last executing test programs:

700.293878ms ago: executing program 0 (id=1392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x7f62c4469923ede5}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40440d0}, 0x40080)

651.253129ms ago: executing program 0 (id=1394):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRESHEX=r1, @ANYRES16=<r3=>r2], 0x138}, 0x1, 0x0, 0x0, 0x4008c84}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005400016dd793e6b729c03b05f898000100ef000000000007000000fe907151a6b72ef9323ee7e291722bd9d3fa652bc9cda5cb4f55e9aacd1747e8367543928683aafd7e320e1ceb6630e70ddf1013c11300e5e20b8377b9d6b1da164e1925c2c002f9c27a8e68e2a0594f91908cd7157a036f2d4f460a77af36b0db92bb73da63c79f648bce5a15ef973d5e7bb9f2c66b99f465f998d6085d2f36b529073686e35560", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
unshare(0x2c060000)
unshare(0x24020400)
unshare(0x2000000)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r7, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYRESDEC=r3], 0x3c}}, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})

579.614149ms ago: executing program 0 (id=1396):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010003b15000000654188647c9273b7cab8d3a764dc1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0002000000800000140012800900010076657468000000000400028008000300000000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x8000) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdd8c17850c0008000300", @ANYRES32=r2], 0x30}}, 0xc000) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) (async)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000030103"], 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x80) (async)
write$cgroup_type(r4, &(0x7f0000000000), 0x9) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r5, 0x0) (async)
shutdown(r5, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10011, r0, 0xfbadc000) (async)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000100), &(0x7f00000000c0)=0x4) (async)
setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000240)=0x3, 0x4)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000340)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async)
listen(r6, 0x4) (async)
listen(r6, 0x3) (async)
accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)

530.160868ms ago: executing program 0 (id=1399):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x3, 0x38) (rerun: 64)
setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

458.845331ms ago: executing program 0 (id=1402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x70bd28, 0xffffffff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x5}]}, 0x1c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r2, 0x58, &(0x7f0000002040)}, 0x6d)

389.627358ms ago: executing program 0 (id=1405):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x284, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x25c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@remote}]}})

319.469242ms ago: executing program 1 (id=1406):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xe2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) (async)
syz_emit_ethernet(0xae, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@x25={0x805, {0x3, 0xcc, 0x23, "8152d8530ae473c13da34f9193ffa87039484e252d1de42fbdecb5d834f0dcc352048163e49feed05b355e14dc3ee26b069ea79647a51b3013899f3e41b15dfe8217fdfedd135eee5dc24fd121baf9a790dda5d45d0394f4d8593d5cbf505b1b5e6f3efca8413f05a9d5112f91befbc05bf941bd0cee87694203b68c6816999d1d4cd25dca9e3ad2846d11878fab614bd86e66ead3bbcec278a7c4ce0e"}}}}, 0x0) (async, rerun: 32)
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0) (rerun: 32)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, r2, 0x2) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x1, {0x1, 0xff, 0x1}, {0x0, 0xf0, 0x3}, 0xfe, 0x1}, {0x2, 0x0, {}, {}, 0xff, 0xfd}, {0x2, 0x3, {0x1, 0xff, 0x3}, {0x2, 0x1, 0x2}, 0x0, 0x1}, {0x2, 0x3, {0x2, 0x1, 0x2}, {0x0, 0x0, 0x1}}], 0x80)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9e}, @SEG6_ATTR_SECRET={0x4}]}, 0x40}}, 0x4084) (async, rerun: 64)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x57}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfe2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5f7c}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000801)
setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000580)=0x2, 0x4) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/239, 0xef}], 0x3, &(0x7f0000000940)=""/252, 0xfc}, 0x40002120)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a80)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r3, &(0x7f0000000ac0)={0x1d, r7, 0x3, {0x1, 0xff, 0x3}}, 0x18)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f8, 0x300, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x20040000) (async, rerun: 64)
r9 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
sendmsg$can_bcm(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x1d, r7}, 0x10, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5, 0xa0, 0xd, {}, {0x77359400}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d946344ca0b7bb2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000d40))
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000d80)={0x2, 'gre0\x00', {0x5}}) (async)
socket$inet(0x2, 0x5, 0x3) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0xed41000)
r10 = accept4(r2, &(0x7f0000000dc0)=@nfc_llcp, &(0x7f0000000e40)=0x80, 0x80800)
connect$pppl2tp(r10, &(0x7f0000000e80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @loopback}, 0x2, 0x3, 0x4, 0x2}}, 0x26)

318.934309ms ago: executing program 2 (id=1407):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814)

317.040726ms ago: executing program 1 (id=1408):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051)

316.389312ms ago: executing program 2 (id=1409):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), 0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000180))
recvfrom$phonet(0xffffffffffffffff, &(0x7f00000001c0)=""/83, 0x53, 0x40000001, &(0x7f0000000240)={0x23, 0x2, 0x5, 0xd}, 0x10)
r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@default, @default, @netrom, @netrom, @netrom, @netrom, @null, @default]}, &(0x7f0000000300)=0x48)
getpeername$ax25(r2, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @rose, @default, @remote, @default, @rose, @default, @rose]}, &(0x7f00000003c0)=0x48)
r3 = accept$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000440)=0x1c)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @loopback, 0x7fffffff}, 0x1c)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000580)="b06401273e0714f47c133b6bd00ab96e67147b35b6aa744ef3a2f63e2b67663ba01f9e9aea4f21058493ccc594794738932892b2e4c21f3f8cd03777ee2396052b89ea633b45ca1bb70af2cc95a03cb2e8fd3787a6101bddff8c1e4de3c14fc981f0baee6b959e1f8c46f1eecdf4ff3aeca2ff0d25a6daedc5e6f8aedd87da3e8dd6b814d668fb9494df2c1bcdacb99c281d218c3ca052457d41b88ca191bb97a3221c00f67b9d719da8a1415a5bc55e94c73e24ba03c927855519c2c257734d89535845fbd1177609816e133f016559bff99f701b6b62bf2c0442", &(0x7f0000000680)=@tcp6=r3}, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000700)=[@in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x81}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x6}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x84)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000017c0)={&(0x7f00000007c0)=""/4096, 0x1000})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000001840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @remote}, 0x252, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001800)='wg1\x00', 0x72b0, 0x0, 0x4})
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000018c0)={0x7, 0x7, 0x4}, &(0x7f0000001900)=0x28)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={r4, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r6, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x57, &(0x7f0000001ec0)=[{}, {}], 0x10, 0x10, &(0x7f0000001f00), &(0x7f0000001f40), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x20, 0x11, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x88}, @generic={0x40, 0x9, 0x0, 0x3, 0x46}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b80)='syzkaller\x00', 0xf1, 0xcc, &(0x7f0000001bc0)=""/204, 0x40f00, 0x0, '\x00', r7, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x0, 0xc, 0x8001, 0x2}, 0x10, r8, r6, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$int_in(r5, 0x5452, &(0x7f00000021c0)=0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)=@deltclass={0x70, 0x29, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xc}, {0x5, 0xfff2}, {0x10, 0x2}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x1}, 0x176, 0xfffffff9}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xfa}}}]}, 0x70}}, 0x40000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x40, 0x0, 0x818, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000024c0), r6)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

238.822764ms ago: executing program 2 (id=1410):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000200000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0)

237.838699ms ago: executing program 1 (id=1411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10034}, [@IFLA_BROADCAST={0xa, 0x2, @random="528fefa41be2"}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x368, 0x2}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
close(r1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a50000000060a0b04000000000000000002000000240004802000018007ec00006374000014000280080001400c00000008000240000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

130.487665ms ago: executing program 2 (id=1412):
socket$inet(0x2, 0x2, 0x1) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
socket(0x22, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004)

128.727387ms ago: executing program 1 (id=1413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711042000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x39f, 0x0, 0x0, 0x0, 0xfff9})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r1, 0x8000, 0x8000, 0x6, 0x8, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0xc, 0xf3, 0x0, 0x0, [0xcd1, 0x9]}, @rr={0x7, 0x1f, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @loopback, @remote, @loopback, @multicast2]}]}}}}})
r4 = accept(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80)
connect$llc(r4, &(0x7f00000003c0)={0x1a, 0x3, 0x2, 0x6, 0x83, 0xaf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

69.255674ms ago: executing program 2 (id=1414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10034}, [@IFLA_BROADCAST={0xa, 0x2, @random="528fefa41be2"}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x368, 0x2}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
close(r1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a50000000060a0b04000000000000000002000000240004802000018007ec00006374000014000280080001400c00000008000240000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

890.066µs ago: executing program 2 (id=1415):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x4000}, 0xc)
bind$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x5b}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4000004)

