last executing test programs:

2.256739751s ago: executing program 3 (id=7048):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x20, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x2, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104470c00000000000000000000878d75ddc0f959ff4e83e5f1e16f4ea562c55a73a6", @ANYRES32=0x0, @ANYBLOB="00000200000200002400128009000100626f6e64000000001400028008000300020000000800050002000000"], 0x44}}, 0x0)

2.096423609s ago: executing program 3 (id=7051):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fffffffffffffff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}}, 0x24004001) (async, rerun: 64)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x23, 0x0, 0x94bcd62ba7316c65}}], 0x3284b164842c97f7, 0x8014)

1.960584987s ago: executing program 3 (id=7054):
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local}}}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x3a, 0xb, 0x70bd26, 0x4002, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0xffffffff}, 0x18}}, 0x0)

1.910222197s ago: executing program 3 (id=7056):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6}}}}}}}, 0x0)

1.813355591s ago: executing program 3 (id=7057):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x24, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000004)
sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x8800}}], 0x1, 0x0)
r6 = accept(r1, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000122)
sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}, {&(0x7f0000001540)="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", 0x1000}], 0x2, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xaa}}, @init={0x18, 0x84, 0x0, {0x803}}], 0x30}], 0x1, 0x0)

1.358167056s ago: executing program 1 (id=7067):
r0 = socket(0x2, 0x3, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r2 = socket(0xa, 0x3, 0xff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8)
sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000100290000003b0000000000001400000000"], 0x18}, 0x922bac8556bda5ce)
setsockopt(r0, 0xff, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket(0x2, 0x3, 0x40) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
socket(0xa, 0x3, 0xff) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) (async)
sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000100290000003b0000000000001400000000"], 0x18}, 0x922bac8556bda5ce) (async)
setsockopt(r0, 0xff, 0x1, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)

1.269074886s ago: executing program 0 (id=7069):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000200)=0xfffffffd, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xd203}, 0x10}, 0x94)
bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f384", 0x6}], 0x1}, 0x4048081)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r5 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
sendmsg$netlink(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x800)
recvmsg$can_raw(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5)

1.189056129s ago: executing program 0 (id=7072):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="477da4ee4fe687d9c5e080dcec831abd218eaa59d59cafadaa60b97abba04be3a51763434fa4fb08302f5ee14b6c588f8ac057c921818eaf68b13ce164335f4d62bd71b997f66ac1bffc3ffc69b974263e10f648cba1ec4b8269490c80684e0d8fc39c9a9e60c5f425820f27e2c5367eaadb75ac3ec1c3cf2d", @ANYRES32=0x0, @ANYRES64=r2], 0x2c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1.020349488s ago: executing program 4 (id=7073):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x59, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x3)
r1 = socket$inet(0x2, 0xa, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000200)=@ethtool_wolinfo={0x5, 0x7, 0x6, "02b6ae7dc2b5"}})

1.019948971s ago: executing program 1 (id=7074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4)
connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r4, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

1.01947356s ago: executing program 2 (id=7075):
syz_emit_ethernet(0x1a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@llc={0x4, {@llc={0xaa, 0x0, 'c', "88a6a1f49f"}}}}}, 0x0)

979.520408ms ago: executing program 0 (id=7076):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000980)={r0, &(0x7f0000000600)='eth\x00', 0x60c242, &(0x7f0000000700)={@align=0x8, {0x6dec, 0x200, 0x3, 0x8}}, 0x2, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x81}) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000980)={<r3=>r0, &(0x7f0000000600)='eth\x00', 0x60c242, &(0x7f0000000700)={@align=0x8, {0x6dec, 0x200, 0x3, 0x8}}, 0x2, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x81})
sendmsg$802154_dgram(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f0000000880)={&(0x7f0000000780)="792ce4296dd0290874b20de2cdffda751063176fd06774e58373c1ae5f2e9181da52e4fc1313de042179e58c7465c01a0fecc631e555175b929ad9808439216d92d16650127148676967ac1a8b7b7b07c1a18901aa8a1144e7cadc8d7a0efcca955e355a1b958f6b90f8388483b028fec5513ed7487c23ede344ee92097f6f31e5594cb85319786d74b780eaa81969c297f3e964d6a7e73cde85b7e35f9b7b51f5d496bf3e9c294953b13c12931f8655a8c709941716a9457a352ac65c53a27611941dee687e25da4054bc6ba16573b92300465fe01e1559da8723b09d4a", 0xde}, 0x1, 0x0, 0x0, 0x40}, 0x400c080) (async)
sendmsg$802154_dgram(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14, &(0x7f0000000880)={&(0x7f0000000780)="792ce4296dd0290874b20de2cdffda751063176fd06774e58373c1ae5f2e9181da52e4fc1313de042179e58c7465c01a0fecc631e555175b929ad9808439216d92d16650127148676967ac1a8b7b7b07c1a18901aa8a1144e7cadc8d7a0efcca955e355a1b958f6b90f8388483b028fec5513ed7487c23ede344ee92097f6f31e5594cb85319786d74b780eaa81969c297f3e964d6a7e73cde85b7e35f9b7b51f5d496bf3e9c294953b13c12931f8655a8c709941716a9457a352ac65c53a27611941dee687e25da4054bc6ba16573b92300465fe01e1559da8723b09d4a", 0xde}, 0x1, 0x0, 0x0, 0x40}, 0x400c080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/106, 0x6a}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/106, 0x6a}}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$netlink(0x10, 0x3, 0xe)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r4)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000002300)={0x1354, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7c3ef3f9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf59c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8aca}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1dca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e9}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x36d}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6118}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x1024, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x1354}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000010)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
socket$can_raw(0x1d, 0x3, 0x1) (async)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r11, 0x89f1, &(0x7f0000000000)) (async)
ioctl$sock_netdev_private(r11, 0x89f1, &(0x7f0000000000))
sendmsg$can_raw(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
recvmsg$unix(r9, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000340)=""/44, 0x2c}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000a80)={<r12=>r5, &(0x7f0000000640)='udp\x00', 0x191000, &(0x7f00000009c0)={@align=0x1, {0x4, 0x0, 0x9, 0x7}}, 0xaa5, &(0x7f0000000a00), &(0x7f0000000a40)=0x8})
writev(r12, &(0x7f0000000ac0)=[{&(0x7f0000000bc0)="e6adbe9d20d0cbc087abf899c9fd095de4c5dd938dfc9d598ce0e8150ed286bb645927af57afbfee3ff9784156f1ff0e9cdf928b5809fd2d072c8e165307a1384e36cdd4f8d9feeb00518b471054b732badf22eef7b91ec998fc2de4e6eaf8de5e8988d3edc9a718365938505f31f521583bab0f0e64dbc628ab10e83aadbac0001db5d018d7c64959f51dee7332554dfe67173a7478e4e8005e2579e9c766e2fefd6dbb063fe7a98d8339d8d255885ced8ad33aac61d9e6914dee", 0xbb}, {&(0x7f0000000c80)="683b54e4f3213e81df05e701b75029cae2d76c25442899b5f9a6dd24fd8f2c528f431846f66d860f423c32437794467983007f9d1939159b5a7acb9923d437d09506c5fd6669f161f566e83b77fa3462c30b6801393a1927916c4a885583aa0de5d439723fec905792fb8ee7fb7da579627ef4e9ddd8d75674112d1741f56444d444fc2ee811fa8aef5679c080a88ec17c59b838dfe63ebb71f2d56527322e4c323de99e3ebd6a49aef25f573aca0e303eaa1b701ca75942726e22ca704ff9a5ab2a4c1f97ffb1847670e317138f0e15ee0f7c6cbe1b44d2fbc68fb8d53c04cd0ddc71ae0461f6386d51352c39472af46b", 0xf1}], 0x2)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000480) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000480)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000900)=@dellink={0x2c, 0x11, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1, 0x46802}, [@IFLA_XDP={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x261a7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

978.024834ms ago: executing program 2 (id=7077):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x5, [@const={0x4, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @union={0xe, 0x2, 0x0, 0x5, 0x1, 0x3, [{0xb, 0x0, 0x9}, {0xe, 0x1, 0x6}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x0, 0x2e]}}, &(0x7f0000000280), 0x8d, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x1b, r0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc03b}]}, 0x78}}, 0x4804)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000010401030000000000000000020000010800034000000005080001000008fffa0a0002000000000300000000080004400000004d08000340000000020a26fbd8bebba8a26600000008000540000000079b23fbba6ba0947096b1014c991ce5d221a282319b4f34fc7e28a037feb639b892aab142d8dd6d667bc959bbfed0fd8dcbd5d873df3c69c583166c56153dd54f053c719fe0af16b15e20e533ea7d66bd13341269e7c95910e5cc6fa4f5a58a055f9fef822412136a84c8ddb0cbacc2ec968adb96b9fa3c055f1ca9af74d7a04eddf2463b85e22d0d4e09d262eab77fbddb69ca085069a287e5f4a0227b33592231bc04161ac708c5f7dbac"], 0x54}, 0x1, 0x0, 0x0, 0x2400a000}, 0x2400c0c0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)

931.28809ms ago: executing program 4 (id=7078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x1000000}}]}, 0x20}}, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640)={0x6, [0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0]}, &(0x7f0000000680)=0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e24, @loopback}}, 0x1ff, 0x4}, &(0x7f0000000780)=0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000003e00070127bd700000000000017c00000400fc800c00018008000600", @ANYRES32=r0, @ANYBLOB="0800a4f3380280725eb86208000700", @ANYRES32=r0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f0, 0x0, 0x448, 0x0, 0xd0, 0x518, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8001}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e22], [0x4e24, 0x4e21], [0xc, 0x400, 0x0, 0x80, 0x1, 0xbb, 0x8, 0x9, 0x55d6, 0x7f, 0x7, 0x3, 0xff, 0xdc6b, 0x6, 0x10, 0x6, 0x0, 0x3, 0x8, 0x0, 0xff, 0x60, 0x8000, 0x9, 0xfffffffb, 0xc1, 0x3, 0x1, 0x5, 0x5, 0x40, 0xffff, 0x5, 0x4, 0x1754, 0x1000, 0x8419, 0xffff, 0x7, 0x1, 0xf2, 0x7, 0xc0000000, 0x1, 0x7, 0x6, 0x3, 0x7, 0x3, 0x1b023627, 0x3a2d, 0x5, 0x10000, 0x0, 0x3, 0x7fff, 0x46ed, 0x6, 0xfffffff9, 0x8000, 0x3ff, 0x9, 0x6], 0xa, [{0x7, 0x0, 0x3}, {0xd6, 0x1, 0x2}, {0x0, 0x6, 0xa9}, {0x70, 0x86, 0xec}], 0x1, 0x0, 0x4}}, @common=@hl={{0x28}, {0x0, 0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2f}, @ipv6=@empty, 0x5, 0x3d, 0xf000}}}, {{@ipv6={@local, @mcast2, [0xff, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'veth1_to_bond\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x9, 0x2, 0x29}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@rand_addr=0x64010101, 0x24, 0x0, 0x4}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x6}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xaa54498c98938af5, 0x0, 0xffffff00, 0xffffff00], 'vlan0\x00', 'pim6reg\x00', {}, {0xff}, 0x87, 0x4, 0x4, 0x23}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @remote, [0xffffffff, 0xff000000, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], 'veth1_macvtap\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x32, 0x3, 0x3, 0x19}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x26}, [0xff, 0xffffff00, 0xffffff00], 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x9, 0x0, 0x0, 0x0, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x4008080)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r10)
sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r11, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='( \x00\x00', @ANYRES16=r12, @ANYBLOB="100029bd7000fedbdf250400000014000300fe880000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4008819}, 0x4001)

788.604683ms ago: executing program 3 (id=7079):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x7)
r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r2 = accept$ax25(r1, &(0x7f0000000340)={{0x3, @default}, [@rose, @rose, @rose, @rose, @remote, @default, @bcast, @bcast]}, &(0x7f0000000040)=0x48)
accept$ax25(r2, &(0x7f00000003c0)={{0x3, @bcast}, [@default, @rose, @bcast, @remote, @remote, @default, @default, @netrom]}, &(0x7f0000000080)=0x48)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
recvfrom$ax25(r3, &(0x7f0000000200)=""/233, 0xe9, 0x2000, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100010000000000000000000a001000000000000000000014000200fc"], 0x30}}, 0x0)

788.355665ms ago: executing program 2 (id=7080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cefffff070601f300000000000000000000000005d99250cc6c9320109263806d5200010007000000"], 0x1c}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000030a01020000000000000000010000000900010073797a30000000001c0008800c00024000000000000004000c000140000000000000000408000a40000000040900030073797a30000000002c000000030a01040000000000000000010000010900010073797a30000000000900030073797a30"], 0xbadc}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

750.865277ms ago: executing program 4 (id=7081):
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

651.297329ms ago: executing program 4 (id=7082):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x9d, 0x0, 0xb, 0x8001}, {0x6, 0x5, 0x5, 0x800}, {0x4, 0x4, 0x39, 0x27}, {0x8, 0x5, 0x6, 0x1}, {0x101, 0x3, 0x3, 0x7}, {0xb, 0x7, 0x4, 0x4249}, {0x0, 0x2, 0x4, 0x2}]})

576.430883ms ago: executing program 2 (id=7083):
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0)

574.451792ms ago: executing program 0 (id=7084):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x1, 0x3}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000000000000000098000000000000000", @ANYRES32=0x0, @ANYBLOB="000200000000000014001a80100002800c00018008000b007400000014003500776c616e3100"/48], 0x48}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c)

554.904862ms ago: executing program 4 (id=7085):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8c, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8c, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x7, 0x0, 0xfffffff4, 0x10, @empty, @private2, 0x7, 0x7800, 0x401, 0x5}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003401900000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r5, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x450041, &(0x7f00000000c0)={@align=0x6, {0x5, 0x5, 0xf, 0x1}}, 0x1ff, 0x0, 0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001a0002002dbd7000fadbdf250a20300755030007002800000c00090003000807", @ANYRES32=0x0, @ANYBLOB="0400f0ff53c5374d8d2b182c5da2b8716bad63907660294049ee", @ANYRES32=r1, @ANYBLOB="0c00090002000904", @ANYRES32=r2, @ANYBLOB="3d000880d41aac4b64d5baf684734423924743f679bd729c07ea2ad1655af4ed1ff54231ea81c8af091f609990c804aff85d2ad193c73af58acb8360990000000600150009000000080006000400000008000400", @ANYRES32=r1, @ANYBLOB], 0x94}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001a0002002dbd7000fadbdf250a20300755030007002800000c00090003000807", @ANYRES32=0x0, @ANYBLOB="0400f0ff53c5374d8d2b182c5da2b8716bad63907660294049ee", @ANYRES32=r1, @ANYBLOB="0c00090002000904", @ANYRES32=r2, @ANYBLOB="3d000880d41aac4b64d5baf684734423924743f679bd729c07ea2ad1655af4ed1ff54231ea81c8af091f609990c804aff85d2ad193c73af58acb8360990000000600150009000000080006000400000008000400", @ANYRES32=r1, @ANYBLOB], 0x94}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
shutdown(r6, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendto$inet(r6, &(0x7f0000000040)="71a44c605f57f5f8e3286d64271ffbf7e94a49e6bb0c9bd16c53dbf4004c85ec35594be8a3a44a5dfd8e8d50548704e88e36cd856b8162dad4", 0x39, 0x4004091, &(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)

