last executing test programs:

9m41.513992609s ago: executing program 0 (id=1502):
unshare(0x26020480)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, 0x0}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310329bd7000ffffffff0900000008000300", @ANYRES32=r4, @ANYBLOB="080006"], 0x24}}, 0x4000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fddbdf250e00000008002c000400000008003a0081090000080031000100000008003a000000000000000d53d6690000"], 0x3c}, 0x1, 0x0, 0x0, 0x4035}, 0x0)

9m41.324587162s ago: executing program 0 (id=1503):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c1200001000010400f1ff000006000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0)

9m41.323972806s ago: executing program 0 (id=1504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66})
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0xcb, &(0x7f0000000000)="e955935cd259f3e35fe55310f3fec0e97d517ce33bf3cfc9c9404dcb88883357f482b2699fa1d6fedbf19bfdc4606eb7bf6fabe65a174c420cb4087785eb13483173aaa9f455dc8dbe03fb645ad93ac8936956149f17abf44b396f23b06dca92b1ea0c7819c6de975e56fa87162a8fa595f2fc7ae264f63f55d3425aa338484b943610ca914d9d342a99df81c514d27785402687b1f6776f3fdc3fc46001774e4d91285175969b765f48adea4a418de7e068f226483c2e1c77097eb88e5d1b8e6d50ac658e8d3f1202b700"})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="941fb7845b75b5c2898fd1f9dfbd4df4dd2b51d71a191c4893d3562c01057f7923bdb302ddc8a0f5704af790adf9544791c26c1a1feae5d5c4c0c59b6d68895e5d04ce82848eece6f6314874174afb49c0b01a00f43dadd5f542881a64e4c7b1", @ANYRES32=0x0, @ANYBLOB="ccf3060000000000ac03168014000180100006000900000001000000070000003401018014000a00ffffffff0000000004000000000000000c000500030000000900000014000b0002000000000000007f000000000000000c00070000fcffff0a0000000c000900fdffffff0d000000cc000c8014000100010000802a02000006000000741d000014000100070000004f0b0000ff010000810000001400010002000000370c000002000000810000001400010003000000fa0700007f00000088a80000140001000d000000fe0b00004c0000008100000014000100d9000000700c000004000000810000001400010000000000b20c00000800000088a80000140001008000000066070000000000008100000014000100a7000000870b0000080000008100000014000100ff010000220b00000600000088a800000c000500c0000000fb30ba630c00090009000000020000008000018018000c80140001000e000000e0010000a3e60000810000000c000900fcffffff080000000c0003000600000097faffff0c00090007000000fffbffff14000b00000000000000000009000000000000000c000700008000000400000014000b000900000000000000ff7f0000000000000c000300c68a003a4abbea94007400000080000180100006000200000009000000090000002800010007000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000014000b0006000000000000000200000000000000100006000300000009000000020000000c000300020000000008000014000a00faffffff00000000040000000000000050000180100002001b0000000a0900000100000014000b00ffffffff000000000b0000000000000014000a000700000000000000010000000000000014000b0003000000000000000200000000000000a80001800c00070003000000080000000c0003001fc300000600000014000a00040000000000000003000000000000000c000500000000001e0000000c000900060000000000000040000c801400010006000000d90f00004105000081000000140001000600000083090000400000008100000014000100010000008b0300000000000088a8000014000b0010f00000000000000a000000000000000c0003000900000000040000280001800c00090000080000030000000c000700030000000b0000000c0007000200000005000000400001800c00070005000000018000001000020080000000d80d00000600000014000a00e20000000000000003000000000000000c00090008000000ffffffff18001680140001801000060005000000030000"], 0x3e4}, 0x1, 0x0, 0x0, 0x24004811}, 0x40)

9m41.214334002s ago: executing program 0 (id=1506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b000700000000000000"], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16=r1, @ANYBLOB="01001edcf31d9eba00000000000000003a00", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f00000003c0)=0x400, 0x4)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(0xffffffffffffffff, 0xa, 0x24, &(0x7f00000001c0)="2bb7c24d6378774e4a61190dfc73d6f43e23a78dcfb9ac80c1ceccf79c1467ff2b48769cd74ce6885ca04d3d", 0x2c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}], 0x18)
bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x4}}, 0x10)
sendto$inet6(r11, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="17000000", @ANYRES16=r13, @ANYBLOB="340428bd7000fbdbdf250300000000000300040000000000000000000b00fe88000000000000000000000000fe011e5069d85709a18e2267153df305fe589ea328f75efc828e441bcd5ec64bbddf"], 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x409c)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000000000000000000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80)="aa57fe9d974aee576fc01305b70e8e942781ac1999c6194324ad", 0x1007, r14}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r14, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r15=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000007c69536b8400003a00000008000300", @ANYRES32=r15, @ANYBLOB="05005b00fc000000"], 0x24}}, 0x0)

9m40.344184987s ago: executing program 0 (id=1517):
socket(0x28, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0xfffffffffffffe90) (async)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000440)={0x81, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x8, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffc, 0x11, 0x8, 0x4, 0x100000001, 0x7fffffff}, 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r6 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32)
r7 = socket$inet(0xa, 0x801, 0x84) (rerun: 32)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64)
r8 = accept4(r7, 0x0, 0x0, 0x80000) (rerun: 64)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) (async)
bind$can_raw(r9, &(0x7f0000000040), 0x10) (async)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000600)={{0x2, 0x4e24, @multicast2}, {0x1, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, r0, 0x0)

9m40.244864799s ago: executing program 0 (id=1518):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'veth0_to_batadv\x00', {0x2, 0x4e20, @local}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800060052000000080005"], 0x38}}, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f00000000c0)={0x47, 0x5, 0x3, 0x8000}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r10, 0x2f, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r11}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="104a0400000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x0)

9m40.133146034s ago: executing program 32 (id=1518):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'veth0_to_batadv\x00', {0x2, 0x4e20, @local}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800060052000000080005"], 0x38}}, 0x0)
sendfile(r0, r0, 0x0, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f00000000c0)={0x47, 0x5, 0x3, 0x8000}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x0, <r11=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r10, 0x2f, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r11}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="104a0400000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x0)

1m57.343080775s ago: executing program 1 (id=6322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) (async)
r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3)
sendfile(r2, r2, 0x0, 0x10001)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r5, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="f65dc06008d337ca6fd32a87b23b0ca6bdc47c2376b33da264e4f3b29a6f69e471ce8ce4915f96f45cd95d6d7bb25a5d1935311a22cb83a740933811571e33b9b12eb04e33857edd74046f37dad45aa05856f1258d8164077bbdaf9f9768c8d4527c20b152ca1eca5af8375e2bb69b4c12111578afd5e2d8fb76232243047f10c721d6ba7005e4cd404da032df95f8a7eeab95ed03fd9af6498db22cb911672bae0e39bfb06932d147d8b43a7cfdc1dfae9fcde4171ebac9c4afd0fd5ed9770e25436ac53bd76fade4df192d0c43d190d70142a51c331aca9493", 0xda}, {&(0x7f0000000500)="33ec018e56a7a77bf15e3505922de3cd9dde6edc4bf0dd8e213688043915ea3cc1d17c4f1c1d6f26282d3574cd75f0c404e9b908ed9d9a3821133abde4cd9cc088108de429a0e6c31b51405d92c31330d3fb2cd008081d73c34e057bce558ecd238d36b4e0d35bd8386a982dab9e1b8028d9923c24cce616fd6f3ca09e7dc11cc5d7e1b48640ef257c5ec4a7863467ced819e54fa728ad1aefa35ceff4c082e26df0c8e8d325a13d4576878e4f4de96a4d68b1953264afb998c70d6ce1", 0xbd}, {&(0x7f00000005c0)="cac90f5addb0e51e58e0132f88530531f3e048b8ec26a932b5a21d3952a87387cc387f0c3e049fad577f6c8603861ce7e9974e9cc7308f8a48815f1c357f3a36529c01427547bd1f221e915ea2cfe2bf9af0372544e91dc27d47ed9ec0ac95121b0e82d906d50e23b811c47689d8cbd13535f156ff1b24b342cc13bbf5f5cc8d89775234437544211980b3aa301dd0bd80b1b4cbf8f738f55c46b5c25ff6e6b1946e2479e476b9cca00f81bf37798f32b5cd73c1e68e5d985e840f0b8b2bff945902cfeffc84d4ba4dc7df10ca262ffc296b94a631aab6a3621ec2a99a38ced737bc8bb3dc8bb90cb0e3ff354c623c343dca0afd19ee476cc1edb61bc761", 0xfe}, {&(0x7f00000007c0)="0719e04580973538763c12dc18f7b6596b22664c023d6682605bd1df28ea6efac733c5d99e7974507ffd1671b0d32a23194a9022b6b3758f307ae2a925c92066fa5e707281a1946f16c1adbc675ecf2efa8aacd7634ababa18681f11ce89f326c69f455f039a86f54f8fc653fa2893d4fabd22a6ebed2cde81d573468736a549445a35c0c456fb22efb0f3d522010f5f1a4e5377e892783be31446f3e2", 0x9d}, {&(0x7f0000000880)="823f0a739f732953914b48ef43c38390024a706ac204da022813bbd421b65104311d8fdf55b485c594f8dd817cf0037e130bbd8c96bdf6cd8884c4dd67e6b80cb650be47176dd2f4a37c556cae68a1d3648d94bcf9ff7d5bb55fcd8bdb3060c1737fead174c67fd75a1a61b9e2e1cde130433eac2c9795a47417da8f9d35bd8d3a20a9a63b28b9c54607e10546f6c388df16daee86b86817ac6ef2d7f392411aec011db6c3f4f9eb17", 0xa9}, {&(0x7f0000000d40)}], 0x6, &(0x7f0000002d40)}}], 0x2, 0x40)
socket$key(0xf, 0x3, 0x2) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) (async)
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b04fc000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000700)=0xfffffffd, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={<r9=>0x0, 0x8, 0x3, [0x200, 0x9, 0x2]}, &(0x7f0000000380)=0xe)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={r9, @in6={{0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x86}, 0xfffff7fc}}, 0xc, 0x400, 0x2, 0x3, 0xd2, 0x6, 0x98}, &(0x7f00000006c0)=0x9c) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) (async)
socket$kcm(0x10, 0x2, 0x0)

1m57.085960554s ago: executing program 1 (id=6326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYRES16=r3, @ANYRES32=r1, @ANYRESHEX=r3, @ANYBLOB="98fccbe7bdb2bc5dc8ab2d51e5243382c475dca4a4d0e5ed6ea1f34d590b2c8629b14e8bf8b958a7cef222122da516c41cfb42692db2e9cd004373abf8e6322c0f9027ee9ad3e267874bcac8229829bd05e5e86a2887bf138946dccbec7dd90cf8c05e54de82d32d9749b77715b56763633d87a2ae0688b1418cfc19b0571c95a20d928404ec6e879899f8c7aa99a0f1", @ANYRESDEC=r3, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES64, @ANYRES64=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2404c885}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000440)=[{&(0x7f0000001780)=""/262, 0xfffffffffffffe61}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/114, 0xffffffffffffffdd}, {&(0x7f0000000500)=""/100, 0x74}], 0x4, 0x4, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000008d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0xff98)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0xe6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wg1\x00'})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x24, 0x0, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="1400000010000100000000eb754b5063effd940a5c000000060a010400000000000000000a0000010900010073797a3100000000308052280e0001800b000100736f636b657400001c000280080002400000000808000300000000cb08000140000000030900020073797a3200000000140000001100010000000000000000000100000200000000000000420ebdec26de99a02d68359e38422937eca092"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000000022d02f1b402f67cdeff1e043fa"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r8}, 0x20)
syz_emit_ethernet(0x200000, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x8}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x9b, 0x2}}}}]}, 0x44}}, 0x800)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1m57.009656518s ago: executing program 1 (id=6330):
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x30}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0)
close(0x4)

1m56.809896455s ago: executing program 1 (id=6331):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={<r3=>0x0, 0xff6}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x69, "0e31ec06cc3da285586dd3fe131e9bd4bc1094518457fbc578212d60c8e64883374af87a736f428000584ed8bb01b8b5c8df1d5ae7b4a3faefd0f6edaf77ad0dd8c225285ae62924e5e362983ee17e6639f54551d0631437872730807669bd9c49fdc2be395eaebe00"}, &(0x7f0000000380)=0x71)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r6, @ANYBLOB="8100000000f51b008fb0babc34"], 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000003c00070100040000000000de037c00000400fc80"], 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4)

1m56.639827285s ago: executing program 1 (id=6334):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004a80), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r3, @ANYBLOB="080012000a0002"], 0x28}}, 0x10)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @empty, 0x1, 0x1, [@empty]}, 0x14)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r4, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f00000002c0)={&(0x7f0000000280)=""/39, 0x27, <r5=>0x0, &(0x7f0000000340)=""/82, 0x52}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x3, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x25, &(0x7f0000000200)=""/37, 0x41100, 0x4, '\x00', 0x0, @fallback=0xc, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x9, 0xfffffffc}, 0x10, r5, r6, 0x4, 0x0, &(0x7f00000004c0)=[{0x3, 0x4, 0x0, 0xb}, {0x4, 0x4, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x9}, {0x5, 0x4, 0xe, 0x7}], 0x10, 0x1}, 0x94)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000006c0)={<r8=>0x0, @rand_addr, @broadcast}, &(0x7f0000000700)=0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x9, '\x00', r8, r4, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x6, '\x00', 0x0, r4, 0x0, 0x0, 0x5}, 0x50)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}}, 0x4000)
getsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4)

1m56.55591512s ago: executing program 1 (id=6336):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080008000000000000031400000045f0003600000000002f9078ac1e0001ac1414aa220022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50080000907810004adcda08f6e83e2aa0e5dc3f88a840e8bb7bb2ebe4ef6a65fb05374f964f78a8830d188582dc29f5719951e5af42ff09fb0b0570fc78095f"], 0x44) (async, rerun: 64)
r3 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
close(0x4) (async, rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket(0x10, 0x3, 0x0)

1m56.443895476s ago: executing program 33 (id=6336):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080008000000000000031400000045f0003600000000002f9078ac1e0001ac1414aa220022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50080000907810004adcda08f6e83e2aa0e5dc3f88a840e8bb7bb2ebe4ef6a65fb05374f964f78a8830d188582dc29f5719951e5af42ff09fb0b0570fc78095f"], 0x44) (async, rerun: 64)
r3 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
close(0x4) (async, rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket(0x10, 0x3, 0x0)

1.745011182s ago: executing program 3 (id=7753):
unshare(0x68040200)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002000ff7f006772658561700092181d3d6703920200000c00028006004300ff000000000000000000"], 0x40}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r8], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
unshare(0x12010200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$inet6(0xa, 0x3, 0x8)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000000)=0x11800, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r13=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x5, &(0x7f00000001c0)=[{0x1, 0x0, 0x98, 0x8e66}, {0xa8, 0xf9, 0xfa}, {0x3, 0x2, 0x3, 0x3}, {0x200, 0x80, 0x7, 0x3}, {0xf, 0x0, 0x0, 0x5}]}, 0x10)
sendmmsg$unix(r13, &(0x7f00000000c0), 0x3f, 0x0)

1.351079619s ago: executing program 3 (id=7754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x800})
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x21800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x24766}]}}}]}, 0x48}}, 0x0)

1.349550257s ago: executing program 3 (id=7755):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100))
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x28)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @multicast}, 0x10)
shutdown(r1, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'veth1\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xffe0}, {0x5, 0xe}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESDEC, @ANYRES32=r9, @ANYRESHEX=r11, @ANYRES16=r8, @ANYRES16=r13], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r15}, 0x38)
bind$bt_hci(r14, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

1.11915839s ago: executing program 3 (id=7757):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001600)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f00000004c0)="2e85e853", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}}], 0x2, 0x40)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba00, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}}, 0x8000002)

930.831875ms ago: executing program 3 (id=7762):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80) (async)
r2 = accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='rpc_socket_nospace\x00', r1, 0x0, 0xb}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='rpc_socket_nospace\x00', r1, 0x0, 0xb}, 0x18)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x884)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r0, 0x1)
gettid() (async)
gettid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80))
getgid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = gettid()
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)

