][T11339] netlink: 'syz.3.1672': attribute type 12 has an invalid length.
[  356.953892][T11341] __nla_validate_parse: 37 callbacks suppressed
[  356.953903][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'.
[  356.959374][T11341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'.
[  356.962155][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'.
[  356.965101][T11341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'.
[  357.081400][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1675'.
[  357.329661][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.391185][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.412683][T11362] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1679'.
[  357.422935][T11362] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  357.448316][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.545215][   T13] bridge_slave_1: left allmulticast mode
[  357.547760][   T13] bridge_slave_1: left promiscuous mode
[  357.549713][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.553700][   T13] bridge_slave_0: left allmulticast mode
[  357.555542][   T13] bridge_slave_0: left promiscuous mode
[  357.558289][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.865729][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.872267][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.877070][   T13] bond0 (unregistering): Released all slaves
[  358.185203][T11410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  358.215317][T11408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1687'.
[  358.221795][T11408] wlan1: mtu less than device minimum
[  358.251382][T11409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  358.272326][   T13] hsr_slave_0: left promiscuous mode
[  358.277672][   T13] hsr_slave_1: left promiscuous mode
[  358.280561][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.283895][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.289895][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.292865][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.297486][ T5858] Bluetooth: hci1: command tx timeout
[  358.319047][   T13] veth1_macvtap: left promiscuous mode
[  358.321639][   T13] veth0_macvtap: left promiscuous mode
[  358.324216][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'.
[  358.324285][   T13] veth1_vlan: left promiscuous mode
[  358.330570][   T13] veth0_vlan: left promiscuous mode
[  358.335654][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'.
[  358.419893][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'.
[  358.773375][   T13] team0 (unregistering): Port device team_slave_1 removed
[  358.813672][   T13] team0 (unregistering): Port device team_slave_0 removed
[  359.091259][   T25] block nbd4: Possible stuck request ffff8880226e0000: control (read@1024,1024B). Runtime 90 seconds
[  359.094725][   T25] block nbd4: Possible stuck request ffff8880226e0200: control (read@2048,1024B). Runtime 90 seconds
[  359.098359][   T25] block nbd4: Possible stuck request ffff8880226e0400: control (read@3072,1024B). Runtime 90 seconds
[  359.101745][   T25] block nbd4: Possible stuck request ffff8880226d8000: control (read@0,1024B). Runtime 90 seconds
[  359.151196][T11426] batadv_slave_0: entered promiscuous mode
[  359.155447][T11427] batadv_slave_0: left promiscuous mode
[  359.270330][T11293] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  359.292180][T11293] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  359.297182][T11293] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  359.314387][T11293] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  359.320093][T11430] validate_nla: 3 callbacks suppressed
[  359.320109][T11430] netlink: 'syz.3.1692': attribute type 10 has an invalid length.
[  359.456287][T11443] IPVS: length: 150 != 84136430776
[  359.458727][T11293] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.503756][T11293] 8021q: adding VLAN 0 to HW filter on device team0
[  359.517354][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.520185][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.530325][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.533058][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.590280][T11450] lo speed is unknown, defaulting to 1000
[  359.807152][T11293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.991513][T11458] lo speed is unknown, defaulting to 1000
[  360.129095][T11293] veth0_vlan: entered promiscuous mode
[  360.142028][T11293] veth1_vlan: entered promiscuous mode
[  360.172900][T11293] veth0_macvtap: entered promiscuous mode
[  360.179432][T11293] veth1_macvtap: entered promiscuous mode
[  360.207836][T11293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.242933][T11293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.291355][ T6947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.295043][ T6947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.300272][ T6947] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.306833][ T6947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.368292][ T5858] Bluetooth: hci1: command tx timeout
[  360.598307][T11512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.601410][T11514] syzkaller0: entered promiscuous mode
[  360.603667][T11514] syzkaller0: entered allmulticast mode
[  360.635338][T11517] tipc: Resetting bearer <eth:syzkaller0>
[  360.662688][T11517] tipc: Disabling bearer <eth:syzkaller0>
[  361.221652][T11546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.225350][T11546] syzkaller0: entered promiscuous mode
[  361.227819][T11546] syzkaller0: entered allmulticast mode
[  361.232321][T11546] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  361.286270][T11546] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  361.324324][T11546] tipc: Resetting bearer <eth:syzkaller0>
[  361.333756][T11544] tipc: Resetting bearer <eth:syzkaller0>
[  361.350165][T11544] tipc: Disabling bearer <eth:syzkaller0>
[  361.530972][T11559] xt_limit: Overflow, try lower: 604147548/4200216962
[  361.538923][T11559] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  361.653642][T11562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  362.115467][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.121178][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.127959][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.133711][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.138487][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.188475][ T6918] lo speed is unknown, defaulting to 1000
[  362.194508][ T6918] syz0: Port: 1 Link DOWN
[  362.210036][ T5719] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.214923][ T5719] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.219227][ T5719] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.222246][ T5719] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.232780][ T5917] lo speed is unknown, defaulting to 1000
[  362.260063][ T6947] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.275898][ T5719] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.280193][ T5719] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.290957][ T5719] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.294757][ T5719] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.311565][T11567] lo speed is unknown, defaulting to 1000
[  362.422422][T11575] __nla_validate_parse: 1 callbacks suppressed
[  362.422443][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'.