542.953493ms ago: executing program 1 (id=7086):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xea9, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xce5}]]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

469.138557ms ago: executing program 2 (id=7087):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0xfe33)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))

451.606009ms ago: executing program 0 (id=7088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x161, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "02663f", 0x12b, 0x21, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x6c, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x9058}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x118}]}, @fragment={0x21, 0x0, 0x34, 0x0, 0x0, 0x9, 0x64}, @routing={0x5c, 0xa, 0x2, 0x7f, 0x0, [@private0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast1]}, @srh={0x4, 0x6, 0x4, 0x3, 0x3, 0x10, 0xd, [@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0xa, 0x0, 0x0, 0x6, 0x5, '6sF', 0xfd, "c58fec"}, "e24ad64c1c244c538648759122c95e82ae05c95fd11f970f3de5b2800c2743ff2fff158b7b45c70982df4d44ffbd1d15107ea4d17bd03213f1d6dd"}}}}}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x161, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "02663f", 0x12b, 0x21, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x6c, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x9058}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x118}]}, @fragment={0x21, 0x0, 0x34, 0x0, 0x0, 0x9, 0x64}, @routing={0x5c, 0xa, 0x2, 0x7f, 0x0, [@private0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast1]}, @srh={0x4, 0x6, 0x4, 0x3, 0x3, 0x10, 0xd, [@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0xa, 0x0, 0x0, 0x6, 0x5, '6sF', 0xfd, "c58fec"}, "e24ad64c1c244c538648759122c95e82ae05c95fd11f970f3de5b2800c2743ff2fff158b7b45c70982df4d44ffbd1d15107ea4d17bd03213f1d6dd"}}}}}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, 0x1c) (async)

399.436685ms ago: executing program 1 (id=7089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2})
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async)

192.376203ms ago: executing program 1 (id=7090):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) (async)
close(0x3) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
close(r1)

185.760812ms ago: executing program 4 (id=7091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffd, {0x6}}, 0x14}}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x7, {0xb, [{0xd6, 0xcc}, {0x4, 0x3}, {0x3, 0xd3}, {0x3, 0xd}, {0x1, 0x4}, {0xfd, 0x7}, {0x2}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0xa}]}}, 0x1a)
unshare(0x20400)
r5 = accept(r0, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x20, 0x0, 0x100}, 0x14}}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xd4, r6, 0x124, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff56c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24008010}, 0x40000)

175.359656ms ago: executing program 2 (id=7092):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84)
recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x2, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYBLOB="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"], 0x184}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x35}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20)
socket$kcm(0xa, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010006304fdffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="5b12577cbcb5f31a24001280110001006272696467655f736c617665000000000900058005001b0001000000140003006272696467655f736c6176655f300000"], 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_pressure(r7, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff7}, 0x2f)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737b7a3200000000140000001100011ab183602d2924341e27db4151d5425a51ff544b8304c5fd1ac1c845507e684cf98140d9092685b3bf4e27b66dda066af5f250094be93be15d13badc48dc405a7b49127b3786a34460d7f25abbcb2f85049ccfc0d4fed7a688054a585ded84b510113d2e88f2bdbc69f8343cde930c645a322c2bb80fe45129e0b57c6ac9f0de04523b7951bd7f"], 0x7c}}, 0x804)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r10, 0x890c, &(0x7f0000000440)={0x1, @bcast, @bpq0, 0x8, 'syz1\x00', @default, 0xfffffffe, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]})
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000014f900020000002c0004802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0)

171.580516ms ago: executing program 0 (id=7093):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xb}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x7, 0x401, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0xd0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {0x3}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x47}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_INDEV={0x14}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
close(r9)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}})
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x47, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000400)=""/158, 0x7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x300, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4048845}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f00000002c0)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=7094):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000000)={@empty, @rand_addr=0x64010100, @private=0xa010100}, 0xc) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

