last executing test programs:

8.980415358s ago: executing program 1 (id=7209):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r0)
socket(0x15, 0x5, 0x0) (async)
socket(0x15, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001400)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, 0x0, 0x804)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="d5dd2cbd7000fcdbdf7d0824500024003080200001800800010000001000140003800800020000000000060001000300000008000300", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x880)

7.573318461s ago: executing program 1 (id=7216):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffe}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

7.146835055s ago: executing program 4 (id=7220):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80800) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"52a6ebf55592f7a3baf14685e7adcf7d", <r2=>0x0, 0x0, {0x7, 0x8}, {0x2}, 0x9, [0x8, 0xe, 0x9, 0x1, 0x3, 0x6, 0x0, 0x91, 0x5, 0x1000, 0x0, 0x400, 0xb8, 0x8000000000000000, 0x6, 0x6]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000180)={{r1}, r2, 0x2, @unused=[0x2, 0x6, 0x0, 0x3], @subvolid=0x2}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0x9, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8}, 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001580)=0x14) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x1e, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9899}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @func, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='GPL\x00', 0x6, 0x52, &(0x7f0000001740)=""/82, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001800)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001840)=[{0x1, 0x5, 0x1, 0xc}, {0x5, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x9, 0xc}, {0x0, 0x5, 0x9, 0xc}, {0x5, 0x4, 0xc}, {0x4, 0x5, 0xb, 0xa}, {0x4, 0x4, 0x5, 0x8}], 0x10, 0xfffffffd}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x1, 0x26, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xea}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7fffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x2, 0x5, 0xb, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f0000001440)='syzkaller\x00', 0x1, 0xa8, &(0x7f0000001480)=""/168, 0x41000, 0x10, '\x00', r6, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x1, 0x2, 0x80, 0x9}, 0x10, 0x0, r7, 0x2, &(0x7f0000001980)=[0x1], &(0x7f00000019c0)=[{0x0, 0x3}, {0x2, 0x4, 0x3, 0x5}], 0x10, 0x8}, 0x94) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x3320c5d40cf383ab}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x168, r9, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x168}}, 0x8001) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f40)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x70000, '\x00', r6, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002fc0)={&(0x7f0000001d40)="386b7100c1329d02eca1632cba2cd2067e1c32480a974b9c84dde45e01585ed95325c1a724bf90c36de14f7206aec9543e5c53df80dc8f1caeb9277938cc10fd692fe206bae587ddaa2b53aa68ff4a245c45db8da315e13ddac28f9e39926e54630540997371e6c391db10494df7f8e3ed70d97df6858a33dae6", &(0x7f0000001dc0)=""/166, &(0x7f0000001e80)="64ff7dc8e970d6350da88cc3463c99b3b571b4d79e4cfea9fb49f29af2f465e82daf926083dbdec397fb294e6a53e2c7762b5c41907ad99b49be566120d787fea2acf5ff0c322cb7d76bfe32dc9f9009546522695664797e33d4a7f1b13a4a448af4eda175f206f1443b74015b1189f09e274222272609e6ebe3fe71d291408a15600a3a28a94c39b0f82d0513335720e2e63ec07eef19faeb9801e3", &(0x7f0000001f40)="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", 0x0, r10}, 0x38)
r11 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000003000), &(0x7f0000003040)=0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40086607, &(0x7f0000003080)=0x401)
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000030c0)) (async)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003140)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0, <r14=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000003240)=0xe8)
sendmsg$nl_xfrm(r12, &(0x7f00000033c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003280)=@newpolicy={0xd8, 0x13, 0x800, 0x70bd29, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x3, 0x4e24, 0x9, 0xa, 0x20, 0xb0, 0x3b, r6, r14}, {0x8, 0x3, 0x7, 0x1, 0x4, 0xf372, 0x4, 0x7}, {0x2, 0x4, 0x5, 0x1}, 0xe, 0x6e6bbd, 0x1, 0x0, 0x1, 0x1}, [@proto={0x5, 0x19, 0x5e}, @replay_thresh={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xff}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async)
r15 = socket$phonet(0x23, 0x2, 0x1)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r15, 0x80286722, &(0x7f0000003440)={&(0x7f0000003400)=""/51, 0x33, 0x4, 0x9}) (async)
recvfrom$inet6(r11, &(0x7f0000003480)=""/165, 0xa5, 0x20, &(0x7f0000003540)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}, 0x1c) (async)
ioctl$XFS_IOC_GETBMAP(r10, 0xc0205826, &(0x7f0000003580)={0x8, 0xdc, 0x7, 0x5, 0x5}) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r16, &(0x7f0000003740)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003700)={&(0x7f0000003600)=@gettaction={0xe8, 0x32, 0x5797fa62f73b86ec, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9e63}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xe8}}, 0x4000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003a80)={{r5, <r17=>0xffffffffffffffff}, &(0x7f0000003a00), &(0x7f0000003a40)=r8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0xb, 0x17, &(0x7f0000003780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffd00}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xd8}, @jmp={0x5, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffffff9, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003840)='GPL\x00', 0x2, 0xe0, &(0x7f0000003880)=""/224, 0x41000, 0x1c, '\x00', r13, @fallback=0x1b, r0, 0x8, &(0x7f0000003980)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000039c0)={0x3, 0x8, 0x23, 0xfcf}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000003ac0)=[r5, r3, r4, r17, r3], &(0x7f0000003b00)=[{0x2, 0x2, 0xc, 0x7}, {0x2, 0x5, 0x0, 0x2}, {0x0, 0x4, 0xd, 0xb}]}, 0x94)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000003c00), 0x4)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003c40)={{{@in=@empty, @in=@multicast2, 0x4e21, 0x7, 0x4e22, 0x4, 0xa, 0x0, 0x80, 0x1d, r13, r14}, {0x5465, 0xbf9, 0xf737, 0x7f, 0x2, 0x2, 0x1, 0x5}, {0x8, 0xb4, 0x0, 0xffffffffffff0001}, 0x6, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x33}, 0x2, @in=@local, 0x0, 0x0, 0x13bab20dcaed00fd, 0x7, 0x1, 0x4, 0x9}}, 0xe8)

7.025814122s ago: executing program 2 (id=7225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0x41, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4008042)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x0}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000000102010400000000000000000600000108000840000000030800094000000005700003802c00018014000300fe8000000000000000000000000000bb14000400fe80000000000000000000000000003f0c000280050001002f0000001400018008000100ffffffff08000200e000000114000180080001000000000008000200e00000010c000280050001008800000013000b0063616c6c666fd06b159d4a7277617264696e670000100001800c000280050001003a0000000800084000000002080004"], 0xc8}, 0x1, 0x0, 0x0, 0x48840}, 0x20000001)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xf4, 0x1, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44003}, 0x8800)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)=ANY=[@ANYBLOB="300000000201010200000000000000000a000009100002800c00028005000100110000000c0019800800020008"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50)

7.024591314s ago: executing program 4 (id=7226):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async)

6.704158151s ago: executing program 1 (id=7229):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={<r1=>0x0, 0x8, 0x4, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000004c0)={<r2=>0x0, 0x6, 0x1, [0xf55, 0x6, 0x9, 0x8000000000000000, 0xe], [0x1cb9, 0x2, 0xd, 0x100000001, 0x100000001, 0x7, 0x0, 0x2cf, 0x2, 0x2, 0x1, 0xaa48, 0x1, 0x1ff, 0x4, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x44, 0x3, 0x4, 0x1, 0x7f, 0x5, 0x7f, 0x3, 0x4, 0xfffffffffffffffd, 0x81, 0x9, 0x1, 0x2, 0x7, 0x0, 0x6, 0x1, 0x10, 0xcf94, 0x6, 0x2, 0x120000, 0x80, 0x9, 0x2, 0xfff, 0x3, 0x3, 0x2, 0x7, 0x7fffffff, 0x4, 0xfffffffffffffffc, 0x8198, 0x8, 0x3, 0x34e2, 0x6, 0x3be6, 0x2, 0x7fffffff, 0x5, 0x2, 0x702, 0x7, 0x800000000000000, 0x8000000000000000, 0x200, 0x1000, 0xff, 0x40, 0xe, 0x1, 0xfff, 0xe0a, 0x7, 0x2, 0x401, 0x6, 0x9, 0x5, 0xd, 0x70, 0x8, 0x7fff, 0x2, 0x2, 0x5, 0x40, 0x2, 0x7, 0x2185, 0x1, 0x6, 0x6, 0x8000000, 0x3, 0x9, 0xb0c, 0x3, 0x3, 0x3, 0x6, 0x49, 0x88d, 0x1, 0x9, 0x401, 0x5, 0x2, 0x101, 0xae, 0x5, 0x7fff, 0x2, 0x6, 0x400, 0x3a, 0xff, 0x36, 0x0, 0xfffffffffffffffb]})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000900)={0x6, 0x2, {0xb, @struct={0x3, 0xfffeffff}, r1, 0x8001, 0x401, 0xfffffffffffffffe, 0x7, 0x1000, 0x80, @struct={0x3, 0x6}, 0x8, 0x4, [0x2b, 0xffffffffffffffff, 0x0, 0xd, 0xee41, 0x100000001]}, {0x7, @usage=0x1, r2, 0x1, 0x7, 0x2, 0x9, 0x6, 0x40b, @usage=0xa, 0x5, 0x7f, [0x6, 0x3, 0x4, 0xe150]}, {0x29c9, @struct={0x2, 0x7}, 0x0, 0x4, 0x3, 0x1ff, 0x4, 0x4, 0x12, @usage=0x8, 0x8, 0x200, [0x7fffffffffffffff, 0xd1, 0x0, 0x8, 0x8001, 0x2]}, {0x2, 0x7fff, 0x80}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc})
ioctl(r4, 0x8b22, &(0x7f0000000040))
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f0000000d00)=0x7fff, 0x4)

6.682571225s ago: executing program 2 (id=7231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x3, &(0x7f0000000000)=0x87f4, 0x4)
recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010042)
close(0x3)

6.291271331s ago: executing program 1 (id=7232):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a907e5e9b3bd554d5648e059b7a508b4413ddadbe535", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f4ca7c860aa9077967436795364e21ac7fb81e9091ebce89a", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "4e34f0db39b883accca5962e", 0x1, 0x0, 0x0, 0x0, 0x1}})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
socket$kcm(0x29, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x80000, 0xffffffda)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000540)=r6, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@mpls_getnetconf={0x2c, 0x52, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @private}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r9, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r11, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x10, 0x1, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

6.167774565s ago: executing program 0 (id=7233):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000640101020000000000b48bbe4700000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000203000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xffffffffffffff3d) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044091)
sendto$inet(r1, 0x0, 0x0, 0x20040004, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00, 0x6a}, 0x94)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x24078015)

6.068973861s ago: executing program 0 (id=7234):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan1\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @private=0xa010100, 0xff000000, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff]}}, 0x96, 0x4, 0xfff8, 0x19, 0x6, 0x7ff, 'ip_vti0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/165, 0xa5}], 0x1, &(0x7f0000000200)=""/50, 0x32}, 0x6}, {{&(0x7f0000000240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003940)=[{&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/209, 0xd1}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f00000016c0)=""/173, 0xad}, {&(0x7f0000003900)=""/57, 0x39}], 0xa}, 0x6}], 0x3, 0x100, 0x0)

5.848366187s ago: executing program 0 (id=7236):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r1, 0x7)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x280, 0x280, 0x358, 0x0, 0x0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f00000000c0), {[{{@ip={@loopback, @broadcast, 0xffffff00, 0xffffffff, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x75, 0x3, 0x4}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xe, 0xdc07, @multicast1, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0xfffffc00, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x53d7a216], 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7fff, 0x5b, @broadcast, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x9, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8c, 0x2, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)

5.42628734s ago: executing program 3 (id=7238):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x40054}}], 0x1, 0x0)
syz_emit_ethernet(0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabb00220000000081004d0008050106f3d444ade49e7c856394b9c58a1ffa9ac4946d9fbe6b37f1bd1e44589f6644dc"], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0)

5.32842568s ago: executing program 3 (id=7239):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xe000, @empty}}}}}}, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xb8a7782741de4199, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
unshare(0x22020600) (async)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xe000, @empty}}}}}}, 0x0) (async)
getsockopt$inet6_int(r0, 0x29, 0xb8a7782741de4199, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

960.471565ms ago: executing program 4 (id=7240):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x24, 0x0, 0x0) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000540)="fbe6d6e72e1f4f5ac34b249bb4698f7cbba3874ea13dafe76aa1a2aa7861c7199437345a49887fe13bd49156338d083809ed2248dd7590bb2fad6592e033a85038ef4c76c46279419a7a87df30d83e15ce8636b6ceca7b74c1a6debe89278093496b06933323a373025722985a95051d4a9f74b12e82df75556c0a0a4142267d8f683530", 0x84}, {&(0x7f0000000600)="94252ff4bb9c14d186dbca8277f7b658", 0x10}, {&(0x7f0000000640)="3f58bbaf7b66a4621b0c855fb3dafa744f1295df109cf969bbf017a749eec4b52a30931158211755aa7afcc1d733d8f330cb84f03096878c7fcd771197c2a6cd1ce44610ec0a950d288cc3926e028e08b1af7a752a1aa7d221590a1f0a41feb6969ca9bfd121fe336fa31aa818970f7a02aff43e23b43e111570a149a114", 0x7e}, {&(0x7f00000006c0)="a911d56bcfe644bc70486173b3067798cb98b8f7f932ba19d3ce948ceb06706a602ec2426b47", 0x26}, {&(0x7f0000000700)="22b7b2aeb62bfe960c3c011bb966e4f7ff709a23d6ab5ec32f894c671a0cd055f7aecb13879c106ef56589", 0x2b}, {&(0x7f0000000740)="689f0969f5801c8e332fd0d0352f0406d848f525a032", 0x16}, {&(0x7f0000000780)="de0337f7061c1f03258da76c810268b12438a05be6fa647f2155300c02914846b9b50dc67db55aed1f42725186e773773eb7654b75615c294eceec93814566e1da6ea0d6ef43975ca85d2d2124f22e06228725c8bcc99b6e", 0x58}, {&(0x7f0000000800)="eb9f34db9215cf0c32721b26a2c78f24e56b18d582fd100d43ea789c6570aafbf806fd053c82961a8961c94064ebd5aafa5c59a6c8aee2d485beb1426d46c26860dea3007fb822064cab77f7700e7bb78454bf49ecece7ad73f34b27d31fefe4d0b72cb68e28baf667f782bc406735ee36d27ea53d2e934ec1fc028f4d12164ecb5d6ffa47122cbf05070aa2", 0x8c}], 0x8, &(0x7f0000000940)=[@ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x3c, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@broadcast, 0x7}, {@loopback, 0x2}, {@local, 0x1}, {@empty, 0x8}]}, @timestamp={0x44, 0x18, 0x1e, 0x0, 0x1, [0x1, 0x2, 0x1, 0xaa93, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x70}, 0x4000000) (async)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="f37f553e69a7a33a217463aa0624675cf2277b6420dcf1237ca2f027d48ce7278bf116feb366c39a01f1a3e2b2f416dfcdc9282d726db93974c5ad8ba1908ad02d4024477b820f571e6e0869098fcf0ed18f3d32de508d4cf008ab69f8e8ca5880d1c26ac23b8ca4a04cc3115a9648f45faf59830fade529721c1181091a9cafa9c0118772c12d192b9d3a6afc3b9fc1ad2441336ab8dda91f6e851084152057a75f4ede3baf4d6ef001a06a34b4681592e870cad113", 0xb6}, {&(0x7f0000000200)="2d64c5e23665892115e5033e4e6415bc09d84f75cc23f7b790a082dc097cf0c1b179a87739cb1c93b0082ba95dfb8458f8feebb96f290d255eb04cc50338ca45a5a387ae6e343644fdb641f282ca1be045fa8f908d19", 0x56}, {&(0x7f0000000280)="141fcc807b963f64936b27a66c05220e05ecd6cf64f21aee2bc28b56eb8b017758597e582d9d9e0ecc915a32bfe20e2672b9152f9aba1b82c5db8bdb857521023f698918e8fac035041e0cf729ed3f96321826e29f744b036b243595ced78eb5630eba6f08dada3d1efbfb5130795ccd73692d", 0x73}, {&(0x7f0000000300)="ac38a99411e33b4f587328053e491f40df019813da6a8f37db6158e3cdfc987636d1dca98cdb0d37769f2ae7bc38d444f71d53ce4aebd4f9f6b4df9f909bef5c3018716d43812f7d0346147488b59ede3956a9a31ec8795c5216014eb58a0335edf1d30d7803eea5cf6b64c463bf92ddd4eb3856a22baf3e0dc496218006fde230604cbe5613f2bca0", 0x89}, {&(0x7f0000000000)="13e1fa4e14d9087235c4f8ebc622851190959e026152fc1546794c6093cdc05ef5934e50f0d8fcbb0685ebfa71ca90a741317b", 0x33}], 0x5, &(0x7f0000000480)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x88, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1]}}}], 0x38}}], 0x2, 0x20002040)