569.00433ms ago: executing program 4 (id=7770):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x13, 0x6d, 0x4, 0x39, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xb, 0x0, 0x0, 0x70bd27, 0x3507}, @sadb_address={0x3, 0x6, 0x33, 0x57966da647a9da0a, 0x0, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_key={0x19, 0x8, 0x5f8, 0x0, "e51a9ea4f664e1a751936e40294114e0f7c0745f763e093e7014655c392e6ee6501118e15a00fbfb9ee13aa6626b84f21ad50e932a307d03158ad0a931851afc0782c4df99e8bb7eda896b000f0872eab037711611c7c74bbf44ecf38302616cc5cf13d1a31c258abc56ab55ddf498ee516694a9f818c64b6d81e8011a7c2a8c562da136e56ee4b1277d3fce370a016b3c24cf0e578b1c3ce25bd466a216de54d6aeba04b4526f075aa737f23d6aaf6bd1afaf23c06dadb662c7f4195e70de"}, @sadb_address={0x5, 0x7, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e22, 0x7f, @local, 0xf}}, @sadb_x_sec_ctx={0xc, 0x18, 0xb, 0x7f, 0x58, "bf8404da0422db5714c4c56d6c0890f86b6bc4b29dfd8259d94fb53ba4d108280ff6949a45046f2ca8a540c46d4e2ed38d69ca01130bc7f0b75171bd89725241b27c8180eafb2077f29e33de0bb605279c00b1a27a09d14b"}, @sadb_address={0x3, 0x5, 0x3c, 0x80, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast2, 0x1a, 0x0, 0x14}]}, 0x1c8}}, 0x8080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x8, 0x5}]}]}, {0x0, [0x0, 0xe, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21, 0x6}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x30}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x13, 0x6d, 0x4, 0x39, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0xb, 0x0, 0x0, 0x70bd27, 0x3507}, @sadb_address={0x3, 0x6, 0x33, 0x57966da647a9da0a, 0x0, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_key={0x19, 0x8, 0x5f8, 0x0, "e51a9ea4f664e1a751936e40294114e0f7c0745f763e093e7014655c392e6ee6501118e15a00fbfb9ee13aa6626b84f21ad50e932a307d03158ad0a931851afc0782c4df99e8bb7eda896b000f0872eab037711611c7c74bbf44ecf38302616cc5cf13d1a31c258abc56ab55ddf498ee516694a9f818c64b6d81e8011a7c2a8c562da136e56ee4b1277d3fce370a016b3c24cf0e578b1c3ce25bd466a216de54d6aeba04b4526f075aa737f23d6aaf6bd1afaf23c06dadb662c7f4195e70de"}, @sadb_address={0x5, 0x7, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e22, 0x7f, @local, 0xf}}, @sadb_x_sec_ctx={0xc, 0x18, 0xb, 0x7f, 0x58, "bf8404da0422db5714c4c56d6c0890f86b6bc4b29dfd8259d94fb53ba4d108280ff6949a45046f2ca8a540c46d4e2ed38d69ca01130bc7f0b75171bd89725241b27c8180eafb2077f29e33de0bb605279c00b1a27a09d14b"}, @sadb_address={0x3, 0x5, 0x3c, 0x80, 0x0, @in={0x2, 0x4e23, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast2, 0x1a, 0x0, 0x14}]}, 0x1c8}}, 0x8080) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x8, 0x5}]}]}, {0x0, [0x0, 0xe, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21, 0x6}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x30}}, 0x0) (async)

460.677832ms ago: executing program 2 (id=7772):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x1ec, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x98, 0x3, "6ffa316cb6bc97bd3cba927ceb9040d14ce7c72870fd47e63aded6c696308e0b21283dcfda3c0060e34448da03b3e340f28da7c940c88a5514b2fadc4d8ae00f07a9aa91068e519e29df3e6b9c539eadd54e72b2afcbf798f3c4579ed7f0b75a2318887e067b1660831a929faa8feac592c8cf47bbdefc931fd71960e5e180473174ee07734654f4d3149075fb86e938ff946a34"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x86}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x56}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x60000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x405}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}]}, 0x1ec}}, 0x4040040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000100001042b8e28bd7000000000000094f0321bbaed000000", @ANYRES32, @ANYBLOB="20240000000900000a0001000180c20000000000"], 0x2c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x23, 0x2, 0x0, &(0x7f0000000040))
socket(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x184, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x154, 0x2, [@TCA_FLOW_EMATCHES={0x148, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x40, 0x1, 0x9}, {0x6, 0x4, 0x7fff, 0x0, 0x8, 0x3, 0x1}}}, @TCF_EM_IPT={0x104, 0x3, 0x0, 0x0, {{0x1ff, 0x9, 0x81}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xdf, 0x5, "6ff1499d99d13b1aa43c0bbf438345ebf61fab82840e9ff9d5f87f276b8c9e43e6a54a7ea5a0cf18f7c739af000fe81fb90a67240a430a4b67038a2387b86f54b46ccd780da30969ff006fbea5408625fbe067e2e56598bb05796ad516dd790df8dced87da9b1ad10e501b123a3593c17a77d65b9fffba1297eb3409cc89d97524adc495c625e0721c1bfa6f39cc989e7e65ccadf113597d93fb9a2bbaa1f9e7b9f59040f9642913d61b8a32709bc13efbf7eb9f6cd950e8fdbda964b4f91ac58037bf43bd569b6ee10bee321b97fa4998062d07186d95963bf993"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x4}, "dbfb35b869ac1b984a4174bb46913e06"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d34}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES8=r8, @ANYRESOCT, @ANYRES16, @ANYRES64=r7, @ANYRES8=r6, @ANYBLOB="8de6ed2665e9cdf31c294b9cdb78e11ae9708ed60f9876ba132236cf2fb5cc18bbe68720ddb7e964d11c56ea83ef81fcf77cded8eeb0bb7b99484c326fda0f7d98bfd2929d9498918040d94ee6204979f11691f85cc7348ad8cd645868885ce5712940de42d3ad81733cf3c8d270b74a1ae8c69460397bb776ec770faf1f4642597cbf903eda8bc188cf10efcac5d8aa8ba417232f1730d8dc", @ANYBLOB="4028d46ea097a6431836c19587ee4283415e0034b9ae9cdae40b7239687d5162e3d9077244bea843602c614ac707e197c646afe6f42ddf5d980b109071dc531336af2561bec3bb5cbfbafed4d5ea9a05169e8d832d2c0dcd1f4fdbfd1aa6fef894a0ee12e32c4cdbcecd150dd08fce9696ba91b29afda59267ec0ec8d4840b30027333e7945345a4b488a56f9601aa106a4a86db69d7f8c255717964dca877f6ea3d0219e82c86ab61c725df"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet(0x2, 0x3, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r9, 0x4018f50b, &(0x7f0000000240)={0xffffdffd, 0x100, 0x9})
socket$nl_route(0x10, 0x3, 0x0)

452.772287ms ago: executing program 4 (id=7773):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000100000000000080000000010034030000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

449.572438ms ago: executing program 4 (id=7774):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xd92, 0x10, 0x0, 0xe3, 0x3}}, {0x4}}]}]}, 0x58}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.events\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x129, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x12aa92d51a87d63e, 0x8, '\x00', r5, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0x6, 0x3}, 0x10, 0x6c4b, r6, 0x1, 0x0, &(0x7f0000000480)=[{0x5, 0x2, 0x5}], 0x10, 0x2}, 0x94)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async)
socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xd92, 0x10, 0x0, 0xe3, 0x3}}, {0x4}}]}]}, 0x58}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.events\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x129, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x12aa92d51a87d63e, 0x8, '\x00', r5, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0x6, 0x3}, 0x10, 0x6c4b, r6, 0x1, 0x0, &(0x7f0000000480)=[{0x5, 0x2, 0x5}], 0x10, 0x2}, 0x94) (async)

370.497647ms ago: executing program 2 (id=7775):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300) (async)
sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="135bfa25e8b57ffe68498d3d3bcbeb875713c98cb22a7bec063fcb42a004c4377d08dece84ac6196a2a92e465e297440d55ac9d44233cbf57ea142b455328b116f8de2e68bf833c6c87188627a93fc84df42d4464d44e1883f8207d224824611a834550b5521dfad7aeb85841d7395bcc160e98e1b1732baa682bf668b6d5de80247026e0717ff1f0760740ca2190272216029917e3447faf5f533d0449ade69f8a3c7d72d9a110ac5942cbdd196f9d45ce96637ad", 0xb5, 0x48802, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0c009900f40000002e000000080026007f17000008009f00"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2c0d3c1b}, 0x8090) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r4=>0x0}) (async)
r5 = socket$kcm(0x10, 0x2, 0x10) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r5, 0x0, 0x4) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r6, 0x0, 0x3}, 0x18)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r7, 0x0) (async)
poll(&(0x7f0000000040)=[{r7, 0x2124}, {r7, 0xb0c4}], 0x2, 0x11ff)
shutdown(r7, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000", @ANYBLOB], 0x174}}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) (async)
getsockopt$sock_buf(r9, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) (async)
r10 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, 0x0, &(0x7f0000000400)) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

369.561914ms ago: executing program 2 (id=7776):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c0001802500010021"], 0xf0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4001000)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="851e", 0x2}], 0x1}, 0x1)
recvmsg(r6, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x60002060)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)

310.380831ms ago: executing program 4 (id=7777):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000002780)={0x13c4, r1, 0x10, 0x9e, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe972}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "02b956b247d2a005879a983f70df7e48a3e3f59310e9266e56ec37361f7053f04e2d79ad4af11adabb4fba6d1d9388130986feae07f43c31cda49fa210d08d3ac6c3da9aa42cf0efef3080eb68a4fbe3a8717722345154706669032afbac3fc55711b65f79de5aec5471122d8254d95a04919e6b64c530a338d5e02cb4dd76952f6e395e85e8f7ed06e195e4ab437eed"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x240000}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "2a806c99ad1ac98d1fba4b01b9174f40a503e67c952fc06ab6152e6c6051a2dea0e87a1ba96e453e8046380e2d7d37d0e919ef418cba42dfbe34c3e96344ed432a1d9f2113a90d27dfadc151841225d6ae50769b0f00d3cbb246a4cda3c21735a47c20dd9d1c6d10d74c59c71231eb45a5e4f66cfdfa569db8cf79166bf02ff3293b3185a5f080d9911a9f0e4c78846482acfe9f10f2c7fd51ea225c0542b6be0d992d93ec30493df0c3da3aa22f2279"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb6, 0x5, "6e18a035cffd7ff459d479faac25008152bd4fa200382bf8ff54ebff801af29dca8b9e846b2c1befd107001cd640ebd36ccb57af7652e1473e1d172a52b2730a35d75d072f11814a895f154f856d8a78343dc2ffaf48918db5f615acaa6824b73db31790ccee20ed55e28c98170434fe765452e2131e2d8b1f50560c4db46088b88de192d1f0fc56e59b7aaf78fbd7ca50b2223b18083b7e6d8585f20a45dbc64e41d99b93711c7698cbaed61dece499ea46"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x103, 0x5, "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"}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0xff}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xf76}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x10}, 0xbe4930cfe9f5796)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe10010000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f00000000c0)=@udp6}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0x4}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4880)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x38, 0x21, 0x20, 0x70bd29, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x4, 0x2, 0x0, 0x0, 0x4, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x101}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f000801}, 0x40054)
r14 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r14, 0x114, 0x3, &(0x7f0000000000)={{0x3, 0xfffffff4}, 0x7}, 0x10)

213.78487ms ago: executing program 4 (id=7778):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x5)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000a80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xdc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl(r0, 0x8b2c, &(0x7f0000003600)="0eaa63d7a0276cfe85c70edbccbb61654000accd49c20c38303f5a35822bfe06107925033e3749e885b1200e30a63fde76d9d02428345c0614a708baa4d68ce75907eb057bbf6dbf4d9852dce7add0476b5c5fb8df3c074750fc7c977eccbd1276")
r3 = socket(0x10, 0x803, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000003580)={'TPROXY\x00'}, &(0x7f00000035c0)=0x1e)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf25430000000c009900ff0700003f0000000c0058007500000000000000000000002e000000000000000c00580040000000000000000c00580030000000000000000c0058003d000000000000000c0058001800000000000000a6f265e5989a4a8e3c9110197b95ce228ca3fb3b7ea3b84f68694ec881e3ed3c2932883d772ad11b5e5f2a55f1efaa591e22b59aef8cac4c90c4a90ba7aaf4eb7e8bda760222c135173ae62de7081f68d100ba523792c70ba0c5a804042c08b403e528a8ff17453b21e8334d4995a86c79f78b2bf02d045e"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008800)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can_delroute={0x58, 0x19, 0x2, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "374c436b61519afa"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "71f3a36d6acce3be"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}}]}, 0x58}}, 0x4000080)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32], 0x28}}, 0x0)
sendmsg$nl_route(r5, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a005fa62bbd7000fedbdf250200000000000000080005007c0211a7"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_compaction_kcompactd_sleep\x00'}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x0, 0x4, 0xf6, &(0x7f00000006c0)=""/246, 0x1e00, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xa, 0x2, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000c80)=[{0x2, 0x3, 0xa}, {0x6, 0x4, 0x5, 0x2}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

213.094375ms ago: executing program 2 (id=7779):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x2, 0x80805, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250e00000014000180290004004e2300004c00080000008034a61d9f"], 0x28}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x2}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async)
r4 = socket$inet(0x2, 0x3, 0x104)
setsockopt$MRT_ASSERT(r4, 0x0, 0xcf, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
connect$tipc(r2, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x1}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x81, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r5}, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095000000000000a0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400e000", @ANYRES16=r7, @ANYBLOB="090300000000010000001d000000"], 0x14}}, 0x4054) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$inet6(0xa, 0x3, 0x2f)
sendmsg$sock(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x3d, 0xeb}}], 0x18}, 0x40090)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="140004006e696376504eb1a600000000000000000800050009"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

80.903179ms ago: executing program 4 (id=7780):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4009b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x700, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

79.798213ms ago: executing program 2 (id=7781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xc50f, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

78.810699ms ago: executing program 3 (id=7782):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r1, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

0s ago: executing program 2 (id=7783):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8002}, 0x4)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x7ffd, 0xd, 0x1, 0x1fc, 0x0, 0x5}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000)

kernel console output (not intermixed with test programs):