376.894µs ago: executing program 1 (id=1416):
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)=0x60)
listen(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x1, 0x7}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x13, 0x0, 0x1, [@generic=' \bho']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000a00)={0x0, 0x0, 0x7cc73ca5, 0x40, 0x4, 0x3, 0x3ff, 0x270, {r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xd19, 0x2, 0x8727, 0x81, 0x2}}, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000002b00)={&(0x7f0000000100)={0x2, 0x4e25, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000070000008609000000030104"], 0x20}, 0x400c0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x5)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=""/58, &(0x7f0000000140)=0x3a)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

0s ago: executing program 1 (id=1417):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x138)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0xffffffffffffffde, @remote}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x7, @local}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="000000000cfb6fd200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000c4ed9f0c000000008500000005000000b7000000000000009500000000000000d78b3afffd97ddda644d765dc9c699ac5f3ef67ef5b365322d2b62be3e07861d1a6c596a7bd3784677efebd5451b77af2d21acabb85f73e846d1546a841ad4e73b5a7c662268b596844ccc30d1de5e08235786f123d2522352aeedde0f4ec27c13fd6ab575e0bc064b31669e734c44e2e1c785eb2a95ae3863fb8a2528199c82312dc2cdf54289fa66f709f2b7328ca71013e14ea6aff9e263b7178aa5e628b126cc559dbccd73fe1411c68b8743bf50265696e674e9623922e0a406f7a53141aa052d3c0f20dcdaabe8c2f89cb66830a0d84376671e18b77f19411b0f074538c1649e256cfc0f8837e2dec86feed0e1c2d8285693c14486d057229bd9a5f36f0f5541d16471dca3a6990c592db7c388eda84fd232202e96a7afc16fde52e8e30dc030262ccfd0a53cac34d0fe86a8d49747d93ff80953e4ce0a74b268c780d9cf77a450314ddbbf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="94002506", 0x4}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x600}, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffe1)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000200), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58887' (ED25519) to the list of known hosts.
syzkaller login: [   49.161959][ T5797] cgroup: Unknown subsys name 'net'
[   49.269038][ T5797] cgroup: Unknown subsys name 'cpuset'
[   49.272583][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.975084][ T5797] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.654425][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.659142][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.662483][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.665678][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.668464][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.700663][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.703848][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.714295][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.718645][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.722575][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.734798][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.740368][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.743058][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.746047][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.748964][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.973110][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.001138][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.036316][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.126464][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.129483][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.132101][ T5810] bridge_slave_0: entered allmulticast mode
[   55.134933][ T5810] bridge_slave_0: entered promiscuous mode
[   55.153244][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.156107][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.158576][ T5814] bridge_slave_0: entered allmulticast mode
[   55.161199][ T5814] bridge_slave_0: entered promiscuous mode
[   55.164252][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.167165][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.169634][ T5814] bridge_slave_1: entered allmulticast mode
[   55.172353][ T5814] bridge_slave_1: entered promiscuous mode
[   55.176063][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.178632][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.181146][ T5810] bridge_slave_1: entered allmulticast mode
[   55.184230][ T5810] bridge_slave_1: entered promiscuous mode
[   55.194355][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.196924][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.199296][ T5818] bridge_slave_0: entered allmulticast mode
[   55.202010][ T5818] bridge_slave_0: entered promiscuous mode
[   55.226847][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.229271][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.231625][ T5818] bridge_slave_1: entered allmulticast mode
[   55.234335][ T5818] bridge_slave_1: entered promiscuous mode
[   55.245880][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.250741][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.257188][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.270763][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.281903][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.307548][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.313570][ T5814] team0: Port device team_slave_0 added
[   55.318045][ T5810] team0: Port device team_slave_0 added
[   55.328500][ T5814] team0: Port device team_slave_1 added
[   55.340457][ T5810] team0: Port device team_slave_1 added
[   55.350500][ T5818] team0: Port device team_slave_0 added
[   55.368684][ T5818] team0: Port device team_slave_1 added
[   55.371235][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.373774][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.382934][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.401539][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.403838][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.413967][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.418038][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.420325][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.430115][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.448240][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.450555][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.459100][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.463061][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.465511][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.474069][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.478869][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.481280][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.490054][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.544976][ T5814] hsr_slave_0: entered promiscuous mode
[   55.547342][ T5814] hsr_slave_1: entered promiscuous mode
[   55.561318][ T5818] hsr_slave_0: entered promiscuous mode
[   55.564489][ T5818] hsr_slave_1: entered promiscuous mode
[   55.567087][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.569771][ T5818] Cannot create hsr debugfs directory
[   55.574202][ T5810] hsr_slave_0: entered promiscuous mode
[   55.577067][ T5810] hsr_slave_1: entered promiscuous mode
[   55.579285][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.581855][ T5810] Cannot create hsr debugfs directory
[   55.815401][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.823274][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.832823][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.848464][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.876744][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.899818][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.906090][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.908436][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.911186][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.913525][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.918038][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.922883][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.955565][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.963244][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.972392][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.983953][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.990255][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.010206][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.099329][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.125378][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.130166][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.135901][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.152172][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.154750][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.161265][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.167351][  T112] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.169798][  T112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.176006][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.179562][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.182154][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.193722][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.196485][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.202729][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.205814][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.223224][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.226047][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.273971][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.388410][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.431703][ T5814] veth0_vlan: entered promiscuous mode
[   56.458725][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.462459][ T5814] veth1_vlan: entered promiscuous mode
[   56.496542][ T5814] veth0_macvtap: entered promiscuous mode
[   56.502317][ T5814] veth1_macvtap: entered promiscuous mode
[   56.512526][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.522545][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.534156][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.543260][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.546857][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.549810][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.552688][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.566404][ T5810] veth0_vlan: entered promiscuous mode
[   56.589950][ T5810] veth1_vlan: entered promiscuous mode
[   56.605453][ T5818] veth0_vlan: entered promiscuous mode
[   56.613643][ T5818] veth1_vlan: entered promiscuous mode
[   56.630181][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.632783][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.646138][ T5810] veth0_macvtap: entered promiscuous mode
[   56.650142][ T5810] veth1_macvtap: entered promiscuous mode
[   56.672022][ T3750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.675216][ T3750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.676347][ T5818] veth0_macvtap: entered promiscuous mode
[   56.684245][ T5818] veth1_macvtap: entered promiscuous mode
[   56.691396][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.706734][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.712348][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.718205][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.719791][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.727680][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.730415][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.733196][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.743766][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.774965][ T5813] Bluetooth: hci2: command tx timeout
[   56.775168][ T5202] Bluetooth: hci1: command tx timeout
[   56.776784][ T5817] Bluetooth: hci0: command tx timeout
[   56.782221][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.790839][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.794186][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.797482][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.855378][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   56.860053][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   56.885964][  T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.888634][  T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.924117][  T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.928670][  T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.971543][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.975663][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.998187][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.001755][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.011882][ T5882] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.729369][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.877298][ T5936] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.881523][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12'.