843.571061ms ago: executing program 0 (id=7241):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async)
sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000c0000000000000000002e569dade98d6a60eb0c40048ad6006110"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 64)

796.142282ms ago: executing program 1 (id=7242):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x4040815)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
tee(r3, r1, 0x1035, 0xf)

795.8983ms ago: executing program 4 (id=7243):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}}], 0x2, 0x20004874)
r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x101, 0x4)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x0, 0x800c, 0x43, 0x9, 0x4, 0x4, 0x9}, &(0x7f0000000100)=0x20)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b}})

786.046607ms ago: executing program 2 (id=7244):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711093000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc)

736.77893ms ago: executing program 3 (id=7245):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', <r1=>0x0}) (async)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1b4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_USERDATA={0xe6, 0xc, "5561bdedcee64385b7de107fbd5a4314a100ccee715abde8fba6dd7f618b0775a018a96ac786f09eec5429626277c0c53a62e8fb8c6b1c250c805e78dd42f1968893377d0681bee84012c9e4b6a2b24eb6db6da2ef6ad6b82dd3c9eff0ce414d9ab6fa400120fb009525a7b7fda6ffd24e1a195c3e7efda52edd408965414f77af0246dc8c1ec2506d2d914b91f4e847b351b8fd6e5ba61f2f910816efd20fe152f75b560f9199e7108fb4f75e3c207992dc9cf2f7272377a265ed09d493649755d7e15abbd6998924c06e6bb48225b587cff2d77680154e26f326da97448c278bf0"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_USERDATA={0x6e, 0xc, "8837d0b0028c7afad9129bf6c0cbc3d216835795f253dbe3899e380e3b7fe09687c02e008ecb4a7a97b0b340c23948cb04f98e42254c7776b480fa43400a9a7c51fe29a8713941caa4227884952f2db39a337e53a3c27f1b4374c872b22de87af72e5d307bc2f5c505d0"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000003}, 0x1) (async)
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000380)={0x24, @none={0x0, 0x2}}, 0x14) (async)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000003c0)={'netpci0\x00', {0x2, 0x0, @dev}})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8005}, 0x24048808)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000580)) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd4, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x85d65ea435262cc9}, 0x20040040) (async)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8)
sendmmsg$inet_sctp(r5, &(0x7f0000000d80)=[{&(0x7f0000000800)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000840)="15d01fbd08f00658931c51cffb6bb04937ffdb53cde19d37f2aa9aba176af3dea166945b5cdd427d0336a152f125c870697f8e6d3a45bd90dc5b766397387f4abdd09fc856767c013575c97b65022816cf1f3fc39f7d81833a7e10", 0x5b}, {&(0x7f00000008c0)="8820e0dac4fad04afd05360c999f7ae96daf9c982c9b3423c149eb765c069d4b038bd9120fe6b72e4320bcb8d364532d76481324bcdf2951b2a5e29c33fd9ce08021f91027456f9f8b9f289bb672fe2be172aff315626a691312ce4e1864951e0180107eec6bc81aee0d20c0ec90387cf7a94e2c6118e9c2a4bcf5e7596bc9b787f69e3c53f28e7cdc6dc19aed9c30ac80f9", 0x92}, {&(0x7f0000000980)="ee36f75d0e7d851098baac320a7332929092269c2b98a476dc91e7b9bf2e3438cf02e74db29cfdfa09b985cba8d83db2d7b41c314335ea12fe4f9b4b7a615a66b94393f7c6df21d5afaa0d9fc2f0ab6035b824ae47ec740b774c648204efe227dc8eecd05187ff77a6ea89edb07c6e6c261c956592a1a498519d44faaeea961429b9b71e06f3edc9401448906d22c65fa9e712d2334557df36546b46de669c9866f11a934379e61ff88562d627e46e64dae4c69f1ef6a7ee", 0xb8}, {&(0x7f0000000a40)="eed822e9465316f5c1cafd2b0226b3058da4f041972267b32a21b4831dffb1eeeb8bdeeba502caa9097e3a61a99f3425bd418a7730146184bc7ba23fb39ac27a0df2e6fc6d8592889f7f0e98b2e74b2ee0bfd485dcb4eb0068ebd22eaa729e91d9e71ca09351cb0ff76a8ba86954ef4815b60262195573baed22a24b9f7fe52e328b4c518692df72de29b8376cb2329422b97bdeed7879228bdc0e1456f715981c6d985477e014124996b3de927ba735c098d40ea02fcc9545646ed9", 0xbc}, {&(0x7f0000000b00)="9ad224b057c13a08b9cc583c3b5eb0bc9123", 0x12}, {&(0x7f0000000b40)="f17007fc35223d9440ba65dcb8f9ecb1349aefa4a2af8fbbbb776ed3b503ae0565eedc6e1cc9b8426284fbad78a54724320358654ada9c07f9c531fcdcceb3e7e4169e14fbf8d696cb7d1021b42a3d1cddcb4528fc16971189ba4ab479c49eedd15c300ecac5370ec6fdccab6dd06646575a65142a9f18d63d4f7a439b0703", 0x7f}, {&(0x7f0000000bc0)="251e28c81bc40ab0132ca18fb3e9e7461efe123739eb923f91a011ea65090c5b6bba1c182a7839a1d1e6f263e2647b03171877e30afcb768376d25d0c7a044140ebbdfa0c3a6d39c5fb28d3b9233cd246fd63109621ead10a347a290a02be50a07b03de13b29ba236360f5eecc0ddea3161a47e16268e288f9dd43ab61622f755639fc02424f39ad4b070b84f67b383503fec315441243eac8059fa9a44de6ecbe9dec8e239a3307dbf1d8a5e6d5e2f4dbadbfa3c92fe94c0ee95ef414b34b4e99bef7eb7e3559960a2baac764c7109dcebd1befe69fd6dfc5a08ed7f1", 0xdd}], 0x7, &(0x7f0000000d40), 0x0, 0x20044040}], 0x1, 0x0) (async)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000e40)={0x9, 0xc2d, 0x6, 0x0, 0x9, 0x8, 0x0, &(0x7f0000000dc0)=[{0x1, 0xfe, 0xff}, {0x6, 0xfe, 0x7}, {0x7, 0x1ff, 0x2480}, {0x7, 0xfe, 0xfffffffa}, {0xd, 0x101, 0x8}, {0x0, 0xfe, 0x7}, {0x1a, 0x101, 0x3}, {0x7, 0xfe, 0x7}]}) (async)
r6 = accept4$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ec0)=0x14, 0x0)
getsockname$packet(r6, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000f40)=0x14) (async)
setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000f80)={{0xa, 0x4e21, 0x6, @mcast1, 0x8}, {0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0xffffffffffffffff, {[0x6, 0x1, 0x50d, 0x0, 0x8, 0x58, 0x5, 0x6000000]}}, 0x5c) (async)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_proto_private(r7, 0x89e4, &(0x7f0000001000)="d461016ccfdfbebbbe9bfce06acb0eadaf175177f65fb8d9441135f9a741c9dda8673ce5d03b706540d1e519355f8fc3326ddef2b173acf05f0d11bc7e4c631b0e134af4c67757b34326a04b6cd0264aa8b606b7370efbefca4c21ecb36895c83c8fe86b35174542c3464f905edcfa5ccde97a6ad5e747e6e4691f35dbfc312f40fd03cac8d5265b0c4b611ecfa953ba3007628888983defd7abaca125751263e42635ac3d") (async)
ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000010c0)) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x200000, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000001580)={{&(0x7f0000001140)=[{0x8000000000000001, 0x100000001, 0xefca, {0x9}, 0x0, 0x8, 0x1}, {0x9, 0x10001, 0x1ff, {0x7, 0x40}, 0x2, 0x1, 0x4}, {0x2, 0x9, 0x81, {0x2}, 0x8, 0xfffffffffffffb7f, 0x7f}, {0x28, 0x8ee7, 0x6, {0x3, 0xb}, 0x4, 0x5000000, 0x6}, {0x4, 0x2, 0x400, {0x6, 0x8}, 0x9, 0x9, 0x63}, {0xfff, 0x3, 0x1, {0xb0, 0x100}, 0x8, 0x10, 0x9}, {0x527, 0xca, 0x3e88, {0x8738, 0xb}, 0x2, 0x4, 0xffff93ae}, {0x0, 0x4, 0x9, {0x4, 0x9}, 0x2, 0x80000000, 0x40}, {0x101, 0x2, 0x2e16, {0x1, 0x2}, 0xff, 0xb08, 0x7}], 0x9, 0x40, 0xa619, 0x10}, {&(0x7f0000001380), 0x0, 0x10, 0xffff, 0x726}, {&(0x7f00000013c0)=[0xfffffffffffffff9, 0xf, 0xa9e, 0x5, 0x1e30, 0xfffffffffffffff1, 0x26, 0x0, 0x4], 0x9, 0x8, 0x1, 0x100000001}, {&(0x7f0000001440)=[{0x8, 0x6, 0x1, 0x6, 0x3ff}, {0x100000000, 0x7fffffffffffffff, 0x3, 0xfffffffffffffffb, 0x8}, {0x8000000000000001, 0x6, 0x0, 0x9, 0x4}, {0x7, 0xfffffffffffffffd, 0x4, 0xfe3, 0x81}, {0x401, 0x3, 0x7, 0x8, 0x7fffffff}], 0x5, 0x28, 0x7, 0xbfd7}, {&(0x7f0000001540)=[0xffffffffffffc1ad, 0x87f8, 0x9, 0x1], 0x4, 0x8, 0x8, 0x1ff}})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000001600)={<r9=>r5, 0xc0000, 0x4, 0x4})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001640)={'erspan0\x00', @remote}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001680)={'gre0\x00', @local})
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f00000016c0)={0x11, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x20) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r10, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x50, r11, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x50}}, 0x40000001)

576.166832ms ago: executing program 0 (id=7246):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x40}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x80}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@dellink={0x194, 0x11, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x128, 0x17ce}, [@IFLA_AF_SPEC={0x154, 0x1a, 0x0, 0x1, [@AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x17}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x81}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x7fffffff}, {0x8, 0x20, 0x0, 0x0, 0x6}, {0x8, 0x3, 0x0, 0x0, 0x8001}, {0x8, 0x1a, 0x0, 0x0, 0x8}, {0x8, 0xd, 0x0, 0x0, 0x3}, {0x8, 0x1f, 0x0, 0x0, 0x6}, {0x8, 0x1e, 0x0, 0x0, 0x8}, {0x8, 0x21}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xce}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_BRIDGE={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "de759e5bf71453de62c9484bed1ba7b973b0c3ecb910a7292a"}]}, 0x194}}, 0x8804)
socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000005c0)={'hsr0\x00'})
socket$inet6_sctp(0xa, 0x801, 0x84)

574.694824ms ago: executing program 2 (id=7247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x34}}, 0x40000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6e0000003021867e00004619ddd77252f5dfd699a20000000a00000000000022bd83a40000"], 0x14}}, 0x0)

570.17281ms ago: executing program 4 (id=7248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080)

491.026853ms ago: executing program 3 (id=7249):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x66}, 0x94) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) (async)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f100e54fd7e00000000500000a40e200000000000000000000000000000a0000060900020073797a31000000000900010073797a310000000814000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90)

355.463879ms ago: executing program 1 (id=7250):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
r4 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="e6668de461", 0x5}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000002000000000000000840000000800"], 0x38, 0x4855}, 0x24000052)
pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000480)="9800757af923a318f29268367fa91120dce68e71ae9542923f38ee3fdd918b6aea3fecd8af90e407301151b058f3aaf25730f4772b5b13efd160930ebfebb865525ff4bf8c3aea58f845c7be9d5344d186aa25e557ed62418ac896c577b418ffd6fff59d482df6bca7bb0ab230181867e3cff4d826ac23ffc09149983f6b315cb7e0e0f7d18794b0598ccf271ebdaea9828dddcad5d400fc7a9af29eb9757b6d5ac8ce437bd4f26c7a8c31cd05a341ce68b1ee07293f4100dab00a26a0de0f4b90f83002381f75dc16c63b3721978cb741ee2260262e082a58120ccffcbdd07137a9bff0", 0xe4}, {&(0x7f0000000580)="6a309064d1ca8ce464", 0x9}, {&(0x7f00000005c0)="27d63972209b4e61c3c816e8183977dc7a8760fd48a910cb6a1433a4c98ab73ff709cbfa7818147dd14a37a7866ecaee783b544f0747943111109d3443baefb7e45d8199c8f8cb99491abc8b4e84869b9ca1afc3972446a658296a6c79e16be5e7740d4fb68c91c8ad076afa7d1387dcfed13ab29b8bd5169ea0cbaba4accdabe7a6f5266a2b78a297a73b588a5a0a0a8a5be230f7e6c4496108a6fc57adc5bacb062da23895", 0xa6}], 0x3, 0x3, 0x1b8)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40002011}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3ff, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c005}, 0x2004c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x3, 0x6, @remote}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r10, 0x1, 0x6, @broadcast}, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844)

320.993387ms ago: executing program 2 (id=7251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)

168.634014ms ago: executing program 3 (id=7252):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)

5.956023ms ago: executing program 3 (id=7253):
socketpair(0x18, 0x5, 0x3, &(0x7f0000000000))
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x24}, 0x5a)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4983aa454eca6c000000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf25060000000c009900810000006b0000000a001800030303030303000008000500030000000a00180003030303030300000500530000000000080005000100000008000500000000000a00180003030303030300000800050001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x26000000}, 0xc1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008840)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200600}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd, 0x58}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4891)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f00"], 0x5c}, 0x1, 0x620b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.948417ms ago: executing program 0 (id=7254):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000080013e9050026bd700000000000000000004eb28993086714af16a7040fc5acbe60991077cdaf53ae60e66f", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaa300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

