last executing test programs:

15.889451135s ago: executing program 4 (id=6144):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4)
setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0xe53, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001340)={{r0}, r4, 0x16, @inherit={0x58, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000002000000000000020000000000000000f8ffffffffffffff0900000000200000001000000000000006000000000000006fc74535000000000c0000dc6bca582505000000000005000000000000005a0061bb4043dd81237cbd33d4fa609c5ed972125fc22db3e8ce4f73b0af911b2a4e5ed763b6baff4ecbbee8262b95e6559dc892ceb00eabc6e464aa928608512a7201b918034513e18922d23e0fd3854df79c735b78b23d6edc02710cad190a73572a18d616025cce213bc5f62208915dd1461b8484e8236323f15f74239a"]}, @subvolid=0x5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

15.674165916s ago: executing program 4 (id=6146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})

15.465230152s ago: executing program 4 (id=6148):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2, 0x20}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28)
r0 = socket(0x2c, 0x80000, 0xa)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x4000080)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, 0x0, 0x0)
write$tun(r1, &(0x7f0000000040)={@void, @void, @x25={0x0, 0x3, 0xf, "b2ff58db46107cd741c85421e9bd824dc3212c8b8e7ddfdb79cfac9557a4c3bfebde238bb68f4650585397d01e3f1a66459efe12dd8ba3d2c04f0f12a5ed93980ed2c04738e6eed1851d30948f7aac851dc5c10a39e71a3f8667c6fdd5e7f140c65cde7376faf9229bfdb80f827d465be7f0be89749b1807ff252cfe0ff625"}}, 0x82)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1})
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f00000002c0)=0x1ffc0)

15.074733732s ago: executing program 4 (id=6150):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x43, &(0x7f00000006c0)=0xc, 0x4)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0)

14.130971892s ago: executing program 4 (id=6154):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) (async)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000003f80)={'team0\x00', 0x0}) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25240000000c000600010000000100000028003080"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @multicast1}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @broadcast}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x26}) (async)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r7}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x6b, &(0x7f00000005c0)=ANY=[], 0x0) (async)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0)

13.892082908s ago: executing program 4 (id=6157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x112, &(0x7f00000000c0)={@remote, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @tipc={{0x34, 0x4, 0x2, 0x4, 0x100, 0x66, 0x0, 0x4, 0x6, 0x0, @local, @empty, {[@timestamp={0x44, 0x18, 0xc3, 0x0, 0x4, [0x2c, 0x9, 0x8, 0xfffffff0, 0x5]}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x2, [0x9]}, @generic={0x89, 0xa, "7859e0456481d8eb"}, @cipso={0x86, 0x55, 0x2, [{0x1, 0xd, "fa70a580c19a7a6ddd3fa1"}, {0x6, 0xc, "cb3d27cb38f9b561b201"}, {0x1, 0xe, "d51c539627ad90b9995e7e2b"}, {0x2, 0xa, "8035dba8032b208c"}, {0x1, 0x6, 'q}p0'}, {0x6, 0x9, "76e0d2112fe677"}, {0x6, 0x3, "ed"}, {0x5, 0xa, "680b59b07cd445c6"}, {0x6, 0x2}]}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x4e, [@multicast1, @multicast2]}, @noop, @timestamp={0x44, 0x18, 0xe3, 0x0, 0x9, [0x2, 0xb2cb, 0x9, 0x3, 0xffffff8d]}, @rr={0x7, 0x13, 0x26, [@private=0xa010102, @multicast2, @broadcast, @empty]}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x0, 0x1, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0xa, 0x5, 0x1, 0x7, 0xffff, 0x1, 0x4e22, 0x4e22}, 0x3, 0x1}, 0x1, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f0000000200)={0x1, 0x1, [0xadf, 0xaaf, 0xb68, 0x778]})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0)

4.956925794s ago: executing program 0 (id=6213):
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) (async)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r5 = accept4(r3, 0x0, 0x0, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) (async)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x54) (async)
recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/143, 0x8f}], 0x5}, 0x3f}], 0x53, 0x60, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) (async)
sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

4.850735562s ago: executing program 3 (id=6215):
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x20000800)
r0 = socket(0x10, 0x80000, 0x1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x270bd2e, 0x259fdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x3c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000000a010800000000000000000500000708000240000000020900010073797a3100000000140000001100010000000000000000000000000a"], 0x50}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

4.090559455s ago: executing program 0 (id=6217):
r0 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x29, 0x2, 0xf8, 0xa, 0x14, @private1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x80, 0x8000, 0x8001, 0x9}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={<r3=>r2, 0x9, 0x5, 0x400})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f)
sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, 0x464, 0x200, 0x70bd26, 0x25dfdbfe, "98730844e5eea52e0caf714d0e9539436ea48ecf36f8599188", ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008900}, 0x4080)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000004c0))
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000180)={<r9=>r2, &(0x7f0000000080)='&-\x00', 0x100, &(0x7f0000000840)={@align=0x2000085, {0x5, 0xffff, 0x9, 0x49ffe80e}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x7})
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$key(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020a00f301006ae79ed2000000000000"], 0x10}}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000680)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000006c0)=<r14=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000700)=<r15=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r11, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r12, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x2c}}, 0x4000000)

3.93556268s ago: executing program 3 (id=6218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r1, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0)

3.671273553s ago: executing program 3 (id=6221):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000061566ea704e8c358b4abcf65b408400ef5b1adfa99581f2f42eb4a10acdd9e9a96e7bdf8520da66e4ad01000000dc9e19c26d2f405196f71b1ff57c89b74437c702c73b5b9bcb85b4a43dffb705aa59a9d2050000000000"], 0x48)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1)

3.559000212s ago: executing program 0 (id=6222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000009ac05f449ac02a04ff0057948a4fc2c4e936b63c55acfbb4c000000000e7c7360978c6428baeebf87eb623551a86e5000000000091ff51892c09a538d6b3faed3bd31afb4b06dc9ed474587539cd3ad15d4439feb391d5834f4bc592cda4c37fc8b60c34fd35919228d8b6429f39bb5bc7db11fa139b0f663986d0edd23f735e", @ANYRES16=r5, @ANYBLOB="000427bd7000fbdbdf25700000000c00990000000000580000000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44090) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x64, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x7, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfffa, 0xc}, {0x0, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)

3.20218426s ago: executing program 0 (id=6224):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r1, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0)

3.044221273s ago: executing program 0 (id=6225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0x2, 0x80000, 0xffff)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vxcan1\x00', 'bond_slave_1\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x6], 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, 0xffffff00, 0xff, 'gretap0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x62, 0x1, 0x61}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x82, 0x8, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x3, "972d", 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc8, 0x1f0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}, @common=@addrtype={{0x30}, {0x32, 0x80, 0x0, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffffc, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r4, 0x0, 0x33, 0x0, &(0x7f0000000080))
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000030605000000000000000088a9dfa716309a382450a1243295b88500000000"], 0x14}}, 0x8081)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x40)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c)
r10 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$netlink(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)={0x2c8, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, "", [@nested={0xed, 0x153, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="5880f99bd1cad6b2644d2d5c13f1189f07a308b9079169ec5a99c5f8568c055839421be1980d4181d0045a51789fa718631b3efca253a72d3bdc983748b74bab93f3c9069fa7bbc018c801898b8947fe40cc4791bf93a85fbd141b5438b8f8f46b3b30e68a555f0a608c9332f47fb26c49d99ab38c3ab7022c5cdb73516c37ea01a95d230f510eeef733bda862defa9e773e0e2758764044c2840e3542ff00ab944e26b4841a990fd70dc217eb5a61f091589fbac6fa999e709ebf13090975b2ba", @typed={0x8, 0x13a, 0x0, 0x0, @fd=r10}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x13}]}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r10}, @generic="cfac59c431012902cc88b8ef957075fb2ad1c5e3940e88012a8df97f0b329b14cbce7070b8c691471e70d91b20c06541b9d1e448e424cb23530fa79b008f2dfbd5270db2d1cb7f0a208b96d3d9ca3d5b95bd207d16bcb8a52c48e554595bcd8f4d04e27449823b6cf2", @typed={0x4, 0x152}, @generic="85e5cb70b7cc941e03b4c030ab3e526abd70e37785fe27fd65b53939575ce17754169b9120b8c1fc2c9fab9a78f754029a6d291578aca8cd1162da05d15c4c94f61727c14be962b249735a77802cfe7b4482a163eb1b19ae85309d65d6eb626119106f9b69ab4d84f66873b4e6bef5d9df94ca370b17318d3d3cfd0fbaf92f32155067e85df752dc4c1886d6c579e7aebba7172c56e7ecc27a329eddb5c5e7e68778163a0d773ba1", @nested={0xa5, 0x83, 0x0, 0x1, [@generic="850350eb4fc2470f007e9ff305c4fded15bc97de214a4324d51ab6e3d1c561bdfbe1325aac0333ef0f8218e8f2301924cc9b773a0889b37d1a3abc57664cd5666149d04b8ddd9ff01fa5683c5ef5b964f589bb49b8d259df31d5461c4c374503210adffc17431d0b4b61ee56e692b79c76bee78da1c629e6e6907bf708893428b996760e7cd4f75d715d08710b7e9d2e33a38d1bad37570937", @nested={0x4, 0xfe}, @nested={0x4, 0x153}]}]}, 0x2c8}, {&(0x7f0000003980)={0xf0, 0x1e, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="57d052cb8b62b78c947f6a4a44ed981bb86090304eb6c59fc2e04516fcc23beb7367ecf65346a19375c9ce2d29d8c8", @generic="4ec2bc2c0fa538eb5f5f2411c89cf47e2f9a33a5caf1bb2a83ec0a0a0b51ef9f75970f569b1b9ba45bc4dd6bcdbca56c9b89fe79a809205730a6d6aabee9e3cc58e28f41c20d002484b42be7eb435c942c579099a9332322be9f", @typed={0x21, 0x132, 0x0, 0x0, @binary="7fadf946fb6387b73dbf3dce84ac56edf90783df1ffb8d8714095714ed"}, @nested={0x2d, 0x34, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="fc14272bd63ca0ca0615edb69936c9927dfbd8b8f56a7663e65fcd53d18d13ab6e346f99b3"]}]}, 0xf0}, {&(0x7f0000003a80)={0x48, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2}, @nested={0x21, 0x7b, 0x0, 0x1, [@generic="f587245362da89f9d0f8acb9dc1248b3a87e32fa63ce2813a066421dc4"]}]}, 0x48}], 0x3, 0x0, 0x0, 0x4c0d1}, 0x404c014)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10000000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="60000000020601080000000000000065aad9d400140007800800124000000006009607e2ad0d055236a67dfc00000006000000050005000a0000000500000005000400000000000900020073797a310000000011000300686173683abef51a6fa193daca123caabf3bc49b948dc15191de167b5b9eaf6a04f75a0c18e1363f08596fac0a54d0d6773d34475a2068ce122c77996d52430ad0632c30cbb8e162ccc8803e55cf52d730d036f712d366bc61dea541a164a83464f101e6949d461352b4e2e2b7f52dfef4ffcf23c829c2a3acc781df44750975605228ab68f36f872a39d97bfcb5586658f9d13b9d6879960537bc1788010d67d87ca4e2f9c8a091fc5191381c89e3548ea37dfb1d826ce01caf9187ae930776fdb29228071f2f3fe47ee6837623b38e043c6600"], 0x60}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0)

2.863057544s ago: executing program 1 (id=6226):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/90, &(0x7f0000000180)="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", &(0x7f0000001180)="ac607de4d7589d024fd8e84ba77ce43a9c8349383e6f7a24385f467f78bb7c849bf66465d49cc8a0da761eedc800d44e3d97e0b9b070d5f039333e15f95b5bac8764fd92472c91d047f71f560db77eb7dcb2cd43dabb85a7e850eb114da6bcdb5a2655f9f57fb8e5a007ef8f421ca0a89874a31ef3e812289c2fef31f256d790ce428c3935ba8925bbda7c42e5cfd8750fa82e761a709689af3d197762f2da8353d151aaabe775a364b29b5d181053865384a5a4ba79eaed41f75edd277f07d764555ef0b2ed1dbf9d8b7914057de01e2e24b24fa190ecff4d5ff028", 0x80, r2, 0x4}, 0x38)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ttl={{0x28}, {0x0, 0xa1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x1, 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x3, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)

