last executing test programs:

1m26.280624291s ago: executing program 0 (id=111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) (async)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x69a41ac6277d32c1}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="147ae60002010500000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r8=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800a00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8b559aebd1bb8f0d}, 0x8c030) (async)
r9 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) (async)
bind$alg(r9, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) (async)
r11 = accept4(r9, 0x0, 0x0, 0x0)
recvmmsg(r11, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x20aa48251336d465}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1m26.230791122s ago: executing program 0 (id=112):
socketpair(0x2d, 0x5, 0x1, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8) (rerun: 64)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000300)={r2, 0x10, 0x4}, 0x8) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0)

1m26.120664605s ago: executing program 0 (id=114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0xa, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9c}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/1, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/176, 0xb0}], 0x8}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000500)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xb68d}], 0x9, 0x40002000, 0x0)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x18c, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x33c2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6ce2}, {0xc, 0x90, 0xfffffffffffffff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3b6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000000)=[{r0, 0x98}, {r0, 0x40}, {r0, 0x8000}, {r0, 0x108}, {r0, 0x803}, {r0}, {r0, 0x9010}, {r1, 0x40}, {r0, 0x9420}], 0x9, &(0x7f00000000c0)={r3, r4+10000000}, &(0x7f0000000100)={[0xed65]}, 0x8)

1m26.029617183s ago: executing program 0 (id=116):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r2, 0x50)
listen(r2, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040091}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x8044)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0002800500ff00000000000800074000000000"], 0x94}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a808020"], 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x23e6aeaf]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xb0}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0xf, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

1m25.962657016s ago: executing program 0 (id=117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x71d, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0xdf38347a7cae9d34)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)

1m25.949600319s ago: executing program 0 (id=120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="81c941f1f3843704b6", 0x9}, {0x0}], 0x2}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x34, 0x11, 0x3, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa0, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x1337}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0)

1m10.669013847s ago: executing program 32 (id=120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="81c941f1f3843704b6", 0x9}, {0x0}], 0x2}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x34, 0x11, 0x3, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa0, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x1337}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0)

1.427920085s ago: executing program 1 (id=1108):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB    \x00'}, 0x20)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x9, 0x6, 0x8, 0x2150, r0, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)
unshare(0x66000080)
r3 = socket(0x22, 0x2, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
recvmsg$unix(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x1)
ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000))

1.371653862s ago: executing program 2 (id=1109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000a6e48a5716f94a000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440e6ffffff0900010073797a3000000000080003400000000a140000001100010000000000020000000000000aa7b3329fab98ee6265613451d280e6ec0e869767fadd5309ed0b2689c37675c0a71918f41a1771c5f444b7155f8f"], 0x64}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x10)
getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f00000010c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})

1.231460812s ago: executing program 2 (id=1111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x94}}, 0x8004811)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x36})
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x40004)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="f82f19b8dd", 0x5}, {0x0}], 0x2}}], 0x1, 0x82)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000d0400"/20, @ANYRES32=r8, @ANYBLOB="00000000002101003c001280110001006272696467655f736c6176650000000024000580060002"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400000}, 0x1c)
setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/25, 0x19}, 0xdffffffd}], 0x1, 0x20, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000003c0)='vlan0\x00')
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYBLOB="320400000000000001080000000000000000c24b6b3409840cee4104c20400000005c20400000000a513bb67f4b4d83ee034d33bf2d8605fee05c7e67bee38cde2a1c375178cc80c2e69ba0cb30e0f93fa91fde093b2590a3916e367e6efe61dae2fc1e1f3a32f0d7162001c86419722acb2f3508b52a57cb2"], 0x28)

1.091622156s ago: executing program 1 (id=1112):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="b00000000001010400000000141a000002000010440001801400018008000100e000000108000200e00000012c00018014000300fc01000000000000000000000000000014000400ff0200000000000000000000000000013c0002802c000180140003040000000000000000000000000000000114000400fe8000000000000000000000000000bb0c00028005000100000000000800074000000001140016400000000200000003000000c300000003"], 0xb0}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
r4 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0xc, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f00000003c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000480)="26897d8c47a2b1e835", 0x9}, {&(0x7f00000004c0)="6adc59f0d066756e088878a8dca8596616f9363f1b3a70ab071e6b023f71530056c1eb1da4a1fd39a1fda5b82c9cfb4d47b5128ffd6eab7a491ad56abc5808437a7ad051da9f8536526a1988aea8", 0x4e}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f0000001300)=[{0xd0, 0x108, 0xf2, "46763c98da97b3a20def87b853f80e2395321082510fa64a60e043ae6378dd601089592b6f6fe4fd6994ae22bec55db08c041daf37738da0e1a93143f96c129d87824d72a9e48a895d9e917c4950c1bfd15cfc5e4e50dac5cd9f8e8b10e5d0cb2f2c43139d3063ad8888fc84dd42c63e2f2d7fbdb767e2a8404bddcfb92272000ff939e3196b3613266ffb7f51a7556aa585fac2d6bacc9e451dd02605c2f4391aaa156895b27d96eda3b4b78e1dfa31b4c7431c9e845da2c47df4dc86b962"}], 0xd0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="18240000", @ANYRES32, @ANYBLOB="00000000540b0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000000a50000006a21380110000000d32614c1333d10403566e9cc325c82050883e676d2fda3bceb2f1b34e69f98e484421745ff"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4dc2}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r6], 0x5c}, 0x1, 0xba01}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r8, 0x8943, &(0x7f0000000000))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)

569.456394ms ago: executing program 3 (id=1118):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x220080c8}, 0x20008850)
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x3, 0xc, 0x1400000, 0x0, 0x3, 0x2, 0x1, <r3=>0x0}, &(0x7f0000000080)=0x20)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x2}, 0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
r5 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
getpeername$netrom(r5, 0x0, 0x0)

489.525689ms ago: executing program 1 (id=1119):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x607d8000)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r2=>0x0, &(0x7f0000000880)=0x4)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='rdma.current\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xd, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdedf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffff24e}], &(0x7f0000000400)='GPL\x00', 0x4, 0xe8, &(0x7f0000000540)=""/232, 0x41000, 0x20, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x4, 0xe, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000940), &(0x7f0000000a00)=[{0x5, 0x1, 0x3, 0xb}, {0x2, 0x2, 0x3, 0xa}, {0x3, 0x2, 0x6, 0x3}, {0x3, 0x5, 0xd, 0x9}, {0x4, 0x1, 0xd, 0xb}], 0x10, 0xf}, 0x94)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$netlink(0x10, 0x3, 0x12)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r9 = accept(r6, &(0x7f0000000180)=@hci, &(0x7f0000000340)=0x80)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000000380)={0x1a}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r10}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r11}, 0x38)

421.594255ms ago: executing program 1 (id=1120):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000680)="5781939547b60384bb2176509508bda79c5fc20855d5b48ec43eeaddf7bd66643b0f043a211898742fde9610c617a9f3551fbd0c2227f89426fdf623f7752ddcf6a2367b2380de020186602c23a81187eec84fc968f91c67731c3e7488ccc4b1b4c70bb50b5b", 0x66}, {&(0x7f0000000700)="6ec6e0a8088614f4d2c8b31c16b325d73fb381c49ca65ba158c6c30f9b8f5d28677dd580e2ef7f654d6d6d752c0ea7f75696571fd5986eea461abf50e9422f30534963304518344171b1", 0x4a}, {&(0x7f0000000780)="7d18cd1a2a7cc292cd79b2ec667a1c1ab04884975d84ac3a21b37b8c5ee04f86d2b61d0315ef402a25f3b2095d97ecef28191d43c35e20cff94e2b7be79e0353c8e4e3e21e448a2f5a4048466c26f12ba37f4955aff99594641348af2aef7b107ee18fa6df6cb5feff7d039d7dd44a9b8cf257dfbb3031c3c478e983318f5568e4763c83497ed4d64cabeee612f48b3eb929bedf", 0x94}, {&(0x7f0000000840)="40f2bc7d511cda67a0b898c2ddcaf993906a129bf5be0cec5e1e013f92af0aeef24ee15d4884640e9ab3898dff33e33780c1863a430d6711212883e61158be0ada432629ef9ddccd400345e8e6977f79d51f048281f2cbcaca93b7c641c3da723f0e0ace2ae407b6858a78bc8e3f41f94e6191df30cdec408e329c5430e21aae4f5190bdf6b26493f8970edf343ce988c67776809e5203106d8b20e4", 0x9c}, {&(0x7f0000000900)="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", 0xfc}, {&(0x7f0000000a00)="bccc7745dcc4ed0cc7", 0x9}, {&(0x7f0000000a40)="82767ae089d2fa2f967d57bb047b57fcd37e51a5", 0x14}], 0x7)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0ff091f53614c6ce8ffa9411598641f7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x86, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8001)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20048054)
recvmmsg(r3, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000000240)=0x8000, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