[  362.452704][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'.
[  362.560572][T11567] chnl_net:caif_netlink_parms(): no params data found
[  362.581726][T11581] netlink: 'syz.6.1716': attribute type 13 has an invalid length.
[  362.584324][T11581] netlink: 'syz.6.1716': attribute type 17 has an invalid length.
[  362.648705][T11581] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.653654][T11581] 8021q: adding VLAN 0 to HW filter on device team0
[  362.664946][T11581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  362.684561][ T6909] lo speed is unknown, defaulting to 1000
[  362.687296][ T6909] syz0: Port: 1 Link ACTIVE
[  362.693474][ T6909] lo speed is unknown, defaulting to 1000
[  362.729275][T11581] syz.6.1716 (11581) used greatest stack depth: 19512 bytes left
[  362.760128][T11567] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.763284][T11567] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.766379][T11567] bridge_slave_0: entered allmulticast mode
[  362.774502][T11567] bridge_slave_0: entered promiscuous mode
[  362.780229][T11567] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.783626][T11567] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.790274][T11567] bridge_slave_1: entered allmulticast mode
[  362.793762][T11567] bridge_slave_1: entered promiscuous mode
[  362.828308][T11567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.835189][T11567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.866331][T11567] team0: Port device team_slave_0 added
[  362.872086][T11567] team0: Port device team_slave_1 added
[  362.905427][T11567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.908801][T11567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.918266][T11567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.927242][T11567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.930449][T11567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.941918][T11567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.990863][T11567] hsr_slave_0: entered promiscuous mode
[  362.993492][T11567] hsr_slave_1: entered promiscuous mode
[  362.995936][T11567] debugfs: 'hsr0' already exists in 'hsr'
[  362.999473][T11567] Cannot create hsr debugfs directory
[  363.070826][ T5719] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.073594][ T5719] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.084820][ T5719] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.091020][ T5719] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.100253][ T5719] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.104158][ T5719] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.124774][ T5719] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.129087][ T5719] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.299387][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1724'.
[  363.313784][T11611] netlink: 'syz.3.1724': attribute type 5 has an invalid length.
[  363.319423][T11611] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1724'.
[  363.326000][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'.
[  363.333672][T11611] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1724'.
[  363.452345][T11613] netlink: 'syz.3.1725': attribute type 32 has an invalid length.
[  363.744548][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1727'.
[  363.751619][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1727'.
[  363.916155][ T6947] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.929239][T11617] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  364.029661][ T6947] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.116046][ T6947] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.207532][ T5858] Bluetooth: hci1: command tx timeout
[  364.565996][T11631] tipc: Enabled bearer <udp:syz0>, priority 26
[  364.583895][ T6947] bridge_slave_1: left allmulticast mode
[  364.586071][ T6947] bridge_slave_1: left promiscuous mode
[  364.588291][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.594992][ T6947] bridge_slave_0: left allmulticast mode
[  364.603112][ T6947] bridge_slave_0: left promiscuous mode
[  364.605614][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.991576][ T6947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.001933][ T6947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.008680][ T6947] bond0 (unregistering): Released all slaves
[  365.260551][T11650] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1737'.
[  365.351906][T11654] mac80211_hwsim hwsim16 ": renamed from wlan0
[  365.678505][ T6917] tipc: Node number set to 3315662660
[  365.754326][ T6947] hsr_slave_0: left promiscuous mode
[  365.759142][ T6947] hsr_slave_1: left promiscuous mode
[  365.761869][ T6947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.764818][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.775985][ T6947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.789769][ T6947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.830377][ T6947] veth1_macvtap: left promiscuous mode
[  365.832689][ T6947] veth0_macvtap: left promiscuous mode
[  365.835189][ T6947] veth1_vlan: left promiscuous mode
[  365.837624][ T6947] veth0_vlan: left promiscuous mode
[  366.286986][ T5858] Bluetooth: hci1: command tx timeout
[  366.300446][ T6947] team0 (unregistering): Port device team_slave_1 removed
[  366.343665][ T6947] team0 (unregistering): Port device team_slave_0 removed
[  366.742055][T11657] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  366.833403][T11665] netlink: 'syz.3.1740': attribute type 10 has an invalid length.