[  559.875857][T24966] hsr_slave_1: left allmulticast mode
[  559.881354][T24966] macvlan4: left allmulticast mode
[  559.905182][T10525] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  559.914997][T10525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.938853][T10019] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  559.947483][T10019] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.243706][T24978] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5092'.
[  560.450136][T24996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5096'.
[  560.468004][T24992] dvmrp0: entered allmulticast mode
[  560.480851][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5097'.
[  560.502520][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5097'.
[  560.519594][ T5838] block nbd3: Receive control failed (result -32)
[  560.776739][T25015] xt_NFQUEUE: number of total queues is 0
[  560.832018][T25016] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  560.842516][T25016] net_ratelimit: 187 callbacks suppressed
[  560.842534][T25016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  560.847155][T25020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.958030][T25020] syzkaller0: entered promiscuous mode
[  560.964241][T25020] syzkaller0: entered allmulticast mode
[  560.972069][T25020] tipc: Resetting bearer <eth:syzkaller0>
[  560.998544][T25019] tipc: Resetting bearer <eth:syzkaller0>
[  562.351886][T25019] tipc: Disabling bearer <eth:syzkaller0>
[  562.622278][T25064] IPv6: sit3: Disabled Multicast RS
[  562.653979][T25064] sit3: entered allmulticast mode
[  562.769827][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  562.779688][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL
[  562.855459][T25078] validate_nla: 2 callbacks suppressed
[  562.855476][T25078] netlink: 'syz.4.5124': attribute type 10 has an invalid length.
[  562.916342][T25078] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.947667][T25078] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  563.125727][T25100] bond6 (unregistering): Released all slaves
[  563.281588][T25113] __nla_validate_parse: 1 callbacks suppressed
[  563.281604][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5137'.
[  563.348424][T25119] netlink: 'syz.2.5139': attribute type 39 has an invalid length.
[  563.484507][T25126] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  563.608621][T25126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5140'.
[  563.759063][T25145] netlink: 'syz.0.5143': attribute type 1 has an invalid length.
[  563.845756][T25150] xt_CT: You must specify a L4 protocol and not use inversions on it
[  563.904805][T25153] syzkaller1: entered promiscuous mode
[  563.920883][T25153] syzkaller1: entered allmulticast mode
[  564.073438][T25165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5152'.
[  564.106143][T25170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5154'.
[  564.150902][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5151'.
[  564.270623][T25181] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5157'.
[  564.386747][T25194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5160'.
[  564.434210][T25197] netlink: 'syz.1.5159': attribute type 1 has an invalid length.
[  564.496980][T25199] bond7 (unregistering): Released all slaves
[  564.534996][T25197] 8021q: adding VLAN 0 to HW filter on device bond5
[  564.554650][T25201] bond5: (slave geneve2): making interface the new active one
[  564.563315][T25201] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  567.022344][T25164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  567.228247][T25225] netlink: 'syz.1.5167': attribute type 29 has an invalid length.
[  567.292829][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5169'.
[  567.303905][T25215] delete_channel: no stack
[  567.338000][T25237] netlink: 'syz.2.5171': attribute type 16 has an invalid length.
[  567.343077][T25235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5169'.
[  567.352464][T25237] netlink: 'syz.2.5171': attribute type 3 has an invalid length.
[  567.365787][T25239] ipt_REJECT: TCP_RESET invalid for non-tcp
[  567.377274][T25237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5171'.
[  567.394156][T25235] geneve4: entered promiscuous mode
[  567.419210][T25235] geneve4: entered allmulticast mode
[  567.435538][T10019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  567.454849][T10019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  567.485014][T10019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  567.504359][T10019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.889843][T25276] netlink: 'syz.0.5183': attribute type 4 has an invalid length.
[  568.332102][T25304] __nla_validate_parse: 2 callbacks suppressed
[  568.332120][T25304] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5190'.
[  568.486778][T25308] veth1_to_hsr: entered promiscuous mode
[  568.493689][T25308] veth1_to_hsr: entered allmulticast mode
[  568.509922][T25308] syzkaller1: tun_chr_ioctl cmd 1074025677
[  568.536972][T25308] syzkaller1: linktype set to 823
[  568.567869][T25316] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5193'.
[  568.709225][T25319] netlink: 'syz.1.5195': attribute type 75 has an invalid length.
[  569.037390][T25345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5204'.
[  569.075030][T25345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5204'.
[  569.741906][T25330] syz.3.5200 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  569.760702][T25330] CPU: 0 UID: 0 PID: 25330 Comm: syz.3.5200 Not tainted syzkaller #0 PREEMPT(full) 
[  569.760730][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  569.760744][T25330] Call Trace:
[  569.760752][T25330]  <TASK>
[  569.760761][T25330]  dump_stack_lvl+0xe8/0x150
[  569.760793][T25330]  dump_header+0xd3/0x4c0
[  569.760819][T25330]  oom_kill_process+0x3ab/0x970
[  569.760845][T25330]  out_of_memory+0x106c/0x1410
[  569.760864][T25330]  ? percpu_ref_put+0x19/0x180
[  569.760889][T25330]  ? __pfx___mutex_lock+0x10/0x10
[  569.760918][T25330]  ? __pfx_out_of_memory+0x10/0x10
[  569.760935][T25330]  ? do_raw_spin_unlock+0xf5/0x210
[  569.760967][T25330]  try_charge_memcg+0xc53/0x1560
[  569.760993][T25330]  ? __lock_acquire+0x6b5/0x2cf0
[  569.761031][T25330]  ? __pfx_try_charge_memcg+0x10/0x10
[  569.761057][T25330]  ? xa_load+0x60/0x210
[  569.761090][T25330]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  569.761118][T25330]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  569.761145][T25330]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  569.761171][T25330]  __swap_cache_prepare_and_add+0x52a/0x700
[  569.761220][T25330]  swap_cache_alloc_folio+0xf1/0x240
[  569.761252][T25330]  swap_cluster_readahead+0x369/0x690
[  569.761288][T25330]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  569.761330][T25330]  ? get_vma_policy+0x27b/0x3c0
[  569.761358][T25330]  swapin_readahead+0x196/0xc50
[  569.761400][T25330]  ? __pfx_swapin_readahead+0x10/0x10
[  569.761430][T25330]  ? swap_table_get+0x1e/0x260
[  569.761455][T25330]  ? swap_table_get+0x1e/0x260
[  569.761478][T25330]  ? swap_table_get+0x1e/0x260
[  569.761505][T25330]  ? swap_table_get+0x216/0x260
[  569.761533][T25330]  ? swap_cache_get_folio+0x513/0x520
[  569.761567][T25330]  do_swap_page+0x56f/0x5a20
[  569.761619][T25330]  ? do_swap_page+0x127/0x5a20
[  569.761643][T25330]  ? __pfx_do_swap_page+0x10/0x10
[  569.761667][T25330]  ? __pte_offset_map+0x1ae/0x240
[  569.761699][T25330]  ? pte_offset_map_rw_nolock+0xea/0x160
[  569.761721][T25330]  handle_mm_fault+0x12d2/0x3310
[  569.761765][T25330]  ? handle_mm_fault+0xee/0x3310
[  569.761802][T25330]  ? __pfx_handle_mm_fault+0x10/0x10
[  569.761827][T25330]  ? lock_vma_under_rcu+0x45a/0x500
[  569.761876][T25330]  do_user_addr_fault+0xa73/0x1340
[  569.761908][T25330]  ? rcu_is_watching+0x15/0xb0
[  569.761934][T25330]  ? trace_page_fault_user+0x84/0x210
[  569.761962][T25330]  exc_page_fault+0x6a/0xc0
[  569.761985][T25330]  asm_exc_page_fault+0x26/0x30
[  569.762007][T25330] RIP: 0033:0x7f459ec64ede
[  569.762026][T25330] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 1b d1 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00
[  569.762048][T25330] RSP: 002b:00007fffbe6bf3e0 EFLAGS: 00010202
[  569.762066][T25330] RAX: 00007f459f015fa0 RBX: 00007f459f015fa0 RCX: 0000000000000026
[  569.762078][T25330] RDX: 0000000000000001 RSI: 00007f459f016038 RDI: 0000000000000001
[  569.762091][T25330] RBP: 00007f459f017da0 R08: 0000000000000000 R09: 0000000000000001
[  569.762102][T25330] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000008b122
[  569.762114][T25330] R13: 00007f459f015fac R14: 000000000008ae17 R15: 00007fffbe6bf550
[  569.762147][T25330]  </TASK>
[  569.762155][T25330] memory: usage 307200kB, limit 307200kB, failcnt 420
[  569.839786][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5216'.
[  570.104983][T25330] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0
[  570.155087][T25330] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  570.162421][T25330] Memory cgroup stats for /syz3:
[  570.162733][T25330] cache 0
[  570.255323][T25330] rss 0
[  570.258127][T25330] rss_huge 0
[  570.261323][T25330] shmem 0
[  570.264267][T25330] mapped_file 0
[  570.291473][T25330] dirty 0
[  570.294440][T25330] writeback 0
[  570.308365][T25330] workingset_refault_anon 6
[  570.312893][T25330] workingset_refault_file 0
[  570.318768][T25330] swap 176128
[  570.322075][T25330] swapcached 208896
[  570.325942][T25330] pgpgin 115458
[  570.329621][T25330] pgpgout 115450
[  570.333174][T25330] pgfault 199382
[  570.369204][T25330] pgmajfault 2
[  570.384611][T25330] inactive_anon 32768
[  570.394055][T25330] active_anon 0
[  570.398239][T25411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5220'.
[  570.407347][T25330] inactive_file 0
[  570.410990][T25330] active_file 0
[  570.414445][T25330] unevictable 0
[  570.455021][T25330] hierarchical_memory_limit 314572800
[  570.464959][T25330] hierarchical_memsw_limit 9223372036854771712
[  570.479574][T25330] total_cache 0
[  570.483059][T25330] total_rss 0
[  570.507944][T25330] total_rss_huge 0
[  570.511691][T25330] total_shmem 0
[  570.539292][T25330] total_mapped_file 0
[  570.543301][T25330] total_dirty 0
[  570.563120][T25330] total_writeback 0
[  570.579756][T25420] netlink: 'syz.1.5224': attribute type 4 has an invalid length.
[  570.590513][T25330] total_workingset_refault_anon 6
[  570.600021][T25330] total_workingset_refault_file 0
[  570.625523][T25330] total_swap 176128
[  570.629356][T25330] total_swapcached 208896
[  570.645431][T25330] total_pgpgin 115459
[  570.649428][T25330] total_pgpgout 115451
[  570.653486][T25330] total_pgfault 199383
[  570.676789][T25330] total_pgmajfault 2
[  570.680709][T25330] total_inactive_anon 32768
[  570.702922][T25330] total_active_anon 0
[  570.711416][T25330] total_inactive_file 0
[  570.721225][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'.
[  570.732551][T25330] total_active_file 0
[  570.748090][T25330] total_unevictable 0
[  570.749369][T25425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5226'.
[  570.752080][T25330] anon_cost 0
[  570.767368][T25423] ksmbd: Daemon and kernel module version mismatch. ksmbd: 4, kernel module: 1. User-space ksmbd should terminate.
[  570.783156][T25330] file_cost 0
[  570.787020][T25330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5200,pid=25330,uid=0
[  570.803446][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'.
[  570.827285][T25330] Memory cgroup out of memory: Killed process 25330 (syz.3.5200) total-vm:102156kB, anon-rss:1236kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  570.845693][T25428] ksmbd: Daemon and kernel module version mismatch. ksmbd: 4, kernel module: 1. User-space ksmbd should terminate.
[  570.879502][T25432] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.894591][T25425] ip6_vti0: entered promiscuous mode
[  571.520732][T25467] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5241'.
[  571.581833][T25467] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  571.733640][T25488] atomic_op ffff88807bde1998 conn xmit_atomic 0000000000000000
[  572.267933][T25523] netlink: 'syz.0.5257': attribute type 1 has an invalid length.
[  572.729066][T25556] netlink: 'syz.4.5266': attribute type 1 has an invalid length.
[  572.766237][T25556] netlink: 'syz.4.5266': attribute type 1 has an invalid length.
[  572.941956][T25563] netlink: 'syz.4.5269': attribute type 2 has an invalid length.
[  572.975636][T25563] netlink: 'syz.4.5269': attribute type 1 has an invalid length.
[  573.037518][T25570] netlink: 'syz.4.5269': attribute type 2 has an invalid length.
[  573.057013][T25570] netlink: 'syz.4.5269': attribute type 1 has an invalid length.
[  573.171037][T25576] netlink: 'syz.2.5272': attribute type 1 has an invalid length.
[  573.425394][T25582] IPv6: NLM_F_CREATE should be specified when creating new route
[  573.767017][T25600] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  573.878897][T25605] netlink: zone id is out of range
[  573.884048][T25605] netlink: zone id is out of range
[  573.916600][T25605] netlink: zone id is out of range
[  573.921752][T25605] netlink: zone id is out of range
[  573.967601][T25605] netlink: zone id is out of range
[  573.973830][T25609] __nla_validate_parse: 7 callbacks suppressed
[  573.973845][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  573.976122][T25612] syzkaller1: entered promiscuous mode
[  573.985311][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  573.995723][T25612] syzkaller1: entered allmulticast mode
[  574.018784][T25605] netlink: zone id is out of range
[  574.023948][T25605] netlink: zone id is out of range
[  574.040971][T25605] netlink: zone id is out of range
[  574.074622][T25605] netlink: zone id is out of range
[  574.089257][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  574.099111][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  574.150058][T25626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5288'.
[  574.264431][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5291'.
[  574.318050][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  574.338005][T25609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'.
[  574.577742][T25660] netlink: 'syz.4.5297': attribute type 1 has an invalid length.
[  574.586980][T25660] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.5297'.
[  574.596450][T25664] netlink: 'syz.3.5298': attribute type 2 has an invalid length.
[  574.625175][T25666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5299'.
[  574.666791][T25668] veth9: entered allmulticast mode
[  574.684693][T10525] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  574.711505][T22891] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  574.719503][T10525] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  574.805427][T22891] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  574.878511][T25674] syzkaller1: entered promiscuous mode
[  574.884103][T25674] syzkaller1: entered allmulticast mode
[  575.117565][T25702] netlink: 'syz.2.5313': attribute type 1 has an invalid length.
[  575.126529][T25705] ieee802154 phy1 wpan1: encryption failed: -22
[  575.159225][T25702] 8021q: adding VLAN 0 to HW filter on device bond15
[  575.179245][T25702] vlan4: entered allmulticast mode
[  575.184981][T25702] bond15: entered allmulticast mode
[  575.203996][T25702] bond15: (slave geneve5): making interface the new active one
[  575.211921][T25702] geneve5: entered allmulticast mode
[  575.220063][T25702] bond15: (slave geneve5): Enslaving as an active interface with an up link
[  575.315413][T25716] nbd: illegal input index 2958377
[  575.405568][T22891] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  576.855601][T25804] netlink: 'syz.2.5344': attribute type 2 has an invalid length.
[  576.972022][T25809] netlink: 'syz.1.5347': attribute type 24 has an invalid length.
[  577.640023][T25840] syzkaller1: left promiscuous mode
[  577.655296][T25840] syzkaller1: left allmulticast mode
[  578.047409][T25869] net_ratelimit: 185 callbacks suppressed
[  578.047429][T25869] netlink: zone id is out of range
[  578.085539][T25872] netlink: 'syz.1.5366': attribute type 4 has an invalid length.
[  578.093382][T25869] netlink: zone id is out of range
[  578.103495][T25869] netlink: zone id is out of range
[  578.123661][T25872] IPVS: length: 209 != 24
[  578.129820][T25872] netlink: 'syz.1.5366': attribute type 4 has an invalid length.
[  578.171739][T25869] netlink: zone id is out of range
[  578.185444][T25869] netlink: zone id is out of range
[  578.190587][T25869] netlink: zone id is out of range
[  578.210799][T25869] netlink: zone id is out of range
[  578.228777][T25869] netlink: zone id is out of range
[  578.244584][T25869] netlink: zone id is out of range
[  578.259029][T25869] netlink: zone id is out of range
[  578.356898][T25882] pim6reg: entered allmulticast mode
[  578.363172][T25882] pim6reg: left allmulticast mode
[  578.685251][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  578.941398][T25930] tipc: Started in network mode
[  578.958066][T25930] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  578.967750][T25930] tipc: Enabled bearer <eth:macvtap0>, priority 5
[  579.054706][T25944] __nla_validate_parse: 8 callbacks suppressed
[  579.054723][T25944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5383'.
[  579.109534][T25944] hsr_slave_0: left promiscuous mode
[  579.153439][T25944] hsr_slave_1: left promiscuous mode
[  579.196980][T25960] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5387'.
[  579.207479][T25959] netlink: 'syz.2.5386': attribute type 2 has an invalid length.
[  579.353626][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'.
[  579.370560][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'.
[  579.649616][T25990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5394'.
[  579.760805][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5388'.
[  579.833596][T25993] netlink: 'syz.3.5395': attribute type 33 has an invalid length.
[  579.929944][T25998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5397'.
[  579.977161][T25998] smc: net device team0 applied user defined pnetid SYZ2
[  579.988279][T26006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5397'.
[  580.086640][T18796] tipc: Node number set to 9480874
[  580.127616][T26014] netlink: 'syz.1.5399': attribute type 1 has an invalid length.
[  580.136422][T26014] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.5399'.
[  580.584626][T26053] netlink: 'syz.0.5408': attribute type 1 has an invalid length.
[  580.619346][T26053] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  580.892132][T26074] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5412'.
[  580.915643][T26075] macvlan0: entered promiscuous mode
[  581.232756][T26096] netlink: 'syz.2.5416': attribute type 12 has an invalid length.
[  581.294161][T26105] netlink: 'syz.0.5420': attribute type 1 has an invalid length.
[  581.304358][T26106] netlink: 'syz.0.5420': attribute type 1 has an invalid length.
[  581.421698][T26109] netlink: 'syz.3.5417': attribute type 1 has an invalid length.
[  581.692333][T26121] bond6: (slave bridge5): making interface the new active one
[  581.712139][T26121] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  581.725937][T26134] delete_channel: no stack
[  581.858675][T26139] sctp: [Deprecated]: syz.1.5429 (pid 26139) Use of int in max_burst socket option.
[  581.858675][T26139] Use struct sctp_assoc_value instead
[  582.149942][   T29] audit: type=1804 audit(1774440051.042:5): pid=26149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5432" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2287 res=1 errno=0
[  582.167901][T26151] nftables ruleset with unbound chain
[  582.248449][   T29] audit: type=1800 audit(1774440051.042:6): pid=26149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5432" name="cgroup.controllers" dev="tmpfs" ino=2287 res=0 errno=0
[  583.403714][T26219] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  583.433004][T26219] bond10 (unregistering): Released all slaves
[  584.094622][T26213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  584.244691][T26255] __nla_validate_parse: 144 callbacks suppressed