371.777355ms ago: executing program 2 (id=1121):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001300)="d7b5576c8b", 0x5) (async)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001300)="d7b5576c8b", 0x5)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000015c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000001c0)="3cef1d0a6820c7ef6944cb4001f7ada0d59d2f7c27e34edde29340604211614c1ed8c2c920bb87450765b1dab085ecc7697abb88b75495d97e75a4fbea42e74e98463616617d7d4f38371728edf2f5469039cc2670861780b7b5582d2c9bf8398925b4b739a30208f60613b562e1eba2c59616c01d52213ded39aa43d7dbb54cabb6a0fcc40eadfcb8cb9d99650e28ec0395fc79008728b3200ae1c83f4046a5c1603656e8b4a7b92acc76c9", 0xac}, 0x1, 0x0, 0x0, 0x20008881}, 0x40809) (async)
sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000280)={&(0x7f00000001c0)="3cef1d0a6820c7ef6944cb4001f7ada0d59d2f7c27e34edde29340604211614c1ed8c2c920bb87450765b1dab085ecc7697abb88b75495d97e75a4fbea42e74e98463616617d7d4f38371728edf2f5469039cc2670861780b7b5582d2c9bf8398925b4b739a30208f60613b562e1eba2c59616c01d52213ded39aa43d7dbb54cabb6a0fcc40eadfcb8cb9d99650e28ec0395fc79008728b3200ae1c83f4046a5c1603656e8b4a7b92acc76c9", 0xac}, 0x1, 0x0, 0x0, 0x20008881}, 0x40809)
recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x12}], 0x1}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r4)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
socket(0xfb3ac36a7d872f63, 0x4, 0x5)

371.055342ms ago: executing program 1 (id=1122):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) (async)
socket$packet(0x11, 0x3, 0x300) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x200000}, 0x1c) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x40, 0xf380, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@end]}}}}}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='c ', @ANYRES32=r1], 0xa) (async)
sendmsg$nl_route_sched(r0, 0x0, 0x40) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async)
socket(0x1d, 0x2, 0x6)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cf", 0x8b}, {&(0x7f00000001c0)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e7ff02f7ca7eefba257aec7de6629f161bf3dcfe2b5c06245feab64407ddf6eb9e4e10cf50bbc30a028f2e79fd4a156c7a213ae", 0x67}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x1a8}], 0x1}}], 0x2, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x682, 0x4) (async)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

297.547852ms ago: executing program 1 (id=1123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)

296.534919ms ago: executing program 3 (id=1124):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000840)={0x0, 0xe1}, 0x8) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x4000000) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) (async)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0)
sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x69a41ac6277d32c1}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x9c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xee}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x62}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x80) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800a00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8b559aebd1bb8f0d}, 0x8c030) (async)
r11 = socket$alg(0x26, 0x5, 0x0) (async)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x4000}) (async)
r13 = accept4(r11, 0x0, 0x0, 0x0)
recvmmsg(r13, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000015c0)=""/133, 0x85}], 0x1}, 0xb}], 0x2, 0x60, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

210.231364ms ago: executing program 3 (id=1125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0x67, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0)

209.57249ms ago: executing program 2 (id=1126):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x5, 0x0, 0x0, 0xe, 0x3}, @fwd={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0xfffffffe}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a, 0x0, 0x0, 0x80000000}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="04002bbd7000fbdbdf2508000000540003800800010008000000080003000800000006000200ff0f0000080002000000400008000200ffffffff08000200030000000800010000000080080002000500000008000200020000000800020098a700002000028008000100050000000400040008000100040000000400040004000400180007800c00040005000000000000000800020005000000380007800c00040006000000000000000c000400ac140000000000000c000400060000000000000008000200400000000800020009000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0xb854729de3f59379)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x7}, 0x20)
sendto$inet6(r6, &(0x7f0000000000)="191435e1", 0x4, 0x2b5df04ed815cdf, &(0x7f000005ffe4)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, 'syz0\x00', @null, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet(0x2, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

151.089203ms ago: executing program 3 (id=1127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x1, 0x1, [@empty]}, 0x14)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x20000044)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x103}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x5)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x9, 0x24, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35efc0a5, 0x0, 0x0, 0x0, 0x70}, {}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x4c3b, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x4, 0x0, 0xbb5, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001800)=[{0x5, 0x4, 0x10, 0xa}, {0x2, 0x1, 0xb, 0x5}, {0x3, 0x1, 0x10, 0x3}, {0x1, 0x4, 0xc, 0x8}, {0x2, 0x2, 0x4, 0xb}, {0x4, 0x4, 0xc, 0xb}, {0x0, 0x1, 0x7, 0x3}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0x4e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000000400)='xprtrdma_reply\x00', r9, 0x0, 0x47a}, 0x18)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={<r10=>r8, 0x39, 0x8, 0x1, 0xb, 0x2}, &(0x7f0000000140)=0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@null, 0x4, 'vlan1\x00'})
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000bc3f4b040000000000000000694ebd2c837dbf240191e55dad487a800000a4921aea1a6431478aed878faccd8395d8200c5843e7ee01fe4d5452ae3b628948a40e4671e6aa7dbcb16da8f2446b6f6e36be79a9a40c96c0accc0da8ad9b", @ANYRES32=0x0, @ANYBLOB="6a58000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
sendmsg$nl_route(r11, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xbc, 0x18, 0x10, 0x70bd29, 0x25dfdbfc, {0x1c, 0x80, 0x1fbe864fed8248c0, 0x3, 0x0, 0x0, 0x37, 0x7, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0x101}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xdd}, {0x9}, {0x7f, 0x0, 0x1}, {0xba7}, {0x8, 0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0xffff, 0x0, 0x1}, {0x7}, {0x8}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xd9ca}, {0xa, 0x0, 0x1}, {0xb5, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x3}, {0x595, 0x0, 0x1}, {0x9}, {0x7f, 0x0, 0x1}, {0x4}, {0x8}]}, @RTA_VIA={0x14, 0x12, {0x8, "ede3e03959b297e3323ce368c2f8"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000804}, 0x49643dea468762d3)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001880)={r10, 0x0, 0x100, 0x40, 0x222, 0xffffff80}, 0x14)

71.577146ms ago: executing program 2 (id=1128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2=0xac141400}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xdc}}, 0x0)

824.028µs ago: executing program 3 (id=1129):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x401, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES64=r0, @ANYRESDEC=r1], 0x94}, 0x1, 0x0, 0x0, 0x20044000}, 0x8801) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffe, 0x10000, 0xfffffffe}, 0x1c) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000201054ccbdbd20ec03c9caff5eab91187958fc7bade296c4595b358de56585b4de172d459c688cf18591877c310b431e7249d3d88078248002845433158abb5c35f9de22553793fabc2dde39de06c2a3e747a733e483e676d98cb0c3f7488c87a11d7156356dbe456040d4b4cbeda15fc5fe18c1f7e9dc73a1206131b7b7f883ff5eee99bea3397bde697b5083079ec8d610c02a5e1705be8dd33c9ab9e3191bf4d37b560e33dc5"], 0x14}, 0x1, 0x0, 0x0, 0x38c5}, 0x4040040) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6b4f03, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000f99b583591f2e0dd1ba364bdb9a79fa474afd3a3e590bf045f120e99deaa219f59b47284f328109bc938193bef4839538d0456a5", @ANYRES16=0x0, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x24000020) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async)
ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r9)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010226bd7000feffffff0300260008000400ac14143114000600730000001400070000000000000000000000ffff7f00000108000500e0000002"], 0x4c}, 0x8, 0x3000000000002}, 0x844)

436.717µs ago: executing program 2 (id=1130):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000900)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="83", 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x800a, 0x0, 0x0, 0x0, 0x0, 0x10000}}], 0x30}, {&(0x7f0000000380)=@in={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="c35488cec5f2875e0297a53da56dfe340fd90e773f51711817d4412266dcea42f925cdea74abb7e5c412e10040d632f8225f5b2c09451aabbd69c2d4d77771989081c6d8ad8e26423501a90af6ee02272336edd39afa0e055b2236937cf40ce762e74bfc78023f402439a89c32124012e3cfaade5002fe36355bf3838aa1df62ebea018e054865223df06275226a71a15c17", 0x92}, {&(0x7f00000003c0)="e275880a8c6c21a22d1e6ec72abe33d339", 0x11}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f00000005c0)="34dfed270bbed002d5388a6e83261e6b6d4f701fd3767aba505594a46eefa3e39efab759611bf2d23af3d0509c6d0785ade15317815a60d178f90186e949d95cb403680bd8830d4bdf53da5c29ae85e309268bf4f6db3dda67a90639d9160d908997ac6a13e8c178a3785d57ec862cfb6f030d5890dce52e5d24b42e1a4393409bf9d25a150e054a8dc411f39919a090dc18d676e9a6627af85a45a4ac1658a838ed271fc730c81c00ee732ecfcdd98de1599ad5b8bcfc06c1fa080a37392c26c6d9c69d910deb683e9e19396e8052f630e6430f2986acfe0276229486a4e4c418da0f2ece158d402116f49f3b061b", 0xef}, {&(0x7f0000000480)="fac07b985938a108da30784064f71d5ba0a479dfc4b79e63358f7c1b2bd67cd8e2547245075cc701864d940ed91906620dff000000000000000000", 0x3b}], 0x5}], 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, [@remote, @multicast1, @local, @multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @local]}, 0x30)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0)
unshare(0x28040680)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200))
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000050000000000020000000900020073797a310000000005000100070000002c000780180001801400024020010000000000000000000000000002060004404e1f00000500070088000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT=r3], 0x14b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
socket$kcm(0x10, 0x2, 0x10)