[  366.834401][T11567] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  366.863938][T11567] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  366.885451][T11567] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  366.892672][T11567] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  366.929478][T11669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.960293][T11669] syzkaller0: entered promiscuous mode
[  366.962091][T11669] syzkaller0: entered allmulticast mode
[  367.023126][T11682] sock: sock_set_timeout: `syz.6.1743' (pid 11682) tries to set negative timeout
[  367.072710][T11682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  367.092459][T11567] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.103249][T11669] batadv0: entered promiscuous mode
[  367.109796][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.133083][T11669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  367.155450][T11567] 8021q: adding VLAN 0 to HW filter on device team0
[  367.158773][T11668] tipc: Resetting bearer <eth:syzkaller0>
[  367.173051][T11668] tipc: Disabling bearer <eth:syzkaller0>
[  367.186475][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.189419][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.199858][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.202762][ T8752] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.355636][T11567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.490699][T11705] delete_channel: no stack
[  367.565170][T11567] veth0_vlan: entered promiscuous mode
[  367.579546][T11567] veth1_vlan: entered promiscuous mode
[  367.623420][T11567] veth0_macvtap: entered promiscuous mode
[  367.630855][T11567] veth1_macvtap: entered promiscuous mode
[  367.651245][T11567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.660022][T11567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.670358][ T5719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.677036][ T5719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.692726][ T5719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.698291][ T5719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.113193][T11747] netlink: 'syz.3.1761': attribute type 10 has an invalid length.
[  368.367129][T11773] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1769'.
[  368.372951][T11773] hsr_slave_0: left promiscuous mode
[  368.419518][T11776] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  368.473267][T11779] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  368.639490][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1773'.
[  369.437944][T11796] netlink: 'syz.6.1776': attribute type 12 has an invalid length.
[  369.441703][T11794] netlink: 'syz.3.1775': attribute type 4 has an invalid length.
[  369.445406][T11794] netlink: 'syz.3.1775': attribute type 4 has an invalid length.
[  369.533306][T11800] netlink: 'syz.6.1779': attribute type 10 has an invalid length.
[  369.536363][T11800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1779'.
[  369.610942][ T5719] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.634876][T11800] dummy0: entered promiscuous mode
[  369.638314][T11800] bridge0: port 1(dummy0) entered blocking state
[  369.641087][T11800] bridge0: port 1(dummy0) entered disabled state
[  369.651314][T11800] dummy0: entered allmulticast mode
[  369.660651][T11800] bridge0: port 1(dummy0) entered blocking state
[  369.662981][T11800] bridge0: port 1(dummy0) entered forwarding state
[  369.683700][T11800] pim6reg1: entered promiscuous mode
[  369.698093][T11800] pim6reg1: entered allmulticast mode
[  370.401900][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1788'.
[  370.501413][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.506114][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.512323][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.515674][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.521860][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.556595][T11845] lo speed is unknown, defaulting to 1000
[  370.578284][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1791'.
[  370.588059][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1791'.
[  370.659981][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'.
[  370.902745][T11868] pim6reg: entered allmulticast mode
[  370.983607][T11845] chnl_net:caif_netlink_parms(): no params data found
[  371.341359][ T5719] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.352169][T11845] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.355047][T11845] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.361276][T11845] bridge_slave_0: entered allmulticast mode
[  371.365382][T11845] bridge_slave_0: entered promiscuous mode
[  371.371330][T11845] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.374304][T11845] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.380718][T11845] bridge_slave_1: entered allmulticast mode
[  371.384960][T11845] bridge_slave_1: entered promiscuous mode
[  371.414345][ T5719] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.475547][ T5719] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.493377][T11845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.501027][T11845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.549216][T11845] team0: Port device team_slave_0 added
[  371.554941][T11845] team0: Port device team_slave_1 added
[  371.595728][T11854] pim6reg: left allmulticast mode
[  371.623116][T11845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.629587][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.640215][T11845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.648588][T11845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.658875][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.670239][T11845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.768794][T11845] hsr_slave_0: entered promiscuous mode
[  371.771955][T11845] hsr_slave_1: entered promiscuous mode
[  371.811692][ T5719] bridge_slave_1: left allmulticast mode
[  371.817174][ T5719] bridge_slave_1: left promiscuous mode
[  371.819155][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.823801][ T5719] bridge_slave_0: left allmulticast mode
[  371.825540][ T5719] bridge_slave_0: left promiscuous mode
[  371.832781][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.407897][ T5719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.412708][ T5719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.416423][ T5719] bond0 (unregistering): Released all slaves
[  372.436279][T11897] netlink: 'syz.3.1802': attribute type 12 has an invalid length.
[  372.452023][T11898] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  372.504768][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'.
[  372.606947][ T5860] Bluetooth: hci1: command tx timeout
[  372.725355][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1807'.
[  372.834484][T11915] openvswitch: netlink: IP tunnel TTL not specified.
[  372.865630][ T5719] hsr_slave_0: left promiscuous mode
[  372.870903][ T5719] hsr_slave_1: left promiscuous mode
[  372.873779][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.880693][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.885751][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.890843][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.909707][ T5719] veth1_macvtap: left promiscuous mode
[  372.911827][ T5719] veth0_macvtap: left promiscuous mode
[  372.914081][ T5719] veth1_vlan: left promiscuous mode
[  372.916670][ T5719] veth0_vlan: left promiscuous mode
[  373.522366][ T5719] team0 (unregistering): Port device team_slave_1 removed
[  373.554744][ T5719] team0 (unregistering): Port device team_slave_0 removed
[  373.895238][T11927] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  373.910857][T11930] netlink: 'syz.6.1812': attribute type 1 has an invalid length.
