last executing test programs:

6.077207142s ago: executing program 1 (id=4277):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x7, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x20}, [@algo_aead={0x67, 0x12, {{'aegis128l-generic\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x4000000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000000100)=0x14)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8004"], 0x44}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x4c8, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c438264}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bde6cb6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60aaa69c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78cf8480}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b5183c7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e0f850}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f3b8117}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34f05273}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1611506a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xca11f4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f70f57}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x203cdb02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fbf78e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbe55be5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x575eece9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf77ad22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b2e60a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64584da5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a734e89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12d06fb5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b57f00f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e1a81cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x181088b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x718bf674}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51da4289}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6201049}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a59bf2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4855723b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3683aee5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2287922}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e7f878}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d74750e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcc1d091}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f8c6f52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x198, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46d6c868}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42506012}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3278516c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5611920c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2abd87d4}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c2835f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e26511c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21608d35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70344d4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d9bd24b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x747dabee}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29ffffe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f2acd29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67ced236}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42ba7817}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x528fb02d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ae1db1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xee8f956}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30629453}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c2350e1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7a886c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aaa6927}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b4847c2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x225e6e13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65421045}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ae9f01b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x6, 0x2000000, 0x68, @mcast2, @empty, 0x8000, 0x7, 0x9, 0x85f}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x8c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x21, 0x1021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x0, 0x2c, 0x2}]}}}, @IFLA_CARRIER={0x0, 0x21, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000004}, 0x2004c0c0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x8c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x21, 0x1021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x0, 0x2c, 0x2}]}}}, @IFLA_CARRIER={0x0, 0x21, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000004}, 0x2004c0c0)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0)

4.026938839s ago: executing program 0 (id=4285):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000010000009111b2000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004100010029bd7000040000800100000004004880180001801400108005000380f300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB="3d138fe341"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

3.976584663s ago: executing program 0 (id=4286):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7b, 0x43, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)="f8a2ff32", &(0x7f0000000600), 0xe36, r2}, 0x38)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x40000002, 0x3, 0x0, 0x4}}, 0x2e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r4, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

2.986324015s ago: executing program 4 (id=4288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000007010000f8ffffffb70200b60547599d0008000000b700100000008500"/79], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e8d0500"/13, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400018006000100020000000800050000000000"], 0x28}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

2.918113995s ago: executing program 0 (id=4290):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x48880)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x70c74b8ae4ee29de, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x70c74b8ae4ee29de, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa0820460000304000e000062f9078e0000001ac141440944e0100a001880b17815e32060018907804000000070000000100000000000080"], 0x42)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000c80)="bcd73d94694a760e59b34340e3b34e4b6c4b47c505854bd8e146e823e24a45d00fe62070cc1cc011d30e6477179ca833c7054eeb1840e055a9877671c318758f2f41b9fac6a1c11cf61b60d25ca1e54d64d8faeedd53ae45d721419a571344adb5be221c4295ba38136875fcac132c0be2fddc9e41574c39dcf4c3dc806ccfc581e34d7760dfcc0a308350a81ffdac1eed48edfb978f044e3a2181eaf15005bdab35967628ef7e0c39cf9e240b8b87349dc7203f498f752dbaa102d152855c6ba1ef621679fe39d9270aaf5444f48b030ff25ec86a2b9d0213c361c456c5a54928fc339f4ba0117ffbb2b5125d8b2ef509be982e9576a64903b4fd593d094f8bac85945696cedd0b0f23f15d99592b4deac2dad94082fed25164be5dd8911a3ab092c1f2c3ba945f", &(0x7f00000005c0)="d0030e43bc20", 0x800, r8}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000c80)="bcd73d94694a760e59b34340e3b34e4b6c4b47c505854bd8e146e823e24a45d00fe62070cc1cc011d30e6477179ca833c7054eeb1840e055a9877671c318758f2f41b9fac6a1c11cf61b60d25ca1e54d64d8faeedd53ae45d721419a571344adb5be221c4295ba38136875fcac132c0be2fddc9e41574c39dcf4c3dc806ccfc581e34d7760dfcc0a308350a81ffdac1eed48edfb978f044e3a2181eaf15005bdab35967628ef7e0c39cf9e240b8b87349dc7203f498f752dbaa102d152855c6ba1ef621679fe39d9270aaf5444f48b030ff25ec86a2b9d0213c361c456c5a54928fc339f4ba0117ffbb2b5125d8b2ef509be982e9576a64903b4fd593d094f8bac85945696cedd0b0f23f15d99592b4deac2dad94082fed25164be5dd8911a3ab092c1f2c3ba945f", &(0x7f00000005c0)="d0030e43bc20", 0x800, r8}, 0x38)

2.821498126s ago: executing program 1 (id=4291):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x2, 0x7fffffff}, {0x1, 0x10005, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28)
r0 = socket$kcm(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="f8000000160001002bbd7000fddbdf25ac1e0101000000000000000000000000ff0100000000000000000000000000014e2302004e2000002ce6e0203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888)
sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
r4 = socket$kcm(0xf, 0x3, 0x2)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0})
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0d2ca2c50e65191434e7017fb525a866182c967ce1bc45d75cd218303b1dfc6be891858e23c4c49635b498fb6e40d64f3d34a7eff4be632baf42d3d1419a19557ab25c6cec4508a202506b654aa3e9c6afc7b60dd935016e4e09d4bd487ecbcff35d41dfc7c1d2edf8f291bc0d0511890ef953bcf55ceb950620bf5ec442d348358a69c3287f5a30169d56eac387a30762631b8548274555c34779eb13995d3a16d61eaa05a5d95736927c09343134639e0c93e51d2a699ab78aa13021750210f754", 0xc2}, {&(0x7f00000003c0)="5bc87795babc47286d534eb2ac88e04983ec475a954e2ed8ccf82c55c98f88e59cc77d2ae39e14ffdd21f57a4126f1166f898d6ba81106acdb091377098d251ca196b2533c84ab3eff4b40ecc04c53b30fa3925a13e90d7117fd504e87be82c733b3febcb347ccdddb82a3ecbd5d7214161abe0aa4db7800736baae8421b8c1f78e3a2fbd090b980363d695d86af04190306a98cf3cac463d9dee80d72e09919151ee81c461d4e5844280fb21f5a9e418c9240a93cfccbd90fd9ac10e72dfc3a324e253b0bab83", 0xc7}, {&(0x7f0000000540)="7b5a762405a720425975d951a5fa85aa4aa9e61a03bc04d06d9ed27508f2b1eae3b1bed4b947635dc0ddf593a8d181d3fc39732439011d860c7b38ff0ce0db17e371cab659239d50f5473e263f2d6063aba645f4b7eccdb3e50a586243675929bc863139592a00df048618a4b6c9891e25fc3821c834a9109aca13d4eaebdfcd3a5d2731ae7c0f95a9354e86cded0852a0c33a217f89dd98b7d34b31b4737018f14a2378f084cd07a433291a9908cf5da867ef861016e420662c2c6e96eb7a67f83b48b05fa55a", 0xc7}, {&(0x7f0000000740)="21790a816b9c6dbbd9ab5e8d4b4b3288d13d1a772ac4d8e98ee19c80a0718b0e3d331a72f58ede02c96ecd003c0dbe686141bc3c7b71e50ce354fecc0ec5724d7a9be496e65c8d7ed326b6f608", 0x4d}], 0x4}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', <r8=>0x0, 0x8000, 0x20, 0x5, 0x3, {{0xe, 0x4, 0x0, 0x3e, 0x38, 0x66, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x21, 0x0, 0x7, [0x8, 0xd, 0x2, 0x8, 0x7, 0xfffffffc, 0x9]}]}}}}})
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000640)='wg2\x00', 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', r8, 0x7800, 0x700, 0x2, 0x9, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x67, 0x0, 0xd6, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x3c, 0xe3, 0x1, 0xc, [{@local, 0x5073}, {@remote, 0x4}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x8}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@local, 0xb}]}]}}}}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

2.809836967s ago: executing program 2 (id=4292):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, 0x0, 0x20080000)
r8 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000003480)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000000000907740f0000007000000"], 0x10}}], 0x1, 0x8010)
socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd000000080002", @ANYBLOB="08000100"], 0x90}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="d16a7600"], 0x50)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x10081}, 0x0)
preadv(r6, &(0x7f00000020c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/6, 0x6}, {&(0x7f0000001ec0)=""/121, 0x79}, {&(0x7f0000001f40)=""/203, 0xcb}, {&(0x7f0000002040)=""/108, 0x6c}], 0x5, 0x0, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f9ffffff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000001000b7050000080000004608f0ff760800007d9800000000000056080000080000008500000005fbaade680000000000009379d4e19dad99c300"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.751474531s ago: executing program 4 (id=4293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000003300070d00000000fcdbdf25017c00000c00018008000600ac1414bb"], 0x20}}, 0x4010)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004b00)=ANY=[@ANYBLOB="14000000100001000000000000e4ffff0200000a2c0000000b0a010300000000000000000a0000090900010073797a31000000000900020073797a31"], 0xfea8}, 0x1, 0x0, 0x0, 0x40091}, 0x40)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000240), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @private0, 0xfffffffc}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000280)="34000000070000000000000006", 0xd)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.294526584s ago: executing program 1 (id=4295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{r3}, &(0x7f0000001580), &(0x7f00000015c0)='%pK    \x00'}, 0x20)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x1}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000380)=""/40, 0x34, 0x28, 0x0, 0x7}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000000), &(0x7f0000000040)=@udp, 0x2}, 0x20)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r11, 0x3}, 0x18)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x20000880)
sendmsg$nl_generic(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x2, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

2.13990599s ago: executing program 0 (id=4297):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async, rerun: 64)
r3 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64)
r4 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0x40000, {{0xa, 0x4e22, 0x0, @private0, 0x2}}, {{0xa, 0x0, 0x7, @loopback}}}, 0x108) (async, rerun: 64)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
close(r4) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003340)=@newtfilter={0x24, 0x2c, 0x300, 0x70fd2c, 0x25dddbbc, {0x0, 0x0, 0x0, r2, {0x9, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045880}, 0x4880) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', <r6=>0x0, 0x700, 0x7, 0x9000000, 0x9, {{0x11, 0x4, 0x3, 0x25, 0x44, 0x66, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x89, 0xf, "712bfed2452b56fab19e6f5cd5"}, @noop, @ssrr={0x89, 0xf, 0x40, [@multicast2, @loopback, @remote]}, @generic={0x89, 0xe, "9b7c11cf993fa55378576d91"}]}}}}})
bind$packet(r1, &(0x7f00000004c0)={0x11, 0x2, r6, 0x1, 0x2d, 0x6, @broadcast}, 0x14) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)) (async, rerun: 32)
ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) (rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket(0x10, 0x3, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async, rerun: 32)
setsockopt$inet_buf(r8, 0x0, 0x23, 0x0, 0x0) (rerun: 32)

2.082528852s ago: executing program 2 (id=4298):
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000700)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/14], 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000001d00fa000000000000f20008000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3ff, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040000}, 0x810) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0xf8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xfdef) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x8000) (async)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x9c2, 0x2, 0xac7d, 0x1fd, 0x1, 0x1}, 0x1c) (async)
recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/235, 0xeb}], 0x1}, 0x60000100) (async)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000100)=0x3ff, 0x4) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async)
accept4$unix(r2, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x800)

2.081750483s ago: executing program 1 (id=4299):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6c23, 0x0, @empty}, 0x1c)
getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000140)="01154e00010000112233445588fbca010001160c", 0x36, 0x44011, &(0x7f0000000040)={0x11, 0x0, r4, 0x0, 0x0, 0x0}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x60, 0x48, 0x300, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, r4, 0xaf3}, [@IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1020, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="2000000001090108000000000000000000000000090001000200003000000000"], 0x20}}, 0x4000880)

1.687863276s ago: executing program 4 (id=4302):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)={0x14, r0, 0x7, 0x2, 0xffffffff}, 0x14}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x29e1c931, 0x3, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

1.574395344s ago: executing program 4 (id=4303):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2000cc80)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendto$inet(r6, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10)
pipe(0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c45"], 0x14}}, 0x40088c0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000140)=0x4)
read(r3, &(0x7f0000000100)=""/2, 0x2)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000380)=0x5, 0x4)
close(r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000002380)=ANY=[@ANYBLOB="18020000feffffff000006000000000085000000f60000000400000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b92ed9a4310f2663ec139e5a4eb5c2783e9e7f977a22eced9f371c7d0a03b686a1cd729f0c6e7697e702404ac5b1919a2b4c142cb0ccf6b884ee7a83922150a762494d7e965f", @ANYRES64=0x0], 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28)

1.504675754s ago: executing program 0 (id=4304):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001006e657464657673696d0000000f0002006e657464657673696d300000065f663518386efef796ba14007b0e756a2f9612c039cc00"/69], 0x34}}, 0x0)
socket(0x10, 0x803, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=<r7=>r5, @ANYBLOB='&'], 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000c000000000000005b576ace1e7e3e78a6cb453016778e1ee110", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000086000000bf0920000000000055090100000000029500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r11 = socket$inet(0x2, 0x3, 0x8d)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYBLOB="3d6e99f04b16f9c77c6ad62021ba7115edc97e485ed1cbfd7316c49c4c1eac2d73e3a9e80963c3866e0079fc1685e40cba8887944f45b3314c00f7", @ANYRES8=r3, @ANYRES32=0x0, @ANYRES8=r10, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7400018008000300020000001400020067726530000000000000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000000800030000000000140002006d616373656d7665120000000000000008000300000000005800018008000300030000000800030002000000080003000200000014000200766972745f77696669300000000000001400020062617461647630000000000000000000140002a2ff5c3e880073797a6b616c6c65723100000000000028000180080003000000000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r12, @ANYRESHEX=r7], 0x168}, 0x1, 0x0, 0x0, 0x81}, 0x4801)
socket$nl_generic(0x10, 0x3, 0x10)

1.371065989s ago: executing program 3 (id=4305):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)}, 0x7}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x8ff}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000006780)=""/4115, 0x1013}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000002740)=""/84, 0x54}, {&(0x7f0000001500)=""/168, 0xa8}], 0x5}, 0x8ffffe}], 0x7, 0x0, 0x0)

1.23256653s ago: executing program 3 (id=4306):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, 0xb305e06d8ab48223}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4040810)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b", 0x29}, {&(0x7f0000000380)="0b75218c740e6649c06b7d3bc8626b15f90843", 0x13}], 0x2}, 0x30008b08)
socket$unix(0x1, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x400000000010, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x8, 0x80000001}})

1.178837985s ago: executing program 4 (id=4307):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f00000000c0))
setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000000)=0x2, 0x4)
epoll_create1(0x80000)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000100)={0x36, {{0xa, 0x4e24, 0x4, @mcast2, 0x100}}}, 0x88)