0s ago: executing program 3 (id=1131):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@default, @null})
socket$inet6_sctp(0xa, 0x2, 0x84)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept$alg(r5, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22165' (ED25519) to the list of known hosts.
syzkaller login: [   49.111110][ T5803] cgroup: Unknown subsys name 'net'
[   49.236287][ T5803] cgroup: Unknown subsys name 'cpuset'
[   49.241988][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.798845][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.847819][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.850838][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.854026][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.857812][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.860808][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.881105][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.884672][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.888989][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.892733][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.896129][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.954014][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.957885][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.960519][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.972853][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.975279][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.238182][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.280639][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.318869][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.376674][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.379506][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.381958][ T5841] bridge_slave_0: entered allmulticast mode
[   55.385615][ T5841] bridge_slave_0: entered promiscuous mode
[   55.419326][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.422758][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.425887][ T5841] bridge_slave_1: entered allmulticast mode
[   55.429578][ T5841] bridge_slave_1: entered promiscuous mode
[   55.485745][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.489120][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.491782][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.495773][ T5849] bridge_slave_0: entered allmulticast mode
[   55.498965][ T5849] bridge_slave_0: entered promiscuous mode
[   55.517616][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.520834][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.523832][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.526741][ T5849] bridge_slave_1: entered allmulticast mode
[   55.530349][ T5849] bridge_slave_1: entered promiscuous mode
[   55.534369][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.537396][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.540471][ T5845] bridge_slave_0: entered allmulticast mode
[   55.544835][ T5845] bridge_slave_0: entered promiscuous mode
[   55.548974][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.551829][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.555647][ T5845] bridge_slave_1: entered allmulticast mode
[   55.559547][ T5845] bridge_slave_1: entered promiscuous mode
[   55.627937][ T5841] team0: Port device team_slave_0 added
[   55.635339][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.652113][ T5841] team0: Port device team_slave_1 added
[   55.668023][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.674539][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.715748][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.720178][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.724358][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.735604][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.742929][ T5849] team0: Port device team_slave_0 added
[   55.758749][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.761692][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.773760][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.778982][ T5849] team0: Port device team_slave_1 added
[   55.796091][ T5845] team0: Port device team_slave_0 added
[   55.799474][ T5845] team0: Port device team_slave_1 added
[   55.826497][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.829084][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.838771][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.856317][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.858655][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.867550][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.884184][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.887091][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.898646][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.919459][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.922827][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.933980][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.948698][ T5841] hsr_slave_0: entered promiscuous mode
[   55.951467][ T5841] hsr_slave_1: entered promiscuous mode
[   56.020879][ T5849] hsr_slave_0: entered promiscuous mode
[   56.024706][ T5849] hsr_slave_1: entered promiscuous mode
[   56.026793][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.028781][ T5849] Cannot create hsr debugfs directory
[   56.036412][ T5845] hsr_slave_0: entered promiscuous mode
[   56.038904][ T5845] hsr_slave_1: entered promiscuous mode
[   56.041510][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.043751][ T5845] Cannot create hsr debugfs directory
[   56.334365][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.356788][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.379548][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.395721][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.405466][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.420712][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.434838][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.451021][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.501228][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.507706][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.531330][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.539754][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.637334][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.648690][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.670981][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.689097][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.692420][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.705500][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.710093][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.712554][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.723432][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.740643][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.746730][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.749667][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.773216][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.775694][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.779769][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.782162][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.796582][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.799671][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.852273][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.883637][ T5235] Bluetooth: hci0: command tx timeout
[   56.962973][ T5235] Bluetooth: hci1: command tx timeout
[   56.986247][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.024936][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.034244][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.042884][ T5235] Bluetooth: hci2: command tx timeout
[   57.060673][ T5841] veth0_vlan: entered promiscuous mode
[   57.084683][ T5841] veth1_vlan: entered promiscuous mode
[   57.106192][ T5845] veth0_vlan: entered promiscuous mode
[   57.116413][ T5845] veth1_vlan: entered promiscuous mode
[   57.145234][ T5841] veth0_macvtap: entered promiscuous mode
[   57.152148][ T5841] veth1_macvtap: entered promiscuous mode
[   57.159803][ T5849] veth0_vlan: entered promiscuous mode
[   57.170934][ T5845] veth0_macvtap: entered promiscuous mode
[   57.177119][ T5849] veth1_vlan: entered promiscuous mode
[   57.181223][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.191270][ T5845] veth1_macvtap: entered promiscuous mode
[   57.201217][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.228215][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.234168][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.237394][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.240627][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.246412][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.265014][ T5849] veth0_macvtap: entered promiscuous mode
[   57.270554][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.284115][ T5849] veth1_macvtap: entered promiscuous mode
[   57.297924][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.326024][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.329375][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.340338][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.347982][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.375246][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.390254][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.395878][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.407278][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.417506][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.440422][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.446462][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.477114][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.481565][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.525572][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.534876][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.557458][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.560157][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.564165][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.583424][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.586092][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.617133][ T3672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.619915][ T3672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.736130][ T5914] netlink: 'syz.1.4': attribute type 1 has an invalid length.
[   57.736603][ T5915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.739325][ T5914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.747655][ T5916] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.751935][ T5914] netlink: del zone limit has 4 unknown bytes
[   57.753347][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.897200][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   57.911251][ T5927] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   57.919484][ T5927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.944510][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.948909][ T5931] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.002032][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.015247][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.062172][ T5941] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   58.062821][ T5939] IPVS: stopping backup sync thread 5941 ...
[   58.068759][ T5943] netlink: 'syz.1.12': attribute type 8 has an invalid length.
[   58.075670][ T5945] Zero length message leads to an empty skb
[   58.251267][ T5963] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   58.253112][ T5961] IPVS: stopping backup sync thread 5963 ...
[   58.866824][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.963625][ T5235] Bluetooth: hci0: command tx timeout
[   59.042560][ T5235] Bluetooth: hci1: command tx timeout
[   59.084985][ T5995] netlink: 'syz.1.27': attribute type 2 has an invalid length.
[   59.123445][   T55] Bluetooth: hci2: command tx timeout
[   59.128400][ T5997] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET)
[   59.235835][ T6006] netlink: 'syz.0.29': attribute type 2 has an invalid length.