3.39694ms ago: executing program 2 (id=7255):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600000000436d0f11344d83cfd4dbcc93661f83e73d1fdcc2784d06c1e32c41e8791be7325306930c478c211bcc3b38323a69693a538a5447412bab603d3393c3db3b063f787dd7f6649ba4d240c76599953a849c7e51250be5b50092ce168c96d6fab142859e3ecdef9ca941188dab9f4f5011945a65557320f69481f310f353ffc533908262b803d53fddf27eec8876ed76635083d94ab101a2c440a273ba760b31c1464903b712bcff1deb17c2d36c7943e9b70675de125c58a2d1cf6b3fa4326e1fd5ea258e5e3f2f94b827b6f59f501d8e156663b4c189c918d9e6715dc2eee5ec26311f95200646d5"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
write$ppp(r1, &(0x7f0000000140)="41cdc16b9e9570958380dd14d34ead41e2c728409ddf5fbe8385503e499a070604377b2a80f0987f5d666769ab32051ba38c9ec7dab55385e3d1c6a6ba9f6d650ab89e2f1def2729535661142d25886aa1824e8c0937f2386a5939f814cd0202c98c0c33f2783df58866259a3e974c8e31ff68d945d54c2ba15ff9c62173fec8894d477487c6e1ebb048c7f150137ca4aa0d2be4cbf700892970576c11e91f2c648867ee59f6087f908d87c3", 0xac)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async)
write$ppp(r1, &(0x7f0000000140)="41cdc16b9e9570958380dd14d34ead41e2c728409ddf5fbe8385503e499a070604377b2a80f0987f5d666769ab32051ba38c9ec7dab55385e3d1c6a6ba9f6d650ab89e2f1def2729535661142d25886aa1824e8c0937f2386a5939f814cd0202c98c0c33f2783df58866259a3e974c8e31ff68d945d54c2ba15ff9c62173fec8894d477487c6e1ebb048c7f150137ca4aa0d2be4cbf700892970576c11e91f2c648867ee59f6087f908d87c3", 0xac) (async)

0s ago: executing program 4 (id=7256):
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd, 0xec}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001180)={<r2=>r1, &(0x7f0000001040)='(\\\x00', 0x0, &(0x7f00000010c0)={@align, {0x5e9, 0x4, 0x0, 0x8000000000000001}}, 0x6, &(0x7f0000001100)={@_ha_fsid}, &(0x7f0000001140)=0xb})
accept4$alg(r2, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)
socketpair(0x21, 0x4, 0x80000000, &(0x7f0000000340))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x13, 0x58ea, 0xe2f, 0x3}})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000100)=@get={0x1, &(0x7f0000000180)=""/171, 0x2})
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