0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.720646][T29973] team0: Port device team_slave_0 added
[  651.725970][T29973] team0: Port device team_slave_1 added
[  651.760962][T29973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.765363][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.775567][T29973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.782887][T29973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.786686][T29973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.796810][T29973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.870319][T29973] hsr_slave_0: entered promiscuous mode
[  651.874108][T29973] hsr_slave_1: entered promiscuous mode
[  652.265797][T30003] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  652.269652][T30003] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  652.398682][T30005] tipc: Resetting bearer <eth:syzkaller0>
[  652.501416][T30009] validate_nla: 8 callbacks suppressed
[  652.501434][T30009] netlink: 'syz.3.6345': attribute type 13 has an invalid length.
[  652.504947][T29973] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  652.520959][ T5874] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  652.526877][ T5874] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  652.530096][ T5874] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  652.539229][T29973] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  652.586006][T29973] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  652.596141][ T5874] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  652.600525][T29973] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  652.627823][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  652.642036][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  652.660280][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  652.672373][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  652.736290][T30016] netlink: 'syz.3.6349': attribute type 19 has an invalid length.
[  652.756421][T30025] netlink: 'syz.2.6350': attribute type 4 has an invalid length.
[  652.902473][T30025] tipc: Resetting bearer <eth:team0>
[  653.036021][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.038575][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.041095][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.050251][T30039] syzkaller0: entered promiscuous mode
[  653.051905][T30039] syzkaller0: entered allmulticast mode
[  653.060139][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.122523][T29973] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.157302][T29973] 8021q: adding VLAN 0 to HW filter on device team0
[  653.171413][T23094] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.174421][T23094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.193516][ T5234] Bluetooth: hci0: command tx timeout
[  653.199781][T20979] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.202677][T20979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.374409][T29973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.548153][T29973] veth0_vlan: entered promiscuous mode
[  653.564112][T29973] veth1_vlan: entered promiscuous mode
[  653.641072][T29973] veth0_macvtap: entered promiscuous mode
[  653.654971][T29973] veth1_macvtap: entered promiscuous mode
[  653.682573][T29973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.696860][T29973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.711127][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.714681][T30080] netlink: 'syz.3.6360': attribute type 9 has an invalid length.
[  653.718256][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.728036][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.754558][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.874943][T23094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.876681][T30082] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  653.877409][T23094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.920524][T30082] bridge80: entered promiscuous mode
[  653.922303][T30082] bridge80: entered allmulticast mode
[  653.929189][T30082] team0: Port device bridge80 added
[  653.994796][T23093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.997860][T23093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.066772][T30084] netlink: 'syz.3.6362': attribute type 20 has an invalid length.
[  654.077980][T30084] netlink: 'syz.3.6362': attribute type 21 has an invalid length.
[  654.435259][T30114] : renamed from bond_slave_0 (while UP)
[  654.701790][T30126] tipc: Started in network mode
[  654.709851][T30126] tipc: Node identity de3e52895822, cluster identity 4711
[  654.713661][T30126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.718320][T30126] syzkaller0: entered promiscuous mode
[  654.720822][T30126] syzkaller0: entered allmulticast mode
[  654.752448][T30126] tipc: Resetting bearer <eth:syzkaller0>
[  654.770031][T30125] tipc: Resetting bearer <eth:syzkaller0>
[  654.789216][T30125] tipc: Disabling bearer <eth:syzkaller0>
[  655.059561][T30130] 8021q: adding VLAN 0 to HW filter on device bond9
[  655.177355][T30136] __nla_validate_parse: 15 callbacks suppressed
[  655.177374][T30136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6377'.
[  655.284104][T25845] Bluetooth: hci0: command tx timeout
[  655.330279][T30136] vlan3: entered allmulticast mode
[  655.337208][T30136] veth1: entered allmulticast mode
[  655.442260][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'.
[  655.496640][T30146] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6381'.
[  655.559703][T30149] netlink: 'syz.4.6381': attribute type 1 has an invalid length.
[  655.755885][T30155] netlink: 'syz.4.6383': attribute type 1 has an invalid length.
[  655.788892][T30155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6383'.
[  655.906935][T30160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  656.020861][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6387'.
[  656.047691][T30171] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  656.108997][T30179] netlink: 'syz.4.6390': attribute type 1 has an invalid length.
[  656.117598][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'.
[  656.120665][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'.
[  656.141522][T30179] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  656.144853][T30179] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  656.150013][T30179] bond1: (slave vcan1): making interface the new active one
[  656.150678][T30176] netlink: 'syz.3.6389': attribute type 1 has an invalid length.
[  656.152780][T30179] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  656.156719][T30176] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6389'.
[  656.182664][T30179] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[  656.189019][T30179] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[  656.195792][T30179] 8021q: adding VLAN 0 to HW filter on device bond1
[  656.206693][T30190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6393'.
[  656.221664][T30190] team2: entered promiscuous mode
[  656.224983][T30190] team2: entered allmulticast mode
[  656.226899][T30190] 8021q: adding VLAN 0 to HW filter on device team2
[  656.263433][T30188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6392'.
[  656.502694][T30214] 8021q: adding VLAN 0 to HW filter on device team0
[  656.512406][T30214] tipc: Resetting bearer <eth:team0>
[  656.517829][T30214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  656.589817][T30219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  656.609092][T30219] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  657.354050][T25845] Bluetooth: hci0: command 0x040f tx timeout
[  657.750550][T30258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  657.772784][T30258] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  657.797581][T30258] tipc: Resetting bearer <eth:syzkaller0>
[  657.803664][T30258] tipc: Resetting bearer <eth:syzkaller0>
[  658.152787][T30275] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  658.229073][T30280] xfrm2: entered promiscuous mode
[  658.230983][T30280] xfrm2: entered allmulticast mode
[  658.399086][T30294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  658.435204][T23096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  658.441392][T23096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.444869][T30298] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  658.449940][T30298] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  658.463884][T30298] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  658.525302][T30306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.591228][T30306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.676230][T23096] tipc: Resetting bearer <eth:syzkaller0>
[  658.707833][T30312] validate_nla: 3 callbacks suppressed
[  658.707846][T30312] netlink: 'syz.2.6428': attribute type 14 has an invalid length.
[  658.712146][T30312] netlink: 'syz.2.6428': attribute type 13 has an invalid length.
[  659.104493][T30329] netlink: 'syz.4.6431': attribute type 1 has an invalid length.
[  659.120927][T30329] bond1: (slave vcan3): The slave device specified does not support setting the MAC address
[  659.128918][T30329] bond1: (slave vcan3): Enslaving as a backup interface with an up link
[  659.146875][T30329] bond1: (slave vcan4): The slave device specified does not support setting the MAC address
[  659.161438][T30329] bond1: (slave vcan4): Enslaving as a backup interface with an up link
[  659.435490][ T5234] Bluetooth: hci0: command 0x040f tx timeout
[  660.166997][T30351] batadv_slave_0: entered promiscuous mode
[  660.181295][T30350] batadv_slave_0: left promiscuous mode
[  660.237351][T30355] __nla_validate_parse: 13 callbacks suppressed
[  660.237366][T30355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6438'.
[  660.276595][T30355] 8021q: adding VLAN 0 to HW filter on device bond100
[  660.292135][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6440'.
[  660.370138][T30364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6441'.
[  660.379685][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6442'.
[  660.385428][T30364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6441'.
[  660.403563][T30364] netlink: 'syz.3.6441': attribute type 14 has an invalid length.
[  660.406284][T30364] netlink: 'syz.3.6441': attribute type 13 has an invalid length.
[  660.435248][T30370] netlink: 'syz.2.6443': attribute type 1 has an invalid length.
[  660.444517][T30367] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  660.450455][T30367] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  660.486133][T30374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6444'.
[  660.529401][T30376] veth57: entered promiscuous mode
[  660.547972][T30376] bond133: (slave veth57): Enslaving as a backup interface with a down link
[  660.560923][T30370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6443'.
[  660.590680][T30370] 8021q: adding VLAN 0 to HW filter on device bond133
[  660.687272][T30386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'.
[  660.880990][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6447'.
[  660.899979][T30399] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6450'.
[  661.071483][T30404] syzkaller0: entered promiscuous mode
[  661.075554][T30404] syzkaller0: entered allmulticast mode
[  661.456986][T30420] batadv_slave_0: entered promiscuous mode
[  661.464032][T30421] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  661.472121][T30420] wg0: left promiscuous mode
[  661.476818][T30420] veth0_to_batadv: left promiscuous mode
[  661.489815][T30420] syzkaller0: left promiscuous mode
[  661.513560][ T5234] Bluetooth: hci0: command 0x040f tx timeout
[  661.514738][T30420] vlan1: left promiscuous mode
[  661.517770][T30420] bond79: left promiscuous mode
[  661.520073][T30420] macsec3: left promiscuous mode
[  661.524293][T30420] macsec4: left promiscuous mode
[  661.527172][T30420] bridge34: left promiscuous mode
[  661.529855][T30425] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  661.535446][T30420] sit8: left promiscuous mode
[  661.538911][T30420] team1: left promiscuous mode
[  661.541141][T30420] bond86: left promiscuous mode
[  661.544695][T30420] geneve0: left promiscuous mode
[  661.549637][T30420] team2: left promiscuous mode
[  661.578091][T30419] batadv_slave_0: left promiscuous mode
[  661.611971][T30430] netlink: 'syz.4.6459': attribute type 1 has an invalid length.
[  661.622300][T30430] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  661.734808][T30440] netlink: 'syz.3.6463': attribute type 1 has an invalid length.
[  661.802295][T30438] hsr_slave_1 (unregistering): left promiscuous mode
[  661.861236][T30441] bond101: (slave vxcan1): The slave device specified does not support setting the MAC address
[  661.869762][T30441] bond101: (slave vxcan1): Error -95 calling set_mac_address
[  662.578602][T30469] gretap1: entered allmulticast mode
[  662.841446][T30490] netlink: 'syz.4.6475': attribute type 12 has an invalid length.
[  663.668218][T30521] bridge0 (unregistering): left allmulticast mode
[  663.850053][T30531] tipc: Resetting bearer <eth:syzkaller0>
[  663.855591][T30530] syzkaller0: Caught tx_queue_len zero misconfig
[  664.084332][T30546] bridge81: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  664.551387][T30565] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  664.735885][T30571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  664.744943][T30571] syzkaller0: entered promiscuous mode
[  664.765418][T30571] syzkaller0: mtu greater than device maximum
[  664.890234][T30581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  664.938897][T30581] tipc: Resetting bearer <eth:syzkaller0>
[  665.199669][T30597] netlink: 'syz.3.6507': attribute type 13 has an invalid length.
[  665.202742][T30597] netlink: 'syz.3.6507': attribute type 17 has an invalid length.
[  665.321849][T30597] gretap0: refused to change device tx_queue_len
[  665.344217][T30597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  665.422159][T30609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.427777][T30610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.437225][T30610] tipc: Failed to remove unknown binding: 66,1,1/684687329:1402905991/1402905993
[  665.458794][T30609] tipc: Failed to remove unknown binding: 66,1,1/684687329:1402905991/1402905993
[  665.474836][T30609] tipc: Failed to remove unknown binding: 66,1,1/684687329:1402905991/1402905993
[  665.481036][T30614] netlink: 'syz.3.6511': attribute type 1 has an invalid length.
[  665.493740][T30614] __nla_validate_parse: 28 callbacks suppressed
[  665.493761][T30614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6511'.
[  665.521482][   T13] syzkaller0: tun_net_xmit 76
[  665.525269][   T13] syzkaller0: tun_net_xmit 48
[  665.543870][   T10] syzkaller0: tun_net_xmit 76
[  665.683604][ T5895] syzkaller0: tun_net_xmit 76
[  668.146491][T30636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6517'.
[  668.170142][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6515'.
[  668.254022][T30644] sctp: [Deprecated]: syz.3.6516 (pid 30644) Use of int in maxseg socket option.
[  668.254022][T30644] Use struct sctp_assoc_value instead
[  668.268485][T30644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6516'.
[  668.296809][T30644] bond102: entered promiscuous mode
[  668.298718][T30644] 8021q: adding VLAN 0 to HW filter on device bond102
[  668.470472][T30644] bond102 (unregistering): Released all slaves
[  668.551597][T30655] netlink: 'syz.2.6521': attribute type 11 has an invalid length.
[  668.557445][T30655] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6521'.
[  668.561350][T30654] netlink: 'syz.2.6521': attribute type 11 has an invalid length.
[  668.570159][T30654] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6521'.
[  668.595075][T30654] netlink: 'syz.2.6521': attribute type 10 has an invalid length.
[  668.598949][T30655] netlink: 'syz.2.6521': attribute type 10 has an invalid length.
[  668.605598][T30657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  668.609941][T30658] syzkaller0: entered promiscuous mode
[  668.612205][T30658] syzkaller0: entered allmulticast mode
[  668.646705][T30657] tipc: Resetting bearer <eth:syzkaller0>
[  668.670834][T30657] tipc: Disabling bearer <eth:syzkaller0>
[  668.791655][T30667] vcan0: Master is either lo or non-ether device
[  668.839112][T30674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6523'.
[  668.851270][T30675] netlink: 'syz.4.6525': attribute type 2 has an invalid length.
[  668.864393][T30675] k*]: entered promiscuous mode
[  668.885149][T30675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  668.947019][T30677] veth0_to_team: entered promiscuous mode
[  668.950223][T30677] veth0_to_team: entered allmulticast mode
[  669.072672][T30685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6527'.
[  669.099332][T30685] 8021q: adding VLAN 0 to HW filter on device bond102
[  669.566756][T30694] pim6reg: entered allmulticast mode
[  669.611640][T30693] pim6reg: left allmulticast mode
[  669.866434][T30696] bridge83: entered allmulticast mode
[  669.899575][T30699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6531'.
[  669.907467][T30700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.910297][T30700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.918045][T30699] netlink: 'syz.4.6531': attribute type 29 has an invalid length.
[  669.921219][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6531'.
[  670.071241][T30702] tipc: Resetting bearer <eth:team0>
[  670.080040][T30705] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  670.227878][T30702] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  670.276001][T30702] veth51: left promiscuous mode
[  670.277756][T30702] veth53: left promiscuous mode
[  670.280014][T30702] tipc: Resetting bearer <eth:syzkaller0>
[  670.288108][T30702] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  670.290946][T30702] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  670.295841][T30702] bridge80: left allmulticast mode
[  670.300048][T30702] xfrm2: left promiscuous mode
[  670.302047][T30702] xfrm2: left allmulticast mode
[  670.309512][T30702] veth57: left promiscuous mode
[  670.326696][T30702] bridge83: left allmulticast mode
[  670.349429][T30707] bond0: (slave gretap0): Error: Device type is different from other slaves
[  670.490662][T30721] syz_tun: entered promiscuous mode
[  670.492805][T30721] syz_tun: entered allmulticast mode
[  670.531370][T30721] __nla_validate_parse: 1 callbacks suppressed
[  670.531386][T30721] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6537'.
[  670.653651][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6540'.
[  670.667933][T30742] netlink: 'syz.3.6541': attribute type 1 has an invalid length.
[  670.757103][T30742] 8021q: adding VLAN 0 to HW filter on device bond104
[  670.770618][T30742] bond103: (slave bond104): making interface the new active one
[  670.776026][T30742] bond103: (slave bond104): Enslaving as an active interface with an up link
[  670.785975][T30750] pimreg: tun_chr_ioctl cmd 2147767506
[  670.795093][T30750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6543'.
[  670.805754][T30750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'.
[  670.816781][T30742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6541'.
[  670.861158][T30756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'.
[  670.865266][T30756] netlink: 'syz.4.6543': attribute type 5 has an invalid length.
[  670.868069][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'.
[  671.211271][T30766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6546'.
[  671.215334][T30766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6546'.
[  671.591311][T30774] bridge84: entered promiscuous mode
[  671.598210][T30774] bridge84: entered allmulticast mode
[  671.779752][T30783] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6551'.
[  672.171484][T30803] team0: No ports can be present during mode change
[  672.215862][T30805] netlink: 'syz.3.6556': attribute type 10 has an invalid length.
[  672.219261][T30805] netlink: 'syz.3.6556': attribute type 10 has an invalid length.
[  672.232776][T30807] netlink: 'syz.2.6557': attribute type 6 has an invalid length.
[  672.290464][T30809] netlink: 'syz.4.6558': attribute type 17 has an invalid length.
