last executing test programs:

2m25.527460427s ago: executing program 2 (id=1135):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='M', 0x1}], 0x1}}], 0x1, 0x4040040) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x7, 0x5}, &(0x7f0000000040)=0xc)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async)
r7 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) (rerun: 64)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000cbbbbbbbb8266bbbbbbbbbbbb88f7"], 0x12) (async, rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x4, 0xffffffc0, 0xfffffffd, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x4, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x6, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x86, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x10000, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x8, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r8, @ANYBLOB="87a33680d21e3730b8fc9a5ebfbe54f5a5bde10623d6315eb95ca83b28b69c573b4395ca0eb4383f962d54aef475e410040e54742d2c2ded9891bc4b393607420e6a9303b30581ff70343a78176685486ebf2ae255e907e9ecc10ddc058ac8762823e5aff0391f0469fedd56b9bfd78586cfde7d5098a1b5c475"], 0x3c}}, 0x8000) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r11 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r11, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) (async)
sendto$inet6(r11, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m23.688982308s ago: executing program 2 (id=1139):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x2000481c)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200308c0000280012800b0001006d61637365630000180002800c0004000400000100c2800005000d000100000008000500", @ANYRES32=r2], 0x50}}, 0x0)

2m23.504646874s ago: executing program 2 (id=1142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r1, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x99}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5cd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x49}}}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x814)
sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c0000000000000000000000080035"], 0x28}], 0x1}, 0x0)

2m22.55093255s ago: executing program 2 (id=1145):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000280)="53ad470000000050c3495d3a15161542b6981819aa3aae910c5774a19aa5259be9c3aca1b69fa19ab752d30661f4dbe456b297a40bfd")
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c51}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xeb9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m22.248518717s ago: executing program 2 (id=1149):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0), &(0x7f0000000340)=0x4)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000fcfeffff8500f9001300"/33], 0x0, 0x423, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004034}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
connect$can_bcm(r6, 0x0, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14}}, 0x48}}, 0x4048010)
sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2m21.603791365s ago: executing program 2 (id=1153):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004000000000000000ff07000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085fa02d9a0cb7c864b91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x9a, &(0x7f00000002c0)=""/154, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0x5}, {0x5, 0x3, 0x5, 0x6}, {0x5, 0x2, 0xf, 0x6}, {0x3, 0x1, 0x7, 0x8}, {0x4, 0x7fff, 0xd}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r9)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="290e29bd7000fbdbdf052700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e3100000005002b000100000005002e007f000000906bfa009197a01ccfd760c2b89e930eb5e5335539306a33a91317e00aa2c2cc05bda06e5626db7ad68583383fd86f61d05a601ad0119a21c2e1a28e521ab31e962ce80897ccac6b7c2684b2b5e5b9eb567330dc191ed7c42c3da5eebe6038b463d00ea849646c7b8ce68ea64060e3da6341ecdc3d6335fd4d6f611952fe4b2f5c3cfcdd000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20)
recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r11=>0x0})
socket$unix(0x1, 0x0, 0x0)
bind$can_j1939(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050)
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000d40)={<r12=>0x0, "0df8ef7152666eaf4dc9ecfe0d88fc01"})
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000001d40)={r12, 0x2f7, 0x7, 0x1})

2m6.6185331s ago: executing program 32 (id=1153):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004000000000000000ff07000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085fa02d9a0cb7c864b91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x9a, &(0x7f00000002c0)=""/154, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x6, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xf, 0x5}, {0x5, 0x3, 0x5, 0x6}, {0x5, 0x2, 0xf, 0x6}, {0x3, 0x1, 0x7, 0x8}, {0x4, 0x7fff, 0xd}], 0x10, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r9)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="290e29bd7000fbdbdf052700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e3100000005002b000100000005002e007f000000906bfa009197a01ccfd760c2b89e930eb5e5335539306a33a91317e00aa2c2cc05bda06e5626db7ad68583383fd86f61d05a601ad0119a21c2e1a28e521ab31e962ce80897ccac6b7c2684b2b5e5b9eb567330dc191ed7c42c3da5eebe6038b463d00ea849646c7b8ce68ea64060e3da6341ecdc3d6335fd4d6f611952fe4b2f5c3cfcdd000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20)
recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r11=>0x0})
socket$unix(0x1, 0x0, 0x0)
bind$can_j1939(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050)
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000d40)={<r12=>0x0, "0df8ef7152666eaf4dc9ecfe0d88fc01"})
ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000001d40)={r12, 0x2f7, 0x7, 0x1})

32.951358222s ago: executing program 3 (id=1387):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000140), 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/14], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x10, 0x10012, r4, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x3f}, @empty}, 0x9)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0)
ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r7}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r7}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00'})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)

32.794390933s ago: executing program 1 (id=1388):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0)
poll(0x0, 0x0, 0x1)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2004800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
close(r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000003800)=""/4106, 0x100a}, {&(0x7f0000000280)=""/65, 0x41}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x20000}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000500)={<r7=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000580)={0x0, 0xff})

30.296772193s ago: executing program 3 (id=1390):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001580)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000013c0)={'batadv0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6e, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000050000000000000002000000185500000b000000000000000000000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018320000050000000000000000000000186b00000d00000000000000fa000000b52040001000000018110000", @ANYRES64=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x6, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x41, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001440)=[{0x5, 0x1, 0xa, 0x8d4b13bc43fa4b16}, {0x1, 0x4, 0xe, 0x3}, {0x0, 0x1, 0xa, 0x7}, {0x0, 0x5, 0x7, 0x6}, {0x3, 0x1, 0x3, 0x3}], 0x10, 0x3ff}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r6, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r9, 0x0)
unshare(0x22020400)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

27.984022483s ago: executing program 1 (id=1391):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@udp, 0x1}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080))
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0)

27.558733225s ago: executing program 3 (id=1392):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) (async)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x200000b, 0x13, r3, 0x0) (async)
mmap(&(0x7f00009ac000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r6, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)

27.431908207s ago: executing program 0 (id=1393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x0, 0x82, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

27.037246559s ago: executing program 1 (id=1394):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000070a010400000000000000000200fdff0c00034000000000000000020900020073797a32000000000900010073797a300000000071032ceb50c520dbde0f067b"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5ed0bffec02b52a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x23, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="dbdf25000000003024fa8e0a58801fbf9a000000", @ANYRES32=0x0, @ANYBLOB="9d07070006060400200012800b0001006272696467650000100002800c002e000000000013699385"], 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r8)
sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000125bd70000300"/22], 0x1c}, 0x1, 0x0, 0x0, 0x74841}, 0x40)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x3f, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000140)=[{0x39, 0x8, 0x2}, {0x5, 0xfffffff7, 0x1}, {0x6, 0x0, 0x2}, {0x8, 0xfffffffd, 0x1}, {0x8000000000000001, 0x3, 0x2}, {0x9, 0x3}, {0x9, 0xfffffffa, 0x2}, {0x3b, 0x5}, {0x1, 0x7}], 0x9, 0x10, 0x800, 0x56c8})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r2, 0x5ac1a000)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080))

26.54718587s ago: executing program 0 (id=1395):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448e4, &(0x7f00000009c0)={0x0, 0x0, "0db43f"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003900010900000000ffdbdf2502180001ff0000080000000208000100ac141400"], 0x24}}, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
setsockopt$inet_buf(r4, 0x0, 0x29, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000004000)=0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
recvmmsg$unix(r5, &(0x7f00000004c0)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000400)=""/20, 0x14}], 0x3, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40010001, &(0x7f0000000500)={0x0, 0x3938700})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1d, 0x3, @udp='udp:syz1\x00'}}}, [""]}, 0x34}}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'})
syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c010}, 0x0)
close(r7)

26.230604118s ago: executing program 3 (id=1396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bond_slave_0\x00', @remote})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6c, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xe, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}]}}}}}}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002)

25.387529816s ago: executing program 1 (id=1397):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/127, 0x7f}, {0x0}], 0x2)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x8ff, 0x4e21, 0xb0, 0xa, 0x80, 0x40, 0x1d}, {0x6, 0x47c5, 0x1a6c, 0xff, 0x8, 0xe26d, 0x63c6, 0x401}, {0x400000004, 0x1, 0x8000, 0xc96d}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@local, 0x3503, 0x2, 0x1, 0x0, 0x1, 0x2000000, 0xffffffff}}, 0xe8)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000ffff25bd7000fddbdf2500009f0e", @ANYRES32=0x0, @ANYBLOB="000000004201020008000a00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shutdown(r3, 0x0)

25.123845176s ago: executing program 0 (id=1398):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000)=0x13, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettaction={0x18, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000400), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x41)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206050000000000000000000200fffd16000300686173683a6e65742c706f72742c6e657400000005000500050000000d000300686173683a6d61630000000012000300686173683a6e65742c706f7274000073a9ef89490bf0f300a6ebafa7bf761b339c75f65eca6cf11f221b1d0a0ba3a8510c9bfeadce4255b39d26495a308e63629f461758557f438e30a128a1d39d8c3e02a5301fe26dfc127aeae62adf141712573c3f0e1c1f2aa16640b380f35c0729d0e75600ee0681bba866d6cdf51a9c834613b3c399600c5a2ffec26d2a3f3f47323ade2dc33b2e3dad28987906e5730d8b1202ed0a34eeb2"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd020000000500050004000000080003000700000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

23.507517063s ago: executing program 3 (id=1399):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cad7000000000000100000028000180060001000a00000014000400fe8800000000000000000000000001010800060003000000"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r7 = socket(0x2000000000000021, 0x2, 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0xbd427000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)

20.782272509s ago: executing program 1 (id=1400):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x92, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) (async)
setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r8], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008014)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='wg1\x00')
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
close(r9) (async)
close(r9)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0))

20.781496819s ago: executing program 0 (id=1401):
socket$netlink(0x10, 0x3, 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
close(0x4)
socket$phonet(0x23, 0x2, 0x1)

19.612084813s ago: executing program 0 (id=1402):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x600, 0x1e0, 0x0, 0xffffffff, 0xf0, 0x2d0, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/220, 0xdc}], 0x5)

17.55771584s ago: executing program 3 (id=1403):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000048c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @private2, 0x1}}}, 0x80, 0x0}}], 0x1, 0x24050070)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000108bd7000f7dbdf250000000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000004002b8008001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf080800010000000000090002007379"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f00000004c0)={0xf, 0x121, 0x7, 0x2f, 0x6})
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, 0x0, &(0x7f00000000c0))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r9)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000001c0)={0x18, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
socket$nl_generic(0x10, 0x3, 0x10)
accept$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffd, @empty, 0x3}, 0x1c)
setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)

17.000444662s ago: executing program 0 (id=1404):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1000, 0x101, 0x9, 0x4, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x7, 0xb}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000200)={r2, &(0x7f0000000100)='#\x00', 0x2c0, &(0x7f0000000140)={@align=0xad, {0x9, 0x3, 0x7fffffff, 0x2004}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x39})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4010, r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xa5, 0xc}, 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r9, r8}, 0xc)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

16.788151579s ago: executing program 1 (id=1405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002880)=""/203, 0xcb}, {&(0x7f0000002980)=""/74, 0x4a}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/12, 0xc}], 0x4}, 0x4}], 0x1, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @loopback, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x401}, 0x65, &(0x7f00000001c0)=[{&(0x7f0000000600)="e292f7fa4801a8bd27f2bb3f3a36eaebbd47fd61caaec98f3a87ffa3ba939247d20b13f14a375c833b24c44be7f090c70bdd13c940fa3ede558db1994ce86be24a32d7058ea0bb7377885988bff2a9c8ae96acde5931ad66f4c732e6a4454335939c4a8d7d8f0636c187d914678f7fea8e2e1636", 0x74}], 0x1}}], 0x2, 0x40)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={r1, 0x8, 0x2}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={<r5=>r1, 0x8, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r6)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xb56e5b65ceb4d664}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, r10, 0x11, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x401}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffc0000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x38c}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x32d}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5}]}, 0x3c}}, 0x800)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x20, 0x80000000, 0x30000}, &(0x7f0000000080)=0x18)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x608b8f463c960f23, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x40000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

1.066706801s ago: executing program 33 (id=1404):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1000, 0x101, 0x9, 0x4, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x7, 0xb}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000200)={r2, &(0x7f0000000100)='#\x00', 0x2c0, &(0x7f0000000140)={@align=0xad, {0x9, 0x3, 0x7fffffff, 0x2004}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x39})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4010, r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xa5, 0xc}, 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0x4, 0x28}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r9, r8}, 0xc)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

551.778753ms ago: executing program 34 (id=1405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c300000000ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002880)=""/203, 0xcb}, {&(0x7f0000002980)=""/74, 0x4a}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/12, 0xc}], 0x4}, 0x4}], 0x1, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @loopback, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x401}, 0x65, &(0x7f00000001c0)=[{&(0x7f0000000600)="e292f7fa4801a8bd27f2bb3f3a36eaebbd47fd61caaec98f3a87ffa3ba939247d20b13f14a375c833b24c44be7f090c70bdd13c940fa3ede558db1994ce86be24a32d7058ea0bb7377885988bff2a9c8ae96acde5931ad66f4c732e6a4454335939c4a8d7d8f0636c187d914678f7fea8e2e1636", 0x74}], 0x1}}], 0x2, 0x40)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={r1, 0x8, 0x2}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={<r5=>r1, 0x8, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r6)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xb56e5b65ceb4d664}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, r10, 0x11, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x401}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffc0000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x38c}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x32d}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5}]}, 0x3c}}, 0x800)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x20, 0x80000000, 0x30000}, &(0x7f0000000080)=0x18)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x608b8f463c960f23, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x40000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