2.681567633s ago: executing program 1 (id=6227):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x0, 0x1}, {0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}], 0x18)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000080)=0x201, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f0000015600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x24048015}, 0x811)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f0000000100)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/133, 0x85}], 0x7, &(0x7f0000000780)=""/160, 0xa0}, 0x8}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0xfffffffffffffffd, 0x0, &(0x7f00000008c0)=""/86, 0x56}, 0x4}], 0x2, 0x2000, &(0x7f00000009c0)={0x77359400})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
sendto$inet(r4, &(0x7f0000000a00)="1a7d89e6ae729de5d690746d06d41df521217b3108cbc06130ee9b56746db65d0709c3acc56ac587cab36ab44f6027b71e78c045b020181ff14032439dc48604dd472fc274809bbcc3d28014e3d72967df31af8bcbe8a8a393aad118aa056f4f9e9089edf46a010ef9cecaf2ea445a42af5283863354eec28d1378c12c1f8463c9d74e8a2c4fd623eb0f3b2da58cb821ccb320675b4f53f7b4e44ef34038087955d2fa63ae58099b7addfe702999d3334975fab8927548cb823733bef98b5d47b3231e8311bfafacc1a5f1fbc8d00ed1de50e20cf5961c2c2f8493e025cb128057e3fa7a5c24f56d841a17c4abf96d126ba5f592f4b7cf0da29f5a1c9138f47c11d0d3c486a27c605adb1e43ed3ac7bfc356e7cbe576734e3ef6d750558d72ab25f317f75e902f6ec3533959928c7c22e5fae77185ad03ed62da48a66041f840ea17d03d0eb1b4842621916c33327681689e10c8b1f6a0560aadc1134564d629bacd14d9525ada480c7de954bb78c27be82477a5d40fc930a13fd8884d268b4067cb2d6bb8aa7d217989b2bf1e660873bf06a3fe1c89ec90dcf8500130e07de1774faad2dc07495a3dfe4189f686b01606ebb161e01083c84b7cbdfdd6c290a7b1ad11c16b5c564c3870b1931f47bb978e6156b9611c80bb83d073c6135473b28742b5b0f68b5b580c9dfdfdd5a495aca1bab045e1b155ee73a7950b4fdcfc0184d10ce2a180ff80ac2d1cfbc1d0ed5225208dc81b5bb087af8081a80eaea80181215d876fe5467b59477b06a9702d85fb256b637e8770f8c42c84e7b00d2a442191a6a19ea3e587023a86d4d95bfa7678c2db2ed4b0db676d21a5bb42fde491fff185bf3a4edc76e77f1bc7e7625af84b36ff1ca413bc0b37a7d45ec272d6ca84acd13c0f999794e30cf328e975dea9b82810de8bd0ca6f61abcd4f84a56ae6bbeec8187fb846af625d0c34d85a485d1227db75ba85abdc040e16eb8e65d64fa690d9a5cce21f7c96156fa842310440f935334515591ee35fb032deb2a4aa856edceb8209383f6bcabefd1952cc763f66a8a910ff4a82103d5b913d35dd1eeb7e9c1d5e9deb4cd0cc7118bfa5220f45777e8a9e57ea4b81b8dfec15871e17a07643a39f87cb07722ca07c49791d7f8652642e521e8c127600ec27a0d1bcf08569f5a0c88874f5f512dbf12fe11d2095e917249b596eb087265c56170dced80c474c8762d0511136428c6593f60abda7e7e6bd6b35ae9d1a6dbecf7155590e7feb632e5eacd481805e710166ea3e94bbc56b1e56ea1387fa6e2bb2536ae2b5c8c089651e903f54f191f3180082fa27d285ccb7790e200f515d24705298af84032a26002dd095ceb75aee63d26350e0bf731e35adb59513c0bc6f9dbccece716c0b27a0ecf0937a986d11705144bb18698b11db080cf5c81b631bbf2efad0adee8f107a861849a5c00f7ee487c3e6f424d730fefe6f21b3974c8a6fee8235c9c1f28940f5faae3784f26a730c5c43b6a501ccfd05bb07878a42a0668f9eecd006c9071425dd7ae51f14fdeafd456769923f193a8279dd63689da8e7400cdd1fa467f6f9c61b58ee5cb5425818e8fa21fd2cd414a3bd81d9c0b7c33573419e0c3fc8456e2c507c29f662e9c579e183df09a557c6ace51dcc46ace259b2741583b64d6b0dbdfacf9a8934f4008caf64582e8b9cb83acf6ca7c21236ae5bfd668c26c30a8cf2c7ea97f6d079ec58b4f3a7cf392a42a4418ca0055f2e4c25443a1b646b445b45474c2af6ccaf988731ac782a941c052bbcbb02dc443a61f4f7aea1d45854295bc052a52b78704f9889422dc0156b86350bc426a9ce256a72ed9a359bb4b0d6cae18e9d4aacbb32b21f8675c3f626cf554f19919634244825b107c92482ed4f063dfa73524940bab95c142c36ae7318146f608a227aa63b20da6352e72f5d78d86dc6ad30d9b5678c631b229623f29451b067d9a73ca158e037009b9741d0739c6ec4f30661330dae91c0255ea3f7978cb962f22ae389899736d20849fe461f4f20da12de219e123acf95ab6dcd7106662baa57c1e68b0c0e5a8770a07a12ff888ce0a2e94e77c9a466bb0e730c8175c1a0650504b5a0ea41b2c37392336788ef78c30cff7760953664d9f5e0d0899b4558ce4798227f030369e77539b3fa3b966b11ac93cf5c3be4ef1e8126a10fce387bd0a3024fe9c2e8470d4657e6159956cad97b809831f8cdc3ce59a8b9ea5d8c60f44e5aba4a78018090f381ea9612bfe9cab2ffa8a5768ce1c97154365ef65bfb0615d66d096fb4890a02bc4629f9305d142099a05e2eff06cf872a182e5ce7f9215dfaba49a3e9c12ddd151f63e88fffe7ebcb11afadb523eda69d633ed52fa4f64f36a6c8c3ab9b61c6ef65b81c75069e810728cd86cefe9f65486339c8992d8443af8708df1e17ee391263c73822bf19060c043ea3f4097c859d758fb5bc0a65a15aad84eb0b4372fad7b97aadc63dca5b67ed7a1accc492cc18e9fa146e0c4409b9e2d0120a4be790434bde469515f3587b8d220cb268c11500d56c340a0312d3bfca7eb7394a7b4445312d01962312c6747c3b4177dbefdd7f8229b9dae36adfdaafe4563c08df32c4ed1430a5d98beb1b0952d1aaaef8bb879df0c2ce7aeba6f63a0a9a6d3b829ec9a960b9b7aea0328e47bca2f8f7b6ca1828cc5e04f583beefbf0ad11b993c6a3cdaeef93e75976c0ab5edfbc27037f0d43beeb937a9917e20f059d55ebcec11288bb245132917489976608120c0c89775627ecc8bd691c0fcad63ed6131518794a5db12365fdab41c65ee95423a3a855d05f818e88998c043ae5c1fdaf5a413c66de92b2481fd6b028dbb337ccb69d19ece5007672830f43ff17711509ecddbcb5f094935491f232a57f50be29ff6555db55244713f6db53e079a306739d9629013d5f4c0eba5fc223794231df459ef51c6a7eea2fb29177b15667df33b4e8110e70a19329eef6a563b451bbb16fdbf034e885a897320230d9b0d563a9124316e82d8872edf277f755275ee898bbda93fd97798358751a381770aa4ea053d0eb12dc12228dd70045620b7d895e9f2e52426387a5a32c4f126552def7c5363b8da6b4eaea2015b9127c566e6b6282d414887820e411a3feeb5a2e5150b2ac385dd9e5cae2aa0f62b605adb62f431b97b9fc302c20c57bcd56f6608d8566f184fa5c1ed8818d07464d1f25b1142c79b4276054318d01ad03312ca5167cfde92583756eac60d05aa371c0c784610ef03153e0427a276b98ccfaa33371322d1d909b824ed74038b4679b97dab8f39e3be76d71fc991ff268c00aaa6229f6690ee30a8cc746d2c6c579105f62f32428507676b0afb782676a7a94c274e4f67a3a6410be1941d707ccb9cb130a7bfbefca72407dab6e38a40b3e64af40aae3905d002db6cda0dbc484ec61fbdb9827fd9e2bd90dbe79b0693bd4bb33b77f4e0741cb7d23956dd53e51ee0fb7927d79e740eeb55cb2d1d298ea851cb315fd42239c6f7eba84139bce14cce367244dd0cc1f5dbadaafd61a4ad5fe6eb6b2cf6fb309bf5568ebc4038a3c4c78a5c62cb488d60ec8a937a2531aa4e94552bc7bacd2fd9c3ce294a5741e86369aa724c7127977508bbb522769c9fc6a6e47ffada78617798bb1a175d01516da93499c8794e5c56360fb13dd6fe9c4c8927159c8584def685e3c04bed13fc918f8e65da9f6bd0618dfff9d3db965c6196827c077fd10f61d3c6755430c1459ad201413231ee5ef803f65e26065ddd3109a34c600ef9975e3738dccf77cf2f3dd51dde1727a292f421c8825a7c09e560cadb863bacbdce5bf3a49bf41939f6fe1387f956320ade3420055b93df5174092b7b08cf6169c2a67d6d2e525bfc500d1ea4401fe95fdfe206d0624176c10e85ce4540162ee34ad0a7086ecd263f14b2b506a243c2e0ee15c01c8f091673fd95ea1cb84cde1eac463b57d8421d278d3b755abb127ee3fb71214b50388b7181d6180c8f88579beb1d53a717644c1693ca2701bfe2ef0b31dd165bbddc23b5be26dc0f3d711fe966abfbf7fc3956a672011e7c8327de4d1f216d8a27d81b08e430a35adfcca97dfd2998e3e9c0e1e140937da3fbc2186fd5249fd7ee17caea4e14440638555402c767b128e4d32a91a356ea864edb9af1b70d3556016ecf9d5c30e77c407e7db891c39ded3cef87e8607665c00ab97d32c535c6fea0141a8fe19f4b3bd648bdd6b11f3f019a78035c1d10ba5b23c88d5e10e7ae582412dc9cb0365712aeee59ee30e1be72aa70fdbf0fd5a48cfec39608c6076182f00ad3bafc6066f07e972437fda5e8f9736d5dfc91dd90644390ea532d989b0685f56babcfde07a7ba8f34b7aaf35cc98c8af46dbe4f0c8a516d951991c6cbfda47908fa7579b5922eb6dd20a72734a417fd15c67a86b1397108baad4953368f72216a01f5075649443ef40e27e3f097d57e1a036b4eda16a650f341f305e44e065f5c80a7e778fd9ed53a7ae66ddfb9ef4c191c57f748decfb2a4b159fd766266bad1c7de2d7e0023d46079e83df1f6a1ef81cb2febbe4c56e0e94e191ec297c01885e34af6f9e1c88a8a8c9398fc3c52d1d6602ab4a18d6d07361bceb4169e28a0d6e08e27b406bc31c125bd481f8a289ce10cda85543629d691ebe351aa40cd2779e31fd9b02ac7ab816463b9acfc770944c9b80fe75f47b1a2026b1daa438c53bed105bc599934a5f9adfaaa06ca58e1f2bbb9ed8247c6a3ef149ab0c3bf0a034c03f28d954da17f50dfe938cf39cacab81dad2b8058d6f097cb366743c4ae2e70125c65a26986502767f384aa0fd29049f73d6a62125cc221f07f482e40cf61f09bda845a699ffeecde5e46acfcb25276f04acee938df8de16c57fdc89c961202d84234068650ee9c0b5d54f5739bbd6044c8fca9022701227f9b55c719cebdf765fbd3469d19ff5ee677b201ab57a2f9c677c799f5a4e0f95fb03370ea541cbb24746fbad9e3c20afd8380ddfa7152327a3779ad02e256237832f39e21f9f7393d3cc10295b4a78e23af813fe62f5410d95a849abbe345de469a29b74c1192992569034abea705875322ab1e44bc90afdbe1c0177c61c1040a94a8022adc347ea2f21100313620921ff658236e2f08c25cd8971a9310378716e74abbbf449e84b47d131cfef0fb2894711e61b7310b2a01efedc9e6fa71a454ff8f8b30053d3c18d644111ca29179cbe3dc12bbcbc4cfafebe60eabd734177ea529445175ba4dec6a006117efbdad88938ca2e09aabd97c5ef46d788e0b9be65e94e4689506be554b1f46ed401c1049638bed9d98e8c062b4d6e9edee0c4051ec5c01070bb422a1adf0c537cade5ae0cd90ed5f366d38121bbd4d898c877463fbfae244b4421910a7b679d1d742d00cb624e940107bc26929fa0e58759df5a841711800ffb5385ad0536662456ed171de9665091de7f3c3d90a90b8c6dd205608384946e592713d0295c7d4ad23e7c152b4332ac7be40582847472907c80b7671a098f096a9ebe23689c2e23f919cead0934733c888673dc4657263af92fd93b21c62ee0af0dc30be4886fd8bf31e9efe0659e311f8f9f506598bd8bf92a5137ba79b1dbe17c7c23d8034b02b271401b775630f1c2dd8fa17ea5838088689e3f0d750500f0abe35e1015df4c9b6728f6b09a3b6f9defefbc0ad31a2af610c909292ccbcfe88839ae60e4088ebdbeb9f989958b35a82a56d6f9728a5c5ac4ab2dd962d847238467b4722439d772893d1b8f16d7d", 0x1000, 0x1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)

2.282945073s ago: executing program 1 (id=6229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a0090000000000000000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=<r2=>r0, 0x2f, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], <r3=>0x0}, 0x40) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4) (async)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)={0x14, 0x14, 0xf03, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1a00030010008b00000400618e26bb6e9605a400", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r3], 0x20) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x36, 0x400, 0x70bd27, 0x25dfdbf6, {0xc}}, 0x14}}, 0x4000800) (async)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf250000000062aff8910f03895b8397db128c392a4983584f5b277a75b4efa1a75a0d9b94539cf763ccf5143e0a2a6ec7fc95651e114b7a505b72071bd36a9eb55c352d73d85dd74e5832b67985434d5f3b013715f17e72f2503ac3408adc4d7c3330f397e3ff938bed5addb3b044b1b2", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x78810}, 0x100f0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async)
r10 = accept4(r9, 0x0, 0x0, 0x0)
read$alg(r10, &(0x7f0000000000)=""/35, 0x1c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000e800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)

2.249205224s ago: executing program 2 (id=6230):
syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaab100000000000000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0)
socket$key(0xf, 0x3, 0x2)

2.150598153s ago: executing program 3 (id=6231):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@align=0x7, {0x100, 0x6, 0xfffffffe, 0x200}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@align=0x7, {0x100, 0x6, 0xfffffffe, 0x200}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5})
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x160274d006839b28}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={<r2=>r0, &(0x7f0000000340)='syz0\x00', 0x40, &(0x7f0000000380)={@align=0x3, {0x6, 0x8, 0x6, 0x3c}}, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x3})
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x2, 0x3, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x12}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7e76}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000005c0)) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000005c0))
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1b4, 0x15, 0x100, 0x70bd2a, 0x25dfdbfc, {0x10, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "73acd7eb20ff5e47e7b0116af60789633e1376d680cce01ee224e9a64d1073e6ba485203c35f85f3b73419695223ea4b5ed01e4a4fbbda372e4ccefe0593dbb64744f4339c7a6fec5eb056ec3279dd7a935d45d31a76ab9e39cdbcd14ae70300efe5be70cf8ed97b868a15ba022fbfc2b377a3329477dd56fb8b5739fa2bee81e0fa11c770a288b46e4f980d423e1384293ac33bbf15a775fbb04574063637fd1c1d0bb1d9eeed3db13207d874e6c1e094c58939907cca9fbc4348ac5b7c2faf19871e57908e97dfddd38d30aca047ebb07c8fc64a49f532f329a719ba943d3bf00f798baffa0f976105a691f9abc55ee0"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "4575b8d2ec94d6fce1ca350bfeb8e5bf6d288f623e0145cdcd3991824855f6bb618a38e04e4a392a586699b8860e6ae584f5c2ebc05a7ee39f4a869e766d285be25a643506009e412a547dc376657eeb26fcda72458cc5fab11ccfd27bc50c4f6747f1897664b4d2e5c32e38323c50c8c8c84a38e831602640e6f228ec4e2cae0548979896db1ac181ee6cd4fcae331dc875f615e7390903001db95955f64903ca"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000041}, 0x48801)
r4 = accept(r2, 0x0, &(0x7f0000000880))
setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000008c0), 0x4)
getsockname$tipc(r4, &(0x7f0000000900)=@id, &(0x7f0000000940)=0x10) (async)
getsockname$tipc(r4, &(0x7f0000000900)=@id, &(0x7f0000000940)=0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000980)={r4})
getpeername$packet(r2, &(0x7f0000000a00)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000a80)={@rand_addr, <r6=>0x0}, &(0x7f0000000ac0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x4, 0xa0, 0x0, 0x5, 0x6, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x10, 0x3, 0xd}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'syztnl0\x00', <r7=>0x0, 0x4, 0xa0, 0x0, 0x5, 0x6, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x10, 0x3, 0xd}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vxcan1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c40)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c40)={'wg0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', <r11=>0x0, 0x4, 0x10, 0x6, 0x1, 0x34, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10, 0x7, 0x100, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d80)={'erspan0\x00', &(0x7f0000000d40)={'syztnl1\x00', <r12=>0x0, 0x7, 0x8000, 0x5, 0x903, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000e40)={'tunl0\x00', &(0x7f0000000dc0)={'tunl0\x00', <r13=>0x0, 0x8, 0x1, 0xc6a, 0x1, {{0xc, 0x4, 0x2, 0x3b, 0x30, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x0, [{@loopback, 0xa6}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e80)={'batadv0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ec0)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000f80)={'gre0\x00', &(0x7f0000000f00)={'syztnl0\x00', <r16=>0x0, 0x8, 0x20, 0x0, 0x9, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x45, [@broadcast, @broadcast, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x3d}]}, @timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x3, [{@rand_addr=0x64010102, 0xc}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x21, 0x0, 0xa, [0x9, 0x1, 0x5]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001240)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xf7356e25ddd344d6}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x228, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x880}, 0x34004840) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001240)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xf7356e25ddd344d6}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x228, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x880}, 0x34004840)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r17, 0x89f8, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000001280)={'sit0\x00', r5, 0x80, 0x1, 0x6af, 0x1, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x65, 0x0, 0xf, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @generic={0x82, 0x12, "2fe22e7cc3e7aec26d35a98c446523ca"}, @ssrr={0x89, 0x27, 0x9a, [@rand_addr=0x64010101, @broadcast, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r17, 0x89f8, &(0x7f0000001300)={'syztnl2\x00', &(0x7f0000001280)={'sit0\x00', r5, 0x80, 0x1, 0x6af, 0x1, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x65, 0x0, 0xf, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@noop, @generic={0x82, 0x12, "2fe22e7cc3e7aec26d35a98c446523ca"}, @ssrr={0x89, 0x27, 0x9a, [@rand_addr=0x64010101, @broadcast, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}})
preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000001340)=""/17, 0x11}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/55, 0x37}, {&(0x7f00000023c0)=""/215, 0xd7}], 0x4, 0x7fff, 0x0) (async)
preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000001340)=""/17, 0x11}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/55, 0x37}, {&(0x7f00000023c0)=""/215, 0xd7}], 0x4, 0x7fff, 0x0)

2.042742692s ago: executing program 1 (id=6232):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.942388634s ago: executing program 2 (id=6233):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x50}}, 0x0)

919.336689ms ago: executing program 2 (id=6234):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) (async)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045fc00b0006400000011907800000000ffffffff00004e220023907801000000ffffffffc63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7fb87b7a3b656030ba78a7fe3fc60f0232ad26a02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741874427be29c95b93303cd1be9716d01efc0c9ca574199dd70000000045227a29c5acbb706c8d97cd14ba0aa22984e0aeafde90bd933b89b3a4beac08"], 0x0)

866.544126ms ago: executing program 3 (id=6235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000005000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0)

758.123651ms ago: executing program 1 (id=6236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0xfc, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140))
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@empty, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000680)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000680)=0xe8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x180c00}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x318, 0x3b, 0x100, 0x70bd2b, 0x25dfdbff, {0x18}, [@generic="ba3f0d15dab2c6463c0418c6db0b88d7a0b7f31a73e231", @typed={0x8, 0x2c, 0x0, 0x0, @uid=r5}, @nested={0x181, 0x155, 0x0, 0x1, [@nested={0x4, 0x7d}, @generic="66452b4f0e540ecc75c1f87fad7bd636424ebfbc9f0e06c89023b066e919fceadf46cd62c6424f13e31867df27133ef2703ae54cad0a405dc58869d72d7ccfcb739c2be63f541487c2a768cbbaa83a455f10f311979b04a0af88afa930364b433b0fa46f03124b5345c9f84baf7b970426b3fd3ce41e77b9cc", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x7, 0x31, 0x0, 0x0, @str='./\x00'}, @typed={0xd3, 0x12, 0x0, 0x0, @binary="a2d62dabe08874053d1ea7d2dbafcd92dafebc3a445f29865a2cc05918315841a45b491f05ca1aaee19da81f34c921d2b646348956955114ce181ce3dd2ae38b7d27c010c35f196fa5d5a5dcb4b1052a5928b6a922db072bc1f87a4a45b2831cb94895ec75d48b20b4fb68f0c422a57387af527465f2fff0f5870f6dba949fe4dffa82d70cffb5551803ed94f81936a85555bd506a82e2fb0f4ff10c813972b8282104c4db34c9874b70d1ddf4695c10ac45a2f55aee068aae0caae48bf53c3df9c42f910e22825bb100bb2da542d6"}, @typed={0x4, 0x11c}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0x9c, 0x0, 0x0, @fd}, @typed={0xe4, 0x127, 0x0, 0x0, @binary="df68e43d403ad6739545559cf61f4949963928e675697588c5cfe55ab986abdd099ac83b086943a2e39ae08e55bd70959d0b510f2fc14d740c782af95f5b06ac60f28e753f0b77e274ffd6495011ee3f70e930f0e1dd883fb64f5d795e28412036a468efff02e6f08951f6297552bd78b43301ae2842d8cbdf2d4ab580313565877b74c2bd0a7b38c95d32f0d9ad9cddaca12436b57907642f911c6d831cde2c97deb4ae2fcd76bfdf320335d2d2a4c54f70302549d96ec849f391becc60a92a18aa0b0d62a27f628170f556bad7b31063fd2fe2249c07774b57c797e9cff4b0"}, @typed={0x4, 0x105}, @nested={0x6e, 0xe7, 0x0, 0x1, [@generic="0e45168f546e023ab423751303ed5c28a630905a00e963f3371357b3bc0e695a6a0e945e617411696c9072c5e23fbee125f9fb677bbb28dd9c5e6d3c34b0eeed5cde84009ae52a98d148d20410fa9b3588b18ce86793b25db24abd24cd69", @nested={0x4, 0x71}, @typed={0x8, 0x130, 0x0, 0x0, @fd=r1}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x200008c0}, 0x8000)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)
connect(r1, &(0x7f0000000080)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

627.895075ms ago: executing program 2 (id=6237):
r0 = socket$netlink(0x10, 0x3, 0xb)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x57b, &(0x7f00000000c0)=0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r2=>r0, 0x10, 0x6, 0x9})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4044)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000340)={0x8, {0x20, 0x2, 0xaef, 0x0, 0x8}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
r5 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0xa49de2c1dd2d517b, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x25}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xde5a}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x4048045)
r6 = openat$cgroup_ro(r2, &(0x7f0000000500)='pids.current\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f0000000580)={0x8000000000000000, 0x28, [0x2fc6, 0x1dfc, 0x3, 0x3], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r7, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x6a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x6e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_PID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={<r8=>0x0}, &(0x7f0000000780)=0xc)
syz_open_procfs$namespace(r8, &(0x7f00000007c0)='ns/net\x00')
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000800)={{0x5c, @multicast2, 0x4e21, 0x4, 'lblc\x00', 0x1, 0x8, 0x6c}, {@private=0xa010101, 0x4e21, 0x3, 0x10, 0x8, 0xfffffff9}}, 0x44)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000900)={0x7, 0x202, 0x1, 0x5}, 0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000940)={<r9=>0x0, 0x8}, &(0x7f0000000980)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000009c0)={r9, @in={{0x2, 0x4e23, @multicast2}}, 0x7fff, 0x4, 0x5, 0x4, 0x1}, &(0x7f0000000a80)=0x98)
openat$cgroup_procs(r2, &(0x7f0000000ac0)='tasks\x00', 0x2, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000b00)={{r2}, 0x1, 0x8000000000000001, 0x1})
recvmsg(r1, &(0x7f0000000d80)={&(0x7f0000000b40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/154, 0x9a}], 0x2, &(0x7f0000000d40)=""/17, 0x11}, 0x10000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r2, <r10=>0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pi6   \x00'}, 0x20)
poll(&(0x7f0000000e80)=[{r10, 0x9003}], 0x1, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x64b7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x48000)
bind$alg(r6, &(0x7f0000000fc0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)