[  584.244709][T26255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5463'.
[  584.262842][T26256] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5460'.
[  584.595708][T26282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5472'.
[  584.817524][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'.
[  584.969868][T26318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5481'.
[  584.978768][T26321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5484'.
[  585.047227][T26323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5485'.
[  585.066247][T26323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5485'.
[  585.102679][T26327] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5486'.
[  585.184781][T26335] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  585.254502][T26341] validate_nla: 130 callbacks suppressed
[  585.254521][T26341] netlink: 'syz.1.5490': attribute type 4 has an invalid length.
[  585.407822][T26350] bridge_slave_0: invalid flags given to default FDB implementation
[  585.532075][T26362] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5496'.
[  585.627974][T26368] net_ratelimit: 189 callbacks suppressed
[  585.627994][T26368] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  585.749762][T26376] netlink: 'syz.1.5501': attribute type 11 has an invalid length.
[  587.085073][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  587.225418][T26454] netlink: 'syz.2.5524': attribute type 1 has an invalid length.
[  587.261604][T26454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.693491][T26467] syzkaller0: entered promiscuous mode
[  587.699375][T26467] syzkaller0: entered allmulticast mode
[  587.710435][T26467] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  587.884550][T26470] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  588.409378][T26512] netlink: 'syz.1.5542': attribute type 22 has an invalid length.
[  588.419171][T26506] delete_channel: no stack
[  588.424367][T26506] netlink: 'syz.2.5543': attribute type 2 has an invalid length.
[  588.432877][T26512] netlink: 'syz.1.5542': attribute type 22 has an invalid length.
[  588.478555][T26512] netlink: 'syz.1.5542': attribute type 22 has an invalid length.
[  588.505889][T26512] netlink: 'syz.1.5542': attribute type 22 has an invalid length.
[  588.661741][T26524] geneve4: left promiscuous mode
[  588.673733][T26524] geneve4: left allmulticast mode
[  588.712674][T10001] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.722890][T26527] netlink: 'syz.2.5547': attribute type 11 has an invalid length.
[  588.731184][T26524] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000
[  588.746045][T26527] netlink: 'syz.2.5547': attribute type 4 has an invalid length.
[  588.753795][T26527] netlink: 'syz.2.5547': attribute type 5 has an invalid length.
[  588.755085][T10001] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.762837][T26524] xt_CT: You must specify a L4 protocol and not use inversions on it
[  588.788489][T10001] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  588.809586][T26527] netlink: 'syz.2.5547': attribute type 6 has an invalid length.
[  588.817471][T10001] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.062889][T26548] bridge0: port 2(veth0_to_bridge) entered blocking state
[  589.075147][T26548] bridge0: port 2(veth0_to_bridge) entered disabled state
[  589.089144][T26548] veth0_to_bridge: entered allmulticast mode
[  589.114626][T26548] veth0_to_bridge: entered promiscuous mode
[  589.295399][T26556] __nla_validate_parse: 19 callbacks suppressed
[  589.295420][T26556] netlink: 9276 bytes leftover after parsing attributes in process `syz.2.5555'.
[  589.346185][T26556] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5555'.
[  589.357356][T26556] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5555'.
[  589.375269][T26556] netlink: 630 bytes leftover after parsing attributes in process `syz.2.5555'.
[  589.460721][T26566] veth0: entered promiscuous mode
[  589.467708][T26564] veth0: left promiscuous mode
[  589.863212][T26589] vlan3: entered promiscuous mode
[  589.885921][T26589] vlan3: entered allmulticast mode
[  589.891079][T26589] hsr_slave_1: entered allmulticast mode
[  590.025403][T26598] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5570'.
[  590.040817][T26600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5571'.
[  590.109747][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5573'.
[  590.385583][T26628] validate_nla: 2 callbacks suppressed
[  590.385601][T26628] netlink: 'syz.0.5580': attribute type 8 has an invalid length.
[  590.461914][T26636] netlink: 'syz.1.5578': attribute type 1 has an invalid length.
[  590.510446][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'.
[  590.549439][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5578'.
[  590.594059][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5581'.
[  591.538098][T26695] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  591.583551][T26695] bond1: (slave lo): Enslaving as an active interface with an up link
[  591.584258][T26697] netlink: 'syz.3.5601': attribute type 1 has an invalid length.
[  591.617775][T26695] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  591.664928][T26697] syzkaller1: entered promiscuous mode
[  591.671446][T26697] syzkaller1: entered allmulticast mode
[  592.611015][T26741] netlink: 'syz.0.5619': attribute type 2 has an invalid length.
[  592.625216][T26741] netlink: 'syz.0.5619': attribute type 1 has an invalid length.
[  592.647327][T26741] netlink: 'syz.0.5619': attribute type 4 has an invalid length.
[  592.823788][T26757] netlink: 'syz.2.5623': attribute type 1 has an invalid length.
[  592.944391][T26761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.952768][T26761] batadv_slave_0: entered promiscuous mode
[  595.582145][T26741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  595.728656][T26791] netlink: 'syz.3.5632': attribute type 1 has an invalid length.
[  595.783010][T26800] __nla_validate_parse: 14 callbacks suppressed
[  595.783034][T26800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5632'.
[  595.846967][T26791] 8021q: adding VLAN 0 to HW filter on device bond7
[  595.861472][T26800] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  595.879569][T26800] bond7: entered allmulticast mode
[  595.912889][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5638'.
[  596.115359][T26823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5645'.
[  596.129450][T26822] tc_dump_action: action bad kind
[  596.341959][T26845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5648'.
[  596.377311][T26848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5649'.
[  596.577192][T26863] netlink: 'syz.0.5654': attribute type 4 has an invalid length.
[  596.611255][T26863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'.
[  596.758336][T26879] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5658'.
[  596.791602][T26879] netlink: 'syz.0.5658': attribute type 1 has an invalid length.
[  596.800308][T26879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5658'.
[  596.813657][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'.
[  596.902228][T26892] netlink: 'syz.1.5661': attribute type 64 has an invalid length.
[  597.433474][T26938] netlink: 'syz.1.5673': attribute type 9 has an invalid length.
[  597.503020][T26941] netlink: 'syz.0.5675': attribute type 17 has an invalid length.
[  597.543519][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5675'.
[  597.886363][T26974] syzkaller0: entered promiscuous mode
[  597.931217][T26974] syzkaller0: entered allmulticast mode
[  598.016635][T26983] netlink: 'syz.4.5685': attribute type 7 has an invalid length.
[  598.057277][T26983] netlink: 'syz.4.5685': attribute type 7 has an invalid length.
[  598.111488][T26983] netlink: 'syz.4.5685': attribute type 7 has an invalid length.
[  598.511899][T27019] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  598.612340][T27027] xt_hashlimit: size too large, truncated to 1048576
[  598.621034][T27025] netlink: 'syz.4.5693': attribute type 11 has an invalid length.
[  598.911354][T27042] block nbd4: Unsupported socket: should be TCP or UNIX.
[  598.989858][T27046] openvswitch: netlink: IP tunnel dst address not specified
[  599.473200][T27066] syzkaller0: entered promiscuous mode
[  599.486790][T27066] syzkaller0: entered allmulticast mode
[  599.948231][T27096] netlink: 'syz.4.5713': attribute type 1 has an invalid length.
[  600.446978][T27133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  600.560345][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  600.574363][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  600.592520][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  600.600970][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  600.609802][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  600.920607][T27137] chnl_net:caif_netlink_parms(): no params data found
[  600.987494][T27137] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.994654][T27137] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.001990][T27137] bridge_slave_0: entered allmulticast mode
[  601.009677][T27137] bridge_slave_0: entered promiscuous mode
[  601.018864][T27137] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.026343][T27137] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.033572][T27137] bridge_slave_1: entered allmulticast mode
[  601.040875][T27137] bridge_slave_1: entered promiscuous mode
[  601.067133][T27137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.078937][T27137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  601.109607][T27137] team0: Port device team_slave_0 added
[  601.117939][T27137] team0: Port device team_slave_1 added
[  601.156797][T27137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  601.163764][T27137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  601.190717][T27137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.203070][T27137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.210121][T27137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  601.236205][T27137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.274740][T27137] hsr_slave_0: entered promiscuous mode
[  601.281072][T27137] hsr_slave_1: entered promiscuous mode
[  601.287717][T27137] debugfs: 'hsr0' already exists in 'hsr'
[  601.293448][T27137] Cannot create hsr debugfs directory
[  601.398396][T27137] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.408981][T27137] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.462063][T27137] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.471886][T27137] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.528954][T27137] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.538969][T27137] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.570035][T27137] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.580285][T27137] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.445101][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  602.685292][ T5829] Bluetooth: hci4: command tx timeout
[  603.302805][T27115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  603.425830][T27137] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  603.465139][T27137] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  603.480456][T27137] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  603.503914][T27137] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  603.766982][T27137] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.826542][T27137] 8021q: adding VLAN 0 to HW filter on device team0
[  603.839879][T27185] __nla_validate_parse: 9 callbacks suppressed
[  603.839895][T27185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5738'.
[  603.867386][T10019] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.874533][T10019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.980973][T10019] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.988176][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.050248][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'.
[  604.077149][T27137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  604.336358][T27207] validate_nla: 4 callbacks suppressed
[  604.336376][T27207] netlink: 'syz.4.5743': attribute type 58 has an invalid length.
[  604.369890][T27207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5743'.
[  604.396809][T27137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.512043][T27137] veth0_vlan: entered promiscuous mode
[  604.539876][T27137] veth1_vlan: entered promiscuous mode
[  604.581608][T27137] veth0_macvtap: entered promiscuous mode
[  604.592687][T27137] veth1_macvtap: entered promiscuous mode
[  604.653974][T27137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.678612][T27137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.699499][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.721155][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.757686][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.768092][ T5829] Bluetooth: hci4: command tx timeout
[  604.771298][T27228] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5748'.
[  604.785273][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.962297][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.970878][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.014814][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.049272][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.483641][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'.
[  605.627270][T27280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5759'.
[  605.897405][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5765'.
[  605.977839][T27293] syz_tun: entered promiscuous mode
[  605.983115][T27293] syz_tun: entered allmulticast mode
[  606.063144][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5768'.
[  606.136179][T27306] netlink: 'syz.1.5769': attribute type 10 has an invalid length.
[  606.144208][T27306] netlink: 396 bytes leftover after parsing attributes in process `syz.1.5769'.
[  606.310482][T27320] netlink: 'syz.1.5773': attribute type 1 has an invalid length.
[  606.353886][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5772'.
[  606.552813][T27329] xt_hashlimit: size too large, truncated to 1048576
[  606.652958][T27341] –: renamed from vxcan1 (while UP)
[  606.845033][ T5829] Bluetooth: hci4: command tx timeout
[  608.925313][ T5829] Bluetooth: hci4: command tx timeout
[  609.549392][T27344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.748689][T27399] __nla_validate_parse: 6 callbacks suppressed
[  609.748708][T27399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5792'.
[  610.065426][T27424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5797'.
[  610.444099][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5802'.
[  610.563289][T27462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5806'.
[  610.958368][T27487] x_tables: unsorted underflow at hook 1
[  611.012696][T27492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'.
[  611.062774][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5814'.
[  611.253639][T27509] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  611.333824][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5819'.
[  611.344139][T27514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5819'.
[  611.381304][T27514] veth0_to_bond: left allmulticast mode
[  611.399452][T27514] veth0_to_bond: left promiscuous mode
[  611.405487][T27514] bridge2: port 1(veth0_to_bond) entered disabled state
[  611.484267][T27526] netlink: 'syz.2.5824': attribute type 1 has an invalid length.
[  611.506709][T27526] netlink: 1796 bytes leftover after parsing attributes in process `syz.2.5824'.
[  611.520916][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'.
[  611.552986][T27526] netlink: 'syz.2.5824': attribute type 5 has an invalid length.
[  611.568083][T27531] netlink: 'syz.1.5826': attribute type 1 has an invalid length.
[  611.730839][T27533] ip6tnl2: entered allmulticast mode
[  612.301835][T27564] 8021q: adding VLAN 0 to HW filter on device bond10
[  612.334341][T27573] netlink: 'syz.0.5839': attribute type 5 has an invalid length.
[  612.370596][T27573] netlink: 'syz.0.5839': attribute type 6 has an invalid length.
[  612.449283][T27581] sctp: [Deprecated]: syz.0.5839 (pid 27581) Use of struct sctp_assoc_value in delayed_ack socket option.
[  612.449283][T27581] Use struct sctp_sack_info instead
[  615.914400][T27625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.054411][T27650] __nla_validate_parse: 13 callbacks suppressed
[  616.054430][T27650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5863'.
[  616.119423][T27654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5865'.
[  616.277494][T27666] netlink: 'syz.2.5869': attribute type 1 has an invalid length.
[  616.395872][T27677] RDS: rds_bind could not find a transport for fe80::27, load rds_tcp or rds_rdma?
[  616.428051][T27681] ip6t_rpfilter: unknown options
[  616.643369][T27701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5878'.
[  616.756741][T27698] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  616.959710][T27714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5881'.
[  617.031422][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'.
[  617.041799][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'.
[  617.065139][T27711] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.5883'.
[  617.098345][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'.
[  617.287594][T27734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5887'.
[  617.433488][T27746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5888'.
[  617.654212][T27758] sctp: [Deprecated]: syz.4.5895 (pid 27758) Use of int in maxseg socket option.
[  617.654212][T27758] Use struct sctp_assoc_value instead
[  617.767774][T27766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  617.917214][T27776] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  618.089116][T27788] syzkaller0: entered promiscuous mode
[  618.095809][T27788] syzkaller0: entered allmulticast mode
[  618.250498][T27802] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  618.441367][T27809] bridge0: port 3(geneve1) entered blocking state
[  618.459724][T27809] bridge0: port 3(geneve1) entered disabled state
[  618.485963][T27809] geneve1: entered allmulticast mode
[  618.510845][T27809] geneve1: entered promiscuous mode
[  618.621839][T27815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  618.825176][T27829] delete_channel: no stack
[  619.475643][T27868] netlink: 'syz.4.5928': attribute type 10 has an invalid length.
[  619.499266][T27870] syzkaller0: entered promiscuous mode
[  619.504766][T27870] syzkaller0: entered allmulticast mode
[  619.672608][T27885] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  619.681385][T27885] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  619.878778][T27900] openvswitch: netlink: IP tunnel dst address not specified
[  620.131165][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  620.142269][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  620.163550][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  620.164248][T27916] openvswitch: netlink: Flow actions attr not present in new flow.
[  620.196754][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  620.215133][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  620.570943][T27943] block nbd3: NBD_DISCONNECT
[  620.577171][T27943] block nbd3: Send disconnect failed -32
[  620.583103][T27943] block nbd3: shutting down sockets
[  621.105442][T27964] netlink: 'syz.0.5957': attribute type 1 has an invalid length.
[  621.213336][T27964] 8021q: adding VLAN 0 to HW filter on device bond7
[  621.227775][T27974] vlan4: entered allmulticast mode
[  621.233063][T27974] bond7: entered allmulticast mode
[  621.259948][T27910] chnl_net:caif_netlink_parms(): no params data found
[  621.477596][T27995] tipc: Resetting bearer <eth:veth1_to_batadv>
[  621.489758][T27995] tipc: Resetting bearer <eth:vlan0>
[  621.526707][T27910] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.534064][T27910] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.544772][T27910] bridge_slave_0: entered allmulticast mode
[  621.553761][T27910] bridge_slave_0: entered promiscuous mode