55623][T27729] tipc: Node identity ac14140f, cluster identity 4711
[  718.677034][T27729] tipc: Enabled bearer <udp:syz2>, priority 10
[  718.878775][T27739] siw: device registration error -23
[  718.939663][T27430] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.967021][T27430] 8021q: adding VLAN 0 to HW filter on device team0
[  719.076690][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.084719][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.243586][ T4941] Bluetooth: hci1: command tx timeout
[  719.273851][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.281079][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.329403][T27755] netlink: 'syz.1.5894': attribute type 1 has an invalid length.
[  719.552705][T27761] xt_CT: You must specify a L4 protocol and not use inversions on it
[  719.675914][T25086] tipc: Node number set to 2886997007
[  719.749809][T27778] ipt_ECN: cannot use operation on non-tcp rule
[  719.808067][T27781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5903'.
[  719.867354][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5903'.
[  719.883588][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  720.047025][T27789] x_tables: ip_tables: icmp match: only valid for protocol 1
[  720.905304][T27830] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  720.953617][T27430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.167654][T27430] veth0_vlan: entered promiscuous mode
[  721.225484][T27430] veth1_vlan: entered promiscuous mode
[  721.364518][T27430] veth0_macvtap: entered promiscuous mode
[  721.415832][T27430] veth1_macvtap: entered promiscuous mode
[  721.488485][T27430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.643875][T27430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  721.713977][ T6145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  721.760920][ T6145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  721.814758][ T6145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  721.836058][ T6145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.122602][T27859] __nla_validate_parse: 8 callbacks suppressed
[  722.122621][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5924'.
[  722.150609][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.182420][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.337446][T25432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.377847][T25432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.441974][T27874] syzkaller0: entered promiscuous mode
[  722.466808][T27874] syzkaller0: entered allmulticast mode
[  722.619184][T27878] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  722.652904][T27880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5813'.
[  722.692944][T27881] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  722.930123][T27895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5933'.
[  722.977097][T27895] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5933'.
[  723.007079][T27902] IPv6: NLM_F_CREATE should be specified when creating new route
[  723.017498][T27902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  723.024843][T27902] IPv6: NLM_F_CREATE should be set when creating new route
[  723.041555][T27902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  723.048890][T27902] IPv6: NLM_F_CREATE should be set when creating new route
[  723.180810][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5937'.
[  723.228417][T27914] ������: renamed from virt_wifi0
[  723.268547][T27912] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  723.597203][T27927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  723.637504][T27933] team0: Port device xfrm0 added
[  723.655541][T27936] tipc: Enabled bearer <eth:team0>, priority 0
[  724.104301][T27956] bridge_slave_1: left allmulticast mode
[  724.125189][T27956] bridge_slave_1: left promiscuous mode
[  724.148863][T27956] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.194729][T27956] bridge_slave_0: left allmulticast mode
[  724.215575][T27956] bridge_slave_0: left promiscuous mode
[  724.230605][T27956] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.245978][T27966] netlink: 'syz.0.5956': attribute type 1 has an invalid length.
[  724.276806][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5957'.
[  724.390072][T27974] netlink: 'syz.2.5957': attribute type 1 has an invalid length.
[  724.435352][T27965] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  725.167864][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5968'.
[  725.233322][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5968'.
[  725.270863][T28015] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5968'.
[  725.316523][T28015] veth1_to_bridge: entered allmulticast mode
[  725.343985][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5968'.
[  725.601671][T28033] netlink: 'syz.1.5973': attribute type 11 has an invalid length.
[  725.643357][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  726.131589][T28055] netlink: 'syz.3.5980': attribute type 1 has an invalid length.
[  726.361646][T28063] veth1_vlan: left promiscuous mode
[  726.362973][T28065] netlink: 'syz.2.5983': attribute type 6 has an invalid length.
[  726.417485][T28063] veth1_vlan: entered promiscuous mode
[  726.457388][T28063] veth1_vlan: entered allmulticast mode
[  726.482811][ T5287] veth1_vlan: left promiscuous mode
[  726.615221][T28068] vlan5: entered allmulticast mode
[  726.645026][T28068] bridge_slave_0: entered allmulticast mode
[  726.946324][T28078] netlink: 'syz.4.5986': attribute type 10 has an invalid length.
[  726.955138][T28085] netlink: 'syz.3.5987': attribute type 10 has an invalid length.
[  726.982962][T28085] team0: Port device geneve1 added
[  727.064254][T28078] macsec0: left promiscuous mode
[  727.077620][T28078] veth1_macvtap: entered promiscuous mode
[  727.116088][T28078] .`: (slave macsec0): Enslaving as an active interface with an up link
[  727.340081][T28095] openvswitch: netlink: Missing key (keys=40, expected=100)
[  727.465852][T28101] __nla_validate_parse: 11 callbacks suppressed
[  727.465886][T28101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5993'.
[  727.518922][T28105] netlink: 'syz.1.5994': attribute type 1 has an invalid length.
[  727.567668][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5995'.
[  727.575367][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'.
[  727.629589][T28114] netlink: 'syz.0.5992': attribute type 1 has an invalid length.
[  727.682286][T28105] bond10: entered promiscuous mode
[  727.691990][T28105] 8021q: adding VLAN 0 to HW filter on device bond10
[  727.745407][T28106] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  727.759715][T28106] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  727.777972][T28106] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  727.944564][T28114] bond14: entered promiscuous mode
[  727.959900][T28114] 8021q: adding VLAN 0 to HW filter on device bond14
[  728.225733][T28136] netlink: 'syz.3.5998': attribute type 32 has an invalid length.
[  728.287296][T28134] syzkaller0: entered promiscuous mode
[  728.300249][T28134] syzkaller0: entered allmulticast mode
[  728.885318][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6011'.
[  728.896833][T28172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6010'.
[  728.907265][T28172] veth0_macvtap: entered allmulticast mode
[  728.914244][T28173] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  728.974214][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6011'.
[  729.031480][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6011'.
[  729.031587][ T6146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  729.179514][ T6146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  729.190774][ T6146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  729.199594][ T6146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  729.391301][T28198] xt_l2tp: v2 doesn't support IP mode
[  729.410909][T28196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.434613][T28196] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.591508][T28204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6021'.
[  729.621020][T28206] validate_nla: 3 callbacks suppressed
[  729.621039][T28206] netlink: 'syz.1.6020': attribute type 2 has an invalid length.
[  729.722020][T28206] : entered promiscuous mode
[  730.171850][T21348] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  730.712632][T28258] veth0_to_bond: Caught tx_queue_len zero misconfig
[  730.790755][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6035'.
[  730.801404][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6035'.
[  730.816158][T28263] vlan0: entered promiscuous mode
[  731.498918][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  731.515376][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  731.525855][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  731.540768][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  731.548399][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  732.079352][T28276] lo speed is unknown, defaulting to 1000
[  732.387142][T28276] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.394799][T28276] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.402167][T28276] bridge_slave_0: entered allmulticast mode
[  732.412064][T28276] bridge_slave_0: entered promiscuous mode
[  732.424266][T28276] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.431894][T28276] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.440549][T28276] bridge_slave_1: entered allmulticast mode
[  732.447743][T28276] bridge_slave_1: entered promiscuous mode
[  732.477331][T28276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.490113][T28276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.534870][T28276] team0: Port device team_slave_0 added
[  732.544732][T28276] team0: Port device team_slave_1 added
[  732.580129][T28276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  732.588336][T28276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  732.616668][T28276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  732.630887][T28276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  732.638395][T28276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  732.665482][T28276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.730891][T28276] hsr_slave_0: entered promiscuous mode
[  732.739132][T28276] hsr_slave_1: entered promiscuous mode
[  732.747059][T28276] debugfs: 'hsr0' already exists in 'hsr'
[  732.753454][T28276] Cannot create hsr debugfs directory
[  733.498591][T28248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  733.509506][T28258] netlink: 'syz.2.6032': attribute type 1 has an invalid length.
[  733.523760][T28258] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6032'.
[  733.555242][T28276] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  733.630582][T28276] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  733.656046][ T5629] Bluetooth: hci5: command tx timeout
[  733.664594][T28276] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  733.708889][T28276] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  733.719156][T28276] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  733.723886][T28303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6042'.
[  733.763034][T28276] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  733.786585][T28276] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  733.789588][T28303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6042'.
[  733.795718][T28310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6044'.
[  733.823042][T28276] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  734.035307][T28323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  734.339818][T28276] 8021q: adding VLAN 0 to HW filter on device bond0
[  734.401622][T28276] 8021q: adding VLAN 0 to HW filter on device team0
[  734.435493][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.442744][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  734.488742][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.495971][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  734.575246][T28346] vcan0: tx address claim with different name
[  734.695635][T28348] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  734.760998][T28348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6055'.
[  735.322440][T28367] netlink: 'syz.2.6059': attribute type 4 has an invalid length.
[  735.370699][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'.
[  735.409148][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'.
[  735.462539][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'.
[  735.515529][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'.
[  735.545981][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6061'.
[  735.592996][T28388] netlink: 'syz.2.6063': attribute type 22 has an invalid length.
[  735.611540][T28388] netlink: 'syz.2.6063': attribute type 22 has an invalid length.
[  735.615894][T28386] xt_CT: You must specify a L4 protocol and not use inversions on it
[  735.723602][ T5629] Bluetooth: hci5: command tx timeout
[  735.931634][T28276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.151301][T28276] veth0_vlan: entered promiscuous mode
[  736.262316][T28418] bond11 (unregistering): Released all slaves
[  736.318692][T28276] veth1_vlan: entered promiscuous mode
[  736.419816][T28421] gretap0: entered promiscuous mode
[  736.448661][T28421] gretap0: left promiscuous mode
[  736.549654][T28276] veth0_macvtap: entered promiscuous mode
[  736.600854][T28276] veth1_macvtap: entered promiscuous mode
[  736.681888][T28276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.710041][T28433] openvswitch: netlink: Actions may not be safe on all matching packets
[  736.721935][T28276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.782766][T28435] bond11: option fail_over_mac: invalid value (16)
[  736.819122][T28435] bond11 (unregistering): Released all slaves
[  736.895231][   T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.907828][   T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.942375][ T3337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.999368][ T3337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.138064][T28444] netlink: zone id is out of range
[  737.185533][T28444] netlink: zone id is out of range
[  737.228914][T28444] netlink: zone id is out of range
[  737.279279][T28444] netlink: zone id is out of range
[  737.312944][T28444] netlink: zone id is out of range
[  737.343983][T28444] netlink: zone id is out of range
[  737.360327][T28444] netlink: zone id is out of range
[  737.380639][T28444] netlink: zone id is out of range
[  737.460655][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.485867][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.659093][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.699935][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  737.808430][ T4941] Bluetooth: hci5: command tx timeout
[  738.413479][T28509] x_tables: duplicate underflow at hook 1
[  738.645349][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  738.660289][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  738.671590][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  738.688482][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  738.700602][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  738.841107][T28524] netlink: 'syz.3.6101': attribute type 1 has an invalid length.
[  739.135623][T28524] 8021q: adding VLAN 0 to HW filter on device bond1
[  739.270700][T28534] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  739.412308][T28537] macvlan2: entered promiscuous mode
[  739.425862][T28537] macvlan2: entered allmulticast mode
[  739.449328][T28537] bond1: entered promiscuous mode
[  739.476713][T28553] net_ratelimit: 14 callbacks suppressed
[  739.476734][T28553] openvswitch: netlink: Message has 8 unknown bytes.
[  739.517362][T28537] veth0_to_bond: entered promiscuous mode
[  739.538416][T28537] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  739.540364][T28553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.569071][T28537] bond1: left promiscuous mode
[  739.595221][T28537] veth0_to_bond: left promiscuous mode
[  739.884178][ T5629] Bluetooth: hci5: command tx timeout
[  740.079680][T28572] __nla_validate_parse: 34 callbacks suppressed
[  740.079714][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6109'.
[  740.224314][T28577] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!'
[  740.256351][T28577] CPU: 1 UID: 0 PID: 28577 Comm: syz.4.6108 Not tainted syzkaller #0 PREEMPT(full) 
[  740.256377][T28577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  740.256389][T28577] Call Trace:
[  740.256397][T28577]  <TASK>
[  740.256405][T28577]  dump_stack_lvl+0xe8/0x150
[  740.256443][T28577]  sysfs_warn_dup+0x8e/0xa0
[  740.256523][T28577]  sysfs_do_create_link_sd+0xc0/0x110
[  740.256551][T28577]  device_add_class_symlinks+0x1cf/0x240
[  740.256677][T28577]  device_add+0x467/0xb80
[  740.256710][T28577]  wiphy_register+0x1fc8/0x2ff0
[  740.256808][T28577]  ? __pfx_wiphy_register+0x10/0x10
[  740.256831][T28577]  ? __pfx_netdev_run_todo+0x10/0x10
[  740.256888][T28577]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  740.256993][T28577]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  740.257087][T28577]  ieee80211_register_hw+0x3d3d/0x4a50
[  740.257175][T28577]  ? ieee80211_register_hw+0x1971/0x4a50
[  740.257230][T28577]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  740.257260][T28577]  ? __asan_memset+0x22/0x50
[  740.257283][T28577]  ? __hrtimer_setup+0x1b7/0x260
[  740.257303][T28577]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  740.257405][T28577]  mac80211_hwsim_new_radio+0x3238/0x5680
[  740.257464][T28577]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  740.257489][T28577]  ? kstrndup+0xbd/0x160
[  740.257532][T28577]  ? kstrndup+0xbd/0x160
[  740.257559][T28577]  hwsim_new_radio_nl+0xd8b/0xf90
[  740.257601][T28577]  genl_family_rcv_msg_doit+0x233/0x340
[  740.257635][T28577]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  740.257673][T28577]  ? bpf_lsm_capable+0x9/0x20
[  740.257695][T28577]  ? security_capable+0x7e/0x2c0
[  740.257788][T28577]  genl_rcv_msg+0x614/0x7a0
[  740.257819][T28577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  740.257840][T28577]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  740.257865][T28577]  ? __pfx_ref_tracker_free+0x10/0x10
[  740.257903][T28577]  netlink_rcv_skb+0x226/0x4a0
[  740.257933][T28577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  740.257957][T28577]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  740.258002][T28577]  ? down_read+0x2be/0x330
[  740.258061][T28577]  genl_rcv+0x28/0x40
[  740.258086][T28577]  netlink_unicast+0x7bb/0x940
[  740.258125][T28577]  netlink_sendmsg+0x813/0xb40
[  740.258164][T28577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  740.258198][T28577]  ? aa_sock_msg_perm+0xf1/0x1b0
[  740.258224][T28577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  740.258250][T28577]  sock_sendmsg_nosec+0x13a/0x180
[  740.258277][T28577]  ____sys_sendmsg+0x54e/0x850
[  740.258312][T28577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  740.258351][T28577]  ? import_iovec+0x73/0xa0
[  740.258382][T28577]  ___sys_sendmsg+0x2a5/0x360
[  740.258408][T28577]  ? __lock_acquire+0x683/0x2cf0
[  740.258439][T28577]  ? __pfx____sys_sendmsg+0x10/0x10
[  740.258474][T28577]  ? cgroup1_freezing+0x20/0x350
[  740.258525][T28577]  ? __fget_files+0x2a/0x420
[  740.258549][T28577]  ? __fget_files+0x3a2/0x420
[  740.258584][T28577]  __x64_sys_sendmsg+0x1b1/0x290
[  740.258611][T28577]  ? _raw_spin_unlock_irq+0x2e/0x50
[  740.258668][T28577]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  740.258705][T28577]  ? do_user_addr_fault+0xc4a/0x1340
[  740.258757][T28577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.258780][T28577]  do_syscall_64+0x174/0x580
[  740.258804][T28577]  ? trace_irq_disable+0x3b/0x140
[  740.258829][T28577]  ? clear_bhb_loop+0x40/0x90
[  740.258853][T28577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.258872][T28577] RIP: 0033:0x7fd9ca19de59
[  740.258892][T28577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.258908][T28577] RSP: 002b:00007fd9cb018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  740.258928][T28577] RAX: ffffffffffffffda RBX: 00007fd9ca426180 RCX: 00007fd9ca19de59
[  740.258942][T28577] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  740.258954][T28577] RBP: 00007fd9ca233e6f R08: 0000000000000000 R09: 0000000000000000
[  740.258966][T28577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  740.258977][T28577] R13: 00007fd9ca426218 R14: 00007fd9ca426180 R15: 00007ffd368c5f08
[  740.259012][T28577]  </TASK>
[  740.736444][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6111'.
[  740.747095][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6111'.
[  740.759235][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6111'.
[  740.767603][ T5629] Bluetooth: hci4: command tx timeout
[  740.769502][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6111'.
[  740.918331][T28593] openvswitch: netlink: IP tunnel dst address not specified
[  740.931013][T28593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6112'.
[  741.207426][T28517] lo speed is unknown, defaulting to 1000
[  741.410954][T28616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6119'.
[  741.516711][T28611] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6118'.
[  741.576516][T28611] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  741.608611][T28611] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  741.764267][T28627] erspan0: entered promiscuous mode
[  742.080411][T28647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6124'.
[  742.137870][T28646] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6124'.
[  742.545285][T28647] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.668495][T28663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.741043][T28663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.866274][ T5629] Bluetooth: hci4: command tx timeout
[  742.900824][T28668] erspan0: entered promiscuous mode
[  743.505546][T28517] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.523303][T28517] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.530864][T28517] bridge_slave_0: entered allmulticast mode
[  743.555334][T28517] bridge_slave_0: entered promiscuous mode
[  743.599474][T28517] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.610674][T28517] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.620771][T28517] bridge_slave_1: entered allmulticast mode
[  743.631706][T28517] bridge_slave_1: entered promiscuous mode
[  743.762495][T28517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.778016][T28517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.923279][T28707] netlink: 'syz.1.6137': attribute type 1 has an invalid length.
[  743.937621][T28517] team0: Port device team_slave_0 added
[  743.941111][T28707] nbd: error processing sock list