[   59.527800][ T6020] netlink: 'syz.0.35': attribute type 4 has an invalid length.
[   59.753250][ T6027] netlink: 'syz.2.38': attribute type 3 has an invalid length.
[   60.160874][ T6048] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   60.172773][ T6045] IPVS: stopping backup sync thread 6048 ...
[   60.469876][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.473361][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.596222][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.606965][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.790825][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.795437][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.798595][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.801757][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.872201][ T6068] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   60.874046][ T6067] IPVS: stopping backup sync thread 6068 ...
[   61.043696][   T55] Bluetooth: hci0: command tx timeout
[   61.122606][   T55] Bluetooth: hci1: command tx timeout
[   61.143555][ T6080] syz.1.50 (6080) used greatest stack depth: 19960 bytes left
[   61.202858][   T55] Bluetooth: hci2: command 0x040f tx timeout
[   61.315376][ T6098] IPVS: set_ctl: invalid protocol: 39684 172.20.20.28:0
[   61.763692][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   61.768143][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   61.802643][ T5868] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   62.003488][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   62.151640][ T6160] netlink: 'syz.1.72': attribute type 21 has an invalid length.
[   62.165965][ T6160] netlink: 'syz.1.72': attribute type 6 has an invalid length.
[   62.240008][ T6171] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   62.265464][ T6171] team0: Port device netdevsim0 added
[   62.344009][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   62.389796][ T6184] netlink: zone id is out of range
[   62.391893][ T6184] netlink: zone id is out of range
[   62.395355][ T6184] netlink: zone id is out of range
[   62.397424][ T6184] netlink: zone id is out of range
[   62.399589][ T6184] netlink: zone id is out of range
[   62.401708][ T6184] netlink: zone id is out of range
[   62.412749][ T6184] netlink: zone id is out of range
[   62.414935][ T6184] netlink: zone id is out of range
[   62.417113][ T6184] netlink: zone id is out of range
[   62.774998][ T6213] __nla_validate_parse: 40 callbacks suppressed
[   62.775012][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   62.990082][ T6231] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.004653][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   63.081271][ T6238] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   63.081314][ T6234] IPVS: stopping backup sync thread 6238 ...
[   63.105181][ T6234] netlink: 260 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.124789][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.128469][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.134012][ T5235] Bluetooth: hci0: command tx timeout
[   63.202611][ T5235] Bluetooth: hci1: command tx timeout
[   63.229276][ T6243] netlink: 92 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.238725][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.282932][ T5235] Bluetooth: hci2: command 0x040f tx timeout
[   63.348396][ T6245] netlink: 11 bytes leftover after parsing attributes in process `syz.2.100'.
[   63.348403][ T6246] netlink: 11 bytes leftover after parsing attributes in process `syz.2.100'.
[   63.373309][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.406327][ T6258] veth3: entered promiscuous mode
[   63.412023][ T6258] bond0: (slave veth3): Enslaving as an active interface with an up link
[   63.419032][ T6258] bridge_slave_0: left allmulticast mode
[   63.424486][ T6258] bridge_slave_0: left promiscuous mode
[   63.426495][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.433911][ T6258] bridge_slave_1: left allmulticast mode
[   63.437954][ T6258] bridge_slave_1: left promiscuous mode
[   63.439926][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.452761][ T6258] bond0: (slave bond_slave_0): Releasing backup interface
[   63.458706][ T6258] bond0: (slave bond_slave_1): Releasing backup interface
[   63.467111][ T6258] team0: Port device team_slave_0 removed
[   63.471083][ T6258] team0: Port device team_slave_1 removed
[   63.476995][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.484006][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.487849][ T6258] bond0: (slave veth3): Releasing backup interface
[   63.523724][ T5868] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   63.553419][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   63.698078][ T6286] validate_nla: 1 callbacks suppressed
[   63.698093][ T6286] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   63.702043][ T6292] netlink: 'syz.0.112': attribute type 6 has an invalid length.
[   63.709674][ T6292] netlink: 'syz.0.112': attribute type 4 has an invalid length.
[   63.989868][ T6309] netlink: 'syz.0.120': attribute type 13 has an invalid length.
[   64.052914][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   64.244093][ T6328] netlink: 'syz.2.126': attribute type 4 has an invalid length.
[   64.251935][ T6328] netlink: 'syz.2.126': attribute type 4 has an invalid length.
[   64.361948][ T6332] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   65.366083][ T5235] Bluetooth: hci2: command 0x040f tx timeout
[   65.922563][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   66.064403][ T5868] IPVS: starting estimator thread 0...
[   66.152444][ T6384] IPVS: using max 47 ests per chain, 112800 per kthread
[   66.309306][ T6396] net_ratelimit: 4 callbacks suppressed
[   66.309316][ T6396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.519176][ T6411] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   66.521741][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.566678][ T6473] netlink: 'syz.2.148': attribute type 21 has an invalid length.
[   67.584918][ T6473] netlink: 'syz.2.148': attribute type 6 has an invalid length.
[   67.731080][ T6500] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   67.835962][ T6509] __nla_validate_parse: 35 callbacks suppressed
[   67.835977][ T6509] netlink: 200 bytes leftover after parsing attributes in process `syz.2.153'.
[   67.846349][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[   67.931560][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[   68.096953][ T6539] netlink: 'syz.2.157': attribute type 4 has an invalid length.
[   68.175829][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   68.217901][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'.
[   68.225333][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'.
[   68.229041][ T6545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[   68.255457][ T6547] netlink: 120 bytes leftover after parsing attributes in process `syz.1.160'.
[   68.326889][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   68.605522][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'.
[   69.508021][ T6571] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   69.510261][ T6571] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   69.608437][ T6599] netlink: 'syz.1.177': attribute type 5 has an invalid length.
[   69.846440][ T6611] netlink: 'syz.1.181': attribute type 10 has an invalid length.
[   69.850890][ T6611] team0: Port device netdevsim0 added
[   70.169288][ T5908] IPVS: starting estimator thread 0...
[   70.283870][ T6619] IPVS: using max 46 ests per chain, 110400 per kthread
[   70.663447][ T6627] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.684086][ T6627] bond_slave_0: entered promiscuous mode
[   70.686468][ T6627] bond_slave_1: entered promiscuous mode
[   70.689236][ T6627] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.694893][ T6627] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   70.710474][ T6627] bridge_slave_0: left allmulticast mode
[   70.714634][ T6627] bridge_slave_0: left promiscuous mode
[   70.717237][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.727837][ T6627] bridge_slave_1: left allmulticast mode
[   70.730011][ T6627] bridge_slave_1: left promiscuous mode
[   70.732263][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.741966][ T6627] bond0: (slave bond_slave_0): Releasing backup interface
[   70.747509][ T6627] bond_slave_0: left promiscuous mode
[   70.764744][ T6627] bond0: (slave bond_slave_1): Releasing backup interface
[   70.771619][ T6627] bond_slave_1: left promiscuous mode
[   70.781416][ T6627] team0: Port device team_slave_0 removed
[   70.790299][ T6627] team0: Port device team_slave_1 removed
[   70.794944][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.797875][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.801889][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.805252][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.818133][ T6627] team0: Port device netdevsim0 removed
[   70.823215][ T6627] bond1: (slave macvlan2): Removing an active aggregator
[   70.826397][ T6627] bond1: (slave macvlan2): Releasing backup interface
[   71.134616][ T6643] team0: Port device netdevsim0 removed
[   71.174733][ T5868] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   71.278698][ T6657] team_slave_1: mtu less than device minimum
[   71.367101][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.370467][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.532584][ T5868] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   72.188753][ T6688] tipc: Started in network mode
[   72.191680][ T6688] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[   72.196718][ T6688] tipc: Enabled bearer <eth:bridge0>, priority 0
[   72.716390][ T6704] netlink: 'syz.1.209': attribute type 4 has an invalid length.
[   72.724644][ T6704] netlink: 'syz.1.209': attribute type 4 has an invalid length.
[   72.991372][ T6722] __nla_validate_parse: 30 callbacks suppressed
[   72.991386][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.000971][ T6724] netlink: 92 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.008490][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.013633][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.017463][ T6722] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   73.020742][ T6722] netlink: 10 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.025274][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[   73.028285][ T6726] netlink: 84 bytes leftover after parsing attributes in process `syz.1.216'.
[   73.141204][ T6732] netlink: 200 bytes leftover after parsing attributes in process `syz.2.217'.
[   73.145432][ T6731] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.218'.
[   73.155337][ T6731] netlink: 104 bytes leftover after parsing attributes in process `syz.1.218'.
[   73.288960][ T6738] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.314486][   T47] tipc: Node number set to 10922666
[   73.420747][ T6742] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   73.448369][ T6742] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   73.456433][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   73.461796][ T6742] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.496675][ T6742] veth3: entered promiscuous mode
[   73.501822][ T6742] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   73.511670][ T6742] tipc: Resetting bearer <eth:bridge0>
[   73.530298][ T6742] bond2: (slave ip6gretap1): Removing an active aggregator
[   73.536552][ T6742] bond2: (slave ip6gretap1): Releasing backup interface
[   73.539371][ T6742] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 6e:b9:ad:9f:7c:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   73.559919][ T6742] bond2: (slave veth3): Releasing backup interface
[   73.618860][ T6756] netlink: 'syz.2.227': attribute type 11 has an invalid length.
[   73.932484][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   74.025197][ T6797] IPv6: Can't replace route, no match found
[   74.027872][ T6798] IPv6: Can't replace route, no match found
[   74.310017][ T6821] IPVS: stopping backup sync thread 6500 ...