565.648641ms ago: executing program 0 (id=6238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2b, 'perf_event'}, {0x2d, 'blkio'}]}, 0x13)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r7], 0x14)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480"], 0xa4}}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x88900344}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0)

328.623847ms ago: executing program 2 (id=6239):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4d, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x17, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x17, 0x0, @gue={{0x2, 0x0, 0x0, 0xf, 0x100}, "fa0fa592ec9058"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x4d, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x17, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x17, 0x0, @gue={{0x2, 0x0, 0x0, 0xf, 0x100}, "fa0fa592ec9058"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async)

85.114559ms ago: executing program 3 (id=6240):
r0 = socket$inet6(0xa, 0x80d, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xffff00, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff, 0xffffff00], 'syz_tun\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x7, 0x2, 0x4f}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x7f, 0x2, 0x1, [0x8, 0x1000, 0x40, 0x9, 0xfff8, 0x1, 0x6, 0x2, 0x6, 0x7, 0xfee2, 0x2, 0xfff1, 0x2, 0x6, 0x9], 0x3}}, @common=@ah={{0x30}, {[0x3, 0x4d6], 0x8, 0x2, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @remote, [0xff, 0x0, 0xffffff00, 0xffff00], [0xff, 0xff000000, 0xff, 0xff], 'nr0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x1, 0x5}}}}, {{@ipv6={@private1, @remote, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff000000], 'vcan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1, 0x40}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x6, 0x22, 0x1}}, @common=@dst={{0x48}, {0x1, 0x4, 0x0, [0xfffe, 0xd, 0x5, 0x7, 0x0, 0x5, 0x6, 0xf, 0x200, 0x1, 0x8, 0x0, 0x2, 0x4, 0x98a, 0x3], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffea6)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="c690962a1206819e9c02ccf849756e34ef188d26c612dca997c23f80e669e054c3e691b327a3445e560a9b94935929911f98483870637479ab8df39ed6f4b900e7de0f95a11c5a56317c4ba92f0449f1402460f43fd7247a", @ANYRES16=r6, @ANYBLOB="010004000000fbe7df2501000000080001064f80a8c01f1515ef53bb59529c811900001400048005000300010000000500030006000000080002000200000000000000"], 0x38}}, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040814}, 0x800)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x5005)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="1d012abd7000ffdbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="4fbf32fe00d1e2c646dbca1750fa965e9d05a27fb2596cf9e5ffa7e144109aefc66a6136d55dc4f0e008a3ecaba6ae37b27a8f68b4866fc8179e430ce4964da95278e0779d143db117d11c009d9b1c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r10, 0x11, 0x70bd2a, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8412e44b", @ANYRES16=r10, @ANYBLOB="000227bd7000fddbdf2512000000050038000100000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x801)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r8, 0xfffffffc)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r12, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24048004}, 0x20001)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
syz_emit_ethernet(0x11a, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @dccp={{0xe, 0x4, 0x2, 0x6, 0x10c, 0x65, 0x0, 0x72, 0x21, 0x0, @empty, @rand_addr=0x64010101, {[@lsrr={0x83, 0x3, 0x28}, @ssrr={0x89, 0x3, 0xca}, @timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0xd, [{@remote, 0xf01e}]}, @lsrr={0x83, 0xf, 0x7b, [@local, @rand_addr=0x64010100, @rand_addr=0x64010102]}]}}, {{0x4e25, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, "1c7d1c", 0x40, "24bf3c"}, "36f50f6b153e39a1f907a4f3bf50f71e6f8d53c41c96fd0714eee5c2bcb83c8f737dad7ea2c61515f65dbf8554bbcd9f41057c455326be1ba3eceff18731faa10a1e008a527fca3915e1f791850f93cdf40fb38072da407c773e6e44c2245b048dc488a3e1f1d99dbe1a3762483feaa2ddfafd002b3d1a6cc6e18f532d86cd6a0e0ce3a70b8ee75dd18c5aaf499a58acd12211122f6963e9e5ab4b29c79a0dc90fd374ec1a89a3321da2ceceae4796a986a85c9553b81b0a3e99a9e77fbf1b67c7d5b0a7"}}}}}, 0x0)

23.094274ms ago: executing program 2 (id=6241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ee050a000200aae6dd462c0200000c00"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', <r6=>0x0, 0x1, 0x7800, 0x3, 0x3, {{0x12, 0x4, 0x0, 0x12, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0x9, [{@local, 0x4}]}, @lsrr={0x83, 0x27, 0xa5, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @empty, @local, @broadcast, @private=0xa010100, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002dbd7000fddbdf9500a70fe8446d6dfc7100030000000100140002006d6163766c616e300000000000000000140002007767320000bc1dba42c491e0c6526a000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', <r7=>0x0, 0x4, 0x9, 0x9, 0x3, 0x48, @dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x751, 0x710, 0x4, 0x4}})
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x264, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7fffffff}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "1d108c8344fc009c4bbd308b1a6ce5b474123a39fccc8b9d81aa56a0257fd9bcfab4fe3542c5fb96400f86e302951139cdcaf17732bb0e0fc6281466ca3204b5bcdcf67e4579afc1c85e4d8c"}, @ETHTOOL_A_BITSET_MASK={0x16, 0x5, "64de152b3be699226861b516261d9ca6e4d3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "5e9a697bd05918d42fd480993e3d17492e325b7d07af435abc892f62d0785ca46767b1b4e9136064decc0aeab76fb4c2a49b5dc143dc98dd0829c93e78b7fe407176acda39e020af01f1f9b5c90118e456e889291968a00b6cf812a239f27bc81e680b78e30bab0bc08af9b22c373a22804ef0cb6b48721bf6c4fc4117ed526a49756b89ee2fcd5775a9cf7c98eecd3957f320f525dd58741157b5ed76a79293d004c442e74fd912aea6130bf300d328f91af93b5c34cd"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x264}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r12, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
shutdown(r12, 0x1)
setsockopt(r12, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)

0s ago: executing program 1 (id=6242):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000240)=0x5, 0x4)
socket(0x26, 0x80000, 0xffffff80)
sendfile(r3, r0, &(0x7f0000000080)=0x2b, 0xded)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0xa, [@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @broadcast, @remote, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @remote]})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x98, 0x368, 0x98, 0x0, 0x98, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x3, 0x1, 0x1}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'veth0_vlan\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x40}, 0x0, 0xc0, 0x1e8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x101, 'system_u:object_r:depmod_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x9, 0x3}}}, {{@ip={@private=0xa010101, @private=0xa010101, 0x0, 0xffffffff, 'nr0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x6c, 0x1, 0x19}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff6, 0x9, 0x3}}}, {{@ip={@broadcast, @empty, 0xff000000, 0xff, 'bridge_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x29, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)

kernel console output (not intermixed with test programs):