[  743.957810][T28517] team0: Port device team_slave_1 added
[  744.113583][T28517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  744.121827][T28517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.154211][T28517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  744.198966][T28517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  744.217487][T28517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.245992][T28517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  744.433743][T28517] hsr_slave_0: entered promiscuous mode
[  744.448369][T28517] hsr_slave_1: entered promiscuous mode
[  744.462999][T28517] debugfs: 'hsr0' already exists in 'hsr'
[  744.481173][T28517] Cannot create hsr debugfs directory
[  744.681783][T28724] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode
[  744.843985][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  744.927854][ T5629] Bluetooth: hci4: command tx timeout
[  745.072940][T28734] team0: Device xfrm0 is of different type
[  745.126525][T28742] __nla_validate_parse: 5 callbacks suppressed
[  745.126556][T28742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6146'.
[  745.194620][T28744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6146'.
[  745.330769][T28751] openvswitch: netlink: IP tunnel dst address not specified
[  745.377081][T28751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.452011][T28517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  745.489618][T28517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.638386][T28762] netlink: 'syz.3.6154': attribute type 3 has an invalid length.
[  745.680418][T28762] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6154'.
[  745.931313][T28517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  745.969417][T28517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.104794][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6157'.
[  746.202547][T28517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  746.230825][T28774] netlink: 'syz.3.6157': attribute type 3 has an invalid length.
[  746.241393][T28517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.264302][T28774] netlink: 'syz.3.6157': attribute type 1 has an invalid length.
[  746.276425][T28774] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6157'.
[  746.306979][T28774] NCSI netlink: No device for ifindex 813332851
[  746.527558][T28517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  746.559915][T28517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.614205][T28785] xt_cluster: node mask cannot exceed total number of nodes
[  746.704646][T28784] syzkaller0: entered promiscuous mode
[  746.716404][T28784] syzkaller0: entered allmulticast mode
[  746.967237][T28794] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6164'.
[  747.003803][ T5629] Bluetooth: hci4: command tx timeout
[  747.042983][T28796] syzkaller1: entered promiscuous mode
[  747.048617][T28796] syzkaller1: entered allmulticast mode
[  747.059761][T28798] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  747.081332][T28796] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6165'.
[  747.315045][T28517] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  747.333612][T28808] netlink: 'syz.3.6169': attribute type 11 has an invalid length.
[  747.372047][T28808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6169'.
[  747.407697][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  747.414872][ T1314] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  747.457985][T28517] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  747.522259][T28517] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  747.567189][T28517] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  747.599023][T28517] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  747.628319][T28517] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  747.657847][T28517] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  747.691991][T28517] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  747.857997][T28839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6175'.
[  747.915566][T28839] bond0: ARP target 8.4.0.0 is already present
[  747.931084][T28839] bond0: option arp_ip_target: invalid value (1032)
[  748.027204][T28842] bond10: entered promiscuous mode
[  748.032975][T28842] bond10: entered allmulticast mode
[  748.047003][T28842] 8021q: adding VLAN 0 to HW filter on device bond10
[  748.109171][T28851] netlink: 'syz.1.6179': attribute type 30 has an invalid length.
[  748.234052][T28854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  748.258246][T28517] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.304463][T28853] tipc: Disabling bearer <eth:syzkaller0>
[  748.358962][T28517] 8021q: adding VLAN 0 to HW filter on device team0
[  748.392610][T25432] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.400844][T25432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.446651][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.453895][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.538791][T28863] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6183'.
[  749.019296][T28885] netlink: 'syz.0.6189': attribute type 12 has an invalid length.
[  749.051495][T28887] netlink: 'syz.3.6190': attribute type 1 has an invalid length.
[  749.060605][T28887] netlink: 'syz.3.6190': attribute type 3 has an invalid length.
[  749.075729][T28887] netlink: 'syz.3.6190': attribute type 1 has an invalid length.
[  749.085854][T28887] 8021q: VLANs not supported on ip6_vti0
[  749.402120][T28904] netlink: 'syz.3.6194': attribute type 21 has an invalid length.
[  749.431249][   T47] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  749.440546][T28904] netlink: 'syz.3.6194': attribute type 21 has an invalid length.
[  749.449721][   T47] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  749.468419][T28905] IPv6: sit2: Disabled Multicast RS
[  749.482333][T28905] sit2: entered allmulticast mode
[  749.499117][   T47] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  749.513927][   T47] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  749.655200][T28517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  749.745064][T28517] veth0_vlan: entered promiscuous mode
[  749.767692][T28517] veth1_vlan: entered promiscuous mode
[  749.846538][T28517] veth0_macvtap: entered promiscuous mode
[  749.865435][T28517] veth1_macvtap: entered promiscuous mode
[  749.929902][T28517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.981712][T28517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  750.008450][T28923] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  750.012058][T25434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.031207][T25434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.070661][T25434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.108973][T25434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.338991][T21348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.389567][T21348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.485705][T25434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  750.497006][T28930] openvswitch: netlink: Missing key (keys=40, expected=100)
[  750.500835][T25434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  750.778748][T28943] netlink: 'syz.2.6095': attribute type 1 has an invalid length.
[  750.795377][T28946] __nla_validate_parse: 8 callbacks suppressed
[  750.795396][T28946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6207'.
[  751.000627][T28955] vlan1: entered allmulticast mode
[  751.023281][T28955] veth0_vlan: entered allmulticast mode
[  751.094845][T28958] netlink: 'syz.4.6208': attribute type 21 has an invalid length.
[  751.129630][T28958] netlink: 'syz.4.6208': attribute type 22 has an invalid length.
[  751.172713][T28958] netlink: 'syz.4.6208': attribute type 23 has an invalid length.
[  751.221817][T28958] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6208'.
[  751.482005][T28975] veth1_macvtap: left promiscuous mode
[  751.498526][T28975] macsec0: entered promiscuous mode
[  751.520486][T28978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6216'.
[  751.540199][T28979] vxcan1 speed is unknown, defaulting to 1000
[  751.573434][T28979] vxcan1 speed is unknown, defaulting to 1000
[  751.580565][T28979] vxcan1 speed is unknown, defaulting to 1000
[  751.732049][T28988] tipc: Started in network mode
[  751.751289][T28988] tipc: Node identity fa6c908ed649, cluster identity 4711
[  751.775998][T28988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  751.880220][T28988] tipc: Disabling bearer <eth:syzkaller0>
[  752.032156][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6224'.
[  752.191403][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6226'.
[  752.226039][T29011] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.6226'.
[  752.278271][T29004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  752.410904][T29019] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  752.459604][T11850] vxcan1 speed is unknown, defaulting to 1000
[  752.468704][T28979] infiniband syz2: set active
[  752.474776][T28979] infiniband syz2: added vxcan1
[  752.519249][T28979] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  752.650049][T28979] infiniband syz2: Couldn't open port 1
[  752.670641][T28979] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  752.691511][T28979] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  752.740701][T28979] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  752.926146][T28979] RDS/IB: syz2: added
[  752.942723][T28979] smc: adding ib device syz2 with port count 1
[  752.952155][T28979] smc:    ib device syz2 port 1 has no pnetid
[  752.964325][T11849] vxcan1 speed is unknown, defaulting to 1000
[  752.980668][T28979] vxcan1 speed is unknown, defaulting to 1000
[  753.000213][T29048] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6235'.
[  753.297117][T29059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  753.305345][T29059] IPv6: NLM_F_CREATE should be set when creating new route
[  753.313510][T29059] IPv6: NLM_F_CREATE should be set when creating new route
[  753.417197][T29064] lo: entered allmulticast mode
[  753.479741][T29054] syzkaller0: entered promiscuous mode
[  753.490874][T29054] syzkaller0: entered allmulticast mode
[  753.620337][T29071] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6242'.
[  753.889845][T28979] vxcan1 speed is unknown, defaulting to 1000
[  754.154157][T29097] veth0_to_bridge: entered promiscuous mode
[  754.181634][T29097] veth0_to_bridge: left promiscuous mode
[  754.230210][T29101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6247'.
[  754.672216][T28979] vxcan1 speed is unknown, defaulting to 1000
[  754.673648][T29113] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6253'.
[  754.798481][T29120] team0: No ports can be present during mode change
[  755.302974][T28979] vxcan1 speed is unknown, defaulting to 1000
[  755.917596][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  755.934436][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  755.946118][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  755.955327][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  755.962963][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  756.464296][T28979] vxcan1 speed is unknown, defaulting to 1000
[  756.494521][T29167] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  756.585741][T29162] validate_nla: 2 callbacks suppressed
[  756.585803][T29162] netlink: 'syz.2.6265': attribute type 2 has an invalid length.
[  756.658572][T29167] xt_ecn: cannot match TCP bits for non-tcp packets
[  756.678552][T29174] __nla_validate_parse: 1 callbacks suppressed
[  756.678569][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6266'.
[  756.752529][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6266'.
[  757.389070][ T6146] dvmrp0: left allmulticast mode
[  758.047059][ T4941] Bluetooth: hci2: command tx timeout
[  758.061794][ T6146] team0: Port device xfrm0 removed
[  758.226285][ T6146] bond4 (unregistering): (slave gretap1): Releasing active interface
[  758.272170][ T6146] bond7 (unregistering): (slave gretap2): Releasing active interface
[  758.294838][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  758.525011][ T6146] bond0 (unregistering): Released all slaves
[  758.538751][ T6146] bond1 (unregistering): Released all slaves
[  758.565197][ T6146] bond2 (unregistering): Released all slaves
[  758.592259][ T6146] bond3 (unregistering): Released all slaves
[  758.611540][ T6146] bond4 (unregistering): Released all slaves
[  758.632951][ T6146] bond5 (unregistering): Released all slaves
[  758.660929][ T6146] bond6 (unregistering): (slave vlan2): Releasing active interface
[  758.671657][ T6146] bond6 (unregistering): Released all slaves
[  758.696742][ T6146] bond7 (unregistering): Released all slaves
[  758.721022][ T6146] bond8 (unregistering): Released all slaves
[  758.740933][ T6146] bond9 (unregistering): Released all slaves
[  758.771630][ T6146] bond10 (unregistering): Released all slaves
[  758.790926][ T6146] bond11 (unregistering): Released all slaves
[  758.822062][T29199] syzkaller0: entered promiscuous mode
[  758.829921][T29199] syzkaller0: entered allmulticast mode
[  758.841556][T21348] tipc: Resetting bearer <eth:team0>
[  758.859358][T28979] vxcan1 speed is unknown, defaulting to 1000
[  759.173588][ T6146] : left promiscuous mode
[  759.529173][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  759.549662][T29143] lo speed is unknown, defaulting to 1000
[  759.572855][T29230] tc_dump_action: action bad kind
[  759.590267][T29231] batadv_slave_1: entered promiscuous mode
[  759.605871][T29225] batadv_slave_1: left promiscuous mode
[  759.699564][T29143] vxcan1 speed is unknown, defaulting to 1000
[  759.744649][ T6146] tipc: Disabling bearer <eth:team0>
[  759.805881][ T6146] tipc: Left network mode
[  759.898851][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'.
[  759.975996][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'.
[  760.013834][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6278'.
[  760.107040][T25434] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  760.116149][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'.
[  760.130466][ T4941] Bluetooth: hci2: command tx timeout
[  760.146844][T25434] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  760.157266][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6278'.
[  760.230266][T25434] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  760.287582][T29252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6280'.
[  760.618752][T29266] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  760.854810][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  760.889912][T28979] vxcan1 speed is unknown, defaulting to 1000
[  761.630744][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  761.721722][T29297] sctp: [Deprecated]: syz.4.6287 (pid 29297) Use of int in max_burst socket option deprecated.
[  761.721722][T29297] Use struct sctp_assoc_value instead
[  762.034533][T28979] vxcan1 speed is unknown, defaulting to 1000
[  762.069374][T29143] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.081211][T29143] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.092515][T29143] bridge_slave_0: entered allmulticast mode
[  762.109586][T29143] bridge_slave_0: entered promiscuous mode
[  762.146120][T29143] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.162166][T29143] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.202771][T29143] bridge_slave_1: entered allmulticast mode
[  762.208898][ T4941] Bluetooth: hci2: command tx timeout
[  762.250476][T29143] bridge_slave_1: entered promiscuous mode
[  762.419861][T29143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  762.478289][T29143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  762.735805][T29143] team0: Port device team_slave_0 added
[  762.956920][T29143] team0: Port device team_slave_1 added
[  763.032850][T28979] vxcan1 speed is unknown, defaulting to 1000
[  763.041624][T29143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.048593][T29143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.197795][T29143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.327103][T29143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.368847][T29143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.449579][T29143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.925635][T29143] hsr_slave_0: entered promiscuous mode
[  763.978356][T29143] hsr_slave_1: entered promiscuous mode
[  764.016833][T29143] debugfs: 'hsr0' already exists in 'hsr'
[  764.055731][T29143] Cannot create hsr debugfs directory
[  764.289474][ T4941] Bluetooth: hci2: command tx timeout
[  764.315470][T28979] vxcan1 speed is unknown, defaulting to 1000
[  764.392841][T29341] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6294'.
[  764.449011][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3
[  764.654751][T29354] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6297'.
[  764.722441][T29357] xt_hashlimit: size too large, truncated to 1048576
[  764.765784][T29359] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  765.243476][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6301'.
[  765.285888][T29373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6301'.
[  765.301381][T29373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6301'.
[  765.632617][T29393] netlink: 'syz.4.6304': attribute type 11 has an invalid length.
[  765.778808][T29398] netlink: 'syz.4.6304': attribute type 21 has an invalid length.
[  765.998141][T29398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6304'.
[  766.339142][T29418] xt_hashlimit: size too large, truncated to 1048576
[  766.825475][T29433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6312'.
[  766.942300][ T6146] hsr_slave_0: left promiscuous mode
[  766.988093][ T6146] hsr_slave_1: left promiscuous mode
[  767.181733][T29453] netlink: 'syz.4.6314': attribute type 27 has an invalid length.
[  767.236748][T29460] netlink: 'syz.4.6314': attribute type 1 has an invalid length.
[  767.274705][ T6146] veth1_macvtap: left promiscuous mode
[  767.286621][ T6146] veth0_vlan: left promiscuous mode
[  768.493740][T29426] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6310'.
[  768.547239][T29460] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  769.217784][T29143] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  769.331116][T29143] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  769.382251][T29143] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  769.462154][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6318'.
[  769.492707][T29143] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  769.501795][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6317'.
[  769.592154][T29498] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6317'.
[  769.660278][T29498] geneve2: entered promiscuous mode
[  769.673747][T29525] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6321'.
[  769.686031][T29498] geneve2: entered allmulticast mode
[  769.699057][T29143] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  769.706422][ T6146] IPVS: stop unused estimator thread 0...
[  769.757543][T29143] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  769.960003][T29525] bond1 (unregistering): Released all slaves
[  770.066951][T29143] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  770.089296][T29143] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  770.271087][T29547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6324'.
[  770.315594][T29547] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6324'.
[  770.329849][T29547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6324'.
[  770.678703][T29143] 8021q: adding VLAN 0 to HW filter on device bond0
[  770.801261][T29143] 8021q: adding VLAN 0 to HW filter on device team0
[  770.933110][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.943252][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  771.051616][T29563] syzkaller0: entered promiscuous mode
[  771.064323][T29563] syzkaller0: entered allmulticast mode
[  771.128458][T25432] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.136494][T25432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  771.650757][T29615] netlink: get zone limit has 4 unknown bytes
[  771.882979][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6338'.
[  771.949460][T29625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6339'.
[  772.067158][T29625] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6339'.
[  772.498067][T29649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  772.697065][T29650] lo speed is unknown, defaulting to 1000
[  772.719801][T29650] vxcan1 speed is unknown, defaulting to 1000
[  773.746164][T29667] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.754930][T29667] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.398083][T29667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.431118][T29667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.972981][ T6146] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  775.012965][ T6146] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  775.035663][ T6145] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  775.042602][T29704] __nla_validate_parse: 3 callbacks suppressed
[  775.042622][T29704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6348'.
[  775.075248][ T6145] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  775.089050][ T6145] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  775.100283][ T6145] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  775.130223][T29143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.151556][ T6145] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  775.173027][ T6145] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  775.206603][T29704] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  775.318417][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.372527][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.411648][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.457932][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.490593][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.497955][T29143] veth0_vlan: entered promiscuous mode
[  775.530284][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.571924][T29143] veth1_vlan: entered promiscuous mode
[  775.632087][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.665657][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.738395][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.761700][T29143] veth0_macvtap: entered promiscuous mode
[  775.809079][T29143] veth1_macvtap: entered promiscuous mode
[  775.816441][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.847280][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.888420][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.901879][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.917744][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.952929][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.964710][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  775.978929][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  775.989433][T29716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6351'.