[   74.572042][ T6837] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   74.576466][ T6836] IPVS: stopping backup sync thread 6837 ...
[   74.620954][ T6839] netlink: 'syz.2.255': attribute type 2 has an invalid length.
[   75.140325][ T6854] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   75.785588][ T6870] _Z`Ԁ@: entered promiscuous mode
[   75.796800][ T6870] netlink: 'syz.2.265': attribute type 4 has an invalid length.
[   75.806903][ T6870] netlink: 'syz.2.265': attribute type 4 has an invalid length.
[   76.146266][ T6888] netlink: 'syz.1.271': attribute type 4 has an invalid length.
[   76.151219][ T6888] netlink: 'syz.1.271': attribute type 4 has an invalid length.
[   76.260271][ T6896] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   76.370266][ T6902] veth5: entered promiscuous mode
[   76.423063][  T972] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   76.909327][ T6913] netlink: 'syz.1.278': attribute type 13 has an invalid length.
[   76.912613][ T6913] netlink: 'syz.1.278': attribute type 17 has an invalid length.
[   76.957648][ T6913] 8021q: adding VLAN 0 to HW filter on device team0
[   76.964660][ T6913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.968688][ T6918] netlink: 'syz.2.279': attribute type 1 has an invalid length.
[   76.975605][ T6913] syz.1.278 (6913) used greatest stack depth: 19224 bytes left
[   76.997668][ T6919] bond3: (slave geneve2): making interface the new active one
[   77.000883][ T6919] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   77.005162][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   77.010102][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   77.017026][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   77.020898][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   77.442454][   T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   78.024307][ T6962] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   78.028530][ T6961] __nla_validate_parse: 42 callbacks suppressed
[   78.028538][ T6961] netlink: 260 bytes leftover after parsing attributes in process `syz.2.290'.
[   78.043763][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'.
[   78.046999][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.290'.
[   78.065745][ T6965] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   78.069211][ T6964] IPVS: stopping backup sync thread 6965 ...
[   78.072592][ T6964] netlink: 260 bytes leftover after parsing attributes in process `syz.1.292'.
[   78.079914][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'.
[   78.083680][ T6964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.292'.
[   78.150002][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'.
[   78.150484][ T6967] netlink: 224 bytes leftover after parsing attributes in process `syz.1.293'.
[   78.160239][ T6967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.293'.
[   78.170078][ T6967] netlink: 112 bytes leftover after parsing attributes in process `syz.1.293'.
[   78.325736][ T6971] tipc: Started in network mode
[   78.327865][ T6971] tipc: Node identity ca6bff797842, cluster identity 4711
[   78.343168][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.346670][ T6971] syzkaller0: entered promiscuous mode
[   78.349017][ T6971] syzkaller0: entered allmulticast mode
[   78.430429][ T6970] tipc: Resetting bearer <eth:syzkaller0>
[   78.441722][ T6970] tipc: Disabling bearer <eth:syzkaller0>
[   79.368872][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.374059][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.377990][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.383214][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.386817][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.584134][ T7001] chnl_net:caif_netlink_parms(): no params data found
[   79.770620][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.776165][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.779166][ T7001] bridge_slave_0: entered allmulticast mode
[   79.781889][ T7001] bridge_slave_0: entered promiscuous mode
[   79.786698][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.789201][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.791585][ T7001] bridge_slave_1: entered allmulticast mode
[   79.797701][ T7001] bridge_slave_1: entered promiscuous mode
[   79.836764][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.844482][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.895738][ T7001] team0: Port device team_slave_0 added
[   79.899681][ T7001] team0: Port device team_slave_1 added
[   79.919148][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.922067][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.932222][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.936649][ T7047] validate_nla: 4 callbacks suppressed
[   79.936657][ T7047] netlink: 'syz.2.313': attribute type 1 has an invalid length.
[   79.940979][ T7047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.946430][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.948750][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.959561][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.023822][ T7001] hsr_slave_0: entered promiscuous mode
[   80.028842][ T7001] hsr_slave_1: entered promiscuous mode
[   80.039325][ T7001] debugfs: 'hsr0' already exists in 'hsr'
[   80.041802][ T7001] Cannot create hsr debugfs directory
[   80.167645][ T7001] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.173709][ T7001] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.179275][ T7001] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.185203][ T7001] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.206407][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.208770][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.211226][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.213638][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.254778][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.266958][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.270313][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.299030][ T7001] 8021q: adding VLAN 0 to HW filter on device team0
[   80.313313][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.316048][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.329870][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.333066][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.487887][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.543924][ T7001] veth0_vlan: entered promiscuous mode
[   80.559496][ T7001] veth1_vlan: entered promiscuous mode
[   80.600390][ T7001] veth0_macvtap: entered promiscuous mode
[   80.608079][ T7001] veth1_macvtap: entered promiscuous mode
[   80.622061][ T7116] tipc: Resetting bearer <eth:bridge0>
[   80.634491][ T7116] bond3: (slave geneve2): Releasing active interface
[   80.645014][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.649419][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.653782][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.657365][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.664408][ T7116] vlan0: entered promiscuous mode
[   80.674748][ T7116] team0: Port device vlan0 added
[   80.678193][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.683699][ T7116] tipc: Enabled bearer <eth:team0>, priority 0
[   80.692036][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.703977][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.709527][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.721887][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.726235][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.801821][ T7125] Bluetooth: MGMT ver 1.23
[   80.819470][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.826204][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.857755][ T7128] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   80.857862][ T7127] IPVS: stopping backup sync thread 7128 ...
[   80.864698][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.869585][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.961372][ T7134] netlink: 'syz.1.334': attribute type 2 has an invalid length.
[   81.047391][ T7144] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   81.047589][ T7143] IPVS: stopping backup sync thread 7144 ...
[   81.120282][ T7146] netlink: 'syz.1.338': attribute type 1 has an invalid length.
[   81.210746][ T7150] IPVS: stopping backup sync thread 7152 ...
[   81.213858][ T7152] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   81.219035][ T7153] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   81.224506][ T7149] IPVS: Unknown mcast interface: 
[   81.227347][ T7149] IPVS: Unknown mcast interface: 
[   81.229865][ T7149] IPVS: Unknown mcast interface: 
[   81.232143][ T7149] IPVS: Unknown mcast interface: 
[   81.235223][ T7149] IPVS: Unknown mcast interface: 
[   81.237495][ T7149] IPVS: Unknown mcast interface: 
[   81.239752][ T7149] IPVS: Unknown mcast interface: 
[   81.242056][ T7149] IPVS: Unknown mcast interface: 
[   81.246366][ T7149] IPVS: Unknown mcast interface: 
[   81.248533][ T7149] IPVS: Unknown mcast interface: 
[   81.250706][ T7149] IPVS: Unknown mcast interface: 
[   81.253518][ T7149] IPVS: Unknown mcast interface: 
[   81.255909][ T7149] IPVS: Unknown mcast interface: 
[   81.258050][ T7149] IPVS: Unknown mcast interface: 
[   81.260140][ T7149] IPVS: Unknown mcast interface: 
[   81.262568][ T7149] IPVS: Unknown mcast interface: 
[   81.265241][ T7149] IPVS: Unknown mcast interface: 
[   81.267620][ T7149] IPVS: Unknown mcast interface: 
[   81.269877][ T7149] IPVS: Unknown mcast interface: 
[   81.272087][ T7149] IPVS: Unknown mcast interface: 
[   81.274897][ T7149] IPVS: Unknown mcast interface: 
[   81.310551][ T7155] netlink: 'syz.1.340': attribute type 49 has an invalid length.
[   81.316895][ T7155] netlink: 'syz.1.340': attribute type 2 has an invalid length.
[   81.442734][ T5235] Bluetooth: hci3: command tx timeout
[   81.604508][  T791] cfg80211: failed to load regulatory.db
[   82.041863][ T7194] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   82.048775][ T7193] IPVS: stopping backup sync thread 7194 ...
[   82.867466][ T7243] Bluetooth: MGMT ver 1.23
[   82.872199][ T7243] sock: sock_timestamping_bind_phc: sock not bind to device
[   83.209554][ T7276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.413504][ T7283] __nla_validate_parse: 48 callbacks suppressed
[   83.413518][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'.
[   83.414580][ T7282] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   83.416544][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'.
[   83.419336][ T5880] IPVS: starting estimator thread 0...
[   83.424616][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.374'.
[   83.513870][ T7284] IPVS: using max 80 ests per chain, 192000 per kthread
[   83.532508][ T5235] Bluetooth: hci3: command tx timeout
[   83.585069][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'.
[   83.592981][ T7292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'.
[   83.596761][ T7292] netlink: 'syz.3.378': attribute type 3 has an invalid length.
[   83.644782][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'.
[   83.649239][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'.
[   83.745499][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'.
[   83.783810][ T7307] bridge_slave_0: left allmulticast mode
[   83.789061][ T7307] bridge_slave_0: left promiscuous mode
[   83.791649][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.800748][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   83.817920][ T7307] bridge_slave_1: left allmulticast mode
[   83.823869][ T7307] bridge_slave_1: left promiscuous mode
[   83.828048][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.854824][ T7307] bond0: (slave bond_slave_0): Releasing backup interface
[   83.869213][ T7307] bond0: (slave bond_slave_1): Releasing backup interface
[   83.891979][ T7307] team0: Port device team_slave_0 removed
[   83.914525][ T7307] team0: Port device team_slave_1 removed
[   83.917955][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.921202][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.926313][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.929691][ T7307] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.944039][ T7315] team0: Mode changed to "broadcast"