0s ago: executing program 35 (id=1403):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000048c0)=[{{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x0, @private2, 0x1}}}, 0x80, 0x0}}], 0x1, 0x24050070)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000108bd7000f7dbdf250000000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000004002b8008001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002dbd700002dcdf250900020073607a310000000008004100736977001400330073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddbdf080800010000000000090002007379"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f00000004c0)={0xf, 0x121, 0x7, 0x2f, 0x6})
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, 0x0, &(0x7f00000000c0))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r9)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000001c0)={0x18, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
socket$nl_generic(0x10, 0x3, 0x10)
accept$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffd, @empty, 0x3}, 0x1c)
setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)

kernel console output (not intermixed with test programs):

aller1: entered promiscuous mode
[  124.896104][ T8809] syzkaller1: entered allmulticast mode
[  125.013997][  T806] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  125.123249][  T806] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  125.232992][ T8830] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.233042][ T8830] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.233331][ T8832] netpci0: tun_chr_ioctl cmd 1074025681
[  125.574566][ T8852] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  125.649670][ T8854] pim6reg1: entered promiscuous mode
[  125.649723][ T8854] pim6reg1: entered allmulticast mode
[  125.877765][   T33] tipc: Node number set to 17954120
[  125.885911][ T8869] batman_adv: batadv0: Interface deactivated: wlan1
[  126.014041][ T8881] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  126.046136][ T8884] sit0: entered promiscuous mode
[  126.051455][ T8884] __nla_validate_parse: 15 callbacks suppressed
[  126.051863][ T8884] netlink: 1 bytes leftover after parsing attributes in process `syz.2.719'.
[  126.074661][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'.
[  126.124348][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'.
[  126.124563][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'.
[  126.149308][ T8894] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  126.180203][ T8894] netlink: 'syz.0.724': attribute type 1 has an invalid length.
[  126.180252][ T8894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.724'.
[  126.180646][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'.
[  126.223823][ T8901] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  126.255852][ T8901] bond11: entered promiscuous mode
[  126.256282][ T8901] 8021q: adding VLAN 0 to HW filter on device bond11
[  126.278868][ T8901] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  126.278935][ T8901] netlink: 756 bytes leftover after parsing attributes in process `syz.2.726'.
[  126.294831][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.727'.
[  126.464879][ T8917] netlink: 'syz.0.729': attribute type 1 has an invalid length.
[  126.464942][ T8917] netlink: 'syz.0.729': attribute type 2 has an invalid length.
[  126.522512][ T8920] netlink: 92 bytes leftover after parsing attributes in process `syz.2.731'.
[  126.526740][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[  127.189849][ T8941] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  127.198746][ T8941] geneve5: entered promiscuous mode
[  127.201465][ T8941] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  127.208185][ T8941] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  129.361886][ T8909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.455099][ T8961] xt_hashlimit: size too large, truncated to 1048576
[  129.472044][ T8965] validate_nla: 62 callbacks suppressed
[  129.472125][ T8965] netlink: 'syz.0.741': attribute type 10 has an invalid length.
[  129.483308][ T8965] 8021q: adding VLAN 0 to HW filter on device team0
[  129.485947][ T8965] bond0: (slave team0): Enslaving as an active interface with an up link
[  129.670850][ T8984] 8021q: adding VLAN 0 to HW filter on device bond12
[  129.779109][ T8979] veth0_macvtap: left promiscuous mode
[  129.872465][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.903690][   T10] hsr0 speed is unknown, defaulting to 1000
[  129.903760][   T10] syz1: Port: 1 Link DOWN
[  129.921891][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.921947][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.922012][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.922051][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.922120][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.922159][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.922202][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.922240][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.109224][ T9002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.257079][ T9014] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  130.400237][ T9032] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  130.425599][ T9032] 8021q: adding VLAN 0 to HW filter on device bond13
[  130.444419][ T9032] bond13: (slave veth5): Enslaving as a backup interface with a down link
[  130.456266][ T9032] bond13: (slave dummy0): Enslaving as a backup interface with an up link
[  130.461528][ T9032] netlink: 'syz.2.755': attribute type 10 has an invalid length.
[  130.462767][ T9032] dummy0: entered promiscuous mode
[  130.467355][ T9032] bond13: (slave dummy0): Releasing backup interface
[  130.627108][ T9040] netlink: 'syz.2.757': attribute type 2 has an invalid length.
[  131.687986][ T9059] __nla_validate_parse: 81 callbacks suppressed
[  131.688221][ T9059] netlink: 244 bytes leftover after parsing attributes in process `syz.2.762'.
[  131.693605][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.145334][ T9065] openvswitch: netlink: Message has -2 unknown bytes.
[  132.145412][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.145723][ T9063] openvswitch: netlink: Message has -2 unknown bytes.
[  132.145742][ T9063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.163985][ T9066] vlan2: entered promiscuous mode
[  132.164077][ T9066] macvlan0: entered promiscuous mode
[  132.164301][ T9066] bond10: entered promiscuous mode
[  132.168346][ T9063] netlink: 13183 bytes leftover after parsing attributes in process `syz.0.765'.
[  132.228857][ T9070] tap0: tun_chr_ioctl cmd 1074025677
[  132.228948][ T9070] tap0: linktype set to 778
[  132.251511][ T9078] veth0: entered promiscuous mode
[  132.254658][ T9078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'.
[  132.258627][ T9078] veth0: left promiscuous mode
[  132.379878][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.380418][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.380571][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.380703][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.380838][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.380972][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.381133][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.772'.
[  132.431838][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.601044][ T9107] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  132.627476][ T9107] 8021q: adding VLAN 0 to HW filter on device bond17
[  132.769353][ T9117] netlink: 'syz.2.777': attribute type 9 has an invalid length.
[  132.792705][ T9120] netlink: 'syz.0.778': attribute type 2 has an invalid length.
[  132.814248][ T9120] debugfs: '.P'G!DES' already exists in 'ieee80211'
[  132.829183][ T9120] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  132.831227][ T9121] gretap2: entered allmulticast mode
[  132.842918][ T9124] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  132.843583][ T9124] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  132.846271][ T9124] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  133.017531][ T9130] xfrm0: entered promiscuous mode
[  133.019878][ T9130] xfrm0: entered allmulticast mode
[  133.075039][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  133.780454][ T9154] )fl: renamed from lo
[  133.991075][ T9166] bond0: (slave team0): Releasing backup interface
[  133.995159][ T9166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  135.269238][ T9182] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  135.269289][ T9182] netlink: 'syz.2.795': attribute type 2 has an invalid length.
[  135.506199][ T9207] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  135.565776][ T9214] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  135.620520][ T9217] netlink: 'syz.1.804': attribute type 3 has an invalid length.
[  135.647271][ T9220] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  135.685713][ T9220] 8021q: adding VLAN 0 to HW filter on device bond14
[  135.733164][ T9235] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  135.790954][ T9235] bond18: (slave geneve6): making interface the new active one
[  135.793894][ T9235] bond18: (slave geneve6): Enslaving as an active interface with an up link
[  135.802270][ T6117] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0
[  135.802350][ T6117] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0
[  135.802394][ T6117] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0
[  135.802438][ T6117] netdevsim netdevsim1 : set [1, 3] type 2 family 0 port 20004 - 0
[  135.968052][ T9254] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  135.989370][ T9254] bond19: option mode: invalid value (8)
[  135.993123][ T9254] bond19 (unregistering): Released all slaves
[  136.073269][ T9254] netlink: 'syz.1.810': attribute type 4 has an invalid length.
[  136.100934][ T9258] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  136.117206][ T9258] 8021q: adding VLAN 0 to HW filter on device bond19
[  136.121414][ T9258] tc_dump_action: action bad kind
[  136.164115][ T8580] lo speed is unknown, defaulting to 1000
[  136.350949][ T9273] syzkaller0: left promiscuous mode
[  136.353798][ T9273] syzkaller0: left allmulticast mode
[  136.406432][ T9277] netlink: 'syz.1.816': attribute type 3 has an invalid length.
[  136.455041][ T9279] nbd: nbd64 already in use
[  136.461421][ T7351] block nbd64: NBD_DISCONNECT
[  136.590840][ T9290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  136.647213][ T9293] gre3: entered promiscuous mode
[  136.729290][ T9306] batman_adv: batadv0: Interface activated: wlan1
[  136.735250][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.737837][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.759584][ T9306] openvswitch: netlink: Duplicate or invalid key (type 0).
[  136.765760][ T9306] __nla_validate_parse: 83 callbacks suppressed
[  136.768144][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'.
[  136.798224][ T9306] batman_adv: batadv0: Removing interface: ipvlan2
[  136.799025][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'.
[  136.810792][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'.
[  136.813860][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'.
[  136.957870][ T9330] netlink: 'syz.0.830': attribute type 5 has an invalid length.
[  136.999211][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'.
[  137.000043][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'.
[  137.090558][ T9348] hsr0 speed is unknown, defaulting to 1000
[  137.095557][ T9348] lo speed is unknown, defaulting to 1000
[  137.176208][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  137.267349][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  137.285317][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.336692][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'.
[  137.374394][ T8952] bond0 (unregistering): Released all slaves
[  137.457946][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'.
[  137.580817][ T9372] batman_adv: batadv0: Interface deactivated: wlan1
[  137.729235][ T9386] bridge0: port 1(vlan3) entered blocking state
[  137.729357][ T9386] bridge0: port 1(vlan3) entered disabled state
[  137.729417][ T9386] vlan3: entered allmulticast mode
[  137.729425][ T9386] geneve0: entered allmulticast mode
[  137.811191][ T9389] bond14: entered promiscuous mode
[  137.812101][ T9389] 8021q: adding VLAN 0 to HW filter on device bond14
[  137.823416][ T9389] macvtap1: entered allmulticast mode
[  137.834517][ T9389] bond14: (slave bridge5): making interface the new active one
[  137.834629][ T9389] bridge5: entered promiscuous mode
[  137.838336][ T9389] bond14: (slave bridge5): Enslaving as an active interface with an up link
[  137.868075][ T9389] bond14: (slave bridge6): Enslaving as a backup interface with an up link
[  138.123166][ T9415] bond15: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  138.128156][ T9415] bond15 (unregistering): Released all slaves
[  138.367606][ T9422] erspan0: left allmulticast mode
[  138.369983][ T9422] erspan0: left promiscuous mode
[  138.370167][ T9422] bridge2: port 1(erspan0) entered disabled state
[  138.382938][ T9422] bond8: (slave veth0_to_bond): Releasing active interface
[  138.383599][ T9422] bond8: (slave veth1): making interface the new active one
[  138.389454][ T9422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  138.600080][ T9428] bond16 (unregistering): Released all slaves
[  138.995147][ T9459] geneve1: entered promiscuous mode
[  139.102061][ T8952] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.102212][ T8952] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.102473][ T8952] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.102499][ T8952] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.122899][ T9470] SET target dimension over the limit!
[  139.160700][   T34] audit: type=1800 audit(1788977596.120:4): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.863" name="memory.events" dev="tmpfs" ino=1560 res=0 errno=0
[  139.257984][   T34] audit: type=1107 audit(1788977596.220:5): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  139.291164][ T9484] ip6erspan1: entered allmulticast mode
[  139.351397][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.352978][ T9486] 8021q: adding VLAN 0 to HW filter on device team0
[  139.354859][ T9486] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.404324][ T9488] x_tables: duplicate entry at hook 4
[  139.432288][ T9486] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  139.452849][ T9489] bond6: option mode: unable to set because the bond device has slaves
[  139.482424][ T9489] syzkaller0: entered promiscuous mode
[  139.482473][ T9489] syzkaller0: entered allmulticast mode
[  139.530203][ T9495] 8021q: adding VLAN 0 to HW filter on device bond16
[  139.534571][   T13] bond6: (slave bond0): link status definitely down, disabling slave
[  139.539984][   T13] bond6: now running without any active interface!
[  139.661317][ T9510] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  139.719856][ T9512] veth13: entered allmulticast mode
[  139.739685][ T9512] veth15: entered allmulticast mode
[  139.743755][ T9515] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  139.747804][ T9515] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  139.753752][ T9515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  139.780927][ T9512] veth17: entered allmulticast mode
[  139.797376][ T9512] veth19: entered allmulticast mode
[  139.820776][ T9512] veth21: entered allmulticast mode
[  139.835456][ T9512] veth23: entered allmulticast mode
[  139.847160][ T9512] veth25: entered allmulticast mode
[  139.865065][ T9512] veth27: entered allmulticast mode
[  139.885631][ T9512] veth29: entered allmulticast mode
[  139.898225][ T9512] veth31: entered allmulticast mode
[  139.910423][ T9512] veth33: entered allmulticast mode
[  139.921985][ T9512] veth35: entered allmulticast mode
[  139.931180][ T9512] veth37: entered allmulticast mode
[  139.941221][ T9512] veth39: entered allmulticast mode
[  139.952341][ T9512] veth41: entered allmulticast mode
[  139.967956][ T9512] veth43: entered allmulticast mode
[  139.982550][ T9512] veth45: entered allmulticast mode
[  139.997577][ T9512] veth47: entered allmulticast mode
[  140.008740][ T9512] veth49: entered allmulticast mode
[  140.011139][ T9522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.014809][ T9522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.031238][ T9512] veth51: entered allmulticast mode
[  140.040849][ T9512] veth53: entered allmulticast mode