[   57.885759][ T5935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12'.
[   57.937072][ T5941] netlink: 'syz.0.13': attribute type 2 has an invalid length.
[   57.947481][ T5941] : entered promiscuous mode
[   58.028132][ T5946] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   58.030553][ T5946] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15'.
[   58.064829][ T5948] netlink: 'syz.2.16': attribute type 2 has an invalid length.
[   58.073181][ T5948] netlink: 'syz.2.16': attribute type 1 has an invalid length.
[   58.081328][ T5948] netlink: 'syz.2.16': attribute type 2 has an invalid length.
[   58.093760][ T5951] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[   58.229717][ T5962] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   58.233278][ T5962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19'.
[   58.240354][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'.
[   58.320731][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.323749][ T5965] netlink: 'syz.1.20': attribute type 30 has an invalid length.
[   58.348721][ T5965] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.352662][ T5965] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.356506][ T5965] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.360389][ T5965] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.382403][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.396012][ T5965] netlink: 'syz.1.20': attribute type 30 has an invalid length.
[   58.407320][ T5965] Zero length message leads to an empty skb
[   58.534116][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   58.600431][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   58.621993][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   58.727830][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.855798][ T5817] Bluetooth: hci0: command tx timeout
[   58.855832][ T5813] Bluetooth: hci2: command tx timeout
[   58.868817][ T5813] Bluetooth: hci1: command tx timeout
[   59.198278][ T6035] xt_TCPMSS: Only works on TCP SYN packets
[   59.326401][ T6049] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.333168][ T6049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   59.548629][ T6073] xt_hashlimit: size too large, truncated to 1048576
[   59.551043][ T6073] xt_hashlimit: overflow, try lower: 3/0
[   59.824108][ T6089] bridge_slave_0: left allmulticast mode
[   59.826718][ T6089] bridge_slave_0: left promiscuous mode
[   59.829268][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.838355][ T6089] bridge_slave_1: left allmulticast mode
[   59.840750][ T6089] bridge_slave_1: left promiscuous mode
[   59.843246][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.852141][ T6089] bond0: (slave bond_slave_0): Releasing backup interface
[   59.857803][ T6089] bond0: (slave bond_slave_1): Releasing backup interface
[   59.863603][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.866742][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.870430][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.872806][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.749407][ T6117] x_tables: duplicate underflow at hook 2
[   60.752330][ T6117] x_tables: duplicate underflow at hook 1
[   60.807726][ T6122] sctp: [Deprecated]: syz.0.71 (pid 6122) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.807726][ T6122] Use struct sctp_sack_info instead
[   60.942349][ T5813] Bluetooth: hci1: command tx timeout
[   60.942389][ T5817] Bluetooth: hci0: command tx timeout
[   60.944216][ T5813] Bluetooth: hci2: command tx timeout
[   61.206378][ T6151] syzkaller0: entered promiscuous mode
[   61.208133][ T6151] syzkaller0: entered allmulticast mode
[   61.222787][ T6151] netlink: 'syz.0.81': attribute type 6 has an invalid length.
[   61.229359][ T6151] netlink: 'syz.0.81': attribute type 5 has an invalid length.
[   62.009956][ T6184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.665114][ T6217] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   62.702949][ T6220] openvswitch: netlink: Missing key (keys=40, expected=100)
[   63.016508][ T5813] Bluetooth: hci0: command tx timeout
[   63.018438][ T5202] Bluetooth: hci1: command tx timeout
[   63.018461][ T5817] Bluetooth: hci2: command tx timeout
[   63.516235][ T6241] __nla_validate_parse: 23 callbacks suppressed
[   63.516246][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   63.552701][ T6243] tipc: Enabling of bearer <et:g> rejected, media not registered
[   63.621641][ T6243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.646410][ T6245] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   63.665060][ T6245] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   63.718566][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'.
[   63.830468][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[   63.953464][ T6281] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   64.029932][ T6293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.121'.
[   64.051329][ T6289] validate_nla: 3 callbacks suppressed
[   64.051340][ T6289] netlink: 'syz.1.120': attribute type 29 has an invalid length.
[   64.059933][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'.
[   64.082294][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   64.148287][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'.
[   64.218294][ T6310] netlink: 'syz.0.128': attribute type 1 has an invalid length.
[   64.253137][ T6310] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   64.257373][ T6310] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   64.260382][ T6310] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   64.263330][ T6310] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   64.269642][ T6310] bond1: (slave geneve2): making interface the new active one
[   64.273432][ T6310] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   64.278757][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'.
[   64.284123][ T6310] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.633041][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   64.640128][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'.
[   64.658167][ T6329] netlink: 'syz.0.131': attribute type 13 has an invalid length.
[   64.661256][ T6329] netlink: 'syz.0.131': attribute type 12 has an invalid length.
[   64.891395][ T6342] netlink: zone id is out of range
[   64.897349][ T6342] netlink: del zone limit has 4 unknown bytes
[   65.387889][ T6403] netlink: 'syz.1.156': attribute type 5 has an invalid length.
[   65.431157][ T6403] netlink: 'syz.1.156': attribute type 5 has an invalid length.
[   65.544342][ T6416] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   65.560344][ T6416] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   65.632610][ T6425] netlink: 'syz.1.162': attribute type 2 has an invalid length.
[   65.669358][ T6427] Unsupported ieee802154 address type: 0
[   65.761775][ T6435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.037764][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.040926][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.061689][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.066031][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.120419][ T6465] netlink: 'syz.2.173': attribute type 11 has an invalid length.
[   66.189248][ T6467] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[   66.196198][ T6467] IPv6: NLM_F_CREATE should be specified when creating new route
[   66.201389][ T6469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.233594][ T6471] 0: renamed from hsr_slave_1 (while UP)
[   66.240463][ T6471] 0: entered allmulticast mode
[   66.242992][ T6471] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   66.353679][ T6480] sctp: [Deprecated]: syz.0.181 (pid 6480) Use of int in max_burst socket option.
[   66.353679][ T6480] Use struct sctp_assoc_value instead
[   66.408537][ T6485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.412032][ T6485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.469725][ T6485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.473235][ T6485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.506375][ T6485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.510171][ T6485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.559146][ T6485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.563298][ T6485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   66.643590][ T6485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   66.646844][ T6485] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   66.657297][ T6485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   66.660675][ T6485] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   66.674393][ T6485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   66.678311][ T6485] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   66.688115][ T6485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   66.691441][ T6485] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   67.079575][ T6510] openvswitch: netlink: Key type 30 is not supported
[   67.464434][ T6528] xt_CT: No such helper "pptp"
[   67.922932][ T6564] netlink: 'syz.0.205': attribute type 11 has an invalid length.
[   67.969034][ T2205] IPVS: starting estimator thread 0...
[   68.026068][ T6574] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   68.032779][ T6574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.054795][ T6569] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.062329][ T6574] xt_CT: No such helper "pptp"
[   68.067717][ T6573] delete_channel: no stack
[   68.571836][ T6610] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[   68.610486][ T6616] syzkaller1: entered promiscuous mode
[   68.612432][ T6616] syzkaller1: entered allmulticast mode
[   68.799390][ T6635] __nla_validate_parse: 28 callbacks suppressed
[   68.799401][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   68.815213][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   68.826652][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'.
[   68.856990][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   68.859860][ T6641] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   68.862346][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   68.867364][ T6642] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   68.877265][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.880963][ T6644] Bluetooth: MGMT ver 1.23
[   68.883702][ T6642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.922990][ T6649] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   69.001172][ T6662] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.237'.
[   69.021188][ T6653] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.237'.
[   69.058213][ T6665] validate_nla: 4 callbacks suppressed
[   69.058223][ T6665] netlink: 'syz.2.239': attribute type 10 has an invalid length.
[   69.072723][ T6665] team0: Cannot enslave team device to itself
[   69.083891][ T6668] netlink: 56 bytes leftover after parsing attributes in process `syz.1.241'.
[   69.088214][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   69.091780][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'.
[   69.341180][ T6691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.348150][ T6691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.352645][ T6691] bond0 (unregistering): Released all slaves
[   69.541330][ T6708] sctp: [Deprecated]: syz.2.253 (pid 6708) Use of int in max_burst socket option.
[   69.541330][ T6708] Use struct sctp_assoc_value instead
[   69.606036][ T6711] tipc: Enabling of bearer <et:g> rejected, media not registered
[   69.662879][ T6714] erspan0: entered promiscuous mode
[   69.681518][ T6716] netlink: 'syz.1.256': attribute type 15 has an invalid length.
[   69.798545][ T6724] netlink: 'syz.1.258': attribute type 1 has an invalid length.
[   69.829002][ T6724] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   69.831876][ T6724] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   69.835103][ T6724] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   69.837921][ T6724] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   69.843768][ T6724] bond1: (slave geneve2): making interface the new active one
[   69.850555][ T6724] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   69.876984][ T6724] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.992402][ T6737] TCP: TCP_TX_DELAY enabled
[   69.998675][ T6737] Unsupported ieee802154 address type: 0
[   70.039826][ T6744] netlink: 'syz.2.263': attribute type 7 has an invalid length.
[   70.100395][ T6749] x_tables: duplicate underflow at hook 1