1.136471882s ago: executing program 1 (id=4308):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x220, 0x6a9, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.124366105s ago: executing program 4 (id=4309):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, 'w\x00', "bb6710bc8150e4a1a117d7b27caf00", "fbef00", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
sendmsg$kcm(r1, &(0x7f00000049c0)={&(0x7f0000000240)=@llc={0x1a, 0x309, 0xf9, 0xfe, 0x6, 0x0, @multicast}, 0x80, &(0x7f0000004800)=[{&(0x7f0000000540)="ec686934c402805f64fec679683656c65ac945f17906572249eb7090", 0x1c}, {&(0x7f0000000640)="0e33a98ec17dcfae56e6c338125d134aca31208b5dca8331e71ac0e6888018191be3eb632eef624a8a819d15ecac6a31a682cb54cac5c85e66cac6ebc4a85266e91fde2b41f24f2d602e9aa99b24f575c81e7bf58846882a543140409e624bf0b7275328567b9243d72b549c437e8ef65f9e374c08382d48d3cf1da596237423296824b4a11516592aa458ef2e7199c5655b1260c5fe87d0090d105854997723ccf9dad5eaac4bd8e03b2f9dfbab807b07c154926bc4bbf9e52db43ef9e1cc8ee90b84fabd7315826ca4298f1d1ec53d2e5248841a38", 0xd6}, {&(0x7f0000000740)="e5f80eccfa362aa1af62588f90e233fa71e8cb0d7ada04c223c6dcc06b533fc6457c058297af482fc7d9487345118ee9ddc4a17c8419217afe166cd9d259c56e1fb943018b7761f291b242b8fc709e229e613cf585d9432c98968fb2307a6a07ae9b51", 0x63}, {&(0x7f00000007c0)="00ed3c859704db31588ddb3f599a9d8b72f6e3b34dd2a84bd87d6578ecd7d25cb6ee8ea499caefd19624113a59dc89d98bf913423af7453b544a5a703f7f6789da7210017ce0e7d40b8c", 0x4a}, {&(0x7f0000000840)="1168e161d57c44ed1c607ce873b38d8626067e2ee97a8cc46648779ac5898bb2a4de7f0f4ee2209870caf0bbf614bbdd95b12795907179dd5ec7cb1c7d237a6b55c2f275527a326ec297acf60fa1ceb4698a3b435fd1674706fc84c8dc3396287a1247c9f89b9529a8963edd3e329d64792b2a9e1686c1a3c2a12af61ea10238eea0ba0e9ecb20e47b211ea3a9b3678ecb082eda34335a3539d064d2ca8a95c56e55087c3541d011ffbb69977c70f9ef2cb17df62f9401cb54b5b1d9ce057514b9edee105bb78176110b3353a2794cd0f30473", 0xd3}, {&(0x7f0000000940)="7175cba157a2be409d8b4aea1c27e80f1a02644e20b8b1e4f7c3d9f4a3f46ee577712a5990c5d5e7705cebe9992f5c3e65cc41a9453bd552d3237c64ceca80b4a885e06b8ddc160e5c28ab1c7b474d6470150aee72cbcb05ca2a15f0cf3737a10b7713030ec7e74ab0ff5b23a78633c7be82158c0f9eeb9bc8118fcae51bde762fd483d9f1d79b6790fd26024fa09f71312c458ecd8ed5ec8beac2f23613c2d3", 0xa0}, {&(0x7f0000000a00)="f36e1f196dd0990ff9a731606a192d677e9b0f23d3dffb1aba2fa31a23c5de5890a38a47d34385ad91455d2d7db8746e1582c8b7c29962bfa57faa2c979a5fa2e2ef6408643c076a07b53f19f570c237a7f4771e4a0af7ac68351dd834fff5bb22991d31671ac8540c26ee98bc0c4b472466c6c178849f16c24b0eb89a51d2fed4ec42571220ed49b337cf8c05752aa2a4c49774713827f435ea866ce1d569a87202d31715ac6ec007d6c5ae34027a2e2c440a418ffa33fb07d36ad6f1fe3a04dc8596dc065fa6b4ee7bc94b79dc02bc4f57582257", 0xd5}, {&(0x7f0000000b00)="e5fe1a9735449f69ea979c864a6fda79702cbb9822644b34ffc1648a28edb703a531391b2c359774bd289217619f2fc9410184f6e36ce14ac6af6433d44a654a378f38a3da4877f4329a18339e3e35be0c2f811d4d9188750586b22b1588ac0fe8d4a52f94c4", 0x66}, {&(0x7f0000000b80)="dd5efb4eeb1375076e7845c1c043f5e1bf2d96a6c8b53395a6cbc6db983364619e13192083f9986677d4e9f8197b17d9c643d099f5e5d183e75b22f2f2461bacf63050573df3f41f3e805088ac508d686c68b351024d9ec6a966638ed0c9df537d939de986f215e246463ded58e675dcc6a44c63e69f7334a07c651fa9cd1b85ce024bdf1a451d172ebb79f0f362892595367ad4c9399a57e3eaafc3ea075c4c142d4092b37519ff155a58fc028548af256def5a6eeb3e483bad7040a745b7c2dbd873e75198d47eed7e9e8b414086e788f398e18bb42099793926015b80e4588d96afe4d3a689f2bdc300625c5d0404d085b4", 0xf3}, {&(0x7f0000003800)="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", 0x1000}], 0xa, &(0x7f00000048c0)=[{0xa8, 0x10f, 0x2, "570630023a36e388e3d39c247b97b1471f0e031c4958a8819b0e77701c589dc99a18ed24f0442e8480d94c3db5775f7ecf8defcfacf73f07a94d64ca5149bceaaed9f7c33ba01dd4a5459eeef72c3da5ba9370778cb0c2b613a48d66141f05f265706cb72582f27f591b379408ff5dc8dc118d6a4ee27a01841a0068fde3bd279f03557fd7f4a07612b0f7e45d3c06dfa6b731"}, {0x40, 0xac2f7d999bd8f236, 0xe2d5ec98, "8958ffd363f08cb39a355bbc2b88df7e15c7e5f64ac3e69f8d68be274e8bb7b9024c1ecd8c357aeda66707cfb34b"}], 0xe8}, 0x8884)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f117a02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdea}], 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

998.145765ms ago: executing program 2 (id=4310):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r4=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r4, 0x34}, 0x8)

992.91424ms ago: executing program 3 (id=4311):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4) (async)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d75a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461ecabbc95fc15a6ae6ae22b3b1a7f9ecad628d13c4b51ef98df41152f32a75a2", 0x6b}]}, 0x0)

889.153939ms ago: executing program 3 (id=4312):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e001102"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e206b0c95997aa15ba5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e0000002"], 0x190)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x64, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r8}, 0x48)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r9, r8, 0x29}, 0xc)
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, <r12=>0x0}, 0x8)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000004000000000000d1eda4ef5673b53322604415bdb0030018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r14, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68c1}, 0x94)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r15, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

870.854471ms ago: executing program 2 (id=4313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x911, 0x280}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0xffffffffffffff34, 0x9, 0x4}]}}}]}, 0x48}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r1, 0xe, 0x1, 0xd, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40)

729.686508ms ago: executing program 1 (id=4314):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0xffffffff, 0x5, 0xa}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000500))
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r7, 0x5452, &(0x7f0000000840)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a7ab04869600"], 0x20)
r8 = socket$igmp6(0xa, 0x3, 0x2)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000280)=<r12=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f00000002c0)={"9102fb09b95cd846f38d86bd744d83eb", r11, r12, {0x2755, 0x7}, {0x1, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8000000000000000, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000940)=r12)
setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r13)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4008, r5}, 0x18)
syz_emit_ethernet(0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383afffe800eff0000000000000000000000bbff02000000000000000000000000000102009078000005dc608cb02b00002fff00000000040000000000000000000001fe8000000000000000000000000000aa1d000d7168000000"], 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r13, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4040805}, 0x40)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x2}}, {{0x4}, {0x2, 0x0, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000004c0)=[{{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x8)

727.123083ms ago: executing program 2 (id=4315):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
socket$unix(0x1, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
listen(r3, 0xec)
unshare(0x8000400)
pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x1, 0x0, 0x0, 0x800, 0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000)
r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x20048800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="010028bd7000ffdbdf250500000008000900020000000500220000000000060001000400000008000b00020000000500070003000000050012000e000000"], 0x44}}, 0xc010)

594.60343ms ago: executing program 3 (id=4316):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r8 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r9=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0x5, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x0)
write(r7, &(0x7f0000000140)="00008847", 0x4)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

475.929652ms ago: executing program 0 (id=4317):
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0x7, 0xbb, &(0x7f0000000000)=""/187})
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x70, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x840)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='veth0_to_team\x00')
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0x3e}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe04a}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x6c0, 0x400, 0xfffd, 0xffff, 0x6, 0x800, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000814)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001b40)={{r3, &(0x7f0000000500)='(\x00', 0x44002, 0x0, 0x40, &(0x7f0000000580), &(0x7f00000005c0)=0x7f}, 0x5, &(0x7f0000001a80)=[{0x3, 0x5, &(0x7f0000000600)='\x00', &(0x7f0000000640)="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", 0xf00, 0x8}, {0x9e1768728cb3ba01, 0x2, &(0x7f0000001640)='udp:syz1\x00', &(0x7f0000001680)="9507dd87a44ed6e0eedd3d742c3e5ab4edc90b5c8170e40daf0149f0ea293374a775ddeabed825f380913ee88e4f1f673bc0058370e3e70612a153d420605ba36ac02da248cfcd97ad96ddd35308d68dd614839f207e6c500a81590bca9fda464a6dc7b44fb0", 0x66, 0x10}, {0x2, 0x9, &(0x7f0000001740)='\x00', &(0x7f0000001780)="c34d113ff13c2f9b4750a3b45d9df80166ce0c59e2c59a4d608040497ac8792722ed5f9c94db2f01c2e264589608c58589cc0af8bfb307dce680cec4921b6aa3608702b1210d0ee5604c03ec0d40a2fef275b27e75a54dca1cf2a37f1bd695315556b9b41bc720a4b9ed343dc5d62b6ca390eee60754f7f3395373f38bc59ba16a05bbb1625fa44a1c7d349381bc4925cfc3236ff488aea75d7901a7b07a152d8ec9f27dff747d85d3273405212348f01b04f9587934d92d177cd60982ca0371", 0xc0, 0x2}, {0x1, 0x627f, &(0x7f0000001880)='&\x00', &(0x7f00000018c0)}, {0x3, 0x0, &(0x7f00000019c0)='TIPCv2\x00', &(0x7f0000001a00)="5727d1a56d770db0ac519cbcfa14fab74a3c33589cf4c91664bfef9863602f3c27d2dd9a9990c15d2f717687cf742aeef2eceff27848e194d0c99d232a7f792216aea6358913b28d853e104ed43b2275a8257e98b5e6b1159c85df345b313c78ae240b3ea3c2c7c28816818800", 0x6d}]}) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001b40)={{<r5=>r3, &(0x7f0000000500)='(\x00', 0x44002, 0x0, 0x40, &(0x7f0000000580), &(0x7f00000005c0)=0x7f}, 0x5, &(0x7f0000001a80)=[{0x3, 0x5, &(0x7f0000000600)='\x00', &(0x7f0000000640)="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", 0xf00, 0x8}, {0x9e1768728cb3ba01, 0x2, &(0x7f0000001640)='udp:syz1\x00', &(0x7f0000001680)="9507dd87a44ed6e0eedd3d742c3e5ab4edc90b5c8170e40daf0149f0ea293374a775ddeabed825f380913ee88e4f1f673bc0058370e3e70612a153d420605ba36ac02da248cfcd97ad96ddd35308d68dd614839f207e6c500a81590bca9fda464a6dc7b44fb0", 0x66, 0x10}, {0x2, 0x9, &(0x7f0000001740)='\x00', &(0x7f0000001780)="c34d113ff13c2f9b4750a3b45d9df80166ce0c59e2c59a4d608040497ac8792722ed5f9c94db2f01c2e264589608c58589cc0af8bfb307dce680cec4921b6aa3608702b1210d0ee5604c03ec0d40a2fef275b27e75a54dca1cf2a37f1bd695315556b9b41bc720a4b9ed343dc5d62b6ca390eee60754f7f3395373f38bc59ba16a05bbb1625fa44a1c7d349381bc4925cfc3236ff488aea75d7901a7b07a152d8ec9f27dff747d85d3273405212348f01b04f9587934d92d177cd60982ca0371", 0xc0, 0x2}, {0x1, 0x627f, &(0x7f0000001880)='&\x00', &(0x7f00000018c0)}, {0x3, 0x0, &(0x7f00000019c0)='TIPCv2\x00', &(0x7f0000001a00)="5727d1a56d770db0ac519cbcfa14fab74a3c33589cf4c91664bfef9863602f3c27d2dd9a9990c15d2f717687cf742aeef2eceff27848e194d0c99d232a7f792216aea6358913b28d853e104ed43b2275a8257e98b5e6b1159c85df345b313c78ae240b3ea3c2c7c28816818800", 0x6d}]})
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x7, &(0x7f0000001bc0)=""/52, &(0x7f0000001c00)=0x34)
sendmsg$inet6(r5, 0x0, 0x40) (async)
sendmsg$inet6(r5, 0x0, 0x40)
sendmsg$sock(r5, &(0x7f0000002fc0)={&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x0, 0x0, {0xa, 0x4e20, 0x1, @mcast2, 0x4c}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)="c75128a803a347a11b5e34610ae285f9ff8a2ec7dcf831efde8784767e8fc59ed8de6fe4f9a55e4e8fa59a5020db784daefa72a41008e312a0af5a066a7ce4552796e6a9fcc71941cf4368690b666c1a6a69c6e7a44d5e5f4ee364159f8b9d030e1b031d1bc612486eb96f5e5b41d1358018e31603504d3a9289c476c017adfcfd3c89caef832d4164e35c4bc37b4610ec358698c326bc851c6aba57b9b86b7829755e5ab510fba2d3cac48424f8a5cc54bcc4d85b62af49b5885b5026ecfa28d3e0f980e14db21d18c614775b14361bc1f83279b9f4f4f38ef6264685dfd62363dced1109a3ec6d4404f26dbe154ef8950890ffb291724e", 0xf8}], 0x1, &(0x7f0000002f80)=[@mark={{0x14, 0x1, 0x24, 0x24cc}}], 0x18}, 0xc081) (async)
sendmsg$sock(r5, &(0x7f0000002fc0)={&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x0, 0x0, {0xa, 0x4e20, 0x1, @mcast2, 0x4c}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)="c75128a803a347a11b5e34610ae285f9ff8a2ec7dcf831efde8784767e8fc59ed8de6fe4f9a55e4e8fa59a5020db784daefa72a41008e312a0af5a066a7ce4552796e6a9fcc71941cf4368690b666c1a6a69c6e7a44d5e5f4ee364159f8b9d030e1b031d1bc612486eb96f5e5b41d1358018e31603504d3a9289c476c017adfcfd3c89caef832d4164e35c4bc37b4610ec358698c326bc851c6aba57b9b86b7829755e5ab510fba2d3cac48424f8a5cc54bcc4d85b62af49b5885b5026ecfa28d3e0f980e14db21d18c614775b14361bc1f83279b9f4f4f38ef6264685dfd62363dced1109a3ec6d4404f26dbe154ef8950890ffb291724e", 0xf8}], 0x1, &(0x7f0000002f80)=[@mark={{0x14, 0x1, 0x24, 0x24cc}}], 0x18}, 0xc081)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000003000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000003080)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000003100))
ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000003140)={r1, 0x0, 0xfff, 0x2, 0x8, 0x4, [0x8, 0x3, 0x8, 0x4, 0x2, 0x6]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003200)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000003700)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000036c0)={&(0x7f0000003240)={0x78, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x3}, @random="343ed310ed35", @device_a, @device_b, {0x2, 0xaf2}, "", @value={0x4, 0x0, 0x2, 0x0, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0xfff, @from_mac=@device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xe}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x40) (async)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000003700)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000036c0)={&(0x7f0000003240)={0x78, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x3}, @random="343ed310ed35", @device_a, @device_b, {0x2, 0xaf2}, "", @value={0x4, 0x0, 0x2, 0x0, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0xfff, @from_mac=@device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xe}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003940)={{r5}, &(0x7f00000038c0), &(0x7f0000003900)=r5}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0x6, 0x2, &(0x7f0000003740)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000037c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003800)={0x2, 0x4, 0xfffffff6, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003980)=[r5, 0xffffffffffffffff, r5], &(0x7f00000039c0), 0x10, 0x6}, 0x94)
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003d40)={@private2}, 0x0) (async)
getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000003d40)={@private2, <r7=>0x0}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f000000e440)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000e400)={&(0x7f0000003e00)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0xc, 0x4}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xcc84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000000e480)={0x0, 0x7}, &(0x7f000000e4c0)=0x8) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f000000e480)={0x0, 0x7}, &(0x7f000000e4c0)=0x8)
nanosleep(&(0x7f000000e580)={0x77359400}, &(0x7f000000e5c0))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

390.53776ms ago: executing program 2 (id=4318):
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r7, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30)
syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[], 0x0)
syz_genetlink_get_family_id$nl802154(0x0, r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, 0x0, 0x20000000)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000140003002bbd700600dbdf250a019cc8402324c096f85bf75fa65792dd758b9f6ed0453b012a15f1a34b4796d2f7af6a29e9c845e835edb2063906cf2e3321490849cd8db0685a72b77ed25952c450bec38d783560be655adc052126704a9fa5938d9e9d66a4fc485ca734a41ed40a43c5ff5bf5dc5e6878189466e560439c009e169346be2eceff79ade3b403f9d4df388d31be6e20ba6b83d64549a7922e9d5c650046d5f16cbe17176632", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa08000a00010000000800090000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r9 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40)