[  140.074687][ T9512] veth55: entered allmulticast mode
[  140.101183][ T9512] veth57: entered allmulticast mode
[  140.127053][ T9512] veth59: entered allmulticast mode
[  140.142826][ T9512] veth61: entered allmulticast mode
[  140.159392][ T9512] veth63: entered allmulticast mode
[  140.190717][ T9512] veth65: entered allmulticast mode
[  140.218208][ T9512] veth67: entered allmulticast mode
[  140.230164][ T9512] veth69: entered allmulticast mode
[  140.240398][ T9512] veth71: entered allmulticast mode
[  140.255070][ T9512] veth73: entered allmulticast mode
[  140.263589][ T9512] veth75: entered allmulticast mode
[  140.279505][ T9512] veth77: entered allmulticast mode
[  140.293495][ T9512] veth79: entered allmulticast mode
[  140.315200][ T9512] veth81: entered allmulticast mode
[  140.340255][ T9512] veth83: entered allmulticast mode
[  140.357036][ T9512] veth85: entered allmulticast mode
[  140.403384][ T9512] veth87: entered allmulticast mode
[  140.429983][ T9512] veth89: entered allmulticast mode
[  140.440603][ T9512] veth91: entered allmulticast mode
[  140.451581][ T9512] veth93: entered allmulticast mode
[  140.460812][ T9512] veth95: entered allmulticast mode
[  140.494829][ T9512] veth97: entered allmulticast mode
[  140.513185][ T9512] veth99: entered allmulticast mode
[  140.529743][ T9512] veth101: entered allmulticast mode
[  140.583037][ T9542] xt_time: invalid argument - start or stop time greater than 23:59:59
[  140.743263][ T9551] bond15 (unregistering): Released all slaves
[  140.873544][ T9563] veth0: entered promiscuous mode
[  140.875395][ T9563] veth0: left promiscuous mode
[  140.904359][ T9566] vlan4: entered promiscuous mode
[  140.904405][ T9566] bond0: entered promiscuous mode
[  140.922691][ T9569] ipvlan2: entered allmulticast mode
[  141.155896][ T9578] 0: left allmulticast mode
[  141.155964][ T9578] hsr_slave_0: left allmulticast mode
[  141.156008][ T9578] hsr_slave_1: left allmulticast mode
[  141.318124][ T9578] bond10: left allmulticast mode
[  141.318169][ T9578] bond10: left promiscuous mode
[  141.366198][ T9578] bond14: left allmulticast mode
[  141.366265][ T9578] bridge6: left allmulticast mode
[  141.442614][ T9578] geneve5: left promiscuous mode
[  141.539484][ T9578] vlan2: left promiscuous mode
[  141.539548][ T9578] macvlan0: left promiscuous mode
[  141.546956][ T9578] gre3: left promiscuous mode
[  141.548704][ T9578] veth13: left allmulticast mode
[  141.548967][ T9578] veth15: left allmulticast mode
[  141.549401][ T9578] veth17: left allmulticast mode
[  141.549587][ T9578] veth19: left allmulticast mode
[  141.549784][ T9578] veth21: left allmulticast mode
[  141.550024][ T9578] veth23: left allmulticast mode
[  141.550367][ T9578] veth25: left allmulticast mode
[  141.550653][ T9578] veth27: left allmulticast mode
[  141.550864][ T9578] veth29: left allmulticast mode
[  141.551111][ T9578] veth31: left allmulticast mode
[  141.551318][ T9578] veth33: left allmulticast mode
[  141.553417][ T9578] veth35: left allmulticast mode
[  141.553618][ T9578] veth37: left allmulticast mode
[  141.554133][ T9578] veth39: left allmulticast mode
[  141.554318][ T9578] veth41: left allmulticast mode
[  141.554524][ T9578] veth43: left allmulticast mode
[  141.554718][ T9578] veth45: left allmulticast mode
[  141.555648][ T9578] veth47: left allmulticast mode
[  141.555863][ T9578] veth49: left allmulticast mode
[  141.556093][ T9578] veth51: left allmulticast mode
[  141.556389][ T9578] veth53: left allmulticast mode
[  141.556574][ T9578] veth55: left allmulticast mode
[  141.556876][ T9578] veth57: left allmulticast mode
[  141.557103][ T9578] veth59: left allmulticast mode
[  141.557300][ T9578] veth61: left allmulticast mode
[  141.557594][ T9578] veth63: left allmulticast mode
[  141.557949][ T9578] veth65: left allmulticast mode
[  141.558138][ T9578] veth67: left allmulticast mode
[  141.558326][ T9578] veth69: left allmulticast mode
[  141.558618][ T9578] veth71: left allmulticast mode
[  141.558818][ T9578] veth73: left allmulticast mode
[  141.559146][ T9578] veth75: left allmulticast mode
[  141.559355][ T9578] veth77: left allmulticast mode
[  141.559540][ T9578] veth79: left allmulticast mode
[  141.559899][ T9578] veth81: left allmulticast mode
[  141.560207][ T9578] veth83: left allmulticast mode
[  141.560411][ T9578] veth85: left allmulticast mode
[  141.560594][ T9578] veth87: left allmulticast mode
[  141.561069][ T9578] veth89: left allmulticast mode
[  141.561385][ T9578] veth91: left allmulticast mode
[  141.561515][ T9578] veth93: left allmulticast mode
[  141.562228][ T9578] veth95: left allmulticast mode
[  141.563043][ T9578] veth97: left allmulticast mode
[  141.563321][ T9578] veth99: left allmulticast mode
[  141.563596][ T9578] veth101: left allmulticast mode
[  141.569625][ T8580] lo speed is unknown, defaulting to 1000
[  141.569644][ T8580] syz0: Port: 1 Link DOWN
[  141.621793][ T6117] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.621821][ T6117] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.621835][ T6117] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0
[  141.621848][ T6117] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0
[  141.621861][ T6117] netdevsim netdevsim1 netdevsim1: unset [1, 3] type 2 family 0 port 20004 - 0
[  141.621896][ T6117] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.621942][ T6117] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.621955][ T6117] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0
[  141.621969][ T6117] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0
[  141.621982][ T6117] netdevsim netdevsim1 netdevsim3: unset [1, 3] type 2 family 0 port 20004 - 0
[  141.622004][ T6117] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.622019][ T6117] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.622033][ T6117] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0
[  141.622047][ T6117] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0
[  141.622062][ T6117] netdevsim netdevsim1 netdevsim2: unset [1, 3] type 2 family 0 port 20004 - 0
[  141.622085][ T6117] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0
[  141.622098][ T6117] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  141.622110][ T6117] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20002 - 0
[  141.622123][ T6117] netdevsim netdevsim1 : unset [1, 2] type 2 family 0 port 20000 - 0
[  141.622135][ T6117] netdevsim netdevsim1 : unset [1, 3] type 2 family 0 port 20004 - 0
[  141.665439][ T9581] vlan4: entered promiscuous mode
[  141.938290][ T9617] __nla_validate_parse: 135 callbacks suppressed
[  141.938363][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'.
[  141.938389][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'.
[  142.060115][ T9613] tipc: Resetting bearer <eth:syzkaller0>
[  142.103707][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.103766][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.112443][ T9627] erspan0: entered promiscuous mode
[  142.123239][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.123296][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.123337][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.123365][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.123397][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.123425][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.290614][ T9645] validate_nla: 7 callbacks suppressed
[  142.291379][ T9645] netlink: 'syz.0.913': attribute type 8 has an invalid length.
[  142.291392][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  142.291413][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[  142.316318][ T9645] netlink: 148 bytes leftover after parsing attributes in process `syz.0.913'.
[  142.316374][ T9645] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  142.378229][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  142.492332][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.918'.
[  142.539620][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  142.539681][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  142.544719][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  142.544755][ T9667] netlink: 'syz.1.920': attribute type 29 has an invalid length.
[  142.630662][ T9675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.636334][ T9675] syzkaller0: entered promiscuous mode
[  142.636442][ T9675] syzkaller0: entered allmulticast mode
[  142.641879][ T5648] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.641977][ T5648] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.642028][ T5648] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.642053][ T5648] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.713250][ T9683] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  142.713351][ T9683] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  142.731107][ T9677] syzkaller0: mtu less than device minimum
[  142.733186][ T9683] bridge0: entered allmulticast mode
[  142.866441][ T9697] netlink: 'syz.2.924': attribute type 2 has an invalid length.
[  143.054989][ T9711] team0: No ports can be present during mode change
[  143.146151][ T9716] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  143.164796][ T9716] 8021q: adding VLAN 0 to HW filter on device bond17
[  143.317871][ T9732] bond18: Removing last arp target with arp_interval on
[  143.377578][ T9735] Bluetooth: ISO socket layer initialized
[  143.474233][ T9745] netlink: 'syz.2.935': attribute type 1 has an invalid length.
[  143.488067][ T9745] 8021q: adding VLAN 0 to HW filter on device bond19
[  143.503733][ T9745] bond19: (slave gretap6): making interface the new active one
[  143.507533][ T9745] bond19: (slave gretap6): Enslaving as an active interface with an up link
[  143.565737][ T9748] )fl: entered promiscuous mode
[  143.568208][ T9748] tunl0: entered promiscuous mode
[  143.570458][ T9748] gre0: entered promiscuous mode
[  143.573152][ T9748] erspan0: entered promiscuous mode
[  143.575284][ T9748] ip_vti0: entered promiscuous mode
[  143.577237][ T9748] ip6_vti0: entered promiscuous mode
[  143.579137][ T9748] ip6tnl0: entered promiscuous mode
[  143.581068][ T9748] ip6gre0: entered promiscuous mode
[  143.584213][ T9748] ip6gretap0: entered promiscuous mode
[  143.586193][ T9748] vcan0: entered promiscuous mode
[  143.588182][ T9748] team0: entered promiscuous mode
[  143.590106][ T9748] nlmon0: entered promiscuous mode
[  143.592083][ T9748] batadv0: entered promiscuous mode
[  143.592224][ T9748] wg0: entered promiscuous mode
[  143.592327][ T9748] wg1: entered promiscuous mode
[  143.592577][ T9748] wg2: entered promiscuous mode
[  143.592653][ T9748] veth1_to_bridge: entered promiscuous mode
[  143.592714][ T9748] bridge_slave_1: entered promiscuous mode
[  143.592773][ T9748] veth0_to_bond: entered promiscuous mode
[  143.592832][ T9748] bond_slave_0: entered promiscuous mode
[  143.592924][ T9748] veth1_to_bond: entered promiscuous mode
[  143.592983][ T9748] bond_slave_1: entered promiscuous mode
[  143.593207][ T9748] veth0_to_team: entered promiscuous mode
[  143.593274][ T9748] team_slave_0: entered promiscuous mode
[  143.593335][ T9748] C: entered promiscuous mode
[  143.593393][ T9748] team_slave_1: entered promiscuous mode
[  143.593449][ T9748] veth0_to_batadv: entered promiscuous mode
[  143.593508][ T9748] batadv_slave_0: entered promiscuous mode
[  143.593574][ T9748] veth1_to_batadv: entered promiscuous mode
[  143.593720][ T9748] batadv_slave_1: entered promiscuous mode
[  143.593781][ T9748] xfrm0: entered promiscuous mode
[  143.593847][ T9748] veth0_to_hsr: entered promiscuous mode
[  143.593995][ T9748] veth1_to_hsr: entered promiscuous mode
[  143.594110][ T9748] hsr0: entered promiscuous mode
[  143.594172][ T9748] veth1_virt_wifi: entered promiscuous mode
[  143.594267][ T9748] veth0_virt_wifi: entered promiscuous mode
[  143.594364][ T9748] virt_wifi0: entered promiscuous mode
[  143.594534][ T9748] macvtap0: entered promiscuous mode
[  143.594594][ T9748] macsec0: entered promiscuous mode
[  143.594654][ T9748] geneve0: entered promiscuous mode
[  143.594715][ T9748] geneve1: entered promiscuous mode
[  143.594857][ T9748] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  143.594950][ T9748] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  143.595004][ T9748] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  143.595054][ T9748] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  143.595105][ T9748] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  143.595166][ T9748] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  143.595224][ T9748] gre1: entered promiscuous mode
[  143.595337][ T9748] ip6gre1: entered promiscuous mode
[  143.595413][ T9748] bridge1: entered promiscuous mode
[  143.595593][ T9748] ip6tnl1: entered promiscuous mode
[  143.595653][ T9748] bond1: entered promiscuous mode
[  143.595702][ T9748] vxcan2: entered promiscuous mode
[  143.595763][ T9748] vxcan3: entered promiscuous mode
[  143.595834][ T9748] bond2: entered promiscuous mode
[  143.596030][ T9748] bond3: entered promiscuous mode
[  143.596241][ T9748] bond5: entered promiscuous mode
[  143.596290][ T9748] bond6: entered promiscuous mode
[  143.596385][ T9748] gretap1: entered promiscuous mode
[  143.596448][ T9748] : entered promiscuous mode
[  143.596496][ T9748] geneve3: entered promiscuous mode
[  143.596575][ T9748] bond7: entered promiscuous mode
[  143.596664][ T9748] wireguard0: entered promiscuous mode
[  143.596726][ T9748] ip6gre2: entered promiscuous mode
[  143.596786][ T9748] bond8: entered promiscuous mode
[  143.596793][ T9748] veth1: entered promiscuous mode
[  143.596937][ T9748] veth0: entered promiscuous mode
[  143.597118][ T9748] ip6erspan0: entered promiscuous mode
[  143.597167][ T9748] ip6tnl2: entered promiscuous mode
[  143.597267][ T9748] tipc: Resetting bearer <eth:syzkaller0>
[  143.598218][ T9748] erspan1: entered promiscuous mode
[  143.598291][ T9748] bridge0: entered promiscuous mode
[  143.598427][ T9748] gretap2: entered promiscuous mode
[  143.598481][ T9748] vlan1: entered promiscuous mode
[  143.598608][ T9748] bond9: entered promiscuous mode
[  143.598656][ T9748] geneve4: entered promiscuous mode
[  143.598715][ T9748] bond10: entered promiscuous mode
[  143.598771][ T9748] bridge2: entered promiscuous mode
[  143.598835][ T9748] vlan2: entered promiscuous mode
[  143.599016][ T9748] gtp0: entered promiscuous mode
[  143.599096][ T9748] ip6gre3: entered promiscuous mode
[  143.599159][ T9748] gretap3: entered promiscuous mode
[  143.599206][ T9748] mac80211_hwsim hwsim9 wlan2: entered promiscuous mode
[  143.599264][ T9748] gretap4: entered promiscuous mode
[  143.599309][ T9748] bridge3: entered promiscuous mode
[  143.599413][ T9748] gtp1: entered promiscuous mode
[  143.599550][ T9748] ip6tnl3: entered promiscuous mode
[  143.599601][ T9748] veth2: entered promiscuous mode
[  143.599683][ T9748] veth3: entered promiscuous mode
[  143.599738][ T9748] bond12: entered promiscuous mode
[  143.599786][ T9748] vxlan0: entered promiscuous mode
[  143.599833][ T9748] bond13: entered promiscuous mode
[  143.599840][ T9748] veth5: entered promiscuous mode
[  143.600032][ T9748] veth4: entered promiscuous mode
[  143.600188][ T9748] vlan3: entered promiscuous mode
[  143.600348][ T9748] macvtap1: entered promiscuous mode
[  143.600462][ T9748] bridge6: entered promiscuous mode
[  143.600524][ T9748] @: entered promiscuous mode
[  143.600645][ T9748] bond15: entered promiscuous mode
[  143.600696][ T9748] bond16: entered promiscuous mode
[  143.600742][ T9748] gretap5: entered promiscuous mode
[  143.600799][ T9748] ip6tnl4: entered promiscuous mode
[  143.604423][ T9748] bond17: entered promiscuous mode
[  143.604991][ T9748] bond18: entered promiscuous mode
[  143.607696][ T9748] bond19: entered promiscuous mode
[  143.607705][ T9748] gretap6: entered promiscuous mode
[  143.608997][ T9748] vlan4: entered promiscuous mode
[  143.770651][ T9757] bond20: option primary_reselect: invalid value (6)
[  143.773849][ T9757] bond20 (unregistering): Released all slaves
[  144.415612][ T5338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  144.437772][ T9832] bond20: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  144.438588][ T9832] bond20 (unregistering): Released all slaves
[  145.271059][ T9911] netlink: 'syz.2.973': attribute type 4 has an invalid length.
[  145.791442][ T9950] vti0: entered promiscuous mode
[  145.858094][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.862673][ T9952] 8021q: adding VLAN 0 to HW filter on device team0