[   70.944500][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.948120][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.181519][ T6798] net_ratelimit: 1 callbacks suppressed
[   71.181535][ T6798] openvswitch: netlink: Message has 4 unknown bytes.
[   71.693597][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803be95c00: rx timeout, send abort
[   71.697255][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803be95c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   71.923746][ T6847] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[   72.386800][ T6857] netlink: 'syz.2.292': attribute type 11 has an invalid length.
[   72.730541][ T6884] netlink: 'syz.1.300': attribute type 1 has an invalid length.
[   72.807548][ T6892] x_tables: ip_tables: osf match: only valid for protocol 6
[   72.879870][ T6900] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   72.882505][ T6900] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   72.923374][ T6902] sctp: [Deprecated]: syz.1.307 (pid 6902) Use of int in max_burst socket option.
[   72.923374][ T6902] Use struct sctp_assoc_value instead
[   73.691812][ T6939] vxlan2: entered promiscuous mode
[   73.696036][ T6939] vxlan2: entered allmulticast mode
[   73.856986][ T6956] __nla_validate_parse: 28 callbacks suppressed
[   73.856997][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[   73.898718][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   73.982189][ T6960] netlink: 'syz.0.323': attribute type 2 has an invalid length.
[   74.016249][ T6966] netlink: 'syz.2.325': attribute type 1 has an invalid length.
[   74.047475][ T6966] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.066139][ T6966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.325'.
[   74.250817][ T6997] raw_sendmsg: syz.2.334 forgot to set AF_INET. Fix it!
[   74.399094][ T7017] pim6reg1: entered promiscuous mode
[   74.401130][ T7017] pim6reg1: entered allmulticast mode
[   74.448936][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[   74.661117][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   74.705894][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[   74.953636][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'.
[   75.108667][ T7055] netlink: 64 bytes leftover after parsing attributes in process `syz.0.350'.
[   75.118223][ T7056] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   75.271676][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'.
[   75.349031][ T7078] netlink: 'syz.2.358': attribute type 2 has an invalid length.
[   75.441998][ T7084] syzkaller0: entered promiscuous mode
[   75.443763][ T7084] syzkaller0: entered allmulticast mode
[   75.445726][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[   75.459342][ T7088] gtp0: entered promiscuous mode
[   75.613008][ T7098] openvswitch: netlink: EtherType 10 is less than min 600
[   75.650637][ T7101] xt_hashlimit: overflow, rate too high: 1125899906842624
[   76.431835][ T7118] netlink: 'syz.2.369': attribute type 3 has an invalid length.
[   76.876002][ T7169] bridge3: entered promiscuous mode
[   76.877794][ T7169] bridge3: entered allmulticast mode
[   76.882910][ T7169] team0: Port device bridge3 added
[   76.963715][ T7169] team0 (unregistering): Port device team_slave_0 removed
[   76.971002][ T7169] team0 (unregistering): Port device team_slave_1 removed
[   76.983652][ T7169] team0 (unregistering): Port device bridge3 removed
[   77.127973][ T7185] netlink: 'syz.2.388': attribute type 11 has an invalid length.
[   77.685178][ T7242] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   77.701781][ T7242] netlink: 'syz.1.403': attribute type 30 has an invalid length.
[   77.888076][ T7266] netlink: 'syz.0.408': attribute type 2 has an invalid length.
[   77.917880][ T7269] xt_CT: No such helper "snmp_trap"
[   77.960581][ T7274] IPv6: Can't replace route, no match found
[   78.143682][ T7298] Cannot find del_set index 4 as target
[   78.154131][ T7298] bond0: entered promiscuous mode
[   78.163995][ T7298] macvlan1: entered promiscuous mode
[   78.353925][ T7315] xt_hashlimit: size too large, truncated to 1048576
[   78.362832][ T7315] xt_hashlimit: overflow, try lower: 3/0
[   78.367920][ T7319] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[   78.385332][ T7319] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[   78.388587][ T7319] netlink: 'syz.2.427': attribute type 3 has an invalid length.
[   78.391789][ T7319] NCSI netlink: No device for ifindex 246
[   78.500854][ T7328] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   78.683956][ T7349] Cannot find add_set index 4 as target
[   78.933275][ T7365] __nla_validate_parse: 17 callbacks suppressed
[   78.933296][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[   78.994844][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'.
[   79.232741][ T7404] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[   79.285298][ T7404] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   79.292826][ T6922] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   79.297315][ T7404] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.408134][ T6922] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   79.453997][ T7404] veth3: entered promiscuous mode
[   79.497240][ T7404] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   79.729905][ T7463] x_tables: duplicate underflow at hook 1
[   79.789071][ T7478] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   79.844290][ T7482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.453'.
[   79.904683][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[   79.907712][ T7478] nbd: socks must be embedded in a SOCK_ITEM attr
[   79.910417][ T7478] block nbd0: shutting down sockets
[   79.981595][ T7490] delete_channel: no stack
[   80.142448][ T7512] netlink: 'syz.1.465': attribute type 2 has an invalid length.
[   80.149972][ T7512] netlink: 164 bytes leftover after parsing attributes in process `syz.1.465'.
[   80.157950][ T7512] netlink: 'syz.1.465': attribute type 2 has an invalid length.
[   80.159367][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[   80.161249][ T7512] netlink: 164 bytes leftover after parsing attributes in process `syz.1.465'.
[   80.263457][ T7523] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.469'.
[   80.267514][ T7523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.469'.
[   80.324350][ T7528] netlink: 596 bytes leftover after parsing attributes in process `syz.2.470'.
[   80.353711][ T7530] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   80.359669][ T7530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.437688][ T7533] vlan3: entered allmulticast mode
[   80.439420][ T7533] dummy0: entered allmulticast mode
[   80.691892][ T7543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.717450][ T7544] batman_adv: batadv0: Adding interface: gretap1
[   80.720064][ T7544] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.733168][ T7544] batman_adv: batadv0: Interface activated: gretap1
[   80.733545][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   81.185233][ T1269] cfg80211: failed to load regulatory.db
[   81.228428][ T7603] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[   81.256878][ T7603] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.260391][ T7597] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   81.265676][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   81.277983][ T7603] bond2: (slave gretap1): making interface the new active one
[   81.282014][ T7603] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   81.415005][ T6924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   81.463920][ T7612] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.474375][ T7612] nbd: couldn't find a device at index 17
[   81.486762][ T7612] macsec1: entered promiscuous mode
[   81.489002][ T7612] macsec1: entered allmulticast mode
[   81.491132][ T7612] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   82.028387][ T7603] syz.2.494 (7603) used greatest stack depth: 18928 bytes left
[   82.122490][ T7652] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   82.382707][ T7675] trusted_key: syz.2.515 sent an empty control message without MSG_MORE.
[   82.457223][ T6922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.460980][ T6922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.487706][ T7688] netlink: 'syz.2.521': attribute type 4 has an invalid length.
[   82.822806][ T7717] netlink: 'syz.2.530': attribute type 3 has an invalid length.
[   83.024900][ T1269] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   83.159614][ T7749] ipt_rpfilter: unknown options
[   83.413530][ T7775] Unsupported ieee802154 address type: 0
[   84.179357][ T7827] syzkaller0: entered promiscuous mode
[   84.181621][ T7827] syzkaller0: entered allmulticast mode
[   84.192551][ T7829] __nla_validate_parse: 29 callbacks suppressed
[   84.192560][ T7829] netlink: 732 bytes leftover after parsing attributes in process `syz.0.563'.
[   84.199210][ T7829] netlink: 732 bytes leftover after parsing attributes in process `syz.0.563'.
[   85.220747][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.567'.
[   85.291386][ T7859] netlink: 'syz.0.567': attribute type 3 has an invalid length.
[   85.304064][ T7859] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[   85.315173][ T7859] netlink: 220 bytes leftover after parsing attributes in process `syz.0.567'.
[   85.326440][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[   85.329321][ T7859] netlink: 'syz.0.567': attribute type 9 has an invalid length.
[   85.333144][ T7857] netlink: 428 bytes leftover after parsing attributes in process `syz.2.570'.
[   85.336718][ T7857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.570'.
[   85.340664][ T7859] netlink: 'syz.0.567': attribute type 12 has an invalid length.
[   85.343372][ T7859] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.567'.
[   85.393741][ T7857] tipc: Started in network mode
[   85.398795][ T7857] tipc: Node identity 06d5b1bdbf67, cluster identity 4711
[   85.401793][ T7857] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   85.412757][ T7857] tipc: Resetting bearer <eth:syzkaller0>
[   85.432959][ T7856] tipc: Resetting bearer <eth:syzkaller0>
[   85.458513][ T7866] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.572'.
[   85.463662][ T7856] tipc: Disabling bearer <eth:syzkaller0>
[   85.530623][ T7872] netlink: 'syz.0.575': attribute type 6 has an invalid length.
[   85.533367][ T7872] netlink: 'syz.0.575': attribute type 7 has an invalid length.
[   85.586754][ T1269] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   85.591180][ T7877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.631454][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'.
[   85.637812][ T7886] vlan0: entered promiscuous mode
[   85.800887][ T7902] netlink: 'syz.0.581': attribute type 11 has an invalid length.
[   86.134939][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   86.144067][ T7927] Bluetooth: MGMT ver 1.23
[   86.413007][ T7952] validate_nla: 1 callbacks suppressed
[   86.413017][ T7952] netlink: 'syz.1.595': attribute type 2 has an invalid length.
[   86.796782][ T7980] ipvlan2: entered promiscuous mode
[   86.930552][ T7988] pim6reg1: entered promiscuous mode
[   86.932914][ T7988] pim6reg1: entered allmulticast mode
[   87.093620][ T8004] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   87.516710][ T8052] netlink: 'syz.1.622': attribute type 4 has an invalid length.
[   87.522801][ T8042] netlink: 'syz.0.619': attribute type 5 has an invalid length.
[   87.526220][ T8052] netlink: 'syz.1.622': attribute type 4 has an invalid length.
[   87.551873][ T8054] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   87.920169][ T8089] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.929373][ T8088] netlink: 'syz.0.634': attribute type 4 has an invalid length.
[   87.934428][ T8088] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   87.978289][ T8091] Cannot find del_set index 286 as target
[   88.003868][ T8091] veth1_to_bond: entered allmulticast mode
[   88.007001][ T8090] veth1_to_bond: left allmulticast mode
[   88.077603][ T8101] @: renamed from vlan0
[   88.167901][ T8109] batman_adv: batadv0: Adding interface: gretap2
[   88.170002][ T8109] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.185256][ T8109] batman_adv: batadv0: Interface activated: gretap2
[   88.246780][ T8120] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[   88.599150][ T8135] can: request_module (can-proto-0) failed.
[   88.989897][ T8153] sctp: [Deprecated]: syz.2.656 (pid 8153) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.989897][ T8153] Use struct sctp_sack_info instead
[   89.074640][ T8160] netlink: 'syz.2.658': attribute type 11 has an invalid length.
[   89.078515][ T8160] netlink: 'syz.2.658': attribute type 4 has an invalid length.