[  373.913958][T11930] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1812'.
[  374.037899][T11845] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  374.042818][T11845] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  374.053355][T11845] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  374.058393][T11845] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  374.188910][T11946] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  374.199772][T11845] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.224805][T11946] 8021q: adding VLAN 0 to HW filter on device bond1
[  374.269755][T11845] 8021q: adding VLAN 0 to HW filter on device team0
[  374.275064][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.277404][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.282881][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'.
[  374.285679][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.288258][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.461757][T11967] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  374.518211][T11975] netlink: 'syz.3.1823': attribute type 12 has an invalid length.
[  374.582329][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1825'.
[  374.593081][T11979] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1825'.
[  374.602916][T11845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.606076][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1825'.
[  374.621315][T11979] bond0: (slave wlan1): Releasing backup interface
[  374.630451][T11980] lo speed is unknown, defaulting to 1000
[  374.687434][ T5860] Bluetooth: hci1: command tx timeout
[  374.864439][T11845] veth0_vlan: entered promiscuous mode
[  374.874918][T11845] veth1_vlan: entered promiscuous mode
[  374.904869][T11845] veth0_macvtap: entered promiscuous mode
[  374.912104][T11845] veth1_macvtap: entered promiscuous mode
[  374.933695][T11845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.949752][T11845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.962620][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.966065][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.987482][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.992175][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.456524][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1827'.
[  375.461156][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1827'.
[  375.567328][T12004] netlink: 'syz.6.1829': attribute type 6 has an invalid length.
[  376.099724][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'.
[  376.505139][ T5915] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.148888][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1836'.
[  377.353453][T12042] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1840'.
[  377.398731][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.404740][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.408179][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.411287][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.413889][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.445173][T12043] lo speed is unknown, defaulting to 1000
[  377.593479][ T5915] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.790604][T12043] chnl_net:caif_netlink_parms(): no params data found
[  377.885147][T12043] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.888431][T12043] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.891266][T12043] bridge_slave_0: entered allmulticast mode
[  377.895134][T12043] bridge_slave_0: entered promiscuous mode
[  377.900137][T12043] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.902841][T12043] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.905777][T12043] bridge_slave_1: entered allmulticast mode
[  377.911795][T12043] bridge_slave_1: entered promiscuous mode
[  377.958840][ T5915] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.973711][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.982018][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.020247][T12043] team0: Port device team_slave_0 added
[  378.064159][ T5915] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.072556][T12043] team0: Port device team_slave_1 added
[  378.117807][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.120598][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.129644][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.137413][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.139666][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.148802][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.199945][T12043] hsr_slave_0: entered promiscuous mode
[  378.203144][T12043] hsr_slave_1: entered promiscuous mode
[  378.206037][T12043] debugfs: 'hsr0' already exists in 'hsr'
[  378.213381][T12043] Cannot create hsr debugfs directory
[  378.280782][ T5915] bridge_slave_1: left allmulticast mode
[  378.282761][ T5915] bridge_slave_1: left promiscuous mode
[  378.284743][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.311664][ T5915] bridge_slave_0: left allmulticast mode
[  378.313452][ T5915] bridge_slave_0: left promiscuous mode
[  378.316425][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.721520][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.729841][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.734676][ T5915] bond0 (unregistering): Released all slaves
[  378.759803][T12094] batadv_slave_0: entered promiscuous mode
[  378.980229][T12091] batadv_slave_0: left promiscuous mode
[  379.049058][ T5915] hsr_slave_0: left promiscuous mode
[  379.053317][ T5915] hsr_slave_1: left promiscuous mode
[  379.055501][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.059326][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.062434][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.065043][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.085451][ T5915] veth1_macvtap: left promiscuous mode
[  379.088204][ T5915] veth0_macvtap: left promiscuous mode
[  379.090411][ T5915] veth1_vlan: left promiscuous mode
[  379.092384][ T5915] veth0_vlan: left promiscuous mode
[  379.500410][ T5858] Bluetooth: hci1: command tx timeout
[  379.603456][ T5915] team0 (unregistering): Port device team_slave_1 removed
[  379.655258][ T5915] team0 (unregistering): Port device team_slave_0 removed
[  380.577024][T12043] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  380.590384][T12043] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  380.608837][T12043] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  380.621106][T12043] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  380.677404][T12141] pim6reg1: entered promiscuous mode
[  380.679543][T12141] pim6reg1: entered allmulticast mode
[  380.929895][T12043] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.948646][T12043] 8021q: adding VLAN 0 to HW filter on device team0
[  380.956068][T12146] __nla_validate_parse: 3 callbacks suppressed
[  380.956089][T12146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1864'.
[  380.967533][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.970361][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.010840][T12146] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.015273][T12146] team0: Port device bond2 added
[  381.567018][ T5858] Bluetooth: hci1: command tx timeout
[  383.602406][  T371] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.604738][  T371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.646927][ T5858] Bluetooth: hci1: command tx timeout
[  383.732950][T12156] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1866'.