[   83.960766][ T7321] vlan0: entered promiscuous mode
[   83.985221][ T7321] team0: Port device vlan0 added
[   83.994600][ T7307] tipc: Started in network mode
[   83.996806][ T7307] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   84.000014][ T7307] tipc: Enabled bearer <eth:team0>, priority 0
[   84.023331][ T7329] netlink: 172 bytes leftover after parsing attributes in process `syz.1.387'.
[   84.098177][ T7338] netlink: 'syz.3.388': attribute type 1 has an invalid length.
[   84.227848][ T7352] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   84.332049][ T7363] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   84.639122][ T7390] IPVS: stopping backup sync thread 7153 ...
[   84.730607][ T7396] delete_channel: no stack
[   84.755572][ T7396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.764400][ T7396] syzkaller0: MTU too low for tipc bearer
[   84.766824][ T7396] tipc: Disabling bearer <eth:syzkaller0>
[   84.915248][ T7410] netlink: 'syz.3.415': attribute type 2 has an invalid length.
[   85.113438][   T24] tipc: Node number set to 11578026
[   85.602559][ T5235] Bluetooth: hci3: command tx timeout
[   87.682597][ T5235] Bluetooth: hci3: command tx timeout
[   89.923231][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  106.535268][ T7436] __nla_validate_parse: 22 callbacks suppressed
[  106.535278][ T7436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'.
[  106.733897][ T7465] netlink: 'syz.1.425': attribute type 2 has an invalid length.
[  106.734143][ T7464] netlink: 'syz.1.425': attribute type 3 has an invalid length.
[  106.773978][ T7468] trusted_key: syz.3.422 sent an empty control message without MSG_MORE.
[  107.578064][ T7486] netlink: 'syz.3.430': attribute type 1 has an invalid length.
[  107.581336][ T7486] netlink: 244 bytes leftover after parsing attributes in process `syz.3.430'.
[  107.633001][ T7488] openvswitch: netlink: Key type 251 is out of range max 32
[  107.806364][ T7498] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[  107.809600][ T7498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.434'.
[  108.076746][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'.
[  108.102524][ T7506] erspan0: entered promiscuous mode
[  108.105151][ T7506] macvtap1: entered promiscuous mode
[  108.112530][ T7506] macvtap1: entered allmulticast mode
[  108.114872][ T7506] erspan0: entered allmulticast mode
[  108.215781][ T7513] netlink: 80 bytes leftover after parsing attributes in process `syz.2.440'.
[  108.224857][ T7510] netlink: 356 bytes leftover after parsing attributes in process `syz.1.439'.
[  108.274594][ T7516] netlink: 200 bytes leftover after parsing attributes in process `syz.2.440'.
[  108.279580][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'.
[  108.408795][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'.
[  108.446317][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'.
[  108.545788][ T7549] netlink: 'syz.3.449': attribute type 1 has an invalid length.
[  108.594270][ T7552] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  108.650675][ T7561] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  109.417913][ T7579] netlink: 'syz.1.457': attribute type 2 has an invalid length.
[  109.865751][ T7611] IPVS: stopping backup sync thread 7561 ...
[  109.868563][   T57] block nbd0: Wrong magic (0xe7000000)
[  110.018234][ T7618] netlink: 'syz.2.466': attribute type 6 has an invalid length.
[  110.021373][ T7618] netlink: 'syz.2.466': attribute type 4 has an invalid length.
[  110.121867][ T7626] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.126124][ T7626] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.049094][ T7690] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  111.054533][ T7690] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  111.609356][ T7719] __nla_validate_parse: 64 callbacks suppressed
[  111.609366][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[  111.744520][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[  111.810385][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  111.814595][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  111.856298][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'.
[  111.861714][ T7724] netlink: 788 bytes leftover after parsing attributes in process `syz.2.494'.
[  111.908624][ T7731] netlink: 204 bytes leftover after parsing attributes in process `syz.3.497'.
[  111.914161][   T33] audit: type=1800 audit(1755298558.721:2): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="memory.events" dev="tmpfs" ino=331 res=0 errno=0
[  112.014214][ T7740] netlink: 72 bytes leftover after parsing attributes in process `syz.2.500'.
[  112.016854][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.501'.
[  112.017413][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'.
[  112.163347][   T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  112.467398][ T7777] netlink: 'syz.2.512': attribute type 5 has an invalid length.
[  112.525016][ T7790] netlink: 'syz.2.515': attribute type 6 has an invalid length.
[  112.528893][ T7790] netlink: 'syz.2.515': attribute type 4 has an invalid length.
[  112.561592][ T7792] netlink: 'syz.3.516': attribute type 4 has an invalid length.
[  112.573742][   T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  112.581730][ T7792] netlink: 'syz.3.516': attribute type 4 has an invalid length.
[  112.748325][ T7806] netlink: 'syz.3.522': attribute type 1 has an invalid length.
[  112.844889][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.849722][ T7815] bond0: (slave rose0): Enslaving as an active interface with an up link
[  112.957475][ T7812] sock: sock_timestamping_bind_phc: sock not bind to device
[  113.121356][ T7838] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  113.203036][ T7823] netlink: 'syz.2.527': attribute type 13 has an invalid length.
[  113.205648][ T7823] netlink: 'syz.2.527': attribute type 17 has an invalid length.
[  113.368985][ T7823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  113.511439][ T7870] team0: Mode changed to "broadcast"
[  113.517292][ T7870] vlan0: entered promiscuous mode
[  113.605378][ T7876] netlink: 'syz.3.539': attribute type 3 has an invalid length.
[  113.624219][ T7877] veth7: entered allmulticast mode
[  114.184396][ T7922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  114.298397][ T7943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.301123][ T7943] syzkaller0: entered promiscuous mode
[  114.307667][ T7943] syzkaller0: entered allmulticast mode
[  114.322475][ T7943] tipc: Resetting bearer <eth:syzkaller0>
[  114.335051][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[  114.344207][ T7942] tipc: Disabling bearer <eth:syzkaller0>
[  114.458833][ T7946] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  114.472174][ T7946] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  114.803700][ T7971] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.828455][ T7973] veth9: entered promiscuous mode
[  114.848160][ T7971] veth11: entered promiscuous mode
[  114.854625][ T7973] tipc: Resetting bearer <eth:bridge0>
[  114.877433][ T7973] team0: Port device vlan0 removed
[  114.888666][ T7976] tipc: Resetting bearer <eth:bridge0>
[  114.891721][ T7976] tipc: Resetting bearer <eth:team0>
[  114.916643][ T3643] tipc: Resetting bearer <eth:team0>
[  115.601259][ T8036] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  115.605548][ T8034] IPVS: stopping backup sync thread 8036 ...
[  115.730793][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.738278][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.741739][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.752409][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.651373][ T8103] __nla_validate_parse: 75 callbacks suppressed
[  116.651383][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  116.658642][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  116.701336][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.740741][ T8112] netlink: 84 bytes leftover after parsing attributes in process `syz.2.603'.
[  116.898257][ T8132] netlink: 84 bytes leftover after parsing attributes in process `syz.3.608'.
[  116.921526][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'.
[  116.955666][ T8139] !: renamed from dummy0 (while UP)
[  117.071291][ T8144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.612'.
[  117.124815][ T8150] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.138800][ T8150] veth3: entered promiscuous mode
[  117.143231][ T8150] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  117.146733][ T8154] tc_dump_action: action bad kind
[  117.167241][ T8150] team0: Port device vlan0 removed
[  117.176115][ T8150] bond1: (slave ip6gretap1): Releasing backup interface
[  117.181906][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.187326][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.191004][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.191517][ T8150] bond2: (slave veth3): Releasing backup interface
[  117.211606][ T3643] tipc: Resetting bearer <eth:team0>
[  117.496079][ T8174] netlink: 200 bytes leftover after parsing attributes in process `syz.1.621'.
[  117.648151][ T8180] validate_nla: 11 callbacks suppressed
[  117.648167][ T8180] netlink: 'syz.3.624': attribute type 1 has an invalid length.
[  117.708710][ T8186] IPVS: stopping backup sync thread 6962 ...
[  117.777607][ T8194] netlink: 'syz.1.628': attribute type 1 has an invalid length.
[  117.826050][ T8199] netlink: 'syz.3.630': attribute type 1 has an invalid length.
[  117.965705][ T8196] infiniband syz1: set down
[  117.968726][ T8196] infiniband syz1: added bond0
[  118.036918][ T8196] RDS/IB: syz1: added
[  118.039060][ T8196] smc: adding ib device syz1 with port count 1
[  118.041358][ T8196] smc:    ib device syz1 port 1 has pnetid 
[  118.444403][ T8223] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[  118.774690][ T8225] netlink: 'syz.2.638': attribute type 13 has an invalid length.
[  118.777298][ T8225] netlink: 'syz.2.638': attribute type 17 has an invalid length.
[  118.814498][ T8225] tipc: Resetting bearer <eth:bridge0>
[  118.816795][ T8225] tipc: Resetting bearer <eth:bridge0>
[  118.821252][ T8225] tipc: Resetting bearer <eth:team0>
[  118.891290][ T8225] tipc: Resetting bearer <eth:team0>
[  118.897494][ T8225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.059186][ T8236] syzkaller0: entered promiscuous mode
[  119.061489][ T8236] syzkaller0: entered allmulticast mode
[  120.010227][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.276490][ T8286] netlink: 'syz.2.658': attribute type 1 has an invalid length.
[  120.301063][ T8279] sock: sock_timestamping_bind_phc: sock not bind to device
[  120.407505][ T8300] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[  120.410350][ T8301] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[  120.417612][ T8299] netlink: 'syz.3.660': attribute type 21 has an invalid length.
[  120.642563][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  120.758729][ T8323] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[  121.165913][ T8347] 0: renamed from hsr0 (while UP)
[  121.169263][ T8347] 0: entered allmulticast mode
[  121.170911][ T8347] hsr_slave_0: entered allmulticast mode
[  121.175005][ T8347] hsr_slave_1: entered allmulticast mode
[  121.177528][ T8347] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  121.319963][ T8364] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  121.319990][ T8363] IPVS: stopping backup sync thread 8364 ...
[  121.371931][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.458299][ T8372] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  122.439506][ T8389] __nla_validate_parse: 233 callbacks suppressed
[  122.439515][ T8389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.689'.
[  122.452534][ T8389] netlink: 48 bytes leftover after parsing attributes in process `syz.1.689'.
[  122.455883][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'.
[  122.533809][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'.
[  122.600606][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[  122.605502][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  122.605576][ T8415] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  122.605588][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.651106][ T8422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.698'.