[  776.027286][T29143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.089029][T29716] netlink: 'syz.2.6351': attribute type 1 has an invalid length.
[  776.098164][T29143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.178909][ T6145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.207997][ T6145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.261784][ T6145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.312359][ T6145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.565676][T29743] bond11: entered promiscuous mode
[  776.572026][T29743] 8021q: adding VLAN 0 to HW filter on device bond11
[  776.662006][T29749] 8021q: adding VLAN 0 to HW filter on device bond11
[  776.696275][T29749] bond11: (slave vti0): The slave device specified does not support setting the MAC address
[  776.749606][T29749] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  776.819626][T29749] bond11: (slave vti0): making interface the new active one
[  776.854375][T29749] vti0: entered promiscuous mode
[  776.906480][T29749] bond11: (slave vti0): Enslaving as an active interface with an up link
[  777.428183][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.472916][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.681906][T21218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.721474][T21218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.019965][T29808] bridge2: entered promiscuous mode
[  778.031844][T29808] bridge2: entered allmulticast mode
[  778.105044][T29812] vlan1: left allmulticast mode
[  778.140082][T29812] veth0_vlan: left allmulticast mode
[  779.190791][T25434] bond6 (unregistering): (slave gretap2): Releasing backup interface
[  779.260297][T25434] team0: Port device geneve1 removed
[  779.291243][T25434] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  779.300232][T25434] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 96:25:08:f5:14:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  779.320836][T25434] bridge1 (unregistering): left promiscuous mode
[  779.332497][T25434] bond2 (unregistering): (slave bridge2): making interface the new active one
[  779.344591][T25434] bridge2 (unregistering): entered promiscuous mode
[  779.358925][T25434] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  779.367750][T25434] bridge2 (unregistering): left promiscuous mode
[  779.471377][T25434] bond1 (unregistering): Released all slaves
[  779.492700][T25434] bond2 (unregistering): Released all slaves
[  779.511759][T25434] bond3 (unregistering): Released all slaves
[  779.544658][T25434] bond4 (unregistering): Released all slaves
[  779.571829][T25434] bond5 (unregistering): Released all slaves
[  779.598944][T25434] bond6 (unregistering): (slave bond7): Releasing backup interface
[  779.607971][T25434] bond6 (unregistering): Released all slaves
[  779.629832][T25434] bond7 (unregistering): Released all slaves
[  779.657558][T25434] bond8 (unregistering): Released all slaves
[  779.677891][T25434] bond9 (unregistering): Released all slaves
[  779.697496][T25434] bond10 (unregistering): Released all slaves
[  779.747430][T29824] bond0: entered promiscuous mode
[  779.752513][T29824] bond_slave_0: entered promiscuous mode
[  779.758486][T29824] bond_slave_1: entered promiscuous mode
[  779.767058][T29824] batadv0: entered promiscuous mode
[  779.774111][T29824] 8021q: adding VLAN 0 to HW filter on device hsr1
[  779.786917][T29824] bond0: left promiscuous mode
[  779.791729][T29824] bond_slave_0: left promiscuous mode
[  779.818577][T29824] bond_slave_1: left promiscuous mode
[  779.846046][T29824] batadv0: left promiscuous mode
[  780.009383][T29842] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  780.170710][T25434] tipc: Left network mode
[  781.157528][T25434] hsr_slave_0: left promiscuous mode
[  781.165094][T25434] hsr_slave_1: left promiscuous mode
[  781.174479][T25434] veth0_macvtap: left promiscuous mode
[  781.516982][T29850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  781.935729][T29928] __nla_validate_parse: 32 callbacks suppressed
[  781.935763][T29928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6386'.
[  782.058176][T29934] ip6t_srh: unknown srh match flags  4000
[  782.076974][T29935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6388'.
[  782.542702][T21348] smbdirect: ib_dev[sy�2] removed
[  782.922792][T29954] 8021q: adding VLAN 0 to HW filter on device bond12
[  782.959132][T29954] bond0: (slave bond12): Enslaving as an active interface with an up link
[  783.533965][T29967] syzkaller0: entered promiscuous mode
[  783.539470][T29967] syzkaller0: entered allmulticast mode
[  783.612922][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'.
[  783.872734][T25434] IPVS: stop unused estimator thread 0...
[  788.339323][T30004] netlink: 79 bytes leftover after parsing attributes in process `syz.2.6402'.
[  788.561242][T30010] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  788.594883][T30012] validate_nla: 27 callbacks suppressed
[  788.594902][T30012] netlink: 'syz.1.6404': attribute type 4 has an invalid length.
[  788.676658][T30012] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode
[  788.686666][T30012] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode
[  788.921878][T30028] set match dimension is over the limit!
[  788.934492][T30029] netlink: 'syz.0.6411': attribute type 1 has an invalid length.
[  788.982831][T30028] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6412'.
[  789.014376][T30029] 8021q: adding VLAN 0 to HW filter on device bond1
[  789.070201][T30037] bond1: (slave veth0_to_bond): making interface the new active one
[  789.083649][T30037] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  789.196372][T30029] macvlan2: entered promiscuous mode
[  789.218323][T30029] macvlan2: entered allmulticast mode
[  789.249258][T30029] bond1: entered promiscuous mode
[  789.255445][T30049] netlink: 'syz.3.6415': attribute type 18 has an invalid length.
[  789.266469][T30029] veth0_to_bond: entered promiscuous mode
[  789.277037][T30029] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  789.286345][T30029] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  789.309059][T30029] bond1: left promiscuous mode
[  789.314817][T30029] veth0_to_bond: left promiscuous mode
[  789.527182][T30058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6420'.
[  789.592065][T30060] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001
[  789.593577][T30054] netlink: 'syz.3.6418': attribute type 4 has an invalid length.
[  789.702184][T30068] netlink: 'syz.2.6422': attribute type 3 has an invalid length.
[  789.731339][T30068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6422'.
[  790.036227][T30089] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  790.048244][T30089] bond1 (unregistering): Released all slaves
[  790.078224][T30090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6428'.
[  790.106849][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6428'.
[  790.230187][T30100] mac80211_hwsim hwsim40 �
: renamed from wlan1
[  793.181023][T30168] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6449'.
[  793.192950][T30167] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  793.342652][T30176] syzkaller1: entered promiscuous mode
[  793.359536][T30176] syzkaller1: entered allmulticast mode
[  793.552305][T30117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  793.680724][T30185] netlink: 'syz.3.6453': attribute type 9 has an invalid length.
[  793.871953][T30191] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6454'.
[  793.895363][T30194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6456'.
[  793.924575][T30194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6456'.
[  793.957886][T30194] netlink: 'syz.0.6456': attribute type 83 has an invalid length.
[  794.507989][T30227] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6466'.
[  794.925980][T30243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6472'.
[  795.066401][T30253] xt_hashlimit: size too large, truncated to 1048576
[  795.472495][T30286] only policy match revision 0 supported
[  795.472528][T30286] unable to load match
[  795.529690][T30288] syzkaller0: entered allmulticast mode
[  796.146911][T30312] syzkaller0: entered promiscuous mode
[  796.153268][T30312] syzkaller0: entered allmulticast mode
[  796.247824][T30316] bond1: entered allmulticast mode
[  796.269040][T30316] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.484907][T30316] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  796.505893][T30316] macvlan2: entered allmulticast mode
[  796.512796][T30316] bond0: entered allmulticast mode
[  796.533774][T30316] bond_slave_0: entered allmulticast mode
[  796.544901][T30316] bond_slave_1: entered allmulticast mode
[  796.563774][T30316] bond_slave_0: entered promiscuous mode
[  796.571897][T30316] bond_slave_1: entered promiscuous mode
[  796.596648][T30316] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  798.000145][T30339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6499'.
[  802.141287][T30347] syz_tun: refused to change device tx_queue_len
[  802.264115][T30357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6505'.
[  802.483775][T30364] Can't find ip_set type bitmap:ip,mac
[  802.600471][T30373] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  802.627386][T30373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  802.687020][T30375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6510'.
[  802.910540][T30383] macvtap1: entered promiscuous mode
[  802.928384][T30383] macvtap1: entered allmulticast mode
[  802.940807][T30383] veth1_vlan: entered allmulticast mode
[  803.017051][T30387] macvtap2: entered promiscuous mode
[  803.032986][T30387] macvtap2: entered allmulticast mode
[  803.370919][   T29] audit: type=1804 audit(1783297903.994:22): pid=30403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6519" name="/newroot/581/cgroup.controllers" dev="tmpfs" ino=2985 res=1 errno=0
[  803.372980][T30405] netlink: 9608 bytes leftover after parsing attributes in process `syz.2.6520'.
[  803.433651][   T29] audit: type=1800 audit(1783297903.994:23): pid=30403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6519" name="cgroup.controllers" dev="tmpfs" ino=2985 res=0 errno=0
[  803.732938][T30416] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6525'.
[  804.331726][T30446] syzkaller1: tun_chr_ioctl cmd 1074025677
[  804.357102][T30446] syzkaller1: linktype set to 823
[  804.466021][T30452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6537'.
[  804.882113][T30465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  805.332951][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'.
[  805.374124][T30491] netlink: 'syz.0.6547': attribute type 1 has an invalid length.
[  805.408725][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'.
[  805.450457][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'.
[  805.485662][T30491] netlink: 'syz.0.6547': attribute type 1 has an invalid length.
[  805.525431][T30491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'.
[  805.813573][T30508] xt_hl: Unknown Hop Limit match mode: 206
[  806.028962][T30522] veth0_macvtap: entered allmulticast mode
[  806.042031][T30528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6556'.
[  806.077435][T30522] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  806.222374][T30528] team0: Port device team_slave_0 removed
[  806.389331][T30538] openvswitch: netlink: Key type 31 is not supported
[  807.212537][T30590] netlink: 'syz.1.6572': attribute type 7 has an invalid length.
[  807.247420][T30590] netlink: 'syz.1.6572': attribute type 8 has an invalid length.
[  807.260581][T21348] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  807.282733][T30584] xt_hashlimit: size too large, truncated to 1048576
[  807.292867][T30596] netlink: 'syz.3.6573': attribute type 1 has an invalid length.
[  807.303228][T30590] __nla_validate_parse: 2 callbacks suppressed
[  807.303244][T30590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6572'.
[  807.349296][T30585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  807.525390][T30596] 8021q: adding VLAN 0 to HW filter on device bond2
[  807.659334][T30602] bond2: (slave geneve3): making interface the new active one
[  807.690992][T30602] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  807.715202][ T3337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  807.745235][ T3337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  807.777065][T25432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  807.831986][T25432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  808.049345][T30619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6578'.
[  808.133372][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6580'.
[  808.176937][T30625] team_slave_0: entered promiscuous mode
[  808.200421][T30625] team_slave_0: left promiscuous mode
[  808.296249][T30631] batman_adv: batadv0: Adding interface: dummy0
[  808.299496][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6583'.
[  808.331606][T30631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  808.364280][T30631] batman_adv: batadv0: Interface activated: dummy0
[  808.492325][T25092] IPVS: starting estimator thread 0...
[  808.550541][T30632] batadv0: mtu less than device minimum
[  808.562399][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.577307][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.589134][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.601977][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.615219][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.627279][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.639890][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.651876][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.665490][T30632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  808.694360][T30644] IPVS: using max 34 ests per chain, 81600 per kthread
[  808.848964][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  808.857613][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  808.922050][T30661] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  809.102071][T30661] syzkaller0: entered promiscuous mode
[  809.130055][T30661] syzkaller0: entered allmulticast mode
[  809.336050][T30684] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6597'.
[  809.986016][T30690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6599'.
[  814.279916][T30708] netlink: 'syz.1.6605': attribute type 22 has an invalid length.
[  814.315089][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6605'.
[  814.338281][T30708] netlink: 'syz.1.6605': attribute type 22 has an invalid length.
[  814.360289][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6605'.
[  815.074184][T30749] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6618'.
[  815.298824][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  815.315300][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  815.326894][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  815.346378][T30749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6618'.
[  815.358748][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  815.376284][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  815.670160][T30768] netlink: 'syz.3.6623': attribute type 1 has an invalid length.
[  815.894884][T30768] 8021q: adding VLAN 0 to HW filter on device bond3
[  815.979168][T30772] bond3: (slave gretap3): making interface the new active one
[  816.026478][T30781] net_ratelimit: 11 callbacks suppressed
[  816.026510][T30781] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  816.050504][T30772] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  816.096977][T30785] netlink: 'syz.1.6627': attribute type 1 has an invalid length.
[  816.159982][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6625'.
[  816.187546][T30785] 8021q: adding VLAN 0 to HW filter on device bond2
[  816.688860][T30799] macvtap1: entered promiscuous mode
[  816.709514][T30799] macvtap1: entered allmulticast mode
[  816.724743][T30799] veth1_vlan: entered allmulticast mode
[  816.831025][T30805] ipvlan3: entered allmulticast mode
[  816.839490][T30805] batadv_slave_1: entered allmulticast mode
[  816.886077][T30805] batman_adv: batadv0: Adding interface: ipvlan3
[  816.917700][T30805] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.982517][T30805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  817.012827][T30805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.028795][T30805] batman_adv: batadv0: Interface activated: ipvlan3
[  817.104380][T30828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6638'.
[  817.277779][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  817.294078][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.483546][ T4941] Bluetooth: hci3: command tx timeout
[  817.697681][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  817.707993][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.744679][T30842] netlink: 'syz.0.6641': attribute type 4 has an invalid length.
[  817.782892][T30753] vxcan1 speed is unknown, defaulting to 1000
[  817.894617][T30863] netlink: 'syz.1.6645': attribute type 1 has an invalid length.
[  817.922604][T30863] netlink: 'syz.1.6645': attribute type 2 has an invalid length.
[  818.050594][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  818.076522][T30872] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6648'.
[  818.100865][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.221606][T30881] netlink: 'syz.0.6650': attribute type 21 has an invalid length.
[  818.258978][T30881] IPv6: NLM_F_CREATE should be specified when creating new route
[  818.270641][T30881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  818.277952][T30881] IPv6: NLM_F_CREATE should be set when creating new route
[  818.285257][T30881] IPv6: NLM_F_CREATE should be set when creating new route
[  818.292511][T30881] IPv6: NLM_F_CREATE should be set when creating new route
[  818.398594][T30881] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6650'.
[  818.470270][T30881] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6650'.
[  818.501079][T30886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6650'.
[  818.547761][T30881] netlink: 'syz.0.6650': attribute type 6 has an invalid length.
[  818.581780][T30881] netlink: 'syz.0.6650': attribute type 5 has an invalid length.
[  819.010066][T30905] syzkaller0: entered promiscuous mode
[  819.042608][T30905] syzkaller0: entered allmulticast mode
[  819.511987][T30935] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  819.563228][ T4941] Bluetooth: hci3: command tx timeout
[  819.640658][T30938] netlink: 'syz.2.6660': attribute type 4 has an invalid length.
[  819.649911][T30938] __nla_validate_parse: 3 callbacks suppressed
[  819.649929][T30938] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6660'.
[  819.676526][ T6145] pim6reg527: left allmulticast mode
[  819.703682][ T6145] lo: left allmulticast mode
[  819.795374][T30945] netlink: 'syz.2.6660': attribute type 1 has an invalid length.
[  820.281816][ T6145] bond7 (unregistering): (slave ip6gre2): Releasing backup interface
[  820.303333][ T6145] ip6gre2 (unregistering): left promiscuous mode
[  820.402710][ T6145] bond11 (unregistering): (slave vti0): Releasing backup interface
[  820.411575][ T6145] vti0 (unregistering): left promiscuous mode
[  820.563902][ T6145] bond6 (unregistering): (slave gretap1): Releasing active interface
[  820.572146][ T6145] gretap1 (unregistering): left allmulticast mode
[  820.742769][ T6145] bond3 (unregistering): (slave bridge4): Releasing active interface
[  820.810202][ T6145] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.825695][ T6145] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.837578][ T6145] .` (unregistering): (slave team0): Releasing backup interface
[  820.859175][ T6145] .` (unregistering): (slave macsec0): Releasing backup interface
[  820.868088][ T6145] veth1_macvtap: left promiscuous mode
[  820.875164][ T6145] .` (unregistering): Released all slaves
[  820.891153][ T6145] bond1 (unregistering): Released all slaves
[  820.910500][ T6145] bond2 (unregistering): Released all slaves
[  820.930904][ T6145] bond3 (unregistering): Released all slaves
[  820.963163][ T6145] bond4 (unregistering): Released all slaves
[  820.992499][ T6145] bond5 (unregistering): Released all slaves
[  821.027024][ T6145] bond6 (unregistering): Released all slaves
[  821.047010][ T6145] bond7 (unregistering): Released all slaves
[  821.072958][ T6145] bond8 (unregistering): Released all slaves
[  821.107552][ T6145] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  821.118642][ T6145] bond9 (unregistering): Released all slaves
[  821.144692][ T6145] bond0 (unregistering): (slave bond12): Releasing backup interface
[  821.153749][ T6145] bond0 (unregistering): Released all slaves
[  821.172981][ T6145] bond10 (unregistering): Released all slaves
[  821.206133][ T6145] bond11 (unregistering): Released all slaves
[  821.225859][ T6145] bond12 (unregistering): Released all slaves
[  821.363804][T30971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6667'.
[  821.415119][T30945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  821.559265][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6668'.
[  821.607885][T30977] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6669'.
[  821.656470][ T4941] Bluetooth: hci3: command tx timeout
[  821.727623][T30978] team0: Device ipvlan4 is already an upper device of the team interface
[  821.759694][ T6145] : left promiscuous mode
[  821.791409][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'.
[  821.949062][ T6145] tipc: Disabling bearer <udp:syz2>
[  821.963958][ T6145] tipc: Left network mode
[  822.069510][ T3337] bond0: (slave bond_slave_0): interface is now down
[  822.078966][T30989] lo: entered promiscuous mode
[  822.085028][T30989] netlink: 'syz.3.6672': attribute type 2 has an invalid length.
[  822.095368][ T3337] bond0: (slave bond_slave_1): interface is now down
[  822.104575][T30989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  822.389688][T31002] ip6gre1: entered promiscuous mode
[  822.443880][T31002] ip6gre1: entered allmulticast mode
[  823.062155][T31027] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6680'.
[  823.385726][T31020] syzkaller0: entered promiscuous mode
[  823.407848][T31020] syzkaller0: entered allmulticast mode
[  823.445053][T30753] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.481696][T30753] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.508657][T30753] bridge_slave_0: entered allmulticast mode
[  823.531670][T30753] bridge_slave_0: entered promiscuous mode
[  823.734142][ T5629] Bluetooth: hci3: command tx timeout
[  823.968707][T31059] netlink: 'syz.3.6686': attribute type 10 has an invalid length.
[  824.709481][ T1181] bond0: (slave bond_slave_0): interface is now down