[  621.577609][T27910] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.594767][T27910] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.602424][T27910] bridge_slave_1: entered allmulticast mode
[  621.610993][T27910] bridge_slave_1: entered promiscuous mode
[  621.663003][T27910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.705105][T27910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.728843][T28009] xt_TCPMSS: Only works on TCP SYN packets
[  621.743938][T27910] team0: Port device team_slave_0 added
[  621.753305][T27910] team0: Port device team_slave_1 added
[  621.785858][T28007] nbd3: detected capacity change from 0 to 127
[  621.787919][T27910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  621.799338][T27910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.812550][ T5829] block nbd3: Receive control failed (result -104)
[  621.849848][T27910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  621.869752][T27910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  621.883809][T27910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  621.922580][T27910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  621.936200][T28014] sch_tbf: burst 0 is lower than device lo mtu (1514) !
[  621.951639][T28016] __nla_validate_parse: 49 callbacks suppressed
[  621.951655][T28016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5972'.
[  621.992525][T28016] C: renamed from lo (while UP)
[  622.001296][T28016] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  622.091262][T28022] bridge0: port 1(ipvlan2) entered blocking state
[  622.099103][T28022] bridge0: port 1(ipvlan2) entered disabled state
[  622.106457][T28022] ipvlan2: entered allmulticast mode
[  622.112330][T28022] bridge0: entered allmulticast mode
[  622.132460][T28022] ipvlan2: left allmulticast mode
[  622.138241][T28022] bridge0: left allmulticast mode
[  622.170986][T28029] netlink: 'syz.3.5977': attribute type 29 has an invalid length.
[  622.191534][T27910] hsr_slave_0: entered promiscuous mode
[  622.198456][T27910] hsr_slave_1: entered promiscuous mode
[  622.216033][T27910] debugfs: 'hsr0' already exists in 'hsr'
[  622.222010][T27910] Cannot create hsr debugfs directory
[  622.230152][T28029] netlink: 'syz.3.5977': attribute type 29 has an invalid length.
[  622.286147][ T5829] Bluetooth: hci5: command tx timeout
[  622.372764][T28038] xt_TCPMSS: Only works on TCP SYN packets
[  622.396922][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5980'.
[  622.417030][T28038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5980'.
[  622.435944][T28042] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  622.439364][T27910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.464578][T27910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.593224][T27910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.610299][T27910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.628204][T28050] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5983'.
[  622.654233][T28052] netlink: 'syz.3.5984': attribute type 10 has an invalid length.
[  622.688857][T28052] syz_tun: entered promiscuous mode
[  622.700016][T28052] syz_tun: entered allmulticast mode
[  622.705741][T28052] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  622.736539][T27910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.747803][T27910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.836834][T27910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  622.848767][T27910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.174521][T27910] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  623.206175][T27910] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  623.269589][T27910] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  623.282054][T28085] netlink: 'syz.3.5993': attribute type 1 has an invalid length.
[  623.290779][T27910] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  623.325497][T28085] 8021q: adding VLAN 0 to HW filter on device bond8
[  623.452822][T27910] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.488230][T27910] 8021q: adding VLAN 0 to HW filter on device team0
[  623.506314][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.513454][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.554528][T10524] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.561720][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.673410][T28107] syzkaller0: entered promiscuous mode
[  623.681328][T28107] syzkaller0: entered allmulticast mode
[  623.709782][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6001'.
[  623.718766][T28113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6001'.
[  623.736003][T28107] netlink: 'syz.1.5999': attribute type 1 has an invalid length.
[  623.765041][T28107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5999'.
[  623.786526][T28107] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5999'.
[  623.834984][T28122] syzkaller1: entered promiscuous mode
[  623.840572][T28122] syzkaller1: entered allmulticast mode
[  623.968233][T28124] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6005'.
[  624.037878][T28132] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6007'.
[  624.098461][T28137] syzkaller0: entered promiscuous mode
[  624.104162][T28137] syzkaller0: entered allmulticast mode
[  624.208930][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  624.220916][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL
[  624.253956][T28144] hsr_slave_0 (unregistering): left promiscuous mode
[  624.360139][T27910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.367257][ T5829] Bluetooth: hci5: command tx timeout
[  624.866401][T27910] veth0_vlan: entered promiscuous mode
[  624.909325][T27910] veth1_vlan: entered promiscuous mode
[  624.983140][T27910] veth0_macvtap: entered promiscuous mode
[  625.001130][T27910] veth1_macvtap: entered promiscuous mode
[  625.027440][T27910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.050672][T27910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.070829][T10001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.094123][T10001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.120478][T10001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.149276][T10001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.314636][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.334183][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.461090][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  625.473932][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  625.618335][T28220] openvswitch: netlink: Key 10 has unexpected len 0 expected 4
[  625.832636][T28228] tipc: Failed to remove unknown binding: 66,0,0/9939626:1076135884/1076135885
[  625.867081][T28228] tipc: Failed to remove unknown binding: 66,0,0/9939626:1076135884/1076135885
[  625.869124][T28233] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  625.897008][T28232] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  626.205726][T28250] team0: Port device team_slave_0 removed
[  626.400339][T28268] bridge_slave_1: left allmulticast mode
[  626.407777][T28268] bridge_slave_1: left promiscuous mode
[  626.413621][T28268] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.448166][T28268] bridge_slave_0: left allmulticast mode
[  626.453893][T28268] bridge_slave_0: left promiscuous mode
[  626.457096][ T5829] Bluetooth: hci5: command tx timeout
[  626.462207][T28268] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.977231][T28306] __nla_validate_parse: 14 callbacks suppressed
[  626.977249][T28306] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6059'.
[  627.062216][T28310] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  627.091147][T28310] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  627.178802][T28315] netlink: 'syz.0.6062': attribute type 1 has an invalid length.
[  627.198447][T28315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6062'.
[  627.980101][T28353] syzkaller0: entered promiscuous mode
[  628.000944][T28353] syzkaller0: entered allmulticast mode
[  628.020830][T28359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  628.165968][T28352] tipc: Resetting bearer <eth:syzkaller0>
[  628.192020][T28375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6075'.
[  628.259218][T28379] netlink: 'syz.4.6074': attribute type 28 has an invalid length.
[  628.275538][T28379] netlink: 'syz.4.6074': attribute type 3 has an invalid length.
[  628.295363][T28379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6074'.
[  628.540070][ T5829] Bluetooth: hci5: command tx timeout
[  629.872368][T28352] tipc: Disabling bearer <eth:syzkaller0>
[  629.888611][T28383] bridge0: port 1(gretap0) entered blocking state
[  629.895644][T28383] bridge0: port 1(gretap0) entered disabled state
[  629.902166][T28383] gretap0: entered allmulticast mode
[  629.908977][T28383] gretap0: entered promiscuous mode
[  629.933844][T28384] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  629.941724][T28384] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  629.990782][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6081'.
[  630.481354][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  630.491498][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  630.499650][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  630.507936][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  630.516010][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  630.895100][T28454] netlink: 'syz.2.6096': attribute type 11 has an invalid length.
[  630.923705][T28457] Cannot find add_set index 0 as target
[  631.011995][T28460] x_tables: duplicate entry at hook 2
[  631.248048][T28476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.255805][T28476] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode
[  631.263296][T28476] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode
[  631.284521][T28481] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  631.351028][T28487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6103'.
[  631.461190][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'.
[  631.586914][T28428] chnl_net:caif_netlink_parms(): no params data found
[  631.768601][T28515] netlink: 'syz.3.6111': attribute type 21 has an invalid length.
[  631.782830][T28515] netlink: 'syz.3.6111': attribute type 22 has an invalid length.
[  631.794707][T28428] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.802050][T28428] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.802485][T28515] netlink: 'syz.3.6111': attribute type 23 has an invalid length.
[  631.812547][T28428] bridge_slave_0: entered allmulticast mode
[  631.826142][T28428] bridge_slave_0: entered promiscuous mode
[  631.835575][T28428] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.842770][T28428] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.843661][T28515] netlink: 'syz.3.6111': attribute type 25 has an invalid length.
[  631.852304][T28428] bridge_slave_1: entered allmulticast mode
[  631.866633][T28428] bridge_slave_1: entered promiscuous mode
[  631.885837][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  631.903882][T28428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.921478][T28428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.936213][T28515] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6111'.
[  632.000626][T28428] team0: Port device team_slave_0 added
[  632.016374][T28428] team0: Port device team_slave_1 added
[  632.094292][T28428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.117954][T28428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.147847][T28428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.183579][T28534] bond9: (slave bond_slave_1): Device is not our slave
[  632.191143][T28534] bond9: option active_slave: invalid value (bond_slave_1)
[  632.201339][T28534] bond9 (unregistering): Released all slaves
[  632.228850][T28428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.237225][T28428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  632.285156][T28428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.418191][T28428] hsr_slave_0: entered promiscuous mode
[  632.431270][T28428] hsr_slave_1: entered promiscuous mode
[  632.440366][T28428] debugfs: 'hsr0' already exists in 'hsr'
[  632.452781][T28428] Cannot create hsr debugfs directory
[  632.499536][T28552] netlink: 'syz.3.6120': attribute type 16 has an invalid length.
[  632.552009][T28552] netlink: 'syz.3.6120': attribute type 17 has an invalid length.
[  632.587880][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6120'.
[  632.606777][ T5829] Bluetooth: hci0: command tx timeout
[  632.698510][T28552] syz_tun: left promiscuous mode
[  632.711222][T28552] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.721660][T28552] 8021q: adding VLAN 0 to HW filter on device team0
[  632.732631][T28552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  632.825098][T28562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6123'.
[  632.846980][T22892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  632.901988][T28568] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.955530][T22892] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  633.011164][T28428] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.055118][T28575] Cannot find add_set index 2 as target
[  633.113114][ T1113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  633.138057][T28428] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.138820][T28580] nbd: must specify at least one socket
[  633.162496][T28580] sctp: [Deprecated]: syz.3.6128 (pid 28580) Use of int in max_burst socket option deprecated.
[  633.162496][T28580] Use struct sctp_assoc_value instead
[  633.204206][T28428] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.205753][T28580] sctp: [Deprecated]: syz.3.6128 (pid 28580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  633.205753][T28580] Use struct sctp_sack_info instead
[  633.284792][T28428] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.506629][T28595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6134'.
[  633.516613][T28598] gre4: entered promiscuous mode
[  633.521649][T28598] gre4: entered allmulticast mode
[  633.543695][T28601] 
s5ÿÿø: renamed from vlan1 (while UP)
[  633.554557][T28428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  633.565288][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6134'.
[  633.590657][T28428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  633.620993][T28428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  633.643020][T28428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  633.692632][T28612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6138'.
[  633.732338][T28619] netlink: 'syz.1.6139': attribute type 8 has an invalid length.
[  633.744719][T28606] block nbd0: reconnected socket
[  633.752299][T28619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6139'.
[  633.760181][T28606] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) !
[  633.775597][T28619] bond0: entered promiscuous mode
[  633.780728][T28619] bond_slave_0: entered promiscuous mode
[  633.787270][T28619] bond_slave_1: entered promiscuous mode
[  633.794224][T28619] gretap0: entered promiscuous mode
[  633.801299][T28619] bond0: left promiscuous mode
[  633.807408][T28619] bond_slave_0: left promiscuous mode
[  633.812922][T28619] bond_slave_1: left promiscuous mode
[  633.819662][T28619] gretap0: left promiscuous mode
[  633.976290][ T5829] block nbd0: Receive control failed (result -32)
[  634.050415][T28428] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.098370][T28428] 8021q: adding VLAN 0 to HW filter on device team0
[  634.120897][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.128096][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  634.136919][T28631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6143'.
[  634.208434][T28631] macvtap1: entered promiscuous mode
[  634.214404][T28631] vlan0: entered promiscuous mode
[  634.221267][T28631] macvtap1: entered allmulticast mode
[  634.227279][T28631] vlan0: entered allmulticast mode
[  634.232589][T28631] veth0_vlan: entered allmulticast mode
[  634.241578][   T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.251948][   T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  634.314459][T28633] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  634.342117][T28633] bond1 (unregistering): Released all slaves
[  634.396373][T28642] xt_cluster: node mask cannot exceed total number of nodes
[  634.409078][T28645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6148'.
[  634.419725][T28642] netlink: 'syz.2.6147': attribute type 1 has an invalid length.
[  634.431526][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.438684][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.597845][T28642] 8021q: adding VLAN 0 to HW filter on device bond16
[  634.627942][T28652] vlan5: entered promiscuous mode
[  634.633144][T28652] bond16: entered promiscuous mode
[  634.639296][T28652] vlan5: entered allmulticast mode
[  634.644568][T28652] bond16: entered allmulticast mode
[  634.685124][ T5829] Bluetooth: hci0: command tx timeout
[  634.711227][T28655] bond16: (slave bridge5): making interface the new active one
[  634.719448][T28655] bridge5: entered promiscuous mode
[  634.724820][T28655] bridge5: entered allmulticast mode
[  634.736812][T28655] bond16: (slave bridge5): Enslaving as an active interface with an up link
[  634.946980][T22891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.362657][T28428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.376307][T28704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6163'.
[  635.428352][T28704] syzkaller0: entered promiscuous mode
[  635.433853][T28704] syzkaller0: entered allmulticast mode
[  636.333678][T28721] Cannot find set identified by id 65534 to match
[  636.778844][ T5829] Bluetooth: hci0: command tx timeout
[  636.842159][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6167'.
[  636.859776][T28428] veth0_vlan: entered promiscuous mode
[  636.911952][T28428] veth1_vlan: entered promiscuous mode
[  637.021999][T28428] veth0_macvtap: entered promiscuous mode
[  637.061296][T28428] veth1_macvtap: entered promiscuous mode
[  637.113447][T28428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.143883][T28428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  637.207592][T10001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  637.218868][T10001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  637.242239][T10001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  637.269403][T10001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.481972][T28760] netlink: 'syz.1.6182': attribute type 1 has an invalid length.
[  637.553286][T28763] netlink: 'syz.3.6184': attribute type 13 has an invalid length.
[  637.565841][T28760] 8021q: adding VLAN 0 to HW filter on device bond1
[  637.605569][T10001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.613408][T10001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.666135][T28760] macvtap2: entered allmulticast mode
[  637.679978][T28763] gretap0: refused to change device tx_queue_len
[  637.686984][T28763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  637.742471][T28760] bond1: (slave gretap1): making interface the new active one
[  637.752680][T28760] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  637.802352][T28775] netlink: 'syz.3.6188': attribute type 1 has an invalid length.
[  637.840037][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.865982][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.974749][T28775] bond9: (slave bridge9): making interface the new active one
[  637.984670][T28775] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  638.445223][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  638.457835][T28809] __nla_validate_parse: 2 callbacks suppressed
[  638.457851][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6197'.
[  638.489619][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  638.498959][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  638.509220][T28811] tipc: Started in network mode