[  145.869072][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.890102][ T9952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.893699][ T9952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.905292][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  145.908681][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  145.913673][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  145.914684][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  145.919135][ T9952] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.920937][ T9952] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.921578][ T9952] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.923671][ T9952] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.927121][ T9952] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.927991][ T9952] 8021q: adding VLAN 0 to HW filter on device bond6
[  145.930494][ T9952] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.934710][ T9952] 8021q: adding VLAN 0 to HW filter on device bond8
[  145.940276][ T9952] 8021q: adding VLAN 0 to HW filter on device bond9
[  145.944589][ T9952] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check.
[  145.964154][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.964590][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.970691][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.974527][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.982047][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.982133][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.991991][ T5879] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  145.992348][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.998012][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.000851][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.000936][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.000964][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.000996][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.001024][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.346997][ T9982] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check.
[  146.362171][ T5879] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.362440][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.386917][ T9984] batman_adv: batadv0: Adding interface: gretap2
[  146.386952][ T9984] batman_adv: batadv0: The MTU of interface gretap2 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  146.387069][ T9984] batman_adv: batadv0: Interface activated: gretap2
[  146.417182][ T9992] xt_l2tp: wrong L2TP version: 0
[  146.444400][ T8580] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.499429][ T9997] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  146.552226][ T5699] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.561377][T10003] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  146.619033][T10005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.673140][T10010] ip6gre4: entered promiscuous mode
[  146.673300][T10010] ip6gre4: entered allmulticast mode
[  146.738224][T10016] netlink: 'syz.2.998': attribute type 6 has an invalid length.
[  146.890414][T10024] netlink: 'syz.2.999': attribute type 30 has an invalid length.
[  146.895559][T10024] vxlan1: entered promiscuous mode
[  146.895616][T10024] vxlan1: entered allmulticast mode
[  146.941372][T10025] netlink: 'syz.2.999': attribute type 30 has an invalid length.
[  146.948031][T10025] vxlan1: entered promiscuous mode
[  146.948089][T10025] vxlan1: entered allmulticast mode
[  147.015200][T10027] 8021q: adding VLAN 0 to HW filter on device bond21
[  147.056380][T10030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  147.564410][T10037] __nla_validate_parse: 27 callbacks suppressed
[  147.567341][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'.
[  147.571491][T10037] validate_nla: 1 callbacks suppressed
[  147.574053][T10037] netlink: 'syz.0.1003': attribute type 1 has an invalid length.
[  147.598052][T10037] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.617093][T10037] bond15: (slave gretap3): making interface the new active one
[  147.621286][T10037] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  147.759515][T10047] netlink: 'syz.0.1005': attribute type 1 has an invalid length.
[  147.802432][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'.
[  147.806784][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'.
[  147.972652][T10059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1008'.
[  147.977082][T10060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1008'.
[  147.977084][T10059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1008'.
[  148.165879][T10067] netlink: Invalid conntrack timeout
[  148.168107][T10067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.261220][T10067] netlink: 'syz.2.1010': attribute type 32 has an invalid length.
[  148.261257][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  148.281148][T10067] bond22: option coupled_control: invalid value (10)
[  148.290879][T10067] bond22 (unregistering): Released all slaves
[  148.497477][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'.
[  148.586055][T10101] netlink: 'syz.1.1012': attribute type 4 has an invalid length.
[  148.587416][T10101] netlink: 'syz.1.1012': attribute type 4 has an invalid length.
[  148.591056][ T5699] lo speed is unknown, defaulting to 1000
[  148.591071][ T5699] syz0: Port: 1 Link ACTIVE
[  148.591384][T10101] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[  148.952938][T10131] netlink: 'syz.1.1017': attribute type 8 has an invalid length.
[  148.963901][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'.
[  148.968773][T10131] netlink: 'syz.1.1017': attribute type 8 has an invalid length.
[  149.012126][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'.
[  149.092189][T10123] batman_adv: batadv0: Removing interface: wlan1
[  149.466937][T10140] vti0: entered promiscuous mode
[  149.470224][T10140] vti0: entered allmulticast mode
[  150.100918][T10206] gtp1: entered promiscuous mode
[  150.102486][T10206] gtp1: entered allmulticast mode
[  150.112840][T10206] team0: Device gtp1 is of different type
[  150.178434][T10208] gtp1: entered promiscuous mode
[  150.179420][T10208] gtp1: entered allmulticast mode
[  150.198413][T10208] team0: Device gtp1 is of different type
[  150.987497][T10238] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.995138][T10238] 8021q: adding VLAN 0 to HW filter on device team0
[  151.003818][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.174367][T10238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.179342][T10238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.195040][T10238] veth1_vlan: left promiscuous mode
[  151.199739][T10238] veth0_vlan: left promiscuous mode
[  151.205093][T10238] veth0_vlan: entered promiscuous mode
[  151.214739][T10238] veth1_vlan: entered promiscuous mode
[  151.224661][T10238] veth1_macvtap: left promiscuous mode
[  151.228297][T10238] veth0_macvtap: entered promiscuous mode
[  151.238412][T10238] veth1_macvtap: entered promiscuous mode
[  151.269584][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  151.275315][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  151.289693][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  151.320616][T10238] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.332036][T10238] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.570085][T10238] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.591451][T10238] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.595212][T10238] 8021q: adding VLAN 0 to HW filter on device bond5
[  151.598248][T10238] 8021q: adding VLAN 0 to HW filter on device bond6
[  151.601211][T10238] 8021q: adding VLAN 0 to HW filter on device bond7
[  151.605129][T10238] 8021q: adding VLAN 0 to HW filter on device bond8
[  151.609921][T10238] 8021q: adding VLAN 0 to HW filter on device bond9
[  151.614200][T10238] 8021q: adding VLAN 0 to HW filter on device bond10
[  151.619906][T10238] 8021q: adding VLAN 0 to HW filter on device bond11
[  151.627567][T10238] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  151.642338][ T5862] bridge0: port 1(vlan3) entered blocking state
[  151.642489][ T5862] bridge0: port 1(vlan3) entered listening state
[  151.647826][ T5862] geneve0: entered promiscuous mode
[  151.764767][ T5862] hsr0 speed is unknown, defaulting to 1000
[  151.764844][ T5862] syz1: Port: 1 Link ACTIVE
[  151.774424][ T8952] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.777596][ T8952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.780501][ T8952] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.780515][ T8952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.780530][ T8952] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.780539][ T8952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.798004][ T5701] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  151.798096][ T5701] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  151.982437][ T5701] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.023474][T10260] netlink: 'syz.1.1031': attribute type 13 has an invalid length.
[  152.229495][T10272] netlink: 'syz.0.1034': attribute type 29 has an invalid length.
[  152.312624][ T8952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  152.406856][T10303] netlink: 'syz.1.1036': attribute type 1 has an invalid length.
[  152.506498][T10303] 8021q: adding VLAN 0 to HW filter on device bond21
[  152.524707][T10305] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  152.532348][T10303] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  152.545936][T10303] team0: No ports can be present during mode change
[  152.600515][T10310] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  152.605433][T10310] netlink: 'syz.1.1038': attribute type 2 has an invalid length.
[  152.683966][T10312] bond22: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  152.693980][T10312] bond22 (unregistering): Released all slaves
[  153.085007][T10318] __nla_validate_parse: 16 callbacks suppressed
[  153.086019][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1041'.
[  153.290106][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1045'.
[  153.443557][ T5463] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.447567][ T5463] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.493070][ T5701] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  153.704380][T10337] netlink: 'syz.0.1048': attribute type 2 has an invalid length.
[  153.844230][T10339] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  153.916591][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  153.977569][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  153.982408][T10341] macvlan0: entered promiscuous mode
[  153.986801][T10341] netlink: 'syz.1.1050': attribute type 1 has an invalid length.
[  153.995515][T10341] netlink: 'syz.1.1050': attribute type 2 has an invalid length.
[  154.199056][T10350] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check.
[  154.253039][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  154.293246][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'.
[  154.320112][T10359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1057'.
[  154.363478][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1052'.
[  154.366887][T10361] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  154.628912][T10376] netlink: 'syz.1.1060': attribute type 1 has an invalid length.
[  154.628955][T10376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1060'.
[  155.496566][T10405] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1068'.
[  155.559467][T10408] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  155.585210][T10408] 8021q: adding VLAN 0 to HW filter on device bond24
[  155.607794][T10408] bond24: (slave veth7): Enslaving as an active interface with a down link
[  155.647207][T10412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.657941][T10412] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  155.774907][T10415] A link change request failed with some changes committed already. Interface 04)fl may have been left with an inconsistent configuration, please check.
[  156.169119][T10423] openvswitch: netlink: Invalid VLAN frame
[  156.246324][T10427] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20004
[  156.275962][T10427] bond22: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  156.280692][T10427] bond22 (unregistering): Released all slaves
[  156.693897][T10445] netlink: 'syz.2.1081': attribute type 9 has an invalid length.
[  156.728976][T10445] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  156.733744][T10445] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  156.758260][T10443] xt_CT: No such helper "snmp_trap"
[  156.852713][T10452] netlink: 'syz.1.1083': attribute type 7 has an invalid length.
[  156.856379][T10453] netlink: 'syz.1.1083': attribute type 7 has an invalid length.
[  156.938437][T10461] )fl: left promiscuous mode
[  156.953228][T10461] tunl0: left promiscuous mode
[  156.958763][T10461] gre0: left promiscuous mode
[  156.979908][T10461] erspan0: left promiscuous mode
[  156.988215][T10461] ip_vti0: left promiscuous mode
[  156.994408][T10461] ip6_vti0: left promiscuous mode
[  157.002996][T10461] sit0: left promiscuous mode
[  157.013989][T10461] ip6tnl0: left promiscuous mode
[  157.018470][T10461] ip6gre0: left promiscuous mode
[  157.026458][T10461] ip6gretap0: left promiscuous mode
[  157.036072][T10461] vcan0: left promiscuous mode
[  157.042813][T10461] team0: left promiscuous mode
[  157.046458][T10461] dummy0: left promiscuous mode
[  157.054509][T10461] nlmon0: left promiscuous mode
[  157.058490][T10461] batadv0: left promiscuous mode
[  157.076630][T10461] wg0: left promiscuous mode
[  157.087790][T10461] wg1: left promiscuous mode
[  157.098986][T10461] wg2: left promiscuous mode
[  157.105816][T10461] veth1_to_bridge: left promiscuous mode
[  157.114099][T10461] bridge_slave_1: left promiscuous mode
[  157.122114][T10461] veth0_to_bond: left promiscuous mode
[  157.130579][T10461] bond_slave_0: left promiscuous mode
[  157.162192][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  157.284093][T10461] veth1_to_bond: left promiscuous mode
[  157.391921][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.392176][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.452134][T10461] bond_slave_1: left promiscuous mode
[  157.456850][T10461] veth0_to_team: left promiscuous mode
[  157.460611][T10461] team_slave_0: left promiscuous mode
[  157.464510][T10461] C: left promiscuous mode
[  157.467420][T10461] team_slave_1: left promiscuous mode
[  157.470972][T10461] veth0_to_batadv: left promiscuous mode
[  157.478303][T10461] batadv_slave_0: left promiscuous mode
[  157.482749][T10461] veth1_to_batadv: left promiscuous mode
[  157.486237][T10461] batadv_slave_1: left promiscuous mode
[  157.490209][T10461] xfrm0: left promiscuous mode
[  157.493688][T10461] veth0_to_hsr: left promiscuous mode
[  157.498077][T10461] veth1_to_hsr: left promiscuous mode
[  157.503420][T10461] hsr0: left promiscuous mode
[  157.506407][T10461] veth1_virt_wifi: left promiscuous mode
[  157.509900][T10461] veth0_virt_wifi: left promiscuous mode
[  157.672199][T10461] virt_wifi0: left promiscuous mode
[  157.678047][T10461] macvtap0: left promiscuous mode
[  157.682120][T10461] macsec0: left promiscuous mode
[  157.686765][T10461] geneve1: left promiscuous mode
[  157.691084][T10461] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  157.696190][T10461] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  157.699667][T10461] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  157.855093][T10461] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[  158.006899][T10461] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  158.117678][T10461] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  158.121943][T10461] gre1: left promiscuous mode
[  158.126628][T10461] ip6gre1: left promiscuous mode
[  158.130956][T10461] bridge1: left promiscuous mode
[  158.142339][T10461] ip6tnl1: left promiscuous mode
[  158.146813][T10461] bond1: left promiscuous mode
[  158.150033][T10461] vxcan2: left promiscuous mode
[  158.276972][T10461] vxcan3: left promiscuous mode
[  158.419637][T10461] bond2: left promiscuous mode
[  158.523091][T10461] bond3: left promiscuous mode
[  158.528058][T10461] vlan0: left promiscuous mode
[  158.530171][T10461] bond4: left promiscuous mode
[  158.535481][T10461] geneve2: left promiscuous mode
[  158.539518][T10461] bond5: left promiscuous mode
[  158.543397][T10461] bond6: left promiscuous mode