[   89.135103][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.264305][ T8179] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   89.296030][ T8173] __nla_validate_parse: 24 callbacks suppressed
[   89.296042][ T8173] netlink: 136 bytes leftover after parsing attributes in process `syz.0.663'.
[   89.307434][ T8173] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   89.340380][ T8184] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.401589][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'.
[   89.611622][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'.
[   89.621167][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'.
[   89.891187][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'.
[   89.997939][ T8242] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   90.005872][ T8246] bridge_slave_0: left allmulticast mode
[   90.007771][ T8246] bridge_slave_0: left promiscuous mode
[   90.014478][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.022054][ T8246] bridge_slave_1: left allmulticast mode
[   90.024398][ T8246] bridge_slave_1: left promiscuous mode
[   90.029699][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.052019][ T8246] team0: Port device team_slave_0 removed
[   90.057766][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.680'.
[   90.058336][ T8246] team0: Port device team_slave_1 removed
[   90.069505][ T8246] bond1: (slave geneve2): Releasing active interface
[   90.073294][ T8246] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   90.076716][ T8246] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   90.079382][ T8246] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   90.082043][ T8246] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   90.090342][ T8253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.679'.
[   90.282722][ T8280] tipc: Started in network mode
[   90.284475][ T8280] tipc: Node identity 5, cluster identity 4711
[   90.288530][ T8280] tipc: Node number set to 5
[   90.393032][ T8280] netlink: 176 bytes leftover after parsing attributes in process `syz.1.687'.
[   90.663663][ T8309] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.737543][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[   90.796880][   T33] audit: type=1107 audit(1751833173.846:2): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   90.806277][   T33] audit: type=1107 audit(1751833173.846:3): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   90.912322][ T8329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.702'.
[   90.957042][ T8311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.097607][ T8343] netlink: 'syz.2.706': attribute type 12 has an invalid length.
[   91.100670][ T8343] netlink: 'syz.2.706': attribute type 11 has an invalid length.
[   91.342391][ T8368] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   91.439116][ T8380] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   91.478496][ T8383] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   91.753578][ T8402] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:3
[   92.106744][ T8425] validate_nla: 1 callbacks suppressed
[   92.106755][ T8425] netlink: 'syz.1.729': attribute type 303 has an invalid length.
[   92.131098][ T8413] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   92.135730][ T8413] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.267002][ T8433] gretap2: entered promiscuous mode
[   92.269286][ T8433] gretap2: entered allmulticast mode
[   92.506995][ T8451] netlink: 'syz.2.734': attribute type 1 has an invalid length.
[   92.535625][ T8453] netlink: 'syz.2.736': attribute type 3 has an invalid length.
[   92.538753][ T8453] netlink: 'syz.2.736': attribute type 1 has an invalid length.
[   92.622963][ T8461] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[   92.652711][ T8461] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.670661][ T8460] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.673908][ T8460] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   92.680940][ T8460] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   92.716886][ T8461] veth5: entered promiscuous mode
[   92.720789][ T8461] bond3: (slave veth5): Enslaving as an active interface with a down link
[   92.731307][ T8463] veth7: entered promiscuous mode
[   92.736806][ T8463] bond3: (slave veth7): Enslaving as an active interface with a down link
[   92.741602][ T8461] erspan0: entered allmulticast mode
[   92.866357][ T8468] veth0_macvtap: entered allmulticast mode
[   92.965972][ T8467] delete_channel: no stack
[   93.007834][ T8476] x_tables: duplicate underflow at hook 2
[   93.010795][ T8477] x_tables: duplicate underflow at hook 2
[   93.027558][ T8475] syzkaller1: entered promiscuous mode
[   93.029839][ T8475] syzkaller1: entered allmulticast mode
[   93.158468][ T8487] syz.1.746 uses old SIOCAX25GETINFO
[   93.334737][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   93.468094][ T8500] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[   93.668525][ T8504] netlink: 'syz.0.750': attribute type 58 has an invalid length.
[   94.297952][ T8515] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   94.461376][ T8541] ipt_REJECT: ECHOREPLY no longer supported.
[   94.591452][ T8553] __nla_validate_parse: 22 callbacks suppressed
[   94.591469][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[   94.610268][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[   94.614099][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[   94.781490][ T8575] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   94.796232][ T8575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   94.820318][ T8575] netlink: 'syz.2.768': attribute type 2 has an invalid length.
[   94.894751][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'.
[   94.915769][ T8582] SET target dimension over the limit!
[   95.007638][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'.
[   95.011375][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'.
[   95.016344][ T8596] netlink: 'syz.1.774': attribute type 1 has an invalid length.
[   95.018813][ T8596] netlink: 232 bytes leftover after parsing attributes in process `syz.1.774'.
[   95.061735][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'.
[   95.066136][ T8600] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   95.357040][ T8620] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[   95.375424][ T8622] netlink: 17 bytes leftover after parsing attributes in process `syz.2.784'.
[   95.417220][ T8628] xt_l2tp: wrong L2TP version: 0
[   95.421460][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'.
[   95.453322][ T8628] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.476480][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   95.832403][ T8666] syzkaller0: entered promiscuous mode
[   95.835012][ T8666] syzkaller0: entered allmulticast mode
[   96.376725][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   97.526355][ T8721] Unknown options in mask 700
[   97.531033][ T8722] validate_nla: 2 callbacks suppressed
[   97.531042][ T8722] netlink: 'syz.1.806': attribute type 7 has an invalid length.
[   97.638544][ T8731] syzkaller1: entered promiscuous mode
[   97.640293][ T8731] syzkaller1: entered allmulticast mode
[   97.650060][ T8731] dvmrp0: entered allmulticast mode
[   98.180406][ T8777] netlink: 'syz.0.822': attribute type 4 has an invalid length.
[   98.443911][ T8797] sit2: entered promiscuous mode
[   98.883812][   T33] audit: type=1804 audit(1751833181.926:4): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.842" name="/newroot/282/cgroup.controllers" dev="tmpfs" ino=1452 res=1 errno=0
[   98.895857][   T33] audit: type=1800 audit(1751833181.926:5): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.842" name="cgroup.controllers" dev="tmpfs" ino=1452 res=0 errno=0
[   98.910801][ T8845] bridge_slave_0: left allmulticast mode
[   98.912994][ T8845] bridge_slave_0: left promiscuous mode
[   98.916824][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.932632][ T8845] bridge_slave_1: left allmulticast mode
[   98.941434][ T8845] bridge_slave_1: left promiscuous mode
[   98.943598][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.951614][ T8845] bond0: (slave bond_slave_0): Releasing backup interface
[   98.958419][ T8845] bond0: (slave bond_slave_1): Releasing backup interface
[   98.963872][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.968340][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.973714][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.977661][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.990521][ T8845] bond2: (slave gretap1): Releasing active interface
[   99.000098][ T8845] batman_adv: batadv0: Interface deactivated: gretap2
[   99.002992][ T8845] batman_adv: batadv0: Removing interface: gretap2
[   99.012656][ T8845] bond3: (slave veth5): Releasing active interface
[   99.038270][ T8845] bond3: (slave veth7): Releasing active interface
[   99.373595][ T8882] ieee802154 phy0 wpan0: encryption failed: -90
[   99.698692][ T8920] xt_hashlimit: size too large, truncated to 1048576
[   99.921145][ T8929] netlink: 'syz.2.868': attribute type 3 has an invalid length.
[   99.925537][ T8929] __nla_validate_parse: 15 callbacks suppressed
[   99.925550][ T8929] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.868'.
[  100.089036][ T8942] netlink: 'syz.1.873': attribute type 2 has an invalid length.
[  100.091912][ T8942] netlink: 'syz.1.873': attribute type 1 has an invalid length.
[  100.182936][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.876'.
[  100.460264][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  100.655639][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  100.913014][ T8992] netlink: 248 bytes leftover after parsing attributes in process `syz.0.887'.
[  100.928896][ T8994] gtp2: entered promiscuous mode
[  100.931057][ T8994] gtp2: entered allmulticast mode
[  101.381966][ T9017] openvswitch: netlink: Flow actions attr not present in new flow.
[  101.385945][ T9015] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  101.406521][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  101.460937][ T9015] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  101.529320][ T9015] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  101.588380][ T9015] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  101.677581][ T9015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.701785][ T9015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.714508][ T9015] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.731026][ T9015] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.766708][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'.
[  102.037529][ T9066] netlink: 'syz.1.905': attribute type 21 has an invalid length.
[  102.050979][ T9066] netlink: 'syz.1.905': attribute type 6 has an invalid length.
[  102.054181][ T9066] netlink: 64 bytes leftover after parsing attributes in process `syz.1.905'.
[  102.156507][ T9082] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  102.291038][ T9098] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.352268][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'.
[  102.356527][ T9102] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[  102.359112][ T9102] netlink: 244 bytes leftover after parsing attributes in process `syz.1.915'.
[  103.049307][ T9141] netlink: 'syz.0.926': attribute type 11 has an invalid length.
[  103.079810][ T9140] delete_channel: no stack
[  103.714475][ T9194] sctp: [Deprecated]: syz.0.938 (pid 9194) Use of int in max_burst socket option.
[  103.714475][ T9194] Use struct sctp_assoc_value instead
[  103.726143][ T9194] sctp: [Deprecated]: syz.0.938 (pid 9194) Use of int in max_burst socket option.
[  103.726143][ T9194] Use struct sctp_assoc_value instead
[  104.492495][ T9221] bond0 (unregistering): Released all slaves
[  104.691617][ T9244] netlink: 'syz.1.953': attribute type 1 has an invalid length.
[  104.695390][ T9244] netlink: 'syz.1.953': attribute type 4 has an invalid length.
[  104.700371][ T9247] netlink: 'syz.1.953': attribute type 1 has an invalid length.
[  104.703121][ T9247] netlink: 'syz.1.953': attribute type 4 has an invalid length.
[  104.753737][ T9252] IPv6: NLM_F_REPLACE set, but no existing node found!
[  105.897421][ T9276] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  106.000933][ T9279] __nla_validate_parse: 75 callbacks suppressed
[  106.000947][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'.
[  106.079179][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.964'.
[  106.083459][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'.
[  106.203259][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'.
[  106.221420][ T9300] netlink: 596 bytes leftover after parsing attributes in process `syz.0.970'.
[  106.227299][ T9300] Cannot find add_set index 2 as target
[  106.351948][ T9319] netlink: 'syz.1.973': attribute type 1 has an invalid length.
[  106.402088][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'.