9905][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.877801][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.886895][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.911102][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.923748][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.933315][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.940251][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.947557][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.954845][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.961582][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.969509][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.977314][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.984719][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.991493][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  741.999564][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.006750][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.015150][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.027895][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.044954][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.061160][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.068826][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.076322][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.084449][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.092059][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.100434][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.107692][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.115362][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.122436][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.129478][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.138704][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.146148][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.153539][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.181791][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.210816][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.237659][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.262767][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.285632][T22876] nbd: socks must be embedded in a SOCK_ITEM attr
[  742.600927][T22901] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  742.667816][T22901] bond3 (unregistering): Released all slaves
[  742.782668][T22912] veth0: entered promiscuous mode
[  742.797197][T22910] veth0: left promiscuous mode
[  742.987877][T22916] netlink: 'syz.4.4580': attribute type 8 has an invalid length.
[  743.311362][T22937] openvswitch: netlink: Flow key attr not present in new flow.
[  744.051011][T22964] 8021q: adding VLAN 0 to HW filter on device bond4
[  744.187794][T22975] netlink: 'syz.1.4601': attribute type 10 has an invalid length.
[  744.201954][T22975] __nla_validate_parse: 4 callbacks suppressed
[  744.201978][T22975] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.4601'.
[  744.246732][T22977] netlink: 'syz.4.4602': attribute type 13 has an invalid length.
[  744.681170][T22990] netlink: 'syz.4.4606': attribute type 2 has an invalid length.
[  744.710309][T22990] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4606'.
[  744.883267][T22993] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4607'.
[  744.893423][T22995] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4608'.
[  745.140526][T23009] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.4613'.
[  746.014926][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'.
[  746.031191][T23049] netlink: 'syz.4.4626': attribute type 1 has an invalid length.
[  746.041593][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'.
[  746.137028][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4626'.
[  746.167950][T23050] netlink: 'syz.4.4626': attribute type 1 has an invalid length.
[  746.187814][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'.
[  746.998923][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'.
[  747.023393][T23096] netlink: 'syz.4.4639': attribute type 5 has an invalid length.
[  747.050938][T23096] geneve2: entered promiscuous mode
[  747.057487][T23096] geneve2: entered allmulticast mode
[  747.112647][T23099] xt_cgroup: path and classid specified
[  747.171254][T23109] syzkaller1: tun_chr_ioctl cmd 1074025677
[  747.192548][T23109] syzkaller1: linktype set to 823
[  747.218541][T23099] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  747.331776][T23120] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.339640][T23120] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.403490][T23126] delete_channel: no stack
[  747.499688][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  747.511489][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL
[  747.991520][T23148] xfrm0: mtu less than device minimum
[  748.135750][T23152] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000
[  748.136959][T23154] xt_recent: Unsupported userspace flags (000000b1)
[  750.029921][T23099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  750.278020][T23166] __nla_validate_parse: 4 callbacks suppressed
[  750.278043][T23166] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4658'.
[  750.356607][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4659'.
[  750.395511][T23173] veth0_macvtap: left promiscuous mode
[  750.405388][T23175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4661'.
[  750.429699][T23175] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4661'.
[  750.511270][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4662'.
[  750.586268][T23182] IPVS: Scheduler module ip_vs_sip not found
[  750.765605][T23193] syzkaller1: entered promiscuous mode
[  750.782299][T23193] syzkaller1: entered allmulticast mode
[  751.342928][T23223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  751.350248][T23223] IPv6: NLM_F_CREATE should be set when creating new route
[  751.445277][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'.
[  751.457952][   T30] audit: type=1804 audit(1777049729.178:8): pid=23229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4679" name="/newroot/250/cgroup.controllers" dev="tmpfs" ino=1285 res=1 errno=0
[  751.536156][   T30] audit: type=1800 audit(1777049729.178:9): pid=23229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4679" name="cgroup.controllers" dev="tmpfs" ino=1285 res=0 errno=0
[  751.611904][T23238] netlink: 'syz.4.4681': attribute type 21 has an invalid length.
[  751.638850][T23238] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4681'.
[  751.674315][T23238] netlink: 'syz.4.4681': attribute type 5 has an invalid length.
[  751.695375][T23238] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4681'.
[  751.697409][T23241] netlink: 'syz.4.4681': attribute type 32 has an invalid length.
[  751.739439][T23241] netlink: 776 bytes leftover after parsing attributes in process `syz.4.4681'.
[  751.871367][T23245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  751.921902][T23248] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  752.191316][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4682'.
[  752.204348][T23248] bond5 (unregistering): Released all slaves
[  752.527856][T23259] xt_TCPMSS: Only works on TCP SYN packets
[  752.541961][T23259] netlink: 'syz.4.4687': attribute type 1 has an invalid length.
[  752.888996][T23274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  753.000146][T23281] bond0: entered allmulticast mode
[  753.005568][T23281] bond_slave_0: entered allmulticast mode
[  753.029971][T23281] bond_slave_1: entered allmulticast mode
[  753.426063][T23299] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  753.608563][T23305] netlink: 'syz.0.4701': attribute type 22 has an invalid length.
[  753.794907][T23305] netlink: 'syz.0.4701': attribute type 22 has an invalid length.
[  754.333756][T23346] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  754.351893][T23346] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  754.555174][T23356] netlink: 'syz.2.4717': attribute type 2 has an invalid length.
[  754.732478][T23365] bond3: option xmit_hash_policy: invalid value (64)
[  754.743403][T23365] bond3 (unregistering): Released all slaves
[  754.844914][T23381] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  755.086418][T23391] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  755.395251][T23406] __nla_validate_parse: 10 callbacks suppressed
[  755.395274][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'.
[  755.478253][T23406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4734'.
[  755.526206][T23415] netlink: 'syz.1.4736': attribute type 10 has an invalid length.
[  755.562647][T23415] bond0: (slave wlan1): Opening slave failed
[  755.642340][T23426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4739'.
[  755.751267][T23431] xt_CT: No such helper "snmp_trap"
[  755.761626][T23436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4741'.
[  755.888879][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4744'.
[  755.901173][T23442] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  758.312366][T23405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  758.632948][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'.
[  758.770410][T23475] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4752'.
[  759.116828][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4760'.
[  759.244422][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'.
[  759.306287][T23506] netlink: 'syz.1.4762': attribute type 5 has an invalid length.
[  759.597150][T23518] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  759.637858][T23518] bond5 (unregistering): Released all slaves
[  759.717473][T23521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4765'.
[  759.960625][T23540] ieee802154 phy1 wpan1: encryption failed: -22
[  760.193894][T23553] netlink: 'syz.2.4774': attribute type 1 has an invalid length.
[  760.194611][T23554] "syz.3.4776" (23554) uses obsolete ecb(arc4) skcipher
[  760.288641][T23555] syzkaller1: entered promiscuous mode
[  760.302372][T23555] syzkaller1: entered allmulticast mode
[  760.460558][T23570] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  760.521144][T23570] bond4 (unregistering): Released all slaves
[  782.058189][T23589] openvswitch: netlink: Message has 592 unknown bytes.
[  782.076140][T23589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.343677][T23602] __nla_validate_parse: 4 callbacks suppressed
[  782.343700][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4790'.
[  782.366055][T23597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4788'.
[  782.389320][T23601] xt_CT: No such helper "pptp"
[  782.410637][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4790'.
[  782.474173][T23600] syzkaller0: entered promiscuous mode
[  782.480037][T23600] syzkaller0: entered allmulticast mode
[  782.537388][T23610] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  782.550650][T23610] bond3 (unregistering): Released all slaves
[  782.608830][T23612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4791'.
[  782.795060][T23619] netlink: 'syz.1.4794': attribute type 1 has an invalid length.
[  782.803980][T23619] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4794'.
[  782.814445][T23619] netlink: 'syz.1.4794': attribute type 1 has an invalid length.
[  782.825589][T23619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4794'.
[  786.171801][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'.
[  786.192762][T23623] netlink: 'syz.3.4795': attribute type 18 has an invalid length.
[  786.214803][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'.
[  786.277195][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'.
[  786.308145][T23623] netlink: 'syz.3.4795': attribute type 18 has an invalid length.
[  786.353785][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'.
[  786.514907][T23642] team0: Device gtp0 is up. Set it down before adding it as a team port
[  786.787551][T23645] vlan2: entered allmulticast mode
[  786.798911][T23645] bridge5: entered allmulticast mode
[  787.372025][T23684] __nla_validate_parse: 7 callbacks suppressed
[  787.372047][T23684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4813'.
[  787.414057][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4814'.
[  787.478468][T23680] vlan3: entered allmulticast mode
[  787.485190][T23680] bridge6: entered allmulticast mode
[  787.576038][T23690] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4817'.
[  787.714914][T23692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4816'.
[  788.208168][T23707] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4822'.
[  788.222765][T23707] netlink: 'syz.4.4822': attribute type 1 has an invalid length.
[  788.250453][T23707] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4822'.
[  788.349575][T23714] ieee802154 phy1 wpan1: encryption failed: -90
[  788.374709][T23716] ieee802154 phy1 wpan1: encryption failed: -90
[  788.578543][T23732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4828'.
[  788.659823][T23732] ip6gre2: entered allmulticast mode
[  788.735104][T23733] erspan0: left allmulticast mode
[  788.761294][T23733] erspan0: left promiscuous mode
[  788.775240][T23733] bridge3: port 1(erspan0) entered disabled state
[  788.904159][T23742] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode
[  788.990210][T23746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4833'.
[  789.106905][T23751] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  789.554477][T23777] netlink: 'syz.1.4840': attribute type 3 has an invalid length.
[  789.584190][T23777] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4840'.
[  789.777621][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'.
[  789.901172][T23793] vlan5: entered allmulticast mode
[  789.911641][T23793] bridge9: entered allmulticast mode
[  789.934275][T23793] erspan0: left allmulticast mode
[  789.950893][T23793] erspan0: left promiscuous mode
[  789.979668][T23793] bridge3: port 1(erspan0) entered disabled state
[  790.121586][T23805] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  790.137847][T23805] bond5 (unregistering): Released all slaves
[  790.428335][T23817] syzkaller1: entered promiscuous mode
[  790.448374][T23817] syzkaller1: entered allmulticast mode
[  791.101114][T23857] netlink: 'syz.3.4867': attribute type 10 has an invalid length.
[  791.269276][T23868] vlan6: entered allmulticast mode
[  791.282776][T23868] bridge10: entered allmulticast mode
[  791.347968][T23875] sock: sock_timestamping_bind_phc: sock not bind to device
[  791.484613][T23881] xt_hashlimit: size too large, truncated to 1048576
[  791.605489][T23878] vlan5: entered allmulticast mode
[  791.635561][T23878] bridge6: entered allmulticast mode
[  791.660256][T23887] netlink: 'syz.3.4875': attribute type 11 has an invalid length.
[  791.689793][T23887] netlink: 'syz.3.4875': attribute type 83 has an invalid length.
[  792.020597][T23902] openvswitch: netlink: IP tunnel dst address not specified
[  792.044699][T23903] netlink: 'syz.0.4879': attribute type 1 has an invalid length.
[  792.309464][ T1163] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  792.329477][ T1163] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  792.343284][T21045] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  792.376370][T23922] netlink: 'syz.2.4888': attribute type 8 has an invalid length.
[  792.386072][T23920] __nla_validate_parse: 10 callbacks suppressed
[  792.386094][T23920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4887'.
[  792.419190][T23915] nbd: must specify at least one socket
[  792.558177][T23927] vlan6: entered allmulticast mode
[  792.576160][T21045] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  792.579934][T23927] bridge7: entered allmulticast mode
[  792.635425][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'.
[  792.676447][T23933] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4891'.
[  792.755282][T23938] xt_HMARK: spi-set and port-set can't be combined
[  792.822724][T21043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  792.921022][T23944] dvmrp0: entered allmulticast mode
[  793.061489][T23947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4899'.
[  793.396812][T23965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4901'.
[  793.565651][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4904'.
[  793.621903][T23978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4905'.
[  793.746838][T23975] bond5: Invalid ad_actor_system MAC address.
[  793.754154][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4906'.
[  793.789679][T23975] bond5: option ad_actor_system: invalid value (1)
[  793.817448][T23975] bond5 (unregistering): Released all slaves
[  793.945549][T23990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4907'.
[  794.100587][T23984] vlan0: entered allmulticast mode
[  794.117430][T23984] bridge19: entered allmulticast mode
[  794.205301][T23998] netlink: 'syz.4.4909': attribute type 1 has an invalid length.
[  794.803816][T24028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4915'.
[  795.103899][T24038] netlink: 'syz.1.4920': attribute type 1 has an invalid length.
[  795.392991][T24053] vlan1: entered allmulticast mode
[  795.405371][T24053] bridge4: entered allmulticast mode
[  795.556311][T24056] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  795.931544][T24066] 8021q: VLANs not supported on wg0
[  796.181115][T24069] vlan7: entered allmulticast mode
[  796.187362][T24069] bridge12: entered allmulticast mode
[  796.196784][T24069] bridge12: port 1(erspan0) entered blocking state
[  796.206283][T24069] bridge12: port 1(erspan0) entered disabled state
[  796.213548][T24069] erspan0: entered allmulticast mode
[  796.221349][T24069] erspan0: entered promiscuous mode
[  796.228640][T24069] bridge12: port 1(erspan0) entered blocking state
[  796.235386][T24069] bridge12: port 1(erspan0) entered forwarding state
[  796.292371][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  796.484190][T24072] sock: sock_set_timeout: `syz.0.4930' (pid 24072) tries to set negative timeout
[  796.821615][T24090] IPv6: addrconf: prefix option has invalid lifetime
[  796.833519][T24083] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  796.917073][T24083] bond5 (unregistering): Released all slaves
[  797.653955][T24123] netlink: 'syz.1.4944': attribute type 29 has an invalid length.
[  797.697892][T24125] netlink: 'syz.1.4944': attribute type 29 has an invalid length.
[  797.728669][T24124] netlink: 'syz.1.4944': attribute type 29 has an invalid length.
[  798.113606][T24136] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  798.147994][T24136] bond4 (unregistering): Released all slaves
[  798.385982][T24150] __nla_validate_parse: 10 callbacks suppressed
[  798.386006][T24150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4953'.
[  798.389090][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4954'.
[  798.433901][T24154] netlink: 'syz.2.4955': attribute type 39 has an invalid length.
[  798.449533][T24150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4953'.
[  798.515297][T24161] netlink: 'syz.3.4954': attribute type 25 has an invalid length.
[  798.674424][T24152] 8021q: adding VLAN 0 to HW filter on device bond10
[  798.717877][T24152] bond9: (slave bond10): Enslaving as an active interface with an up link
[  798.767610][T24167] netlink: 'syz.1.4956': attribute type 1 has an invalid length.
[  799.213247][T24184] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  799.229242][T24183] netlink: 'syz.0.4961': attribute type 1 has an invalid length.
[  799.249628][T24183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4961'.
[  799.618270][T24196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4957'.
[  799.675323][T24194] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  799.684004][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4966'.
[  799.721171][T24194] bond11 (unregistering): Released all slaves
[  799.874028][T24212] bridge6: port 1(erspan0) entered blocking state
[  799.928898][T24212] bridge6: port 1(erspan0) entered disabled state
[  799.959647][T24212] erspan0: entered allmulticast mode
[  800.025386][T24212] erspan0: entered promiscuous mode
[  800.110916][T24210] vlan4: entered allmulticast mode
[  800.143788][T24210] bridge6: entered allmulticast mode
[  800.424819][T24235] openvswitch: netlink: IP tunnel dst address not specified
[  800.453113][T24236] netlink: 'syz.1.4975': attribute type 10 has an invalid length.
[  800.484008][T24235] netlink: 'syz.1.4975': attribute type 10 has an invalid length.
[  800.511298][T24236] bridge_slave_1: left allmulticast mode
[  800.531416][T24236] bridge_slave_1: left promiscuous mode
[  800.556662][T24236] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.661158][T24236] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  801.083125][T24254] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  801.099323][T24254] bond4 (unregistering): Released all slaves
[  801.142673][T24261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4982'.
[  801.329271][T24261] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4982'.
[  801.474080][T24270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4984'.
[  801.775859][T24276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4987'.
[  802.002503][T24286] vlan7: entered allmulticast mode
[  802.007940][T24286] bridge8: entered allmulticast mode
[  802.018724][T24284] netlink: 'syz.3.4989': attribute type 1 has an invalid length.
[  802.251424][T24293] Cannot find add_set index 65532 as target
[  803.275674][T24334] netlink: 'syz.4.5007': attribute type 29 has an invalid length.
[  803.297303][T24334] netlink: 'syz.4.5007': attribute type 29 has an invalid length.
[  803.381906][T24346] pim6reg: entered allmulticast mode
[  803.405304][T24347] pim6reg: left allmulticast mode
[  803.561612][T24362] netlink: 'syz.1.5016': attribute type 1 has an invalid length.
[  803.611549][T24362] __nla_validate_parse: 10 callbacks suppressed
[  803.611569][T24362] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5016'.
[  803.644417][T24362] NCSI netlink: No device for ifindex 0
[  803.907782][T24388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5024'.
[  803.914353][T24386] netlink: 'syz.3.5023': attribute type 72 has an invalid length.
[  803.939262][T24386] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5023'.
[  803.959618][T24388] 8021q: adding VLAN 0 to HW filter on device bond5
[  803.960097][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5024'.
[  803.978678][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5024'.
[  803.996534][T24392] netlink: 'syz.1.5025': attribute type 1 has an invalid length.
[  804.008712][T24390] 8021q: adding VLAN 0 to HW filter on device bond5
[  804.027633][T24390] 8021q: adding VLAN 0 to HW filter on device bond0
[  804.040486][T24388] netlink: 'syz.0.5024': attribute type 10 has an invalid length.
[  804.051809][T24390] bond5: (slave bond0): making interface the new active one
[  804.081196][T24390] bond5: (slave bond0): Enslaving as an active interface with an up link
[  804.112466][T24392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5025'.
[  804.311546][T24402] SET target dimension over the limit!
[  804.328647][T24402] netlink: 294 bytes leftover after parsing attributes in process `syz.2.5029'.
[  804.343662][T24402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.452665][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  804.524101][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5032'.
[  804.600266][T24412] validate_nla: 1 callbacks suppressed
[  804.600288][T24412] netlink: 'syz.3.5031': attribute type 1 has an invalid length.
[  804.890593][T24426] netlink: 'syz.0.5036': attribute type 72 has an invalid length.
[  804.910185][T24426] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5036'.
[  804.966311][T24439] block nbd2: Unsupported socket: should be TCP or UNIX.
[  804.967056][T24440] netlink: 'syz.3.5039': attribute type 10 has an invalid length.
[  805.046134][T24440] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  805.077029][T24440] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  805.087104][T24440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  805.162947][T24446] bridge7: entered promiscuous mode
[  805.168470][T24446] bridge7: entered allmulticast mode
[  805.234285][T24450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5045'.