[  158.546497][T10461] gretap1: left promiscuous mode
[  158.551090][T10461] : left promiscuous mode
[  158.555472][T10461] geneve3: left promiscuous mode
[  158.560790][T10461] bond7: left promiscuous mode
[  158.565000][T10461] wireguard0: left promiscuous mode
[  158.567586][T10461] ip6gre2: left promiscuous mode
[  158.571189][T10461] bond8: left promiscuous mode
[  158.575978][T10461] veth0: left promiscuous mode
[  158.578854][T10461] veth1: left promiscuous mode
[  158.581569][T10461] ip6erspan0: left promiscuous mode
[  158.587535][T10461] ip6tnl2: left promiscuous mode
[  158.595299][T10461] tipc: Resetting bearer <eth:syzkaller0>
[  158.598388][T10461] syzkaller0: left promiscuous mode
[  158.601179][T10461] syzkaller0: left allmulticast mode
[  158.605384][T10461] erspan1: left promiscuous mode
[  158.613985][T10461] bridge0: left promiscuous mode
[  158.618345][T10461] gretap2: left promiscuous mode
[  158.623428][T10461] vlan1: left promiscuous mode
[  158.627895][T10461] bond9: left promiscuous mode
[  158.630842][T10461] geneve4: left promiscuous mode
[  158.633980][T10461] bond10: left promiscuous mode
[  158.636629][T10461] vlan2: left promiscuous mode
[  158.638886][T10461] bridge2: left promiscuous mode
[  158.641310][T10461] vlan2: left allmulticast mode
[  158.644556][T10461] bridge2: left allmulticast mode
[  158.647635][T10461] gtp0: left promiscuous mode
[  158.650753][T10461] ip6gre3: left promiscuous mode
[  158.653386][T10461] gretap3: left promiscuous mode
[  158.655925][T10461] mac80211_hwsim hwsim9 wlan2: left promiscuous mode
[  158.659980][T10461] gretap4: left promiscuous mode
[  158.664929][T10461] bridge3: left promiscuous mode
[  158.667445][T10461] bridge4: left promiscuous mode
[  158.668471][T10461] bridge4: left allmulticast mode
[  158.670964][T10461] gtp1: left promiscuous mode
[  158.682370][T10461] ip6tnl3: left promiscuous mode
[  158.685932][T10461] bond11: left promiscuous mode
[  158.688733][T10461] veth2: left promiscuous mode
[  158.691641][T10461] veth3: left promiscuous mode
[  158.695416][T10461] bond12: left promiscuous mode
[  158.698501][T10461] vxlan0: left promiscuous mode
[  158.701577][T10461] bond13: left promiscuous mode
[  158.708822][T10461] veth4: left promiscuous mode
[  158.711580][T10461] veth5: left promiscuous mode
[  158.717883][T10461] vlan3: left promiscuous mode
[  158.718401][T10461] geneve0: left promiscuous mode
[  158.836325][T10461] bond14: left promiscuous mode
[  158.842740][T10461] macvtap1: left promiscuous mode
[  158.843750][T10461] macvtap1: left allmulticast mode
[  158.846256][T10461] bridge5: left promiscuous mode
[  158.848835][T10461] bridge6: left promiscuous mode
[  158.851730][T10461] @: left promiscuous mode
[  158.854557][T10461] bond15: left promiscuous mode
[  158.858014][T10461] bond16: left promiscuous mode
[  158.860998][T10461] gretap5: left promiscuous mode
[  158.863685][T10461] ip6tnl4: left promiscuous mode
[  158.866378][T10461] bond17: left promiscuous mode
[  158.870565][T10461] bond18: left promiscuous mode
[  158.880730][T10461] vlan4: left promiscuous mode
[  158.881250][T10461] bond19: left promiscuous mode
[  158.887164][T10461] gretap6: left promiscuous mode
[  159.005813][T10461] vti0: left promiscuous mode
[  159.046354][T10461] ip6gre4: left promiscuous mode
[  159.048673][T10461] ip6gre4: left allmulticast mode
[  159.097690][ T5648] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.097783][ T5648] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.097844][ T5648] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.097882][ T5648] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.097928][ T5648] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.097967][ T5648] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.098018][ T5648] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.098057][ T5648] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.228908][T10479] ip6gre2: entered promiscuous mode
[  159.231270][T10479] ip6gre2: entered allmulticast mode
[  159.346264][T10490] __nla_validate_parse: 10 callbacks suppressed
[  159.348642][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'.
[  159.363523][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'.
[  160.148612][T10503] validate_nla: 2 callbacks suppressed
[  160.151178][T10503] netlink: 'syz.0.1093': attribute type 4 has an invalid length.
[  160.154829][T10503] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1093'.
[  160.160871][T10503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.537815][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'.
[  160.901722][T10518] erspan0: left promiscuous mode
[  161.039532][T10518] ip6gretap0: left promiscuous mode
[  161.136050][T10518] 8021q: adding VLAN 0 to HW filter on device .`
[  161.153266][T10518] 8021q: adding VLAN 0 to HW filter on device team0
[  161.169120][T10522] netlink: 'syz.0.1097': attribute type 2 has an invalid length.
[  161.189180][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.260090][T10518] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.264695][T10518] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.270798][T10518] veth1_macvtap: left promiscuous mode
[  161.274431][T10518] veth0_macvtap: left promiscuous mode
[  161.277817][T10518] veth0_macvtap: entered promiscuous mode
[  161.281473][T10518] veth1_macvtap: entered promiscuous mode
[  161.291017][T10518] 8021q: adding VLAN 0 to HW filter on device 
[  161.308517][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.325998][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.337811][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  161.370448][T10518] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.396834][T10518] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.415760][T10518] ip6gretap0: entered promiscuous mode
[  161.457579][T10518] hsr1: Slave A (.`) is not up; please bring it up to get a fully working HSR network
[  161.458121][T10518] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  161.460174][T10518] 8021q: adding VLAN 0 to HW filter on device hsr1
[  161.490831][T10518] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.511104][T10518] 8021q: adding VLAN 0 to HW filter on device bond4
[  161.538324][T10518] 8021q: adding VLAN 0 to HW filter on device bond5
[  161.582122][T10518] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.649736][T10518] 8021q: adding VLAN 0 to HW filter on device bond7
[  161.656212][T10518] 8021q: adding VLAN 0 to HW filter on device bond8
[  161.664194][T10518] 8021q: adding VLAN 0 to HW filter on device bond9
[  161.668809][T10518] 8021q: adding VLAN 0 to HW filter on device bond10
[  161.672944][T10518] bond10: entered allmulticast mode
[  161.675471][T10518] bond10: entered promiscuous mode
[  161.678413][T10518] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  161.707819][T10518] 8021q: adding VLAN 0 to HW filter on device bond11
[  161.714437][T10518] 8021q: adding VLAN 0 to HW filter on device bond12
[  161.718097][T10518] 8021q: adding VLAN 0 to HW filter on device bond13
[  161.724411][T10518] 8021q: adding VLAN 0 to HW filter on device bond14
[  161.728875][T10518] erspan0: entered promiscuous mode
[  161.734069][T10518] 8021q: adding VLAN 0 to HW filter on device bond15
[  161.739159][T10518] 8021q: adding VLAN 0 to HW filter on device bond16
[  161.770393][T10518] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check.
[  161.890310][T10522] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  161.898200][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.0.1097 Not tainted syzkaller #0 PREEMPT(full) 
[  161.898232][T10522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.898240][T10522] Call Trace:
[  161.898244][T10522]  <TASK>
[  161.898249][T10522]  dump_stack_lvl+0xe8/0x150
[  161.898266][T10522]  sysfs_warn_dup+0x8e/0xa0
[  161.898280][T10522]  sysfs_do_create_link_sd+0xc0/0x110
[  161.898292][T10522]  device_add_class_symlinks+0x1cf/0x240
[  161.898309][T10522]  device_add+0x467/0xb80
[  161.898321][T10522]  wiphy_register+0x1fc8/0x2ff0
[  161.898340][T10522]  ? __pfx_wiphy_register+0x10/0x10
[  161.898350][T10522]  ? __pfx_netdev_run_todo+0x10/0x10
[  161.898363][T10522]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  161.898375][T10522]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  161.898387][T10522]  ieee80211_register_hw+0x3d3d/0x4a50
[  161.898406][T10522]  ? ieee80211_register_hw+0x1a21/0x4a50
[  161.898427][T10522]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  161.898440][T10522]  ? __asan_memset+0x22/0x50
[  161.898453][T10522]  ? __hrtimer_setup+0x1b7/0x260
[  161.898464][T10522]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  161.898473][T10522]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  161.898502][T10522]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  161.898520][T10522]  ? kstrndup+0xbd/0x160
[  161.898536][T10522]  ? kstrndup+0xbd/0x160
[  161.898546][T10522]  hwsim_new_radio_nl+0xd8b/0xf90
[  161.898563][T10522]  genl_family_rcv_msg_doit+0x233/0x340
[  161.898578][T10522]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.898594][T10522]  ? bpf_lsm_capable+0x9/0x20
[  161.898634][T10522]  ? security_capable+0x7e/0x2c0
[  161.898653][T10522]  genl_rcv_msg+0x614/0x7a0
[  161.898704][T10522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.898721][T10522]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.898741][T10522]  ? __pfx_ref_tracker_free+0x10/0x10
[  161.898762][T10522]  netlink_rcv_skb+0x226/0x4a0
[  161.898777][T10522]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.898796][T10522]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.898821][T10522]  ? down_read+0x2be/0x330
[  161.898837][T10522]  genl_rcv+0x28/0x40
[  161.898854][T10522]  netlink_unicast+0x7bd/0x940
[  161.898881][T10522]  netlink_sendmsg+0x813/0xb40
[  161.898904][T10522]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.898925][T10522]  ? apparmor_socket_sendmsg+0x98/0x360
[  161.898946][T10522]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.898960][T10522]  sock_sendmsg_nosec+0x13a/0x180
[  161.898981][T10522]  ____sys_sendmsg+0x54e/0x850
[  161.898996][T10522]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.899018][T10522]  ? import_iovec+0x73/0xa0
[  161.899036][T10522]  ___sys_sendmsg+0x2a5/0x360
[  161.899049][T10522]  ? __lock_acquire+0x6df/0x2e50
[  161.899066][T10522]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.899080][T10522]  ? futex_wait+0x2a2/0x390
[  161.899104][T10522]  ? __fget_files+0x2a/0x420
[  161.899115][T10522]  ? __fget_files+0x3a2/0x420
[  161.899129][T10522]  __x64_sys_sendmsg+0x1b1/0x290
[  161.899139][T10522]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.899156][T10522]  do_syscall_64+0x166/0x520
[  161.899167][T10522]  ? trace_irq_disable+0x3b/0x140
[  161.899175][T10522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.899185][T10522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.899193][T10522] RIP: 0033:0x7f79a999e159
[  161.899202][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.899209][T10522] RSP: 002b:00007f79aa795028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.899220][T10522] RAX: ffffffffffffffda RBX: 00007f79a9c25fa0 RCX: 00007f79a999e159
[  161.899225][T10522] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  161.899230][T10522] RBP: 00007f79a9a35024 R08: 0000000000000000 R09: 0000000000000000
[  161.899234][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.899239][T10522] R13: 00007f79a9c26038 R14: 00007f79a9c25fa0 R15: 00007ffcc3266048
[  161.899256][T10522]  </TASK>
[  162.064118][ T8952] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.066991][ T8952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.070020][ T8952] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0
[  162.073303][ T8952] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  162.076520][ T8952] bond6: (slave bond0): link status definitely up, 0 Mbps full duplex
[  162.089598][ T8952] bond6: active interface up!
[  162.154197][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.154262][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.154323][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0
[  162.154362][   T13] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  162.154508][   T13] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0
[  162.154544][   T13] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 6081 - 0
[  162.154580][   T13] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20002 - 0
[  162.154617][   T13] netdevsim netdevsim1 : set [1, 2] type 2 family 0 port 20000 - 0
[  162.154688][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.154727][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.154764][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0
[  162.154802][   T13] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  162.215112][T10529] netlink: 'syz.0.1099': attribute type 4 has an invalid length.
[  162.319561][T10532] syzkaller0: entered promiscuous mode
[  162.321543][T10532] syzkaller0: entered allmulticast mode
[  162.506488][ T5862] lo speed is unknown, defaulting to 1000
[  162.515444][T10543] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  162.590754][T10552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1105'.
[  162.779230][T10557] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.808359][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'.
[  163.106223][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'.
[  163.257855][T10587] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  163.258057][T10587] netlink: 'syz.2.1114': attribute type 1 has an invalid length.
[  163.274941][T10587] 8021q: adding VLAN 0 to HW filter on device bond25
[  164.056107][T10603] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1117'.
[  164.203225][T10608] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  164.210968][T10610] macvtap0: entered promiscuous mode
[  164.275009][T10608] 8021q: adding VLAN 0 to HW filter on device bond23
[  164.328126][T10612] bond23: (slave gretap4): making interface the new active one
[  164.343780][T10612] bond23: (slave gretap4): Enslaving as an active interface with an up link
[  164.344552][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'.
[  164.369386][T10608] bond23 (unregistering): (slave gretap4): Releasing active interface
[  164.397615][T10608] bond23 (unregistering): Released all slaves
[  164.497825][T10614] gretap0: left promiscuous mode
[  164.536333][T10614] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.539537][T10614] 8021q: adding VLAN 0 to HW filter on device team0
[  164.555699][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.596755][T10614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.596811][T10614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.599287][T10614] veth1_macvtap: left promiscuous mode
[  164.599777][T10614] veth0_macvtap: left promiscuous mode
[  164.600364][T10614] veth0_macvtap: entered promiscuous mode
[  164.601063][T10614] veth1_macvtap: entered promiscuous mode
[  164.606353][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  164.607040][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  164.607935][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  164.608484][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  164.608764][T10614] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  164.658163][ T5463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.658937][ T5463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.659113][ T5463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.659183][ T5463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.758579][T10630] IPVS: Error connecting to the multicast addr
[  164.797942][T10631] netlink: 'syz.0.1123': attribute type 11 has an invalid length.
[  164.835856][T10628] ip_tables: iptables: counters copy to user failed while replacing table
[  164.995367][T10647] netlink: 'syz.2.1124': attribute type 8 has an invalid length.
[  165.010541][T10630] xt_cgroup: invalid path, errno=-2
[  165.075093][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  165.137452][T10651] ip6t_rt: unknown flags 1F
[  165.139915][T10651] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1128'.
[  165.191485][T10652] bridge5: entered allmulticast mode
[  165.264583][T10656] xt_REDIRECT: bad rangesize 26624.
[  165.280852][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1130'.
[  165.654867][T10684] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  165.692666][T10684] 8021q: adding VLAN 0 to HW filter on device bond26