[  383.830045][T12043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.872051][T12169] netlink: 'syz.6.1870': attribute type 14 has an invalid length.
[  384.040849][T12179] pim6reg1: entered promiscuous mode
[  384.042646][T12179] pim6reg1: entered allmulticast mode
[  384.048110][T12043] veth0_vlan: entered promiscuous mode
[  384.053777][T12043] veth1_vlan: entered promiscuous mode
[  384.091796][T12043] veth0_macvtap: entered promiscuous mode
[  384.096022][T12043] veth1_macvtap: entered promiscuous mode
[  384.119029][T12043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.128456][T12043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.145303][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.151914][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.163509][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.169210][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1872'.
[  384.177757][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.207073][T12179] 8021q: adding VLAN 0 to HW filter on device bond3
[  384.210884][T12179] team0: Port device bond3 added
[  384.251600][T12186] lo speed is unknown, defaulting to 1000
[  384.487846][T12190] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1876'.
[  384.681288][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1879'.
[  384.848023][T12207] batadv_slave_0: entered promiscuous mode
[  384.850577][T12207] batadv_slave_0: left promiscuous mode
[  385.122065][T12213] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  385.344560][ T5915] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.918047][ T5915] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.100635][T12227] netlink: 'syz.6.1886': attribute type 1 has an invalid length.
[  386.103442][T12227] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1886'.
[  386.134042][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1886'.
[  386.182968][T12231] batadv_slave_0: entered promiscuous mode
[  386.190140][T12230] batadv_slave_0: left promiscuous mode
[  386.321175][T12238] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1889'.
[  386.353461][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'.
[  386.387518][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.392542][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.396256][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.402185][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.405895][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.460492][ T5915] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.521282][T12243] lo speed is unknown, defaulting to 1000
[  386.611792][T12251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  386.651593][ T5915] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.813422][ T5915] bridge_slave_1: left allmulticast mode
[  386.815720][ T5915] bridge_slave_1: left promiscuous mode
[  386.822233][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.829088][ T5915] bridge_slave_0: left allmulticast mode
[  386.831388][ T5915] bridge_slave_0: left promiscuous mode
[  386.833806][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.212190][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1892'.
[  387.274087][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.285161][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.290569][ T5915] bond0 (unregistering): Released all slaves
[  387.461520][T12259] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1893'.
[  387.488252][T12259] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1893'.
[  387.494747][T12262] netlink: 'syz.3.1894': attribute type 1 has an invalid length.
[  387.503547][T12262] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1894'.
[  387.515259][T12243] chnl_net:caif_netlink_parms(): no params data found
[  387.736208][T12270] netlink: 'syz.6.1896': attribute type 10 has an invalid length.
[  387.776396][ T5915] hsr_slave_0: left promiscuous mode
[  387.778895][ T5915] hsr_slave_1: left promiscuous mode
[  387.781027][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.783481][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.808181][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.810790][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.857002][ T5915] veth1_macvtap: left promiscuous mode
[  387.859026][ T5915] veth0_macvtap: left promiscuous mode
[  387.860911][ T5915] veth1_vlan: left promiscuous mode
[  387.862660][ T5915] veth0_vlan: left promiscuous mode
[  387.890895][T12274] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  388.034334][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1900'.
[  388.204793][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'.
[  388.342729][ T5915] team0 (unregistering): Port device team_slave_1 removed
[  388.388714][ T5915] team0 (unregistering): Port device team_slave_0 removed
[  388.448159][ T5858] Bluetooth: hci1: command tx timeout
[  388.773434][T12274] vlan2: entered promiscuous mode
[  388.775179][T12274] gretap0: entered promiscuous mode
[  388.841373][T12243] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.843804][T12243] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.846374][T12243] bridge_slave_0: entered allmulticast mode
[  388.852823][T12243] bridge_slave_0: entered promiscuous mode
[  388.856238][T12243] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.861467][T12243] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.864630][T12243] bridge_slave_1: entered allmulticast mode
[  388.868879][T12243] bridge_slave_1: entered promiscuous mode
[  388.920659][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.929177][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.973024][T12243] team0: Port device team_slave_0 added
[  388.986433][T12243] team0: Port device team_slave_1 added
[  389.018971][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.021911][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.032877][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.041534][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.044810][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.056377][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.177891][   T25] block nbd4: Possible stuck request ffff8880226e0000: control (read@1024,1024B). Runtime 120 seconds
[  389.181321][   T25] block nbd4: Possible stuck request ffff8880226e0200: control (read@2048,1024B). Runtime 120 seconds
[  389.184698][   T25] block nbd4: Possible stuck request ffff8880226e0400: control (read@3072,1024B). Runtime 120 seconds
[  389.190245][   T25] block nbd4: Possible stuck request ffff8880226d8000: control (read@0,1024B). Runtime 120 seconds
[  389.345568][T12301] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  389.423937][T12243] hsr_slave_0: entered promiscuous mode
[  389.430973][T12243] hsr_slave_1: entered promiscuous mode
[  389.445189][T12307] netlink: 'syz.6.1905': attribute type 1 has an invalid length.