[  122.663654][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'.
[  122.668219][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'.
[  122.675171][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  122.732215][ T8430] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 0
[  122.735929][ T8430] tipc: Enabling of bearer <eth:syzkaller0> rejected, cannot adjust to lower
[  123.707311][ T8462] validate_nla: 5 callbacks suppressed
[  123.707324][ T8462] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  124.681329][ T8506] netlink: 'syz.3.721': attribute type 4 has an invalid length.
[  124.695098][ T8506] netlink: 'syz.3.721': attribute type 4 has an invalid length.
[  124.861002][ T8517] netlink: 'syz.1.723': attribute type 1 has an invalid length.
[  125.017015][ T8523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.026388][ T8523] syzkaller0: entered promiscuous mode
[  125.028255][ T8523] syzkaller0: entered allmulticast mode
[  125.074996][ T8523] tipc: Resetting bearer <eth:syzkaller0>
[  125.078859][ T8522] tipc: Resetting bearer <eth:syzkaller0>
[  125.089472][ T8522] tipc: Disabling bearer <eth:syzkaller0>
[  125.482128][ T8543] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  126.083667][ T8575] syzkaller0: entered promiscuous mode
[  126.085526][ T8575] syzkaller0: entered allmulticast mode
[  127.189713][ T8595] netlink: 'syz.2.746': attribute type 6 has an invalid length.
[  127.193356][ T8595] netlink: 'syz.2.746': attribute type 5 has an invalid length.
[  127.409516][ T8611] netlink: 'syz.2.751': attribute type 2 has an invalid length.
[  127.414728][ T8611] netlink: 'syz.2.751': attribute type 2 has an invalid length.
[  127.471051][ T8615] __nla_validate_parse: 70 callbacks suppressed
[  127.471065][ T8615] netlink: 200 bytes leftover after parsing attributes in process `syz.2.754'.
[  127.512042][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'.
[  127.520840][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'.
[  127.534343][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'.
[  127.539116][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'.
[  127.626584][ T8628] netlink: 84 bytes leftover after parsing attributes in process `syz.3.757'.
[  127.646856][ T8634] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  127.649444][ T8634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[  127.660444][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'.
[  127.667680][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'.
[  127.741613][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.763'.
[  127.800406][ T8650] tipc: Resetting bearer <eth:team0>
[  127.964949][ T8259] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.972027][ T8259] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.982389][ T8259] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.996666][ T8259] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.374204][ T8668] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  128.377648][ T8667] IPVS: stopping backup sync thread 8668 ...
[  128.658883][ T8686] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002
[  129.344099][ T8702] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  129.348267][ T8701] IPVS: stopping backup sync thread 8702 ...
[  129.372159][ T8704] nbd: couldn't find device at index 536870912
[  129.435718][ T8708] validate_nla: 5 callbacks suppressed
[  129.435749][ T8708] netlink: 'syz.3.780': attribute type 1 has an invalid length.
[  129.509642][ T8713] netlink: 'syz.2.781': attribute type 30 has an invalid length.
[  129.514151][ T8715] bond0: Unable to set down delay as MII monitoring is disabled
[  129.523564][ T8716] sctp: [Deprecated]: syz.3.782 (pid 8716) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.523564][ T8716] Use struct sctp_sack_info instead
[  129.641027][ T8722] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  130.169161][ T8764] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  130.169311][ T8763] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  130.175565][ T8763] netlink: 'syz.1.789': attribute type 1 has an invalid length.
[  130.178312][ T8764] netlink: 'syz.1.789': attribute type 1 has an invalid length.
[  130.212782][  T791] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  130.412520][  T791] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  130.583255][ T8787] netlink: 'syz.1.793': attribute type 13 has an invalid length.
[  130.591630][ T8786] tipc: Invalid UDP bearer configuration
[  130.591657][ T8786] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  130.647816][ T8787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.708432][ T8796] syz.2.799 (8796) used greatest stack depth: 18200 bytes left
[  131.020448][ T8819] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  131.020534][ T8818] IPVS: stopping backup sync thread 8819 ...
[  131.038941][ T8818] netlink: 'syz.3.807': attribute type 15 has an invalid length.
[  131.551087][ T8861] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  131.554802][ T8861] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  131.667783][ T8876] netlink: 'syz.2.823': attribute type 1 has an invalid length.
[  131.791382][ T8887] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.991931][ T8915] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  132.735418][ T8954] __nla_validate_parse: 89 callbacks suppressed
[  132.735429][ T8954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.847'.
[  132.742053][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'.
[  132.809689][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.814030][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.879185][ T8961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'.
[  132.879209][ T8960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'.
[  133.213847][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  133.218139][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  133.277584][ T8972] netlink: 48 bytes leftover after parsing attributes in process `syz.3.852'.
[  133.388860][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'.
[  133.709168][ T8966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.850'.
[  133.791403][ T8982] netlink: 200 bytes leftover after parsing attributes in process `syz.3.853'.
[  134.556662][ T9024] validate_nla: 8 callbacks suppressed
[  134.556671][ T9024] netlink: 'syz.3.867': attribute type 12 has an invalid length.
[  134.916499][ T9046] netlink: 'syz.1.873': attribute type 1 has an invalid length.
[  134.941972][ T9046] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  134.949208][ T5693] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  134.953730][ T9046] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.063541][ T5693] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  135.385374][ T9085] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  135.416277][ T9085] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.434646][ T9085] veth5: entered promiscuous mode
[  135.851994][ T9116] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  135.852058][ T9115] IPVS: stopping backup sync thread 9116 ...
[  136.010139][ T9142] netlink: 'syz.3.893': attribute type 2 has an invalid length.
[  136.050506][ T9147] netlink: 'syz.3.894': attribute type 2 has an invalid length.
[  137.127996][ T9198] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  137.167656][ T9200] netlink: 'syz.1.911': attribute type 14 has an invalid length.
[  137.170907][ T9200] netlink: 'syz.1.911': attribute type 14 has an invalid length.
[  137.179472][ T9200] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  137.191162][ T9200] bond1: (slave ip6gretap1): Removing an active aggregator
[  137.194287][ T9200] bond1: (slave ip6gretap1): Releasing backup interface
[  137.262990][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.499310][ T9207] netlink: 'syz.2.913': attribute type 29 has an invalid length.
[  137.858586][ T9219] pim6reg1: entered promiscuous mode
[  137.860515][ T9219] pim6reg1: entered allmulticast mode
[  137.937989][ T9223] netlink: 'syz.3.917': attribute type 1 has an invalid length.
[  137.941201][ T9223] __nla_validate_parse: 37 callbacks suppressed
[  137.941211][ T9223] netlink: 244 bytes leftover after parsing attributes in process `syz.3.917'.
[  138.242547][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.256031][ T9232] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  138.259708][ T9231] IPVS: stopping backup sync thread 9232 ...
[  138.265907][ T9231] netlink: 260 bytes leftover after parsing attributes in process `syz.1.920'.
[  138.270880][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'.
[  138.276063][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'.
[  138.311374][ T9234] netlink: 136 bytes leftover after parsing attributes in process `syz.1.921'.
[  138.314689][ T9234] netlink: 56 bytes leftover after parsing attributes in process `syz.1.921'.
[  138.414738][ T9240] netlink: 200 bytes leftover after parsing attributes in process `syz.1.924'.
[  138.508053][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[  138.569357][ T9249] netlink: 788 bytes leftover after parsing attributes in process `syz.1.926'.
[  138.621447][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'.
[  138.775352][ T9271] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  138.778351][ T9268] IPVS: stopping backup sync thread 9271 ...
[  139.282494][   T55] Bluetooth: hci3: command 0x0405 tx timeout
[  140.370872][ T9346] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  140.381662][ T9345] IPVS: stopping backup sync thread 9346 ...
[  140.883724][ T9384] validate_nla: 1 callbacks suppressed
[  140.883737][ T9384] netlink: 'syz.1.955': attribute type 1 has an invalid length.
[  140.957361][ T9384] bond3 (unregistering): Released all slaves
[  141.319563][ T9412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  141.412054][ T9423] macvlan3: entered promiscuous mode
[  141.413933][ T9423] bond0: entered promiscuous mode
[  141.415912][ T9423] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  141.746911][ T9447] netlink: 'syz.3.966': attribute type 2 has an invalid length.
[  142.064185][ T9475] tipc: Can't bind to reserved service type 2
[  142.067557][ T9475] netlink: 'syz.3.975': attribute type 1 has an invalid length.
[  142.079902][ T9475] 8021q: adding VLAN 0 to HW filter on device bond5
[  142.089142][ T9475] bond5: (slave gretap1): making interface the new active one
[  142.092142][ T9475] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  142.123961][ T9480] netlink: 'syz.3.976': attribute type 1 has an invalid length.
[  142.165782][ T9488] netlink: 'syz.2.979': attribute type 1 has an invalid length.
[  142.500999][ T9527] sock: sock_set_timeout: `syz.1.991' (pid 9527) tries to set negative timeout
[  142.783030][ T9553] netlink: 'syz.2.998': attribute type 3 has an invalid length.
[  142.966465][ T9566] __nla_validate_parse: 81 callbacks suppressed
[  142.966474][ T9566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'.
[  142.971589][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'.
[  143.009187][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.012140][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.018004][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.021340][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.026659][ T9568] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.026667][ T9569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1003'.
[  143.133879][ T9578] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  143.135126][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  143.136641][ T9578] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1005'.
[  143.171836][ T9585] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  143.176437][ T9584] IPVS: stopping backup sync thread 9585 ...
[  143.249124][ T9590] ip6tnl0: Master is either lo or non-ether device
[  143.416009][ T9592] netlink: 'syz.3.1011': attribute type 13 has an invalid length.
[  143.418610][ T9592] netlink: 'syz.3.1011': attribute type 17 has an invalid length.