[  165.734716][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'.
[  165.973829][T10705] erspan0: left promiscuous mode
[  166.045094][T10705] bridge0: port 1(vlan3) entered disabled state
[  166.093808][T10705] dummy0: left promiscuous mode
[  166.107789][T10705] batadv0: left allmulticast mode
[  166.969937][T10705] veth0_macvtap: left promiscuous mode
[  166.987052][T10705] geneve1: left promiscuous mode
[  167.259257][T10705] geneve2: left promiscuous mode
[  167.271197][T10705] vxlan2: left promiscuous mode
[  167.271257][T10705] vxlan2: left allmulticast mode
[  167.271363][T10705] vxlan3: left promiscuous mode
[  167.271370][T10705] vxlan3: left allmulticast mode
[  167.279239][T10705] veth75: left allmulticast mode
[  167.279374][T10705] xfrm0: left promiscuous mode
[  167.279381][T10705] xfrm0: left allmulticast mode
[  167.282889][T10705] ip6erspan1: left allmulticast mode
[  167.290208][T10705] batman_adv: batadv0: Interface deactivated: gretap2
[  167.334165][T10705] bridge5: left allmulticast mode
[  167.389410][ T5872] hsr0 speed is unknown, defaulting to 1000
[  167.389480][ T5872] syz1: Port: 1 Link DOWN
[  167.442244][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.442322][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.442380][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.442417][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.442457][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.442494][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.575967][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'.
[  167.580947][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'.
[  167.613482][T10719] netlink: 'syz.0.1141': attribute type 2 has an invalid length.
[  167.709167][T10722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.709235][T10722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.755150][T10726] syzkaller0: entered promiscuous mode
[  167.755208][T10726] syzkaller0: entered allmulticast mode
[  168.265198][T10743] netlink: 'syz.1.1144': attribute type 10 has an invalid length.
[  168.575429][T10748] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[  168.596209][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.600083][T10743] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  168.608820][T10743] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[  168.730450][T10748] 8021q: adding VLAN 0 to HW filter on device bond27
[  168.879902][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'.
[  169.070232][T10762] gtp0: entered promiscuous mode
[  169.070287][T10762] gtp0: entered allmulticast mode
[  169.090558][T10762] team0: Port device gtp0 added
[  169.214166][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'.
[  169.218009][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'.
[  169.317548][T10766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  169.556253][T10782] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1152'.
[  169.579776][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'.
[  169.634476][T10770] bond23: entered promiscuous mode
[  169.638929][T10770] 8021q: adding VLAN 0 to HW filter on device bond23
[  169.685266][T10779] bond24: entered promiscuous mode
[  169.689334][T10779] 8021q: adding VLAN 0 to HW filter on device bond24
[  170.241534][T10795] __nla_validate_parse: 2 callbacks suppressed
[  170.244278][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.247406][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.279622][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.279686][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.313597][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'.
[  170.327879][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.327959][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.340871][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.341678][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.364110][T10802] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.367242][T10802] 8021q: adding VLAN 0 to HW filter on device team0
[  170.371437][T10802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.422317][T10800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'.
[  170.633228][T10802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  170.633787][T10802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.686610][T10802] veth1_vlan: left promiscuous mode
[  170.696615][T10802] veth0_vlan: left promiscuous mode
[  170.708099][T10802] veth0_vlan: entered promiscuous mode
[  170.730941][T10802] veth1_vlan: entered promiscuous mode
[  170.787058][T10802] veth1_macvtap: left promiscuous mode
[  170.797164][T10802] veth0_macvtap: entered promiscuous mode
[  170.809450][T10802] veth1_macvtap: entered promiscuous mode
[  170.823736][T10802] geneve0: left promiscuous mode
[  170.863027][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  170.867896][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  170.872503][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  170.876534][T10802] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.880754][T10802] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.920429][T10802] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.953073][T10802] 8021q: adding VLAN 0 to HW filter on device bond4
[  170.956541][T10802] 8021q: adding VLAN 0 to HW filter on device bond5
[  170.960331][T10802] 8021q: adding VLAN 0 to HW filter on device bond6
[  170.964732][T10802] 8021q: adding VLAN 0 to HW filter on device bond7
[  170.968368][T10802] 8021q: adding VLAN 0 to HW filter on device bond8
[  170.974006][T10802] 8021q: adding VLAN 0 to HW filter on device bond9
[  170.977440][T10802] 8021q: adding VLAN 0 to HW filter on device bond10
[  170.987465][T10802] 8021q: adding VLAN 0 to HW filter on device bond11
[  170.995889][T10802] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  171.002834][ T5594] Bluetooth: hci0: command 0x0c20 tx timeout
[  171.002857][ T5594] Bluetooth: hci1: command 0x0406 tx timeout
[  171.011339][ T5872] geneve0: entered promiscuous mode
[  171.044760][   T27] bridge0: port 1(vlan3) entered blocking state
[  171.044838][   T27] bridge0: port 1(vlan3) entered listening state
[  171.054696][ T5872] hsr0 speed is unknown, defaulting to 1000
[  171.054735][ T5872] syz1: Port: 1 Link ACTIVE
[  171.102427][ T8952] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.102473][ T8952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.102530][ T8952] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.102570][ T8952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.102602][ T8952] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.102630][ T8952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.133236][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  171.432304][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  171.522045][ T5862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  171.673181][T10830] netlink: 'syz.0.1162': attribute type 5 has an invalid length.
[  171.687300][T10832] netlink: 'syz.1.1163': attribute type 32 has an invalid length.
[  171.949715][T10844] macvlan0: left promiscuous mode
[  171.951515][T10844] bond10: left promiscuous mode
[  171.971013][T10844] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check.
[  172.099411][T10848] netlink: 'syz.1.1168': attribute type 10 has an invalid length.
[  172.102284][T10848] dummy0: entered promiscuous mode
[  172.105218][T10848] dummy0: left allmulticast mode
[  172.113928][T10848] team0: Port device dummy0 removed
[  172.114246][T10848] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  172.573363][T10860] bridge0: port 1(vlan3) entered disabled state
[  172.695333][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.983898][T10860] veth0_macvtap: left promiscuous mode
[  173.531935][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.531995][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.532066][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.532102][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.532147][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.532183][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.635051][ T5876] hsr0 speed is unknown, defaulting to 1000
[  173.635090][ T5876] syz1: Port: 1 Link DOWN
[  173.781736][T10879] syzkaller0: entered promiscuous mode
[  173.782574][T10879] syzkaller0: entered allmulticast mode
[  173.846288][T10882] sctp: [Deprecated]: syz.0.1175 (pid 10882) Use of int in max_burst socket option.
[  173.846288][T10882] Use struct sctp_assoc_value instead
[  174.020887][T10890] bond25: Removing last arp target with arp_interval on
[  174.153660][T10895] netlink: 'syz.1.1178': attribute type 5 has an invalid length.
[  174.157399][T10895] netlink: 'syz.1.1178': attribute type 27 has an invalid length.
[  175.029304][T10924] netlink: 'syz.0.1185': attribute type 1 has an invalid length.
[  175.096140][T10926] veth79: entered allmulticast mode
[  175.103613][T10926] bond18: (slave veth79): Enslaving as an active interface with a down link
[  175.141850][T10924] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  175.201665][T10924] macvlan3: entered promiscuous mode
[  175.203040][T10924] macvlan3: entered allmulticast mode
[  175.207217][T10924] bond18: entered promiscuous mode
[  175.219669][T10924] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  175.230896][T10924] bond18: left promiscuous mode
[  175.511008][T10932] __nla_validate_parse: 22 callbacks suppressed
[  175.518860][T10932] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1187'.
[  175.584664][T10936] netlink: 'syz.1.1188': attribute type 1 has an invalid length.
[  175.607856][T10936] bond26: entered promiscuous mode
[  175.610578][T10936] 8021q: adding VLAN 0 to HW filter on device bond26
[  175.641466][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[  175.692434][T10938] 8021q: adding VLAN 0 to HW filter on device bond26
[  175.695845][T10938] bond26: (slave gre4): The slave device specified does not support setting the MAC address
[  175.702727][T10938] bond26: (slave gre4): Setting fail_over_mac to active for active-backup mode
[  175.716776][T10938] bond26: (slave gre4): making interface the new active one
[  175.720152][T10938] gre4: entered promiscuous mode
[  175.725448][T10938] bond26: (slave gre4): Enslaving as an active interface with an up link
[  175.842440][T10936] bond26 (unregistering): (slave gre4): Releasing backup interface
[  175.842526][T10936] gre4: left promiscuous mode
[  175.857408][T10936] bond26 (unregistering): Released all slaves
[  176.093730][T10955] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1192'.
[  176.116185][T10955] bond0 (unregistering): Released all slaves
[  176.507825][T10958] netlink: 'syz.1.1193': attribute type 8 has an invalid length.
[  176.507877][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'.
[  176.555284][T10962] netlink: 'syz.1.1194': attribute type 5 has an invalid length.
[  176.599535][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  177.102421][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'.
[  177.184952][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  177.278268][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.282908][T10975] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.450542][T10986] syzkaller1: entered promiscuous mode
[  177.450591][T10986] syzkaller1: entered allmulticast mode
[  177.456881][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[  180.331723][T10977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.454996][T10994] netlink: 'syz.0.1203': attribute type 34 has an invalid length.
[  180.479402][T10994] bond0: option lacp_strict: invalid value (64)
[  180.483797][T10994] bond0 (unregistering): Released all slaves
[  180.604639][T10997] syzkaller0: create flow: hash 2700016897 index 0
[  181.913019][T10997] syzkaller0 (unregistered): delete flow: hash 2700016897 index 0
[  182.029072][   T57] block nbd0: Receive control failed (result -32)
[  182.081894][T11009] x_tables: duplicate underflow at hook 1
[  182.087156][T11007] openvswitch: netlink: IP tunnel TTL not specified.
[  182.320208][T11020] __nla_validate_parse: 1 callbacks suppressed
[  182.320766][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  182.545879][T11020] bond26 (unregistering): Released all slaves
[  182.795227][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1215'.
[  182.800081][T11038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1215'.
[  182.923625][T11044] hsr0 speed is unknown, defaulting to 1000
[  182.931482][T11044] lo speed is unknown, defaulting to 1000
[  183.264240][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'.
[  183.344283][T11044] 8021q: VLANs not supported on gre0
[  183.660763][T11072] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  183.917941][T11079] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1222'.
[  184.245239][T11081] netlink: 'syz.1.1223': attribute type 13 has an invalid length.
[  184.656562][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.662487][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.662990][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.666102][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.676252][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.751121][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'.
[  184.763735][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'.
[  184.994520][T11107] syzkaller0: entered promiscuous mode
[  184.994578][T11107] syzkaller0: entered allmulticast mode
[  185.014543][T11107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.165021][T11089] hsr0 speed is unknown, defaulting to 1000
[  185.183521][T11089] lo speed is unknown, defaulting to 1000
[  185.256100][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  185.270432][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  185.270541][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  185.418966][T11125] geneve3: entered promiscuous mode
[  185.500284][T11089] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.503416][T11089] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.507827][T11089] bridge_slave_0: entered allmulticast mode
[  185.511235][T11089] bridge_slave_0: entered promiscuous mode
[  185.519535][T11089] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.520100][T11089] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.520200][T11089] bridge_slave_1: entered allmulticast mode
[  185.533104][T11089] bridge_slave_1: entered promiscuous mode
[  185.585839][T11089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.596277][T11089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.648728][T11140] netlink: 'syz.0.1232': attribute type 4 has an invalid length.
[  185.648786][T11140] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  185.660981][T11089] team0: Port device team_slave_0 added
[  185.666602][T11089] team0: Port device team_slave_1 added
[  185.709594][T11089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.712707][T11089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.712723][T11089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.727234][T11089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.729613][T11089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.739977][T11089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.797883][T11089] hsr_slave_0: entered promiscuous mode
[  185.801464][T11089] hsr_slave_1: entered promiscuous mode
[  186.241714][T11089] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  186.250936][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  186.255891][T11089] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  186.274984][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.285813][T11089] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  186.300469][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  186.306273][T11089] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  186.328235][T11089] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  186.535255][T11164] openvswitch: netlink: Multiple metadata blocks provided
[  186.578743][T11089] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.601139][T11089] 8021q: adding VLAN 0 to HW filter on device team0
[  186.616736][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.618316][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.633577][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.633647][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.754563][ T5598] Bluetooth: hci3: command tx timeout