0s ago: executing program 3 (id=4319):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@delsa={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x34}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x4000009, 0x4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @multicast2}}}})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000002c001a8028000280040001"], 0x54}}, 0x8024)

kernel console output (not intermixed with test programs):

t mode
[  504.546349][T19080] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  504.563736][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  504.564733][T19080] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  504.588268][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  504.670680][T19309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3004'.
[  504.697809][T19080] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  504.712856][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  504.713740][T19080] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  504.741706][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  504.883680][T19080] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.941089][T19080] 8021q: adding VLAN 0 to HW filter on device team0
[  504.964091][T15880] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.964198][T15880] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.004780][T15880] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.004921][T15880] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.005190][T19330] xt_hashlimit: max too large, truncated to 1048576
[  505.005863][T19330] xt_hashlimit: overflow, try lower: 0/0
[  505.365196][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3008'.
[  505.679191][T19353] netlink: 'syz.0.3011': attribute type 4 has an invalid length.
[  505.704727][T19353] netlink: 'syz.0.3011': attribute type 4 has an invalid length.
[  505.744904][T19353] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  506.187681][T19080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.370055][ T5620] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  506.370421][ T5620] Bluetooth: hci2: command 0x0401 tx timeout
[  506.539068][ T5627] Bluetooth: hci5: command tx timeout
[  506.571153][T19371] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3014'.
[  507.388221][T19398] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3020'.
[  507.538546][T19080] veth0_vlan: entered promiscuous mode
[  507.551865][T19080] veth1_vlan: entered promiscuous mode
[  507.601800][T19080] veth0_macvtap: entered promiscuous mode
[  507.622211][T19080] veth1_macvtap: entered promiscuous mode
[  507.671246][T19080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.698904][T19080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.777218][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.831999][ T2354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.832863][ T2354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.832902][ T2354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.904788][T19424] xt_ipcomp: unknown flags 1D
[  507.937054][T19424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3024'.
[  507.992458][T15880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.992480][T15880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.078409][ T7678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.078429][ T7678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.120589][T19426] nbd: socks must be embedded in a SOCK_ITEM attr
[  508.149450][T19426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3025'.
[  508.236873][T19429] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3026'.
[  508.236895][T19429] netlink: 764 bytes leftover after parsing attributes in process `syz.1.3026'.
[  508.236907][T19429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3026'.
[  508.767436][T19440] 
: option downdelay: invalid value (18446744073709547007)
[  508.767526][T19440] 
: option downdelay: allowed values 0 - 2147483647
[  508.800737][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'.
[  508.825719][T19457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3031'.
[  508.937921][T19440] 
 (unregistering): Released all slaves
[  508.954108][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  508.964266][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  508.967229][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  508.993746][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  508.998373][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  509.893564][T19480] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  509.938670][T19490] SET target dimension over the limit!
[  510.023252][T19480] bond13 (unregistering): Released all slaves
[  510.337157][T19458] wg2 speed is unknown, defaulting to 1000
[  510.441965][T19500] syzkaller0: entered promiscuous mode
[  510.441987][T19500] syzkaller0: entered allmulticast mode
[  510.546873][T19509] netlink: 'syz.3.3040': attribute type 1 has an invalid length.
[  511.085548][ T5627] Bluetooth: hci4: command tx timeout
[  511.300163][T19509] 8021q: adding VLAN 0 to HW filter on device bond8
[  511.323284][T19511] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  511.393049][T19512] bridge9: entered promiscuous mode
[  511.410973][T19512] bond8: (slave bridge9): Enslaving as an active interface with an up link
[  511.640267][T19529] set_target_v0_checkentry: 1 callbacks suppressed
[  511.640288][T19529] Cannot find add_set index 0 as target
[  511.694972][T19529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3044'.
[  511.812569][T19529] 8021q: adding VLAN 0 to HW filter on device bond1
[  511.833238][T19535] ip_tables: iptables: counters copy to user failed while replacing table
[  511.936521][T19535] xt_hashlimit: size too large, truncated to 1048576
[  512.353794][T19458] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.353950][T19458] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.354597][T19458] bridge_slave_0: entered allmulticast mode
[  512.357282][T19458] bridge_slave_0: entered promiscuous mode
[  512.360540][T19458] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.360765][T19458] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.360883][T19458] bridge_slave_1: entered allmulticast mode
[  512.362637][T19458] bridge_slave_1: entered promiscuous mode
[  512.404065][T19458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.420612][T19458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.575329][T19458] team0: Port device team_slave_0 added
[  512.589089][T19458] team0: Port device team_slave_1 added
[  512.717498][T19458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.717516][T19458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.717537][T19458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.721154][T19458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.721168][T19458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.721191][T19458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.741186][T19547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  513.165940][ T5627] Bluetooth: hci4: command tx timeout
[  513.189779][T19572] wg2 speed is unknown, defaulting to 1000
[  513.210645][T19458] hsr_slave_0: entered promiscuous mode
[  513.212773][T19458] hsr_slave_1: entered promiscuous mode
[  513.213627][T19458] debugfs: 'hsr0' already exists in 'hsr'
[  513.213645][T19458] Cannot create hsr debugfs directory
[  513.301861][T19578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3053'.
[  513.374276][   T31] audit: type=1804 audit(1790564206.483:9): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3054" name="/newroot/7/cgroup.controllers" dev="tmpfs" ino=53 res=1 errno=0
[  513.374423][   T31] audit: type=1800 audit(1790564206.483:10): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3054" name="cgroup.controllers" dev="tmpfs" ino=53 res=0 errno=0
[  513.631880][T19584] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  514.326361][T19605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3062'.
[  514.326387][T19605] openvswitch: netlink: Flow key attr not present in new flow.
[  514.366069][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'.
[  514.366115][T19608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3063'.
[  514.401778][T19458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.401812][T19458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  514.691456][T19608] geneve2: entered promiscuous mode
[  514.691478][T19608] geneve2: entered allmulticast mode
[  514.951889][T19458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.951923][T19458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  515.073405][T19623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'.
[  515.073441][T19623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3067'.
[  515.256375][ T5620] Bluetooth: hci4: command tx timeout
[  515.341126][T19458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.341161][T19458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  515.516917][T19643] syz_tun: entered allmulticast mode
[  515.537825][T19643] dvmrp8: entered allmulticast mode
[  515.583631][T19458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.583666][T19458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  515.615508][T19641] syz_tun: left allmulticast mode
[  515.644667][T19649] nbd: couldn't find a device at index 0
[  515.654458][T19650] nbd: couldn't find a device at index 0
[  515.885834][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  515.886138][ T5627] Bluetooth: hci2: command 0x0401 tx timeout
[  515.933146][T19658] syzkaller0: entered promiscuous mode
[  515.942999][T19658] syzkaller0: entered allmulticast mode
[  516.162026][T19668] netlink: 'syz.2.3074': attribute type 1 has an invalid length.
[  516.269346][T19668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3074'.
[  516.411140][T19674] netlink: 'syz.3.3076': attribute type 1 has an invalid length.
[  516.411163][T19674] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3076'.
[  516.508498][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3076'.
[  516.508523][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3076'.
[  516.572459][T19458] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  516.599964][T19458] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  516.623253][T19458] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  516.672710][T19458] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  516.674713][T19458] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  516.693809][T19458] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  516.704585][T19458] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  516.791764][T19458] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  517.111785][T19697] SET target dimension over the limit!
[  517.167643][T19702] syzkaller0: entered promiscuous mode
[  517.167662][T19702] syzkaller0: entered allmulticast mode
[  517.308446][T19458] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.326478][ T5620] Bluetooth: hci4: command tx timeout
[  517.406327][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  517.421231][T19458] 8021q: adding VLAN 0 to HW filter on device team0
[  517.487621][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.487728][ T7320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.529727][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.529847][ T7320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.163260][T19729] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  518.384343][T19739] openvswitch: netlink: Flow key attr not present in new flow.
[  518.553136][T19744] IPVS: set_ctl: invalid protocol: 26 100.1.1.2:20001
[  518.978096][T19768] ip_tables: iptables: counters copy to user failed while replacing table
[  519.512475][T19458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.688900][T19458] veth0_vlan: entered promiscuous mode
[  519.747669][T19458] veth1_vlan: entered promiscuous mode
[  519.931517][T19458] veth0_macvtap: entered promiscuous mode
[  519.947936][T19458] veth1_macvtap: entered promiscuous mode
[  519.963710][T19458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.991507][T19458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.025793][ T7674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.025847][ T7674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.025879][ T7674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.025909][ T7674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.297152][T19798] openvswitch: netlink: Key 6 has unexpected len 3 expected 2
[  520.421743][T15889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.421764][T15889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.650770][ T9462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.650792][ T9462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.854467][T19814] xt_REDIRECT: bad rangesize 26624.
[  521.036992][T19819] __nla_validate_parse: 4 callbacks suppressed
[  521.037011][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'.
[  521.037046][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'.
[  521.154354][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3113'.
[  521.154411][T19819] netlink: 'syz.0.3112': attribute type 1 has an invalid length.
[  521.425053][T19832] openvswitch: netlink: Key 6 has unexpected len 5 expected 2
[  521.628091][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  521.636094][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  521.648606][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  521.662346][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  521.672641][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  521.815992][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'.
[  522.384373][T19841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'.
[  522.384399][T19841] nbd: device at index 64 is going down
[  522.753279][T15797] udevd[15797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  522.809819][T19850] 8021q: adding VLAN 0 to HW filter on device bond13
[  522.844381][T15797] udevd[15797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  523.262908][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3122'.
[  523.263259][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3122'.
[  523.424393][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'.
[  523.531574][T19873] netlink: zone id is out of range
[  523.531590][T19873] netlink: zone id is out of range
[  523.531598][T19873] netlink: zone id is out of range
[  523.531604][T19873] netlink: zone id is out of range
[  523.531611][T19873] netlink: zone id is out of range
[  523.531620][T19873] netlink: zone id is out of range
[  523.531629][T19873] netlink: zone id is out of range
[  523.531637][T19873] netlink: zone id is out of range
[  523.531643][T19873] netlink: zone id is out of range
[  523.531651][T19873] netlink: zone id is out of range
[  523.585062][ T9462] .`: (slave netdevsim1): Releasing backup interface
[  523.725523][ T5627] Bluetooth: hci0: command tx timeout
[  523.842411][T19833] wg2 speed is unknown, defaulting to 1000
[  523.890605][T19888] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001
[  523.919357][T19878] wg2 speed is unknown, defaulting to 1000
[  524.474627][T19895] wg2 speed is unknown, defaulting to 1000
[  525.023811][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'.
[  525.173173][ T9462] bridge_slave_1: left allmulticast mode
[  525.173215][ T9462] bridge_slave_1: left promiscuous mode
[  525.176290][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.220109][ T9462] bridge_slave_0: left allmulticast mode
[  525.220134][ T9462] bridge_slave_0: left promiscuous mode
[  525.221465][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.285638][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'.
[  525.351183][ T9462] dvmrp0: left allmulticast mode
[  525.807106][ T5627] Bluetooth: hci0: command tx timeout
[  525.970259][ T9462] bond3 (unregistering): (slave gretap4): Releasing backup interface
[  526.105304][ T9462] team0: Port device bridge3 removed
[  526.159894][ T9462] bond8 (unregistering): (slave bridge9): Releasing backup interface
[  526.164543][ T9462] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.183015][ T9462] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.183892][ T9462] .` (unregistering): Released all slaves
[  526.193803][ T9462] bond1 (unregistering): Released all slaves
[  526.213846][ T9462] bond0 (unregistering): Released all slaves
[  526.225715][ T9462] bond2 (unregistering): Released all slaves
[  526.242195][ T9462] bond3 (unregistering): (slave bond4): Releasing backup interface
[  526.243170][ T9462] bond3 (unregistering): Released all slaves
[  526.267592][ T9462] bond4 (unregistering): Released all slaves
[  526.284535][ T9462] bond5 (unregistering): (slave wireguard2): Releasing backup interface
[  526.284551][ T9462] wireguard2: left promiscuous mode
[  526.307725][ T9462] bond5 (unregistering): Released all slaves
[  526.322617][ T9462] bond6 (unregistering): Released all slaves
[  526.337274][ T9462] bond7 (unregistering): Released all slaves
[  526.359161][ T9462] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  526.360747][ T9462] bond8 (unregistering): Released all slaves
[  526.663259][ T9462] tipc: Left network mode
[  526.812064][T19978] netlink: 'syz.1.3138': attribute type 1 has an invalid length.
[  526.812084][T19978] __nla_validate_parse: 1 callbacks suppressed
[  526.812095][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3138'.
[  526.817931][T19978] x_tables: duplicate underflow at hook 2
[  527.617078][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'.
[  527.887297][ T5627] Bluetooth: hci0: command tx timeout
[  527.962013][T19833] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.962143][T19833] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.962310][T19833] bridge_slave_0: entered allmulticast mode
[  528.002102][T19833] bridge_slave_0: entered promiscuous mode
[  528.019853][T19833] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.019956][T19833] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.020111][T19833] bridge_slave_1: entered allmulticast mode
[  528.038201][T19833] bridge_slave_1: entered promiscuous mode
[  528.570114][T19833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.590221][T19833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.741228][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  528.744984][T20052] syzkaller0: entered promiscuous mode
[  528.745014][T20052] syzkaller0: entered allmulticast mode
[  528.801133][T19833] team0: Port device team_slave_0 added
[  528.811034][T19833] team0: Port device team_slave_1 added
[  528.897702][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3155'.
[  528.897724][T20052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3155'.
[  529.272235][T19833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.272252][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.272274][T19833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.274308][T19833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.274321][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.274343][T19833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.449415][T20075] syzkaller0: entered promiscuous mode
[  529.449437][T20075] syzkaller0: entered allmulticast mode
[  529.629828][T19833] hsr_slave_0: entered promiscuous mode
[  529.632407][T19833] hsr_slave_1: entered promiscuous mode
[  529.638322][T19833] debugfs: 'hsr0' already exists in 'hsr'
[  529.638341][T19833] Cannot create hsr debugfs directory
[  529.698588][T20081] Bluetooth: MGMT ver 1.23
[  529.966299][ T5627] Bluetooth: hci0: command tx timeout
[  530.414253][T20119] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  530.655068][T20125] netlink: 'syz.1.3170': attribute type 4 has an invalid length.
[  530.674157][T20129] FAULT_INJECTION: forcing a failure.
[  530.674157][T20129] name failslab, interval 1, probability 0, space 0, times 0
[  530.674187][T20129] CPU: 0 UID: 0 PID: 20129 Comm: syz.0.3171 Not tainted syzkaller #0 PREEMPT(full) 