[  106.502487][ T9336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.510664][ T9336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.829842][ T9349] delete_channel: no stack
[  106.897475][ T9353] netlink: 'syz.2.985': attribute type 1 has an invalid length.
[  106.928995][ T9353] bond0: (slave gretap3): making interface the new active one
[  106.931740][ T9353] bond0: (slave gretap3): Enslaving as an active interface with an up link
[  106.936408][ T9356] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  107.081347][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'.
[  107.092539][ T9373] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  107.219536][ T9384] netlink: 68 bytes leftover after parsing attributes in process `syz.0.997'.
[  107.222590][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'.
[  107.226642][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'.
[  107.396058][ T9398] netlink: 'syz.0.1003': attribute type 11 has an invalid length.
[  107.414944][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  107.512695][ T9407] sctp: [Deprecated]: syz.1.1005 (pid 9407) Use of int in max_burst socket option deprecated.
[  107.512695][ T9407] Use struct sctp_assoc_value instead
[  107.567174][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.569743][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.053349][ T9430] netlink: 'syz.2.1010': attribute type 1 has an invalid length.
[  108.731577][ T9487] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  108.809564][ T9497] 1: renamed from c0 (while UP)
[  108.813927][ T9497] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  108.980965][ T9525] x_tables: duplicate underflow at hook 2
[  108.983652][ T9526] x_tables: duplicate underflow at hook 3
[  108.989256][ T9525] veth1_to_bond: mtu less than device minimum
[  108.990497][ T9527] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[  108.993887][ T9526] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[  109.186342][ T9555] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  109.258211][ T9558] netlink: 'syz.1.1051': attribute type 83 has an invalid length.
[  109.418155][ T9572] netlink: 'syz.1.1055': attribute type 83 has an invalid length.
[  109.446771][ T9574] openvswitch: netlink: Flow key attr not present in new flow.
[  109.500306][ T9582] bridge0: port 1(syz_tun) entered blocking state
[  109.503038][ T9582] bridge0: port 1(syz_tun) entered disabled state
[  109.506751][ T9582] syz_tun: entered allmulticast mode
[  109.509375][ T9582] syz_tun: entered promiscuous mode
[  109.512207][ T9582] bridge0: port 1(syz_tun) entered blocking state
[  109.514404][ T9582] bridge0: port 1(syz_tun) entered forwarding state
[  110.027677][ T9595] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  110.233787][ T9601] netlink: 'syz.2.1065': attribute type 3 has an invalid length.
[  110.239879][ T9601] netlink: 'syz.2.1065': attribute type 1 has an invalid length.
[  110.448583][ T9631] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.564443][ T9635] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  110.581454][ T9648] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  110.587279][ T9648] macsec2: entered promiscuous mode
[  110.590283][ T9648] macsec2: entered allmulticast mode
[  110.592060][ T9648] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  110.635586][ T9642] syzkaller0: entered allmulticast mode
[  110.658482][ T9651] batadv_slave_0: entered promiscuous mode
[  110.663367][ T9641] openvswitch: netlink: Tunnel attr 16 has unexpected len 4 expected 0
[  111.630329][ T9676] __nla_validate_parse: 36 callbacks suppressed
[  111.630340][ T9676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'.
[  111.642885][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'.
[  111.646073][ T9678] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  111.648643][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.733615][ T9686] netlink: 'syz.1.1084': attribute type 21 has an invalid length.
[  111.737700][ T9686] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1084'.
[  111.780791][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'.
[  111.783949][ T9703] xt_TCPMSS: Only works on TCP SYN packets
[  111.786042][ T9704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'.
[  111.791779][ T9705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1088'.
[  111.800906][ T9705] netlink: 'syz.0.1088': attribute type 1 has an invalid length.
[  111.839543][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'.
[  111.921182][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'.
[  111.934433][ T9723] netlink: 'syz.2.1095': attribute type 10 has an invalid length.
[  112.017402][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'.
[  112.036045][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'.
[  112.408520][ T9784] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  112.426061][ T9785] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  113.083205][ T9803] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  113.148620][ T9812] netlink: 'syz.0.1123': attribute type 3 has an invalid length.
[  113.705447][ T9839] netlink: 'syz.2.1129': attribute type 3 has an invalid length.
[  113.762150][ T9842] x_tables: duplicate underflow at hook 3
[  113.773367][ T9846] netlink: 'syz.0.1132': attribute type 1 has an invalid length.
[  113.778585][ T9846] netlink: 'syz.0.1132': attribute type 11 has an invalid length.
[  113.847285][ T9854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.927026][ T9869] openvswitch: netlink: IPv6 tunnel dst address is zero
[  114.787068][ T9968] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  114.929130][ T9976] syzkaller1: entered promiscuous mode
[  114.931168][ T9976] syzkaller1: entered allmulticast mode
[  115.870497][T10039] openvswitch: netlink: Message has 4 unknown bytes.
[  116.648861][T10056] __nla_validate_parse: 83 callbacks suppressed
[  116.648871][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'.
[  116.808075][T10068] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1194'.
[  116.910257][T10085] Cannot find del_set index 2 as target
[  117.141256][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'.
[  117.311486][T10118] validate_nla: 3 callbacks suppressed
[  117.311504][T10118] netlink: 'syz.0.1207': attribute type 4 has an invalid length.
[  117.317867][T10118] netlink: 'syz.0.1207': attribute type 4 has an invalid length.
[  118.076383][T10147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1215'.
[  118.080397][T10147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1215'.
[  118.083605][T10147] netlink: 'syz.2.1215': attribute type 5 has an invalid length.
[  118.087664][T10147] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1215'.
[  118.113521][T10147] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1215'.
[  118.119054][T10147] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1215'.
[  118.234017][T10156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1218'.
[  118.309281][T10161] veth0: entered promiscuous mode
[  118.344216][T10160] veth0: left promiscuous mode
[  118.638417][T10184] xt_ecn: cannot match TCP bits for non-tcp packets
[  118.641312][T10183] xt_ecn: cannot match TCP bits for non-tcp packets
[  118.832086][T10196] netlink: 'syz.2.1230': attribute type 3 has an invalid length.
[  118.972157][T10200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1232'.
[  119.013414][T10204] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  119.018954][T10205] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  119.610759][T10231] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  119.621219][T10231] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  119.670912][ T5682] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.677959][ T5682] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.696719][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.735052][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  119.854799][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  120.905729][T10297] netlink: 'syz.2.1263': attribute type 29 has an invalid length.
[  120.908848][ T5818] cgroup: fork rejected by pids controller in /syz0
[  120.913840][T10297] netlink: 'syz.2.1263': attribute type 29 has an invalid length.
[  120.949149][T10304] ieee802154 phy0 wpan0: encryption failed: -22
[  121.003121][T10310] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  121.007359][T10310] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  121.010050][T10310] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  121.040582][ T5682] tipc: Subscription rejected, illegal request
[  121.111214][T10318] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[  121.117351][T10318] netlink: 'syz.1.1270': attribute type 2 has an invalid length.
[  121.120709][T10318] netlink: 'syz.1.1270': attribute type 3 has an invalid length.
[  121.866398][T10331] x_tables: duplicate underflow at hook 2
[  121.945548][T10335] ieee802154 phy0 wpan0: encryption failed: -90
[  121.957921][ T5682] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.020826][ T5682] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.085372][ T5682] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.148419][ T5682] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.262228][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.267773][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.276698][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.280731][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.283734][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.589388][ T5682] dvmrp0 (unregistering): left allmulticast mode
[  122.945637][ T5682] bond1 (unregistering): Released all slaves
[  123.007702][ T5682] bond0 (unregistering): Released all slaves
[  123.054407][T10370] __nla_validate_parse: 10 callbacks suppressed
[  123.058402][T10370] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1286'.
[  123.062682][T10368] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1286'.
[  123.065778][T10370] netlink: 'syz.2.1286': attribute type 11 has an invalid length.
[  123.093815][ T5682] : left promiscuous mode
[  123.289517][T10349] chnl_net:caif_netlink_parms(): no params data found
[  123.297300][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'.
[  123.410969][T10349] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.416115][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.425049][T10349] bridge_slave_0: entered allmulticast mode
[  123.428209][T10349] bridge_slave_0: entered promiscuous mode
[  123.431512][T10349] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.435144][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.437862][T10349] bridge_slave_1: entered allmulticast mode
[  123.440565][T10349] bridge_slave_1: entered promiscuous mode
[  123.468957][T10395] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1289'.
[  123.512830][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.519916][T10395] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[  123.527639][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.556230][T10395] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[  123.568510][ T5682] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode
[  123.610211][T10349] team0: Port device team_slave_0 added
[  123.613785][T10349] team0: Port device team_slave_1 added
[  123.653680][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.658469][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.676822][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.689586][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.695470][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.715737][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.738886][ T5682] hsr_slave_0: left promiscuous mode
[  123.741742][ T5682] 1: left promiscuous mode
[  123.753755][ T5682] veth1_macvtap: left promiscuous mode
[  123.756379][ T5682] veth0_macvtap: left promiscuous mode
[  123.759003][ T5682] veth1_vlan: left promiscuous mode
[  123.761424][ T5682] veth0_vlan: left promiscuous mode
[  123.782398][T10406] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004
[  123.814753][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  124.178435][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'.
[  124.375000][ T5813] Bluetooth: hci2: command tx timeout
[  124.631639][T10349] hsr_slave_0: entered promiscuous mode
[  124.649811][T10349] hsr_slave_1: entered promiscuous mode
[  124.653120][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.670631][T10349] Cannot create hsr debugfs directory
[  124.866552][T10441] x_tables: duplicate underflow at hook 1
[  124.868748][T10441] x_tables: duplicate underflow at hook 1
[  124.870733][T10441] x_tables: duplicate underflow at hook 1
[  124.872654][T10441] x_tables: duplicate underflow at hook 1
[  124.875474][T10441] x_tables: duplicate underflow at hook 1
[  124.878046][T10441] x_tables: duplicate underflow at hook 1