[  824.716911][ T1181] bond0: (slave bond_slave_1): interface is now down
[  827.255409][T25432] bond0: (slave bond_slave_0): interface is now down
[  827.262195][T25432] bond0: (slave bond_slave_1): interface is now down
[  828.682320][T30753] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.691960][T30753] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.701078][T30753] bridge_slave_1: entered allmulticast mode
[  828.709700][T30753] bridge_slave_1: entered promiscuous mode
[  828.751675][T31046] geneve2: entered promiscuous mode
[  828.809537][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  828.832217][T31059] bond1: (slave veth0_to_bond): Releasing backup interface
[  828.900504][T31059] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  829.012627][T31072] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6688'.
[  829.159326][T30753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  829.206844][T30753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  829.310000][T31078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6690'.
[  829.326120][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  829.556159][T30753] team0: Port device team_slave_0 added
[  829.612065][T30753] team0: Port device team_slave_1 added
[  829.687486][T31086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6693'.
[  829.806273][ T3337] bond0: (slave bond_slave_0): interface is now down
[  829.849530][ T3337] bond0: (slave bond_slave_1): interface is now down
[  829.936950][T31094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6695'.
[  830.096053][T31089] bond1 (unregistering): Released all slaves
[  830.172640][T30753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  830.184117][T30753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  830.220864][T30753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  830.422443][ T6145] hsr_slave_0: left promiscuous mode
[  830.449285][ T6145] hsr_slave_1: left promiscuous mode
[  830.519635][ T6145] veth1_vlan: left allmulticast mode
[  830.553378][ T6145] vlan0: left allmulticast mode
[  830.570704][ T6145] veth0_vlan: left allmulticast mode
[  830.595518][ T6145] vlan0: left promiscuous mode
[  830.621576][ T6145] veth1_vlan: left promiscuous mode
[  830.632940][ T6145] veth0_vlan: left promiscuous mode
[  831.105468][T31133] netlink: 420 bytes leftover after parsing attributes in process `syz.0.6700'.
[  831.379517][ T6145] team0 (unregistering): Port device team_slave_1 removed
[  831.554371][T30753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  831.561887][T30753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  831.591452][T30753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  831.667959][T31133] netlink: 'syz.0.6700': attribute type 4 has an invalid length.
[  831.672126][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  831.829421][T30753] hsr_slave_0: entered promiscuous mode
[  831.848629][T30753] hsr_slave_1: entered promiscuous mode
[  832.029615][T31141] netlink: 'syz.0.6702': attribute type 6 has an invalid length.
[  832.335086][ T6145] IPVS: stop unused estimator thread 0...
[  832.375078][ T6146] bond0: (slave bond_slave_0): interface is now down
[  832.404316][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6707'.
[  832.415019][ T6146] bond0: (slave bond_slave_1): interface is now down
[  832.637786][T31159] syzkaller0: entered promiscuous mode
[  832.665537][T31159] syzkaller0: entered allmulticast mode
[  833.362129][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6714'.
[  833.430389][T31205] SET target dimension over the limit!
[  833.451063][T31202] team0 (unregistering): Port device team_slave_0 removed
[  833.526334][T31202] team0 (unregistering): Port device team_slave_1 removed
[  833.562832][T31202] team0 (unregistering): Port device geneve1 removed
[  833.978699][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6721'.
[  834.079151][T31231] netlink: 'syz.1.6724': attribute type 1 has an invalid length.
[  834.119939][T31231] netlink: 'syz.1.6724': attribute type 3 has an invalid length.
[  834.150657][T31231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6724'.
[  834.443638][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  834.454918][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  835.004900][ T6145] bond0: (slave bond_slave_0): interface is now down
[  835.033250][ T6145] bond0: (slave bond_slave_1): interface is now down
[  835.222034][T31270] netlink: 'syz.0.6731': attribute type 11 has an invalid length.
[  835.429961][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6733'.
[  835.548403][T30753] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  835.608909][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  835.656341][T30753] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  835.708042][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  835.771239][T30753] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  835.811711][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  835.826561][T30753] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  835.862899][T31299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6739'.
[  835.880439][T30753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  836.065931][T31309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6740'.
[  836.097605][T31309] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6740'.
[  836.472115][T30753] 8021q: adding VLAN 0 to HW filter on device bond0
[  836.566000][T30753] 8021q: adding VLAN 0 to HW filter on device team0
[  836.620424][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.627726][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.641721][T31334] netlink: 'syz.3.6747': attribute type 30 has an invalid length.
[  836.819560][T31334] bond4: option arp_missed_max: invalid value (0)
[  836.837212][T31334] bond4: option arp_missed_max: allowed values 1 - 255
[  836.901050][T31334] bond4 (unregistering): Released all slaves
[  837.145299][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.152681][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.564749][   T47] bond0: (slave bond_slave_0): interface is now down
[  837.595255][   T47] bond0: (slave bond_slave_1): interface is now down
[  837.706666][   T47] bond0: now running without any active interface!
[  837.748401][ T6146] bond1: (slave macvlan2): speed changed to 0 on port 1
[  837.819736][T31368] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  837.891032][   T47] bond1: (slave macvlan2): link status definitely down, disabling slave
[  838.136569][T31381] erspan0: entered promiscuous mode
[  838.251521][T31390] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6761'.
[  838.750401][T31419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  838.754209][T31416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6768'.
[  839.077228][T31438] sctp: [Deprecated]: syz.1.6771 (pid 31438) Use of int in maxseg socket option.
[  839.077228][T31438] Use struct sctp_assoc_value instead
[  839.128786][T31432] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode
[  839.214109][T30753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.276860][T31446] netlink: 'syz.0.6772': attribute type 83 has an invalid length.
[  839.687473][T31461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6775'.
[  839.721721][T31461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6775'.
[  839.877419][T31469] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  840.004040][T31478] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6779'.
[  840.316107][T30753] veth0_vlan: entered promiscuous mode
[  840.332935][T30753] veth1_vlan: entered promiscuous mode
[  840.372416][T30753] veth0_macvtap: entered promiscuous mode
[  840.386358][T31491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  840.406160][T30753] veth1_macvtap: entered promiscuous mode
[  840.407576][T31495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  840.498199][T30753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.568231][T30753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.605743][T21348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.629991][ T1181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.652892][ T1181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.718104][ T1181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.757809][T31510] netlink: 'syz.0.6789': attribute type 19 has an invalid length.
[  840.991312][T31512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6791'.
[  841.028186][T21348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.063888][T21348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.156598][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.186633][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.235364][T31527] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6794'.
[  841.489689][T31532] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  841.520368][T31532] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  841.545669][T31532] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  841.759397][T31548] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  841.819239][T31551] netlink: 'syz.3.6802': attribute type 1 has an invalid length.
[  841.908223][T31551] 8021q: adding VLAN 0 to HW filter on device bond4
[  842.017370][T31560] netlink: 'syz.1.6805': attribute type 1 has an invalid length.
[  842.222112][T31560] bond3: entered promiscuous mode
[  842.241940][T31560] 8021q: adding VLAN 0 to HW filter on device bond3
[  842.281109][T31563] bond3: (slave bridge2): making interface the new active one
[  842.296487][T31563] bridge2: entered promiscuous mode
[  842.302996][T31563] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  842.377252][T31574] tc_dump_action: action bad kind
[  842.706491][T31595] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  842.810781][T31600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.305435][T31617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6823'.
[  843.347858][T31617] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6823'.
[  843.860066][T31634] veth3: entered allmulticast mode
[  843.962788][T31638] bond4: option arp_all_targets: invalid value (18446744073709551613)
[  843.985858][T31645] netlink: 'syz.0.6828': attribute type 1 has an invalid length.
[  843.999116][T31638] bond4 (unregistering): Released all slaves
[  844.248776][T31659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  844.329926][T31653] bond1: option fail_over_mac: invalid value (16)
[  844.388291][T31653] bond1 (unregistering): Released all slaves
[  844.663362][T31676] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:6
[  844.758165][T31679] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m�%A����AZ�Z����I����� ���%
[  844.803906][T31682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6837'.
[  844.986772][T31692] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.6840'.
[  845.030708][T31692] bond0: option miimon: invalid value (18446744071829782528)
[  845.056392][T31692] bond0: option miimon: allowed values 0 - 2147483647
[  845.122986][T31705] netlink: 'syz.1.6841': attribute type 3 has an invalid length.
[  845.206626][T31710] ipt_ECN: cannot use operation on non-tcp rule
[  845.229622][T31709] netlink: 'syz.2.6845': attribute type 3 has an invalid length.
[  845.247665][T31709] netlink: 'syz.2.6845': attribute type 1 has an invalid length.
[  845.259801][T31714] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6847'.
[  845.877889][T31746] netlink: 'syz.3.6854': attribute type 1 has an invalid length.
[  846.529054][T31775] syzkaller0: entered promiscuous mode
[  846.545760][T31775] syzkaller0: entered allmulticast mode
[  846.577698][T31780] netlink: 'syz.0.6862': attribute type 11 has an invalid length.
[  851.439377][T31786] syzkaller1: entered promiscuous mode
[  851.453211][T31786] syzkaller1: entered allmulticast mode
[  851.668295][T31804] netlink: 'syz.4.6867': attribute type 3 has an invalid length.
[  851.679318][T31804] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6867'.
[  851.708447][T31806] tunl0: entered promiscuous mode
[  851.788589][T31806] netlink: 'syz.2.6868': attribute type 4 has an invalid length.
[  851.813982][T31806] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6868'.
[  851.890884][T31814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6872'.
[  851.916751][T31815] 
: renamed from bond0 (while UP)
[  851.965725][ T4941] Bluetooth: hci1: command 0x0406 tx timeout
[  851.979686][T31823] netlink: 'syz.0.6873': attribute type 2 has an invalid length.
[  852.085182][T31831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'.
[  852.128103][T31828] macsec2: entered promiscuous mode
[  852.290212][T31840] netlink: 'syz.1.6876': attribute type 13 has an invalid length.
[  852.326353][T31840] netlink: 'syz.1.6876': attribute type 58 has an invalid length.
[  852.341017][T31840] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6876'.
[  852.384914][T31845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6879'.
[  852.467925][T31845] team0: Device xfrm0 is of different type
[  852.936997][T31868] erspan0: left promiscuous mode
[  853.120389][T31868] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.128120][T31868] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.204347][T31868] batman_adv: batadv0: Interface deactivated: dummy0
[  853.267687][T31893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6893'.
[  853.281403][T31895] openvswitch: netlink: IP tunnel dst address not specified
[  853.290226][T31895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  853.338699][T31868] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  853.375862][T25094] vxcan1 speed is unknown, defaulting to 1000
[  853.417405][T25094] syz2: Port: 1 Link DOWN
[  853.436028][T25092] vxcan1 speed is unknown, defaulting to 1000
[  853.612049][T31906] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  853.650417][T31906] bond2 (unregistering): Released all slaves
[  854.037979][T31921] x_tables: duplicate entry at hook 2
[  854.057048][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6901'.
[  854.077668][T31921] netlink: 'syz.1.6902': attribute type 2 has an invalid length.
[  854.160421][T31917] syzkaller0: entered promiscuous mode
[  854.183811][T31917] syzkaller0: entered allmulticast mode
[  854.782751][T31946] netlink: 'syz.0.6907': attribute type 10 has an invalid length.
[  857.006912][T31796] Bluetooth: hci5: command 0x0406 tx timeout
[  859.820621][T31946] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  859.862640][T31963] syzkaller0: entered promiscuous mode
[  859.869275][T31963] syzkaller0: entered allmulticast mode
[  860.007059][T31981] netlink: 'syz.0.6910': attribute type 2 has an invalid length.
[  860.016614][T31981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6910'.
[  860.331750][T31996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6914'.
[  860.417078][   T29] audit: type=1804 audit(1783297961.054:24): pid=31994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6915" name="/newroot/157/cgroup.controllers" dev="tmpfs" ino=815 res=1 errno=0
[  860.490264][   T29] audit: type=1800 audit(1783297961.054:25): pid=31994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6915" name="cgroup.controllers" dev="tmpfs" ino=815 res=0 errno=0
[  860.959483][T32036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6923'.
[  860.984587][T32009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  861.468648][T32009] veth1_vlan: left allmulticast mode
[  861.674570][T32023] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.684080][T32023] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.829038][T32023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  861.844439][T32023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  862.030531][T21218] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.116272][T21218] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.125670][ T5629] Bluetooth: hci4: command 0x0406 tx timeout
[  862.181759][T21218] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.232644][T21218] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.283554][T21218] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.314379][T32081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6932'.
[  862.344334][T21218] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.435524][T21218] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.470532][T21218] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  862.780985][T32107] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  862.820295][T32107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6940'.
[  862.841771][T32107] openvswitch: netlink: Flow key attr not present in new flow.
[  863.457399][T32137] syzkaller1: entered promiscuous mode
[  863.478551][T32137] syzkaller1: entered allmulticast mode
[  863.536409][T32137] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6950'.
[  863.555072][T32137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6950'.
[  863.585705][T32137] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6950'.
[  863.609429][T32137] netlink: 'syz.3.6950': attribute type 3 has an invalid length.
[  863.640446][T32137] netlink: 'syz.3.6950': attribute type 2 has an invalid length.
[  863.652465][T32141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'.
[  863.662366][T32143] netlink: 'syz.1.6953': attribute type 21 has an invalid length.
[  863.671081][T32137] netlink: 31 bytes leftover after parsing attributes in process `syz.3.6950'.
[  863.709804][T32143] netlink: 'syz.1.6953': attribute type 22 has an invalid length.
[  863.743164][T32143] netlink: 'syz.1.6953': attribute type 23 has an invalid length.
[  863.756381][T32143] netlink: 'syz.1.6953': attribute type 25 has an invalid length.
[  863.781470][T32143] netlink: 'syz.1.6953': attribute type 26 has an invalid length.
[  863.938823][T32149] netlink: 'syz.3.6956': attribute type 3 has an invalid length.
[  864.539936][T32171] xt_nat: multiple ranges no longer supported
[  865.100806][T32194] netlink: 'syz.3.6971': attribute type 83 has an invalid length.
[  865.205689][T32199] __nla_validate_parse: 6 callbacks suppressed
[  865.205724][T32199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6976'.
[  865.358946][T32215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6978'.
[  865.461839][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6982'.
[  865.474884][T32216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6978'.
[  865.474977][T32219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6982'.
[  865.496060][T32220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6980'.
[  865.554246][T32224] tipc: Started in network mode
[  865.572662][T32224] tipc: Node identity 9ae12cba699d, cluster identity 4711
[  865.585340][T32224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  865.607303][T32224] syzkaller0: entered promiscuous mode
[  865.616401][T32224] syzkaller0: entered allmulticast mode
[  865.648750][T32224] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  865.710771][T32224] tipc: Resetting bearer <eth:syzkaller0>
[  865.730472][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6986'.
[  865.747550][T32223] tipc: Resetting bearer <eth:syzkaller0>
[  865.767868][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6986'.
[  865.779985][T32223] tipc: Disabling bearer <eth:syzkaller0>
[  865.975829][T32242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6990'.
[  866.056653][T32244] xt_hashlimit: size too large, truncated to 1048576
[  866.148968][T32248] bond1 (unregistering): Released all slaves
[  866.715548][T32264] netlink: 'syz.4.6997': attribute type 1 has an invalid length.
[  866.768941][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6997'.
[  867.071132][T32274] syzkaller0: entered promiscuous mode
[  867.110707][T32274] syzkaller0: entered allmulticast mode
[  867.330577][T32296] netlink: 'syz.4.7007': attribute type 1 has an invalid length.
[  870.288149][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  870.296502][ T1314] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  872.258518][T32296] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  872.511239][T32324] __nla_validate_parse: 3 callbacks suppressed
[  872.511290][T32324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7011'.
[  872.652766][T32323] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  872.699092][T32323] syzkaller1: entered promiscuous mode
[  872.705644][T32323] syzkaller1: entered allmulticast mode
[  872.716515][T32323] tipc: Started in network mode
[  872.725389][T32323] tipc: Node identity , cluster identity 4711
[  872.869182][T32341] netlink: 'syz.2.7018': attribute type 1 has an invalid length.
[  872.919963][T32341] netlink: 'syz.2.7018': attribute type 2 has an invalid length.
[  873.105309][T32345] ipvlan1: entered promiscuous mode
[  873.118143][T32345] ipvlan1: entered allmulticast mode
[  873.126583][T32345] veth0_vlan: entered allmulticast mode
[  873.619970][T32370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7025'.
[  873.685844][T32370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7025'.
[  874.042949][T32384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7030'.
[  874.787987][T32422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7040'.
[  874.992897][T32437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  875.000223][T32437] IPv6: NLM_F_CREATE should be set when creating new route
[  875.007507][T32437] IPv6: NLM_F_CREATE should be set when creating new route
[  875.020659][T32437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  875.032750][T32437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7042'.
[  875.049366][T32440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  875.306879][T32450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7045'.
[  877.751301][T32422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  877.908886][T32456] netlink: 'syz.2.7046': attribute type 11 has an invalid length.
[  878.303783][T32474] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7053'.
[  878.373478][T32478] sctp: [Deprecated]: syz.0.7055 (pid 32478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  878.373478][T32478] Use struct sctp_sack_info instead
[  878.656867][T32488] sit1: entered promiscuous mode
[  878.663132][T32490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7058'.
[  878.680990][T32488] sit1: entered allmulticast mode
[  878.774133][T32495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7060'.
[  878.821714][T32495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7060'.
[  878.879424][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7060'.
[  878.909091][T32495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7060'.
[  879.015275][T32505] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7061'.
[  879.060416][T32511] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7060'.
[  879.265342][T32518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  879.284932][T32524] netlink: 516 bytes leftover after parsing attributes in process `syz.2.7067'.