[  530.674207][T20129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  530.674219][T20129] Call Trace:
[  530.674227][T20129]  <TASK>
[  530.674235][T20129]  dump_stack_lvl+0xe8/0x150
[  530.674270][T20129]  should_fail_ex+0x410/0x560
[  530.674298][T20129]  ? __alloc_skb+0x1db/0x7a0
[  530.674325][T20129]  should_failslab+0xa8/0x100
[  530.674351][T20129]  ? __alloc_skb+0x1db/0x7a0
[  530.674369][T20129]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  530.674397][T20129]  ? __alloc_skb+0x18d/0x7a0
[  530.674420][T20129]  ? __alloc_skb+0x1db/0x7a0
[  530.674448][T20129]  __alloc_skb+0x1db/0x7a0
[  530.674475][T20129]  alloc_skb_with_frags+0xc6/0x760
[  530.674504][T20129]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  530.674532][T20129]  sock_alloc_send_pskb+0x878/0x990
[  530.674567][T20129]  ? lockdep_hardirqs_on+0x7b/0x110
[  530.674605][T20129]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  530.674636][T20129]  ? aa_file_perm+0x18b/0x15f0
[  530.674664][T20129]  ? aa_sk_perm+0x713/0x900
[  530.674689][T20129]  hci_sock_sendmsg+0x20b/0xfb0
[  530.674832][T20129]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  530.674856][T20129]  ? apparmor_socket_sendmsg+0x98/0x360
[  530.674882][T20129]  ? lock_acquire+0x115/0x350
[  530.674902][T20129]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  530.674918][T20129]  sock_sendmsg_nosec+0x13a/0x180
[  530.674939][T20129]  sock_write_iter+0x2de/0x3e0
[  530.674959][T20129]  ? __pfx_sock_write_iter+0x10/0x10
[  530.674982][T20129]  ? bpf_lsm_file_permission+0x9/0x20
[  530.675004][T20129]  ? security_file_permission+0x75/0x260
[  530.675070][T20129]  vfs_write+0x612/0xba0
[  530.675113][T20129]  ? __pfx_vfs_write+0x10/0x10
[  530.675149][T20129]  ? __fget_files+0x2a/0x420
[  530.675183][T20129]  ksys_write+0x150/0x270
[  530.675212][T20129]  ? __pfx_ksys_write+0x10/0x10
[  530.675245][T20129]  do_syscall_64+0x166/0x520
[  530.675268][T20129]  ? trace_irq_disable+0x3b/0x140
[  530.675285][T20129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.675303][T20129]  ? clear_bhb_loop+0x70/0xc0
[  530.675325][T20129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.675341][T20129] RIP: 0033:0x7fb69bf9e159
[  530.675358][T20129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.675372][T20129] RSP: 002b:00007fb69cea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  530.675393][T20129] RAX: ffffffffffffffda RBX: 00007fb69c225fa0 RCX: 00007fb69bf9e159
[  530.675406][T20129] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005
[  530.675418][T20129] RBP: 00007fb69cea4090 R08: 0000000000000000 R09: 0000000000000000
[  530.675429][T20129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.675440][T20129] R13: 00007fb69c226038 R14: 00007fb69c225fa0 R15: 00007ffef2ce0db8
[  530.675469][T20129]  </TASK>
[  530.872426][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  531.077991][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'.
[  531.217310][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'.
[  531.253603][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'.
[  531.523163][T20163] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3175'.
[  532.445206][ T9462] C: left promiscuous mode
[  532.452466][ T9462] hsr_slave_0: left promiscuous mode
[  532.453737][ T9462] hsr_slave_1: left promiscuous mode
[  532.760917][ T9462] team0 (unregistering): Port device team_slave_1 removed
[  533.056276][T15880] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  533.058339][T15881] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  533.058423][T15881] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  533.058453][T15881] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.017763][ T9462] IPVS: stop unused estimator thread 0...
[  534.294459][T20171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  534.344629][T19833] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  534.412952][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  534.413863][T19833] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  534.455146][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  534.474456][T19833] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  534.532141][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  534.553716][T19833] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  534.641099][T19833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  535.006227][T20261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3189'.
[  535.006272][T20261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3189'.
[  535.081187][T20269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'.
[  535.187557][T19833] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.338411][T19833] 8021q: adding VLAN 0 to HW filter on device team0
[  535.374490][  T173] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.374595][  T173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.438914][  T173] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.439048][  T173] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.500075][T20279] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  535.675896][T20284] net_ratelimit: 500 callbacks suppressed
[  535.675917][T20284] openvswitch: netlink: Flow actions attr not present in new flow.
[  535.776055][T20288] bridge0: port 1(syz_tun) entered blocking state
[  535.776165][T20288] bridge0: port 1(syz_tun) entered disabled state
[  535.776299][T20288] syz_tun: entered allmulticast mode
[  535.781937][T20288] syz_tun: entered promiscuous mode
[  535.786836][T20284] syzkaller1: entered promiscuous mode
[  535.786856][T20284] syzkaller1: entered allmulticast mode
[  535.848315][T20291] FAULT_INJECTION: forcing a failure.
[  535.848315][T20291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.848347][T20291] CPU: 0 UID: 0 PID: 20291 Comm: syz.4.3194 Not tainted syzkaller #0 PREEMPT(full) 
[  535.848367][T20291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  535.848378][T20291] Call Trace:
[  535.848386][T20291]  <TASK>
[  535.848394][T20291]  dump_stack_lvl+0xe8/0x150
[  535.848425][T20291]  should_fail_ex+0x410/0x560
[  535.848454][T20291]  _copy_from_iter+0x1d3/0x1660
[  535.848494][T20291]  ? __pfx__copy_from_iter+0x10/0x10
[  535.848519][T20291]  ? aa_file_perm+0x18b/0x15f0
[  535.848547][T20291]  ? skb_put+0x112/0x210
[  535.848575][T20291]  hci_sock_sendmsg+0x426/0xfb0
[  535.848604][T20291]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  535.848628][T20291]  ? apparmor_socket_sendmsg+0x98/0x360
[  535.848646][T20291]  ? lock_acquire+0x115/0x350
[  535.848667][T20291]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  535.848684][T20291]  sock_sendmsg_nosec+0x13a/0x180
[  535.848709][T20291]  sock_write_iter+0x2de/0x3e0
[  535.848730][T20291]  ? __pfx_sock_write_iter+0x10/0x10
[  535.848756][T20291]  ? bpf_lsm_file_permission+0x9/0x20
[  535.848781][T20291]  ? security_file_permission+0x75/0x260
[  535.848809][T20291]  vfs_write+0x612/0xba0
[  535.848845][T20291]  ? __pfx_vfs_write+0x10/0x10
[  535.848883][T20291]  ? __fget_files+0x2a/0x420
[  535.848914][T20291]  ksys_write+0x150/0x270
[  535.848943][T20291]  ? __pfx_ksys_write+0x10/0x10
[  535.848980][T20291]  do_syscall_64+0x166/0x520
[  535.849022][T20291]  ? trace_irq_disable+0x3b/0x140
[  535.849049][T20291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.849068][T20291]  ? clear_bhb_loop+0x70/0xc0
[  535.849090][T20291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.849109][T20291] RIP: 0033:0x7f05f0b9e159
[  535.849126][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.849145][T20291] RSP: 002b:00007f05eedf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  535.849165][T20291] RAX: ffffffffffffffda RBX: 00007f05f0e25fa0 RCX: 00007f05f0b9e159
[  535.849179][T20291] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000005
[  535.849191][T20291] RBP: 00007f05eedf6090 R08: 0000000000000000 R09: 0000000000000000
[  535.849202][T20291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.849213][T20291] R13: 00007f05f0e26038 R14: 00007f05f0e25fa0 R15: 00007ffc9b27df18
[  535.849242][T20291]  </TASK>
[  536.488010][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'.
[  536.488034][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'.
[  536.488057][T20322] netlink: 'syz.2.3199': attribute type 12 has an invalid length.
[  536.585181][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'.
[  536.585205][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'.
[  536.585228][T20322] netlink: 'syz.2.3199': attribute type 12 has an invalid length.
[  536.680931][T20322] netlink: 'syz.2.3199': attribute type 8 has an invalid length.
[  536.680952][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'.
[  537.091492][T20340] veth0: entered promiscuous mode
[  537.240711][T20336] veth0: left promiscuous mode
[  537.482178][T19833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.794727][T19833] veth0_vlan: entered promiscuous mode
[  537.823023][T19833] veth1_vlan: entered promiscuous mode
[  537.903095][T19833] veth0_macvtap: entered promiscuous mode
[  537.921957][T19833] veth1_macvtap: entered promiscuous mode
[  537.970296][T19833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.998476][T19833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.115995][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.143611][ T7666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.144586][ T7666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.144623][ T7666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.006307][ T5627] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  539.008795][ T5627] Bluetooth: hci2: command 0x0401 tx timeout
[  539.013503][T20356] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  539.013525][T20356] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  539.110490][T20356] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  539.111160][T20356] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  539.599620][T20356] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  539.599642][T20356] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  539.640273][T20356] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  539.640296][T20356] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  539.695561][T20356] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  539.695583][T20356] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  539.832966][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.832987][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.050091][T20434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3219'.
[  540.050117][T20434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'.
[  540.268118][T20425] netlink: 'syz.2.3217': attribute type 4 has an invalid length.
[  540.268142][T20425] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3217'.
[  540.371091][ T7666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.371112][ T7666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.396320][T20425] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  540.983930][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  541.014353][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  541.026567][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  541.033085][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  541.053514][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  541.895290][T20481] wg2 speed is unknown, defaulting to 1000
[  542.157813][T20519] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3231'.
[  542.367338][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  542.639008][T20481] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.639116][T20481] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.639398][T20481] bridge_slave_0: entered allmulticast mode
[  542.641075][T20481] bridge_slave_0: entered promiscuous mode
[  542.644010][T20481] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.644114][T20481] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.644233][T20481] bridge_slave_1: entered allmulticast mode
[  542.646740][T20481] bridge_slave_1: entered promiscuous mode
[  542.688447][T20481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.694946][T20481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.737639][T20481] team0: Port device team_slave_0 added
[  542.740127][T20481] team0: Port device team_slave_1 added
[  542.773619][T20481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.773636][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.773659][T20481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.775056][T20481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.775069][T20481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.775090][T20481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.873420][T20426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  543.088222][ T5620] Bluetooth: hci1: command tx timeout
[  543.192646][T20481] hsr_slave_0: entered promiscuous mode
[  543.208396][T20481] hsr_slave_1: entered promiscuous mode
[  543.210803][T20481] debugfs: 'hsr0' already exists in 'hsr'
[  543.210822][T20481] Cannot create hsr debugfs directory
[  543.303879][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'.
[  543.782707][T20554] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  543.819005][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'.
[  543.821088][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'.
[  543.869457][T20571] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19998
[  543.873871][T20571] netlink: 6624 bytes leftover after parsing attributes in process `syz.3.3243'.
[  543.937896][T20573] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3244'.
[  543.937920][T20573] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3244'.
[  543.942551][T20571] hsr_slave_1 (unregistering): left promiscuous mode
[  544.256505][T20579] ip6tnl1: entered allmulticast mode
[  544.789949][T20600] tipc: Started in network mode
[  544.789978][T20600] tipc: Node identity 36c44d9bb9f, cluster identity 4711
[  544.790146][T20600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.824316][T20604] syzkaller0: entered promiscuous mode
[  544.824338][T20604] syzkaller0: entered allmulticast mode
[  544.857498][T20481] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  544.876372][T20481] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  544.877151][T20481] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  544.904537][T20481] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  544.915063][T20481] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  544.939396][T20481] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  544.948351][T20481] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  544.977578][T20481] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  544.994407][T20596] tipc: Resetting bearer <eth:syzkaller0>
[  545.061009][T20596] tipc: Disabling bearer <eth:syzkaller0>
[  545.137451][T20612] v: renamed from dummy0 (while UP)
[  545.166118][ T5620] Bluetooth: hci1: command tx timeout
[  545.341593][T20634] __nla_validate_parse: 5 callbacks suppressed
[  545.341627][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'.
[  545.378301][T20634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'.
[  545.457926][T20481] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.500942][T20481] 8021q: adding VLAN 0 to HW filter on device team0
[  545.530044][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.530138][ T7666] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.560685][T15881] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.560793][T15881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.514363][T20674] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3267'.
[  546.582434][T20481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.743142][T20481] veth0_vlan: entered promiscuous mode
[  546.762987][T20481] veth1_vlan: entered promiscuous mode
[  546.839768][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'.
[  546.941099][T20681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'.
[  546.981255][T20481] veth0_macvtap: entered promiscuous mode
[  547.017465][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'.
[  547.044634][T20676] syzkaller1: entered promiscuous mode
[  547.044655][T20676] syzkaller1: entered allmulticast mode
[  547.051796][T20481] veth1_macvtap: entered promiscuous mode
[  547.245758][ T5620] Bluetooth: hci1: command tx timeout
[  547.252450][T20481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.287647][T20481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.386158][ T2354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.386207][ T2354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.386240][ T2354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.386282][ T2354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.392441][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3271'.
[  547.392464][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3271'.
[  547.392476][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3271'.
[  547.759083][T20712] netlink: 'syz.1.3275': attribute type 10 has an invalid length.
[  547.867709][T20719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3279'.
[  547.870451][T20715] pim6reg: entered allmulticast mode
[  547.871909][T20715] pim6reg: left allmulticast mode
[  547.934727][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.934977][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.082493][ T9462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.082515][ T9462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.396133][T20745] bridge1: the hash_elasticity option has been deprecated and is always 16
[  548.396156][T20745] bridge1: entered promiscuous mode
[  548.396170][T20745] bridge1: entered allmulticast mode
[  548.404057][T20745] team0: Port device bridge1 added
[  548.466394][T20746] bridge2: the hash_elasticity option has been deprecated and is always 16
[  548.466417][T20746] bridge2: entered promiscuous mode
[  548.466430][T20746] bridge2: entered allmulticast mode
[  548.471791][T20746] team0: Port device bridge2 added
[  548.672485][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  548.683797][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  548.684563][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  548.686041][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  548.702481][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  548.766376][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  548.943225][T20764] netlink: 'syz.3.3290': attribute type 11 has an invalid length.
[  548.970358][T20765] ip_tables: iptables: counters copy to user failed while replacing table
[  549.313646][ T5626] syz_tun (unregistering): left allmulticast mode
[  549.313668][ T5626] syz_tun (unregistering): left promiscuous mode
[  549.313749][ T5626] bridge0: port 1(syz_tun) entered disabled state
[  549.332939][ T5620] Bluetooth: hci1: command tx timeout
[  549.360533][T10457] infiniband s`z1: ib_query_port failed (-19)
[  549.378896][  T173] smbdirect: ib_dev[s`z1] removed
[  550.009650][ T7674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.009684][ T7674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.100937][T20754] wg2 speed is unknown, defaulting to 1000
[  550.158729][ T7674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.158762][ T7674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.268705][ T7674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.268727][ T7674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.340164][ T7674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  550.340185][ T7674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.748324][T20754] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.748427][T20754] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.748571][T20754] bridge_slave_0: entered allmulticast mode
[  550.753520][T20754] bridge_slave_0: entered promiscuous mode
[  550.770589][ T5620] Bluetooth: hci2: command tx timeout
[  550.775087][T20754] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.775208][T20754] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.776336][T20754] bridge_slave_1: entered allmulticast mode