[  389.448006][T12307] netlink: 'syz.6.1905': attribute type 2 has an invalid length.
[  389.886372][T12243] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  389.906229][T12243] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  389.922991][T12243] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  389.930378][T12243] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  390.040765][T12243] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.055898][T12243] 8021q: adding VLAN 0 to HW filter on device team0
[  390.064406][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.067392][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.082519][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.084975][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.259617][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.421423][T12243] veth0_vlan: entered promiscuous mode
[  390.428530][T12243] veth1_vlan: entered promiscuous mode
[  390.448409][T12243] veth0_macvtap: entered promiscuous mode
[  390.453167][T12243] veth1_macvtap: entered promiscuous mode
[  390.467433][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.477996][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.486455][ T6947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.492593][ T6947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.498679][ T6947] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.502382][ T6947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.537354][ T5858] Bluetooth: hci1: command tx timeout
[  390.935481][T12364] netlink: 'syz.6.1917': attribute type 10 has an invalid length.
[  391.010280][T12368] netlink: 'syz.6.1919': attribute type 1 has an invalid length.
[  391.205623][T12380] __nla_validate_parse: 4 callbacks suppressed
[  391.205660][T12380] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1922'.
[  392.065311][T12384] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1923'.
[  392.082603][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'.
[  392.086272][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'.
[  392.314022][T12399] netlink: 'syz.6.1930': attribute type 4 has an invalid length.
[  392.339155][   T24] lo speed is unknown, defaulting to 1000
[  392.342026][T12399] netlink: 'syz.6.1930': attribute type 4 has an invalid length.
[  392.345356][   T24] syz0: Port: 1 Link DOWN
[  392.375288][ T5915] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.387298][   T24] lo speed is unknown, defaulting to 1000
[  392.395287][   T24] lo speed is unknown, defaulting to 1000
[  392.401223][   T24] syz0: Port: 1 Link ACTIVE
[  393.240900][T12403] netlink: 'syz.6.1932': attribute type 1 has an invalid length.
[  393.243477][T12403] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1932'.
[  393.503486][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.514037][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.517958][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.523862][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.532230][T12412] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1935'.
[  393.547734][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.590989][T12411] lo speed is unknown, defaulting to 1000
[  393.594642][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1937'.
[  393.598864][T12417] netlink: 'syz.6.1937': attribute type 8 has an invalid length.
[  393.664934][T12425] netlink: 'syz.3.1941': attribute type 10 has an invalid length.
[  393.914196][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1945'.
[  393.919409][ T5915] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.934207][T12411] chnl_net:caif_netlink_parms(): no params data found
[  394.022901][ T5915] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.052353][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'.
[  394.072351][T12455] team0: Port device bond2 removed
[  394.104941][ T5915] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.113483][T12455] team0: Mode changed to "broadcast"
[  394.116369][T12455] netlink: 'syz.3.1949': attribute type 16 has an invalid length.
[  394.117743][T12411] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.134928][T12411] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.139384][T12411] bridge_slave_0: entered allmulticast mode
[  394.147054][T12411] bridge_slave_0: entered promiscuous mode
[  394.157383][T12411] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.160331][T12411] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.163263][T12411] bridge_slave_1: entered allmulticast mode
[  394.177611][T12411] bridge_slave_1: entered promiscuous mode
[  394.196424][T12459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  394.233171][T12411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.265531][T12462] veth5: entered promiscuous mode
[  394.290141][T12411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.352131][T12411] team0: Port device team_slave_0 added
[  394.367467][T12411] team0: Port device team_slave_1 added
[  394.413718][ T5915] bridge_slave_1: left allmulticast mode
[  394.416189][ T5915] bridge_slave_1: left promiscuous mode
[  394.419661][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.425218][ T5915] bridge_slave_0: left allmulticast mode
[  394.428954][ T5915] bridge_slave_0: left promiscuous mode
[  394.431321][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.800964][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  394.805727][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.810451][ T5915] bond0 (unregistering): Released all slaves
[  394.820269][T12411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.822689][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.832303][T12411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.844537][T12411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.859815][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.873150][T12411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.960297][T12411] hsr_slave_0: entered promiscuous mode
[  394.963370][T12411] hsr_slave_1: entered promiscuous mode
[  394.966173][T12411] debugfs: 'hsr0' already exists in 'hsr'
[  394.968800][T12411] Cannot create hsr debugfs directory
[  395.129006][ T5915] hsr_slave_0: left promiscuous mode
[  395.133735][ T5915] hsr_slave_1: left promiscuous mode
[  395.139690][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.142123][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.145284][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.148927][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.180853][ T5915] veth1_macvtap: left promiscuous mode
[  395.183056][ T5915] veth0_macvtap: left promiscuous mode
[  395.185433][ T5915] veth1_vlan: left promiscuous mode
[  395.187439][ T5915] veth0_vlan: left promiscuous mode
[  395.567880][ T5858] Bluetooth: hci1: command tx timeout
[  395.650333][ T5915] team0 (unregistering): Port device team_slave_1 removed
[  395.694274][ T5915] team0 (unregistering): Port device team_slave_0 removed
[  396.272290][T12476] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  396.277348][T12476] netlink: 'syz.6.1956': attribute type 1 has an invalid length.