[  806.602589][T24516] netlink: 'syz.4.5061': attribute type 2 has an invalid length.
[  807.022661][T24527] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  807.047990][T24527] bond5 (unregistering): Released all slaves
[  807.224740][T24533] vlan8: entered allmulticast mode
[  807.251897][T24533] bridge14: entered allmulticast mode
[  808.536639][T24576] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  808.567145][T24576] bond6 (unregistering): Released all slaves
[  808.696298][T24584] vlan1: entered allmulticast mode
[  808.708410][T24584] bridge21: entered allmulticast mode
[  808.937318][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  808.948724][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL
[  809.087651][T24603] __nla_validate_parse: 9 callbacks suppressed
[  809.087671][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'.
[  809.167378][T24603] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5089'.
[  809.509074][T24620] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  809.535777][T24620] bond4 (unregistering): Released all slaves
[  809.561207][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'.
[  809.584281][T24615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5094'.
[  809.753011][T24625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5097'.
[  809.790732][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5097'.
[  810.180880][T24636] sctp: [Deprecated]: syz.2.5100 (pid 24636) Use of int in maxseg socket option.
[  810.180880][T24636] Use struct sctp_assoc_value instead
[  810.253808][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5100'.
[  810.471193][T24645] syzkaller0: entered promiscuous mode
[  810.490107][T24645] syzkaller0: entered allmulticast mode
[  810.545905][T24645] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  810.596421][T24650] syzkaller1: entered promiscuous mode
[  810.607637][T24650] syzkaller1: entered allmulticast mode
[  810.971463][T24663] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  810.985917][T24663] bond6 (unregistering): Released all slaves
[  811.283568][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5115'.
[  811.407657][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5116'.
[  811.436389][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5116'.
[  812.339433][T24727] vlan4: entered allmulticast mode
[  812.362677][T24727] bridge7: entered allmulticast mode
[  813.797214][T24792] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  814.129119][T24816] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  814.709471][T24831] __nla_validate_parse: 11 callbacks suppressed
[  814.709488][T24831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5156'.
[  816.584859][T24784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  816.594950][T24809] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5151'.
[  816.604402][T24809] netlink: 'syz.2.5151': attribute type 2 has an invalid length.
[  816.849351][T24837] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  816.901623][T24837] bond5 (unregistering): Released all slaves
[  817.027138][T24842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5158'.
[  817.251301][T24852] syzkaller0: entered promiscuous mode
[  817.277959][T24852] syzkaller0: entered allmulticast mode
[  817.369066][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5166'.
[  817.472682][T24872] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5169'.
[  817.571337][T24877] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[  817.579978][T24877] netlink: 680 bytes leftover after parsing attributes in process `syz.1.5170'.
[  817.589791][T24877] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[  817.720289][T24883] netlink: 'syz.2.5173': attribute type 1 has an invalid length.
[  817.726570][T24881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5172'.
[  817.741327][T24883] netlink: 'syz.2.5173': attribute type 1 has an invalid length.
[  817.866084][T24890] netlink: 'syz.3.5175': attribute type 1 has an invalid length.
[  818.138561][T24896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5177'.
[  818.161517][T24895] vxcan1 speed is unknown, defaulting to 1000
[  818.181861][T24897] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  818.199741][T24895] vxcan1 speed is unknown, defaulting to 1000
[  818.208690][T24895] vxcan1 speed is unknown, defaulting to 1000
[  818.621279][T24895] infiniband syz2: set active
[  818.628486][T18608] vxcan1 speed is unknown, defaulting to 1000
[  818.635206][T24895] infiniband syz2: added vxcan1
[  818.682694][T24895] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  818.711669][T24895] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  818.731716][T24895] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  818.797298][T24895] RDS/IB: syz2: added
[  818.803696][T24895] smc: adding ib device syz2 with port count 1
[  818.810185][T24895] smc:    ib device syz2 port 1 has pnetid SYZ1 (user defined)
[  818.821774][T18608] vxcan1 speed is unknown, defaulting to 1000
[  818.830703][T24895] vxcan1 speed is unknown, defaulting to 1000
[  819.071867][T24895] vxcan1 speed is unknown, defaulting to 1000
[  819.109133][T24929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5188'.
[  819.130202][T24929] x_tables: unsorted entry at hook 2
[  819.179854][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5188'.
[  819.289307][T24895] vxcan1 speed is unknown, defaulting to 1000
[  819.687454][T24941] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  819.812312][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  819.867342][T24941] bond6 (unregistering): Released all slaves
[  819.944921][T24895] vxcan1 speed is unknown, defaulting to 1000
[  820.584795][T24967] __nla_validate_parse: 1 callbacks suppressed
[  820.584819][T24967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5199'.
[  820.898244][T24895] vxcan1 speed is unknown, defaulting to 1000
[  820.906820][T24985] xt_time: invalid argument - start or stop time greater than 23:59:59
[  821.035041][T24983] 8021q: adding VLAN 0 to HW filter on device bond5
[  821.049764][T24983] bridge0: port 4(bond5) entered blocking state
[  821.056525][T24983] bridge0: port 4(bond5) entered disabled state
[  821.064132][T24983] bond5: entered allmulticast mode
[  821.073483][T24983] bond5: entered promiscuous mode
[  821.310453][T25001] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  821.341169][T25001] bond6 (unregistering): Released all slaves
[  821.429172][T25003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5207'.
[  821.531514][T24895] vxcan1 speed is unknown, defaulting to 1000
[  821.687132][T25013] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5211'.
[  821.708759][T25013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5211'.
[  821.905783][T25018] x_tables: duplicate entry at hook 1
[  822.119493][T25020] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5213'.
[  822.160447][T25020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5213'.
[  822.397720][T18608] IPVS: starting estimator thread 0...
[  822.512326][T25026] IPVS: using max 28 ests per chain, 67200 per kthread
[  822.679965][T25038] xt_hashlimit: size too large, truncated to 1048576
[  822.747936][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5216'.
[  823.018913][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5220'.
[  823.477698][T25067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5224'.
[  823.527650][T25068] netlink: 'syz.2.5223': attribute type 1 has an invalid length.
[  823.546289][T25067] netlink: 'syz.4.5224': attribute type 1 has an invalid length.
[  823.575508][T25067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5224'.
[  823.612532][T25067] netlink: 'syz.4.5224': attribute type 2 has an invalid length.
[  823.648260][T25067] netlink: 'syz.4.5224': attribute type 2 has an invalid length.
[  823.663160][T25067] netlink: 'syz.4.5224': attribute type 2 has an invalid length.
[  824.140943][T25093] netlink: 'syz.3.5233': attribute type 1 has an invalid length.
[  824.232289][T25107] netlink: 'syz.3.5233': attribute type 1 has an invalid length.
[  824.317776][T25107] netlink: 'syz.3.5233': attribute type 1 has an invalid length.
[  824.471668][T25098] Cannot find set identified by id 3 to match
[  824.881057][T25122] bond0: entered promiscuous mode
[  824.881370][T25129] netlink: 'syz.4.5237': attribute type 25 has an invalid length.
[  824.896203][T25122] bond_slave_0: entered promiscuous mode
[  824.922017][T25122] bond_slave_1: entered promiscuous mode
[  824.969290][T25122] batadv0: entered promiscuous mode
[  824.996545][T25122] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  825.035929][T25122] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  825.068195][T25122] 8021q: adding VLAN 0 to HW filter on device hsr1
[  825.104923][T25122] bond0: left promiscuous mode
[  825.106774][T25139] netlink: 'syz.2.5240': attribute type 4 has an invalid length.
[  825.114064][T25122] bond_slave_0: left promiscuous mode
[  825.137358][T25122] bond_slave_1: left promiscuous mode
[  825.155354][T25122] batadv0: left promiscuous mode
[  825.582723][T25148] 8021q: adding VLAN 0 to HW filter on device bond6
[  825.590613][T25148] bridge0: port 5(bond6) entered blocking state
[  825.598089][T25148] bridge0: port 5(bond6) entered disabled state
[  825.605416][T25148] bond6: entered allmulticast mode
[  825.616112][T25148] bond6: entered promiscuous mode
[  825.647218][T25150] __nla_validate_parse: 10 callbacks suppressed
[  825.647240][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'.
[  825.687888][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5244'.
[  825.723465][ T3512] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  825.744009][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5244'.
[  825.769049][ T3512] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  825.829044][ T3512] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  825.866044][ T3512] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  825.986626][T25159] syzkaller1: entered promiscuous mode
[  826.004402][T25159] syzkaller1: entered allmulticast mode
[  826.086141][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5249'.
[  826.211147][T25178] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5249'.
[  826.368055][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'.
[  826.661123][T25206] 8021q: adding VLAN 0 to HW filter on device bond6
[  826.846269][   T30] audit: type=1107 audit(1777049804.578:10): pid=25216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Æ®¶º(ÿ•ùõŠ›.óœØiªl>·msay´è'
[  826.879866][T25218] x_tables: duplicate underflow at hook 1
[  826.941659][T25225] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  826.958886][T25224] 8021q: VLANs not supported on ip_vti0
[  827.262483][T25234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5264'.
[  827.846689][T25269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  828.040753][T25276] bond12: entered promiscuous mode
[  828.049495][T25276] 8021q: adding VLAN 0 to HW filter on device bond12
[  828.065134][T25285] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  828.130067][T25285] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  828.519216][T25306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5285'.
[  830.893129][T25271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  831.105591][T25318] syzkaller1: entered promiscuous mode
[  831.120098][T25318] syzkaller1: entered allmulticast mode
[  831.321554][T25336] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  831.386267][T25339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5294'.
[  831.417992][T25336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5292'.
[  831.433227][T25339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5294'.
[  831.455392][T25339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5294'.
[  831.667109][T25358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5299'.
[  831.690876][T25360] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  831.916749][T25374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5303'.
[  832.146227][T25349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5296'.
[  832.167903][T25386] xt_hashlimit: size too large, truncated to 1048576
[  832.206550][T25388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'.
[  832.448353][T25398] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  832.538248][T25401] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  832.688692][T25407] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  832.705428][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5311'.
[  832.738768][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5311'.
[  833.774450][T25452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.835509][T25452] syzkaller0: entered promiscuous mode
[  833.841089][T25452] syzkaller0: entered allmulticast mode
[  833.848516][T25452] tipc: Resetting bearer <eth:syzkaller0>
[  833.860680][T25452] tipc: Enabling of bearer <eth:rose0> rejected, already enabled
[  833.910901][T25450] tipc: Resetting bearer <eth:syzkaller0>
[  834.367658][T25482] validate_nla: 5 callbacks suppressed
[  834.367679][T25482] netlink: 'syz.3.5332': attribute type 2 has an invalid length.
[  834.383987][T25482] netlink: 'syz.3.5332': attribute type 1 has an invalid length.
[  834.731887][T25490] FAULT_INJECTION: forcing a failure.
[  834.731887][T25490] name failslab, interval 1, probability 0, space 0, times 0
[  834.745520][T25490] CPU: 1 UID: 0 PID: 25490 Comm: syz.2.5334 Not tainted syzkaller #0 PREEMPT(full) 
[  834.745549][T25490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  834.745561][T25490] Call Trace:
[  834.745569][T25490]  <TASK>
[  834.745576][T25490]  dump_stack_lvl+0xe8/0x150
[  834.745613][T25490]  should_fail_ex+0x412/0x560
[  834.745647][T25490]  should_failslab+0xa8/0x100
[  834.745673][T25490]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  834.745697][T25490]  ? __alloc_skb+0x186/0x7d0
[  834.745715][T25490]  ? __alloc_skb+0x1d0/0x7d0
[  834.745730][T25490]  ? __local_bh_enable_ip+0xd0/0x130
[  834.745763][T25490]  __alloc_skb+0x1d0/0x7d0
[  834.745786][T25490]  netlink_sendmsg+0x5d4/0xb40
[  834.745817][T25490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.745840][T25490]  ? aa_sock_msg_perm+0xf1/0x1b0
[  834.745872][T25490]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  834.745899][T25490]  ____sys_sendmsg+0x972/0x9f0
[  834.745921][T25490]  ? __might_fault+0xaf/0x130
[  834.745948][T25490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  834.745978][T25490]  ? import_iovec+0x73/0xa0
[  834.746004][T25490]  ___sys_sendmsg+0x2a5/0x360
[  834.746023][T25490]  ? __lock_acquire+0x6b5/0x2cf0
[  834.746055][T25490]  ? __pfx____sys_sendmsg+0x10/0x10
[  834.746118][T25490]  ? __fget_files+0x2a/0x420
[  834.746136][T25490]  ? __fget_files+0x3a0/0x420
[  834.746166][T25490]  __x64_sys_sendmsg+0x1bd/0x2a0
[  834.746190][T25490]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  834.746221][T25490]  ? __pfx_ksys_write+0x10/0x10
[  834.746254][T25490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.746275][T25490]  do_syscall_64+0x15f/0xf80
[  834.746301][T25490]  ? trace_irq_disable+0x3b/0x140
[  834.746325][T25490]  ? clear_bhb_loop+0x40/0x90
[  834.746346][T25490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.746363][T25490] RIP: 0033:0x7fb506f9cdd9
[  834.746382][T25490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.746397][T25490] RSP: 002b:00007fb5051f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  834.746417][T25490] RAX: ffffffffffffffda RBX: 00007fb507215fa0 RCX: 00007fb506f9cdd9
[  834.746430][T25490] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003
[  834.746441][T25490] RBP: 00007fb5051f6090 R08: 0000000000000000 R09: 0000000000000000
[  834.746452][T25490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  834.746463][T25490] R13: 00007fb507216038 R14: 00007fb507215fa0 R15: 00007fff3c939148
[  834.746492][T25490]  </TASK>
[  837.906529][T25450] tipc: Disabling bearer <eth:syzkaller0>
[  837.926485][T25482] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  837.946280][T21045] tipc: Node number set to 3758096385
[  838.314597][T25516] netlink: 'syz.4.5341': attribute type 1 has an invalid length.
[  838.997142][T25556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  839.267629][T25566] __nla_validate_parse: 8 callbacks suppressed
[  839.267663][T25566] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5349'.
[  839.321363][T25569] netlink: 'syz.1.5351': attribute type 2 has an invalid length.
[  839.831430][T25594] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  839.878258][T25594] bond3 (unregistering): Released all slaves
[  840.019233][T25600] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  840.425091][T25626] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5364'.
[  840.425240][T25627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5363'.
[  840.462770][T25627] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.5363'.
[  840.509152][T25633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5365'.
[  840.547946][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5364'.
[  840.896379][T25664] netlink: 'syz.1.5370': attribute type 32 has an invalid length.
[  840.916873][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5370'.
[  840.927534][T25657] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  840.991969][T25668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5371'.
[  841.001741][T25666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5370'.
[  841.059051][T25664] bond3: option coupled_control: invalid value (192)
[  841.068393][T25664] bond3 (unregistering): Released all slaves
[  841.110445][T25672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.135043][T25672] batadv0: mtu less than device minimum
[  841.151060][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.165197][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.177234][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.189226][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.201309][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.214800][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.226951][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.239227][T25672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  841.279824][T25685] xt_policy: output policy not valid in PREROUTING and INPUT
[  841.309962][T25672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.323924][T25672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  841.362901][T25672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  841.371592][T25672] batman_adv: batadv0: Interface deactivated: dummy0
[  841.379114][T25672] batman_adv: batadv0: Removing interface: dummy0
[  841.387991][T25672] batman_adv: batadv0: Removing interface: gretap1
[  841.410590][T25688] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  841.430837][T25688] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  841.647731][T25700] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  841.963091][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5383'.
[  842.236031][T25750] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  842.999987][T25766] vxcan1 speed is unknown, defaulting to 1000
[  843.087387][T25789] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  843.512420][T25805] gre0: entered promiscuous mode
[  843.911717][T25827] FAULT_INJECTION: forcing a failure.
[  843.911717][T25827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  843.956672][T25827] CPU: 1 UID: 0 PID: 25827 Comm: syz.4.5414 Not tainted syzkaller #0 PREEMPT(full) 
[  843.956703][T25827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  843.956715][T25827] Call Trace:
[  843.956723][T25827]  <TASK>
[  843.956732][T25827]  dump_stack_lvl+0xe8/0x150
[  843.956770][T25827]  should_fail_ex+0x412/0x560
[  843.956806][T25827]  _copy_to_user+0x31/0xb0
[  843.956834][T25827]  simple_read_from_buffer+0xe1/0x170
[  843.956863][T25827]  proc_fail_nth_read+0x1bb/0x230
[  843.956889][T25827]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  843.956921][T25827]  ? rw_verify_area+0x2a6/0x4d0
[  843.956946][T25827]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  843.956970][T25827]  vfs_read+0x20c/0xa70
[  843.956998][T25827]  ? __pfx___mutex_lock+0x10/0x10
[  843.957028][T25827]  ? __pfx_vfs_read+0x10/0x10
[  843.957054][T25827]  ? __fget_files+0x2a/0x420
[  843.957082][T25827]  ? __fget_files+0x3a0/0x420
[  843.957101][T25827]  ? __fget_files+0x2a/0x420
[  843.957136][T25827]  ksys_read+0x150/0x270
[  843.957163][T25827]  ? __pfx_ksys_read+0x10/0x10
[  843.957196][T25827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.957219][T25827]  do_syscall_64+0x15f/0xf80
[  843.957245][T25827]  ? trace_irq_disable+0x3b/0x140
[  843.957271][T25827]  ? clear_bhb_loop+0x40/0x90
[  843.957297][T25827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.957317][T25827] RIP: 0033:0x7f0f2995d60e
[  843.957337][T25827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  843.957355][T25827] RSP: 002b:00007f0f2a93afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  843.957376][T25827] RAX: ffffffffffffffda RBX: 00007f0f2a93b6c0 RCX: 00007f0f2995d60e
[  843.957391][T25827] RDX: 000000000000000f RSI: 00007f0f2a93b0a0 RDI: 0000000000000004
[  843.957403][T25827] RBP: 00007f0f2a93b090 R08: 0000000000000000 R09: 0000000000000000
[  843.957415][T25827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  843.957427][T25827] R13: 00007f0f29c16038 R14: 00007f0f29c15fa0 R15: 00007ffeeab67138
[  843.957470][T25827]  </TASK>
[  844.460879][T25815] __nla_validate_parse: 4 callbacks suppressed
[  844.460903][T25815] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5410'.
[  844.530662][T25815] vlan0: entered allmulticast mode
[  844.559131][T25815] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode
[  844.951730][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'.
[  844.955564][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5422'.
[  845.263805][T25870] IPv6: NLM_F_CREATE should be specified when creating new route
[  845.272658][T25870] netlink: 'syz.3.5426': attribute type 1 has an invalid length.
[  845.288666][T25867] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  845.302377][T25867] bond7 (unregistering): Released all slaves
[  845.364619][T25865] syzkaller0: entered promiscuous mode
[  845.370220][T25865] syzkaller0: entered allmulticast mode
[  845.381729][ T1097] syzkaller0: tun_net_xmit 70
[  845.580301][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5429'.
[  845.596907][T25880] netlink: 'syz.0.5429': attribute type 1 has an invalid length.
[  845.605879][T25880] netlink: 'syz.0.5429': attribute type 7 has an invalid length.
[  845.635034][T25880] netlink: 'syz.0.5429': attribute type 8 has an invalid length.
[  845.678304][T25880] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5429'.
[  845.691142][T25880] NCSI netlink: No device for ifindex 65584
[  845.691504][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5431'.
[  845.731444][T25889] net_ratelimit: 34 callbacks suppressed
[  845.731464][T25889] bridge_slave_1: mtu less than device minimum
[  845.835252][T25890] vlan2: entered allmulticast mode
[  845.869407][T25890] bridge22: entered allmulticast mode
[  845.884358][T25885] erspan0: left allmulticast mode
[  845.904799][T25885] erspan0: left promiscuous mode
[  845.925334][T25885] bridge1: port 1(erspan0) entered disabled state
[  845.948334][T25885] bridge22: port 1(erspan0) entered blocking state
[  845.978218][T25885] bridge22: port 1(erspan0) entered disabled state
[  845.989374][T25885] erspan0: entered allmulticast mode
[  845.998076][T25885] erspan0: entered promiscuous mode
[  846.055285][T25902] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  846.073573][T25902] bond7 (unregistering): Released all slaves
[  846.439186][T25932] netlink: 'syz.4.5445': attribute type 21 has an invalid length.
[  846.483746][T25939] netlink: 'syz.3.5448': attribute type 1 has an invalid length.
[  846.492732][T25932] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5445'.
[  846.493421][T25933] netlink: 'syz.4.5445': attribute type 21 has an invalid length.
[  846.516398][T25932] netlink: 'syz.4.5445': attribute type 5 has an invalid length.
[  846.529525][T25941] netlink: 'syz.1.5449': attribute type 1 has an invalid length.
[  846.540773][T25932] netlink: 'syz.4.5445': attribute type 6 has an invalid length.