[  638.524590][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  638.532768][T28811] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  638.541441][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  638.546599][T28811] tipc: Enabled bearer <eth:vlan0>, priority 24
[  638.556801][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  638.845198][ T5829] Bluetooth: hci0: command tx timeout
[  639.079992][T28840] Bluetooth: MGMT ver 1.23
[  639.352387][T28820] netlink: zone id is out of range
[  639.362528][T28820] netlink: del zone limit has 4 unknown bytes
[  639.400533][T28855] xt_hashlimit: size too large, truncated to 1048576
[  639.629241][T28812] chnl_net:caif_netlink_parms(): no params data found
[  639.678426][ T5837] tipc: Node number set to 10005162
[  639.826750][T28877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6214'.
[  639.909776][T28812] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.921689][T28812] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.930183][T28812] bridge_slave_0: entered allmulticast mode
[  639.939171][T28812] bridge_slave_0: entered promiscuous mode
[  639.948847][T28812] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.956549][T28812] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.964017][T28812] bridge_slave_1: entered allmulticast mode
[  639.972460][T28874] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  639.975689][T28812] bridge_slave_1: entered promiscuous mode
[  640.138255][T28812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.178566][T28812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.270858][T28812] team0: Port device team_slave_0 added
[  640.298220][T28812] team0: Port device team_slave_1 added
[  640.406993][T28812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.434931][T28812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.476385][T28812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  640.529238][T28812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  640.547788][T28812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  640.605391][ T5829] Bluetooth: hci1: command tx timeout
[  640.614964][T28812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  640.637718][T28918] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6226'.
[  640.656825][T28918] xt_policy: neither incoming nor outgoing policy selected
[  640.698673][T28918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6226'.
[  640.725534][T28921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6227'.
[  640.739900][T28918] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6226'.
[  640.749175][T28918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6226'.
[  640.759674][T28921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6227'.
[  640.793536][T28921] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6227'.
[  640.810869][T28812] hsr_slave_0: entered promiscuous mode
[  640.813356][T28924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6227'.
[  640.831263][T28921] netlink: 'syz.0.6227': attribute type 2 has an invalid length.
[  640.842409][T28812] hsr_slave_1: entered promiscuous mode
[  640.850289][T28812] debugfs: 'hsr0' already exists in 'hsr'
[  640.856394][T28812] Cannot create hsr debugfs directory
[  640.926672][T28927] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  640.940325][T28927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  641.012952][T10527] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  641.038932][T10527] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  641.173078][T10527] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  641.188678][T10527] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  641.286954][T28934] syzkaller0: entered promiscuous mode
[  641.292474][T28934] syzkaller0: entered allmulticast mode
[  642.688676][ T5829] Bluetooth: hci1: command tx timeout
[  643.061675][T28812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.093523][T28812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.104787][T28812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  643.164437][T28990] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  643.178029][T28990] bond1 (unregistering): Released all slaves
[  643.237087][T28812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.249118][T28812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.260108][T28812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  643.380576][T29012] netlink: 'syz.0.6248': attribute type 11 has an invalid length.
[  643.397732][T29012] netlink: 'syz.0.6248': attribute type 11 has an invalid length.
[  643.421766][T28812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.446944][T28812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.447200][T29021] openvswitch: netlink: Flow key attr not present in new flow.
[  643.459042][T28812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  643.563007][T28812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.594553][T28812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.612632][T28812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  643.810682][T29029] syzkaller0: entered promiscuous mode
[  643.848084][T29039] __nla_validate_parse: 8 callbacks suppressed
[  643.848101][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6254'.
[  643.869740][T29029] syzkaller0: entered allmulticast mode
[  643.993855][T29045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6257'.
[  644.503333][T29071] xt_hashlimit: size too large, truncated to 1048576
[  644.767226][ T5829] Bluetooth: hci1: command tx timeout
[  645.662664][T29047] syzkaller1: entered allmulticast mode
[  645.760311][T28812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  645.794471][T28812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  645.798804][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6263'.
[  645.836809][T28812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  645.866187][T28812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  646.004744][T29082] can: request_module (can-proto-4) failed.
[  646.092466][T29099] geneve2: entered promiscuous mode
[  646.102367][T29099] geneve2: entered allmulticast mode
[  646.133862][   T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  646.152777][   T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  646.182870][   T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  646.203375][   T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  646.242857][T28812] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.291799][T28812] 8021q: adding VLAN 0 to HW filter on device team0
[  646.313261][T10019] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.320477][T10019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.357439][T10019] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.364633][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.616304][T29134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  646.816957][T28812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.847507][ T5829] Bluetooth: hci1: command tx timeout
[  646.900072][T29146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6276'.
[  646.916786][T28812] veth0_vlan: entered promiscuous mode
[  646.938192][T28812] veth1_vlan: entered promiscuous mode
[  647.022076][T28812] veth0_macvtap: entered promiscuous mode
[  647.069944][T28812] veth1_macvtap: entered promiscuous mode
[  647.107658][T29158] lo: entered promiscuous mode
[  647.128065][T29158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  647.170631][T28812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.195696][T28812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.231544][T10001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.245599][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  647.275257][T10001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.296122][T10001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.319485][T10001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.403607][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6285'.
[  647.645477][T29186] syzkaller1: entered promiscuous mode
[  647.650985][T29186] syzkaller1: entered allmulticast mode
[  647.673492][T10001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.688964][T10001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.775512][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.812314][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.989001][T29205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6292'.
[  648.002898][T29206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6192'.
[  648.018730][T29205] : renamed from wg0 (while UP)
[  648.060586][T29206] netlink: 'syz.2.6192': attribute type 11 has an invalid length.
[  648.065755][T29208] xt_hashlimit: max too large, truncated to 1048576
[  648.088468][T29206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6192'.
[  648.089739][T29208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.257629][T29217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6298'.
[  648.314261][T29219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6299'.
[  648.604062][T29244] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  648.903442][T29258] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  648.972358][T29264] __nla_validate_parse: 1 callbacks suppressed
[  648.972376][T29264] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6315'.
[  648.988815][T29264] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6315'.
[  649.211014][T29284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6320'.
[  649.385799][T29294] netlink: 'syz.1.6325': attribute type 28 has an invalid length.
[  649.393847][T29294] netlink: 'syz.1.6325': attribute type 3 has an invalid length.
[  649.402383][T29294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6325'.
[  649.585863][T29310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6330'.
[  649.770873][T29321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6336'.
[  649.791743][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'.
[  649.824381][T29325] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  649.841012][T29325] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6334'.
[  649.894924][T29324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6335'.
[  649.981282][T29336] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6339'.
[  650.062564][T29336] netlink: 'syz.3.6339': attribute type 4 has an invalid length.
[  650.193176][T29350] Cannot find add_set index 2 as target
[  651.400159][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  651.412209][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  651.422018][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  651.434490][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  651.453434][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  651.693032][T29458] netlink: 'syz.4.6369': attribute type 1 has an invalid length.
[  651.721489][T29458] netlink: 'syz.4.6369': attribute type 4 has an invalid length.
[  652.020293][T29461] syzkaller0: entered promiscuous mode
[  652.035076][T29461] syzkaller0: entered allmulticast mode
[  652.310269][T18061] bond0: (slave syz_tun): Releasing backup interface
[  652.329730][T18061] syz_tun (unregistering): left allmulticast mode
[  652.373080][ T2287] block nbd3: Possible stuck request ffff888026188000: control (read@0,1024B). Runtime 30 seconds
[  652.386346][ T2287] block nbd3: Possible stuck request ffff888026188200: control (read@1024,1024B). Runtime 30 seconds
[  652.397448][ T2287] block nbd3: Possible stuck request ffff888026188400: control (read@2048,1024B). Runtime 30 seconds
[  652.408860][ T2287] block nbd3: Possible stuck request ffff888026188600: control (read@3072,1024B). Runtime 30 seconds
[  653.485336][ T5829] Bluetooth: hci2: command tx timeout
[  653.857021][T29492] netem: invalid attributes len -24
[  653.862233][T29492] netem: change failed
[  654.202267][T29448] chnl_net:caif_netlink_parms(): no params data found
[  654.513151][T29527] netlink: 'syz.0.6383': attribute type 25 has an invalid length.
[  654.531621][T29527] netlink: 'syz.0.6383': attribute type 9 has an invalid length.
[  654.778354][T29448] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.802793][T29448] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.843812][T29448] bridge_slave_0: entered allmulticast mode
[  654.876226][T29448] bridge_slave_0: entered promiscuous mode
[  654.907174][T29448] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.939759][T29448] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.960673][T29448] bridge_slave_1: entered allmulticast mode
[  654.983565][T29448] bridge_slave_1: entered promiscuous mode
[  655.143475][T29448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.183037][T29448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.349504][T29448] team0: Port device team_slave_0 added
[  655.362342][T29555] veth0: entered promiscuous mode
[  655.380470][T29448] team0: Port device team_slave_1 added
[  655.449943][T29551] veth0: left promiscuous mode
[  655.539437][T29448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.557806][T29448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.590695][ T5829] Bluetooth: hci2: command tx timeout
[  655.604158][T29448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.619059][T29448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.626103][T29448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  655.655661][T29448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.708411][T29571] __nla_validate_parse: 5 callbacks suppressed
[  655.708428][T29571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6393'.
[  655.799257][T29448] hsr_slave_0: entered promiscuous mode
[  655.812179][T29448] hsr_slave_1: entered promiscuous mode
[  655.843862][T29448] debugfs: 'hsr0' already exists in 'hsr'
[  655.855595][T29448] Cannot create hsr debugfs directory
[  655.890214][T29580] x_tables: duplicate underflow at hook 2
[  655.983527][T29580] netlink: 294 bytes leftover after parsing attributes in process `syz.1.6396'.
[  655.992845][T29580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  656.003543][T29580] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6396'.
[  656.016073][T29583] netlink: 'syz.4.6397': attribute type 1 has an invalid length.
[  656.023016][T29580] netlink: zone id is out of range
[  656.066429][T29580] netlink: zone id is out of range
[  656.383567][T29604] xt_CT: You must specify a L4 protocol and not use inversions on it
[  656.461291][T29606] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  656.491282][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6407'.
[  656.571247][T29615] x_tables: duplicate underflow at hook 2
[  656.634308][T29615] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  656.650950][T22891] IPVS: starting estimator thread 0...
[  656.770589][T29624] IPVS: using max 54 ests per chain, 129600 per kthread
[  656.789397][T29615] netlink: 'syz.4.6409': attribute type 1 has an invalid length.
[  656.798686][T29629] sock: sock_timestamping_bind_phc: sock not bind to device
[  656.810968][T29616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6409'.
[  656.810968][T29615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6409'.
[  657.029903][T29639] syzkaller1: entered promiscuous mode
[  657.035863][T29639] syzkaller1: entered allmulticast mode
[  657.043249][T29639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6413'.
[  657.069896][T29448] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  657.086121][T22891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.104755][T29448] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  657.130670][T29640] tipc: Started in network mode
[  657.148187][T29640] tipc: Node identity cef7e73b334f, cluster identity 4711
[  657.177613][T29640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.185778][T29448] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  657.204422][T29648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6417'.
[  657.255708][T29641] syzkaller0: entered promiscuous mode
[  657.261215][T29641] syzkaller0: entered allmulticast mode
[  657.268437][T29641] tipc: Resetting bearer <eth:syzkaller0>
[  657.319031][   T60] tipc: Resetting bearer <eth:syzkaller0>
[  657.327856][T29448] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  657.364250][T29648] bond1: entered promiscuous mode
[  657.369949][T29648] 8021q: adding VLAN 0 to HW filter on device bond1
[  657.383017][T29633] tipc: Resetting bearer <eth:syzkaller0>
[  657.511966][T29658] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6419'.
[  657.562424][T29662] GUP no longer grows the stack in syz.1.6418 (29662): 200000003000-20000000a000 (200000001000)
[  657.576750][T29662] CPU: 1 UID: 0 PID: 29662 Comm: syz.1.6418 Not tainted syzkaller #0 PREEMPT(full) 
[  657.576777][T29662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  657.576790][T29662] Call Trace:
[  657.576799][T29662]  <TASK>
[  657.576807][T29662]  dump_stack_lvl+0xe8/0x150
[  657.576856][T29662]  __get_user_pages+0x2453/0x29d0
[  657.576887][T29662]  ? __lock_acquire+0x6b5/0x2cf0
[  657.576925][T29662]  ? __gup_longterm_locked+0xc4e/0x1630
[  657.576948][T29662]  ? down_read_killable+0x1bb/0x340
[  657.576978][T29662]  __gup_longterm_locked+0xdcf/0x1630
[  657.577030][T29662]  gup_fast_fallback+0x1d82/0x22e0
[  657.577089][T29662]  ? __pfx_gup_fast_fallback+0x10/0x10
[  657.577127][T29662]  ? is_valid_gup_args+0x11f/0x200
[  657.577156][T29662]  ? get_user_pages_fast+0x4d/0xb0
[  657.577185][T29662]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  657.577214][T29662]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  657.577238][T29662]  iov_iter_get_pages2+0x5e/0xa0
[  657.577261][T29662]  __se_sys_vmsplice+0x7b3/0x1490
[  657.577309][T29662]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  657.577339][T29662]  ? __pfx_futex_wake+0x10/0x10
[  657.577373][T29662]  ? lockdep_hardirqs_on+0x7a/0x110
[  657.577453][T29662]  do_syscall_64+0x14d/0xf80
[  657.577473][T29662]  ? trace_irq_disable+0x3b/0x150
[  657.577499][T29662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.577517][T29662]  ? clear_bhb_loop+0x40/0x90
[  657.577541][T29662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.577559][T29662] RIP: 0033:0x7f1f5599c799
[  657.577579][T29662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.577595][T29662] RSP: 002b:00007f1f5684e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  657.577616][T29662] RAX: ffffffffffffffda RBX: 00007f1f55c16180 RCX: 00007f1f5599c799
[  657.577630][T29662] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007
[  657.577642][T29662] RBP: 00007f1f55a32c99 R08: 0000000000000000 R09: 0000000000000000
[  657.577654][T29662] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  657.577665][T29662] R13: 00007f1f55c16218 R14: 00007f1f55c16180 R15: 00007ffd80e026c8
[  657.577698][T29662]  </TASK>
[  657.580204][T29662] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6418'.
[  657.647791][ T5838] Bluetooth: hci2: command tx timeout
[  657.957290][T10019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.968316][T10019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.979163][T10019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.129357][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.044193][T29633] tipc: Disabling bearer <eth:syzkaller0>
[  659.054080][T29650] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  659.074119][T18795] tipc: Node number set to 4256753467
[  659.392902][T29448] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.454155][T29448] 8021q: adding VLAN 0 to HW filter on device team0
[  659.503417][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.510619][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.581619][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.588826][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.726956][ T5838] Bluetooth: hci2: command tx timeout
[  660.269456][T29717] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.277059][T29717] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.581862][T29717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  660.618088][T29717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  660.952972][T29717] vlan0: left allmulticast mode
[  660.959031][T29717] veth0_vlan: left allmulticast mode