[  124.880120][T10441] x_tables: duplicate underflow at hook 1
[  124.881957][T10441] x_tables: duplicate underflow at hook 1
[  124.883867][T10441] x_tables: duplicate underflow at hook 1
[  124.919025][T10444] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  125.432552][T10482] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1306'.
[  125.438442][T10484] syzkaller1: entered promiscuous mode
[  125.441996][T10484] syzkaller1: entered allmulticast mode
[  125.570068][T10349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  125.580814][T10349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  125.600556][T10349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  125.619385][T10349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  125.660126][T10498] netlink: 'syz.2.1310': attribute type 10 has an invalid length.
[  125.800651][T10349] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.835543][T10349] 8021q: adding VLAN 0 to HW filter on device team0
[  125.850548][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.853578][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.887145][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.890253][ T7432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.196033][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.260476][T10349] veth0_vlan: entered promiscuous mode
[  126.273304][T10349] veth1_vlan: entered promiscuous mode
[  126.310374][T10349] veth0_macvtap: entered promiscuous mode
[  126.323668][T10349] veth1_macvtap: entered promiscuous mode
[  126.348637][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.358507][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.365345][T10349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.368279][T10349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.371178][T10349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.374051][T10349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.424381][ T7432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.433203][ T7432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.449842][ T7435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.452762][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.455853][ T5813] Bluetooth: hci2: command tx timeout
[  126.630402][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  126.651310][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  126.751768][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'.
[  126.756100][T10579] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1320'.
[  126.808910][T10586] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  126.931204][T10597] netlink: 'syz.0.1323': attribute type 1 has an invalid length.
[  127.196742][T10620] syzkaller1: entered promiscuous mode
[  127.198649][T10620] syzkaller1: entered allmulticast mode
[  127.506734][T10642] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  127.637692][T10653] bridge0: entered promiscuous mode
[  127.679921][T10653] bridge0: left promiscuous mode
[  127.793926][T10660] xt_l2tp: wrong L2TP version: 0
[  127.844139][T10665] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  127.871135][T10657] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  128.308521][T10707] __nla_validate_parse: 13 callbacks suppressed
[  128.308532][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  128.315676][T10707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  128.375130][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'.
[  128.503776][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'.
[  128.535278][ T5817] Bluetooth: hci2: command tx timeout
[  128.811708][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  128.952377][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1372'.
[  128.960677][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'.
[  129.430104][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'.
[  129.434043][T10783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'.
[  129.818972][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'.
[  129.886022][T10822] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  129.896748][T10822] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  130.013973][T10833] xt_check_table_hooks: 26 callbacks suppressed
[  130.013988][T10833] x_tables: duplicate underflow at hook 1
[  130.028678][T10830] x_tables: duplicate underflow at hook 2
[  130.087231][T10843] delete_channel: no stack
[  130.590164][T10886] 
[  130.591084][T10886] ======================================================
[  130.593335][T10886] WARNING: possible circular locking dependency detected
[  130.595586][T10886] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  130.599045][T10886] ------------------------------------------------------
[  130.601315][T10886] syz.1.1417/10886 is trying to acquire lock:
[  130.603332][T10886] ffffffff8f668b78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  130.606579][T10886] 
[  130.606579][T10886] but task is already holding lock:
[  130.608948][T10886] ffffffff8f668b18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  130.612010][T10886] 
[  130.612010][T10886] which lock already depends on the new lock.
[  130.612010][T10886] 
[  130.614925][ T5817] Bluetooth: hci2: command tx timeout
[  130.615324][T10886] 
[  130.615324][T10886] the existing dependency chain (in reverse order) is:
[  130.615328][T10886] 
[  130.615328][T10886] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  130.622682][T10886]        lock_acquire+0x120/0x360
[  130.624366][T10886]        _raw_spin_lock_bh+0x36/0x50
[  130.626190][T10886]        nr_rt_ioctl+0x390/0xd50
[  130.627941][T10886]        sock_do_ioctl+0xdc/0x300
[  130.629549][T10886]        sock_ioctl+0x576/0x790
[  130.631126][T10886]        __se_sys_ioctl+0xfc/0x170
[  130.632833][T10886]        do_syscall_64+0xfa/0x3b0
[  130.634458][T10886]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.636741][T10886] 
[  130.636741][T10886] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  130.639469][T10886]        lock_acquire+0x120/0x360
[  130.641114][T10886]        _raw_spin_lock_bh+0x36/0x50
[  130.642886][T10886]        nr_rt_ioctl+0x193/0xd50
[  130.644543][T10886]        sock_do_ioctl+0xdc/0x300
[  130.646227][T10886]        sock_ioctl+0x576/0x790
[  130.647808][T10886]        __se_sys_ioctl+0xfc/0x170
[  130.649455][T10886]        do_syscall_64+0xfa/0x3b0
[  130.651067][T10886]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.653202][T10886] 
[  130.653202][T10886] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  130.655641][T10886]        validate_chain+0xb9b/0x2140
[  130.657780][T10886]        __lock_acquire+0xab9/0xd20
[  130.659520][T10886]        lock_acquire+0x120/0x360
[  130.661163][T10886]        _raw_spin_lock_bh+0x36/0x50
[  130.662935][T10886]        nr_rt_device_down+0xa9/0x720
[  130.664659][T10886]        nr_device_event+0x137/0x150
[  130.666590][T10886]        notifier_call_chain+0x1b6/0x3e0
[  130.668465][T10886]        dev_close_many+0x29c/0x410
[  130.670174][T10886]        netif_close+0x158/0x210
[  130.671833][T10886]        dev_close+0x10a/0x220
[  130.673413][T10886]        bpq_device_event+0x2f4/0x600
[  130.675172][T10886]        notifier_call_chain+0x1b6/0x3e0
[  130.677308][T10886]        __dev_notify_flags+0x18d/0x2e0
[  130.679130][T10886]        netif_change_flags+0xe8/0x1a0
[  130.680897][T10886]        dev_change_flags+0x130/0x260
[  130.682670][T10886]        dev_ioctl+0x7b4/0x1150
[  130.684266][T10886]        sock_do_ioctl+0x22c/0x300
[  130.685974][T10886]        sock_ioctl+0x576/0x790
[  130.687525][T10886]        __se_sys_ioctl+0xfc/0x170
[  130.689181][T10886]        do_syscall_64+0xfa/0x3b0
[  130.690837][T10886]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.692938][T10886] 
[  130.692938][T10886] other info that might help us debug this:
[  130.692938][T10886] 
[  130.696326][T10886] Chain exists of:
[  130.696326][T10886]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  130.696326][T10886] 
[  130.700756][T10886]  Possible unsafe locking scenario:
[  130.700756][T10886] 
[  130.703125][T10886]        CPU0                    CPU1
[  130.704807][T10886]        ----                    ----
[  130.706643][T10886]   lock(nr_neigh_list_lock);
[  130.708418][T10886]                                lock(&nr_node->node_lock);
[  130.711089][T10886]                                lock(nr_neigh_list_lock);
[  130.713629][T10886]   lock(nr_node_list_lock);
[  130.715164][T10886] 
[  130.715164][T10886]  *** DEADLOCK ***
[  130.715164][T10886] 
[  130.718076][T10886] 2 locks held by syz.1.1417/10886:
[  130.719852][T10886]  #0: ffffffff8f5100c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  130.722697][T10886]  #1: ffffffff8f668b18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  130.725931][T10886] 
[  130.725931][T10886] stack backtrace:
[  130.727855][T10886] CPU: 1 UID: 0 PID: 10886 Comm: syz.1.1417 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  130.727865][T10886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.727870][T10886] Call Trace:
[  130.727875][T10886]  <TASK>
[  130.727879][T10886]  dump_stack_lvl+0x189/0x250
[  130.727894][T10886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.727905][T10886]  ? __pfx__printk+0x10/0x10
[  130.727915][T10886]  ? print_lock_name+0xde/0x100
[  130.727923][T10886]  print_circular_bug+0x2ee/0x310
[  130.727932][T10886]  check_noncircular+0x134/0x160
[  130.727941][T10886]  validate_chain+0xb9b/0x2140
[  130.727949][T10886]  ? rt6_disable_ip+0x6b3/0x720
[  130.727960][T10886]  ? __lock_acquire+0xab9/0xd20
[  130.727970][T10886]  __lock_acquire+0xab9/0xd20
[  130.727985][T10886]  ? nr_rt_device_down+0xa9/0x720
[  130.727996][T10886]  lock_acquire+0x120/0x360
[  130.728004][T10886]  ? nr_rt_device_down+0xa9/0x720
[  130.728016][T10886]  ? nr_rt_device_down+0xa9/0x720
[  130.728026][T10886]  _raw_spin_lock_bh+0x36/0x50
[  130.728036][T10886]  ? nr_rt_device_down+0xa9/0x720
[  130.728046][T10886]  nr_rt_device_down+0xa9/0x720
[  130.728056][T10886]  ? do_raw_spin_unlock+0x4d/0x240
[  130.728064][T10886]  nr_device_event+0x137/0x150
[  130.728074][T10886]  notifier_call_chain+0x1b6/0x3e0
[  130.728086][T10886]  dev_close_many+0x29c/0x410
[  130.728095][T10886]  ? __pfx_dev_close_many+0x10/0x10
[  130.728101][T10886]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  130.728110][T10886]  ? bond_netdev_event+0x227/0xe80
[  130.728118][T10886]  netif_close+0x158/0x210
[  130.728124][T10886]  ? __pfx_netif_close+0x10/0x10
[  130.728130][T10886]  ? tun_device_event+0x77/0x1020
[  130.728142][T10886]  dev_close+0x10a/0x220
[  130.728151][T10886]  bpq_device_event+0x2f4/0x600
[  130.728160][T10886]  notifier_call_chain+0x1b6/0x3e0
[  130.728172][T10886]  __dev_notify_flags+0x18d/0x2e0
[  130.728180][T10886]  ? __pfx___dev_notify_flags+0x10/0x10
[  130.728188][T10886]  ? __dev_change_flags+0x4cc/0x6d0
[  130.728196][T10886]  ? __pfx___dev_change_flags+0x10/0x10
[  130.728203][T10886]  ? dev_ioctl+0x7a4/0x1150
[  130.728209][T10886]  ? full_name_hash+0x92/0xe0
[  130.728220][T10886]  netif_change_flags+0xe8/0x1a0
[  130.728229][T10886]  dev_change_flags+0x130/0x260
[  130.728238][T10886]  dev_ioctl+0x7b4/0x1150
[  130.728245][T10886]  sock_do_ioctl+0x22c/0x300
[  130.728256][T10886]  ? __pfx_sock_do_ioctl+0x10/0x10
[  130.728265][T10886]  ? __lock_acquire+0xab9/0xd20
[  130.728276][T10886]  sock_ioctl+0x576/0x790
[  130.728286][T10886]  ? __pfx_sock_ioctl+0x10/0x10
[  130.728295][T10886]  ? __fget_files+0x2a/0x420
[  130.728303][T10886]  ? __fget_files+0x3a0/0x420
[  130.728309][T10886]  ? __fget_files+0x2a/0x420
[  130.728317][T10886]  ? bpf_lsm_file_ioctl+0x9/0x20
[  130.728327][T10886]  ? __pfx_sock_ioctl+0x10/0x10
[  130.728335][T10886]  __se_sys_ioctl+0xfc/0x170
[  130.728346][T10886]  do_syscall_64+0xfa/0x3b0
[  130.728352][T10886]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.728362][T10886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.728368][T10886]  ? exc_page_fault+0x9f/0xf0
[  130.728377][T10886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.728384][T10886] RIP: 0033:0x7f3a2498e929
[  130.728392][T10886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.728399][T10886] RSP: 002b:00007f3a2574b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.728407][T10886] RAX: ffffffffffffffda RBX: 00007f3a24bb5fa0 RCX: 00007f3a2498e929
[  130.728413][T10886] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000d
[  130.728417][T10886] RBP: 00007f3a24a10b39 R08: 0000000000000000 R09: 0000000000000000
[  130.728422][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.728426][T10886] R13: 0000000000000000 R14: 00007f3a24bb5fa0 R15: 00007ffc8b9b86c8
[  130.728433][T10886]  </TASK>
[  132.376809][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.380421][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.694858][ T5817] Bluetooth: hci2: command 0x0405 tx timeout
[  135.575097][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!