[  846.549576][T25933] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5445'.
[  846.563820][T25932] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5445'.
[  846.658964][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5451'.
[  846.670277][T25954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  846.704436][T25941] bond3: entered promiscuous mode
[  846.725837][T25941] 8021q: adding VLAN 0 to HW filter on device bond3
[  846.738699][T25933] netlink: 'syz.4.5445': attribute type 5 has an invalid length.
[  846.751239][T25933] netlink: 'syz.4.5445': attribute type 6 has an invalid length.
[  846.937402][T25941] dvmrp0: entered allmulticast mode
[  846.987454][T25952] 8021q: adding VLAN 0 to HW filter on device bond3
[  847.000898][T25952] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  847.022862][T25952] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  847.023074][T25971] netlink: 'syz.4.5455': attribute type 1 has an invalid length.
[  847.053523][T25952] bond3: (slave ip6gre1): making interface the new active one
[  847.061171][T25952] ip6gre1: entered promiscuous mode
[  847.075467][T25952] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  847.138831][T25971] bond7: entered promiscuous mode
[  847.146818][T25971] 8021q: adding VLAN 0 to HW filter on device bond7
[  847.224683][T25972] bond7: (slave bridge9): making interface the new active one
[  847.232575][T25972] bridge9: entered promiscuous mode
[  847.239251][T25972] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  847.351138][T25987] ipt_ECN: cannot use operation on non-tcp rule
[  847.896168][T26016] netlink: 'syz.0.5471': attribute type 10 has an invalid length.
[  847.926120][T26016] veth0_macvtap: left promiscuous mode
[  848.243283][T26040] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  848.876032][T26076] bridge_slave_1: entered allmulticast mode
[  849.067641][T26095] SET target dimension over the limit!
[  849.252575][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  849.656496][T26120] 8021q: adding VLAN 0 to HW filter on device bond5
[  849.675279][T26128] xt_hashlimit: size too large, truncated to 1048576
[  849.688518][T26120] __nla_validate_parse: 13 callbacks suppressed
[  849.688540][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'.
[  849.732001][T26120] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  849.760226][T26120] bond5: entered allmulticast mode
[  849.796778][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'.
[  849.808253][T26132] syzkaller0: entered promiscuous mode
[  849.816149][T26132] syzkaller0: entered allmulticast mode
[  849.903391][T26122] macsec1: entered promiscuous mode
[  849.928453][T26122] bridge0: entered promiscuous mode
[  849.938524][T26122] macsec1: entered allmulticast mode
[  849.952663][T26122] bridge0: entered allmulticast mode
[  849.957988][T26144] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5508'.
[  850.031536][T26120] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link
[  850.147365][T26151] pimreg: entered allmulticast mode
[  850.237987][T26151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5510'.
[  850.524035][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5511'.
[  851.098834][T26181] syzkaller0: entered promiscuous mode
[  851.105437][T26181] syzkaller0: entered allmulticast mode
[  851.524154][T26224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5523'.
[  851.641639][T26228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5526'.
[  854.644773][T26205] 8021q: VLANs not supported on gre0
[  854.651032][T26216] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  854.670033][T26224] bridge_slave_1: left allmulticast mode
[  854.676759][T26224] bridge_slave_1: left promiscuous mode
[  854.688466][T26224] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.739960][T26224] bridge_slave_0: left allmulticast mode
[  854.760724][T26224] bridge_slave_0: left promiscuous mode
[  854.776515][T26224] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.935315][T26249] netlink: zone id is out of range
[  854.943551][T26249] netlink: zone id is out of range
[  854.956253][T26249] netlink: zone id is out of range
[  854.971258][T26249] netlink: zone id is out of range
[  854.996082][T26249] netlink: zone id is out of range
[  855.032393][T26249] netlink: zone id is out of range
[  855.037727][T26249] netlink: zone id is out of range
[  855.047364][T26249] netlink: zone id is out of range
[  855.075831][T26249] netlink: zone id is out of range
[  855.115657][T26258] lo: Caught tx_queue_len zero misconfig
[  855.271654][T26263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5537'.
[  855.712558][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5548'.
[  855.774948][ T3512] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c
[  855.788658][T26297] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5547'.
[  855.824865][T26299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5549'.
[  855.837873][T26299] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5549'.
[  855.855313][T26297] syzkaller0: entered promiscuous mode
[  855.861537][T26297] syzkaller0: entered allmulticast mode
[  856.186083][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5555'.
[  856.205163][T26320] bond0: entered promiscuous mode
[  856.210503][T26320] bond_slave_0: entered promiscuous mode
[  856.217106][T26320] bond_slave_1: entered promiscuous mode
[  856.223830][T26320] bridge_slave_1: entered promiscuous mode
[  856.231097][T26320] gretap0: entered promiscuous mode
[  856.238449][T26320] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  856.249030][T26320] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  856.260209][T26320] hsr1: entered promiscuous mode
[  856.268099][T26323] validate_nla: 4 callbacks suppressed
[  856.268119][T26323] netlink: 'syz.2.5553': attribute type 11 has an invalid length.
[  856.315694][T26325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5556'.
[  856.329463][T26325] bond0: Caught tx_queue_len zero misconfig
[  856.384733][T26328] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  856.397707][T26329] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  856.433212][T26283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  857.206766][T26359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'.
[  857.239643][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'.
[  857.775009][T26383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5575'.
[  858.067972][T26398] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  858.107497][T26398] bond6 (unregistering): Released all slaves
[  858.435579][T26423] vlan5: entered allmulticast mode
[  858.444163][T26423] bridge8: entered allmulticast mode
[  858.450701][T26418] erspan0: left allmulticast mode
[  858.486453][T26418] erspan0: left promiscuous mode
[  858.501278][T26418] bridge6: port 1(erspan0) entered disabled state
[  858.540127][T26418] bridge8: port 1(erspan0) entered blocking state
[  858.566686][T26418] bridge8: port 1(erspan0) entered disabled state
[  858.575038][T26418] erspan0: entered allmulticast mode
[  858.583864][T26418] erspan0: entered promiscuous mode
[  858.597993][T26428] netlink: 'syz.3.5587': attribute type 7 has an invalid length.
[  858.811761][T26441] netlink: 'syz.2.5591': attribute type 1 has an invalid length.
[  858.899355][T26441] bond6: entered promiscuous mode
[  858.905582][T26441] 8021q: adding VLAN 0 to HW filter on device bond6
[  858.960468][T26443] tc_dump_action: action bad kind
[  858.978640][T26449] pim6reg527: entered allmulticast mode
[  859.004802][T26441] bond6: (slave bridge17): making interface the new active one
[  859.014227][T26441] bridge17: entered promiscuous mode
[  859.027837][T26441] bond6: (slave bridge17): Enslaving as an active interface with an up link
[  859.059190][T26441] netlink: 'syz.2.5591': attribute type 10 has an invalid length.
[  859.318824][T26466] vlan8: entered allmulticast mode
[  859.327127][T26466] bridge11: entered allmulticast mode
[  859.337470][T26466] bridge11: port 1(erspan0) entered blocking state
[  859.344723][T26466] bridge11: port 1(erspan0) entered disabled state
[  859.351912][T26466] erspan0: entered allmulticast mode
[  859.360481][T26466] erspan0: entered promiscuous mode
[  859.367947][T26466] bridge11: port 1(erspan0) entered blocking state
[  859.374774][T26466] bridge11: port 1(erspan0) entered forwarding state
[  859.440937][T26475] ip6gre0: Caught tx_queue_len zero misconfig
[  859.986985][T26475] netlink: 'syz.1.5602': attribute type 29 has an invalid length.
[  860.011893][T26475] netlink: 'syz.1.5602': attribute type 29 has an invalid length.
[  860.354999][T26500] netlink: 'syz.2.5607': attribute type 9 has an invalid length.
[  860.387308][T26500] __nla_validate_parse: 13 callbacks suppressed
[  860.387329][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5607'.
[  860.414087][T26500] netlink: 'syz.2.5607': attribute type 9 has an invalid length.
[  860.470005][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5607'.
[  860.522811][T26508] syzkaller0: entered promiscuous mode
[  860.552919][T26508] syzkaller0: entered allmulticast mode
[  860.618450][T26515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5613'.
[  860.622604][T26519] net_ratelimit: 135 callbacks suppressed
[  860.622621][T26519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  860.668408][T26519] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5609'.
[  860.730201][T26523] vlan3: entered allmulticast mode
[  860.754017][T26523] bridge0: entered allmulticast mode
[  860.767458][T26515] erspan0: left allmulticast mode
[  860.783340][T26515] erspan0: left promiscuous mode
[  860.800688][T26515] bridge22: port 1(erspan0) entered disabled state
[  860.879230][T26515] bridge0: port 1(erspan0) entered blocking state
[  860.902609][T26515] bridge0: port 1(erspan0) entered disabled state
[  860.912020][T26515] erspan0: entered allmulticast mode
[  860.921495][T26515] erspan0: entered promiscuous mode
[  861.127810][T26537] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5618'.
[  861.572860][T26525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  861.781590][T26559] netlink: 'syz.1.5627': attribute type 4 has an invalid length.
[  861.830780][T26559] netlink: 'syz.1.5627': attribute type 4 has an invalid length.
[  861.879070][T26559] sctp: [Deprecated]: syz.1.5627 (pid 26559) Use of int in max_burst socket option.
[  861.879070][T26559] Use struct sctp_assoc_value instead
[  861.978031][T26566] ip6tnl0: entered promiscuous mode
[  861.998211][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5627'.
[  862.500402][T26591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5636'.
[  862.725450][T26598] netlink: 'syz.0.5639': attribute type 1 has an invalid length.
[  862.746656][T26598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  862.754037][T26598] IPv6: NLM_F_CREATE should be set when creating new route
[  862.801410][T26604] veth0: entered promiscuous mode
[  862.955623][T26612] x_tables: unsorted entry at hook 2
[  863.187164][T26602] veth0: left promiscuous mode
[  863.321432][T26625] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  863.347925][T26625] bond7 (unregistering): Released all slaves
[  863.396331][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5649'.
[  863.709981][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5654'.
[  863.735767][T26649] dvmrp0: left allmulticast mode
[  863.809609][T26651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5656'.
[  864.121363][T26665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  864.411599][T26674] xt_ecn: cannot match TCP bits for non-tcp packets
[  864.412495][T26676] nbd: socks must be embedded in a SOCK_ITEM attr
[  864.677168][T26685] netlink: 'syz.3.5668': attribute type 16 has an invalid length.
[  864.693811][T26685] netlink: 'syz.3.5668': attribute type 17 has an invalid length.
[  864.794444][T26655] veth1: entered promiscuous mode
[  864.801356][T26691] netlink: 'syz.2.5670': attribute type 11 has an invalid length.
[  864.810194][T26655] veth1: entered allmulticast mode
[  864.941277][T26685] lo: left promiscuous mode
[  864.975460][T26685] bridge0: port 1(erspan0) entered blocking state
[  864.982249][T26685] bridge0: port 1(erspan0) entered forwarding state
[  865.007182][T26685] bond0: left allmulticast mode
[  865.024817][T26685] bond_slave_0: left allmulticast mode
[  865.037023][T26685] bond_slave_1: left allmulticast mode
[  865.054479][T26685] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  865.075515][T26685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  865.578342][T26732] __nla_validate_parse: 8 callbacks suppressed
[  865.578366][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5676'.
[  865.726744][T26736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5677'.
[  865.851165][T26736] bond8: entered promiscuous mode
[  865.881998][T26736] 8021q: adding VLAN 0 to HW filter on device bond8
[  866.101160][T26736] 8021q: adding VLAN 0 to HW filter on device bond8
[  866.126626][T26736] bond8: (slave sit1): The slave device specified does not support setting the MAC address
[  866.138148][T26756] netlink: 'syz.0.5681': attribute type 2 has an invalid length.
[  866.167770][T26756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5681'.
[  866.184654][T26736] bond8: (slave sit1): Error -95 calling set_mac_address
[  866.491277][T26770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5685'.
[  866.614464][T26773] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5686'.
[  866.697989][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'.
[  866.825746][T26788] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  866.953020][T26801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5692'.
[  867.163269][T26806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5693'.
[  868.089848][T26850] netlink: 'syz.3.5705': attribute type 4 has an invalid length.
[  868.124503][T26850] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5705'.
[  868.255751][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5707'.
[  868.370837][T26868] xt_policy: output policy not valid in PREROUTING and INPUT
[  868.670725][T26881] netlink: 'syz.1.5712': attribute type 13 has an invalid length.
[  869.315699][T26915] vlan4: entered allmulticast mode
[  869.348287][T26915] bridge23: entered allmulticast mode
[  869.414981][T26911] erspan0: left allmulticast mode
[  869.423802][T26911] erspan0: left promiscuous mode
[  869.429201][T26911] bridge0: port 1(erspan0) entered disabled state
[  869.445298][T26911] bridge23: port 1(erspan0) entered blocking state
[  869.453528][T26911] bridge23: port 1(erspan0) entered disabled state
[  869.460368][T26911] erspan0: entered allmulticast mode
[  869.471558][T26911] erspan0: entered promiscuous mode
[  869.480195][T26911] bridge23: port 1(erspan0) entered blocking state
[  869.486997][T26911] bridge23: port 1(erspan0) entered forwarding state
[  869.854800][T26941] netlink: 'syz.0.5726': attribute type 10 has an invalid length.
[  869.894618][T26941] team0: Device H failed to register rx_handler
[  869.913939][T26947] netlink: 'syz.0.5726': attribute type 10 has an invalid length.
[  870.385038][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  870.405047][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL
[  870.637539][T26976] __nla_validate_parse: 4 callbacks suppressed
[  870.637561][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5733'.
[  870.688951][T26980] ieee802154 phy1 wpan1: encryption failed: -22
[  870.697146][T26978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  870.778326][T26981] vlan6: entered allmulticast mode
[  870.793567][T26981] bridge9: entered allmulticast mode
[  870.799471][T26976] erspan0: left allmulticast mode
[  870.808801][T26976] erspan0: left promiscuous mode
[  870.814885][T26976] bridge8: port 1(erspan0) entered disabled state
[  870.847789][T26976] bridge9: port 1(erspan0) entered blocking state
[  870.857824][T26976] bridge9: port 1(erspan0) entered disabled state
[  870.876967][T26976] erspan0: entered allmulticast mode
[  870.892880][T26976] erspan0: entered promiscuous mode
[  871.207561][T26997] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5739'.
[  871.241580][T26997] bridge_slave_1: default FDB implementation only supports local addresses
[  871.325436][T27013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.374160][T27013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.431745][T27014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.479394][T27014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.537726][T27014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.556363][T27020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5743'.
[  871.558610][T27014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5742'.
[  871.573889][T27029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5743'.
[  872.287307][T27066] vlan10: entered allmulticast mode
[  872.323061][T27066] bridge18: entered allmulticast mode
[  872.338526][T27066] erspan0: left allmulticast mode
[  872.390996][T27066] erspan0: left promiscuous mode
[  872.435274][T27066] bridge12: port 1(erspan0) entered disabled state
[  872.489390][T27066] bridge18: port 1(erspan0) entered blocking state
[  872.524061][T27066] bridge18: port 1(erspan0) entered disabled state
[  872.546141][T27066] erspan0: entered allmulticast mode
[  872.571301][T27066] erspan0: entered promiscuous mode
[  872.593916][T27066] bridge18: port 1(erspan0) entered blocking state
[  872.600728][T27066] bridge18: port 1(erspan0) entered forwarding state
[  872.651985][T27095] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  872.846839][T27091] ipt_REJECT: TCP_RESET invalid for non-tcp
[  872.877436][T27106] netlink: 'syz.2.5761': attribute type 22 has an invalid length.
[  872.913092][T27106] netlink: 'syz.2.5761': attribute type 22 has an invalid length.
[  873.479675][T27142] netlink: 'syz.1.5769': attribute type 1 has an invalid length.
[  873.570964][T27142] 8021q: adding VLAN 0 to HW filter on device bond4
[  873.759621][T27157] vlan5: entered allmulticast mode
[  873.768217][T27159] netlink: 'syz.1.5772': attribute type 16 has an invalid length.
[  873.772889][T27157] bridge24: entered allmulticast mode
[  873.776598][T27159] netlink: 'syz.1.5772': attribute type 17 has an invalid length.
[  873.827797][T27159] bridge9: port 1(erspan0) entered blocking state
[  873.834585][T27159] bridge9: port 1(erspan0) entered forwarding state
[  873.881951][T27159] ip6tnl0: left promiscuous mode
[  873.916269][T27159] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.927223][T27159] 8021q: adding VLAN 0 to HW filter on device team0
[  873.945561][T27159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  873.966498][T27157] erspan0: left allmulticast mode
[  873.977316][T27157] erspan0: left promiscuous mode
[  873.989434][T27157] bridge23: port 1(erspan0) entered disabled state
[  874.020114][T27157] bridge24: port 1(erspan0) entered blocking state
[  874.027525][T27157] bridge24: port 1(erspan0) entered disabled state
[  874.035961][T27157] erspan0: entered allmulticast mode
[  874.048507][T27157] erspan0: entered promiscuous mode
[  874.058540][T27157] bridge24: port 1(erspan0) entered blocking state
[  874.065293][T27157] bridge24: port 1(erspan0) entered forwarding state
[  874.726241][T27197] sit0: entered promiscuous mode
[  874.802978][T27197] netlink: 'syz.1.5780': attribute type 1 has an invalid length.
[  876.310556][T27132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  876.826991][T27244] syzkaller0: entered promiscuous mode
[  876.838085][T27244] syzkaller0: entered allmulticast mode
[  876.896156][T27252] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  876.916910][T27252] bond7 (unregistering): Released all slaves
[  876.977492][T27244] geneve4: entered promiscuous mode
[  876.987194][T27244] geneve4: entered allmulticast mode
[  877.201326][T27266] 8021q: VLANs not supported on gre0
[  877.413895][T27271] __nla_validate_parse: 10 callbacks suppressed
[  877.413936][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5802'.
[  877.451673][T27277] netlink: 'syz.2.5805': attribute type 16 has an invalid length.
[  877.473806][T27277] netlink: 'syz.2.5805': attribute type 17 has an invalid length.
[  877.547641][T27277] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.555069][T27277] bridge0: port 1(bridge_slave_0) entered listening state
[  877.574174][T27282] netlink: 'syz.3.5806': attribute type 32 has an invalid length.
[  877.589031][T27282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5806'.
[  877.601164][T27284] ieee802154 phy1 wpan1: encryption failed: -22
[  877.628419][T27277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  877.662696][T27282] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  878.494912][T27325] syzkaller1: entered promiscuous mode
[  878.515420][T27325] syzkaller1: entered allmulticast mode
[  879.046881][T27304] vxcan1 speed is unknown, defaulting to 1000
[  879.101111][T27345] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  879.101111][T27345] Please contact the netfilter-devel mailing list or update your nftables rules.
[  879.313418][T27352] openvswitch: netlink: Multiple metadata blocks provided
[  882.950337][T27371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  883.018179][T27371] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5825'.
[  883.091852][T27371] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5825'.
[  883.129325][T27371] netlink: 'syz.4.5825': attribute type 5 has an invalid length.
[  883.151671][T27371] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5825'.
[  883.168823][T27382] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5826'.
[  883.424232][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5826'.
[  883.645687][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5826'.
[  883.836048][T27419] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  883.920055][T27382] 8021q: adding VLAN 0 to HW filter on device bond14
[  883.964905][T27423] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5838'.
[  884.005066][T27425] netlink: 'syz.1.5839': attribute type 1 has an invalid length.
[  884.294062][T27425] 8021q: adding VLAN 0 to HW filter on device bond5
[  884.544383][T27443] vlan7: entered promiscuous mode
[  884.860418][T27460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5847'.
[  884.887297][T27463] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5848'.
[  884.897415][T27463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5848'.
[  885.190820][T27481] netlink: 'syz.4.5854': attribute type 21 has an invalid length.
[  885.321064][T27488] netlink: 'syz.1.5856': attribute type 4 has an invalid length.
[  885.510992][T27499] : renamed from veth1_vlan (while UP)
[  885.529503][T27497] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  885.820664][T27514] x_tables: duplicate underflow at hook 3
[  885.851734][T27518] netlink: 'syz.1.5869': attribute type 1 has an invalid length.
[  885.908450][T27521] sctp: [Deprecated]: syz.2.5870 (pid 27521) Use of int in max_burst socket option deprecated.
[  885.908450][T27521] Use struct sctp_assoc_value instead
[  886.015347][T27525] netlink: 'syz.0.5871': attribute type 1 has an invalid length.
[  886.027461][T27525] netlink: 'syz.0.5871': attribute type 2 has an invalid length.
[  886.093655][T27527] ip6tnl0: Caught tx_queue_len zero misconfig
[  886.123889][T27527] netlink: 'syz.1.5872': attribute type 21 has an invalid length.
[  886.741540][T27564] xt_hl: Unknown Hop Limit match mode: 206
[  887.359759][T27606] lo: Caught tx_queue_len zero misconfig
[  887.953510][T27638] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  888.013809][T27638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  888.617406][T27674] __nla_validate_parse: 19 callbacks suppressed
[  888.617429][T27674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5908'.
[  888.632690][T27673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5907'.
[  888.788186][T27676] vlan9: entered allmulticast mode
[  888.794018][T27676] bridge14: entered allmulticast mode
[  888.800518][T27674] erspan0: left allmulticast mode
[  888.807789][T27674] erspan0: left promiscuous mode
[  888.814103][T27674] bridge11: port 1(erspan0) entered disabled state
[  888.874057][T27674] bridge14: port 1(erspan0) entered blocking state
[  888.937724][T27674] bridge14: port 1(erspan0) entered disabled state