[  660.964430][T29717] vlan0: left promiscuous mode
[  661.010013][T29732] __nla_validate_parse: 1 callbacks suppressed
[  661.010031][T29732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6434'.
[  661.062685][T10001] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.115213][T10001] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.132312][T10001] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.171070][T10001] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.272647][T29448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  661.380281][T29448] veth0_vlan: entered promiscuous mode
[  661.439366][T29448] veth1_vlan: entered promiscuous mode
[  661.655964][T29448] veth0_macvtap: entered promiscuous mode
[  661.800815][T29448] veth1_macvtap: entered promiscuous mode
[  661.880643][T29448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  661.923757][T29448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  661.940408][ T1135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  662.017006][ T1135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  662.043173][ T1135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  662.076540][ T1135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  662.116953][T29798] net_ratelimit: 6 callbacks suppressed
[  662.116969][T29798] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  662.170727][T29801] tipc: Enabled bearer <eth:vlan0>, priority 24
[  662.313389][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  662.340581][T29812] netlink: 'syz.0.6450': attribute type 1 has an invalid length.
[  662.374341][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  662.382675][T29814] netlink: 'syz.4.6451': attribute type 2 has an invalid length.
[  662.392121][T29812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6450'.
[  662.551055][T29829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6454'.
[  663.895617][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  665.132606][T29801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  665.235597][T10019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.243642][T10019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.876241][T29866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6465'.
[  665.966697][T29881] syzkaller0: entered promiscuous mode
[  665.983987][T29881] syzkaller0: entered allmulticast mode
[  666.031658][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6468'.
[  666.224337][T29892] netlink: 'syz.0.6474': attribute type 4 has an invalid length.
[  666.968621][T22889] IPVS: starting estimator thread 0...
[  667.056261][T29926] IPVS: using max 31 ests per chain, 74400 per kthread
[  667.356778][T29946] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  667.369631][T29946] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  667.476888][T29961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6495'.
[  667.508675][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6497'.
[  667.518380][T29961] delete_channel: no stack
[  667.786028][T29983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6502'.
[  667.805000][T29983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6502'.
[  667.814004][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'.
[  667.883788][T29993] x_tables: duplicate underflow at hook 1
[  667.926441][T29990] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  668.347231][T30023] IPVS: length: 1152 != 8
[  668.401433][T30026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6511'.
[  668.428724][T30023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6510'.
[  668.672765][T30046] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6515'.
[  668.695652][T30048] lec:lec_atm_send: lec0: Unknown message type 12
[  668.719377][T30046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6515'.
[  668.758454][T30008] lec:lec_atm_close: lec0: Shut down!
[  669.128358][T30070] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  669.128733][T30072] netlink: 'syz.2.6519': attribute type 1 has an invalid length.
[  669.184583][T30072] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  669.319955][T30080] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  669.812147][T30109] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  670.165169][T22889] lec:lec_start_xmit: lec0:No lecd attached
[  670.686978][T30151] No such timeout policy "syz0"
[  671.084200][T30167] __nla_validate_parse: 3 callbacks suppressed
[  671.084219][T30167] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6540'.
[  671.344513][T30181] netlink: 'syz.0.6543': attribute type 8 has an invalid length.
[  671.418785][T30187] netlink: 'syz.0.6543': attribute type 8 has an invalid length.
[  671.430053][T30191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6546'.
[  671.765869][T30211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.035280][T30221] sctp: [Deprecated]: syz.4.6556 (pid 30221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  672.035280][T30221] Use struct sctp_sack_info instead
[  672.099490][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6557'.
[  672.261741][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6559'.
[  672.375874][T30238] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6561'.
[  672.397273][T30238] openvswitch: netlink: Missing key (keys=40, expected=100)
[  673.001110][T30279] bridge0: port 3(veth0_to_bridge) entered blocking state
[  673.045933][T30279] bridge0: port 3(veth0_to_bridge) entered disabled state
[  673.072565][T30279] veth0_to_bridge: entered allmulticast mode
[  673.083009][T30279] veth0_to_bridge: entered promiscuous mode
[  673.092636][T30279] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  673.107815][T30279] bridge0: port 3(veth0_to_bridge) entered blocking state
[  673.115513][T30279] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  673.448112][T30308] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003
[  673.457769][T30307] netlink: 'syz.3.6582': attribute type 1 has an invalid length.
[  673.468948][T30307] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  673.609510][T30319] Bluetooth: MGMT ver 1.23
[  673.988208][T30334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6590'.
[  673.998171][T30335] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6591'.
[  674.007492][T30334] openvswitch: netlink: Flow key attr not present in new flow.
[  674.058234][T30316] pim6reg: entered allmulticast mode
[  674.249819][T30351] netlink: 'syz.4.6595': attribute type 21 has an invalid length.
[  674.551982][T30362] vcan1: entered promiscuous mode
[  674.557494][T30362] vcan1: entered allmulticast mode
[  674.573520][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6598'.
[  674.597972][T30368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6599'.
[  674.891717][T30382] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6606'.
[  675.370526][T30419] netlink: 'syz.2.6617': attribute type 7 has an invalid length.
[  675.418376][T30420] vcan0: entered allmulticast mode
[  675.725296][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  675.726952][ T5829] Bluetooth: hci2: command 0x0401 tx timeout
[  675.769828][T30444] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  675.790335][T30446] netlink: 'syz.3.6626': attribute type 4 has an invalid length.
[  675.829122][T30444] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  675.840028][T30446] .`: renamed from bond0 (while UP)
[  675.855914][T30444] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  675.956100][T30453] netlink: 'syz.0.6628': attribute type 2 has an invalid length.
[  676.011619][T30453] bridge0: port 3(veth0_to_bridge) entered disabled state
[  676.042279][T30453] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.049996][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms
[  676.058653][    C1] lec:lec_tx_timeout: lec0
[  676.068199][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  676.080976][T30453] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.093002][T30458] netlink: 'syz.0.6628': attribute type 16 has an invalid length.
[  676.160453][T30458] netlink: 'syz.0.6628': attribute type 17 has an invalid length.
[  676.208093][T30453] tipc: Resetting bearer <eth:vlan0>
[  676.213701][T30453] tipc: Resetting bearer <eth:vlan0>
[  676.257664][T30458] lo: left promiscuous mode
[  676.290314][T30458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  676.311969][ T1113] tipc: Resetting bearer <eth:vlan0>
[  676.324493][T30474] syzkaller1: left promiscuous mode
[  676.331951][T30474] syzkaller1: left allmulticast mode
[  676.555874][T30488] veth0: entered promiscuous mode
[  676.564160][T30490] netlink: 'syz.4.6642': attribute type 1 has an invalid length.
[  676.572641][T30490] __nla_validate_parse: 11 callbacks suppressed
[  676.572657][T30490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6642'.
[  676.593062][T30487] veth0: left promiscuous mode
[  676.681997][T30495] IPv6: sit1: Disabled Multicast RS
[  676.732157][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6645'.
[  676.754305][T30495] sit1: entered allmulticast mode
[  676.936287][T30519] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.6648'.
[  676.981881][T30519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  677.159597][T30531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6653'.
[  677.308206][T30547] syzkaller1: tun_chr_ioctl cmd 1074025677
[  677.314192][T30547] syzkaller1: Linktype set failed because interface is up
[  677.385172][ T5837] syzkaller1: tun_net_xmit 90
[  677.388976][T30550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6661'.
[  677.769463][T30584] Can't find ip_set type bitmap:ip,mac
[  677.777590][T30585] Can't find ip_set type bitmap:ip,mac
[  677.862361][T30595] veth0: entered promiscuous mode
[  677.879964][T30594] veth0: left promiscuous mode
[  678.306245][T30634] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  678.390315][T30639] bridge0: port 4(gretap0) entered blocking state
[  678.398086][T30639] bridge0: port 4(gretap0) entered disabled state
[  678.406830][T30639] gretap0: entered allmulticast mode
[  678.414056][T30639] gretap0: entered promiscuous mode
[  678.422045][T30639] bridge0: port 4(gretap0) entered blocking state
[  678.428620][T30639] bridge0: port 4(gretap0) entered forwarding state
[  678.521150][T30639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  680.666957][ T1113] bond5 (unregistering): (slave gretap1): Releasing active interface
[  680.829894][ T1113] bond3 (unregistering): (slave bridge3): Releasing backup interface
[  680.838482][ T1113] bridge3 (unregistering): left promiscuous mode
[  680.899103][ T1113] bond4 (unregistering): (slave bridge4): Releasing backup interface
[  680.908506][ T1113] bridge4 (unregistering): left promiscuous mode
[  681.118856][T30620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  681.394560][T30688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6695'.
[  681.437785][T30688] block nbd4: Unsupported socket: should be TCP or UNIX.
[  681.487735][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.497896][ T1113] bond_slave_0: left promiscuous mode
[  681.520502][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.543440][ T1113] bond_slave_1: left promiscuous mode
[  681.569844][ T1113] bond0 (unregistering): Released all slaves
[  681.619009][ T1113] bond1 (unregistering): Released all slaves
[  681.649697][ T1113] bond2 (unregistering): Released all slaves
[  681.701700][ T1113] bond3 (unregistering): Released all slaves
[  681.772803][ T1113] bond4 (unregistering): Released all slaves
[  681.804842][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  681.812912][    C1] lec:lec_tx_timeout: lec0
[  681.818391][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  681.840721][ T1113] bond5 (unregistering): (slave veth5): Releasing active interface
[  681.851752][ T1113] bond5 (unregistering): Released all slaves
[  681.865643][ T1113] bond6 (unregistering): (slave lo): Releasing backup interface
[  681.873656][ T1113] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  681.888296][ T1113] bond6 (unregistering): Released all slaves
[  681.906038][ T1113] bond7 (unregistering): (slave veth9): Releasing active interface
[  681.913970][ T1113] vlan1: entered promiscuous mode
[  681.922398][ T1113] bond7 (unregistering): (slave vlan1): Releasing active interface
[  681.932669][ T1113] bond7 (unregistering): Released all slaves
[  681.945608][ T1113] bond8 (unregistering): Released all slaves
[  682.147050][T30720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6702'.
[  682.174736][T30718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6700'.
[  682.183787][T30718] openvswitch: netlink: Flow actions attr not present in new flow.
[  682.194000][T30726] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6704'.
[  682.217807][ T1113] vþ: left promiscuous mode
[  682.259660][T30723] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  682.267171][T30731] netlink: 'syz.2.6705': attribute type 1 has an invalid length.
[  682.275656][T30723] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  682.288112][T30731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'.
[  682.301591][T30731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6705'.
[  682.323440][T30731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6705'.
[  682.360403][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6706'.
[  682.419204][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6706'.
[  682.444633][T30740] netlink: 'syz.1.6706': attribute type 1 has an invalid length.
[  682.462306][ T2287] block nbd3: Possible stuck request ffff888026188000: control (read@0,1024B). Runtime 60 seconds
[  682.473686][ T2287] block nbd3: Possible stuck request ffff888026188200: control (read@1024,1024B). Runtime 60 seconds
[  682.485942][ T2287] block nbd3: Possible stuck request ffff888026188400: control (read@2048,1024B). Runtime 60 seconds
[  682.497370][ T2287] block nbd3: Possible stuck request ffff888026188600: control (read@3072,1024B). Runtime 60 seconds
[  682.506180][T30733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6706'.
[  682.517911][T30731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6705'.
[  682.663715][T30754] netlink: 'syz.1.6710': attribute type 21 has an invalid length.
[  682.814236][T30754] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  682.831329][T30754] bond4 (unregistering): Released all slaves
[  683.202305][T30780] netlink: 'syz.0.6715': attribute type 1 has an invalid length.
[  683.381745][T30787] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:18
[  683.929633][T30827] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[  683.940837][T30830] netlink: 'syz.4.6727': attribute type 12 has an invalid length.
[  683.964276][T30829] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[  684.404913][ T1113] hsr_slave_0: left promiscuous mode
[  684.413110][T30863] netlink: 'syz.4.6737': attribute type 1 has an invalid length.
[  684.427692][ T1113] hsr_slave_1: left promiscuous mode
[  684.444641][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.461439][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.505439][ T1113] veth1_macvtap: left promiscuous mode
[  684.518448][ T1113] veth0_macvtap: left promiscuous mode
[  684.764223][   T60] smc: removing ib device syz0
[  684.819094][ T1113] team0 (unregistering): Port device team_slave_1 removed
[  684.851202][ T1113] team0 (unregistering): Port device team_slave_0 removed
[  684.929990][ T1113] vcan0 (unregistering): left allmulticast mode
[  684.967473][T30841] netlink: 'syz.1.6731': attribute type 29 has an invalid length.
[  684.978752][ T5837] syz0: Port: 1 Link DOWN
[  685.347397][T30890] sch_tbf: burst 12 is lower than device bridge3 mtu (1514) !
[  685.577355][T30905] netlink: 'syz.4.6748': attribute type 20 has an invalid length.
[  685.621513][T30907] xt_l2tp: wrong L2TP version: 0
[  685.658448][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  685.665300][T30908] xt_cgroup: invalid path, errno=-2
[  685.667856][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL
[  686.193237][T30924] ip6tnl4: entered allmulticast mode
[  686.561178][T30932] syzkaller0: entered promiscuous mode
[  686.608308][T30932] syzkaller0: entered allmulticast mode
[  686.671807][T30932] ieee802154 phy1 wpan1: encryption failed: -22
[  686.834886][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  686.842915][    C1] lec:lec_tx_timeout: lec0
[  686.848080][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  686.895712][T30952] syzkaller0: entered promiscuous mode
[  686.901211][T30952] syzkaller0: entered allmulticast mode
[  686.971969][T30952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.791297][T30998] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  688.050024][ T5195] udevd[5195]: worker [26680] /devices/virtual/block/nbd3 is taking a long time
[  688.138318][T31027] sctp: [Deprecated]: syz.0.6783 (pid 31027) Use of int in max_burst socket option.
[  688.138318][T31027] Use struct sctp_assoc_value instead
[  688.263995][T31030] validate_nla: 6 callbacks suppressed
[  688.264015][T31030] netlink: 'syz.2.6784': attribute type 2 has an invalid length.
[  688.322423][T31030] __nla_validate_parse: 21 callbacks suppressed
[  688.322441][T31030] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6784'.
[  688.568971][T31048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6787'.
[  688.583155][T31048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6787'.
[  688.834771][T31065] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6791'.
[  688.892541][ T1113] IPVS: stop unused estimator thread 0...
[  688.982905][T31070] netlink: 'syz.0.6793': attribute type 21 has an invalid length.
[  689.077578][T31070] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  689.106920][T31070] bond1 (unregistering): Released all slaves
[  689.431327][T31093] syzkaller0: entered promiscuous mode
[  689.445092][T31093] syzkaller0: entered allmulticast mode
[  689.462399][T31093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6799'.
[  689.472150][T31092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6799'.
[  689.615726][T31105] netlink: 'syz.1.6804': attribute type 1 has an invalid length.
[  689.687877][T31105] 8021q: adding VLAN 0 to HW filter on device bond4
[  689.826918][T31114] bond4: (slave geneve2): making interface the new active one
[  689.839816][T31114] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  689.885771][T10019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.905904][T10019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.923605][T10019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.963507][T10019] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.114513][T31141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6813'.
[  690.223418][T31148] team0: Port device team_slave_1 removed
[  690.223953][T31145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6814'.
[  690.296011][T31157] bond2: (slave ip6gretap1): making interface the new active one
[  690.306681][T31157] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  690.411914][T31164] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  690.430416][T31168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6817'.
[  690.766168][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  691.854955][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  691.863008][    C1] lec:lec_tx_timeout: lec0
[  691.867608][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  693.163590][T31145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.516573][T31237] sit1: entered promiscuous mode
[  693.533533][T31241] netlink: 54 bytes leftover after parsing attributes in process `syz.1.6842'.
[  693.549724][T31237] sit1: entered allmulticast mode
[  693.567626][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6842'.
[  693.593874][T31241] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6842'.
[  693.623891][T31248] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6846'.
[  693.894697][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'.
[  694.178801][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'.
[  694.188003][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6861'.
[  694.310571][T31299] syzkaller0: entered promiscuous mode