[  187.078603][T11089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.240070][T11089] veth0_vlan: entered promiscuous mode
[  187.276221][T11089] veth1_vlan: entered promiscuous mode
[  187.374797][T11089] veth0_macvtap: entered promiscuous mode
[  187.432610][T11089] veth1_macvtap: entered promiscuous mode
[  187.465286][T11089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.483671][T11089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.553069][ T5648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.553267][ T5648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.553506][ T5648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.553702][ T5648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.574018][T11187] __nla_validate_parse: 21 callbacks suppressed
[  187.577380][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'.
[  187.682633][T11186] 8021q: VLANs not supported on gre0
[  187.806832][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.807505][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.857001][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.857045][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.787728][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.790883][ T1122] IPVS: starting estimator thread 0...
[  188.793559][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.799409][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.802786][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.817057][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.817111][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.823838][T11203] netlink: 'syz.3.1225': attribute type 1 has an invalid length.
[  188.823851][T11203] netlink: 'syz.3.1225': attribute type 2 has an invalid length.
[  188.832180][ T5598] Bluetooth: hci3: command tx timeout
[  188.852583][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.856037][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'.
[  188.880795][T11213] syzkaller0: refused to change device tx_queue_len
[  188.897411][T11204] IPVS: using max 83 ests per chain, 199200 per kthread
[  188.933043][T11217] 8021q: VLANs not supported on gre0
[  188.977587][T11224] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  189.129987][T11232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1250'.
[  189.340960][T11238] netlink: 'syz.1.1251': attribute type 1 has an invalid length.
[  189.360416][T11238] 8021q: adding VLAN 0 to HW filter on device bond26
[  189.633560][T11240] netlink: 'syz.3.1246': attribute type 4 has an invalid length.
[  190.050087][T11248] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.052696][T11248] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.152506][T11248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.171191][T11248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.332003][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.332063][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.332117][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.332155][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.388472][T11259] bridge1: entered promiscuous mode
[  190.390370][T11259] bridge1: entered allmulticast mode
[  190.396140][T11259] team0: Port device bridge1 added
[  190.399174][T11259] bridge0: port 3(team0) entered blocking state
[  190.404868][T11259] bridge0: port 3(team0) entered disabled state
[  190.407594][T11259] team0: entered allmulticast mode
[  190.407607][T11259] team_slave_0: entered allmulticast mode
[  190.407633][T11259] team_slave_1: entered allmulticast mode
[  190.414665][T11259] team0: entered promiscuous mode
[  190.416588][T11259] team_slave_0: entered promiscuous mode
[  190.418720][T11259] team_slave_1: entered promiscuous mode
[  190.587641][T11266] netlink: 'syz.1.1261': attribute type 4 has an invalid length.
[  190.616855][ T5876] lo speed is unknown, defaulting to 1000
[  190.616899][ T5876] syz0: Port: 1 Link DOWN
[  190.641940][T11266] netlink: 'syz.1.1261': attribute type 4 has an invalid length.
[  190.646051][ T5876] lo speed is unknown, defaulting to 1000
[  190.646094][ T5876] syz0: Port: 1 Link ACTIVE
[  190.922755][ T5598] Bluetooth: hci3: command tx timeout
[  191.106705][T11277] batman_adv: batadv0: Adding interface: dummy0
[  191.109044][T11277] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  191.117578][T11277] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  191.259784][T11287] sctp: [Deprecated]: syz.0.1267 (pid 11287) Use of int in max_burst socket option deprecated.
[  191.259784][T11287] Use struct sctp_assoc_value instead
[  191.266213][T11284] Set syz0 is full, maxelem 0 reached
[  191.734183][T11297] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  191.737009][T11297] netlink: 'syz.0.1270': attribute type 2 has an invalid length.
[  192.119842][T11353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.547867][T11376] syzkaller0: entered promiscuous mode
[  192.550349][T11376] syzkaller0: entered allmulticast mode
[  192.914205][T11390] netlink: 'syz.1.1284': attribute type 2 has an invalid length.
[  192.956651][T11390] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  192.961176][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.1.1284 Not tainted syzkaller #0 PREEMPT(full) 
[  192.961218][T11390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.961229][T11390] Call Trace:
[  192.961235][T11390]  <TASK>
[  192.961242][T11390]  dump_stack_lvl+0xe8/0x150
[  192.961299][T11390]  sysfs_warn_dup+0x8e/0xa0
[  192.961324][T11390]  sysfs_do_create_link_sd+0xc0/0x110
[  192.961346][T11390]  device_add_class_symlinks+0x1cf/0x240
[  192.961372][T11390]  device_add+0x467/0xb80
[  192.961394][T11390]  wiphy_register+0x1fc8/0x2ff0
[  192.961424][T11390]  ? __pfx_wiphy_register+0x10/0x10
[  192.961441][T11390]  ? __pfx_netdev_run_todo+0x10/0x10
[  192.961459][T11390]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  192.961480][T11390]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  192.961504][T11390]  ieee80211_register_hw+0x3d3d/0x4a50
[  192.961535][T11390]  ? ieee80211_register_hw+0x1a21/0x4a50
[  192.961579][T11390]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  192.961622][T11390]  ? __asan_memset+0x22/0x50
[  192.961645][T11390]  ? __hrtimer_setup+0x1b7/0x260
[  192.961663][T11390]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  192.961681][T11390]  mac80211_hwsim_new_radio+0x3258/0x56b0
[  192.961715][T11390]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  192.961735][T11390]  ? kstrndup+0xbd/0x160
[  192.961753][T11390]  ? kstrndup+0xbd/0x160
[  192.961767][T11390]  hwsim_new_radio_nl+0xd8b/0xf90
[  192.961798][T11390]  genl_family_rcv_msg_doit+0x233/0x340
[  192.961822][T11390]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  192.961851][T11390]  ? bpf_lsm_capable+0x9/0x20
[  192.961868][T11390]  ? security_capable+0x7e/0x2c0
[  192.961885][T11390]  genl_rcv_msg+0x614/0x7a0
[  192.961905][T11390]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.961922][T11390]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.961940][T11390]  ? __pfx_ref_tracker_free+0x10/0x10
[  192.961962][T11390]  netlink_rcv_skb+0x226/0x4a0
[  192.961978][T11390]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.961997][T11390]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.962022][T11390]  ? down_read+0x2be/0x330
[  192.962040][T11390]  genl_rcv+0x28/0x40
[  192.962057][T11390]  netlink_unicast+0x7bd/0x940
[  192.962079][T11390]  netlink_sendmsg+0x813/0xb40
[  192.962102][T11390]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.962124][T11390]  ? apparmor_socket_sendmsg+0x98/0x360
[  192.962145][T11390]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.962160][T11390]  sock_sendmsg_nosec+0x13a/0x180
[  192.962179][T11390]  ____sys_sendmsg+0x54e/0x850
[  192.962198][T11390]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.962218][T11390]  ? import_iovec+0x73/0xa0
[  192.962237][T11390]  ___sys_sendmsg+0x2a5/0x360
[  192.962250][T11390]  ? __lock_acquire+0x6df/0x2e50
[  192.962267][T11390]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.962313][T11390]  ? futex_wait+0x2a2/0x390
[  192.962354][T11390]  ? __fget_files+0x2a/0x420
[  192.962372][T11390]  ? __fget_files+0x3a2/0x420
[  192.962397][T11390]  __x64_sys_sendmsg+0x1b1/0x290
[  192.962415][T11390]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.962445][T11390]  do_syscall_64+0x166/0x520
[  192.962465][T11390]  ? trace_irq_disable+0x3b/0x140
[  192.962478][T11390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.962497][T11390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.962510][T11390] RIP: 0033:0x7fb621f9e159
[  192.962524][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.962537][T11390] RSP: 002b:00007fb622e6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.962554][T11390] RAX: ffffffffffffffda RBX: 00007fb622225fa0 RCX: 00007fb621f9e159
[  192.962565][T11390] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  192.962581][T11390] RBP: 00007fb622035024 R08: 0000000000000000 R09: 0000000000000000
[  192.962587][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.962594][T11390] R13: 00007fb622226038 R14: 00007fb622225fa0 R15: 00007ffcfe05f738
[  192.962615][T11390]  </TASK>
[  192.991739][ T5598] Bluetooth: hci3: command tx timeout
[  193.193950][T11398] netlink: 'syz.0.1287': attribute type 1 has an invalid length.
[  193.218598][T11398] bond0: (slave geneve4): making interface the new active one
[  193.228515][T11398] bond0: (slave geneve4): Enslaving as an active interface with an up link
[  193.329652][ T5866] hsr0 speed is unknown, defaulting to 1000
[  193.332053][ T5875] hsr0 speed is unknown, defaulting to 1000
[  193.332067][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  193.337858][ T5876] hsr0 speed is unknown, defaulting to 1000
[  193.337937][ T5530] hsr0 speed is unknown, defaulting to 1000
[  193.352156][ T5648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  193.352953][ T5648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  193.373176][T11398] __nla_validate_parse: 9 callbacks suppressed
[  193.375977][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'.
[  193.407237][T11398] syz.0.1287 (11398) used greatest stack depth: 19328 bytes left
[  193.455336][T11407] bond18: (slave veth0_to_bond): Releasing active interface
[  193.464683][T11407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  193.479868][T11407] team0: No ports can be present during mode change
[  193.488406][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'.
[  193.495073][T11407] tipc: Enabled bearer <eth:team0>, priority 0
[  193.634116][T11421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1292'.
[  193.714384][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'.
[  193.780222][T11429] bond6: (slave bond0): Releasing backup interface
[  193.785777][T11429] bond0 (unregistering): (slave bridge4): Releasing backup interface
[  193.792261][T11429] bond0 (unregistering): Released all slaves
[  194.221153][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'.
[  194.517919][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  194.672069][ T5876] tipc: Node number set to 879261675
[  194.819154][T11444] netlink: 'syz.3.1298': attribute type 1 has an invalid length.
[  194.837172][T11444] netlink: 'syz.3.1298': attribute type 3 has an invalid length.
[  194.837777][T11444] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1298'.
[  195.465557][T11449] syzkaller1: entered promiscuous mode
[  195.466414][T11449] syzkaller1: entered allmulticast mode
[  195.506439][T11449] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  196.654757][T11455] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.683903][T11455] 8021q: adding VLAN 0 to HW filter on device team0
[  196.761400][T11455] batman_adv: batadv0: Interface activated: dummy0
[  196.813171][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.835703][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.903898][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.994103][T11455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  198.034624][T11459] ipvlan0: entered promiscuous mode
[  198.054892][T11459] bridge0: port 1(ipvlan0) entered blocking state
[  198.062179][T11459] bridge0: port 1(ipvlan0) entered disabled state
[  198.065867][T11459] ipvlan0: entered allmulticast mode
[  198.068307][T11459] bridge0: entered allmulticast mode
[  198.075032][T11459] ipvlan0: left allmulticast mode
[  198.107190][T11459] bridge0: left allmulticast mode
[  198.861479][T11466] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1303'.
[  198.963872][T11323] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.963946][T11323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.991125][T11323] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.991194][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.328960][T11323] bridge0: port 3(team0) entered blocking state
[  199.330114][T11323] bridge0: port 3(team0) entered forwarding state
[  201.261140][T11481] tc_dump_action: action bad kind
[  205.451657][T11536] netlink: 'syz.0.1320': attribute type 5 has an invalid length.
[  205.451818][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1320'.
[  205.469679][T11536] netlink: 'syz.0.1320': attribute type 5 has an invalid length.
[  205.470225][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1320'.
[  206.083287][T11546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1321'.
[  206.549882][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'.
[  207.498818][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'.
[  207.650999][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'.
[  208.732332][T11563] SET target dimension over the limit!
[  209.991692][T11549] bridge0: port 3(team0) entered disabled state
[  209.992602][T11549] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.992870][T11549] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.699812][T11549] batman_adv: batadv0: Interface deactivated: dummy0
[  216.882671][T11549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.201677][T11549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.787665][T11564] tipc: Resetting bearer <eth:team0>
[  219.673781][    C1] sched: DL replenish lagged too much
[  219.944171][T11575] macsec1: entered promiscuous mode
[  219.947066][T11575] hsr0: entered promiscuous mode
[  220.023392][T11575] hsr0: left promiscuous mode
[  220.149206][T11578] bridge0: entered allmulticast mode
[  221.131184][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'.
[  221.131669][T11585] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  221.300526][T11585] 8021q: VLANs not supported on syzkaller1
[  221.943717][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881a785f400: rx timeout, send abort
[  222.443671][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881a785dc00: rx timeout, send abort
[  222.445172][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881a785f400: abort rx timeout. Force session deactivation
[  222.867583][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'.
[  222.943741][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881a785dc00: abort rx timeout. Force session deactivation
[  222.980309][T11605] 8021q: adding VLAN 0 to HW filter on device team0
[  222.997305][T11605] bridge0: port 3(team0) entered disabled state
[  223.017896][T11605] team0: Cannot enslave team device to itself
[  223.032352][ T5648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.032929][ T5648] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.033461][ T5648] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  223.042980][T11607] : renamed from bond_slave_0 (while UP)
[  223.319083][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'.
[  223.319371][T11617] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  223.645577][T11620] netlink: 'syz.0.1338': attribute type 4 has an invalid length.
[  225.672028][T11609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  226.385244][T11629] gre3: entered promiscuous mode
[  226.388309][T11629] gre3: entered allmulticast mode
[  226.480768][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'.
[  226.768787][T11636] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1342'.
[  227.393581][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'.
[  227.669458][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'.
[  228.146773][T11647] netlink: 'syz.3.1345': attribute type 49 has an invalid length.
[  228.448974][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'.
[  229.492408][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'.