[  672.422674][T30809] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.426127][T30809] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.774871][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.788458][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.792298][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.812252][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.852529][T30829] syzkaller1: entered promiscuous mode
[  672.856808][T30829] syzkaller1: entered allmulticast mode
[  672.876939][T30832] syzkaller0: entered promiscuous mode
[  672.879427][T30832] syzkaller0: entered allmulticast mode
[  673.292755][T30843] netlink: 'syz.3.6566': attribute type 3 has an invalid length.
[  673.295494][T30841] macsec0: entered promiscuous mode
[  673.298667][T30841] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  673.306017][T30843] netlink: 'syz.3.6566': attribute type 1 has an invalid length.
[  673.327837][T30843] 8021q: adding VLAN 0 to HW filter on device bond105
[  673.351339][T30846] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  673.354777][T30846] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  673.357831][T30846] tipc: Resetting bearer <eth:syzkaller0>
[  673.806565][T30876] netlink: 'syz.3.6575': attribute type 1 has an invalid length.
[  673.834350][T30876] 8021q: adding VLAN 0 to HW filter on device bond106
[  674.130796][T30888] tipc: Resetting bearer <eth:syzkaller0>
[  675.508449][T30921] team0: Device is already in use.
[  675.539851][T30926] pim6reg: entered allmulticast mode
[  675.568839][T30928] __nla_validate_parse: 14 callbacks suppressed
[  675.568850][T30928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6589'.
[  675.569064][T30929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6589'.
[  675.656110][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6590'.
[  675.776209][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6591'.
[  675.813747][T30939] syzkaller0: entered promiscuous mode
[  675.816418][T30939] syzkaller0: entered allmulticast mode
[  678.574294][T30953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6595'.
[  678.724610][T30962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6598'.
[  678.759731][T30958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6597'.
[  678.762685][T30965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6597'.
[  678.781826][T30968] netlink: 'syz.4.6599': attribute type 1 has an invalid length.
[  678.860943][T30972] bond3: (slave geneve0): making interface the new active one
[  678.866218][T30972] bond3: (slave geneve0): Enslaving as an active interface with an up link
[  678.869731][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  678.901465][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  678.908380][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  678.911871][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  678.916149][T30971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  678.937691][T30979] netlink: 'syz.4.6602': attribute type 83 has an invalid length.
[  679.044021][T30986] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  679.302677][T31006] netlink: 'syz.2.6610': attribute type 1 has an invalid length.
[  679.339985][T31009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'.
[  679.344707][T31006] 8021q: adding VLAN 0 to HW filter on device bond135
[  679.358630][T31012] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003
[  679.413344][T31016] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6613'.
[  679.421325][T31006] 8021q: adding VLAN 0 to HW filter on device bond135
[  679.432380][T31006] bond135: (slave vxcan1): The slave device specified does not support setting the MAC address
[  679.437609][T31006] bond135: (slave vxcan1): Error -95 calling set_mac_address
[  679.463029][T31017] bond135: (slave bridge86): Enslaving as an active interface with a down link
[  679.672349][T31028] sctp: [Deprecated]: syz.3.6617 (pid 31028) Use of int in max_burst socket option.
[  679.672349][T31028] Use struct sctp_assoc_value instead
[  679.985497][T31048] tap0: tun_chr_ioctl cmd 1074025678
[  679.987816][T31048] tap0: group set to 0
[  679.995764][T31048] batadv0: entered promiscuous mode
[  679.999400][T31048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.202354][T31052] netlink: 'syz.3.6624': attribute type 17 has an invalid length.
[  680.228393][T31052] tipc: Resetting bearer <eth:syzkaller0>
[  680.316783][T31058] netlink: 'syz.4.6626': attribute type 1 has an invalid length.
[  680.393569][T31058] 8021q: adding VLAN 0 to HW filter on device bond6
[  680.399424][T31058] bond5: (slave bond6): making interface the new active one
[  680.403075][T31058] bond5: (slave bond6): Enslaving as an active interface with an up link
[  680.552818][T31070] netlink: 'syz.3.6630': attribute type 2 has an invalid length.
[  680.637832][T31082] __nla_validate_parse: 74 callbacks suppressed
[  680.637849][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6633'.
[  680.688994][T31084] geneve1: entered promiscuous mode
[  680.703978][T31084] bond0: (slave geneve1): Enslaving as a backup interface with an up link
[  680.708589][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  680.712132][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  680.721451][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.741209][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.807504][T31091] bond1: option mode: unable to set because the bond device has slaves
[  680.869455][T31094] ip6gretap0 (unregistering): left promiscuous mode
[  680.891779][T31091] bridge_slave_0: left allmulticast mode
[  680.893969][T31091] bridge_slave_0: left promiscuous mode
[  680.895909][T31091] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.900506][T31091] bridge_slave_1: left allmulticast mode
[  680.902669][T31091] bridge_slave_1: left promiscuous mode
[  680.905442][T31091] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.916381][T31091] bond0: (slave ): Releasing backup interface
[  680.920465][T31091] bond0: (slave bond_slave_1): Releasing backup interface
[  680.932337][T31091] team0: Port device team_slave_0 removed
[  680.938691][T31091] team0: Port device team_slave_1 removed
[  680.956349][T31091] bond1: (slave vcan1): Releasing backup interface
[  680.959044][T31091] bond1: (slave vcan2): making interface the new active one
[  680.970734][T31091] bond1: (slave vcan2): Releasing backup interface
[  680.972777][T31091] bond1: (slave vcan3): making interface the new active one
[  680.978538][T31091] bond1: (slave vcan3): Releasing backup interface
[  680.981094][T31091] bond1: (slave vcan4): making interface the new active one
[  681.010180][T31091] bond1: (slave vcan4): Releasing backup interface
[  681.016673][T31096] netlink: 'syz.2.6637': attribute type 1 has an invalid length.
[  681.020704][T31091] bond3: (slave geneve0): Releasing active interface
[  681.034479][T31091] bond5: (slave bond6): Releasing backup interface
[  681.041452][ T5873] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  681.051637][ T5873] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  681.058498][ T5873] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  681.061495][ T5873] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  681.166604][T31104] netlink: 'syz.2.6639': attribute type 1 has an invalid length.
[  681.251323][T31104] 8021q: adding VLAN 0 to HW filter on device bond136
[  681.291529][T31110] bond136: (slave veth61): Enslaving as an active interface with a down link
[  681.313474][T31104] 8021q: adding VLAN 0 to HW filter on device batadv5
[  681.316116][T31104] bond136: (slave batadv5): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  681.441863][T31117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  681.514537][T31120] 8021q: adding VLAN 0 to HW filter on device bond9
[  681.518352][T31120] A link change request failed with some changes committed already. Interface bond9 may have been left with an inconsistent configuration, please check.
[  681.609574][T31122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6643'.
[  681.618775][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6646'.
[  681.647822][T31133] bond137: (slave vxcan1): The slave device specified does not support setting the MAC address
[  681.652764][T31133] bond137: (slave vxcan1): Error -95 calling set_mac_address
[  681.727341][T31137] netlink: 'syz.3.6647': attribute type 10 has an invalid length.
[  681.761572][T31133] macvlan5: entered promiscuous mode
[  681.764316][T31133] macvlan5: entered allmulticast mode
[  681.767090][T31133] bond137: (slave macvlan5): Error -98 calling set_mac_address
[  681.858744][T31141] vlan3: entered allmulticast mode
[  681.862968][T31141] bond0: entered allmulticast mode
[  681.964979][T31139] netlink: 'syz.2.6646': attribute type 1 has an invalid length.
[  681.973446][T31139] nbd: error processing sock list
[  681.976089][T31139] block nbd3: shutting down sockets
[  682.130889][T31148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6651'.
[  682.182165][T31150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6652'.
[  682.221476][T31150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6652'.
[  682.228672][T31150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6652'.
[  682.253721][T31150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6652'.
[  682.257297][T31150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6652'.
[  682.360640][T31155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6653'.
[  682.668333][T31176] pim6reg1: entered promiscuous mode
[  682.670588][T31176] pim6reg1: entered allmulticast mode
[  682.719576][T31181] bond0: (slave geneve1): Releasing backup interface
[  682.728056][T31181] geneve1: left promiscuous mode
[  682.740381][T31181] tipc: Resetting bearer <eth:syzkaller0>
[  682.743879][T31181] bridge80: left promiscuous mode
[  682.748420][T31181] team0: Port device bridge80 removed
[  682.752836][T31181] bond133: (slave veth57): Releasing backup interface
[  682.763781][T31181] bond135: (slave bridge86): Releasing active interface
[  682.791345][T31181] bond136: (slave veth61): Releasing active interface
[  682.806030][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.842979][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.850182][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  682.854262][T31185] 8021q: adding VLAN 0 to HW filter on device bond1
[  682.861609][T31185] bond96: left promiscuous mode
[  682.866855][T31185] team0: Port device bond96 removed
[  682.870607][T31185] bond98: (slave bridge47): Releasing active interface
[  682.879997][T31185] bond103: (slave bond104): Releasing backup interface
[  682.884504][T31181] team0: Unable to change to the same mode the team is in
[  682.887929][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.113051][T31197] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  683.119412][T31197] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  683.223696][T31212] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  683.230677][T31212] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  683.467321][T31230] 8021q: adding VLAN 0 to HW filter on device bond1
[  683.489496][T31230] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  683.495206][T31230] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  683.505815][T31230] bond1: (slave macvlan2): Releasing backup interface
[  683.662925][T31234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  683.687306][T31236] batadv0: entered promiscuous mode
[  683.689365][T31236] batadv0: entered allmulticast mode
[  683.792816][T31236] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  683.897698][T31244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  684.090817][T31261] validate_nla: 3 callbacks suppressed
[  684.090832][T31261] netlink: 'syz.2.6686': attribute type 13 has an invalid length.
[  684.096791][T31261] netlink: 'syz.2.6686': attribute type 17 has an invalid length.
[  684.121592][T31261] 8021q: adding VLAN 0 to HW filter on device team0
[  684.132656][T31261] tipc: Resetting bearer <eth:team0>
[  684.137833][T31261] tipc: Resetting bearer <eth:team0>
[  684.141616][T31261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  684.241525][T31273] macvtap1: entered allmulticast mode
[  684.244318][T31273] bridge0: entered allmulticast mode
[  684.247512][T31273] bridge0: port 1(macvtap1) entered blocking state
[  684.250642][T31273] bridge0: port 1(macvtap1) entered disabled state
[  684.266577][T31273] bridge0: left allmulticast mode
[  684.292453][T31267] openvswitch: netlink: IPv4 tun info is not correct
[  685.529755][T31296] geneve10: entered promiscuous mode
[  685.531940][T31296] geneve10: entered allmulticast mode
[  685.610119][T31298] tipc: Resetting bearer <eth:team0>
[  685.614420][T31298] tipc: Resetting bearer <eth:syzkaller0>
[  685.618945][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.622936][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.627534][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.630880][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.825185][T31307] __nla_validate_parse: 18 callbacks suppressed
[  685.825203][T31307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6699'.
[  686.021463][T31315] wg0: left allmulticast mode
[  686.024705][T31315] veth0_to_bond: left allmulticast mode
[  686.026678][T31315] veth0_to_batadv: left allmulticast mode
[  686.028895][T31315] 1: left allmulticast mode
[  686.030396][T31315] hsr_slave_0: left allmulticast mode
[  686.059080][T31315] syzkaller0: left promiscuous mode
[  686.061247][T31315] syzkaller0: left allmulticast mode
[  686.095243][T31315] vlan1: left allmulticast mode
[  686.097422][T31315] bond79: left allmulticast mode
[  686.100059][T31315] macsec3: left allmulticast mode
[  686.103101][T31315] macsec4: left allmulticast mode
[  686.108496][T31315] bridge34: left allmulticast mode
[  686.111991][T31315] veth37: left allmulticast mode
[  686.115041][T31315] team1: left allmulticast mode
[  686.117940][T31315] ipvlan0: left allmulticast mode
[  686.119894][T31315] bond90: left allmulticast mode
[  686.122073][T31315] geneve0: left allmulticast mode
[  686.126275][T31315] batadv0: left promiscuous mode
[  686.129797][T31315] team2: left allmulticast mode
[  686.288408][T31329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6704'.
[  686.380970][T31338] netlink: 'syz.3.6707': attribute type 1 has an invalid length.
[  686.450174][T31338] 8021q: adding VLAN 0 to HW filter on device bond109
[  686.456369][T31338] bond108: (slave bond109): making interface the new active one
[  686.459260][T31338] bond108: (slave bond109): Enslaving as an active interface with an up link
[  686.471153][T31338] bond108: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  686.476301][T31338] bond108: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  686.631226][T31348] netlink: 'syz.3.6710': attribute type 9 has an invalid length.
[  686.634650][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6710'.
[  686.846242][T31364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6714'.
[  686.957085][T31368] netlink: 'syz.2.6715': attribute type 4 has an invalid length.
[  686.968354][T31368] netlink: 'syz.2.6715': attribute type 4 has an invalid length.
[  687.105809][T31373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  687.229350][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6717'.
[  687.336489][T31388] netlink: 'syz.4.6719': attribute type 58 has an invalid length.
[  687.339355][T31388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6719'.
[  687.592190][T31393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6720'.
[  687.602216][T31393] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6720'.
[  687.629334][T31393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6720'.
[  687.890981][T31402] netlink: 'syz.4.6722': attribute type 10 has an invalid length.
[  687.906800][T31402] team0: Port device dummy0 added
[  687.921387][T31402] netlink: 'syz.4.6722': attribute type 10 has an invalid length.
[  687.959948][T31402] team0: Port device dummy0 removed
[  687.976862][T31402] dummy0: entered allmulticast mode
[  687.979366][T31402] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  688.391358][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6725'.
[  688.738289][T31440] netlink: 'syz.2.6730': attribute type 10 has an invalid length.
[  689.185033][T31479] tipc: Resetting bearer <eth:team0>
[  689.190868][T31479] tipc: Resetting bearer <eth:syzkaller0>
[  689.203335][T31479] team0: Mode changed to "broadcast"
[  689.206235][T31479] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  689.242786][T31483] mac80211_hwsim hwsim146 wlan1: entered allmulticast mode
[  689.258286][T31481] bridge0: port 1(erspan0) entered blocking state
[  689.261561][T31481] bridge0: port 1(erspan0) entered disabled state
[  689.266262][T31481] erspan0: entered allmulticast mode
[  689.270263][T31481] erspan0: left allmulticast mode
[  689.278701][T31485] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.289655][T31483] bond0: (slave dummy0): Releasing backup interface
[  689.294533][T31483] dummy0: left allmulticast mode
[  689.306495][T31483] netlink: 'syz.4.6743': attribute type 10 has an invalid length.
[  689.309565][T31483] mac80211_hwsim hwsim146 wlan1: left allmulticast mode
[  689.312557][T31483] bond0: (slave wlan1): refused to change device type
[  689.318562][T31483] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  689.322441][T31483] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  689.341886][T31485] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.396318][T31485] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.465628][T31485] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.537629][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.573348][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.586030][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.601105][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.136612][T31512] netlink: 'syz.4.6751': attribute type 1 has an invalid length.
[  690.298372][T31515] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  690.397490][T31520] netlink: 'syz.4.6754': attribute type 1 has an invalid length.
[  690.466191][T31521] veth5: entered promiscuous mode
[  690.500140][T31525] netlink: 'syz.3.6755': attribute type 1 has an invalid length.
[  690.505419][T31525] workqueue: Failed to create a rescuer kthread for wq "bond110": -EINTR
[  690.579606][T31530] netlink: 'syz.3.6756': attribute type 13 has an invalid length.
[  690.587501][T31530] netlink: 'syz.3.6756': attribute type 17 has an invalid length.
[  690.629164][T31530] 8021q: adding VLAN 0 to HW filter on device team0
[  690.637373][T31530] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  690.654112][T31537] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  690.766414][T31554] netlink: 'syz.3.6762': attribute type 2 has an invalid length.
[  690.886522][T31561] __nla_validate_parse: 13 callbacks suppressed
[  690.886536][T31561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6764'.
[  690.929243][T31568] netlink: 'syz.4.6765': attribute type 13 has an invalid length.
[  690.932880][T31561] tipc: Resetting bearer <eth:team0>
[  690.935411][T31568] netlink: 'syz.4.6765': attribute type 17 has an invalid length.
[  690.944385][T31561] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  690.990405][T31561] tipc: Resetting bearer <eth:syzkaller0>
[  691.004210][T31561] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  691.007213][T31561] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  691.013089][T31561] bridge84: left promiscuous mode
[  691.016335][T31561] bridge84: left allmulticast mode
[  691.019365][T31561] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  691.022290][T31561] macsec0: left promiscuous mode
[  691.039778][T31561] geneve10: left promiscuous mode
[  691.042064][T31561] geneve10: left allmulticast mode
[  691.116185][T31568] syz_tun: left promiscuous mode
[  691.120515][T31568] syz_tun: left allmulticast mode
[  691.169330][T31568] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.179686][T31568] 8021q: adding VLAN 0 to HW filter on device team0