[  694.316273][T31299] syzkaller0: entered allmulticast mode
[  694.379083][T31296] netlink: 'syz.4.6860': attribute type 5 has an invalid length.
[  694.395365][T31296] netlink: 'syz.4.6860': attribute type 5 has an invalid length.
[  694.413571][T31296] netlink: 'syz.4.6860': attribute type 5 has an invalid length.
[  694.697729][T31323] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  694.715849][T31326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6870'.
[  694.770537][T31323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  695.086780][T31350] netlink: 'syz.4.6876': attribute type 1 has an invalid length.
[  695.134760][T31350] bond3: entered promiscuous mode
[  695.140702][T31350] 8021q: adding VLAN 0 to HW filter on device bond3
[  695.196153][T31350] bond3: (slave bridge3): making interface the new active one
[  695.214069][T31350] bridge3: entered promiscuous mode
[  695.251090][T31350] bridge3: left promiscuous mode
[  695.259384][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6875'.
[  695.344763][T31358] netlink: 'syz.4.6876': attribute type 4 has an invalid length.
[  695.627227][T31390] netlink: 'syz.4.6885': attribute type 1 has an invalid length.
[  695.665612][T31390] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6885'.
[  695.674765][T31390] netlink: 'syz.4.6885': attribute type 1 has an invalid length.
[  695.708340][T31394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  695.727456][T31390] netlink: 'syz.4.6885': attribute type 8 has an invalid length.
[  695.748654][T31392] sctp: [Deprecated]: syz.4.6885 (pid 31392) Use of struct sctp_assoc_value in delayed_ack socket option.
[  695.748654][T31392] Use struct sctp_sack_info instead
[  695.793413][T31394] netlink: 'syz.0.6886': attribute type 1 has an invalid length.
[  695.885089][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  695.893323][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  695.908624][T31401] netlink: 'syz.2.6888': attribute type 21 has an invalid length.
[  696.280947][T31394] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  696.816078][T31424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  696.875015][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  696.883077][    C1] lec:lec_tx_timeout: lec0
[  696.887809][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  697.049715][ T1113] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  697.059768][ T1113] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  697.095440][ T1113] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  697.127684][ T1113] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  697.174533][ T1113] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  697.194504][ T1113] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  697.235738][ T1113] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  697.278776][ T1113] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  697.325823][T31463] openvswitch: netlink: Flow key attr not present in new flow.
[  697.462290][T31473] 8021q: adding VLAN 0 to HW filter on device team0
[  697.484212][T31473] team0: Cannot enslave team device to itself
[  697.883209][T31493] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  698.085192][T31507] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  698.148246][T31513] bond1 (unregistering): Released all slaves
[  698.197903][T31511] bond5: option arp_missed_max: invalid value (0)
[  698.204496][T31511] bond5: option arp_missed_max: allowed values 1 - 255
[  698.235754][T31511] bond5 (unregistering): Released all slaves
[  698.702473][T31552] __nla_validate_parse: 21 callbacks suppressed
[  698.702492][T31552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6934'.
[  698.783059][T31555] : entered promiscuous mode
[  698.838937][T31558] syzkaller0: entered promiscuous mode
[  698.846712][T31558] syzkaller0: entered allmulticast mode
[  698.857122][T31558] 0: reclassify loop, rule prio 0, protocol 800
[  698.869074][T31560] openvswitch: netlink: IP tunnel dst address not specified
[  699.019547][T31562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6940'.
[  699.065522][T31562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6940'.
[  699.123835][T31576] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6943'.
[  699.145064][T31579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6944'.
[  699.313606][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6948'.
[  699.452296][T31597] bond4: option all_slaves_active: invalid value (222)
[  699.472077][T31597] bond4 (unregistering): Released all slaves
[  699.496694][T31600] bond0: entered promiscuous mode
[  699.501888][T31600] bond0: entered allmulticast mode
[  699.508255][T31600] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.706012][T31607] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  699.835594][T31607] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  699.852716][T31607] gretap1: entered promiscuous mode
[  699.858541][T31607] gretap1: entered allmulticast mode
[  700.049337][T31625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6955'.
[  700.271629][T31642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6959'.
[  700.320996][T31644] delete_channel: no stack
[  700.479725][T31654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6965'.
[  700.521583][T31654] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6965'.
[  700.560244][T31654] validate_nla: 13 callbacks suppressed
[  700.560261][T31654] netlink: 'syz.1.6965': attribute type 5 has an invalid length.
[  701.123952][T31674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.139678][T31674] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.300016][T31674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.307758][T31674] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.433317][T31683] netlink: 'syz.3.6971': attribute type 1 has an invalid length.
[  701.543890][T31683] 8021q: adding VLAN 0 to HW filter on device bond1
[  701.630493][T31689] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  701.793353][T31696] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.801027][T31696] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.894887][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  701.902963][    C1] lec:lec_tx_timeout: lec0
[  701.907666][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  702.168826][T31717] netlink: 'syz.0.6976': attribute type 5 has an invalid length.
[  703.477629][T31792] xt_l2tp: v2 doesn't support IP mode
[  703.512977][T31796] netlink: 'syz.1.7006': attribute type 5 has an invalid length.
[  703.607477][T31798] vlan2: entered allmulticast mode
[  703.614343][T31798] bridge2: entered allmulticast mode
[  703.674021][T31798] bridge2: port 1(erspan0) entered blocking state
[  703.681392][T31798] bridge2: port 1(erspan0) entered disabled state
[  703.696292][T31798] erspan0: entered allmulticast mode
[  703.726788][T31798] erspan0: entered promiscuous mode
[  703.733110][T31798] bridge2: port 1(erspan0) entered blocking state
[  703.739722][T31798] bridge2: port 1(erspan0) entered forwarding state
[  703.812293][T31817] ip6tnl1: entered allmulticast mode
[  703.834702][T31820] geneve3: entered promiscuous mode
[  703.846272][T31820] geneve3: entered allmulticast mode
[  703.890780][T31034] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  703.953468][T31831] __nla_validate_parse: 5 callbacks suppressed
[  703.953486][T31831] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7014'.
[  703.977810][T31034] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  703.993652][T31034] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  704.003472][T31034] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  704.012782][T31831] netlink: Unknown conntrack attr (0)
[  704.015648][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7016'.
[  704.063556][T31828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7016'.
[  704.087128][T31828] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7016'.
[  704.126698][T31836] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7019'.
[  704.146544][T31837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7018'.
[  704.198582][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'.
[  704.478079][T31856] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  704.486047][T31855] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  704.650357][T31864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  704.702398][T31868] wireguard0: entered promiscuous mode
[  704.725234][T31868] wireguard0: entered allmulticast mode
[  704.733269][T31868] team0: Device wireguard0 is of different type
[  705.242769][T31902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'.
[  705.265684][T31903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'.
[  705.417791][T31920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7042'.
[  705.755769][T31940] syzkaller1: entered promiscuous mode
[  705.761651][T31940] syzkaller1: entered allmulticast mode
[  706.346697][T31970] team0: Cannot enslave team device to itself
[  706.449197][T31974] netlink: 'syz.2.7063': attribute type 3 has an invalid length.
[  706.490768][T31974] vlan2: entered allmulticast mode
[  706.497827][T31974] bridge0: entered allmulticast mode
[  706.503750][T31974] bridge0: port 3(vlan2) entered blocking state
[  706.512372][T31974] bridge0: port 3(vlan2) entered disabled state
[  706.513179][T31978] SET target dimension over the limit!
[  706.607326][T31982] netlink: 'syz.1.7067': attribute type 1 has an invalid length.
[  706.649191][T31984] netlink: 'syz.4.7068': attribute type 1 has an invalid length.
[  706.680235][T31984] netlink: 'syz.4.7068': attribute type 2 has an invalid length.
[  706.701505][T31986] vxcan0: tx drop: invalid sa for name 0x0000000000000002
[  706.779522][T31982] netlink: 'syz.1.7067': attribute type 1 has an invalid length.
[  706.786519][ T1113] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  706.806485][T31998] netlink: 'syz.0.7072': attribute type 1 has an invalid length.
[  706.833439][T31998] netlink: 'syz.0.7072': attribute type 4 has an invalid length.
[  706.847726][   T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  706.865445][ T1135] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  706.874228][ T1135] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  707.025181][T32010] netlink: 'syz.2.7077': attribute type 12 has an invalid length.
[  707.040668][T32013] netlink: 'syz.4.7078': attribute type 2 has an invalid length.
[  707.091495][T32011] netlink: 'syz.1.7074': attribute type 9 has an invalid length.
[  707.286119][T32020] netdevsim netdevsim1 
: renamed from netdevsim0
[  707.583982][T32051] xt_policy: output policy not valid in PREROUTING and INPUT
[  707.601506][T32047] bond1: Invalid ad_actor_system MAC address.
[  707.618699][T32047] bond1: option ad_actor_system: invalid value (1)
[  707.627979][T32047] bond1 (unregistering): Released all slaves
[  707.724921][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  707.732956][    C1] lec:lec_tx_timeout: lec0
[  707.738075][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  707.818761][   T47] IPVS: starting estimator thread 0...
[  707.909064][T32078] syzkaller0: entered promiscuous mode
[  707.914628][T32078] syzkaller0: entered allmulticast mode
[  707.925947][T32072] IPVS: using max 29 ests per chain, 69600 per kthread
[  707.973564][T32070] 
[  707.975922][T32070] ======================================================
[  707.982976][T32070] WARNING: possible circular locking dependency detected
[  707.990005][T32070] syzkaller #0 Not tainted
[  707.994412][T32070] ------------------------------------------------------
[  708.001414][T32070] syz.2.7092/32070 is trying to acquire lock:
[  708.007553][T32070] ffffffff8fd4a858 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0
[  708.016694][T32070] 
[  708.016694][T32070] but task is already holding lock:
[  708.024565][T32070] ffff88803afda970 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0
[  708.033788][T32070] 
[  708.033788][T32070] which lock already depends on the new lock.
[  708.033788][T32070] 
[  708.044179][T32070] 
[  708.044179][T32070] the existing dependency chain (in reverse order) is:
[  708.053185][T32070] 
[  708.053185][T32070] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  708.061180][T32070]        _raw_spin_lock_bh+0x36/0x50
[  708.066466][T32070]        nr_rt_device_down+0x153/0x860
[  708.071917][T32070]        nr_device_event+0x137/0x150
[  708.077198][T32070]        notifier_call_chain+0x1be/0x400
[  708.082837][T32070]        netif_close_many+0x2ae/0x420
[  708.088210][T32070]        netif_close+0x160/0x220
[  708.093143][T32070]        dev_close+0x10a/0x220
[  708.097902][T32070]        bpq_device_event+0x377/0x6a0
[  708.103283][T32070]        notifier_call_chain+0x1be/0x400
[  708.108933][T32070]        netif_close_many+0x2ae/0x420
[  708.114312][T32070]        netif_close+0x160/0x220
[  708.119252][T32070]        dev_close+0x10a/0x220
[  708.124010][T32070]        bond_setup_by_slave+0x5f/0x3e0
[  708.129553][T32070]        bond_enslave+0x847/0x3c40
[  708.134664][T32070]        bond_do_ioctl+0x6ec/0x8d0
[  708.139780][T32070]        dev_ifsioc+0x961/0x1280
[  708.144716][T32070]        dev_ioctl+0x7b4/0x1150
[  708.149561][T32070]        sock_do_ioctl+0x23e/0x320
[  708.154665][T32070]        sock_ioctl+0x5c6/0x7f0
[  708.159511][T32070]        __se_sys_ioctl+0xfc/0x170
[  708.164618][T32070]        do_syscall_64+0x14d/0xf80
[  708.169719][T32070]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.176124][T32070] 
[  708.176124][T32070] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  708.183937][T32070]        _raw_spin_lock_bh+0x36/0x50
[  708.189220][T32070]        nr_rt_device_down+0xbe/0x860
[  708.194582][T32070]        nr_device_event+0x137/0x150
[  708.199856][T32070]        notifier_call_chain+0x1be/0x400
[  708.205484][T32070]        netif_close_many+0x2ae/0x420
[  708.210849][T32070]        netif_close+0x160/0x220
[  708.215784][T32070]        dev_close+0x10a/0x220
[  708.220535][T32070]        bpq_device_event+0x377/0x6a0
[  708.225992][T32070]        notifier_call_chain+0x1be/0x400
[  708.231633][T32070]        netif_close_many+0x2ae/0x420
[  708.237004][T32070]        netif_close+0x160/0x220
[  708.241943][T32070]        dev_close+0x10a/0x220
[  708.246694][T32070]        bond_setup_by_slave+0x5f/0x3e0
[  708.252232][T32070]        bond_enslave+0x847/0x3c40
[  708.257340][T32070]        bond_do_ioctl+0x6ec/0x8d0
[  708.262449][T32070]        dev_ifsioc+0x961/0x1280
[  708.267383][T32070]        dev_ioctl+0x7b4/0x1150
[  708.272237][T32070]        sock_do_ioctl+0x23e/0x320
[  708.277348][T32070]        sock_ioctl+0x5c6/0x7f0
[  708.282192][T32070]        __se_sys_ioctl+0xfc/0x170
[  708.287298][T32070]        do_syscall_64+0x14d/0xf80
[  708.292402][T32070]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.298807][T32070] 
[  708.298807][T32070] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  708.306705][T32070]        __lock_acquire+0x15a5/0x2cf0
[  708.312068][T32070]        lock_acquire+0xf0/0x2e0
[  708.316994][T32070]        _raw_spin_lock_bh+0x36/0x50
[  708.322267][T32070]        nr_del_node+0x57d/0xbb0
[  708.327193][T32070]        nr_rt_ioctl+0xb34/0xf90
[  708.332113][T32070]        sock_do_ioctl+0x101/0x320
[  708.337213][T32070]        sock_ioctl+0x5c6/0x7f0
[  708.342051][T32070]        __se_sys_ioctl+0xfc/0x170
[  708.347145][T32070]        do_syscall_64+0x14d/0xf80
[  708.352244][T32070]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.358647][T32070] 
[  708.358647][T32070] other info that might help us debug this:
[  708.358647][T32070] 
[  708.368867][T32070] Chain exists of:
[  708.368867][T32070]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  708.368867][T32070] 
[  708.382682][T32070]  Possible unsafe locking scenario:
[  708.382682][T32070] 
[  708.390124][T32070]        CPU0                    CPU1
[  708.395472][T32070]        ----                    ----
[  708.400827][T32070]   lock(&nr_node->node_lock);
[  708.405578][T32070]                                lock(nr_node_list_lock);
[  708.412674][T32070]                                lock(&nr_node->node_lock);
[  708.419945][T32070]   lock(nr_neigh_list_lock);
[  708.424610][T32070] 
[  708.424610][T32070]  *** DEADLOCK ***
[  708.424610][T32070] 
[  708.432745][T32070] 2 locks held by syz.2.7092/32070:
[  708.437926][T32070]  #0: ffffffff8fd4a8b8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0
[  708.447406][T32070]  #1: ffff88803afda970 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0
[  708.457058][T32070] 
[  708.457058][T32070] stack backtrace:
[  708.462934][T32070] CPU: 1 UID: 0 PID: 32070 Comm: syz.2.7092 Not tainted syzkaller #0 PREEMPT(full) 
[  708.462953][T32070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  708.462963][T32070] Call Trace:
[  708.462970][T32070]  <TASK>
[  708.462979][T32070]  dump_stack_lvl+0xe8/0x150
[  708.463004][T32070]  print_circular_bug+0x2e1/0x300
[  708.463030][T32070]  check_noncircular+0x12e/0x150
[  708.463056][T32070]  __lock_acquire+0x15a5/0x2cf0
[  708.463085][T32070]  lock_acquire+0xf0/0x2e0
[  708.463103][T32070]  ? nr_del_node+0x57d/0xbb0
[  708.463121][T32070]  ? nr_del_node+0x247/0xbb0
[  708.463140][T32070]  ? nr_del_node+0x57d/0xbb0
[  708.463156][T32070]  _raw_spin_lock_bh+0x36/0x50
[  708.463172][T32070]  ? nr_del_node+0x57d/0xbb0
[  708.463188][T32070]  nr_del_node+0x57d/0xbb0
[  708.463208][T32070]  nr_rt_ioctl+0xb34/0xf90
[  708.463229][T32070]  ? kasan_quarantine_put+0xbb/0x1f0
[  708.463246][T32070]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  708.463268][T32070]  ? apparmor_capable+0x126/0x170
[  708.463288][T32070]  ? capable+0x88/0xe0
[  708.463308][T32070]  ? nr_ioctl+0x1b1/0x3b0
[  708.463323][T32070]  sock_do_ioctl+0x101/0x320
[  708.463345][T32070]  ? __pfx_sock_do_ioctl+0x10/0x10
[  708.463364][T32070]  ? do_futex+0x395/0x420
[  708.463389][T32070]  sock_ioctl+0x5c6/0x7f0
[  708.463409][T32070]  ? __pfx_sock_ioctl+0x10/0x10
[  708.463429][T32070]  ? __fget_files+0x2a/0x420
[  708.463451][T32070]  ? __fget_files+0x3a0/0x420
[  708.463472][T32070]  ? __fget_files+0x2a/0x420
[  708.463495][T32070]  ? bpf_lsm_file_ioctl+0x9/0x20
[  708.463514][T32070]  ? __pfx_sock_ioctl+0x10/0x10
[  708.463533][T32070]  __se_sys_ioctl+0xfc/0x170
[  708.463552][T32070]  do_syscall_64+0x14d/0xf80
[  708.463569][T32070]  ? trace_irq_disable+0x3b/0x150
[  708.463591][T32070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.463607][T32070]  ? clear_bhb_loop+0x40/0x90
[  708.463625][T32070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.463640][T32070] RIP: 0033:0x7f8d7539c799
[  708.463655][T32070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.463669][T32070] RSP: 002b:00007f8d735ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  708.463686][T32070] RAX: ffffffffffffffda RBX: 00007f8d75615fa0 RCX: 00007f8d7539c799
[  708.463698][T32070] RDX: 0000200000000440 RSI: 000000000000890c RDI: 000000000000000f
[  708.463709][T32070] RBP: 00007f8d75432c99 R08: 0000000000000000 R09: 0000000000000000
[  708.463720][T32070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  708.463729][T32070] R13: 00007f8d75616038 R14: 00007f8d75615fa0 R15: 00007ffe970268a8
[  708.463748][T32070]  </TASK>
[  708.832669][T32065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  712.527023][ T2287] block nbd3: Possible stuck request ffff888026188000: control (read@0,1024B). Runtime 90 seconds
[  712.537806][ T2287] block nbd3: Possible stuck request ffff888026188200: control (read@1024,1024B). Runtime 90 seconds
[  712.548763][ T2287] block nbd3: Possible stuck request ffff888026188400: control (read@2048,1024B). Runtime 90 seconds
[  712.559987][ T2287] block nbd3: Possible stuck request ffff888026188600: control (read@3072,1024B). Runtime 90 seconds
[  712.744918][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  712.752955][    C1] lec:lec_tx_timeout: lec0
[  712.757526][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  717.764863][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  717.772903][    C1] lec:lec_tx_timeout: lec0
[  717.777528][    C1] lec:lec_start_xmit: lec0:No lecd attached