[  550.787759][T20754] bridge_slave_1: entered promiscuous mode
[  550.894157][T20826] netlink: 'syz.1.3300': attribute type 1 has an invalid length.
[  550.953272][ T7674] pimreg: left allmulticast mode
[  551.011970][T20834] x_tables: duplicate underflow at hook 2
[  551.044337][T20838] x_tables: duplicate underflow at hook 2
[  551.683452][ T7674] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  551.731805][ T7674] bond9 (unregistering): (slave bridge7): Releasing active interface
[  551.796865][ T7674] bond0 (unregistering): left promiscuous mode
[  551.796885][ T7674] bond_slave_0: left promiscuous mode
[  551.796971][ T7674] bond_slave_1: left promiscuous mode
[  551.808561][ T7674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.860063][ T7674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.861322][ T7674] bond0 (unregistering): Released all slaves
[  551.867398][ T7674] bond1 (unregistering): Released all slaves
[  551.891175][ T7674] bond2 (unregistering): (slave veth5): Releasing backup interface
[  551.892341][ T7674] bond2 (unregistering): Released all slaves
[  551.910551][ T7674] bond3 (unregistering): Released all slaves
[  551.922769][ T7674] bond4 (unregistering): Released all slaves
[  551.935206][ T7674] bond5 (unregistering): Released all slaves
[  551.954915][ T7674] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  551.954943][ T7674] veth0_to_bond: left promiscuous mode
[  551.955096][ T7674] veth0_to_bond: left allmulticast mode
[  551.964508][ T7674] bond6 (unregistering): Released all slaves
[  551.991073][ T7674] bond7 (unregistering): Released all slaves
[  552.012362][ T7674] bond8 (unregistering): (slave veth7): Releasing backup interface
[  552.013657][ T7674] bond8 (unregistering): Released all slaves
[  552.038276][ T7674] bond9 (unregistering): Released all slaves
[  552.052168][ T7674] bond10 (unregistering): Released all slaves
[  552.084319][T20823] __nla_validate_parse: 1 callbacks suppressed
[  552.084332][T20823] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3299'.
[  552.085127][T20826] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  552.202009][T20852] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  552.203470][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  552.368033][T20855] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  552.370381][T20855] bond1: (slave macvlan2): making interface the new active one
[  552.371582][T20855] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  552.404306][T20865] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3303'.
[  552.584525][T20754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.592543][T20862] bridge0: port 3(netdevsim0) entered blocking state
[  552.592708][T20862] bridge0: port 3(netdevsim0) entered disabled state
[  552.592867][T20862] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  552.629231][T20862] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  552.629848][T20862] bridge0: port 3(netdevsim0) entered blocking state
[  552.629968][T20862] bridge0: port 3(netdevsim0) entered forwarding state
[  552.632291][T10457] bond_slave_0: entered promiscuous mode
[  552.632327][T10457] bond_slave_1: entered promiscuous mode
[  552.652417][ T7674] : left promiscuous mode
[  552.846466][ T5620] Bluetooth: hci2: command tx timeout
[  552.847180][T20754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.881263][T20876] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.015993][T20754] team0: Port device team_slave_0 added
[  553.022448][T20754] team0: Port device team_slave_1 added
[  553.106250][T20754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  553.106268][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.106296][T20754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  553.108355][T20754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  553.108369][T20754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.108391][T20754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.597666][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3310'.
[  553.703817][T20754] hsr_slave_0: entered promiscuous mode
[  553.717475][T20754] hsr_slave_1: entered promiscuous mode
[  553.731266][T20754] debugfs: 'hsr0' already exists in 'hsr'
[  553.731290][T20754] Cannot create hsr debugfs directory
[  553.950415][   T59] IPVS: starting estimator thread 0...
[  554.034124][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  554.047384][T20932] IPVS: using max 33 ests per chain, 79200 per kthread
[  554.860462][T20961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3317'.
[  554.928499][ T5620] Bluetooth: hci2: command tx timeout
[  555.041294][T20962] tipc: Started in network mode
[  555.041325][T20962] tipc: Node identity 320a8fd826b3, cluster identity 4711
[  555.041467][T20962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  555.078997][T20967] syzkaller0: entered promiscuous mode
[  555.079020][T20967] syzkaller0: entered allmulticast mode
[  555.198770][T20978] macvlan0: entered promiscuous mode
[  555.285288][T20975] smbdirect: ib_dev[syz2] removed
[  555.332525][T20991] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3323'.
[  555.654439][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3324'.
[  555.952756][T20967] tipc: Resetting bearer <eth:syzkaller0>
[  555.984476][T20960] tipc: Resetting bearer <eth:syzkaller0>
[  556.051948][T20960] tipc: Disabling bearer <eth:syzkaller0>
[  556.078315][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  556.154193][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3325'.
[  556.503588][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'.
[  556.698699][T21022] bond0: (slave bond_slave_1): Releasing backup interface
[  557.017242][ T5620] Bluetooth: hci2: command tx timeout
[  557.654018][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3333'.
[  557.749261][  T173] bond0: (slave bond_slave_0): interface is now down
[  557.749291][  T173] bond0: (slave bond_slave_1): interface is now down
[  557.772956][   T50] bond0: (slave bond_slave_0): interface is now down
[  557.772978][   T50] bond0: (slave bond_slave_1): interface is now down
[  557.789504][   T50] bond0: (slave bond_slave_0): interface is now down
[  557.789529][   T50] bond0: (slave bond_slave_1): interface is now down
[  557.826874][T15889] bond0: (slave bond_slave_0): interface is now down
[  557.826898][T15889] bond0: (slave bond_slave_1): interface is now down
[  557.845926][ T7666] bond0: (slave bond_slave_0): interface is now down
[  557.845947][ T7666] bond0: (slave bond_slave_1): interface is now down
[  557.865870][   T59] bond0: (slave bond_slave_0): interface is now down
[  557.865892][   T59] bond0: (slave bond_slave_1): interface is now down
[  557.888187][   T59] bond0: (slave bond_slave_0): interface is now down
[  557.888209][   T59] bond0: (slave bond_slave_1): interface is now down
[  557.912098][ T1145] bond0: (slave bond_slave_0): interface is now down
[  557.912120][ T1145] bond0: (slave bond_slave_1): interface is now down
[  557.930534][   T50] bond0: (slave bond_slave_0): interface is now down
[  557.930555][   T50] bond0: (slave bond_slave_1): interface is now down
[  557.946184][ T1145] bond0: (slave bond_slave_0): interface is now down
[  557.946207][ T1145] bond0: (slave bond_slave_1): interface is now down
[  557.972459][ T2354] bond0: (slave bond_slave_0): interface is now down
[  557.972484][ T2354] bond0: (slave bond_slave_1): interface is now down
[  558.022262][ T2354] bond0: now running without any active interface!
[  558.172455][T21057] dvmrp0: entered allmulticast mode
[  558.984733][T21096] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3339'.
[  559.079487][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3339'.
[  559.101247][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'.
[  562.193356][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.193657][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.193933][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.194262][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.194537][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.257046][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.257367][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.258875][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.259168][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.262395][T21125] ip_tables: iptables: counters copy to user failed while replacing table
[  562.719495][T21140] netlink: 'syz.0.3344': attribute type 3 has an invalid length.
[  562.850602][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  562.854406][ T1309] ieee802154 phy3 wpan0: encryption failed: -22
[  563.139818][ T7674] hsr_slave_0: left promiscuous mode
[  563.259562][ T7674] veth1_vlan: left allmulticast mode
[  563.259588][ T7674] veth1_vlan: left promiscuous mode
[  563.259627][ T7674] veth0_vlan: left promiscuous mode
[  563.871951][T21176] Bluetooth: MGMT ver 1.23
[  564.360869][T20754] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  564.417189][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  564.442892][T20754] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  564.466033][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  564.488724][T20754] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  564.560029][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  564.571022][T20754] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  564.601206][T20754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  564.711525][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'.
[  565.020711][ T7674] IPVS: stop unused estimator thread 0...
[  565.343840][T20754] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.421877][T20754] 8021q: adding VLAN 0 to HW filter on device team0
[  565.472022][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.472147][ T9462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  565.587235][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.587343][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  565.771768][T21221] sctp: [Deprecated]: syz.0.3357 (pid 21221) Use of int in max_burst socket option.
[  565.771768][T21221] Use struct sctp_assoc_value instead
[  565.887078][ T5627] Bluetooth: hci2: command 0x0401 tx timeout
[  565.888405][ T5620] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  566.054282][T21238] netlink: 'syz.0.3359': attribute type 8 has an invalid length.
[  566.055028][T21236] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  566.402832][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'.
[  566.402854][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'.
[  566.522069][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'.
[  566.522093][T21245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'.
[  566.548085][T21251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3361'.
[  566.797574][   T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  566.797636][   T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  566.797669][   T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  566.797701][   T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  567.072025][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'.
[  567.072127][T21268] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3364'.
[  567.302897][T21278] net_ratelimit: 56 callbacks suppressed
[  567.302917][T21278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  567.534293][T21281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3367'.
[  567.534324][T21281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3367'.
[  567.593164][T21288] netlink: 'syz.0.3369': attribute type 1 has an invalid length.
[  567.713559][T21288] bond2: entered promiscuous mode
[  567.716002][T21288] 8021q: adding VLAN 0 to HW filter on device bond2
[  567.719879][T20754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.766844][T21288] veth5: entered allmulticast mode
[  567.900956][T20754] veth0_vlan: entered promiscuous mode
[  567.931862][T20754] veth1_vlan: entered promiscuous mode
[  567.965830][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  568.014285][T21314] netlink: 'syz.4.3376': attribute type 21 has an invalid length.
[  568.044598][T21310] syzkaller1: tun_chr_ioctl cmd 1074025673
[  568.079854][T21310] syzkaller1: tun_chr_ioctl cmd 1074025677
[  568.079938][T21310] syzkaller1: linktype set to 825
[  568.087570][T21313] syzkaller1: tun_chr_ioctl cmd 1074025677
[  568.087651][T21313] syzkaller1: linktype set to 825
[  568.096915][T20754] veth0_macvtap: entered promiscuous mode
[  568.143886][T20754] veth1_macvtap: entered promiscuous mode
[  568.170057][T21320] geneve3: entered promiscuous mode
[  568.244450][T20754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.268640][T20754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.360300][T15885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.417780][T15885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.486798][ T9462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.486840][ T9462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.628016][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.628036][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.802606][T21339] netlink: 'syz.0.3383': attribute type 11 has an invalid length.
[  568.812511][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.812531][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.299738][T21360] syzkaller0: entered promiscuous mode
[  569.299762][T21360] syzkaller0: entered allmulticast mode
[  569.327565][T21366] unsupported nlmsg_type 40
[  569.841262][T21394] __nla_validate_parse: 12 callbacks suppressed
[  569.841280][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'.
[  573.001207][T21394] team0: Port device team_slave_0 removed
[  573.021357][T21392] syzkaller1: entered promiscuous mode
[  573.021379][T21392] syzkaller1: entered allmulticast mode
[  573.616975][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'.
[  573.622338][T21449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'.
[  574.508162][T21473] netlink: 'syz.1.3402': attribute type 10 has an invalid length.
[  574.578569][T21471] netlink: 'syz.4.3400': attribute type 1 has an invalid length.
[  574.580120][T21476] netlink: 'syz.1.3402': attribute type 10 has an invalid length.
[  574.583094][T21473] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  574.614686][T21473] team0: Port device netdevsim1 added
[  574.684172][T21471] 8021q: adding VLAN 0 to HW filter on device bond2
[  574.724123][T21476] team0: Port device netdevsim1 removed
[  574.753664][T21476] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  574.776631][T21476] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  575.785560][T21536] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3417'.
[  575.785585][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3417'.
[  575.785601][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3417'.
[  575.901735][T21542] xt_MASQUERADE: bad rangesize 20224
[  576.078879][ T5620] Bluetooth: hci2: connection err: -111
[  576.223560][T21542] nbd0: detected capacity change from 0 to 63
[  576.360036][   T50] tipc: Subscription rejected, illegal request
[  576.384117][ T5620] block nbd0: Receive control failed (result -104)
[  576.994803][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3430'.
[  577.144187][T21603] netlink: 'syz.2.3432': attribute type 1 has an invalid length.
[  577.300974][T21607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'.
[  577.328389][T21600] IPVS: set_ctl: invalid protocol: 61756 224.0.0.1:20002
[  577.378330][T21612] netlink: zone id is out of range
[  577.378346][T21612] netlink: zone id is out of range
[  577.378352][T21612] netlink: zone id is out of range
[  577.378359][T21612] netlink: zone id is out of range
[  577.378365][T21612] netlink: zone id is out of range
[  577.378372][T21612] netlink: zone id is out of range
[  577.378382][T21612] netlink: zone id is out of range
[  577.378388][T21612] netlink: zone id is out of range
[  577.378394][T21612] netlink: zone id is out of range
[  577.378400][T21612] netlink: zone id is out of range
[  577.409214][T21607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3433'.
[  577.479435][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3434'.
[  577.505636][T21619] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  578.091991][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3442'.
[  578.527804][T21679] team0: Device wg1 is of different type
[  578.631611][T21679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'.
[  578.819230][   T31] audit: type=1804 audit(1790564271.933:11): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3453" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=238 res=1 errno=0
[  578.820714][   T31] audit: type=1800 audit(1790564271.933:12): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3453" name="cgroup.controllers" dev="tmpfs" ino=238 res=0 errno=0
[  579.255292][T15885] bridge_slave_1: left allmulticast mode
[  579.260944][T15885] bridge_slave_1: left promiscuous mode
[  579.261178][T15885] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.290396][T15885] bridge_slave_0: left allmulticast mode
[  579.290422][T15885] bridge_slave_0: left promiscuous mode
[  579.290698][T15885] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.348139][T15885] dvmrp1: left allmulticast mode
[  579.632251][T21720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3459'.
[  580.782156][T15885] gretap0 (unregistering): left allmulticast mode
[  581.066898][T15885] team0: Port device bridge8 removed
[  581.091145][T15885] bond7 (unregistering): (slave bridge11): Releasing backup interface
[  581.104640][T15885] bond1 (unregistering): Released all slaves
[  581.123329][T15885] bond2 (unregistering): Released all slaves
[  581.138612][T15885] bond3 (unregistering): Released all slaves
[  581.153188][T15885] bond4 (unregistering): (slave veth9): Releasing active interface
[  581.154473][T15885] bond4 (unregistering): Released all slaves
[  581.191469][T15885] bond5 (unregistering): Released all slaves
[  581.205179][T15885] bond6 (unregistering): Released all slaves
[  581.215998][T15885] bond7 (unregistering): Released all slaves
[  581.223679][T15885] bond8 (unregistering): Released all slaves
[  581.240173][T15885] bond0 (unregistering): Released all slaves
[  581.254496][T15885] bond9 (unregistering): Released all slaves
[  581.278198][T15885] bond10 (unregistering): Released all slaves
[  581.313805][T21744] __nla_validate_parse: 1 callbacks suppressed
[  581.313818][T21744] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3462'.
[  581.591531][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'.
[  581.591555][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'.
[  581.756108][T21760] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.756646][T21760] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.791630][T21769] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  581.795470][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'.
[  582.792885][T21760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.823378][T21760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.057348][T21764] gre2: entered promiscuous mode
[  583.070051][T15885] tipc: Disabling bearer <udp:s>
[  583.070305][T15885] tipc: Left network mode
[  583.285498][   T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.285816][   T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.285850][   T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.285879][   T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  583.542993][T21828] syzkaller0: entered promiscuous mode
[  583.543014][T21828] syzkaller0: entered allmulticast mode
[  584.654376][T21776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  584.744836][T21847] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  584.744860][T21847] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  584.918161][T21882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'.