[  691.199451][T31568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  691.211751][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.223001][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.226211][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.229046][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.244243][T31579] netlink: 'syz.2.6767': attribute type 1 has an invalid length.
[  691.296023][T31581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  691.300082][T31581] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  691.302658][T31581] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  691.310609][T31581] tipc: Resetting bearer <eth:syzkaller0>
[  691.318238][T31581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  691.364744][T31581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  691.598002][T31594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  691.961512][T31617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6779'.
[  691.968308][T31617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6779'.
[  691.993968][T31612] macvlan3: entered allmulticast mode
[  691.996151][T31612] veth1_vlan: entered allmulticast mode
[  692.000349][T31612] veth1_vlan: left allmulticast mode
[  692.035839][T31620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6780'.
[  692.122282][T31623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6781'.
[  692.408041][T31644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6785'.
[  692.481316][T31652] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.6788'.
[  692.525269][T31656] nbd: nbd2 already in use
[  692.528578][T31655] nbd: nbd2 already in use
[  692.533528][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6789'.
[  692.581970][T31643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6786'.
[  692.614401][T31663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6790'.
[  692.740399][T31672] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  692.948327][T31687] 8021q: adding VLAN 0 to HW filter on device bond8
[  693.111360][T31708] syzkaller0: entered promiscuous mode
[  693.122150][T31708] syzkaller0: entered allmulticast mode
[  693.182204][T31712] 8021q: adding VLAN 0 to HW filter on device bond140
[  694.348614][T31759] validate_nla: 4 callbacks suppressed
[  694.348627][T31759] netlink: 'syz.3.6815': attribute type 5 has an invalid length.
[  694.390667][T31759] geneve9: entered promiscuous mode
[  694.395448][T31759] geneve9: entered allmulticast mode
[  694.398154][T31761] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  694.401031][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  694.410047][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  694.427139][T31755] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  694.450943][T31763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  694.459186][T31763] mac80211_hwsim hwsim146 syzkaller0: entered promiscuous mode
[  694.461887][T31763] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode
[  694.500792][T31763] tipc: Resetting bearer <eth:syzkaller0>
[  694.510746][T31755] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  694.594105][ T7620] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  694.602498][ T7620] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  694.618356][ T7620] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  694.633773][ T7620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  695.194104][T31781] 8021q: adding VLAN 0 to HW filter on device bond141
[  695.255600][T31783] tipc: Resetting bearer <eth:syzkaller0>
[  695.404969][T31792] netlink: 'syz.2.6825': attribute type 1 has an invalid length.
[  695.429226][T31792] 8021q: adding VLAN 0 to HW filter on device bond142
[  695.513679][ T5888] tipc: Node number set to 2250003081
[  695.539945][T31799] netlink: 'syz.4.6828': attribute type 2 has an invalid length.
[  695.548315][T31799] k*: entered promiscuous mode
[  695.559803][T31799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  695.619435][T31805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  695.989028][T31826] tipc: Resetting bearer <eth:syzkaller0>
[  696.241902][T31838] __nla_validate_parse: 14 callbacks suppressed
[  696.241914][T31838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6839'.
[  696.342899][T31842] netlink: 'syz.2.6841': attribute type 3 has an invalid length.
[  696.347239][T31842] netlink: 'syz.2.6841': attribute type 3 has an invalid length.
[  696.896437][T31859] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  696.899005][T31859] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  696.901635][T31859] tipc: Resetting bearer <eth:syzkaller0>
[  696.909848][T31859] tipc: Resetting bearer <eth:syzkaller0>
[  696.956846][T31861] pim6reg1: entered promiscuous mode
[  696.959006][T31861] pim6reg1: entered allmulticast mode
[  697.285532][T31871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6850'.
[  697.552111][T31879] openvswitch: netlink: Key type 29 is not supported
[  697.876547][T31907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6858'.
[  698.029241][T31916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6862'.
[  698.098446][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6863'.
[  698.109030][T31918] vti0: entered promiscuous mode
[  698.111012][T31918] vti0: entered allmulticast mode
[  698.130299][T31918] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6863'.
[  698.449853][T31939] netlink: 'syz.4.6867': attribute type 1 has an invalid length.
[  698.506839][T31946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6869'.
[  698.533504][T31946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6869'.
[  698.543841][T31949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6870'.
[  698.583910][T31947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6868'.
[  698.886363][T23101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.889558][T23101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.029397][T31982] netlink: 'syz.4.6878': attribute type 1 has an invalid length.
[  699.065182][T31982] 8021q: adding VLAN 0 to HW filter on device bond10
[  699.640999][T31989] veth0_to_team: left promiscuous mode
[  699.642901][T31989] veth0_to_team: left allmulticast mode
[  699.656352][T31989] gretap1: left allmulticast mode
[  699.659403][T31989] vlan3: left allmulticast mode
[  699.661083][T31989] bond0: left allmulticast mode
[  699.662785][T31989] mac80211_hwsim hwsim146 syzkaller0: left promiscuous mode
[  699.667453][T31989] mac80211_hwsim hwsim146 syzkaller0: left allmulticast mode
[  699.691432][T31989] vti0: left promiscuous mode
[  699.693059][T31989] vti0: left allmulticast mode
[  699.822807][T32002] macvlan4: entered promiscuous mode
[  699.844093][T32002] bond0: entered promiscuous mode
[  699.846113][T32002] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  700.026553][T32020] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  700.054901][T32022] netlink: 'syz.3.6887': attribute type 1 has an invalid length.
[  700.058330][T32023] netlink: 'syz.3.6887': attribute type 1 has an invalid length.
[  700.085542][T32023] 8021q: adding VLAN 0 to HW filter on device bond110
[  700.309899][T32022] bond110 (unregistering): Released all slaves
[  700.575015][T32045] bridge0: port 1(erspan0) entered blocking state
[  700.581737][T32045] bridge0: port 1(erspan0) entered disabled state
[  700.590788][T32045] erspan0: entered allmulticast mode
[  700.599636][T32045] erspan0: left allmulticast mode
[  700.865823][T32062] 8021q: adding VLAN 0 to HW filter on device bond110
[  700.953007][T32062] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  701.362929][T32074] __nla_validate_parse: 10 callbacks suppressed
[  701.362941][T32074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6900'.
[  701.483053][T32079] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6902'.
[  701.488421][T32079] netlink: zone id is out of range
[  701.490483][T32079] netlink: zone id is out of range
[  701.492301][T32079] netlink: zone id is out of range
[  701.494462][T32079] netlink: zone id is out of range
[  701.496149][T32079] netlink: zone id is out of range
[  701.497829][T32079] netlink: zone id is out of range
[  701.499663][T32079] netlink: zone id is out of range
[  701.501566][T32079] netlink: zone id is out of range
[  701.507715][T32079] netlink: zone id is out of range
[  701.558323][T32079] : renamed from vlan1
[  701.615922][T32076] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  701.632627][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[  701.727599][T32076] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  701.784245][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6904'.
[  701.801436][T32076] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  701.813069][T32093] tun0: tun_chr_ioctl cmd 1074812118
[  701.816818][T32089] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  701.819701][T32092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6905'.
[  701.852532][T32076] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  701.877144][T32095] netlink: 'syz.2.6906': attribute type 22 has an invalid length.
[  701.880292][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6906'.
[  701.885751][T32095] netlink: 'syz.2.6906': attribute type 22 has an invalid length.
[  701.888955][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6906'.
[  701.960309][ T5874] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  701.981758][ T5874] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  702.003383][ T5874] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  702.007297][ T5874] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  702.207715][T32118] netlink: 'syz.3.6912': attribute type 1 has an invalid length.
[  702.254987][T32118] 8021q: adding VLAN 0 to HW filter on device bond111
[  702.337439][T32125] bond111: (slave veth41): Enslaving as an active interface with a down link
[  702.438737][T32125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6912'.
[  703.134469][T32150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6919'.
[  703.176030][T32150] syzkaller1: entered promiscuous mode
[  703.180267][T32150] syzkaller1: entered allmulticast mode
[  703.209010][T32150] bridge91: entered promiscuous mode
[  703.211313][T32150] bridge91: entered allmulticast mode
[  703.246370][T32156] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6921'.
[  703.306741][T32158] syzkaller1: entered promiscuous mode
[  703.311636][T32158] syzkaller1: entered allmulticast mode
[  703.352625][T32156] macsec2: entered promiscuous mode
[  703.362104][T32156] macsec2: entered allmulticast mode
[  703.529039][T32170] bond11: entered promiscuous mode
[  703.571413][T32179] net_ratelimit: 7 callbacks suppressed
[  703.571427][T32179] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  703.578763][T32180] mac80211_hwsim hwsim136 wlan1: entered allmulticast mode
[  703.588396][T32182] bond108: (slave bond109): Releasing backup interface
[  703.598046][T32182] bond111: (slave veth41): Releasing active interface
[  703.604520][T32179] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  703.618821][T32185] vlan0: entered promiscuous mode
[  703.620555][T32185] bridge0: entered promiscuous mode
[  703.662881][T32182] netlink: 'syz.3.6927': attribute type 10 has an invalid length.
[  703.668477][T32180] netlink: 'syz.3.6927': attribute type 10 has an invalid length.
[  703.751320][T32196] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  703.762046][T32196] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  703.789381][T32200] netlink: 'syz.4.6931': attribute type 13 has an invalid length.
[  703.792617][T32200] netlink: 'syz.4.6931': attribute type 17 has an invalid length.
[  703.868422][T32200] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.873963][T32200] 8021q: adding VLAN 0 to HW filter on device team0
[  703.884578][T32200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  703.894781][T32205] xfrm0: entered promiscuous mode
[  703.897162][T32205] xfrm0: entered allmulticast mode
[  704.052155][T32221] netlink: 'syz.3.6937': attribute type 16 has an invalid length.
[  704.164091][T32221] tipc: Resetting bearer <eth:syzkaller0>
[  704.211348][ T7620] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  704.219210][ T7620] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  704.228491][ T7620] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  704.245467][ T7620] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  704.353960][T32237] tipc: Resetting bearer <eth:syzkaller0>
[  704.410692][T32245] bond0: Device is already in use.
[  704.426856][T32246] netlink: 'syz.3.6945': attribute type 11 has an invalid length.
[  704.738513][T32257] tipc: Resetting bearer <eth:syzkaller0>
[  704.862424][T32261] vxcan0: entered promiscuous mode
[  705.169363][T32273] syzkaller1: entered promiscuous mode
[  705.171438][T32273] syzkaller1: entered allmulticast mode
[  705.234971][T32274] syzkaller0: left promiscuous mode
[  705.237169][T32274] syzkaller0: left allmulticast mode
[  705.859905][T32288] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  705.868127][T32288] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  705.957311][T32284] macvlan6: entered promiscuous mode
[  705.959544][T32284] macvlan6: entered allmulticast mode
[  705.963797][T32284] bond12: (slave macvlan6): Error -98 calling set_mac_address
[  706.098718][T32297] veth42: entered allmulticast mode
[  706.408401][T32327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  706.412665][T32327] mac80211_hwsim hwsim146 syzkaller0: entered promiscuous mode
[  706.418906][T32327] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode
[  706.533904][T32336] validate_nla: 3 callbacks suppressed
[  706.533920][T32336] netlink: 'syz.4.6974': attribute type 12 has an invalid length.
[  706.539327][T32336] __nla_validate_parse: 10 callbacks suppressed
[  706.539339][T32336] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.6974'.
[  706.694559][T32341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6976'.
[  706.729416][T32343] netlink: 'syz.4.6977': attribute type 2 has an invalid length.
[  706.838201][T32353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6981'.
[  706.841474][T32353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6981'.
[  706.859840][T32355] @: renamed from veth0_vlan
[  706.908770][T32357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6983'.
[  706.912249][T32357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6983'.
[  706.985603][T32365] bridge90: entered allmulticast mode
[  706.988080][T32362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6984'.
[  706.991648][T32362] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6984'.
[  706.992236][T32365] dvmrp6: entered allmulticast mode
[  706.998580][T32366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6985'.
[  707.007878][T32366] netlink: 'syz.4.6985': attribute type 10 has an invalid length.
[  707.013784][T32366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6985'.
[  707.021106][T32365] bridge90: left allmulticast mode
[  707.022877][T32365] dvmrp6: left allmulticast mode
[  707.111888][T32374] 8021q: VLANs not supported on ipvlan1
[  707.443051][T32387] macvlan1: entered promiscuous mode
[  707.447830][T32387] ipvlan0: entered promiscuous mode
[  707.450795][T32387] ipvlan0: left promiscuous mode
[  707.452972][T32387] macvlan1: left promiscuous mode
[  707.751778][T32406] tipc: Resetting bearer <eth:syzkaller0>
[  707.778425][T32407] netlink: 'syz.3.6997': attribute type 10 has an invalid length.
[  707.792555][T32406] 8021q: adding VLAN 0 to HW filter on device team0
[  707.801048][T32406] tipc: Resetting bearer <eth:team0>
[  707.803051][T32406] tipc: Resetting bearer <eth:team0>
[  707.810116][T32406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  707.926996][T32411] macvlan1: entered promiscuous mode
[  707.942819][T32411] ipvlan0: entered promiscuous mode
[  707.948539][T32411] ipvlan0: left promiscuous mode
[  707.956739][T32411] macvlan1: left promiscuous mode
[  708.458748][T32433] netlink: 'syz.2.7004': attribute type 10 has an invalid length.
[  708.462237][T32433] tipc: Resetting bearer <eth:team0>
[  708.606006][T32450] syzkaller1: entered promiscuous mode
[  708.610064][T32450] syzkaller1: entered allmulticast mode
[  708.978494][T32479] macsec5: entered promiscuous mode
[  708.980324][T32479] bridge0: entered promiscuous mode
[  708.982551][T32479] bridge0: port 1(macsec5) entered blocking state
[  708.989091][T32479] bridge0: port 1(macsec5) entered disabled state
[  708.991791][T32479] macsec5: entered allmulticast mode
[  708.998408][T32479] bridge0: entered allmulticast mode
[  709.002407][T32479] macsec5: left allmulticast mode
[  709.004622][T32479] bridge0: left allmulticast mode
[  709.008388][T32479] bridge0: left promiscuous mode
[  709.120652][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  709.151081][T32496] pim6reg1: entered promiscuous mode
[  709.154535][T32496] pim6reg1: entered allmulticast mode
[  709.196970][T32494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  709.268419][T32498] 8021q: adding VLAN 0 to HW filter on device bond112
[  709.274159][T32498] bond112: entered promiscuous mode
[  709.279423][T32498] team0: Port device bond112 added
[  709.352486][T32506] syzkaller0: entered promiscuous mode
[  709.357233][T32506] syzkaller0: entered allmulticast mode
[  709.361074][T32506] syzkaller0: left promiscuous mode
[  709.362800][T32506] syzkaller0: left allmulticast mode
[  709.395403][T32510] netlink: 'syz.3.7024': attribute type 10 has an invalid length.
[  709.458924][T32515] netlink: 'syz.2.7026': attribute type 2 has an invalid length.
[  709.470375][T32515] ave_0: entered promiscuous mode
[  709.491048][T32517] 8021q: adding VLAN 0 to HW filter on device bond1
[  709.498206][T32518] netlink: 'syz.4.7022': attribute type 10 has an invalid length.
[  709.504964][T32518] bond0: (slave wlan1): refused to change device type
[  709.689294][T32530] netlink: 'syz.3.7031': attribute type 32 has an invalid length.
[  710.328658][T32563] netlink: 'syz.3.7036': attribute type 10 has an invalid length.
[  710.497864][T32581] bond0: Device is already in use.
[  710.732737][T32607] macvlan6: entered promiscuous mode
[  710.745927][T32607] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  710.770594][T32607] ip6gretap0: entered promiscuous mode
[  710.780223][T32607] ip6gretap0: left promiscuous mode
[  710.826825][T32620] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  710.852655][T32620] syzkaller0: entered promiscuous mode
[  710.856126][T32620] syzkaller0: entered allmulticast mode
[  711.349519][T32666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  711.354250][T32666] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  711.360335][T32666] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  711.365016][T32666] tipc: Resetting bearer <eth:syzkaller0>
[  711.394100][T32666] tipc: Resetting bearer <eth:syzkaller0>
[  711.453902][T32680] 8021q: VLANs not supported on nlmon0
[  711.572677][T32693] validate_nla: 2 callbacks suppressed
[  711.572694][T32693] netlink: 'syz.2.7074': attribute type 13 has an invalid length.
[  711.577932][T32693] netlink: 'syz.2.7074': attribute type 17 has an invalid length.
[  711.587995][T32683] netlink: 'syz.3.7071': attribute type 1 has an invalid length.
[  711.588974][T32693] 8021q: adding VLAN 0 to HW filter on device team0
[  711.596727][T32693] tipc: Resetting bearer <eth:team0>
[  711.598792][T32693] tipc: Resetting bearer <eth:team0>
[  711.601468][T32693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  711.645146][T32683] 8021q: adding VLAN 0 to HW filter on device bond113
[  711.914119][T32707] wireguard4: entered promiscuous mode
[  711.916323][T32707] wireguard4: entered allmulticast mode
[  711.947456][T32706] netlink: 'syz.3.7077': attribute type 5 has an invalid length.
[  711.950139][T32706] __nla_validate_parse: 29 callbacks suppressed
[  711.950150][T32706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7077'.
[  712.712144][T32720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7080'.
[  712.721493][T32720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7080'.
[  712.740579][T32717] veth43: entered promiscuous mode
[  712.752674][T20979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.756192][T20979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.847651][T32726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7082'.