[  888.983776][T27674] erspan0: entered allmulticast mode
[  889.019503][T27674] erspan0: entered promiscuous mode
[  889.048680][T27674] bridge14: port 1(erspan0) entered blocking state
[  889.055446][T27674] bridge14: port 1(erspan0) entered forwarding state
[  889.394493][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5916'.
[  889.536518][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5920'.
[  890.066449][T27761] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.177970][T27768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5929'.
[  890.221211][T27770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5929'.
[  890.386834][T27777] netlink: 'syz.4.5930': attribute type 1 has an invalid length.
[  890.416006][T27777] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5930'.
[  890.646454][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5933'.
[  890.674601][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5933'.
[  890.868257][T27803] batadv_slave_0: Caught tx_queue_len zero misconfig
[  890.986509][T27808] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5940'.
[  891.005484][T27808] netlink: 'syz.3.5940': attribute type 1 has an invalid length.
[  891.056970][T27813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  891.158008][T27822] netlink: 'syz.2.5942': attribute type 1 has an invalid length.
[  891.227156][T27822] bond7: entered promiscuous mode
[  891.240789][T27822] 8021q: adding VLAN 0 to HW filter on device bond7
[  891.449188][T27828] bond7: (slave bridge20): making interface the new active one
[  891.478991][T27828] bridge20: entered promiscuous mode
[  891.501620][T27828] bond7: (slave bridge20): Enslaving as an active interface with an up link
[  891.838947][T27860] netlink: 'syz.1.5948': attribute type 3 has an invalid length.
[  891.854181][T27861] netlink: 'syz.3.5949': attribute type 83 has an invalid length.
[  895.890475][T27931] netlink: 'syz.4.5966': attribute type 5 has an invalid length.
[  896.030748][T27938] netlink: 'syz.2.5967': attribute type 3 has an invalid length.
[  896.062374][T27938] __nla_validate_parse: 4 callbacks suppressed
[  896.062397][T27938] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5967'.
[  896.364905][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5969'.
[  896.425425][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5971'.
[  897.296807][T27994] : entered promiscuous mode
[  897.371796][T27989] syzkaller1: entered promiscuous mode
[  897.391327][T27989] syzkaller1: entered allmulticast mode
[  897.411152][T28006] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5984'.
[  897.660964][T28017] netlink: 'syz.3.5987': attribute type 29 has an invalid length.
[  897.670472][T28018] xt_TCPMSS: Only works on TCP SYN packets
[  897.670489][T28017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5987'.
[  897.981692][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'.
[  898.009087][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'.
[  898.039254][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'.
[  898.058759][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'.
[  898.075029][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5991'.
[  898.206882][T28042] bridge0: entered allmulticast mode
[  898.548401][T28068] netlink: 'syz.1.6002': attribute type 10 has an invalid length.
[  898.593283][T28050] syzkaller1: entered promiscuous mode
[  898.600597][T28050] syzkaller1: entered allmulticast mode
[  898.701590][T28068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  898.711172][T28068] batadv0: entered promiscuous mode
[  898.719937][T28068] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  899.974272][T28130] veth0_to_bond: entered allmulticast mode
[  900.051456][T28130] netlink: 'syz.3.6015': attribute type 11 has an invalid length.
[  900.280892][T25457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  900.295517][T25457] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  900.308636][T25457] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  900.320642][T25457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  900.331438][T25457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  900.409498][T28153] netlink: 'syz.3.6017': attribute type 1 has an invalid length.
[  900.442713][T28142] tipc: Resetting bearer <eth:rose0>
[  900.756343][T28163] ip6t_srh: unknown srh match flags  5F28
[  901.193307][T28182] __nla_validate_parse: 139 callbacks suppressed
[  901.193330][T28182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6023'.
[  901.217073][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8 - 0
[  901.235348][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  901.246694][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.301979][T28142] vxcan1 speed is unknown, defaulting to 1000
[  901.476790][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'.
[  901.515749][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8 - 0
[  901.529124][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  901.540485][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.709336][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8 - 0
[  901.746214][T28201] netlink: 'syz.3.6029': attribute type 1 has an invalid length.
[  901.746694][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  901.773911][T28202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6029'.
[  901.793685][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.837234][T28205] netlink: 'syz.4.6030': attribute type 21 has an invalid length.
[  901.861236][T28205] netlink: 'syz.4.6030': attribute type 22 has an invalid length.
[  901.880840][T28205] netlink: 'syz.4.6030': attribute type 23 has an invalid length.
[  901.889900][T28205] netlink: 'syz.4.6030': attribute type 25 has an invalid length.
[  901.890556][T28201] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  901.898127][T28205] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6030'.
[  901.977217][T28207] netlink: 'syz.4.6030': attribute type 21 has an invalid length.
[  902.017617][T28207] netlink: 'syz.4.6030': attribute type 22 has an invalid length.
[  902.038913][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8 - 0
[  902.051671][T28207] netlink: 'syz.4.6030': attribute type 23 has an invalid length.
[  902.060518][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  902.073075][T28219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'.
[  902.073379][T28207] netlink: 'syz.4.6030': attribute type 25 has an invalid length.
[  902.090148][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  902.105787][T28207] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6030'.
[  902.128968][T28217] netlink: 'syz.1.6033': attribute type 1 has an invalid length.
[  902.154876][T28217] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6033'.
[  902.357256][T28226] tap0: tun_chr_ioctl cmd 1074025676
[  902.365642][T28226] tap0: owner set to 0
[  902.375308][ T5855] Bluetooth: hci1: command tx timeout
[  902.451944][T28230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'.
[  902.471930][T28229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6038'.
[  902.498715][T28229] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6038'.
[  902.502711][T28232] syzkaller0: entered promiscuous mode
[  902.515930][T28232] syzkaller0: entered allmulticast mode
[  904.453278][ T5855] Bluetooth: hci1: command tx timeout
[  906.534712][ T5855] Bluetooth: hci1: command tx timeout
[  906.548180][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1
[  906.597842][T28298] 8021q: VLANs not supported on gre0
[  906.627174][ T1154] bridge_slave_1: left allmulticast mode
[  906.651190][ T1154] bridge_slave_1: left promiscuous mode
[  906.680641][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.732747][ T1154] bridge_slave_0: left allmulticast mode
[  906.738498][ T1154] bridge_slave_0: left promiscuous mode
[  906.749919][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.881060][ T1154] erspan0: left allmulticast mode
[  906.887907][ T1154] erspan0: left promiscuous mode
[  906.894500][ T1154] bridge14: port 1(erspan0) entered disabled state
[  906.918816][T28324] __nla_validate_parse: 5 callbacks suppressed
[  906.918835][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'.
[  906.940536][ T1154] pimreg: left allmulticast mode
[  906.950765][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6051'.
[  906.976022][T28324] validate_nla: 5 callbacks suppressed
[  906.976043][T28324] netlink: 'syz.4.6051': attribute type 15 has an invalid length.
[  907.135129][ T1154] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  907.149022][ T1154] bond0 (unregistering): (slave ip6gre1): Releasing backup interface
[  907.321803][ T1154] bond3 (unregistering): (slave gretap1): Releasing active interface
[  907.421429][ T1154] bridge0 (unregistering): left allmulticast mode
[  907.444919][ T1154] bridge0 (unregistering): left promiscuous mode
[  907.668092][ T1154] bond3 (unregistering): (slave bridge5): Releasing active interface
[  908.227626][ T1154] bond1 (unregistering): Released all slaves
[  908.242854][ T1154] bond5 (unregistering): (slave bond0): Releasing active interface
[  908.252472][ T1154] bond0 (unregistering): Released all slaves
[  908.269390][ T1154] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  908.280320][ T1154] bond2 (unregistering): Released all slaves
[  908.304860][ T1154] bond3 (unregistering): Released all slaves
[  908.321867][ T1154] bond4 (unregistering): Released all slaves
[  908.340233][ T1154] bond5 (unregistering): Released all slaves
[  908.356703][ T1154] bond6 (unregistering): Released all slaves
[  908.375499][T28142] chnl_net:caif_netlink_parms(): no params data found
[  908.410302][T28317] bridge26: entered promiscuous mode
[  908.417265][T28317] bridge26: entered allmulticast mode
[  908.461616][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'.
[  908.477326][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6051'.
[  908.504968][T28324] netlink: 'syz.4.6051': attribute type 15 has an invalid length.
[  908.623609][ T5855] Bluetooth: hci1: command tx timeout
[  908.639962][ T1154] tipc: Left network mode
[  908.735019][T28328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6056'.
[  908.836999][T28328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6056'.
[  909.049631][T28142] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.057717][T28142] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.065624][T28142] bridge_slave_0: entered allmulticast mode
[  909.075076][T28142] bridge_slave_0: entered promiscuous mode
[  909.085040][T28142] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.092853][T28142] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.100281][T28142] bridge_slave_1: entered allmulticast mode
[  909.109551][T28142] bridge_slave_1: entered promiscuous mode
[  909.311233][T28142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.367586][T28358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6064'.
[  909.405232][T28358] tipc: Invalid UDP bearer configuration
[  909.405297][T28358] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  909.516811][T28142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  909.640698][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6067'.
[  910.019795][T28142] team0: Port device team_slave_0 added
[  910.045369][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6069'.
[  910.076868][T28142] team0: Port device team_slave_1 added
[  910.083347][T28394] xt_CT: You must specify a L4 protocol and not use inversions on it
[  910.211169][T28398] vlan6: entered allmulticast mode
[  910.227176][T28398] bridge11: entered allmulticast mode
[  910.265968][T28404] bridge11: port 1(erspan0) entered blocking state
[  910.274685][T28401] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6070'.
[  910.286596][T28404] bridge11: port 1(erspan0) entered disabled state
[  910.305814][T28404] erspan0: entered allmulticast mode
[  910.326399][T28404] erspan0: entered promiscuous mode
[  910.339939][T28405] netlink: 'syz.1.6070': attribute type 29 has an invalid length.
[  910.469902][T28407] netlink: 'syz.1.6070': attribute type 29 has an invalid length.
[  910.517756][T28142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.547441][T28142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.652540][T28142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.717058][T28142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.736649][T28142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.797799][T28142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  910.847089][ T5508] 8021q: adding VLAN 0 to HW filter on device eth2
[  911.319949][T28142] hsr_slave_0: entered promiscuous mode
[  911.332324][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  911.362006][T28142] hsr_slave_1: entered promiscuous mode
[  911.405637][T28142] debugfs: 'hsr0' already exists in 'hsr'
[  911.415176][T28142] Cannot create hsr debugfs directory
[  911.500371][ T1154] hsr_slave_0: left promiscuous mode
[  911.507310][ T1154] hsr_slave_1: left promiscuous mode
[  911.514550][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  911.523061][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  911.531052][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  911.540982][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  911.551255][ T1154] H: left allmulticast mode
[  911.557776][ T1154] veth1_macvtap: left promiscuous mode
[  911.564231][ T1154] : left promiscuous mode
[  911.568895][ T1154] veth0_vlan: left promiscuous mode
[  911.644996][ T1154] pim6reg527 (unregistering): left allmulticast mode
[  911.844497][ T1154] team0 (unregistering): Port device team_slave_1 removed
[  911.860111][ T1154] team0 (unregistering): Port device team_slave_0 removed
[  912.211043][T28464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6085'.
[  912.691195][ T1154] IPVS: stop unused estimator thread 0...
[  912.777265][T28489] x_tables: unsorted underflow at hook 3
[  913.148639][T28489] bridge12: entered promiscuous mode
[  913.179394][T28489] bridge12: entered allmulticast mode
[  913.268449][T28509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  914.018351][T28537] xt_hashlimit: size too large, truncated to 1048576
[  914.086456][T28544] openvswitch: netlink: IPv4 tun info is not correct
[  914.088848][T28540] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6100'.
[  914.361307][T28559] netlink: 54 bytes leftover after parsing attributes in process `syz.1.6105'.
[  914.387392][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'.
[  914.416997][T28553] bond8: entered promiscuous mode
[  914.460092][T28562] netlink: 54 bytes leftover after parsing attributes in process `syz.1.6105'.
[  914.516515][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6105'.
[  914.556881][T28569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6107'.
[  914.573534][T28569] netlink: 'syz.2.6107': attribute type 18 has an invalid length.
[  914.586436][T28571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'.
[  914.616175][T28571] x_tables: unsorted underflow at hook 2
[  914.646608][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'.
[  914.737449][T28142] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  914.777271][T28142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  914.799176][T28142] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  914.838962][T28142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  914.871354][T28142] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  914.919843][T28142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  914.938346][T28142] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  914.979598][T28142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  915.161074][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6113'.
[  915.638515][T28142] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.716860][T28142] 8021q: adding VLAN 0 to HW filter on device team0
[  915.768310][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.775678][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.881930][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.889316][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  916.013415][T28646] netlink: 'syz.4.6123': attribute type 16 has an invalid length.
[  916.045617][T28646] netlink: 'syz.4.6123': attribute type 17 has an invalid length.
[  916.103314][T28646] gre0: left promiscuous mode
[  916.119489][T28646] bridge11: port 1(erspan0) entered blocking state
[  916.126392][T28646] bridge11: port 1(erspan0) entered forwarding state
[  916.163815][T28646] syz_tun: left promiscuous mode
[  916.186455][T28620] netlink: 'syz.2.6117': attribute type 16 has an invalid length.
[  916.202642][T28620] netlink: 'syz.2.6117': attribute type 17 has an invalid length.
[  916.226161][T28646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  916.305481][T28620] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.312896][T28620] bridge0: port 1(bridge_slave_0) entered listening state
[  916.384871][T28620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  917.142556][T28680] xt_cgroup: invalid path, errno=-2
[  920.251996][T28642] vxcan1 speed is unknown, defaulting to 1000
[  920.507695][T28669] bridge24: port 1(erspan0) entered disabled state
[  920.533174][T28669] erspan0: left allmulticast mode
[  920.544730][T28669] erspan0: left promiscuous mode
[  920.557066][T28669] bridge24: port 1(erspan0) entered disabled state
[  920.673071][T28713] __nla_validate_parse: 1 callbacks suppressed
[  920.673094][T28713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'.
[  920.946918][T28669] veth0_to_bond: left allmulticast mode
[  920.969519][T28669] bond0: (slave bond_slave_0): Releasing backup interface
[  920.999372][T28669] bond0: (slave bond_slave_1): Releasing backup interface
[  921.040805][T28669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  921.063994][T28669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  921.116549][T28669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  921.171405][T28693] ip6erspan2: entered allmulticast mode
[  921.206669][T21045] vxcan1 speed is unknown, defaulting to 1000
[  921.222793][T21045] syz2: Port: 1 Link DOWN
[  921.246443][T28719] netlink: 716 bytes leftover after parsing attributes in process `syz.3.6135'.
[  921.273397][T21039] vxcan1 speed is unknown, defaulting to 1000
[  921.331102][T28724] FAULT_INJECTION: forcing a failure.
[  921.331102][T28724] name failslab, interval 1, probability 0, space 0, times 0
[  921.335070][T28723] netlink: 'syz.4.6136': attribute type 1 has an invalid length.
[  921.351297][T28724] CPU: 0 UID: 0 PID: 28724 Comm: syz.2.6137 Not tainted syzkaller #0 PREEMPT(full) 
[  921.351326][T28724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  921.351337][T28724] Call Trace:
[  921.351345][T28724]  <TASK>
[  921.351352][T28724]  dump_stack_lvl+0xe8/0x150
[  921.351389][T28724]  should_fail_ex+0x412/0x560
[  921.351423][T28724]  should_failslab+0xa8/0x100
[  921.351447][T28724]  ? skb_clone+0x212/0x3a0
[  921.351469][T28724]  kmem_cache_alloc_noprof+0x87/0x650
[  921.351491][T28724]  ? __netlink_lookup+0xc6/0x8b0
[  921.351517][T28724]  skb_clone+0x212/0x3a0
[  921.351541][T28724]  __netlink_deliver_tap+0x404/0x850
[  921.351572][T28724]  ? netlink_deliver_tap+0x2e/0x1b0
[  921.351593][T28724]  netlink_deliver_tap+0x19c/0x1b0
[  921.351613][T28724]  netlink_unicast+0x730/0x8e0
[  921.351651][T28724]  netlink_sendmsg+0x813/0xb40
[  921.351680][T28724]  ? __pfx_netlink_sendmsg+0x10/0x10
[  921.351703][T28724]  ? aa_sock_msg_perm+0xf1/0x1b0
[  921.351725][T28724]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  921.351750][T28724]  ____sys_sendmsg+0x972/0x9f0
[  921.351770][T28724]  ? __might_fault+0xaf/0x130
[  921.351797][T28724]  ? __pfx_____sys_sendmsg+0x10/0x10
[  921.351827][T28724]  ? import_iovec+0x73/0xa0
[  921.351852][T28724]  ___sys_sendmsg+0x2a5/0x360
[  921.351871][T28724]  ? __lock_acquire+0x6b5/0x2cf0
[  921.351904][T28724]  ? __pfx____sys_sendmsg+0x10/0x10
[  921.351965][T28724]  ? __fget_files+0x2a/0x420
[  921.351990][T28724]  ? __fget_files+0x3a0/0x420
[  921.352020][T28724]  __x64_sys_sendmsg+0x1bd/0x2a0
[  921.352043][T28724]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  921.352072][T28724]  ? __pfx_ksys_write+0x10/0x10
[  921.352104][T28724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.352124][T28724]  do_syscall_64+0x15f/0xf80
[  921.352148][T28724]  ? trace_irq_disable+0x3b/0x140
[  921.352180][T28724]  ? clear_bhb_loop+0x40/0x90
[  921.352203][T28724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.352221][T28724] RIP: 0033:0x7fb506f9cdd9
[  921.352239][T28724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.352255][T28724] RSP: 002b:00007fb5051f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  921.352275][T28724] RAX: ffffffffffffffda RBX: 00007fb507215fa0 RCX: 00007fb506f9cdd9
[  921.352288][T28724] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  921.352300][T28724] RBP: 00007fb5051f6090 R08: 0000000000000000 R09: 0000000000000000
[  921.352311][T28724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  921.352322][T28724] R13: 00007fb507216038 R14: 00007fb507215fa0 R15: 00007fff3c939148
[  921.352353][T28724]  </TASK>
[  921.354075][T28724] netlink: 'syz.2.6137': attribute type 16 has an invalid length.
[  921.394370][T28723] netlink: 'syz.4.6136': attribute type 3 has an invalid length.
[  921.422445][T28724] netlink: 'syz.2.6137': attribute type 17 has an invalid length.
[  921.446253][T28723] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6136'.
[  921.446280][T28723] NCSI netlink: No device for ifindex 813332851
[  921.472867][T28142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  921.508081][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6138'.
[  921.698678][T28724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  921.969656][T28142] veth0_vlan: entered promiscuous mode
[  922.230600][T28142] veth1_vlan: entered promiscuous mode
[  922.239918][T28742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6142'.
[  922.263763][T28748] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6143'.
[  922.460858][T28142] veth0_macvtap: entered promiscuous mode
[  922.504662][T28142] veth1_macvtap: entered promiscuous mode
[  922.599176][T28142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  922.646223][T28142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  922.770211][T28758] netlink: 'syz.3.6147': attribute type 16 has an invalid length.
[  922.794065][  T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  922.804363][T28758] netlink: 'syz.3.6147': attribute type 17 has an invalid length.
[  922.827828][  T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  922.853595][  T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.930946][T28758] 8021q: adding VLAN 0 to HW filter on device bond0
[  922.953972][T28758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  923.004198][  T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.254543][T28778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6151'.
[  924.160556][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.183743][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.347535][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.380384][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.408957][T28808] syzkaller0: entered promiscuous mode
[  924.433599][T28808] syzkaller0: entered allmulticast mode
[  924.497591][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'.
[  924.518976][T28813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6157'.
[  924.602709][T28820] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6157'.
[  924.846953][T28820] bond9 (unregistering): Released all slaves
[  925.703138][T25457] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  925.720345][T25457] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  925.735575][T25457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  925.745284][T25457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  925.759334][T25457] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  926.000780][T28860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6163'.
[  926.042980][T28860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6163'.
[  926.141873][T16486] bond0: (slave syz_tun): Releasing backup interface
[  926.550515][T28873] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  926.646291][T28881] IPVS: Unknown mcast interface: lo