[  585.026018][T21847] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  585.026041][T21847] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  585.130104][T21886] vlan2: entered allmulticast mode
[  585.130126][T21886] bridge2: entered allmulticast mode
[  585.467504][T21907] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3478'.
[  585.532050][T21903] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3476'.
[  586.428048][T15885] hsr_slave_0: left promiscuous mode
[  586.445050][T15885] hsr_slave_1: left promiscuous mode
[  586.494333][T15885] veth1_vlan: left promiscuous mode
[  586.494405][T15885] v: left promiscuous mode
[  586.583343][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'.
[  586.746626][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3487'.
[  587.745237][T21991] net_ratelimit: 494 callbacks suppressed
[  587.745257][T21991] openvswitch: netlink: IP tunnel dst address not specified
[  587.799131][T21963] syzkaller1: entered promiscuous mode
[  587.799153][T21963] syzkaller1: entered allmulticast mode
[  587.910521][T21996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3491'.
[  588.260593][T21991] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  588.324245][T21995] batman_adv: batadv0: Adding interface: gretap1
[  588.324262][T21995] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.324288][T21995] batman_adv: batadv0: Interface activated: gretap1
[  588.466730][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.466840][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.564979][T22011] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  588.674598][T22020] xt_LOG: prefix is not null-terminated
[  588.712729][T22010] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.939698][T22030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3498'.
[  589.052142][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3501'.
[  589.306551][ T2354] IPVS: starting estimator thread 0...
[  589.309107][T22049] netlink: 'syz.3.3504': attribute type 49 has an invalid length.
[  589.395496][T22051] IPVS: using max 32 ests per chain, 76800 per kthread
[  589.574660][T22044] veth1_macvtap: left promiscuous mode
[  589.617157][T15885] IPVS: stop unused estimator thread 0...
[  590.009472][T22075] netlink: 'syz.4.3510': attribute type 1 has an invalid length.
[  590.009495][T22075] netlink: 756 bytes leftover after parsing attributes in process `syz.4.3510'.
[  591.033709][T22107] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3516'.
[  591.800744][ T5279] veth1_macvtap: entered promiscuous mode
[  591.897688][   T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.899031][  T173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.899142][  T173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.899204][  T173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.436126][T22187] netlink: 'syz.2.3532': attribute type 1 has an invalid length.
[  592.460070][T22184] netlink: 'syz.3.3533': attribute type 1 has an invalid length.
[  592.514163][T22187] 8021q: adding VLAN 0 to HW filter on device bond1
[  592.583731][T22181] bond1: (slave dummy0): Enslaving as a backup interface with an up link
[  592.603676][T22181] netlink: 'syz.2.3532': attribute type 10 has an invalid length.
[  592.603699][T22181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3532'.
[  592.622238][T22199] netlink: 'syz.4.3535': attribute type 1 has an invalid length.
[  592.635584][T15885] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  592.678673][T22198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3534'.
[  592.679363][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3534'.
[  592.746724][T15885] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  593.103287][T22181] dummy0: entered promiscuous mode
[  593.108893][T22181] bond1: (slave dummy0): Removing an active aggregator
[  593.109655][T22181] bond1: (slave dummy0): Releasing backup interface
[  593.240052][T22192] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  593.240086][T22192] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  593.240121][T22192] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  593.370606][T22192] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  594.078258][ T9462] IPVS: starting estimator thread 0...
[  594.167984][T22256] IPVS: using max 36 ests per chain, 86400 per kthread
[  594.231372][T22267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3544'.
[  594.421924][T22274] Cannot find set identified by id 2 to match
[  594.572942][T22276] žÿ: renamed from team_slave_1 (while UP)
[  594.771318][T22287] batman_adv: batadv0: Adding interface: veth0
[  594.771334][T22287] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.771361][T22287] batman_adv: batadv0: Interface activated: veth0
[  594.956705][T22299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3553'.
[  594.963944][T22301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3553'.
[  595.131832][T22307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3554'.
[  595.321857][T22317] netlink: 'syz.0.3559': attribute type 54 has an invalid length.
[  595.321879][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'.
[  595.649930][T22292] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  595.651965][T22292] team0: Device ipvlan3 is already an upper device of the team interface
[  595.673964][T22337] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3560'.
[  595.871764][T22340] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3563'.
[  596.200120][T22351] syzkaller1: entered promiscuous mode
[  596.200142][T22351] syzkaller1: entered allmulticast mode
[  596.737005][T22355] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96
[  596.737005][T22351] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96
[  596.950904][T22384] netlink: 'syz.0.3573': attribute type 16 has an invalid length.
[  596.950925][T22384] netlink: 'syz.0.3573': attribute type 17 has an invalid length.
[  596.985706][T22388] Bluetooth: hci0: unsupported parameter 5135
[  596.985721][T22388] Bluetooth: hci0: unsupported parameter 8192
[  596.985728][T22388] Bluetooth: hci0: unsupported parameter 5135
[  596.985735][T22388] Bluetooth: hci0: unsupported parameter 8192
[  597.100790][T22384] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  597.112101][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.112214][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  597.238925][T22383] bond1: option miimon: invalid value (18446744073357230079)
[  597.238950][T22383] bond1: option miimon: allowed values 0 - 2147483647
[  597.241782][T22383] bond1 (unregistering): Released all slaves
[  597.419088][T22394] vlan0: entered promiscuous mode
[  597.570115][T22406] ip_tables: iptables: counters copy to user failed while replacing table
[  597.590193][T22406] xt_hl: Unknown Hop Limit match mode: 4
[  597.644751][T22400] __nla_validate_parse: 7 callbacks suppressed
[  597.644770][T22400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3580'.
[  597.664181][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'.
[  597.738999][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3580'.
[  597.749748][T22406] bridge_slave_0: left allmulticast mode
[  597.749772][T22406] bridge_slave_0: left promiscuous mode
[  597.749990][T22406] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.772427][T22406] bridge_slave_1: left allmulticast mode
[  597.772450][T22406] bridge_slave_1: left promiscuous mode
[  597.772657][T22406] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.819450][T22406] bond0: (slave bond_slave_0): Releasing backup interface
[  597.823241][T22406] bond_slave_0: left promiscuous mode
[  597.844704][T22406] bond0: (slave bond_slave_1): Releasing backup interface
[  597.861494][T22406] bond_slave_1: left promiscuous mode
[  597.908063][T22406] team0: Port device team_slave_0 removed
[  597.953816][T22422] netlink: 'syz.1.3583': attribute type 1 has an invalid length.
[  597.957052][T22406] team0: Port device team_slave_1 removed
[  597.961026][T22406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.961047][T22406] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.981315][T22406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.981336][T22406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.002695][T22406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  598.116838][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3582'.
[  598.174622][T22427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3584'.
[  598.289951][T22422] ip_tables: iptables: counters copy to user failed while replacing table
[  598.360810][T22419] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  598.389589][T22422] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  598.716837][T22454] netlink: 'syz.2.3592': attribute type 1 has an invalid length.
[  598.758925][T22459] bridge3: entered promiscuous mode
[  598.783046][T22455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3590'.
[  598.802176][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'.
[  598.802205][T22459] netlink: 'syz.3.3591': attribute type 10 has an invalid length.
[  598.802218][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'.
[  598.831434][T22457] bridge4: entered promiscuous mode
[  598.919741][T22455] 8021q: VLANs not supported on ip6_vti0
[  598.948648][T22459] geneve2: entered promiscuous mode
[  598.948669][T22459] geneve2: entered allmulticast mode
[  599.018141][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'.
[  599.200437][T22476] macsec0: entered promiscuous mode
[  599.200464][T22476] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  599.235147][T22476] macsec0: entered allmulticast mode
[  599.235179][T22476] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  599.252861][T22476] 8021q: adding VLAN 0 to HW filter on device macsec0
[  599.255108][T22476] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  599.447123][ T6898] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  599.563205][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'.
[  600.618073][T22527] netlink: 'syz.2.3607': attribute type 10 has an invalid length.
[  601.941564][T22598] bridge0: port 4(bond0) entered blocking state
[  601.941651][T22598] bridge0: port 4(bond0) entered disabled state
[  601.941800][T22598] bond0: entered allmulticast mode
[  601.941815][T22598] bond_slave_0: entered allmulticast mode
[  601.941874][T22598] bond_slave_1: entered allmulticast mode
[  601.941892][T22598] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  602.006107][T22598] bond0: entered promiscuous mode
[  602.006128][T22598] bond_slave_0: entered promiscuous mode
[  602.006300][T22598] bond_slave_1: entered promiscuous mode
[  602.006460][T22598] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  602.148498][T22598] bridge0: port 4(bond0) entered blocking state
[  602.148601][T22598] bridge0: port 4(bond0) entered forwarding state
[  602.223828][T22613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  602.383967][T22599] hsr_slave_1 (unregistering): left promiscuous mode
[  602.415512][T22607] bond0: entered promiscuous mode
[  602.415534][T22607] bond_slave_0: entered promiscuous mode
[  602.415726][T22607] bond_slave_1: entered promiscuous mode
[  602.421462][T22607] batadv0: entered promiscuous mode
[  602.424187][T22607] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  602.424207][T22607] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  602.429693][T22607] 8021q: adding VLAN 0 to HW filter on device hsr1
[  602.491800][T22607] bond0: left promiscuous mode
[  602.491822][T22607] bond_slave_0: left promiscuous mode
[  602.492051][T22607] bond_slave_1: left promiscuous mode
[  602.515032][T22607] batadv0: left promiscuous mode
[  602.758308][T22590] __nla_validate_parse: 6 callbacks suppressed
[  602.758328][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'.
[  602.846493][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'.
[  603.108539][T22641] can: request_module (can-proto-0) failed.
[  603.215213][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'.
[  603.250414][T22658] netlink: 'syz.1.3639': attribute type 1 has an invalid length.
[  603.300771][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3637'.
[  603.322732][T22647] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.410790][T22662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3637'.
[  603.430215][T22658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3639'.
[  603.440772][T22658] bridge1: entered promiscuous mode
[  603.440794][T22658] bridge1: entered allmulticast mode
[  603.447158][T22658] bond3: (slave bridge1): making interface the new active one
[  603.452636][T22658] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  604.466207][T22718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3653'.
[  604.467443][T22715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3652'.
[  604.488491][T22718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3653'.
[  604.630350][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'.
[  604.760749][T22736] netlink: 'syz.3.3658': attribute type 3 has an invalid length.
[  605.203760][T22750] syzkaller0: entered promiscuous mode
[  605.203782][T22750] syzkaller0: entered allmulticast mode
[  605.925764][T22785] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  605.961593][T22785] bond0: (slave veth1_virt_wifi): Error: Device is in use and cannot be enslaved
[  606.214137][T22801] syzkaller0: entered promiscuous mode
[  606.214159][T22801] syzkaller0: entered allmulticast mode
[  606.372068][ T2005] block nbd0: Possible stuck request ffff88807e980000: control (read@0,4096B). Runtime 30 seconds
[  606.734049][T22819] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes.
[  606.739761][T22821] netlink: 'syz.1.3679': attribute type 1 has an invalid length.
[  606.849767][T22821] 8021q: adding VLAN 0 to HW filter on device bond5
[  606.987698][T22824] bond5: (slave veth7): Enslaving as an active interface with a down link
[  607.064062][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.069520][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.069677][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.130715][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.200482][T22837] netlink: 'syz.1.3679': attribute type 10 has an invalid length.
[  607.215642][T22824] bond5: (slave dummy0): making interface the new active one
[  607.222969][T22824] dummy0: entered promiscuous mode
[  607.223264][T22824] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  607.223340][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.264012][T22837] bond5: (slave dummy0): Releasing active interface
[  607.310185][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.310411][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.310565][T22836] netlink: 'syz.3.3682': attribute type 2 has an invalid length.
[  607.462192][T22839] veth2: entered allmulticast mode
[  607.499862][   T31] audit: type=1800 audit(1790564300.613:13): pid=22826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3679" name="memory.events" dev="tmpfs" ino=643 res=0 errno=0
[  607.831876][T22841] veth2: entered allmulticast mode
[  607.977549][T22870] x_tables: unsorted entry at hook 3
[  607.981752][T22870] __nla_validate_parse: 10 callbacks suppressed
[  607.981770][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'.
[  608.161163][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'.
[  608.360536][T22892] ip_tables: iptables: counters copy to user failed while replacing table
[  608.424621][T22876] x_tables: duplicate underflow at hook 2
[  608.431529][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'.
[  609.016334][T22912] geneve2: entered promiscuous mode
[  609.047105][ T9462] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 51359 - 0
[  609.047150][ T9462] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 51359 - 0
[  609.047181][ T9462] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 51359 - 0
[  609.047211][ T9462] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 51359 - 0
[  609.188423][T22918] netlink: Invalid conntrack helper
[  609.188453][T22918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.286898][T22923] xt_socket: unknown flags 0x4
[  609.369661][T22923] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.371670][T22923] 8021q: adding VLAN 0 to HW filter on device team0
[  609.372714][T22923] dummy0: left promiscuous mode
[  609.400049][T22923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  609.474584][T22923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  609.484311][T22923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  609.499103][T22923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  609.499125][T22923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  609.502606][T22923] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  609.533834][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.533947][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.545324][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.545425][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  609.751822][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3703'.
[  611.162618][T23013] lo: entered allmulticast mode
[  611.245258][T23022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'.
[  611.568855][T23041] openvswitch: netlink: IPv4 tunnel dst address is zero
[  611.573747][T23046] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3727'.
[  611.762828][T23054] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3728'.
[  611.763713][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  611.903519][T23064] validate_nla: 58 callbacks suppressed
[  611.903538][T23064] netlink: 'syz.1.3732': attribute type 1 has an invalid length.
[  611.929473][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'.
[  611.931398][T23058] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  611.994073][T23064] bond6: entered promiscuous mode
[  611.994498][T23064] 8021q: adding VLAN 0 to HW filter on device bond6
[  612.304104][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3733'.
[  612.370651][T23084] ip_tables: iptables: counters copy to user failed while replacing table
[  612.412241][T23084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.543951][T23084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.650650][T23096] ip_tables: iptables: counters copy to user failed while replacing table
[  612.683595][T23104] ip_tables: iptables: counters copy to user failed while replacing table
[  612.807890][T23108] dvmrp8: entered allmulticast mode
[  612.821873][T23087] smc: net device lo applied user defined pnetid SYZ0
[  613.043731][   T12] IPVS: starting estimator thread 0...
[  613.090656][T23123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.090804][T23123] batadv_slave_0: entered allmulticast mode
[  613.130169][T23114] netlink: 'syz.2.3742': attribute type 1 has an invalid length.
[  613.138313][T23120] IPVS: using max 31 ests per chain, 74400 per kthread
[  613.533543][T23146] syzkaller0: entered promiscuous mode
[  613.533566][T23146] syzkaller0: entered allmulticast mode
[  613.615590][T23148] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  614.123562][T23166] Bluetooth: hci0: unsupported parameter 1280
[  614.123584][T23166] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  614.154735][T23154] wlan: option downdelay: invalid value (18446744073709547007)
[  614.154759][T23154] wlan: option downdelay: allowed values 0 - 2147483647
[  614.180124][T23154] wlan (unregistering): Released all slaves
[  615.126122][T23213] ip_tables: iptables: counters copy to user failed while replacing table
[  615.338848][T23218] x_tables: duplicate underflow at hook 2
[  615.920636][T23247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  615.920653][T23247] IPv6: NLM_F_CREATE should be set when creating new route
[  615.920693][T23247] IPv6: NLM_F_CREATE should be set when creating new route
[  615.920717][T23247] IPv6: NLM_F_CREATE should be set when creating new route
[  616.453935][T23255] __nla_validate_parse: 2 callbacks suppressed
[  616.453955][T23255] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3780'.
[  617.303564][T23275] netlink: 'syz.0.3784': attribute type 2 has an invalid length.