[  396.299774][T12476] 8021q: adding VLAN 0 to HW filter on device bond4
[  396.328645][T12476] vlan2: entered allmulticast mode
[  396.337102][T12476] macvtap0: entered allmulticast mode
[  396.501096][T12492] netlink: 'syz.6.1962': attribute type 13 has an invalid length.
[  396.503680][T12492] netlink: 'syz.6.1962': attribute type 17 has an invalid length.
[  396.521625][T12492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.546970][T12411] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  396.553112][T12411] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  396.558852][T12411] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  396.565397][T12411] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.639841][T12411] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.656347][T12411] 8021q: adding VLAN 0 to HW filter on device team0
[  396.663063][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.665808][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.679587][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.682425][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.859376][T12411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.873365][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'.
[  396.979927][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'.
[  397.033864][T12411] veth0_vlan: entered promiscuous mode
[  397.044998][T12411] veth1_vlan: entered promiscuous mode
[  397.082867][T12411] veth0_macvtap: entered promiscuous mode
[  397.090839][T12411] veth1_macvtap: entered promiscuous mode
[  397.104346][T12411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.112345][T12411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.125076][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.131018][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.137363][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.140676][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.168192][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'.
[  397.387509][T12541] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1972'.
[  398.075949][T12554] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1978'.
[  398.213247][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1980'.
[  398.526929][ T6921] wlan1: Trigger new scan to find an IBSS to join
[  398.529784][ T6921] ------------[ cut here ]------------
[  398.531585][ T6921] WARNING: CPU: 1 PID: 6921 at net/mac80211/scan.c:1235 ieee80211_request_ibss_scan+0x701/0x790
[  398.534712][ T6921] Modules linked in:
[  398.537058][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: kworker/u10:9 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  398.542805][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.546096][ T6921] Workqueue: events_unbound cfg80211_wiphy_work
[  398.548690][ T6921] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790
[  398.550815][ T6921] Code: e8 f4 3c d5 f6 eb 05 e8 ed 3c d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3c d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3c d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 78 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[  398.556840][ T6921] RSP: 0018:ffffc900066b7810 EFLAGS: 00010293
[  398.558756][ T6921] RAX: ffffffff8aea6ee0 RBX: 0000000000000000 RCX: ffff888107545640
[  398.561233][ T6921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  398.563694][ T6921] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000004
[  398.566251][ T6921] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88803e080e40
[  398.569265][ T6921] R13: ffff88803e084f78 R14: 0000000000000000 R15: ffff88803e080e80
[  398.572380][ T6921] FS:  0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  398.575728][ T6921] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.577949][ T6921] CR2: 0000200000c48030 CR3: 0000000125574000 CR4: 00000000000006f0
[  398.580433][ T6921] Call Trace:
[  398.581495][ T6921]  <TASK>
[  398.582502][ T6921]  ieee80211_ibss_work+0xdec/0x1060
[  398.584276][ T6921]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  398.586486][ T6921]  ? ieee80211_iface_work+0x1224/0x12d0
[  398.588282][ T6921]  ? rcu_is_watching+0x15/0xb0
[  398.589742][ T6921]  cfg80211_wiphy_work+0x2bb/0x470
[  398.591327][ T6921]  ? process_scheduled_works+0x9ef/0x17b0
[  398.593264][ T6921]  process_scheduled_works+0xae1/0x17b0
[  398.595500][ T6921]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.597986][ T6921]  worker_thread+0x8a0/0xda0
[  398.599721][ T6921]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.602137][ T6921]  ? __kthread_parkme+0x7b/0x200
[  398.604006][ T6921]  kthread+0x711/0x8a0
[  398.605588][ T6921]  ? __pfx_worker_thread+0x10/0x10
[  398.607506][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.608949][ T6921]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.610831][ T6921]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.612727][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.614473][ T6921]  ret_from_fork+0x3fc/0x770
[  398.615910][ T6921]  ? __pfx_ret_from_fork+0x10/0x10
[  398.617700][ T6921]  ? __switch_to_asm+0x39/0x70
[  398.619197][ T6921]  ? __switch_to_asm+0x33/0x70