[  713.200701][T32752] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7086'.
[  713.282829][T32756] netlink: 'syz.2.7088': attribute type 3 has an invalid length.
[  713.291190][T32758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'.
[  713.378450][T32765] bond112: left promiscuous mode
[  713.395632][T32765] team0: Port device bond112 removed
[  713.412887][T32765] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  713.431665][T32767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7092'.
[  713.435771][T32767] team0: Device is already in use.
[  713.664734][  T314] _Z`Ԁ@S!: entered promiscuous mode
[  713.778031][  T321] tipc: Resetting bearer <eth:team0>
[  713.781605][  T321] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  713.786208][  T321] tipc: Resetting bearer <eth:syzkaller0>
[  713.827545][  T326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  713.945138][  T330] tipc: Resetting bearer <eth:syzkaller0>
[  713.947916][  T330] syzkaller0: left promiscuous mode
[  713.950366][  T330] syzkaller0: left allmulticast mode
[  713.974880][  T330] mac80211_hwsim hwsim136 wlan1: left allmulticast mode
[  713.980783][  T330] geneve9: left promiscuous mode
[  713.982496][  T330] geneve9: left allmulticast mode
[  713.988580][  T330] veth43: left promiscuous mode
[  714.450228][  T345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7107'.
[  714.639790][  T359] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  714.944044][  T372] netlink: 'syz.2.7113': attribute type 13 has an invalid length.
[  714.947135][  T372] netlink: 'syz.2.7113': attribute type 17 has an invalid length.
[  714.970076][  T372] tipc: Resetting bearer <eth:team0>
[  715.067160][  T372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  715.866064][  T375] IPv6: sit2: Disabled Multicast RS
[  716.029876][  T379] netlink: 'syz.4.7115': attribute type 12 has an invalid length.
[  716.300787][  T390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7118'.
[  716.323083][  T390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7118'.
[  716.590553][  T400] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  716.647727][  T400] netlink: 'syz.4.7120': attribute type 10 has an invalid length.
[  717.474217][  T425] __nla_validate_parse: 1 callbacks suppressed
[  717.474231][  T425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7126'.
[  717.568002][  T425] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  717.868023][  T429] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  718.101799][  T441] _Z`Ԁ@: entered promiscuous mode
[  718.246349][  T449] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  718.257483][  T445] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  718.314937][  T454] syzkaller0: entered promiscuous mode
[  718.316738][  T454] syzkaller0: entered allmulticast mode
[  718.553944][  T465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7138'.
[  718.595535][  T466] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002
[  718.718805][  T474] vlan0: entered promiscuous mode
[  718.720539][  T474] bond0: entered promiscuous mode
[  718.742770][  T471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  718.789006][  T476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  718.977568][  T486] netlink: 464 bytes leftover after parsing attributes in process `syz.4.7143'.
[  719.006801][  T486] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7143'.
[  719.050413][  T486] 0: renamed from hsr0
[  719.057141][  T486] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  719.067408][  T486] 0: entered allmulticast mode
[  719.070237][  T486] hsr_slave_0: entered allmulticast mode
[  719.079788][  T486] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  719.159930][  T491] netlink: 'syz.2.7145': attribute type 1 has an invalid length.
[  719.208554][  T491] 8021q: adding VLAN 0 to HW filter on device bond144
[  719.341822][  T491] veth63: entered promiscuous mode
[  719.348357][  T491] bond144: (slave veth63): Enslaving as an active interface with an up link
[  719.407729][  T497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'.
[  719.454747][  T497] netlink: 'syz.2.7147': attribute type 1 has an invalid length.
[  719.516754][  T497] 8021q: adding VLAN 0 to HW filter on device bond145
[  719.804634][  T523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7153'.
[  719.810657][  T523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  720.002407][  T538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7155'.
[  720.151636][  T554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7160'.
[  720.418055][  T567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  720.491059][  T566] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  720.758166][  T582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7167'.
[  720.761788][  T581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7167'.
[  720.771555][  T582] tipc: Resetting bearer <eth:syzkaller0>
[  720.903628][  T592] wg1: entered promiscuous mode
[  720.905572][  T592] wg1: entered allmulticast mode
[  720.959204][  T593] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  720.965268][  T593] CPU: 1 UID: 0 PID: 593 Comm: syz.3.7169 Not tainted syzkaller #0 PREEMPT(full) 
[  720.965294][  T593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  720.965305][  T593] Call Trace:
[  720.965312][  T593]  <TASK>
[  720.965321][  T593]  dump_stack_lvl+0x189/0x250
[  720.965349][  T593]  ? __pfx_dump_stack_lvl+0x10/0x10
[  720.965366][  T593]  ? __pfx__printk+0x10/0x10
[  720.965394][  T593]  ? kernfs_path_from_node+0x2f/0x290
[  720.965413][  T593]  ? kernfs_path_from_node+0x250/0x290
[  720.965426][  T593]  ? kernfs_path_from_node+0x2f/0x290
[  720.965442][  T593]  sysfs_warn_dup+0x8e/0xa0
[  720.965456][  T593]  sysfs_do_create_link_sd+0xc0/0x110
[  720.965474][  T593]  device_add_class_symlinks+0x1cf/0x240
[  720.965495][  T593]  device_add+0x475/0xb50
[  720.965514][  T593]  wiphy_register+0x1ba6/0x28d0
[  720.965553][  T593]  ? __pfx_wiphy_register+0x10/0x10
[  720.965571][  T593]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  720.965598][  T593]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  720.965621][  T593]  ieee80211_register_hw+0x3425/0x4080
[  720.965659][  T593]  ? ieee80211_register_hw+0x14d1/0x4080
[  720.965686][  T593]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  720.965711][  T593]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  720.965739][  T593]  ? __hrtimer_setup+0x187/0x210
[  720.965752][  T593]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  720.965779][  T593]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  720.965823][  T593]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  720.965843][  T593]  ? trace_kmalloc+0x1f/0xd0
[  720.965861][  T593]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  720.965881][  T593]  ? kstrndup+0xbf/0x160
[  720.965956][  T593]  hwsim_new_radio_nl+0xea4/0x1b10
[  720.965981][  T593]  ? __pfx___nla_validate_parse+0x10/0x10
[  720.966018][  T593]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  720.966052][  T593]  ? __nla_parse+0x40/0x60
[  720.966075][  T593]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  720.966101][  T593]  genl_family_rcv_msg_doit+0x215/0x300
[  720.966126][  T593]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  720.966154][  T593]  ? bpf_lsm_capable+0x9/0x20
[  720.966173][  T593]  ? security_capable+0x7e/0x2e0
[  720.966200][  T593]  genl_rcv_msg+0x60e/0x790
[  720.966226][  T593]  ? __pfx_genl_rcv_msg+0x10/0x10
[  720.966244][  T593]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  720.966276][  T593]  netlink_rcv_skb+0x208/0x470
[  720.966289][  T593]  ? __lock_acquire+0xab9/0xd20
[  720.966310][  T593]  ? __pfx_genl_rcv_msg+0x10/0x10
[  720.966330][  T593]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  720.966362][  T593]  ? down_read+0x1ad/0x2e0
[  720.966381][  T593]  genl_rcv+0x28/0x40
[  720.966397][  T593]  netlink_unicast+0x82f/0x9e0
[  720.966426][  T593]  ? __pfx_netlink_unicast+0x10/0x10
[  720.966449][  T593]  ? netlink_sendmsg+0x642/0xb30
[  720.966462][  T593]  ? skb_put+0x11b/0x210
[  720.966481][  T593]  netlink_sendmsg+0x805/0xb30
[  720.966504][  T593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  720.966522][  T593]  ? aa_sock_msg_perm+0xf1/0x1d0
[  720.966546][  T593]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  720.966563][  T593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  720.966581][  T593]  __sock_sendmsg+0x21c/0x270
[  720.966608][  T593]  ____sys_sendmsg+0x505/0x830
[  720.966629][  T593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  720.966654][  T593]  ? import_iovec+0x74/0xa0
[  720.966675][  T593]  ___sys_sendmsg+0x21f/0x2a0
[  720.966695][  T593]  ? __pfx____sys_sendmsg+0x10/0x10
[  720.966742][  T593]  ? __fget_files+0x2a/0x420
[  720.966756][  T593]  ? __fget_files+0x3a0/0x420
[  720.966779][  T593]  __x64_sys_sendmsg+0x19b/0x260
[  720.966800][  T593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  720.966829][  T593]  ? rcu_is_watching+0x15/0xb0
[  720.966850][  T593]  ? do_syscall_64+0xbe/0x3b0
[  720.966872][  T593]  do_syscall_64+0xfa/0x3b0
[  720.966886][  T593]  ? lockdep_hardirqs_on+0x9c/0x150
[  720.966936][  T593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.966953][  T593]  ? exc_page_fault+0x9f/0xf0
[  720.966971][  T593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.966987][  T593] RIP: 0033:0x7fe81878ebe9
[  720.967004][  T593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  720.967021][  T593] RSP: 002b:00007fe81958c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  720.967040][  T593] RAX: ffffffffffffffda RBX: 00007fe8189c5fa0 RCX: 00007fe81878ebe9
[  720.967053][  T593] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  720.967064][  T593] RBP: 00007fe818811e19 R08: 0000000000000000 R09: 0000000000000000
[  720.967075][  T593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  720.967085][  T593] R13: 00007fe8189c6038 R14: 00007fe8189c5fa0 R15: 00007fffc1d0d9c8
[  720.967113][  T593]  </TASK>
[  721.201504][  T595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  722.163913][  T638] veth65: entered promiscuous mode
[  722.184739][  T642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  722.205268][  T641] tun0: tun_chr_ioctl cmd 2148045848
[  722.211887][  T641] tun0: tun_chr_ioctl cmd 21731
[  722.615462][  T674] netlink: 'syz.2.7191': attribute type 1 has an invalid length.
[  722.801936][  T680] geneve2: entered promiscuous mode
[  722.810227][  T680] geneve2: entered allmulticast mode
[  722.833391][  T686] __nla_validate_parse: 6 callbacks suppressed
[  722.833408][  T686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7195'.
[  722.960042][  T694] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  723.092805][  T703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7197'.
[  723.524203][  T723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  723.527657][  T723] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7202'.
[  723.609988][  T727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7204'.
[  723.686675][  T737] netlink: 'syz.3.7207': attribute type 13 has an invalid length.
[  723.689894][  T737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7207'.
[  723.737961][  T737] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  723.744154][ T7620] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  723.747274][ T7620] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  723.763043][  T739] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7205'.
[  723.784748][ T5888] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  723.834345][ T5888] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  724.154946][  T759] netlink: 'syz.4.7212': attribute type 13 has an invalid length.
[  724.157872][  T759] netlink: 'syz.4.7212': attribute type 17 has an invalid length.
[  724.225959][ T5844] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  724.230375][  T759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  724.299317][  T764] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  724.500093][  T769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7216'.
[  724.504003][  T769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7216'.
[  724.661610][  T779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.725031][ T5844] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  724.750206][  T782] netlink: 'syz.3.7219': attribute type 10 has an invalid length.
[  724.813961][ T5844] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  724.826155][  T783] tipc: Resetting bearer <eth:team0>
[  724.895685][  T783] tipc: Resetting bearer <eth:syzkaller0>
[  725.027202][  T786] geneve2: entered promiscuous mode
[  725.029528][  T786] geneve2: entered allmulticast mode
[  725.571987][  T792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7222'.
[  725.898167][  T803] netlink: 'syz.3.7226': attribute type 11 has an invalid length.
[  726.000920][  T809] netlink: 'syz.2.7229': attribute type 1 has an invalid length.
[  726.071806][  T812] netlink: 'syz.4.7230': attribute type 13 has an invalid length.
[  726.094321][  T812] netlink: 'syz.4.7230': attribute type 17 has an invalid length.
[  726.124999][  T810] bond146: (slave vxcan1): The slave device specified does not support setting the MAC address
[  726.130503][  T810] bond146: (slave vxcan1): Error -95 calling set_mac_address
[  726.162953][  T817] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7231'.
[  726.170811][  T812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  726.196165][  T817] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8
[  726.200232][  T817] gretap8: entered promiscuous mode
[  726.205375][  T817] gretap8: entered allmulticast mode
[  726.267565][  T825] netlink: 'syz.3.7233': attribute type 11 has an invalid length.
[  726.285553][  T825] netlink: 'syz.3.7233': attribute type 10 has an invalid length.
[  726.289398][  T825] mac80211_hwsim hwsim136 wlan1: entered allmulticast mode
[  726.448674][  T831] netlink: 'syz.2.7236': attribute type 1 has an invalid length.
[  726.477447][  T831] 8021q: adding VLAN 0 to HW filter on device bond147
[  726.511651][  T831] bond147: (slave veth67): Enslaving as an active interface with a down link
[  726.876897][  T842] bond0: left promiscuous mode
[  726.928682][  T852] 8021q: adding VLAN 0 to HW filter on device bond115
[  726.974360][  T855] 8021q: adding VLAN 0 to HW filter on device bond14
[  727.303617][  T883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  727.593672][    C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  727.931828][  T905] validate_nla: 5 callbacks suppressed
[  727.931847][  T905] netlink: 'syz.3.7254': attribute type 1 has an invalid length.
[  727.938610][  T905] __nla_validate_parse: 17 callbacks suppressed
[  727.938626][  T905] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7254'.
[  727.961700][  T905] netlink: 'syz.3.7254': attribute type 1 has an invalid length.
[  727.985173][  T905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7254'.
[  727.999515][  T909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7255'.
[  728.076147][  T914] syzkaller1: entered promiscuous mode
[  728.078421][  T914] syzkaller1: entered allmulticast mode
[  728.082572][  T914] netlink: 'syz.3.7256': attribute type 58 has an invalid length.
[  728.085965][  T914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7256'.
[  728.086922][  T917] syz_tun: entered allmulticast mode
[  728.102943][  T917] dvmrp8: entered allmulticast mode
[  728.130631][  T917] syz_tun: left allmulticast mode
[  728.132831][  T917] dvmrp8: left allmulticast mode
[  728.322957][  T926] bond16 (unregistering): Released all slaves
[  728.362850][  T934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7259'.
[  728.366742][  T934] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  728.369682][  T934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  728.419199][  T937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7261'.
[  728.524097][  T943] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  728.576739][  T948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7264'.
[  728.580287][  T948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7264'.
[  728.688421][  T952] nbd: must specify at least one socket
[  728.690649][  T952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7265'.
[  728.697754][  T952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7265'.
[  728.923635][  T961] netlink: 'syz.3.7268': attribute type 21 has an invalid length.
[  729.366621][  T975] netlink: 'syz.2.7272': attribute type 1 has an invalid length.
[  729.402872][  T975] 8021q: adding VLAN 0 to HW filter on device bond148
[  729.430946][  T975] veth69: entered promiscuous mode
[  729.436925][  T975] bond148: (slave veth69): Enslaving as an active interface with an up link
[  729.440542][  T980] mac80211_hwsim hwsim136 wlan1: left allmulticast mode
[  729.468492][  T980] netlink: 'syz.3.7275': attribute type 11 has an invalid length.
[  729.507981][  T980] netlink: 'syz.3.7275': attribute type 10 has an invalid length.
[  729.558326][  T985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  729.967320][  T995] macsec0: entered promiscuous mode
[  729.969621][  T995] macsec0: entered allmulticast mode
[  729.974297][  T995] macsec0: left promiscuous mode
[  729.976495][  T995] macsec0: left allmulticast mode
[  729.995611][  T995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  730.000916][  T995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  730.408665][ T1004] macsec7: entered promiscuous mode
[  730.686606][ T1017] netlink: 'syz.2.7285': attribute type 1 has an invalid length.
[  731.265325][ T1047] tap0: tun_chr_ioctl cmd 1074025677
[  731.267274][ T1047] tap0: linktype set to 270
[  731.376522][ T1051] netlink: 'syz.2.7291': attribute type 13 has an invalid length.
[  731.379258][ T1051] netlink: 'syz.2.7291': attribute type 17 has an invalid length.
[  731.412568][ T1051] tipc: Resetting bearer <eth:team0>
[  731.416682][ T1051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  731.433534][T25845] Bluetooth: hci0: command 0x040f tx timeout
[  731.820315][ T1072] geneve11: entered allmulticast mode
[  731.848416][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.851794][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.864889][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.868363][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.083014][ T1089] workqueue: Failed to create a rescuer kthread for wq "bond150": -EINTR
[  732.144368][ T1102] netlink: 'syz.2.7299': attribute type 2 has an invalid length.
[  732.372159][ T1111] batadv0: entered promiscuous mode
[  732.379817][ T1111] batadv0: entered allmulticast mode
[  732.999661][ T1136] erspan0: Device is already in use.
[  733.062658][ T1140] __nla_validate_parse: 21 callbacks suppressed
[  733.062677][ T1140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7307'.
[  733.064470][ T1142] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7308'.
[  733.066051][ T1140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7307'.
[  733.151680][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7308'.
[  733.169272][ T1142] ip6gre7: entered allmulticast mode
[  733.275419][ T1158] validate_nla: 2 callbacks suppressed
[  733.275431][ T1158] netlink: 'syz.2.7312': attribute type 11 has an invalid length.
[  733.337914][ T1164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7313'.
[  733.342631][ T1164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7313'.
[  733.399733][ T1170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7316'.
[  733.460683][ T1176] _Z`Ԁ@: entered promiscuous mode
[  733.590920][ T1180] macvlan6: entered allmulticast mode
[  733.595069][ T1180] bond0: entered allmulticast mode
[  733.600079][ T1180] bond0: left allmulticast mode
[  733.734588][ T1184] nbd3: detected capacity change from 0 to 63
[  733.739733][ T1187] tipc: Resetting bearer <eth:team0>
[  733.743376][ T1185] block nbd3: NBD_DISCONNECT
[  733.745561][ T1185] block nbd3: Disconnected due to user request.
[  733.748368][ T1185] block nbd3: shutting down sockets
[  733.871372][ T1191] netlink: 'syz.2.7323': attribute type 32 has an invalid length.
[  733.877076][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7323'.