[  143.435449][ T9592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  143.506293][ T9597] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  144.057899][ T9620] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  144.378235][ T9665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.380830][ T9665] syzkaller0: entered promiscuous mode
[  144.384329][ T9665] syzkaller0: entered allmulticast mode
[  144.947296][ T9713] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  144.950874][ T9713] openvswitch: netlink: Duplicate key (type 0).
[  145.492736][  T791] tipc: Node number set to 2989096825
[  145.578300][ T9742] IPVS: stopping backup sync thread 9744 ...
[  145.582618][ T9744] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  145.621173][ T9742] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  146.054466][ T9789] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  146.289582][ T9805] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  146.289820][ T9804] IPVS: stopping backup sync thread 9805 ...
[  146.428190][ T9807] validate_nla: 9 callbacks suppressed
[  146.428203][ T9807] netlink: 'syz.2.1074': attribute type 1 has an invalid length.
[  146.591055][ T9823] netlink: 'syz.3.1078': attribute type 2 has an invalid length.
[  146.641541][ T9830] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  146.809026][ T9834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.824030][ T9834] syzkaller0: entered promiscuous mode
[  146.826021][ T9834] syzkaller0: entered allmulticast mode
[  146.839216][ T9834] tipc: Resetting bearer <eth:syzkaller0>
[  146.851269][ T9833] tipc: Resetting bearer <eth:syzkaller0>
[  146.861839][ T9833] tipc: Disabling bearer <eth:syzkaller0>
[  147.226817][ T9873] netlink: 'syz.2.1093': attribute type 5 has an invalid length.
[  147.491494][ T9880] xfrm1: entered promiscuous mode
[  147.495377][ T9880] xfrm1: entered allmulticast mode
[  148.220330][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.224246][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.524233][ T9923] __nla_validate_parse: 69 callbacks suppressed
[  148.524247][ T9923] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1109'.
[  148.675139][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'.
[  148.806212][ T9936] netlink: 'syz.1.1112': attribute type 10 has an invalid length.
[  148.808762][ T9936] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  148.824323][ T9936] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.839422][ T9936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  148.851435][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1112'.
[  148.852083][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'.
[  148.861752][ T9935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.877101][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'.
[  149.015618][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'.
[  149.081339][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  149.219203][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'.
[  149.219943][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'.
[  149.278943][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'.
[  149.388928][ T9968] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  149.392796][ T9967] IPVS: stopping backup sync thread 9968 ...
[  149.884447][T10017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  149.891225][T10017] vxcan2: entered promiscuous mode
[  149.925754][   T12] 
[  149.926593][   T12] ============================================
[  149.928557][   T12] WARNING: possible recursive locking detected
[  149.930658][   T12] 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 Not tainted
[  149.934329][   T12] --------------------------------------------
[  149.936301][   T12] kworker/u8:0/12 is trying to acquire lock:
[  149.938274][   T12] ffff888027fb1958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  149.941387][   T12] 
[  149.941387][   T12] but task is already holding lock:
[  149.943764][   T12] ffff8880300c8d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  149.946868][   T12] 
[  149.946868][   T12] other info that might help us debug this:
[  149.949616][   T12]  Possible unsafe locking scenario:
[  149.949616][   T12] 
[  149.952382][   T12]        CPU0
[  149.953670][   T12]        ----
[  149.954871][   T12]   lock(&qdisc_xmit_lock_key#4);
[  149.956537][   T12]   lock(&qdisc_xmit_lock_key#4);
[  149.958437][   T12] 
[  149.958437][   T12]  *** DEADLOCK ***
[  149.958437][   T12] 
[  149.961430][   T12]  May be due to missing lock nesting notation
[  149.961430][   T12] 
[  149.964419][   T12] 11 locks held by kworker/u8:0/12:
[  149.966163][   T12]  #0: ffff88802359c148 ((wq_completion)bond5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  149.969591][   T12]  #1: ffffc900000f7bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  149.973508][   T12]  #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  149.976504][   T12]  #3: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  149.979753][   T12]  #4: ffff888032e3d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  149.984307][   T12]  #5: ffff8880300c8d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  149.987655][   T12]  #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[  149.990358][   T12]  #7: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  149.993380][   T12]  #8: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  149.996514][   T12]  #9: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  150.000315][   T12]  #10: ffff88811224b258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  150.004741][   T12] 
[  150.004741][   T12] stack backtrace:
[  150.006579][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  150.006590][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.006595][   T12] Workqueue: bond5 bond_alb_monitor
[  150.006605][   T12] Call Trace:
[  150.006609][   T12]  <TASK>
[  150.006613][   T12]  dump_stack_lvl+0x189/0x250
[  150.006624][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.006631][   T12]  ? __pfx__printk+0x10/0x10
[  150.006640][   T12]  ? print_lock_name+0xde/0x100
[  150.006649][   T12]  print_deadlock_bug+0x28b/0x2a0
[  150.006657][   T12]  validate_chain+0x1a3f/0x2140
[  150.006663][   T12]  ? validate_xmit_xfrm+0xbf/0x1160
[  150.006673][   T12]  ? unwind_next_frame+0xa5/0x2390
[  150.006680][   T12]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  150.006690][   T12]  __lock_acquire+0xab9/0xd20
[  150.006700][   T12]  ? sch_direct_xmit+0x153/0x4b0
[  150.006708][   T12]  lock_acquire+0x120/0x360
[  150.006716][   T12]  ? sch_direct_xmit+0x153/0x4b0
[  150.006725][   T12]  _raw_spin_lock+0x2e/0x40
[  150.006733][   T12]  ? sch_direct_xmit+0x153/0x4b0
[  150.006740][   T12]  sch_direct_xmit+0x153/0x4b0
[  150.006749][   T12]  ? __pfx_sch_direct_xmit+0x10/0x10
[  150.006758][   T12]  __dev_queue_xmit+0x1857/0x3b50
[  150.006765][   T12]  ? arp_send_dst+0xa7/0x2d0
[  150.006771][   T12]  ? arp_solicit+0xc1d/0xe60
[  150.006778][   T12]  ? __neigh_event_send+0xf70/0x1560
[  150.006787][   T12]  ? __dev_queue_xmit+0x27b/0x3b50
[  150.006794][   T12]  ? ret_from_fork_asm+0x1a/0x30
[  150.006804][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  150.006813][   T12]  ? __lock_acquire+0xab9/0xd20
[  150.006824][   T12]  ? NF_HOOK+0x9e/0x3a0
[  150.006831][   T12]  NF_HOOK+0x310/0x3a0
[  150.006838][   T12]  ? __pfx_arp_xmit_finish+0x10/0x10
[  150.006845][   T12]  ? NF_HOOK+0x9e/0x3a0
[  150.006851][   T12]  ? __pfx_NF_HOOK+0x10/0x10
[  150.006857][   T12]  ? arp_xmit+0x23/0x270
[  150.006866][   T12]  arp_xmit+0x16c/0x270
[  150.006872][   T12]  ? arp_xmit+0x23/0x270
[  150.006878][   T12]  arp_solicit+0xc1d/0xe60
[  150.006886][   T12]  ? arp_solicit+0x11a/0xe60
[  150.006893][   T12]  ? __pfx_arp_solicit+0x10/0x10
[  150.006902][   T12]  ? __neigh_event_send+0xf08/0x1560
[  150.006910][   T12]  ? __pfx_arp_solicit+0x10/0x10
[  150.006916][   T12]  __neigh_event_send+0xf70/0x1560
[  150.006926][   T12]  neigh_resolve_output+0x198/0x750
[  150.006935][   T12]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  150.006943][   T12]  ? __lock_acquire+0xab9/0xd20
[  150.006952][   T12]  ip_finish_output2+0xd40/0x1160
[  150.006960][   T12]  ? ip_finish_output2+0x452/0x1160
[  150.006967][   T12]  ? __pfx_ip_finish_output2+0x10/0x10
[  150.006974][   T12]  ? ip_skb_dst_mtu+0x1a5/0xab0
[  150.006980][   T12]  ? ip_skb_dst_mtu+0x866/0xab0
[  150.006987][   T12]  ? ip_finish_output+0x33a/0x3f0
[  150.006994][   T12]  ip_output+0x2a1/0x3c0
[  150.007000][   T12]  ? ip_output+0x60/0x3c0
[  150.007006][   T12]  iptunnel_xmit+0x592/0xa40
[  150.007017][   T12]  ip_tunnel_xmit+0x1c41/0x2390
[  150.007033][   T12]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  150.007040][   T12]  ? gre_build_header+0x3fd/0xa40
[  150.007047][   T12]  ? __pfx_gre_build_header+0x10/0x10
[  150.007055][   T12]  gre_tap_xmit+0x590/0x7a0
[  150.007062][   T12]  ? __pfx_gre_tap_xmit+0x10/0x10
[  150.007068][   T12]  ? __lock_acquire+0xab9/0xd20
[  150.007077][   T12]  dev_hard_start_xmit+0x2d7/0x830
[  150.007087][   T12]  sch_direct_xmit+0x241/0x4b0
[  150.007095][   T12]  ? __pfx_sch_direct_xmit+0x10/0x10
[  150.007104][   T12]  __dev_queue_xmit+0x1857/0x3b50
[  150.007112][   T12]  ? __dev_queue_xmit+0x27b/0x3b50
[  150.007121][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  150.007128][   T12]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  150.007136][   T12]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  150.007145][   T12]  ? __build_skb_around+0x257/0x3e0
[  150.007157][   T12]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  150.007166][   T12]  ? alb_send_lp_vid+0x139/0x510
[  150.007174][   T12]  alb_send_lp_vid+0x324/0x510
[  150.007183][   T12]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  150.007191][   T12]  ? __lock_acquire+0xab9/0xd20
[  150.007201][   T12]  alb_send_learning_packets+0x10d/0x2c0
[  150.007209][   T12]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  150.007218][   T12]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  150.007227][   T12]  bond_alb_monitor+0x3e4/0x1800
[  150.007236][   T12]  ? bond_alb_monitor+0xf1/0x1800
[  150.007243][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  150.007249][   T12]  ? __pfx_bond_alb_monitor+0x10/0x10
[  150.007257][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.007264][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  150.007269][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  150.007275][   T12]  process_scheduled_works+0xae1/0x17b0
[  150.007286][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.007294][   T12]  worker_thread+0x8a0/0xda0
[  150.007305][   T12]  kthread+0x711/0x8a0
[  150.007313][   T12]  ? __pfx_worker_thread+0x10/0x10
[  150.007319][   T12]  ? __pfx_kthread+0x10/0x10
[  150.007326][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.007333][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.007341][   T12]  ? __pfx_kthread+0x10/0x10
[  150.007348][   T12]  ret_from_fork+0x3fc/0x770
[  150.007355][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  150.007362][   T12]  ? __switch_to_asm+0x39/0x70
[  150.007369][   T12]  ? __switch_to_asm+0x33/0x70
[  150.007377][   T12]  ? __pfx_kthread+0x10/0x10
[  150.007384][   T12]  ret_from_fork_asm+0x1a/0x30
[  150.007394][   T12]  </TASK>
[  151.602420][   T55] Bluetooth: hci3: command 0x0405 tx timeout

VM DIAGNOSIS:
22:56:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000067 RBX=0000000000000067 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f5c10
R8 =ffff888021a38237 R9 =1ffff11004347046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98f3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3f1fd1 CR3=00000000249be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=000000000000004d RDX=00000000002c307d
RSI=00007fb4fbfdc448 RDI=00000000000000c5 RBP=00000000000000c5 RSP=00007ffe52235150
R8 =00007fb4fbfccd3d R9 =0000000000000000 R10=0000000000000000 R11=000000000000000f
R12=0000000000000001 R13=0000000000200000 R14=0000000000000001 R15=0000000000008000
RIP=00007fb4fbfcd66b RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb4fbfdf4b8 CR3=000000012652d000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