[  398.621026][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.622873][ T6921]  ret_from_fork_asm+0x1a/0x30
[  398.624914][ T6921]  </TASK>
[  398.626307][ T6921] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  398.628703][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: kworker/u10:9 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  398.632600][ T6921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.636563][ T6921] Workqueue: events_unbound cfg80211_wiphy_work
[  398.639090][ T6921] Call Trace:
[  398.640601][ T6921]  <TASK>
[  398.641824][ T6921]  dump_stack_lvl+0x99/0x250
[  398.643734][ T6921]  ? __asan_memcpy+0x40/0x70
[  398.645642][ T6921]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.647463][ T6921]  ? __pfx__printk+0x10/0x10
[  398.648920][ T6921]  vpanic+0x281/0x750
[  398.650426][ T6921]  ? __pfx__printk+0x10/0x10
[  398.651870][ T6921]  ? __pfx_vpanic+0x10/0x10
[  398.653275][ T6921]  ? is_bpf_text_address+0x292/0x2b0
[  398.654944][ T6921]  panic+0xb9/0xc0
[  398.656174][ T6921]  ? __pfx_panic+0x10/0x10
[  398.657627][ T6921]  __warn+0x31b/0x4b0
[  398.658894][ T6921]  ? ieee80211_request_ibss_scan+0x701/0x790
[  398.660882][ T6921]  ? ieee80211_request_ibss_scan+0x701/0x790
[  398.662885][ T6921]  report_bug+0x2be/0x4f0
[  398.664463][ T6921]  ? ieee80211_request_ibss_scan+0x701/0x790
[  398.666400][ T6921]  ? ieee80211_request_ibss_scan+0x701/0x790
[  398.668206][ T6921]  ? ieee80211_request_ibss_scan+0x703/0x790
[  398.670068][ T6921]  handle_bug+0x84/0x160
[  398.671381][ T6921]  exc_invalid_op+0x1a/0x50
[  398.673126][ T6921]  asm_exc_invalid_op+0x1a/0x20
[  398.675110][ T6921] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790
[  398.677761][ T6921] Code: e8 f4 3c d5 f6 eb 05 e8 ed 3c d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3c d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3c d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 78 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[  398.684058][ T6921] RSP: 0018:ffffc900066b7810 EFLAGS: 00010293
[  398.685932][ T6921] RAX: ffffffff8aea6ee0 RBX: 0000000000000000 RCX: ffff888107545640
[  398.688425][ T6921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  398.691131][ T6921] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000004
[  398.694103][ T6921] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88803e080e40
[  398.696871][ T6921] R13: ffff88803e084f78 R14: 0000000000000000 R15: ffff88803e080e80
[  398.699496][ T6921]  ? ieee80211_request_ibss_scan+0x700/0x790
[  398.701387][ T6921]  ieee80211_ibss_work+0xdec/0x1060
[  398.703158][ T6921]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  398.705061][ T6921]  ? ieee80211_iface_work+0x1224/0x12d0
[  398.707067][ T6921]  ? rcu_is_watching+0x15/0xb0
[  398.708961][ T6921]  cfg80211_wiphy_work+0x2bb/0x470
[  398.710617][ T6921]  ? process_scheduled_works+0x9ef/0x17b0
[  398.712421][ T6921]  process_scheduled_works+0xae1/0x17b0
[  398.714211][ T6921]  ? __pfx_process_scheduled_works+0x10/0x10
[  398.716256][ T6921]  worker_thread+0x8a0/0xda0
[  398.717795][ T6921]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.719872][ T6921]  ? __kthread_parkme+0x7b/0x200
[  398.721482][ T6921]  kthread+0x711/0x8a0
[  398.723023][ T6921]  ? __pfx_worker_thread+0x10/0x10
[  398.724798][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.726430][ T6921]  ? _raw_spin_unlock_irq+0x23/0x50
[  398.728270][ T6921]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.730048][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.731613][ T6921]  ret_from_fork+0x3fc/0x770
[  398.733125][ T6921]  ? __pfx_ret_from_fork+0x10/0x10
[  398.734971][ T6921]  ? __switch_to_asm+0x39/0x70
[  398.736856][ T6921]  ? __switch_to_asm+0x33/0x70
[  398.738456][ T6921]  ? __pfx_kthread+0x10/0x10
[  398.739960][ T6921]  ret_from_fork_asm+0x1a/0x30
[  398.741489][ T6921]  </TASK>
[  398.743111][ T6921] Kernel Offset: disabled
[  398.744525][ T6921] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:46:32  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ae0273 RBX=0000000000000000 RCX=ffff888020890000 RDX=0000000000000100
RSI=ffffffff8be32660 RDI=ffff88801cb60d00 RBP=ffffc90000007518 RSP=ffffc90000007388
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=dffffc0000000000 R13=ffff888039afc4a0 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81ae0279 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f906be95800 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ecba8e37e8 CR3=000000010e14a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000077 RBX=0000000000000077 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900066b6fb0
R8 =ffff888021110237 R9 =1ffff11004222046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f7 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000c48030 CR3=0000000125574000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff09c587498 00007ff09c587470 XMM03=00007ff09c5874a8 00007ff09c5874a0
XMM04=00007ff09d0ed100 00007ff09c587460 XMM05=00007ff09c587478 00007ff09c5874c0
XMM06=00007ff09c5874b8 00007ff09c5874b0 XMM07=00007ff09c5874a8 00007ff09c5874a0
XMM08=0000000000000000 00007ff09c412ee7 XMM09=0000000000000000 00007ff09c412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