[  617.431949][T23282] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  617.498665][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3786'.
[  617.757511][T23302] x_tables: duplicate underflow at hook 1
[  617.758795][T23302] netlink: 'syz.0.3795': attribute type 46 has an invalid length.
[  617.759479][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'.
[  617.800798][T23302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3795'.
[  617.840891][T23300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3792'.
[  618.178347][T23314] syzkaller1: entered promiscuous mode
[  618.178369][T23314] syzkaller1: entered allmulticast mode
[  618.722238][T23339] netlink: 'syz.2.3801': attribute type 1 has an invalid length.
[  618.722260][T23339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3801'.
[  618.775057][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3801'.
[  618.829361][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3803'.
[  618.838939][T23345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'.
[  618.869848][T23345] bridge0: port 3(vlan0) entered blocking state
[  618.870031][T23345] bridge0: port 3(vlan0) entered disabled state
[  618.870175][T23345] vlan0: entered allmulticast mode
[  618.870190][T23345] geneve0: entered allmulticast mode
[  618.872136][T23345] vlan0: entered promiscuous mode
[  618.872152][T23345] geneve0: entered promiscuous mode
[  618.880950][T23347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3802'.
[  619.125795][T23353] bond3: option ad_user_port_key: invalid value (65535)
[  619.125819][T23353] bond3: option ad_user_port_key: allowed values 0 - 1023
[  619.127573][T23353] bond3 (unregistering): Released all slaves
[  619.352018][T23371] netlink: 'syz.3.3808': attribute type 1 has an invalid length.
[  619.459020][T23380] netlink: 'syz.4.3810': attribute type 10 has an invalid length.
[  619.484178][T23380] team0 (unregistering): Port device team_slave_0 removed
[  619.516979][T23380] team0 (unregistering): Port device 
7
6žÿ removed
[  620.109301][T23413] syzkaller1: entered promiscuous mode
[  620.109321][T23413] syzkaller1: entered allmulticast mode
[  621.134132][T23448] netlink: 'syz.2.3829': attribute type 2 has an invalid length.
[  621.207543][T23453] netlink: 'syz.1.3830': attribute type 11 has an invalid length.
[  621.229338][T23453] netlink: 'syz.1.3830': attribute type 15 has an invalid length.
[  621.328718][ T7320] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  621.328778][ T7320] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  621.328810][ T7320] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  621.328840][ T7320] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  621.519694][T23463] __nla_validate_parse: 6 callbacks suppressed
[  621.519713][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  621.519730][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  621.561458][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  621.561491][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'.
[  621.561505][T23463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3833'.
[  622.605020][T23520] macsec1: entered promiscuous mode
[  622.605042][T23520] bridge0: entered promiscuous mode
[  622.859059][T23530] netlink: 'syz.0.3848': attribute type 8 has an invalid length.
[  623.013591][T23539] netlink: 'syz.2.3849': attribute type 10 has an invalid length.
[  623.052887][T23539] team0: Port device dummy0 added
[  623.066776][T23539] netlink: 'syz.2.3849': attribute type 10 has an invalid length.
[  623.130622][T23539] team0: Port device dummy0 removed
[  623.431629][T23556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3854'.
[  623.680085][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3857'.
[  623.695925][T23570] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  624.083018][T23585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3863'.
[  624.083442][T23585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3863'.
[  624.083797][T23585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3863'.
[  624.290691][ T1309] ieee802154 phy3 wpan0: encryption failed: -22
[  624.368919][T23605] syzkaller0: entered promiscuous mode
[  624.368943][T23605] syzkaller0: entered allmulticast mode
[  624.431254][T23593] syzkaller1: entered promiscuous mode
[  624.431269][T23593] syzkaller1: entered allmulticast mode
[  624.653578][T23616] macvlan1: entered promiscuous mode
[  624.740338][T23621] x_tables: duplicate underflow at hook 1
[  624.922353][T23616] macvlan1: left promiscuous mode
[  625.020551][T23626] netlink: 'syz.4.3874': attribute type 1 has an invalid length.
[  625.170176][T23636] netlink: 'syz.0.3875': attribute type 1 has an invalid length.
[  629.780859][T23685] __nla_validate_parse: 34 callbacks suppressed
[  629.780880][T23685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3884'.
[  629.809489][T23684] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3883'.
[  629.809513][T23684] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3883'.
[  630.087965][T23690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3885'.
[  630.233732][T23692] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3886'.
[  630.346061][T23704] syzkaller0: entered promiscuous mode
[  630.346087][T23704] syzkaller0: entered allmulticast mode
[  630.347442][T23697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3886'.
[  630.648937][T23714] netlink: 'syz.4.3891': attribute type 24 has an invalid length.
[  630.741018][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'.
[  630.864655][T23723] netlink: 'syz.3.3892': attribute type 1 has an invalid length.
[  633.336454][T23716] netlink: 'syz.1.3890': attribute type 12 has an invalid length.
[  633.336474][T23716] netlink: 'syz.1.3890': attribute type 29 has an invalid length.
[  633.336486][T23716] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3890'.
[  633.573760][T23750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'.
[  633.614514][T23750] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  633.768622][T23753] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3898'.
[  635.108199][T23791] tipc: Started in network mode
[  635.108228][T23791] tipc: Node identity 2e7faad1247, cluster identity 4711
[  635.108382][T23791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.131797][T23789] __nla_validate_parse: 7 callbacks suppressed
[  635.131815][T23789] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3910'.
[  635.214098][T23794] x_tables: duplicate underflow at hook 1
[  635.214209][T23789] x_tables: duplicate underflow at hook 1
[  635.293251][T23786] tipc: Disabling bearer <eth:syzkaller0>
[  635.436256][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'.
[  635.569422][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3914'.
[  635.620667][T23818] netlink: 'syz.2.3917': attribute type 1 has an invalid length.
[  635.620688][T23818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3917'.
[  635.620703][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'.
[  635.778638][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'.
[  635.849855][T23820] bridge0: port 5(vlan0) entered blocking state
[  635.853128][T23820] bridge0: port 5(vlan0) entered disabled state
[  635.853225][T23820] vlan0: entered allmulticast mode
[  635.853235][T23820] geneve0: entered allmulticast mode
[  635.854528][T23820] vlan0: entered promiscuous mode
[  635.854544][T23820] geneve0: entered promiscuous mode
[  635.879423][T23822] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3918'.
[  636.252887][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3922'.
[  636.292184][T23847] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3922'.
[  636.320677][T23847] gretap0: entered promiscuous mode
[  636.320933][T23847] vlan2: entered promiscuous mode
[  636.414450][T23854] geneve0: entered promiscuous mode
[  636.457353][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'.
[  636.463855][ T2005] block nbd0: Possible stuck request ffff88807e980000: control (read@0,4096B). Runtime 60 seconds
[  636.501842][T23851] netlink: 'syz.0.3923': attribute type 4 has an invalid length.
[  636.528633][T23851] .`: renamed from bond0
[  636.908111][T23870] netlink: zone id is out of range
[  636.908126][T23870] netlink: zone id is out of range
[  636.908134][T23870] netlink: zone id is out of range
[  636.908141][T23870] netlink: zone id is out of range
[  636.908148][T23870] netlink: zone id is out of range
[  636.908155][T23870] netlink: zone id is out of range
[  636.908165][T23870] netlink: zone id is out of range
[  636.908173][T23870] netlink: zone id is out of range
[  636.908180][T23870] netlink: zone id is out of range
[  636.908187][T23870] netlink: zone id is out of range
[  637.095096][T23859] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.097783][T23859] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.427272][T23859] batadv_slave_0: left allmulticast mode
[  637.512607][T23859] vlan0: left promiscuous mode
[  637.520259][T23859] gre2: left promiscuous mode
[  637.614706][T23859] macsec1: left promiscuous mode
[  637.679965][T23878] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR
[  637.750301][ T1145] IPVS: starting estimator thread 0...
[  637.842121][T23909] IPVS: using max 27 ests per chain, 64800 per kthread
[  638.244909][T23921] IPVS: set_ctl: invalid protocol: 14 172.20.20.187:20000
[  638.341880][T23923] hsr_slave_1 (unregistering): left promiscuous mode
[  639.070053][T23955] netlink: 'syz.4.3945': attribute type 1 has an invalid length.
[  639.082120][T23955] erspan1: entered allmulticast mode
[  639.285068][T23964] netlink: 'syz.3.3948': attribute type 1 has an invalid length.
[  639.314979][T23964] bond1: entered promiscuous mode
[  639.315813][T23964] 8021q: adding VLAN 0 to HW filter on device bond1
[  639.339719][T23964] vlan3: entered allmulticast mode
[  639.339738][T23964] bond1: entered allmulticast mode
[  639.353270][T23964] bond1: (slave bridge5): making interface the new active one
[  639.353290][T23964] bridge5: entered promiscuous mode
[  639.353453][T23964] bridge5: entered allmulticast mode
[  639.358432][T23964] bond1: (slave bridge5): Enslaving as an active interface with an up link
[  639.724106][T23983] bridge0: port 3(syz_tun) entered blocking state
[  639.724264][T23983] bridge0: port 3(syz_tun) entered disabled state
[  639.724450][T23983] syz_tun: entered allmulticast mode
[  639.747604][T23983] syz_tun: entered promiscuous mode
[  640.344100][T24013] __nla_validate_parse: 29 callbacks suppressed
[  640.344119][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'.
[  640.452964][T24015] netlink: 'syz.0.3965': attribute type 1 has an invalid length.
[  640.452980][T24015] netlink: 'syz.0.3965': attribute type 2 has an invalid length.
[  640.452987][T24015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3965'.
[  640.465112][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'.
[  640.521406][T24030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'.
[  640.598645][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'.
[  640.897848][T24050] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3970'.
[  640.897853][T24048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'.
[  641.049460][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'.
[  641.073299][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'.
[  641.096488][T15883] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  641.098154][ T7674] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  641.098192][ T7674] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  641.098223][ T7674] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  641.227013][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3976'.
[  641.316091][T24068] bridge2: port 1(veth11) entered blocking state
[  641.316199][T24068] bridge2: port 1(veth11) entered disabled state
[  641.316345][T24068] veth11: entered allmulticast mode
[  641.342333][T24068] veth11: entered promiscuous mode
[  641.427272][T24066] geneve3: entered promiscuous mode
[  641.522919][T24074] bridge2: port 2(veth13) entered blocking state
[  641.528138][T24074] bridge2: port 2(veth13) entered disabled state
[  641.528315][T24074] veth13: entered allmulticast mode
[  641.541020][T24074] veth13: entered promiscuous mode
[  641.729989][T24100] netlink: 'syz.0.3982': attribute type 1 has an invalid length.
[  642.272608][T24100] bond0: entered promiscuous mode
[  642.273435][T24100] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.283759][T24103] vlan2: entered allmulticast mode
[  642.283777][T24103] bond0: entered allmulticast mode
[  642.301482][T24113] bond0: (slave bridge4): making interface the new active one
[  642.301503][T24113] bridge4: entered promiscuous mode
[  642.301669][T24113] bridge4: entered allmulticast mode
[  642.310475][T24113] bond0: (slave bridge4): Enslaving as an active interface with an up link
[  642.453596][T24119] netlink: 'syz.4.3985': attribute type 9 has an invalid length.
[  642.535228][T24120] netlink: 'syz.4.3985': attribute type 1 has an invalid length.
[  648.256468][T24162] netlink: 'syz.3.3998': attribute type 1 has an invalid length.
[  648.464762][T24170] __nla_validate_parse: 5 callbacks suppressed
[  648.464783][T24170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3999'.
[  648.626933][T24172] netlink: 'syz.3.3999': attribute type 12 has an invalid length.
[  648.749186][T24176] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000
[  649.075816][ T9462] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  649.075849][ T9462] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.666813][T24206] x_tables: duplicate underflow at hook 1
[  649.743198][T24204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4010'.
[  649.743223][T24204] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4010'.
[  649.743236][T24204] netlink: 'syz.2.4010': attribute type 6 has an invalid length.
[  649.743249][T24204] netlink: 'syz.2.4010': attribute type 5 has an invalid length.
[  649.743259][T24204] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4010'.
[  649.809795][T24204] syzkaller0: entered promiscuous mode
[  649.809817][T24204] syzkaller0: entered allmulticast mode
[  650.208005][T24228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4017'.
[  650.210302][T24228] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4017'.
[  650.388737][T24233] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4018'.
[  650.896957][T24249] net_ratelimit: 487 callbacks suppressed
[  650.896975][T24249] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  651.136154][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.272185][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.350598][T24261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  651.394143][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'.
[  651.403317][T24252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.512839][ T9462] nci: nci_ntf_packet: unsupported ntf opcode 0xf03
[  652.751331][T24298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4034'.
[  652.764036][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4036'.
[  652.895670][T24307] 8021q: adding VLAN 0 to HW filter on device bond2
[  653.742606][T24332] netlink: 'syz.2.4040': attribute type 11 has an invalid length.
[  655.381115][T24277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  655.381294][T24286] netlink: 'syz.4.4034': attribute type 1 has an invalid length.
[  655.381309][T24286] __nla_validate_parse: 1 callbacks suppressed
[  655.381319][T24286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4034'.
[  655.577436][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'.
[  655.759149][T24349] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  655.763337][T24355] syzkaller0: entered promiscuous mode
[  655.763540][T24355] syzkaller0: entered allmulticast mode
[  655.775075][T24355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  655.814911][T24342] syzkaller0: entered promiscuous mode
[  655.814931][T24342] syzkaller0: entered allmulticast mode
[  656.291128][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'.
[  656.364964][T24386] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  656.679736][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'.
[  656.712812][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'.
[  656.737050][ T7674] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  656.737095][ T7674] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  656.737127][ T7674] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.737157][ T7674] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.872631][T24416] Bluetooth: hci0: unsupported parameter 5135
[  656.872650][T24416] Bluetooth: hci0: unsupported parameter 8192
[  656.872660][T24416] Bluetooth: hci0: unsupported parameter 5135
[  656.872726][T24416] Bluetooth: hci0: unsupported parameter 8192
[  656.943211][T10450] tipc: Node number set to 168798929
[  659.161959][T24377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.493910][T24433] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4066'.
[  659.500661][T24425] bond3: entered allmulticast mode
[  659.538468][T24435] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  659.539190][T24435] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  660.071784][T24469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4070'.
[  660.273166][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'.
[  660.273187][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'.
[  660.279345][T24464] 8021q: adding VLAN 0 to HW filter on device bond4
[  660.325476][T24464] netlink: 'syz.2.4071': attribute type 4 has an invalid length.
[  660.325498][T24464] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4071'.
[  660.345855][T24464] .`: renamed from bond0
[  660.398580][T24478] 8021q: adding VLAN 0 to HW filter on device .`
[  660.416798][T24478] bond4: (slave .`): making interface the new active one
[  660.422524][T24478] bond4: (slave .`): Enslaving as an active interface with an up link
[  660.841868][T24461] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  660.844453][ T7678] IPVS: starting estimator thread 0...
[  660.927492][T24493] IPVS: using max 29 ests per chain, 69600 per kthread
[  661.363597][T24510] block nbd0: Unsupported socket: should be TCP or UNIX.
[  661.364069][T24510] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.4075'.
[  661.749871][T24530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4081'.
[  661.770409][T24533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4079'.
[  661.812405][T24523] bond3: option min_links: invalid value (18446744073709551612)
[  661.812495][T24523] bond3: option min_links: allowed values 0 - 2147483647
[  661.833142][T24523] bond3 (unregistering): Released all slaves
[  661.848103][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4081'.
[  662.451961][T24521] syz.4.4081 (24521) used greatest stack depth: 17992 bytes left
[  663.019579][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.019800][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.020012][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.020211][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.021655][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.021869][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4090'.
[  663.720735][T24592] netlink: 'syz.4.4096': attribute type 23 has an invalid length.
[  663.720761][T24592] netlink: 'syz.4.4096': attribute type 11 has an invalid length.
[  665.834343][T24657] syzkaller1: entered allmulticast mode
[  666.086723][T24679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  666.090770][T24669] bridge_slave_0: left allmulticast mode
[  666.090794][T24669] bridge_slave_0: left promiscuous mode
[  666.091002][T24669] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.154162][T24669] bridge_slave_1: left allmulticast mode
[  666.154187][T24669] bridge_slave_1: left promiscuous mode
[  666.154434][T24669] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.217977][T24669] bond0: (slave bond_slave_0): Releasing backup interface