[  733.882893][ T1191] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  733.978475][ T1194] netlink: 'syz.2.7324': attribute type 2 has an invalid length.
[  734.134205][ T1202] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  734.141444][ T1202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  734.146036][ T1202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  734.197927][ T1206] netlink: 'syz.4.7327': attribute type 1 has an invalid length.
[  734.218762][ T1206] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  734.228227][ T1209] gretap2: entered promiscuous mode
[  734.331695][ T1214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7328'.
[  734.341113][ T1214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  734.514612][ T1221] netlink: 'syz.3.7330': attribute type 16 has an invalid length.
[  734.517922][ T1221] netlink: 'syz.3.7330': attribute type 17 has an invalid length.
[  734.521309][ T1221] tipc: Resetting bearer <eth:syzkaller0>
[  734.562300][ T1221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7330'.
[  734.829909][ T1236] netlink: 'syz.3.7335': attribute type 2 has an invalid length.
[  735.002242][ T1243] netlink: 'syz.2.7338': attribute type 1 has an invalid length.
[  735.005912][ T1243] netlink: 'syz.2.7338': attribute type 2 has an invalid length.
[  735.008505][ T1243] netlink: 'syz.2.7338': attribute type 1 has an invalid length.
[  735.381988][ T1263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  735.712598][ T1284] syzkaller1: entered promiscuous mode
[  735.716664][ T1284] syzkaller1: entered allmulticast mode
[  735.736649][ T1280] openvswitch: netlink: Missing valid actions attribute.
[  735.739284][ T1280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.854026][ T1289] 8021q: adding VLAN 0 to HW filter on device bond9
[  735.857514][ T1291] bond9: option mode: unable to set because the bond device is up
[  736.871576][ T1337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  737.031349][ T1344] Bluetooth: MGMT ver 1.23
[  737.245258][ T1356] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  737.252368][ T1356] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  737.288568][ T1361] 8021q: adding VLAN 0 to HW filter on device bond1
[  737.295164][ T1365] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  737.329299][ T1369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  737.681279][ T1398] bridge96: entered allmulticast mode
[  737.830425][ T1420] 8021q: adding VLAN 0 to HW filter on device bond1
[  737.840743][ T1425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.952381][ T1438] dvmrp0: left allmulticast mode
[  737.954470][ T1438] dvmrp1: left allmulticast mode
[  737.956140][ T1438] pimreg: left allmulticast mode
[  738.136975][ T1448] bond117: entered promiscuous mode
[  738.139018][ T1448] 8021q: adding VLAN 0 to HW filter on device bond117
[  738.158260][ T1448] bond117: (slave bridge52): making interface the new active one
[  738.161670][ T1448] bridge52: entered promiscuous mode
[  738.164646][ T1448] bond117: (slave bridge52): Enslaving as an active interface with an up link
[  738.697307][ T1465] __nla_validate_parse: 33 callbacks suppressed
[  738.697321][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7401'.
[  739.044975][ T1474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7403'.
[  739.211015][ T1480] erspan0: Device is already in use.
[  739.247975][ T1480] 8021q: VLANs not supported on ip6gre0
[  739.290829][ T1484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7407'.
[  739.346585][ T1487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7408'.
[  739.346592][ T1488] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7409'.
[  739.382105][ T1487] 8021q: adding VLAN 0 to HW filter on device bond152
[  739.470670][ T1494] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.520967][ T1494] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.563663][ T1501] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  739.577140][ T1494] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.627350][ T1494] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.643886][ T1502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7414'.
[  739.719621][ T1504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7415'.
[  739.742874][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  739.765626][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  739.797342][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.800586][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  739.835325][ T1508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7417'.
[  739.902296][ T1510] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7418'.
[  740.014945][ T1528] validate_nla: 15 callbacks suppressed
[  740.014982][ T1528] netlink: 'syz.4.7420': attribute type 6 has an invalid length.
[  740.037967][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7420'.
[  740.098939][ T1533] syz_tun: entered allmulticast mode
[  740.126496][ T1533] dvmrp8: entered allmulticast mode
[  740.152741][ T1533] syz_tun: left allmulticast mode
[  740.155223][ T1533] dvmrp8: left allmulticast mode
[  740.299564][ T1553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  740.322828][ T1556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  740.589581][ T1567] 8021q: adding VLAN 0 to HW filter on device bond1
[  740.675117][ T1567] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  740.680020][ T1567] bond1: (slave macvlan7): Enslaving as a backup interface with a down link
[  740.830675][ T1576] macsec0: entered allmulticast mode
[  741.060010][ T1586] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  741.339997][ T1602] netlink: 'syz.3.7441': attribute type 4 has an invalid length.
[  741.344697][ T1602] netlink: 'syz.3.7441': attribute type 4 has an invalid length.
[  741.369192][ T1600] mac80211_hwsim hwsim145 wlan0: entered promiscuous mode
[  741.662778][ T1612] netlink: 'syz.4.7444': attribute type 8 has an invalid length.
[  741.665767][ T1623] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  742.120219][ T1652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  742.125808][ T1652] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  742.140220][ T1654] netlink: 'syz.3.7454': attribute type 13 has an invalid length.
[  742.143623][ T1654] netlink: 'syz.3.7454': attribute type 17 has an invalid length.
[  742.192343][ T1654] 8021q: adding VLAN 0 to HW filter on device team0
[  742.198988][ T1654] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  742.683970][ T1671] [SRW: renamed from lo
[  743.221631][ T1712] netlink: 'syz.2.7469': attribute type 13 has an invalid length.
[  743.227251][ T1712] netlink: 'syz.2.7469': attribute type 17 has an invalid length.
[  743.232093][ T1712] tipc: Resetting bearer <eth:team0>
[  743.240740][ T1712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  743.295033][ T1716] syzkaller1: entered promiscuous mode
[  743.296776][ T1716] syzkaller1: entered allmulticast mode
[  743.617769][ T1727] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  743.817128][ T1734] __nla_validate_parse: 20 callbacks suppressed
[  743.817144][ T1734] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.7477'.
[  743.848502][ T1731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  743.854082][ T1731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  743.857338][ T1731] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  744.842639][ T1761] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7483'.
[  744.862261][ T1765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7484'.
[  744.862292][ T1760] delete_channel: no stack
[  744.867337][ T1764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7485'.
[  744.918603][ T1765] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  744.931741][ T1765] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  744.972954][ T1772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7484'.
[  745.110972][ T1779] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20004
[  745.256125][ T1797] wireguard4: entered promiscuous mode
[  745.258089][ T1797] wireguard4: entered allmulticast mode
[  745.345796][ T1800] netlink: 'syz.4.7493': attribute type 11 has an invalid length.
[  745.910291][ T1824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7498'.
[  745.961997][ T1837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7501'.
[  746.076703][ T1846] pim6reg1: entered promiscuous mode
[  746.078907][ T1846] pim6reg1: entered allmulticast mode
[  746.169709][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7503'.
[  746.192431][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7503'.
[  746.197791][ T1854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7503'.
[  746.320546][ T1859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  746.622179][ T1878] netlink: 'syz.3.7512': attribute type 1 has an invalid length.
[  746.659419][ T1878] 8021q: adding VLAN 0 to HW filter on device bond118
[  746.679458][ T1878] bond118: (slave veth47): Enslaving as an active interface with a down link
[  746.698379][ T1878] macvlan0: entered promiscuous mode
[  746.700090][ T1878] macvlan0: entered allmulticast mode
[  746.702613][ T1878] bond118: entered promiscuous mode
[  746.705215][ T1878] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  746.708904][ T1878] bond118: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  746.719770][ T1878] bond118: left promiscuous mode
[  746.762132][ T1883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  746.779863][ T1886] netlink: 'syz.2.7514': attribute type 2 has an invalid length.
[  746.906307][ T1896] bridge53: entered promiscuous mode
[  746.908122][ T1896] bridge53: entered allmulticast mode
[  747.068602][ T1914] netlink: 'syz.4.7521': attribute type 2 has an invalid length.
[  747.115646][ T1914] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.125000][ T1914] 8021q: adding VLAN 0 to HW filter on device team0
[  747.133065][ T1914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  747.177177][ T1923] Set syz0 is full, maxelem 0 reached
[  747.257387][ T1934] netlink: 'syz.2.7525': attribute type 13 has an invalid length.
[  747.260724][ T1934] netlink: 'syz.2.7525': attribute type 17 has an invalid length.
[  747.279338][ T1934] tipc: Resetting bearer <eth:team0>
[  747.283445][ T1934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  747.783802][ T1971] !: renamed from dummy0 (while UP)
[  747.802750][ T1973] netlink: 'syz.3.7535': attribute type 11 has an invalid length.
[  747.811021][ T1973] netlink: 'syz.3.7535': attribute type 11 has an invalid length.
[  747.817456][ T1973] bond0: Device is already in use.
[  747.866254][ T1977] Bluetooth: hci0: Opcode 0x080f failed: -22
[  747.960362][ T1986] netlink: 'syz.3.7541': attribute type 2 has an invalid length.
[  748.029790][ T1993] netlink: 'syz.3.7543': attribute type 1 has an invalid length.
[  748.044240][  T851] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  748.051995][ T1993] bond119: entered promiscuous mode
[  748.057372][ T1993] 8021q: adding VLAN 0 to HW filter on device bond119
[  748.087713][ T1993] 8021q: adding VLAN 0 to HW filter on device bond119
[  748.091232][ T1993] bond119: (slave wireguard4): The slave device specified does not support setting the MAC address
[  748.095049][ T1993] bond119: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  748.101780][ T1993] bond119: (slave wireguard4): making interface the new active one
[  748.104866][ T1993] wireguard4: entered promiscuous mode
[  748.107936][ T1993] bond119: (slave wireguard4): Enslaving as an active interface with an up link
[  748.147212][ T2002] xt_socket: unknown flags 0xd0
[  748.150188][ T2001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  748.260345][ T2012] bond9: option mode: unable to set because the bond device is up
[  748.357120][ T7620] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  748.361422][ T2015] tipc: Resetting bearer <eth:team0>
[  748.364697][ T2015] tipc: Resetting bearer <eth:syzkaller0>
[  748.369081][ T2015] bond144: (slave veth63): Releasing backup interface
[  748.375594][ T2015] bond147: (slave veth67): Releasing active interface
[  748.383020][ T2017] netlink: 'syz.2.7547': attribute type 1 has an invalid length.
[  748.384661][ T2015] bond148: (slave veth69): Releasing backup interface
[  748.548781][ T2020] netlink: 'syz.2.7549': attribute type 10 has an invalid length.
[  748.626659][ T2022] netlink: 'syz.4.7550': attribute type 9 has an invalid length.
[  748.830092][ T2030] 8021q: adding VLAN 0 to HW filter on device bond19
[  748.955504][    T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  749.433732][   T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  749.436505][   T13] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  749.563992][    T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  749.591323][ T2051] __nla_validate_parse: 22 callbacks suppressed
[  749.591345][ T2051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7557'.
[  749.607159][ T2051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7557'.
[  749.640714][ T2053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7558'.
[  749.771509][ T2055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7559'.
[  749.778321][ T2055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7559'.
[  749.781441][ T2055] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  749.913615][T25845] Bluetooth: hci0: command tx timeout
[  750.119973][ T2086] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  750.184082][ T2091] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  750.247656][ T2091] bond0: (slave gretap0): Error: Device type is different from other slaves
[  750.291528][T20979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.294375][T20979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.347898][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7570'.
[  750.427832][ T2099] bond1: option mode: unable to set because the bond device is up
[  750.451071][ T2101] 8021q: adding VLAN 0 to HW filter on device bond20
[  750.545929][ T2101] bond20: (slave veth5): Enslaving as an active interface with a down link
[  750.556815][ T2105] bond117: (slave bridge52): Releasing backup interface
[  750.559031][ T2105] bridge52: left promiscuous mode
[  750.609081][ T2105] bond118: (slave veth47): Releasing active interface
[  750.617982][ T2105] bond119: (slave wireguard4): Releasing backup interface
[  750.620376][ T2105] wireguard4: left promiscuous mode
[  750.648701][ T2106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.662184][ T2106] bond20: (slave batadv0): making interface the new active one
[  750.674526][ T2106] batadv0: entered promiscuous mode
[  750.676418][ T2106] bond20: (slave batadv0): Enslaving as an active interface with an up link
[  750.792200][ T2113] 8021q: adding VLAN 0 to HW filter on device bond154
[  750.836610][ T2116] bond154: (slave veth71): Enslaving as an active interface with a down link
[  750.880909][ T2113] macvlan7: entered promiscuous mode
[  750.884100][ T2113] macvlan7: entered allmulticast mode
[  750.891457][ T2113] bond154: entered promiscuous mode
[  750.894808][ T2113] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  750.898039][ T2113] bond154: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  750.909330][ T2113] bond154: left promiscuous mode
[  750.939122][ T2115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  750.946041][ T2115] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  751.003935][ T2123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7580'.
[  751.140190][ T2138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7582'.
[  751.230412][ T2142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'.
[  751.503584][ T2147] bond1: (slave macvlan7): Releasing backup interface
[  751.533719][ T2147] bond20: (slave veth5): Releasing active interface
[  751.537390][ T2147] bond20: (slave veth5): the permanent HWaddr of slave - 52:78:86:d3:5a:49 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  751.553721][ T1540] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  751.572081][ T2147] bond20: (slave batadv0): Releasing active interface
[  751.576161][ T2147] batadv0: left promiscuous mode
[  751.660524][ T2152] validate_nla: 5 callbacks suppressed
[  751.660537][ T2152] netlink: 'syz.3.7586': attribute type 12 has an invalid length.
[  751.680187][ T2144] netlink: 'syz.4.7585': attribute type 10 has an invalid length.
[  751.738692][ T2147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  751.741765][ T2147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  751.788949][ T2167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7590'.
[  751.873679][ T2168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  751.972023][ T2174] netlink: 'syz.3.7591': attribute type 1 has an invalid length.
[  752.070751][ T2185] openvswitch: netlink: IPv4 tun info is not correct
[  752.113577][ T2189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  752.154637][ T1540] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  752.190102][ T2194] netlink: 'syz.2.7597': attribute type 1 has an invalid length.
[  752.267349][ T2199] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  752.271600][ T2199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  752.442429][ T2210] ksmbd: Unknown IPC event: 3, ignore.
[  752.641546][ T2214] tipc: Resetting bearer <eth:team0>
[  752.664402][ T2214] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  752.676343][ T2214] tipc: Resetting bearer <eth:syzkaller0>
[  752.694047][ T2214] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  752.696624][ T2214] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  752.771731][ T2214] veth63: left promiscuous mode
[  752.778374][ T2214] veth65: left promiscuous mode
[  752.791345][ T2214] veth69: left promiscuous mode
[  752.799184][ T2214] geneve11: left allmulticast mode
[  752.807786][ T2214] ip6gre7: left allmulticast mode
[  752.820384][ T2214] bridge96: left allmulticast mode
[  752.869675][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.882394][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.885334][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.888135][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.093097][ T2233] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  753.361710][ T2243] team0: Unable to change to the same mode the team is in
[  753.449268][ T2263] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  753.458782][ T7620] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  753.474765][T14749] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  753.477513][T14749] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  753.480167][T14749] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  753.513495][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  753.618908][ T2269] tipc: Resetting bearer <eth:syzkaller0>
[  753.865258][ T7620] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  753.868463][ T7620] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  753.871222][ T7620] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  753.876020][ T7620] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  753.974564][ T2281] netlink: 'syz.4.7623': attribute type 20 has an invalid length.
[  753.977320][ T2281] netlink: 'syz.4.7623': attribute type 21 has an invalid length.
[  753.997965][ T2281] netlink: 'syz.4.7623': attribute type 17 has an invalid length.
[  754.158612][ T2282] vlan0: entered allmulticast mode
[  754.160405][ T2282] bridge0: entered allmulticast mode
[  754.164649][ T2282] bridge99: port 1(vlan0) entered blocking state
[  754.167244][ T2282] bridge99: port 1(vlan0) entered disabled state
[  754.171137][ T2282] vlan0: entered promiscuous mode
[  754.313500][ T2296] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  754.316631][ T2296] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  754.319850][ T2296] tipc: Resetting bearer <eth:syzkaller0>
[  755.105204][ T2308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  755.136000][ T1540] IPVS: starting estimator thread 0...
[  755.200709][ T2314] __nla_validate_parse: 91 callbacks suppressed
[  755.200726][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7631'.
[  755.210058][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7631'.