VM DIAGNOSIS:
20:20:13  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8202ed5e RBX=ffffea0004d9f900 RCX=ffff888027af0000 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000020000 RSP=ffffc900073f76d8
R8 =ffffea0004d9f907 R9 =1ffffd40009b3f20 R10=dffffc0000000000 R11=fffff940009b3f21
R12=1ffffd40009b3f21 R13=1ffffd40009b3f20 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81c04ea7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555926d6500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc2908cfc8 CR3=000000003f4fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcc28384478 00007fcc28384450 XMM03=00007fcc28384488 00007fcc28384480
XMM04=00007fcc28eed100 00007fcc28384440 XMM05=00007fcc28384458 00007fcc283844a0
XMM06=00007fcc28384498 00007fcc28384490 XMM07=00007fcc28384488 00007fcc28384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcc28211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000593e RDI=000000000000593f RBP=00000000000003f8 RSP=ffffc900046bedd0
R8 =ffff888107600237 R9 =1ffff11020ec0046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4906 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3a2574b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003e2e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3a24b84478 00007f3a24b84450 XMM03=00007f3a24b84488 00007f3a24b84480
XMM04=00007f3a256ed100 00007f3a24b84440 XMM05=00007f3a24b84458 00007f3a24b844a0
XMM06=00007f3a24b84498 00007f3a24b84490 XMM07=00007f3a24b84488 00007f3a24b84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3a24a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