[  229.499409][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  229.575962][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'.
[  229.579942][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  230.407247][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'.
[  230.767869][T11681] ip_tables: iptables: counters copy to user failed while replacing table
[  232.975337][T11690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.990704][T11698] __nla_validate_parse: 1 callbacks suppressed
[  232.991312][T11698] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1354'.
[  233.136631][ T5875] e1000 0000:00:03.0 eth0: Reset adapter
[  233.343176][ T5876] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  233.975480][T11717] netlink: 'syz.3.1357': attribute type 1 has an invalid length.
[  233.976013][T11717] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1357'.
[  233.976523][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'.
[  234.648200][T11719] bond1: option arp_interval: invalid value (18446744073709551615)
[  234.651437][T11719] bond1: option arp_interval: allowed values 0 - 2147483647
[  234.830650][T11719] bond1 (unregistering): Released all slaves
[  235.278143][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'.
[  235.401866][T11736] netlink: 'syz.0.1360': attribute type 12 has an invalid length.
[  235.470022][T11735] netlink: 'syz.1.1359': attribute type 4 has an invalid length.
[  235.550199][T11726] bond1 (unregistering): Released all slaves
[  235.642166][T11738] netlink: 'syz.1.1359': attribute type 4 has an invalid length.
[  236.285993][ T5875] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  236.616964][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'.
[  236.622564][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'.
[  237.069978][ T8580] lo speed is unknown, defaulting to 1000
[  237.101955][ T5699] lo speed is unknown, defaulting to 1000
[  253.631771][T11776] netlink: 'syz.0.1363': attribute type 8 has an invalid length.
[  253.656281][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1363'.
[  253.753442][T11775] netlink: 'syz.3.1365': attribute type 1 has an invalid length.
[  253.819901][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'.
[  253.912648][T11780] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  254.004730][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'.
[  254.053600][T11791] netlink: 'syz.0.1366': attribute type 3 has an invalid length.
[  254.402173][T11775] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.969097][T11784] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.977194][T11784] team0: left promiscuous mode
[  254.979395][T11784] team_slave_0: left promiscuous mode
[  254.984944][T11784] team_slave_1: left promiscuous mode
[  254.991263][T11784] team0: left allmulticast mode
[  254.994619][T11784] team_slave_0: left allmulticast mode
[  254.996132][T11784] team_slave_1: left allmulticast mode
[  255.040586][T11784] batman_adv: batadv0: Interface activated: dummy0
[  255.087650][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.521642][T11784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.543806][T11784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.639819][T11784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.640350][T11784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.720944][T11784] veth1_vlan: left promiscuous mode
[  255.749557][T11784] veth0_vlan: left promiscuous mode
[  255.761634][T11784] veth0_vlan: entered promiscuous mode
[  255.789794][T11784] veth1_vlan: entered promiscuous mode
[  255.884100][T11784] veth1_macvtap: left promiscuous mode
[  255.896216][T11784] veth0_macvtap: left promiscuous mode
[  255.907218][T11784] veth0_macvtap: entered promiscuous mode
[  255.935463][T11784] veth1_macvtap: entered promiscuous mode
[  255.957319][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  256.033240][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  256.049164][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  256.103611][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  256.118970][T11784] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  256.169857][T11784] bridge1: left promiscuous mode
[  256.170870][T11784] bridge1: left allmulticast mode
[  256.532257][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.532943][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.533459][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.533982][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.591235][T11785] 8021q: adding VLAN 0 to HW filter on device batadv1
[  256.637197][T11785] bond1: (slave batadv1): making interface the new active one
[  256.650472][T11785] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  256.685460][T11323] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.685562][T11323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.761750][T11323] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.761942][T11323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.045694][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'.
[  257.050668][T11801] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1369'.
[  257.430158][T11799] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  257.689692][T11799] bond2 (unregistering): Released all slaves
[  258.361211][T11818] netlink: 'syz.3.1370': attribute type 32 has an invalid length.
[  258.368436][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'.
[  260.107113][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'.
[  260.193602][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'.
[  260.194239][T11829] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1372'.
[  260.948678][T11840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.949724][T11839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.717527][T11846] 8021q: adding VLAN 0 to HW filter on device team0
[  263.863759][T11846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.573982][T11846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  265.574578][T11846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  265.695693][T11846] veth1_vlan: left promiscuous mode
[  265.706453][T11846] veth0_vlan: left promiscuous mode
[  265.739947][T11846] veth0_vlan: entered promiscuous mode
[  265.784060][T11846] veth1_vlan: entered promiscuous mode
[  265.890975][T11846] veth1_macvtap: left promiscuous mode
[  265.908913][T11846] veth0_macvtap: entered promiscuous mode
[  265.962682][T11846] veth1_macvtap: entered promiscuous mode
[  265.975995][T11846] geneve0: left promiscuous mode
[  266.033830][T11846] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  266.083243][T11846] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  266.098783][T11846] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  266.130066][T11846] 8021q: adding VLAN 0 to HW filter on device bond1
[  266.142676][T11846] 8021q: adding VLAN 0 to HW filter on device bond2
[  266.865454][T11846] 8021q: adding VLAN 0 to HW filter on device bond3
[  267.682730][T11846] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.700822][T11846] 8021q: adding VLAN 0 to HW filter on device bond5
[  267.713224][T11846] 8021q: adding VLAN 0 to HW filter on device bond6
[  267.725011][T11846] 8021q: adding VLAN 0 to HW filter on device bond7
[  267.738310][T11846] 8021q: adding VLAN 0 to HW filter on device bond8
[  267.841529][T11846] 8021q: adding VLAN 0 to HW filter on device bond9
[  267.853724][T11846] 8021q: adding VLAN 0 to HW filter on device bond10
[  268.082994][T11846] 8021q: adding VLAN 0 to HW filter on device bond11
[  268.324312][T11846] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  268.440126][ T5530] geneve0: entered promiscuous mode
[  268.482666][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.483317][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.484016][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.484709][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.485412][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.486062][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.592201][T11867] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1380'.
[  269.978711][T11342] bridge0: port 1(vlan3) entered blocking state
[  269.978821][T11342] bridge0: port 1(vlan3) entered listening state
[  270.105722][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  270.169637][T11862] xfrm1: entered promiscuous mode
[  270.182479][T11862] xfrm1: entered allmulticast mode
[  270.245225][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  270.549977][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  270.657678][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  270.791687][T11864] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1380'.
[  271.404539][ T5530] hsr0 speed is unknown, defaulting to 1000
[  271.405069][ T5530] syz1: Port: 1 Link ACTIVE
[  272.170614][ T8952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  272.608244][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  272.608790][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'.
[  272.611417][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  272.611702][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'.
[  274.233783][T11886] netlink: 'syz.0.1383': attribute type 21 has an invalid length.
[  274.262900][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  274.400685][T11890] openvswitch: netlink: Flow actions attr not present in new flow.
[  276.531697][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'.
[  276.702932][T11886] netlink: 'syz.0.1383': attribute type 21 has an invalid length.
[  276.706184][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  277.516429][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'.
[  277.517120][T11912] netlink: 'syz.0.1386': attribute type 8 has an invalid length.
[  277.517815][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1386'.
[  277.760605][T11909] bond0: Unable to set down delay as MII monitoring is disabled
[  277.961357][ T8952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  277.971653][ T8952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  278.309773][ T8580] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  278.532784][ T5598] Bluetooth: hci2: command 0x0401 tx timeout
[  280.333753][T11924] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  281.951807][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  284.816873][T11949] netlink: 'syz.1.1394': attribute type 21 has an invalid length.
[  284.817573][T11949] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1394'.
[  284.818313][T11949] netlink: 'syz.1.1394': attribute type 5 has an invalid length.
[  284.818911][T11949] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1394'.
[  285.095443][T11952] netlink: 'syz.0.1395': attribute type 12 has an invalid length.
[  285.298260][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'.
[  285.351662][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'.
[  287.784978][T11974] netlink: 'syz.0.1398': attribute type 5 has an invalid length.
[  289.399900][ T5868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.871760][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.898177][ T5879] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.915224][T11965] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  290.746129][T11977] netlink: 'syz.3.1399': attribute type 4 has an invalid length.
[  291.990739][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  291.995786][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  292.261819][T11987] vlan4: entered promiscuous mode
[  292.262472][T11987] gretap0: entered promiscuous mode
[  292.708822][T11993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1402'.
[  293.196417][T11988] vlan4: entered promiscuous mode
[  295.234145][T12010] netlink: 'syz.0.1404': attribute type 7 has an invalid length.
[  296.015157][T12006] smbdirect: ib_dev[syz1] renamed to [sy]
[  298.594743][T12000] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.595259][T12000] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.415983][T12000] batman_adv: batadv0: Interface deactivated: dummy0
[  300.115828][    C0] bridge0: port 1(vlan3) entered learning state
[  305.421225][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.786727][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.512393][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  311.554143][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.698432][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.707515][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.743286][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.752732][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.851746][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.894750][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.904039][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.916141][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.376529][ T4990] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.406332][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  313.432555][ T5594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.445879][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  313.453459][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  313.459052][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.872689][   T55] Bluetooth: hci4: command tx timeout
[  314.722047][ T8952] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.722584][ T8952] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.723140][ T8952] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.723641][ T8952] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.777764][T11999] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  315.053505][T11999] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  315.054080][T11999] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  315.076623][T10784] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3
[  315.077377][T10784] ref_tracker: netdev@ffff88810f520700 has 1/2 users at
[  315.077377][T10784]      j1939_ecu_create_locked+0x1cd/0x400
[  315.077377][T10784]      j1939_local_ecu_get+0xeb/0x220
[  315.077377][T10784]      j1939_sk_bind+0x70a/0xc60
[  315.077377][T10784]      __sys_bind+0x2e3/0x410
[  315.077377][T10784]      __x64_sys_bind+0x7a/0x90
[  315.077377][T10784]      do_syscall_64+0x166/0x520
[  315.077377][T10784]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.077377][T10784] 
[  315.077425][T10784] ref_tracker: netdev@ffff88810f520700 has 1/2 users at
[  315.077425][T10784]      j1939_netdev_start+0x387/0xb20
[  315.077425][T10784]      j1939_sk_bind+0x946/0xc60
[  315.077425][T10784]      __sys_bind+0x2e3/0x410
[  315.077425][T10784]      __x64_sys_bind+0x7a/0x90
[  315.077425][T10784]      do_syscall_64+0x166/0x520
[  315.077425][T10784]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.077425][T10784] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  315.281520][T11999] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[  315.963057][ T5594] Bluetooth: hci4: command tx timeout
[  315.963621][ T5594] Bluetooth: hci6: command tx timeout
[  315.964958][ T5594] Bluetooth: hci5: command tx timeout
[  317.403288][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  318.369542][   T52] smbdirect: ib_dev[s`z1] removed
[  319.580465][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.581175][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.581195][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  319.581212][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  320.197129][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.197860][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.197882][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  320.197897][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  320.501071][   T13] .`: (slave netdevsim1): Releasing backup interface
[  320.524741][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  320.558729][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.565547][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.575730][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  320.586050][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.323927][   T13] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.324591][   T13] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.325242][   T13] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  321.325893][   T13] netdevsim netdevsim1  (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  321.837550][   T13] dvmrp0: left allmulticast mode