[  666.239962][T24669] bond0: (slave bond_slave_1): Releasing backup interface
[  666.300554][T24669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.300578][T24669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  666.326091][T24669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  666.326112][T24669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  666.354061][T24669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  666.503992][T24696] __nla_validate_parse: 65 callbacks suppressed
[  666.504012][T24696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4120'.
[  666.506957][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'.
[  666.539550][ T2005] block nbd0: Possible stuck request ffff88807e980000: control (read@0,4096B). Runtime 90 seconds
[  666.592462][T24700] netlink: 'syz.4.4122': attribute type 1 has an invalid length.
[  666.861781][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4124'.
[  667.402647][T24738] syzkaller0: entered promiscuous mode
[  667.402668][T24738] syzkaller0: entered allmulticast mode
[  667.660910][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'.
[  667.779960][T24752] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4137'.
[  667.821863][T24751] batman_adv: batadv0: Adding interface: macvlan4
[  667.821881][T24751] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.821907][T24751] batman_adv: batadv0: Interface activated: macvlan4
[  667.873486][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'.
[  668.054573][T24763] nbd2: detected capacity change from 0 to 64
[  668.073111][ T5627] block nbd2: Receive control failed (result -104)
[  668.253096][T24768] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20001
[  668.331896][T24777] tipc: Started in network mode
[  668.331926][T24777] tipc: Node identity ac14140f, cluster identity 4711
[  668.332163][T24777] tipc: New replicast peer: 255.255.255.255
[  668.340525][T24777] tipc: Enabled bearer <udp:syz2>, priority 13
[  668.543779][T24784] netlink: 9900 bytes leftover after parsing attributes in process `syz.3.4148'.
[  668.543805][T24784] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.543922][T24784] batman_adv: batadv0: Removing interface: batadv_slave_0
[  668.548310][T24784] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.548330][T24784] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.588846][T24784] batman_adv: batadv0: Interface deactivated: macvlan4
[  668.588867][T24784] batman_adv: batadv0: Removing interface: macvlan4
[  668.654411][T24792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'.
[  668.730765][T24796] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  668.731616][T24796] netlink: 'syz.0.4150': attribute type 1 has an invalid length.
[  668.795740][T24792] IPVS: Scheduler module ip_vs_sip not found
[  668.850231][T24796] 8021q: adding VLAN 0 to HW filter on device bond3
[  669.078914][T24815] netlink: 'syz.3.4156': attribute type 1 has an invalid length.
[  669.313535][T24815] 8021q: adding VLAN 0 to HW filter on device bond5
[  669.364352][T24815] macvlan5: entered promiscuous mode
[  669.364375][T24815] macvlan5: entered allmulticast mode
[  669.369779][T24815] bond5: entered promiscuous mode
[  669.372094][T24815] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  669.391026][T24815] bond5: left promiscuous mode
[  669.456053][T10454] tipc: Node number set to 2886997007
[  669.765607][T24840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4165'.
[  669.847274][T24840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4165'.
[  669.930698][T24850] netlink: 'syz.3.4167': attribute type 2 has an invalid length.
[  669.952790][T24850] netlink: Unknown conntrack attr (type=9989, max=9)
[  669.952825][T24850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.102252][   T31] audit: type=1800 audit(1790564363.213:14): pid=24840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4165" name="memory.events" dev="tmpfs" ino=1409 res=0 errno=0
[  670.432101][T24860] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  670.763082][T24885] netlink: 'syz.2.4179': attribute type 1 has an invalid length.
[  670.860850][T24887] syzkaller0: left promiscuous mode
[  670.860904][T24887] syzkaller0: left allmulticast mode
[  670.926066][T24889] x_tables: ip_tables: osf match: only valid for protocol 6
[  670.986580][T24902] netlink: 'syz.1.4184': attribute type 2 has an invalid length.
[  671.149549][T24905] veth1_macvtap: left promiscuous mode
[  671.149582][T24905] macsec0: entered promiscuous mode
[  671.172970][T24905] veth1_macvtap: entered promiscuous mode
[  671.195058][T24905] macsec0: left promiscuous mode
[  671.346990][T24917] syzkaller0: entered promiscuous mode
[  671.347011][T24917] syzkaller0: entered allmulticast mode
[  671.370544][T24917] 0: reclassify loop, rule prio 0, protocol 800
[  671.373362][T24914] syzkaller0: entered promiscuous mode
[  671.373379][T24914] syzkaller0: entered allmulticast mode
[  671.459846][T24914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.559287][T24927] __nla_validate_parse: 4 callbacks suppressed
[  671.559317][T24927] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4193'.
[  671.580699][T24913] tipc: Resetting bearer <eth:syzkaller0>
[  671.662422][T24913] tipc: Disabling bearer <eth:syzkaller0>
[  671.699682][T24927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4193'.
[  672.022987][T24941] batadv1: entered promiscuous mode
[  672.023008][T24941] batadv1: entered allmulticast mode
[  672.134071][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4199'.
[  672.814268][T24986] netlink: 'syz.2.4207': attribute type 16 has an invalid length.
[  672.814289][T24986] netlink: 'syz.2.4207': attribute type 17 has an invalid length.
[  672.983778][T24994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4209'.
[  672.984381][T15881] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.984504][T15878] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.984537][T15878] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.985619][   T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  673.023507][T24986] Bluetooth: MGMT ver 1.23
[  673.023554][T24986] Bluetooth: hci1: too big key_count value 29096
[  673.341734][T25007] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode
[  673.355850][T25007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4213'.
[  673.515942][T25014] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4214'.
[  673.848494][T25030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4219'.
[  673.865178][T25020] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  674.329998][T25056] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4222'.
[  674.438131][T25058] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  674.773128][T25077] sctp: [Deprecated]: syz.0.4226 (pid 25077) Use of int in maxseg socket option.
[  674.773128][T25077] Use struct sctp_assoc_value instead
[  675.112209][T25056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  675.716474][T25105] netlink: 'syz.0.4233': attribute type 10 has an invalid length.
[  675.737884][T25105] team0: Port device bond_slave_0 added
[  675.956301][T25115] xt_bpf: check failed: parse error
[  675.962749][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'.
[  676.049537][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4234'.
[  676.479078][T25125] syzkaller0: entered promiscuous mode
[  676.479099][T25125] syzkaller0: entered allmulticast mode
[  676.509417][T25125] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  676.847375][T25144] __nla_validate_parse: 2 callbacks suppressed
[  676.847395][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4241'.
[  677.587166][T25168] dvmrp6: entered allmulticast mode
[  678.040846][T25181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'.
[  678.049659][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'.
[  678.065520][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4249'.
[  678.176513][T25183] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4249'.
[  678.425579][T25186] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  678.478574][T25190] syzkaller1: entered promiscuous mode
[  678.478590][T25190] syzkaller1: entered allmulticast mode
[  678.733481][T25192] netlink: 'syz.4.4252': attribute type 4 has an invalid length.
[  678.733501][T25192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4252'.
[  678.835570][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'.
[  679.136083][T25218] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4259'.
[  679.310790][T25225] netlink: 'syz.0.4260': attribute type 10 has an invalid length.
[  679.368842][T25231] netlink: 'syz.0.4260': attribute type 10 has an invalid length.
[  679.385089][T25225] team0: Port device dummy0 added
[  679.579513][T25231] team0: Port device dummy0 removed
[  679.700579][T25240] syzkaller0: entered promiscuous mode
[  679.700601][T25240] syzkaller0: entered allmulticast mode
[  679.820992][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4265'.
[  679.975861][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4267'.
[  680.009337][T25249] ip6tnl1: entered allmulticast mode
[  680.027015][T25255] netlink: 'syz.3.4269': attribute type 10 has an invalid length.
[  680.178442][T25263] netlink: 'syz.3.4269': attribute type 10 has an invalid length.
[  680.184696][T25255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  680.229056][T25255] team0: Port device netdevsim1 added
[  680.308752][T25263] team0: Port device netdevsim1 removed
[  680.317030][T25263] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  680.319262][T25263] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  680.390921][T25268] vlan3: entered promiscuous mode
[  680.390943][T25268] bridge0: entered promiscuous mode
[  680.443988][T25272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.432150][T25315] 8021q: adding VLAN 0 to HW filter on device .`
[  682.480953][T25315] 8021q: adding VLAN 0 to HW filter on device bond1
[  682.493487][T25315] bond2: left promiscuous mode
[  682.502835][T25315] geneve2: left promiscuous mode
[  682.507861][T25315] bond0: left promiscuous mode
[  682.507879][T25315] bridge4: left promiscuous mode
[  682.509204][T25315] vlan2: left allmulticast mode
[  682.509218][T25315] bond0: left allmulticast mode
[  682.509229][T25315] bridge4: left allmulticast mode
[  682.518190][ T7321] bond1: (slave macvlan2): link status definitely down, disabling slave
[  682.537709][ T7321] bond1: now running without any active interface!
[  682.751192][T25322] openvswitch: netlink: IPv4 tunnel dst address is zero
[  683.671394][T25285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.009552][T25333] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  684.180872][T25339] __nla_validate_parse: 4 callbacks suppressed
[  684.180891][T25339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4292'.
[  684.180917][T25339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4292'.
[  684.191507][T25339] netlink: 'syz.2.4292': attribute type 1 has an invalid length.
[  684.191527][T25339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4292'.
[  684.558993][T25355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4295'.
[  684.559026][T25355] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  684.733691][T25361] netlink: 'syz.2.4298': attribute type 1 has an invalid length.
[  684.817399][T25361] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  684.821321][T25370] netlink: 'syz.2.4298': attribute type 10 has an invalid length.
[  684.821348][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4298'.
[  685.733051][ T1309] ieee802154 phy3 wpan0: encryption failed: -22
[  685.973829][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4312'.
[  686.956685][    C1] ==================================================================
[  686.956777][    C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200
[  686.956850][    C1] Free of addr ffff888026db6180 by task ksoftirqd/1/24
[  686.956866][    C1] 
[  686.956913][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  686.956947][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  686.956961][    C1] Call Trace:
[  686.956970][    C1]  <TASK>
[  686.956980][    C1]  dump_stack_lvl+0xe8/0x150
[  686.957016][    C1]  print_address_description+0x55/0x1e0
[  686.957056][    C1]  print_report+0x58/0x70
[  686.957082][    C1]  ? rcu_free_sheaf+0x31/0x200
[  686.957103][    C1]  kasan_report_invalid_free+0xea/0x110
[  686.957131][    C1]  ? rcu_free_sheaf+0x31/0x200
[  686.957154][    C1]  ? rcu_free_sheaf+0x31/0x200
[  686.957176][    C1]  __kasan_slab_pre_free+0x104/0x120
[  686.957201][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  686.957231][    C1]  ? rcu_core+0x8a8/0x1260
[  686.957255][    C1]  rcu_free_sheaf+0x31/0x200
[  686.957277][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  686.957312][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  686.957334][    C1]  ? rcu_core+0x8a8/0x1260
[  686.957356][    C1]  rcu_core+0x926/0x1260
[  686.957386][    C1]  ? __pfx_rcu_core+0x10/0x10
[  686.957417][    C1]  handle_softirqs+0x226/0x860
[  686.957447][    C1]  ? schedule+0x90/0x2b0
[  686.957471][    C1]  ? run_ksoftirqd+0x36/0x60
[  686.957505][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  686.957536][    C1]  run_ksoftirqd+0x36/0x60
[  686.957567][    C1]  smpboot_thread_fn+0x565/0xa70
[  686.957597][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  686.957631][    C1]  kthread+0x38b/0x480
[  686.957651][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  686.957682][    C1]  ? __pfx_kthread+0x10/0x10
[  686.957703][    C1]  ret_from_fork+0x514/0xb70
[  686.957726][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  686.957745][    C1]  ? __switch_to+0xc89/0x1420
[  686.957787][    C1]  ? __pfx_kthread+0x10/0x10
[  686.957808][    C1]  ret_from_fork_asm+0x1a/0x30
[  686.957848][    C1]  </TASK>
[  686.957856][    C1] 
[  686.957861][    C1] Allocated by task 15883:
[  686.957909][    C1]  kasan_save_track+0x3e/0x80
[  686.957929][    C1]  __kasan_kmalloc+0x93/0xb0
[  686.957951][    C1]  __kmalloc_cache_noprof+0x321/0x600
[  686.957970][    C1]  hwsim_update_pib+0x7e/0x400
[  686.958058][    C1]  hwsim_set_promiscuous_mode+0x196/0x2e0
[  686.958087][    C1]  drv_set_promiscuous_mode+0x159/0x2e0
[  686.958176][    C1]  drv_start+0x4ea/0x1010
[  686.958198][    C1]  mac802154_scan_worker+0x8e6/0xe60
[  686.958221][    C1]  process_scheduled_works+0xc3d/0x1630
[  686.958248][    C1]  worker_thread+0xa47/0xfb0
[  686.958274][    C1]  kthread+0x38b/0x480
[  686.958292][    C1]  ret_from_fork+0x514/0xb70
[  686.958316][    C1]  ret_from_fork_asm+0x1a/0x30
[  686.958346][    C1] 
[  686.958351][    C1] Freed by task 15:
[  686.958361][    C1]  kasan_save_track+0x3e/0x80
[  686.958381][    C1]  kasan_save_free_info+0x40/0x50
[  686.958410][    C1]  __kasan_slab_free+0x5c/0x80
[  686.958431][    C1]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  686.958456][    C1]  rcu_free_sheaf+0x31/0x200
[  686.958475][    C1]  rcu_core+0x926/0x1260
[  686.958494][    C1]  handle_softirqs+0x226/0x860
[  686.958520][    C1]  run_ksoftirqd+0x36/0x60
[  686.958548][    C1]  smpboot_thread_fn+0x565/0xa70
[  686.958577][    C1]  kthread+0x38b/0x480
[  686.958594][    C1]  ret_from_fork+0x514/0xb70
[  686.958611][    C1]  ret_from_fork_asm+0x1a/0x30
[  686.958640][    C1] 
[  686.958645][    C1] The buggy address belongs to the object at ffff888026db6180
[  686.958645][    C1]  which belongs to the cache kmalloc-64 of size 64
[  686.958721][    C1] The buggy address is located 0 bytes inside of
[  686.958721][    C1]  64-byte region [ffff888026db6180, ffff888026db61c0)
[  686.958770][    C1] 
[  686.958776][    C1] The buggy address belongs to the physical page:
[  686.958791][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026db6b80 pfn:0x26db6
[  686.958812][    C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  686.958831][    C1] page_type: f5(slab)
[  686.958852][    C1] raw: 00fff00000000200 ffff88801b0418c0 ffff88801b040588 ffffea0000c6c6d0
[  686.958871][    C1] raw: ffff888026db6b80 000000000020001f 00000000f5000000 0000000000000000
[  686.958883][    C1] page dumped because: kasan: bad access detected
[  686.958897][    C1] page_owner tracks the page as allocated
[  686.958905][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5970771642
[  686.958938][    C1]  post_alloc_hook+0x1f9/0x250
[  686.958968][    C1]  get_page_from_freelist+0x2209/0x2280
[  686.958990][    C1]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  686.959012][    C1]  allocate_slab+0x7d/0x620
[  686.959037][    C1]  refill_objects+0x2d5/0x350
[  686.959063][    C1]  __pcs_replace_empty_main+0x2c8/0x6c0
[  686.959088][    C1]  __kmalloc_cache_noprof+0x39b/0x600
[  686.959107][    C1]  percpu_ref_init+0xc5/0x350
[  686.959128][    C1]  blkg_alloc+0xee/0x8f0
[  686.959187][    C1]  blkcg_init_disk+0x1cf/0x2e0
[  686.959208][    C1]  __alloc_disk_node+0x317/0x600
[  686.959288][    C1]  __blk_mq_alloc_disk+0x24a/0x390
[  686.959344][    C1]  loop_add+0x480/0xb40
[  686.959447][    C1]  loop_init+0xd7/0x160
[  686.959624][    C1]  do_one_initcall+0x250/0x870
[  686.959652][    C1]  do_initcall_level+0x10a/0x1a0
[  686.959733][    C1] page_owner free stack trace missing
[  686.959741][    C1] 
[  686.959746][    C1] Memory state around the buggy address:
[  686.959785][    C1]  ffff888026db6080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  686.959796][    C1]  ffff888026db6100: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  686.959808][    C1] >ffff888026db6180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  686.959818][    C1]                    ^
[  686.959827][    C1]  ffff888026db6200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  686.959842][    C1]  ffff888026db6280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  686.959853][    C1] ==================================================================
[  686.959892][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  687.550311][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  687.559504][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  687.569569][    C1] Call Trace:
[  687.572859][    C1]  <TASK>
[  687.575784][    C1]  vpanic+0x56d/0xa60
[  687.579772][    C1]  ? rcu_is_watching+0x16/0xb0
[  687.584534][    C1]  ? __pfx_vpanic+0x10/0x10
[  687.589039][    C1]  panic+0xc5/0xd0
[  687.592755][    C1]  ? __pfx_panic+0x10/0x10
[  687.597175][    C1]  check_panic_on_warn+0x89/0xb0
[  687.602106][    C1]  end_report+0x73/0x170
[  687.606365][    C1]  ? rcu_free_sheaf+0x31/0x200
[  687.611159][    C1]  kasan_report_invalid_free+0xfa/0x110
[  687.616731][    C1]  ? rcu_free_sheaf+0x31/0x200
[  687.621496][    C1]  ? rcu_free_sheaf+0x31/0x200
[  687.626251][    C1]  __kasan_slab_pre_free+0x104/0x120
[  687.631531][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  687.637081][    C1]  ? rcu_core+0x8a8/0x1260
[  687.641491][    C1]  rcu_free_sheaf+0x31/0x200
[  687.646072][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  687.651876][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  687.657063][    C1]  ? rcu_core+0x8a8/0x1260
[  687.661469][    C1]  rcu_core+0x926/0x1260
[  687.665708][    C1]  ? __pfx_rcu_core+0x10/0x10
[  687.670390][    C1]  handle_softirqs+0x226/0x860
[  687.675153][    C1]  ? schedule+0x90/0x2b0
[  687.679388][    C1]  ? run_ksoftirqd+0x36/0x60
[  687.683978][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  687.688998][    C1]  run_ksoftirqd+0x36/0x60
[  687.693408][    C1]  smpboot_thread_fn+0x565/0xa70
[  687.698341][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  687.703373][    C1]  kthread+0x38b/0x480
[  687.707433][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  687.712888][    C1]  ? __pfx_kthread+0x10/0x10
[  687.717467][    C1]  ret_from_fork+0x514/0xb70
[  687.722049][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  687.727163][    C1]  ? __switch_to+0xc89/0x1420
[  687.731840][    C1]  ? __pfx_kthread+0x10/0x10
[  687.736418][    C1]  ret_from_fork_asm+0x1a/0x30
[  687.741187][    C1]  </TASK>
[  687.744453][    C1] Kernel Offset: disabled
[  687.748766][    C1] Rebooting in 86400 seconds..