[  755.218386][ T2313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7631'.
[  755.236972][ T2311] IPVS: using max 64 ests per chain, 153600 per kthread
[  755.277443][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7632'.
[  755.382515][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7633'.
[  755.397707][ T2319] bridge100: entered promiscuous mode
[  755.397733][ T2321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7634'.
[  755.428715][ T2321] 8021q: adding VLAN 0 to HW filter on device bond22
[  755.457877][ T2321] macvlan8: entered promiscuous mode
[  755.459776][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7635'.
[  755.462229][ T2321] macvlan8: entered allmulticast mode
[  755.469200][ T2321] bond22: entered promiscuous mode
[  755.471230][ T2321] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  755.479207][ T2321] bond22: left promiscuous mode
[  755.617000][ T2325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7635'.
[  755.627542][ T2330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7636'.
[  755.656012][ T2330] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  755.722345][ T2336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7638'.
[  755.789700][ T2345] netlink: zone id is out of range
[  755.791750][ T2345] netlink: zone id is out of range
[  755.797540][ T2345] netlink: zone id is out of range
[  755.801784][ T2345] netlink: get zone limit has 8 unknown bytes
[  755.941789][ T2353] netlink: 'syz.2.7644': attribute type 7 has an invalid length.
[  756.028288][ T2353] bridge101: port 1(bond156) entered blocking state
[  756.030843][ T2353] bridge101: port 1(bond156) entered disabled state
[  756.036208][ T2353] bond156: entered allmulticast mode
[  756.082042][ T2364] team0: Refused to change device type
[  756.265513][ T2379] netlink: 'syz.3.7650': attribute type 10 has an invalid length.
[  756.497723][ T2395] netlink: 'syz.2.7656': attribute type 32 has an invalid length.
[  756.670071][ T2394] delete_channel: no stack
[  756.756827][ T2402] netlink: 'syz.4.7658': attribute type 2 has an invalid length.
[  756.945443][ T2414] netlink: 'syz.4.7663': attribute type 13 has an invalid length.
[  756.948443][ T2414] netlink: 'syz.4.7663': attribute type 17 has an invalid length.
[  756.975862][ T2414] gretap0: refused to change device tx_queue_len
[  756.978697][ T2414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  758.128871][ T2440] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  758.189303][ T2446] bridge0: port 1(batadv0) entered blocking state
[  758.191868][ T2446] bridge0: port 1(batadv0) entered disabled state
[  758.201074][ T2446] batadv0: entered allmulticast mode
[  758.204252][ T2446] batadv0: entered promiscuous mode
[  758.297872][ T2457] netlink: 'syz.4.7674': attribute type 1 has an invalid length.
[  758.322360][ T2457] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  758.327234][ T2457] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  758.377280][ T2460] gretap2: entered promiscuous mode
[  758.680921][ T2475] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  758.701071][ T7620] batman_adv: batadv0: IGMP Querier appeared
[  758.703903][ T7620] batman_adv: batadv0: MLD Querier appeared
[  758.751365][ T2483] netlink: 'syz.4.7680': attribute type 1 has an invalid length.
[  758.771295][ T2483] 8021q: adding VLAN 0 to HW filter on device bond25
[  758.784474][ T2484] bond25: (slave ip6gretap4): making interface the new active one
[  758.790120][ T2484] bond25: (slave ip6gretap4): Enslaving as an active interface with an up link
[  758.808818][ T2483] veth7: entered promiscuous mode
[  759.347394][ T2505] netlink: 'syz.2.7684': attribute type 13 has an invalid length.
[  759.357568][ T2505] netlink: 'syz.2.7684': attribute type 17 has an invalid length.
[  759.414119][ T2505] 8021q: adding VLAN 0 to HW filter on device team0
[  759.417890][ T2505] tipc: Resetting bearer <eth:team0>
[  759.419867][ T2505] tipc: Resetting bearer <eth:team0>
[  759.427746][ T2505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  759.470130][ T2509] C: entered promiscuous mode
[  759.472085][ T2509] C: entered allmulticast mode
[  759.489945][ T2509] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  759.639950][ T2518] netlink: 'syz.4.7689': attribute type 1 has an invalid length.
[  759.674768][ T2518] bond26: entered promiscuous mode
[  759.676912][ T2518] 8021q: adding VLAN 0 to HW filter on device bond26
[  759.690959][ T2518] batadv2: entered promiscuous mode
[  759.692820][ T2518] batadv2: entered allmulticast mode
[  759.696356][ T2518] 8021q: adding VLAN 0 to HW filter on device batadv2
[  759.700541][ T2518] bond26: (slave batadv2): making interface the new active one
[  759.705215][ T2518] bond26: (slave batadv2): Enslaving as an active interface with an up link
[  760.097301][ T2542] netlink: 'syz.3.7695': attribute type 4 has an invalid length.
[  760.117595][ T2542] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  760.122087][ T2542] sit0: Master is either lo or non-ether device
[  760.242391][ T2548] netlink: 'syz.3.7696': attribute type 1 has an invalid length.
[  760.302805][ T2552] __nla_validate_parse: 25 callbacks suppressed
[  760.302824][ T2552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7697'.
[  760.312825][ T2552] syzkaller0: left promiscuous mode
[  760.317734][ T2552] syzkaller0: left allmulticast mode
[  760.325747][ T2552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7697'.
[  760.573026][ T2562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7700'.
[  760.667049][ T2562] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  760.672137][ T2565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7701'.
[  760.750516][ T2567] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  760.870731][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7703'.
[  761.128238][ T2579] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  761.292887][ T2588] macvlan1: entered promiscuous mode
[  761.296586][ T2588] ipvlan0: entered promiscuous mode
[  761.299827][ T2588] ipvlan0: left promiscuous mode
[  761.302155][ T2588] macvlan1: left promiscuous mode
[  761.436257][ T2600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7711'.
[  761.456898][ T2598] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  761.663515][ T2612] gretap2: entered allmulticast mode
[  761.787375][ T2619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7715'.
[  761.802390][ T2619] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  762.139383][ T2632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7718'.
[  762.151902][ T2632] geneve2: entered promiscuous mode
[  762.157578][ T2632] geneve2: entered allmulticast mode
[  762.161361][ T7620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  762.167428][ T7620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  762.172646][ T7620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  762.177073][ T7620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  762.182260][ T2633] validate_nla: 3 callbacks suppressed
[  762.182277][ T2633] netlink: 'syz.4.7718': attribute type 13 has an invalid length.
[  762.188405][ T2632] netlink: 'syz.4.7718': attribute type 13 has an invalid length.
[  762.339587][ T2636] netlink: 'syz.4.7719': attribute type 17 has an invalid length.
[  762.477707][ T2644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  762.481556][T14749] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.490883][T14749] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.494075][T14749] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.496786][T14749] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  762.749990][ T2659] netlink: 'syz.2.7723': attribute type 8 has an invalid length.
[  763.030995][ T2674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7725'.
[  763.291682][ T2670] bond0: (slave netdevsim0): Releasing backup interface
[  763.396579][ T2676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7726'.
[  763.582535][ T2693] netlink: 'syz.2.7730': attribute type 1 has an invalid length.
[  763.629145][ T2693] 8021q: adding VLAN 0 to HW filter on device bond158
[  763.640725][ T2693] bond157: (slave bond158): making interface the new active one
[  763.645405][ T2693] bond157: (slave bond158): Enslaving as an active interface with an up link
[  763.657614][ T2693] bond157: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  763.661554][ T2693] bond157: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  763.739732][ T2708] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  764.433693][ T2726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.620076][ T2750] netlink: 'syz.2.7738': attribute type 10 has an invalid length.
[  764.752786][ T2762] 8021q: adding VLAN 0 to HW filter on device bond9
[  764.823887][ T2765] tipc: Resetting bearer <eth:team0>
[  764.834645][ T2765] tipc: Resetting bearer <eth:syzkaller0>
[  764.837694][ T2765] bond154: (slave veth71): Releasing active interface
[  764.845417][ T2765] vlan0: left promiscuous mode
[  764.853648][ T2765] bridge99: port 1(vlan0) entered disabled state
[  764.860354][ T2765] bond156: left allmulticast mode
[  764.862374][ T2765] bridge101: port 1(bond156) entered disabled state
[  764.874695][ T2762] netlink: 'syz.2.7744': attribute type 1 has an invalid length.
[  764.880459][ T2765] batadv0: left allmulticast mode
[  764.882177][ T2765] batadv0: left promiscuous mode
[  764.892649][ T2765] bridge0: port 1(batadv0) entered disabled state
[  764.920047][ T2765] bond157: (slave bond158): Releasing backup interface
[  765.342488][ T2797] netlink: 'syz.2.7749': attribute type 13 has an invalid length.
[  765.356637][ T2797] netlink: 'syz.2.7749': attribute type 17 has an invalid length.
[  765.374166][ T2797] tipc: Resetting bearer <eth:team0>
[  765.378773][ T2797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  765.563037][ T2813] syzkaller1: entered promiscuous mode
[  765.565753][ T2813] syzkaller1: entered allmulticast mode
[  765.652846][ T2821] __nla_validate_parse: 79 callbacks suppressed
[  765.652857][ T2821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7753'.
[  766.096453][ T2832] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7756'.
[  766.121477][ T2832] bond0: up delay (18673) is not a multiple of miimon (33271), value rounded to 0 ms
[  766.133814][ T2832] bond0: entered allmulticast mode
[  766.220284][ T2838] netlink: 'syz.2.7759': attribute type 10 has an invalid length.
[  766.222896][ T2838] tipc: Resetting bearer <eth:team0>
[  766.282503][ T2836] vlan0: entered allmulticast mode
[  766.288988][ T2836] bond0: entered allmulticast mode
[  766.391330][ T2855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'.
[  766.410647][ T2859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7763'.
[  766.419370][ T2859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7763'.
[  766.424673][ T2859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7763'.
[  766.427722][ T2859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7763'.
[  766.632233][ T2880] mac80211_hwsim hwsim146 syzkaller0: left promiscuous mode
[  766.634979][ T2880] mac80211_hwsim hwsim146 syzkaller0: left allmulticast mode
[  766.756823][ T2886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7771'.
[  766.760984][ T2886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7771'.
[  766.768098][ T2886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7771'.
[  767.226140][ T2946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  767.229089][ T2951] validate_nla: 2 callbacks suppressed
[  767.229102][ T2951] netlink: 'syz.3.7782': attribute type 12 has an invalid length.
[  767.271594][ T2953] netlink: 'syz.2.7783': attribute type 1 has an invalid length.
[  767.290846][ T2953] 8021q: adding VLAN 0 to HW filter on device bond161
[  767.359637][ T2956] 
[  767.360451][ T2956] ======================================================
[  767.362580][ T2956] WARNING: possible circular locking dependency detected
[  767.364795][ T2956] syzkaller #0 Not tainted
[  767.366415][ T2956] ------------------------------------------------------
[  767.369805][ T2956] syz.3.7784/2956 is trying to acquire lock:
[  767.371721][ T2956] ffffffff8f68e058 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  767.374720][ T2956] 
[  767.374720][ T2956] but task is already holding lock:
[  767.377215][ T2956] ffff88810f8b7270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  767.380410][ T2956] 
[  767.380410][ T2956] which lock already depends on the new lock.
[  767.380410][ T2956] 
[  767.384251][ T2956] 
[  767.384251][ T2956] the existing dependency chain (in reverse order) is:
[  767.387911][ T2956] 
[  767.387911][ T2956] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  767.391193][ T2956]        lock_acquire+0x120/0x360
[  767.393054][ T2956]        _raw_spin_lock_bh+0x36/0x50
[  767.395039][ T2956]        nr_rt_device_down+0x12a/0x720
[  767.396975][ T2956]        nr_device_event+0x137/0x150
[  767.398976][ T2956]        notifier_call_chain+0x1b6/0x3e0
[  767.401033][ T2956]        __dev_notify_flags+0x18d/0x2e0
[  767.403224][ T2956]        netif_change_flags+0xe8/0x1a0
[  767.405315][ T2956]        dev_change_flags+0x130/0x260
[  767.407308][ T2956]        dev_ioctl+0x7b4/0x1150
[  767.408875][ T2956]        sock_do_ioctl+0x22c/0x300
[  767.410510][ T2956]        sock_ioctl+0x576/0x790
[  767.412044][ T2956]        __se_sys_ioctl+0xfc/0x170
[  767.413811][ T2956]        do_syscall_64+0xfa/0x3b0
[  767.415616][ T2956]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.417836][ T2956] 
[  767.417836][ T2956] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  767.420154][ T2956]        lock_acquire+0x120/0x360
[  767.422086][ T2956]        _raw_spin_lock_bh+0x36/0x50
[  767.424143][ T2956]        nr_rt_device_down+0xa9/0x720
[  767.426298][ T2956]        nr_device_event+0x137/0x150
[  767.428370][ T2956]        notifier_call_chain+0x1b6/0x3e0
[  767.430536][ T2956]        __dev_notify_flags+0x18d/0x2e0
[  767.432703][ T2956]        netif_change_flags+0xe8/0x1a0
[  767.434758][ T2956]        dev_change_flags+0x130/0x260
[  767.436757][ T2956]        dev_ioctl+0x7b4/0x1150
[  767.438371][ T2956]        sock_do_ioctl+0x22c/0x300
[  767.439999][ T2956]        sock_ioctl+0x576/0x790
[  767.441659][ T2956]        __se_sys_ioctl+0xfc/0x170
[  767.443541][ T2956]        do_syscall_64+0xfa/0x3b0
[  767.445222][ T2956]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.447321][ T2956] 
[  767.447321][ T2956] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  767.449863][ T2956]        validate_chain+0xb9b/0x2140
[  767.451744][ T2956]        __lock_acquire+0xab9/0xd20
[  767.453456][ T2956]        lock_acquire+0x120/0x360
[  767.455169][ T2956]        _raw_spin_lock_bh+0x36/0x50
[  767.457158][ T2956]        nr_rt_ioctl+0x390/0xd50
[  767.458792][ T2956]        sock_do_ioctl+0xdc/0x300
[  767.460591][ T2956]        sock_ioctl+0x576/0x790
[  767.462173][ T2956]        __se_sys_ioctl+0xfc/0x170
[  767.463834][ T2956]        do_syscall_64+0xfa/0x3b0
[  767.465589][ T2956]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.467616][ T2956] 
[  767.467616][ T2956] other info that might help us debug this:
[  767.467616][ T2956] 
[  767.470723][ T2956] Chain exists of:
[  767.470723][ T2956]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  767.470723][ T2956] 
[  767.474843][ T2956]  Possible unsafe locking scenario:
[  767.474843][ T2956] 
[  767.477398][ T2956]        CPU0                    CPU1
[  767.479070][ T2956]        ----                    ----
[  767.480809][ T2956]   lock(&nr_node->node_lock);
[  767.482346][ T2956]                                lock(nr_node_list_lock);
[  767.484891][ T2956]                                lock(&nr_node->node_lock);
[  767.487819][ T2956]   lock(nr_neigh_list_lock);
[  767.489715][ T2956] 
[  767.489715][ T2956]  *** DEADLOCK ***
[  767.489715][ T2956] 
[  767.492847][ T2956] 2 locks held by syz.3.7784/2956:
[  767.494879][ T2956]  #0: ffffffff8f68e0b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  767.498685][ T2956]  #1: ffff88810f8b7270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  767.502549][ T2956] 
[  767.502549][ T2956] stack backtrace:
[  767.504894][ T2956] CPU: 1 UID: 0 PID: 2956 Comm: syz.3.7784 Not tainted syzkaller #0 PREEMPT(full) 
[  767.504914][ T2956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  767.504926][ T2956] Call Trace:
[  767.504935][ T2956]  <TASK>
[  767.504945][ T2956]  dump_stack_lvl+0x189/0x250
[  767.504967][ T2956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  767.504985][ T2956]  ? __pfx__printk+0x10/0x10
[  767.505003][ T2956]  ? stack_trace_save+0x9c/0xe0
[  767.505023][ T2956]  print_circular_bug+0x2ee/0x310
[  767.505041][ T2956]  check_noncircular+0x134/0x160
[  767.505062][ T2956]  validate_chain+0xb9b/0x2140
[  767.505087][ T2956]  __lock_acquire+0xab9/0xd20
[  767.505107][ T2956]  ? nr_rt_ioctl+0x390/0xd50
[  767.505125][ T2956]  lock_acquire+0x120/0x360
[  767.505146][ T2956]  ? nr_rt_ioctl+0x390/0xd50
[  767.505168][ T2956]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  767.505187][ T2956]  ? nr_rt_ioctl+0x390/0xd50
[  767.505205][ T2956]  _raw_spin_lock_bh+0x36/0x50
[  767.505222][ T2956]  ? nr_rt_ioctl+0x390/0xd50
[  767.505236][ T2956]  nr_rt_ioctl+0x390/0xd50
[  767.505256][ T2956]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  767.505275][ T2956]  ? apparmor_capable+0x137/0x1b0
[  767.505294][ T2956]  ? capable+0x89/0xe0
[  767.505309][ T2956]  ? nr_ioctl+0x1b1/0x3b0
[  767.505326][ T2956]  sock_do_ioctl+0xdc/0x300
[  767.505348][ T2956]  ? __pfx_sock_do_ioctl+0x10/0x10
[  767.505366][ T2956]  ? __lock_acquire+0xab9/0xd20
[  767.505423][ T2956]  sock_ioctl+0x576/0x790
[  767.505443][ T2956]  ? __pfx_sock_ioctl+0x10/0x10
[  767.505460][ T2956]  ? __fget_files+0x2a/0x420
[  767.505474][ T2956]  ? __fget_files+0x3a0/0x420
[  767.505485][ T2956]  ? __fget_files+0x2a/0x420
[  767.505500][ T2956]  ? bpf_lsm_file_ioctl+0x9/0x20
[  767.505518][ T2956]  ? __pfx_sock_ioctl+0x10/0x10
[  767.505535][ T2956]  __se_sys_ioctl+0xfc/0x170
[  767.505552][ T2956]  do_syscall_64+0xfa/0x3b0
[  767.505568][ T2956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.505583][ T2956]  ? asm_sysvec_call_function_single+0x1a/0x20
[  767.505599][ T2956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.505614][ T2956] RIP: 0033:0x7fe81878ebe9
[  767.505630][ T2956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  767.505645][ T2956] RSP: 002b:00007fe81958c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  767.505663][ T2956] RAX: ffffffffffffffda RBX: 00007fe8189c5fa0 RCX: 00007fe81878ebe9
[  767.505697][ T2956] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007
[  767.505707][ T2956] RBP: 00007fe818811e19 R08: 0000000000000000 R09: 0000000000000000
[  767.505717][ T2956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.505726][ T2956] R13: 00007fe8189c6038 R14: 00007fe8189c5fa0 R15: 00007fffc1d0d9c8
[  767.505746][ T2956]  </TASK>
[  767.611037][ T2967] bridge0: entered allmulticast mode
[  768.393826][ T5234] Bluetooth: hci2: command 0x0419 tx timeout

VM DIAGNOSIS:
04:04:26  Registers:
info registers vcpu 0

CPU#0
RAX=d104c8a220871300 RBX=ffffffff819683c8 RCX=d104c8a220871300 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558474a808 CR3=000000012a1bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0b67412e53
XMM06=0000000000000000 00007f0b67412e4d XMM07=0000000000000000 00007f0b67412e61
XMM08=0000000000000000 00007f0b67412ee7 XMM09=0000000000000000 00007f0b67412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001400 RDI=0000000000001401 RBP=ffffffff99df46b0 RSP=ffffc90002adf0f0
R8 =ffff888107910237 R9 =1ffff11020f22046 R10=dffffc0000000000 R11=ffffffff854f3cb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3d27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe81958c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3301aff8 CR3=0000000000554000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe818997498 00007fe818997470 XMM03=00007fe8189974a8 00007fe8189974a0
XMM04=00007fe8194fd100 00007fe818997460 XMM05=00007fe818997478 00007fe8189974c0
XMM06=00007fe8189974b8 00007fe8189974b0 XMM07=00007fe8189974a8 00007fe8189974a0
XMM08=0000000000000000 00007fe818812ee7 XMM09=0000000000000000 00007fe818812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