[  927.146707][T28898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6170'.
[  927.209096][T28855] vxcan1 speed is unknown, defaulting to 1000
[  927.281693][T28903] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6172'.
[  927.812777][ T5855] Bluetooth: hci4: command tx timeout
[  927.839953][T28912] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6175'.
[  928.070159][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.086462][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  928.102919][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.161249][T28912] A link change request failed with some changes committed already. Interface 
2
6±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check.
[  928.274324][T28927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6179'.
[  928.305607][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.316816][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  928.337510][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.548520][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.578519][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  928.603929][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.698945][T28947] netlink: 'syz.1.6185': attribute type 15 has an invalid length.
[  928.873287][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.909754][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  928.943883][T28952] x_tables: duplicate underflow at hook 1
[  928.950230][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.428586][  T136] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.523614][T28972] xt_hashlimit: size too large, truncated to 1048576
[  929.541069][T26173] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.642970][T28982] netlink: 'syz.1.6192': attribute type 1 has an invalid length.
[  929.658576][T26173] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.686841][T28855] chnl_net:caif_netlink_parms(): no params data found
[  929.773470][T28982] 8021q: adding VLAN 0 to HW filter on device bond6
[  929.817314][T28986] xt_CONNSECMARK: invalid mode: 0
[  929.856853][   T62] bond6: left allmulticast mode
[  929.864390][   T62] bond6: left promiscuous mode
[  929.870570][   T62] bridge0: port 5(bond6) entered disabled state
[  929.886059][   T62] bond5: left allmulticast mode
[  929.892711][ T5855] Bluetooth: hci4: command tx timeout
[  929.898544][   T62] bond5: left promiscuous mode
[  929.908903][   T62] bridge0: port 4(bond5) entered disabled state
[  929.920029][   T62] batadv1: left allmulticast mode
[  929.926640][   T62] batadv1: left promiscuous mode
[  929.932687][   T62] bridge0: port 3(batadv1) entered disabled state
[  929.951836][   T62] bridge_slave_1: left allmulticast mode
[  929.971753][   T62] bridge_slave_1: left promiscuous mode
[  929.984648][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.023919][   T62] bridge_slave_0: left allmulticast mode
[  930.037851][   T62] bridge_slave_0: left promiscuous mode
[  930.046459][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.107480][   T62] erspan0: left allmulticast mode
[  930.112836][   T62] erspan0: left promiscuous mode
[  930.118148][   T62] bridge11: port 1(erspan0) entered disabled state
[  930.250203][T29004] netlink: 'syz.3.6197': attribute type 16 has an invalid length.
[  930.897897][   T62] bond7 (unregistering): (slave bridge9): Releasing backup interface
[  930.906253][   T62] bridge9 (unregistering): left promiscuous mode
[  931.028668][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  931.040246][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  931.050955][   T62] bond0 (unregistering): Released all slaves
[  931.061508][   T62] bond1 (unregistering): Released all slaves
[  931.076961][   T62] bond2 (unregistering): Released all slaves
[  931.093380][   T62] bond3 (unregistering): Released all slaves
[  931.108094][   T62] bond4 (unregistering): Released all slaves
[  931.124979][   T62] bond5 (unregistering): Released all slaves
[  931.154168][   T62] bond6 (unregistering): Released all slaves
[  931.170904][   T62] bond7 (unregistering): Released all slaves
[  931.187678][   T62] bond8 (unregistering): Released all slaves
[  931.219490][T28984] bond6: (slave geneve4): making interface the new active one
[  931.237949][T28984] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  931.247898][  T136] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  931.413336][   T62] : left promiscuous mode
[  931.568544][   T62] : left promiscuous mode
[  931.580996][T29013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  931.815876][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  931.832793][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  931.847384][ T1315] clip:clip_start_xmit: skb_dst(skb) == NULL
[  931.900398][T29031] netlink: 'syz.3.6203': attribute type 3 has an invalid length.
[  931.909269][T29031] netlink: 'syz.3.6203': attribute type 3 has an invalid length.
[  931.989697][ T5855] Bluetooth: hci4: command tx timeout
[  932.087333][T28855] bridge0: port 1(bridge_slave_0) entered blocking state
[  932.111608][T28855] bridge0: port 1(bridge_slave_0) entered disabled state
[  932.138028][T28855] bridge_slave_0: entered allmulticast mode
[  932.148884][T28855] bridge_slave_0: entered promiscuous mode
[  932.163322][T28855] bridge0: port 2(bridge_slave_1) entered blocking state
[  932.171441][T28855] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.197504][T28855] bridge_slave_1: entered allmulticast mode
[  932.208154][T28855] bridge_slave_1: entered promiscuous mode
[  932.590507][T28855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  932.638628][T28855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  932.972623][T28855] team0: Port device team_slave_0 added
[  933.001783][T28855] team0: Port device team_slave_1 added
[  933.225773][T28855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  933.274140][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  933.337677][T28855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  933.357243][T29082] syz.2.6214: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  933.378119][T28855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  933.385663][T28855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  933.412653][T29082] CPU: 0 UID: 0 PID: 29082 Comm: syz.2.6214 Not tainted syzkaller #0 PREEMPT(full) 
[  933.412683][T29082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  933.412696][T29082] Call Trace:
[  933.412705][T29082]  <TASK>
[  933.412714][T29082]  dump_stack_lvl+0xe8/0x150
[  933.412755][T29082]  warn_alloc+0x249/0x340
[  933.412784][T29082]  ? stack_trace_save+0xa9/0x100
[  933.412813][T29082]  ? __pfx_warn_alloc+0x10/0x10
[  933.412847][T29082]  ? kasan_save_track+0x4f/0x80
[  933.412870][T29082]  ? kasan_save_track+0x3e/0x80
[  933.412891][T29082]  ? __kasan_kmalloc+0x93/0xb0
[  933.412914][T29082]  ? __kmalloc_cache_noprof+0x31c/0x660
[  933.412937][T29082]  ? xskq_create+0x56/0x170
[  933.412962][T29082]  ? xsk_setsockopt+0x54c/0x990
[  933.412983][T29082]  ? do_sock_setsockopt+0x17c/0x1b0
[  933.413004][T29082]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  933.413023][T29082]  ? do_syscall_64+0x15f/0xf80
[  933.413056][T29082]  __vmalloc_node_range_noprof+0x132/0x1750
[  933.413120][T29082]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  933.413163][T29082]  ? __kasan_kmalloc+0x93/0xb0
[  933.413195][T29082]  vmalloc_user_noprof+0xad/0xe0
[  933.413220][T29082]  ? xskq_create+0xbf/0x170
[  933.413247][T29082]  xskq_create+0xbf/0x170
[  933.413275][T29082]  xsk_init_queue+0x8a/0xe0
[  933.413303][T29082]  xsk_setsockopt+0x54c/0x990
[  933.413330][T29082]  ? __pfx_xsk_setsockopt+0x10/0x10
[  933.413354][T29082]  ? __pfx_aa_sk_perm+0x10/0x10
[  933.413391][T29082]  ? aa_sock_opt_perm+0xff/0x1a0
[  933.413417][T29082]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  933.413441][T29082]  ? __pfx_xsk_setsockopt+0x10/0x10
[  933.413466][T29082]  do_sock_setsockopt+0x17c/0x1b0
[  933.413500][T29082]  __x64_sys_setsockopt+0x13d/0x1b0
[  933.413525][T29082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.413549][T29082]  do_syscall_64+0x15f/0xf80
[  933.413575][T29082]  ? trace_irq_disable+0x3b/0x140
[  933.413602][T29082]  ? clear_bhb_loop+0x40/0x90
[  933.413628][T29082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.413649][T29082] RIP: 0033:0x7fb506f9cdd9
[  933.413669][T29082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  933.413687][T29082] RSP: 002b:00007fb5051f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  933.413711][T29082] RAX: ffffffffffffffda RBX: 00007fb507215fa0 RCX: 00007fb506f9cdd9
[  933.413726][T29082] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  933.413739][T29082] RBP: 00007fb507032d69 R08: 0000000000000004 R09: 0000000000000000
[  933.413753][T29082] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  933.413766][T29082] R13: 00007fb507216038 R14: 00007fb507215fa0 R15: 00007fff3c939148
[  933.413801][T29082]  </TASK>
[  933.413823][T29082] Mem-Info:
[  933.489540][T29086] netlink: 'syz.3.6215': attribute type 2 has an invalid length.
[  933.495947][T28855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  933.505348][T29086] netlink: 'syz.3.6215': attribute type 2 has an invalid length.
[  933.517825][T29082] active_anon:6481 inactive_anon:0 isolated_anon:0
[  933.517825][T29082]  active_file:2779 inactive_file:40775 isolated_file:0
[  933.517825][T29082]  unevictable:768 dirty:60 writeback:0
[  933.517825][T29082]  slab_reclaimable:12073 slab_unreclaimable:117021
[  933.517825][T29082]  mapped:29442 shmem:1381 pagetables:3715
[  933.517825][T29082]  sec_pagetables:0 bounce:0
[  933.517825][T29082]  kernel_misc_reclaimable:0
[  933.517825][T29082]  free:1283789 free_pcp:24440 free_cma:0
[  933.517936][T29082] Node 0 active_anon:25924kB inactive_anon:0kB active_file:11116kB inactive_file:162892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80904kB dirty:236kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14048kB pagetables:14740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  933.517993][T29082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  933.518046][T29082] Node 0 DMA free:11216kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:16kB free_cma:0kB
[  933.518109][T29082] lowmem_reserve[]: 0 2491 2491 2491 2491
[  933.518166][T29082] Node 0 DMA32 free:1309528kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25924kB inactive_anon:0kB active_file:11116kB inactive_file:162892kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:39420kB local_pcp:20772kB free_cma:0kB
[  933.518229][T29082] lowmem_reserve[]: 0 0 0 0 0
[  933.518275][T29082] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[  933.579748][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1
[  933.583011][T29082] lowmem_reserve[]: 0 0 0 0 0
[  933.970548][T29082] Node 1 Normal free:3814412kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58312kB local_pcp:28144kB free_cma:0kB
[  934.010918][T29082] lowmem_reserve[]: 0 0 0 0 0
[  934.020114][T29082] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11216kB
[  934.042421][T29082] Node 0 DMA32: 8517*4kB (UME) 7473*8kB (UM) 4398*16kB (UME) 863*32kB (UME) 1171*64kB (UME) 1264*128kB (UME) 941*256kB (UME) 505*512kB (UME) 203*1024kB (U) 85*2048kB (UM) 0*4096kB = 1309980kB
[  934.068882][ T5855] Bluetooth: hci4: command tx timeout
[  934.073331][T29082] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  934.094574][T29082] Node 1 Normal: 0*4kB 11*8kB (UM) 13*16kB (UM) 6*32kB (UM) 5*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 928*4096kB (UM) = 3814440kB
[  934.119245][T29082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  934.130932][T29082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  934.153633][T29082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  934.170198][T29082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  934.183293][T29082] 44931 total pagecache pages
[  934.198469][T29082] 0 pages in swap cache
[  934.203042][T29082] Free swap  = 124996kB
[  934.207428][T29082] Total swap = 124996kB
[  934.211650][T29082] 2097051 pages RAM
[  934.219590][T29082] 0 pages HighMem/MovableOnly
[  934.224603][T29082] 427573 pages reserved
[  934.228859][T29082] 0 pages cma reserved
[  934.364266][T28855] hsr_slave_0: entered promiscuous mode
[  934.390713][T28855] hsr_slave_1: entered promiscuous mode
[  934.408205][T28855] debugfs: 'hsr0' already exists in 'hsr'
[  934.421543][T28855] Cannot create hsr debugfs directory
[  934.788251][T29118] syzkaller0: entered promiscuous mode
[  934.801878][T29118] syzkaller0: entered allmulticast mode
[  935.026740][T29123] IPv6: sit3: Disabled Multicast RS
[  935.053275][T29123] sit3: entered allmulticast mode
[  935.456051][T29136] Cannot find del_set index 49151 as target
[  936.392901][T28855] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.456970][T29176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6233'.
[  936.551729][T29179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6233'.
[  936.701712][   T62] hsr_slave_0: left promiscuous mode
[  936.724987][   T62] veth1_macvtap: left promiscuous mode
[  936.738400][   T62] veth1_vlan: left promiscuous mode
[  936.750159][   T62] veth0_vlan: left promiscuous mode
[  937.029522][   T13] smc: removing ib device syz0
[  937.254658][T18607] syz0: Port: 1 Link DOWN
[  937.319434][   T13] smbdirect: ib_dev[syz0] removed
[  937.371584][T28855] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.484715][ T5508] 8021q: adding VLAN 0 to HW filter on device eth2
[  937.503638][T29193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6235'.
[  937.666033][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6236'.
[  937.724531][T28855] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.870146][T29198] vlan6: entered allmulticast mode
[  937.881065][T29198] bridge27: entered allmulticast mode
[  937.949235][T29193] bridge27: port 1(erspan0) entered blocking state
[  937.958800][T29203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6238'.
[  937.970964][T29193] bridge27: port 1(erspan0) entered disabled state
[  937.979123][T29193] erspan0: entered allmulticast mode
[  938.007558][T29193] erspan0: entered promiscuous mode
[  938.019057][T29193] bridge27: port 1(erspan0) entered blocking state
[  938.025910][T29193] bridge27: port 1(erspan0) entered forwarding state
[  938.038749][T29199] bond0: ARP target 8.4.0.0 is already present
[  938.045474][T29199] bond0: option arp_ip_target: invalid value (1032)
[  938.198400][T28855] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.460913][T29220] bridge_slave_0: default FDB implementation only supports local addresses
[  938.642877][T29225] 
[  938.645281][T29225] ======================================================
[  938.652501][T29225] WARNING: possible circular locking dependency detected
[  938.659546][T29225] syzkaller #0 Not tainted
[  938.664077][T29225] ------------------------------------------------------
[  938.671135][T29225] syz.3.6240/29225 is trying to acquire lock:
[  938.677231][T29225] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  938.686519][T29225] 
[  938.686519][T29225] but task is already holding lock:
[  938.693995][T29225] ffff888082615a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  938.703288][T29225] 
[  938.703288][T29225] which lock already depends on the new lock.
[  938.703288][T29225] 
[  938.713717][T29225] 
[  938.713717][T29225] the existing dependency chain (in reverse order) is:
[  938.722763][T29225] 
[  938.722763][T29225] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  938.730805][T29225]        _raw_spin_lock_bh+0x36/0x50
[  938.736135][T29225]        nr_rt_device_down+0x153/0x860
[  938.741628][T29225]        nr_device_event+0x137/0x150
[  938.746952][T29225]        notifier_call_chain+0x1ad/0x3d0
[  938.752641][T29225]        netif_close_many+0x2ae/0x420
[  938.755139][T28855] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  938.758045][T29225]        netif_close+0x160/0x220
[  938.769699][T29225]        dev_close+0x10a/0x220
[  938.774682][T29225]        bpq_device_event+0x377/0x6a0
[  938.780257][T29225]        notifier_call_chain+0x1ad/0x3d0
[  938.785921][T29225]        __dev_notify_flags+0x16d/0x310
[  938.791498][T29225]        netif_change_flags+0xe8/0x1a0
[  938.796990][T29225]        dev_change_flags+0x130/0x270
[  938.802389][T29225]        dev_ioctl+0x7b4/0x1150
[  938.807254][T29225]        sock_do_ioctl+0x23e/0x320
[  938.812379][T29225]        sock_ioctl+0x5c6/0x7f0
[  938.817254][T29225]        __se_sys_ioctl+0xfc/0x170
[  938.822374][T29225]        do_syscall_64+0x15f/0xf80
[  938.827587][T29225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.834007][T29225] 
[  938.834007][T29225] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  938.841834][T29225]        _raw_spin_lock_bh+0x36/0x50
[  938.847133][T29225]        nr_rt_device_down+0xbe/0x860
[  938.852603][T29225]        nr_device_event+0x137/0x150
[  938.857990][T29225]        notifier_call_chain+0x1ad/0x3d0
[  938.863629][T29225]        netif_close_many+0x2ae/0x420
[  938.869197][T29225]        netif_close+0x160/0x220
[  938.874217][T29225]        dev_close+0x10a/0x220
[  938.879419][T29225]        bpq_device_event+0x377/0x6a0
[  938.884800][T29225]        notifier_call_chain+0x1ad/0x3d0
[  938.890441][T29225]        __dev_notify_flags+0x16d/0x310
[  938.895995][T29225]        netif_change_flags+0xe8/0x1a0
[  938.901485][T29225]        dev_change_flags+0x130/0x270
[  938.906928][T29225]        dev_ioctl+0x7b4/0x1150
[  938.911797][T29225]        sock_do_ioctl+0x23e/0x320
[  938.916919][T29225]        sock_ioctl+0x5c6/0x7f0
[  938.921777][T29225]        __se_sys_ioctl+0xfc/0x170
[  938.926903][T29225]        do_syscall_64+0x15f/0xf80
[  938.932031][T29225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.938454][T29225] 
[  938.938454][T29225] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  938.946465][T29225]        __lock_acquire+0x15a5/0x2cf0
[  938.951852][T29225]        lock_acquire+0x106/0x350
[  938.956887][T29225]        _raw_spin_lock_bh+0x36/0x50
[  938.962181][T29225]        nr_rt_ioctl+0x40c/0xf90
[  938.967127][T29225]        sock_do_ioctl+0x101/0x320
[  938.972245][T29225]        sock_ioctl+0x5c6/0x7f0
[  938.977102][T29225]        __se_sys_ioctl+0xfc/0x170
[  938.982229][T29225]        do_syscall_64+0x15f/0xf80
[  938.987354][T29225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.993786][T29225] 
[  938.993786][T29225] other info that might help us debug this:
[  938.993786][T29225] 
[  939.004017][T29225] Chain exists of:
[  939.004017][T29225]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  939.004017][T29225] 
[  939.017934][T29225]  Possible unsafe locking scenario:
[  939.017934][T29225] 
[  939.025470][T29225]        CPU0                    CPU1
[  939.030887][T29225]        ----                    ----
[  939.036275][T29225]   lock(&nr_node->node_lock);
[  939.041097][T29225]                                lock(nr_node_list_lock);
[  939.048224][T29225]                                lock(&nr_node->node_lock);
[  939.055519][T29225]   lock(nr_neigh_list_lock);
[  939.060202][T29225] 
[  939.060202][T29225]  *** DEADLOCK ***
[  939.060202][T29225] 
[  939.068352][T29225] 2 locks held by syz.3.6240/29225:
[  939.073566][T29225]  #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  939.083090][T29225]  #1: ffff888082615a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  939.092877][T29225] 
[  939.092877][T29225] stack backtrace:
[  939.098800][T29225] CPU: 0 UID: 0 PID: 29225 Comm: syz.3.6240 Not tainted syzkaller #0 PREEMPT(full) 
[  939.098825][T29225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  939.098836][T29225] Call Trace:
[  939.098844][T29225]  <TASK>
[  939.098851][T29225]  dump_stack_lvl+0xe8/0x150
[  939.098882][T29225]  print_circular_bug+0x2e1/0x300
[  939.098904][T29225]  check_noncircular+0x12e/0x150
[  939.098925][T29225]  __lock_acquire+0x15a5/0x2cf0
[  939.098958][T29225]  ? nr_rt_ioctl+0x40c/0xf90
[  939.098973][T29225]  lock_acquire+0x106/0x350
[  939.098996][T29225]  ? nr_rt_ioctl+0x40c/0xf90
[  939.099013][T29225]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  939.099034][T29225]  ? nr_rt_ioctl+0x40c/0xf90
[  939.099049][T29225]  _raw_spin_lock_bh+0x36/0x50
[  939.099070][T29225]  ? nr_rt_ioctl+0x40c/0xf90
[  939.099085][T29225]  nr_rt_ioctl+0x40c/0xf90
[  939.099104][T29225]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  939.099123][T29225]  ? apparmor_capable+0x126/0x170
[  939.099147][T29225]  ? capable+0x88/0xe0
[  939.099172][T29225]  ? nr_ioctl+0x1b1/0x3b0
[  939.099194][T29225]  sock_do_ioctl+0x101/0x320
[  939.099217][T29225]  ? __pfx_sock_do_ioctl+0x10/0x10
[  939.099236][T29225]  ? do_futex+0x395/0x420
[  939.099258][T29225]  sock_ioctl+0x5c6/0x7f0
[  939.099278][T29225]  ? __pfx_sock_ioctl+0x10/0x10
[  939.099298][T29225]  ? __fget_files+0x2a/0x420
[  939.099314][T29225]  ? __fget_files+0x3a0/0x420
[  939.099336][T29225]  ? __fget_files+0x2a/0x420
[  939.099354][T29225]  ? bpf_lsm_file_ioctl+0x9/0x20
[  939.099375][T29225]  ? __pfx_sock_ioctl+0x10/0x10
[  939.099395][T29225]  __se_sys_ioctl+0xfc/0x170
[  939.099416][T29225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.099433][T29225]  do_syscall_64+0x15f/0xf80
[  939.099456][T29225]  ? trace_irq_disable+0x3b/0x140
[  939.099477][T29225]  ? clear_bhb_loop+0x40/0x90
[  939.099495][T29225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.099511][T29225] RIP: 0033:0x7f2cab19cdd9
[  939.099527][T29225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.099542][T29225] RSP: 002b:00007f2cac0f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  939.099561][T29225] RAX: ffffffffffffffda RBX: 00007f2cab416180 RCX: 00007f2cab19cdd9
[  939.099574][T29225] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  939.099585][T29225] RBP: 00007f2cab232d69 R08: 0000000000000000 R09: 0000000000000000
[  939.099596][T29225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  939.099606][T29225] R13: 00007f2cab416218 R14: 00007f2cab416180 R15: 00007ffe44e635e8
[  939.099626][T29225]  </TASK>
[  939.595396][T28855] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  939.603751][T28855] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  939.667993][T28855] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  939.692166][T28855] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  939.703162][T28855] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  939.714896][   T62] IPVS: stop unused estimator thread 0...
[  939.721896][T28855] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  939.766541][T28855] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  939.850978][T28855] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.870029][T28855] 8021q: adding VLAN 0 to HW filter on device team0
[  939.883617][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.890776][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.911875][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.919093][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.967565][T28855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  940.144345][T28855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  940.371450][T28855] veth0_vlan: entered promiscuous mode
[  940.385160][T28855] veth1_vlan: entered promiscuous mode
[  940.420712][T28855] veth0_macvtap: entered promiscuous mode
[  940.431277][T28855] veth1_macvtap: entered promiscuous mode
[  940.448995][T28855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  940.462873][T28855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  940.474226][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  940.483783][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  940.493838][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  940.502953][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  940.530235][T28855] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht'
[  940.551593][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.553529][T28855] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht'
[  940.563230][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  940.588808][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  940.596937][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  947.172524][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  947.179890][    C0] bridge0: topology change detected, propagating