[  879.498112][T32531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7069'.
[  880.000744][T32548] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  880.550452][T32578] syzkaller1: entered promiscuous mode
[  880.603081][T32578] syzkaller1: entered allmulticast mode
[  880.636618][T32587] netlink: 'syz.0.7080': attribute type 1 has an invalid length.
[  880.771931][T32587] 8021q: adding VLAN 0 to HW filter on device bond2
[  880.848861][T32578] bond2: (slave geneve2): making interface the new active one
[  880.881831][T32578] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  881.001667][T21348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  881.028318][T21348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  881.135605][T21348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  881.157988][T21348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  881.179214][T32603] netlink: 'syz.4.7087': attribute type 1 has an invalid length.
[  881.485964][T32603] bond1: entered promiscuous mode
[  881.499959][T32603] 8021q: adding VLAN 0 to HW filter on device bond1
[  881.627497][T32609] bond1: (slave bridge3): making interface the new active one
[  881.666788][T32609] bridge3: entered promiscuous mode
[  881.690851][T32609] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  882.052956][T32640] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.088354][T32644] netlink: 'syz.1.7091': attribute type 16 has an invalid length.
[  882.100395][T32640] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.116017][T32644] netlink: 'syz.1.7091': attribute type 17 has an invalid length.
[  882.206750][T32637] vxcan1 speed is unknown, defaulting to 1000
[  882.326639][T32620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  882.665323][T32644] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.672606][T32644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.723306][T32644] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.730585][T32644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.765627][T32666] netlink: 'syz.3.7096': attribute type 1 has an invalid length.
[  883.142609][T32644] veth0_macvtap: left allmulticast mode
[  883.252552][T32644] mac80211_hwsim hwsim47 wlan0: left promiscuous mode
[  883.280014][T32644] mac80211_hwsim hwsim47 wlan0: left allmulticast mode
[  883.329199][T32644] bond1: left allmulticast mode
[  883.348985][T32644] macvlan2: left allmulticast mode
[  883.366153][T32644] 
: left allmulticast mode
[  883.375172][T32644] bond_slave_0: left allmulticast mode
[  883.399256][T32644] bond_slave_1: left allmulticast mode
[  883.469256][T32644] bond3: left promiscuous mode
[  883.490737][T32644] bridge2: left promiscuous mode
[  883.517709][T32644] veth3: left allmulticast mode
[  883.580265][T32644] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check.
[  883.630829][T32666] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  883.662370][T32684] ip6erspan0: entered allmulticast mode
[  883.717092][T32698] __nla_validate_parse: 4 callbacks suppressed
[  883.717110][T32698] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7104'.
[  883.914104][ T6145] bond1: (slave macvlan2): link status definitely down, disabling slave
[  884.018333][T32718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7109'.
[  884.177266][T32712] tipc: Started in network mode
[  884.196494][T32712] tipc: Node identity 2eb68e91a169, cluster identity 4711
[  884.225299][T32712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  884.400121][T32734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7113'.
[  884.434478][T32717] syzkaller0: entered promiscuous mode
[  884.440381][T32717] syzkaller0: entered allmulticast mode
[  884.447347][T32717] tipc: Resetting bearer <eth:syzkaller0>
[  884.529706][T32734] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.537428][T32734] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.628728][T32710] tipc: Resetting bearer <eth:syzkaller0>
[  884.840623][T32742] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7115'.
[  884.907906][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7115'.
[  884.957003][T32748] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  890.204561][T32710] tipc: Disabling bearer <eth:syzkaller0>
[  890.219829][T32742] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7115'.
[  890.277461][T29697] tipc: Node number set to 2413792913
[  890.406188][  T301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7122'.
[  890.427219][  T303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7121'.
[  890.428612][  T301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  890.479716][  T303] netlink: 'syz.4.7121': attribute type 7 has an invalid length.
[  890.505054][  T311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7125'.
[  890.534864][  T312] x_tables: unsorted underflow at hook 2
[  890.650366][  T315] pim6reg527: entered allmulticast mode
[  890.737638][  T323] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  890.755004][  T316] netlink: 'syz.3.7126': attribute type 21 has an invalid length.
[  890.982734][  T332] SET target dimension over the limit!
[  891.046655][  T334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7132'.
[  891.063926][  T334] nbd: must specify a device to reconfigure
[  891.119246][  T336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.197357][  T336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7134'.
[  891.242929][  T336] netlink: 'syz.1.7134': attribute type 1 has an invalid length.
[  891.312056][  T349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7139'.
[  891.405108][  T354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7139'.
[  891.458524][  T360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7139'.
[  891.582847][  T373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'.
[  891.619000][  T373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  891.837655][  T384] xt_nat: multiple ranges no longer supported
[  903.086225][T31796] Bluetooth: hci2: command 0x0406 tx timeout
[  917.260330][  T404] bond0: option fail_over_mac: invalid value (16)
[  917.273820][  T404] bond0 (unregistering): Released all slaves
[  917.517516][  T424] netlink: 'syz.1.7157': attribute type 1 has an invalid length.
[  917.627348][  T424] 8021q: adding VLAN 0 to HW filter on device bond0
[  917.720780][  T437] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.7158'.
[  917.831262][  T427] bond0: (slave veth0_to_bond): making interface the new active one
[  917.842336][  T427] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  918.171420][  T452] netlink: 'syz.0.7165': attribute type 1 has an invalid length.
[  918.229463][  T454] 8021q: adding VLAN 0 to HW filter on device bond5
[  918.239095][  T454] bond0: (slave bond5): Enslaving as an active interface with an up link
[  918.275603][  T461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7167'.
[  918.298155][  T461] block nbd0: reconnected socket
[  918.313545][  T461] netlink: 'syz.1.7167': attribute type 1 has an invalid length.
[  918.322759][  T452] 8021q: adding VLAN 0 to HW filter on device bond3
[  918.323075][  T461] nbd: error processing sock list
[  918.359997][ T5629] block nbd0: Receive control failed (result -32)
[  918.400819][  T459] bond3: (slave gretap2): making interface the new active one
[  918.435061][  T459] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  918.754325][  T477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7173'.
[  919.062136][  T495] netlink: 'syz.1.7177': attribute type 4 has an invalid length.
[  919.636909][  T519] bond4: option ad_user_port_key: invalid value (65535)
[  919.647818][  T519] bond4: option ad_user_port_key: allowed values 0 - 1023
[  919.658212][  T519] bond4 (unregistering): Released all slaves
[  919.802571][  T523] netlink: 'syz.3.7187': attribute type 3 has an invalid length.
[  920.067737][  T536] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  920.133318][  T536] netlink: 'syz.4.7191': attribute type 4 has an invalid length.
[  920.184888][  T548] netlink: 'syz.4.7191': attribute type 4 has an invalid length.
[  920.261430][  T551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7196'.
[  920.301809][  T554] syz.0.7197: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  920.317472][  T551] bond2: option lp_interval: invalid value (0)
[  920.317496][  T551] bond2: option lp_interval: allowed values 1 - 2147483647
[  920.340522][  T551] bond2 (unregistering): Released all slaves
[  920.386592][  T554] CPU: 0 UID: 0 PID: 554 Comm: syz.0.7197 Not tainted syzkaller #0 PREEMPT(full) 
[  920.386621][  T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  920.386633][  T554] Call Trace:
[  920.386641][  T554]  <TASK>
[  920.386647][  T554]  dump_stack_lvl+0xe8/0x150
[  920.386672][  T554]  warn_alloc+0x24c/0x270
[  920.386688][  T554]  ? stack_depot_save_flags+0x33/0x800
[  920.386705][  T554]  ? __pfx_warn_alloc+0x10/0x10
[  920.386719][  T554]  ? kasan_save_track+0x3e/0x80
[  920.386732][  T554]  ? __kasan_kmalloc+0x93/0xb0
[  920.386746][  T554]  ? xsk_setsockopt+0x52a/0x960
[  920.386760][  T554]  ? do_sock_setsockopt+0x17c/0x1b0
[  920.386777][  T554]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  920.386790][  T554]  ? do_syscall_64+0x174/0x580
[  920.386805][  T554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.386821][  T554]  __vmalloc_node_range_noprof+0x12c/0x1730
[  920.386849][  T554]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  920.386863][  T554]  ? __kasan_kmalloc+0x93/0xb0
[  920.386878][  T554]  ? __kmalloc_cache_noprof+0x32d/0x660
[  920.386892][  T554]  ? __kmalloc_cache_noprof+0x150/0x660
[  920.386906][  T554]  vmalloc_user_noprof+0xad/0xe0
[  920.386919][  T554]  ? xskq_create+0xbf/0x170
[  920.386932][  T554]  xskq_create+0xbf/0x170
[  920.386946][  T554]  xsk_init_queue+0x8a/0xe0
[  920.386960][  T554]  xsk_setsockopt+0x52a/0x960
[  920.386971][  T554]  ? __fget_files+0x2a/0x420
[  920.386986][  T554]  ? __pfx_xsk_setsockopt+0x10/0x10
[  920.386998][  T554]  ? __pfx_aa_sk_perm+0x10/0x10
[  920.387017][  T554]  ? aa_sock_opt_perm+0xff/0x1a0
[  920.387029][  T554]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  920.387042][  T554]  ? __pfx_xsk_setsockopt+0x10/0x10
[  920.387055][  T554]  do_sock_setsockopt+0x17c/0x1b0
[  920.387079][  T554]  __x64_sys_setsockopt+0x13d/0x1b0
[  920.387096][  T554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.387107][  T554]  do_syscall_64+0x174/0x580
[  920.387121][  T554]  ? clear_bhb_loop+0x40/0x90
[  920.387134][  T554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  920.387145][  T554] RIP: 0033:0x7fb15639de59
[  920.387156][  T554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  920.387165][  T554] RSP: 002b:00007fb1572b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  920.387176][  T554] RAX: ffffffffffffffda RBX: 00007fb156625fa0 RCX: 00007fb15639de59
[  920.387184][  T554] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  920.387190][  T554] RBP: 00007fb156433e6f R08: 0000000000000004 R09: 0000000000000000
[  920.387197][  T554] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  920.387203][  T554] R13: 00007fb156626038 R14: 00007fb156625fa0 R15: 00007ffe406baec8
[  920.387220][  T554]  </TASK>
[  920.685474][  T554] Mem-Info:
[  920.689601][  T554] active_anon:5884 inactive_anon:5 isolated_anon:0
[  920.689601][  T554]  active_file:24 inactive_file:43327 isolated_file:0
[  920.689601][  T554]  unevictable:768 dirty:55 writeback:0
[  920.689601][  T554]  slab_reclaimable:12344 slab_unreclaimable:131055
[  920.689601][  T554]  mapped:29254 shmem:1298 pagetables:3458
[  920.689601][  T554]  sec_pagetables:0 bounce:0
[  920.689601][  T554]  kernel_misc_reclaimable:0
[  920.689601][  T554]  free:1285405 free_pcp:8570 free_cma:0
[  920.734516][  T554] Node 0 active_anon:23536kB inactive_anon:20kB active_file:96kB inactive_file:173104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117016kB dirty:220kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16496kB pagetables:13764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  920.768853][  T554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  920.815087][  T554] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  920.844945][  T554] lowmem_reserve[]: 0 2489 2489 2489 2489
[  920.850729][  T554] Node 0 DMA32 free:1179668kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23536kB inactive_anon:20kB active_file:96kB inactive_file:173104kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:32892kB local_pcp:19900kB free_cma:0kB
[  920.884583][  T554] lowmem_reserve[]: 0 0 0 0 0
[  920.889785][  T554] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  920.930174][  T554] lowmem_reserve[]: 0 0 0 0 0
[  920.934946][  T554] Node 1 Normal free:3942880kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  920.966666][  T554] lowmem_reserve[]: 0 0 0 0 0
[  920.971404][  T554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  920.984104][  T554] Node 0 DMA32: 3289*4kB (UME) 1732*8kB (UME) 531*16kB (UME) 73*32kB (ME) 41*64kB (UME) 208*128kB (UME) 318*256kB (UM) 232*512kB (UME) 148*1024kB (UME) 8*2048kB (UM) 181*4096kB (UM) = 1176596kB
[  921.003687][  T554] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  921.015697][  T554] Node 1 Normal: 0*4kB 2*8kB (UM) 5*16kB (UM) 2*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942880kB
[  921.044787][  T554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  921.054813][  T554] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  921.065521][  T554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  921.076298][  T554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  921.077331][  T566] Unsupported ieee802154 address type: 0
[  921.085604][  T554] 44650 total pagecache pages
[  921.085616][  T554] 5 pages in swap cache
[  921.085623][  T554] Free swap  = 124976kB
[  921.085632][  T554] Total swap = 124996kB
[  921.085641][  T554] 2097051 pages RAM
[  921.085649][  T554] 0 pages HighMem/MovableOnly
[  921.085656][  T554] 428172 pages reserved
[  921.085664][  T554] 0 pages cma reserved
[  921.181369][  T573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7203'.
[  921.390172][  T582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'.
[  921.402712][  T582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'.
[  921.417498][  T582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'.
[  921.438249][  T591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7206'.
[  921.774096][  T617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  921.897788][T21348] tipc: Disabling bearer <ib:gretap0>
[  921.967072][T21348] bond4 (unregistering): (slave geneve4): Releasing active interface
[  921.998121][T21348] geneve1 (unregistering): left promiscuous mode
[  922.008202][T21348] geneve1 (unregistering): left allmulticast mode
[  922.017041][T21348] team0: Port device geneve1 removed
[  922.128426][T21348] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  922.137330][T21348] bridge5 (unregistering): left promiscuous mode
[  922.200519][T21348] bond12 (unregistering): (slave bridge10): Releasing active interface
[  922.217311][T21348] bond0 (unregistering): Released all slaves
[  922.235924][T21348] bond1 (unregistering): Released all slaves
[  922.254839][T21348] bond2 (unregistering): Released all slaves
[  922.289011][T21348] bond3 (unregistering): Released all slaves
[  922.312749][T21348] bond4 (unregistering): Released all slaves
[  922.349832][T21348] bond5 (unregistering): Released all slaves
[  922.372814][T21348] bond6 (unregistering): Released all slaves
[  922.399990][T21348] bond7 (unregistering): Released all slaves
[  922.432740][T21348] bond8 (unregistering): Released all slaves
[  922.458336][T21348] bond9 (unregistering): Released all slaves
[  922.484261][T21348] bond10 (unregistering): Released all slaves
[  922.504521][T21348] bond11 (unregistering): Released all slaves
[  922.537678][T21348] bond12 (unregistering): Released all slaves
[  922.557362][T21348] bond13 (unregistering): Released all slaves
[  922.578065][T21348] bond14 (unregistering): Released all slaves
[  922.980300][T21348] : left promiscuous mode
[  923.104539][  T636] netlink: 'syz.3.7217': attribute type 10 has an invalid length.
[  923.159805][  T636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.181248][  T636] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  923.194609][T21348] tipc: Disabling bearer <udp:syz0>
[  923.205437][T21348] tipc: Disabling bearer <eth:team0>
[  923.270461][T21348] tipc: Left network mode
[  923.647910][  T664] netlink: 'syz.4.7226': attribute type 1 has an invalid length.
[  923.674910][  T661] netlink: 'syz.2.7225': attribute type 2 has an invalid length.
[  923.682773][  T661] netlink: 'syz.2.7225': attribute type 1 has an invalid length.
[  923.734978][  T661] netlink: 'syz.2.7225': attribute type 1 has an invalid length.
[  923.742813][  T661] netlink: 'syz.2.7225': attribute type 1 has an invalid length.
[  923.750988][  T661] netlink: 'syz.2.7225': attribute type 2 has an invalid length.
[  923.759520][  T661] netlink: 'syz.2.7225': attribute type 1 has an invalid length.
[  923.770378][T21348] IPVS: stopping backup sync thread 20829 ...
[  923.770382][  T664] bond2: entered promiscuous mode
[  923.770780][  T664] 8021q: adding VLAN 0 to HW filter on device bond2
[  923.807873][  T665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7227'.
[  923.863991][  T671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7228'.
[  923.882208][  T673] netlink: 'syz.1.7229': attribute type 11 has an invalid length.
[  923.888564][  T671] batman_adv: batadv0: Interface deactivated: ipvlan3
[  923.890885][  T673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7229'.
[  923.949187][  T679] netlink: 'syz.3.7228': attribute type 64 has an invalid length.
[  923.957482][  T679] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7228'.
[  923.982891][  T671] batman_adv: batadv0: Removing interface: ipvlan3
[  924.009465][  T671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  924.064910][  T675] batadv1: entered allmulticast mode
[  924.093288][  T664] 8021q: adding VLAN 0 to HW filter on device bond2
[  924.100291][  T664] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  924.111583][  T664] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  924.124159][  T664] bond2: (slave vti0): making interface the new active one
[  924.131415][  T664] vti0: entered promiscuous mode
[  924.138464][  T664] vti0: left promiscuous mode
[  924.765892][  T707] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7235'.
[  924.840629][  T712] x_tables: duplicate underflow at hook 1
[  929.621538][  T712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7236'.
[  930.109071][  T745] validate_nla: 2 callbacks suppressed
[  930.109090][  T745] netlink: 'syz.0.7246': attribute type 1 has an invalid length.
[  930.159179][  T751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7248'.
[  930.277786][  T745] 8021q: adding VLAN 0 to HW filter on device bond4
[  930.341864][  T751] team0 (unregistering): Port device team_slave_0 removed
[  930.372955][  T751] team0 (unregistering): Port device team_slave_1 removed
[  930.417893][  T756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'.
[  930.470616][  T758] veth0: entered promiscuous mode
[  930.483567][  T764] batadv_slave_1: entered promiscuous mode
[  930.621216][T21348] 
[  930.623588][T21348] ======================================================
[  930.630614][T21348] WARNING: possible circular locking dependency detected
[  930.637661][T21348] syzkaller #0 Not tainted
[  930.642091][T21348] ------------------------------------------------------
[  930.649117][T21348] kworker/u8:21/21348 is trying to acquire lock:
[  930.655458][T21348] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170
[  930.666021][T21348] 
[  930.666021][T21348] but task is already holding lock:
[  930.673377][T21348] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800
[  930.683012][T21348] 
[  930.683012][T21348] which lock already depends on the new lock.
[  930.683012][T21348] 
[  930.693404][T21348] 
[  930.693404][T21348] the existing dependency chain (in reverse order) is:
[  930.702401][T21348] 
[  930.702401][T21348] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  930.710384][T21348]        down_write+0x96/0x200
[  930.715156][T21348]        kernfs_add_one+0x41/0x5e0
[  930.720295][T21348]        kernfs_create_dir_ns+0x1a1/0x230
[  930.726016][T21348]        internal_create_group+0x440/0x1180
[  930.731917][T21348]        cpuhp_invoke_callback+0x434/0x810
[  930.737757][T21348]        cpuhp_issue_call+0x3f0/0x750
[  930.743122][T21348]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  930.749698][T21348]        __cpuhp_setup_state+0x3f/0x60
[  930.755146][T21348]        do_one_initcall+0x250/0x870
[  930.760519][T21348]        do_initcall_level+0x10a/0x1a0
[  930.766031][T21348]        do_initcalls+0x59/0xa0
[  930.770957][T21348]        kernel_init_freeable+0x29d/0x3e0
[  930.776668][T21348]        kernel_init+0x1d/0x1d0
[  930.781516][T21348]        ret_from_fork+0x514/0xb70
[  930.786674][T21348]        ret_from_fork_asm+0x1a/0x30
[  930.791963][T21348] 
[  930.791963][T21348] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  930.799784][T21348] 
[  930.799784][T21348] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  930.807506][T21348]        cpus_read_lock+0x42/0x160
[  930.812612][T21348]        static_key_slow_inc+0x12/0x30
[  930.818150][T21348]        nbd_genl_reconfigure+0x1301/0x1e80
[  930.824154][T21348]        genl_family_rcv_msg_doit+0x233/0x340
[  930.830219][T21348]        genl_rcv_msg+0x614/0x7a0
[  930.835231][T21348]        netlink_rcv_skb+0x226/0x4a0
[  930.840516][T21348]        genl_rcv+0x28/0x40
[  930.845119][T21348]        netlink_unicast+0x7bb/0x940
[  930.850408][T21348]        netlink_sendmsg+0x813/0xb40
[  930.855685][T21348]        sock_sendmsg_nosec+0x13a/0x180
[  930.861316][T21348]        ____sys_sendmsg+0x54e/0x850
[  930.866609][T21348]        ___sys_sendmsg+0x2a5/0x360
[  930.871900][T21348]        __x64_sys_sendmsg+0x1b1/0x290
[  930.877355][T21348]        do_syscall_64+0x174/0x580
[  930.882552][T21348]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.888966][T21348] 
[  930.888966][T21348] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  930.896599][T21348]        __mutex_lock+0x19d/0x1550
[  930.901702][T21348]        nbd_queue_rq+0x373/0x1150
[  930.906811][T21348]        blk_mq_dispatch_rq_list+0x499/0x1990
[  930.912965][T21348]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  930.919897][T21348]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  930.926404][T21348]        blk_mq_run_work_fn+0x16c/0x300
[  930.931956][T21348]        process_scheduled_works+0xa8e/0x14e0
[  930.938021][T21348]        worker_thread+0xa47/0xfb0
[  930.943136][T21348]        kthread+0x388/0x470
[  930.947715][T21348]        ret_from_fork+0x514/0xb70
[  930.952821][T21348]        ret_from_fork_asm+0x1a/0x30
[  930.958091][T21348] 
[  930.958091][T21348] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  930.965300][T21348]        __mutex_lock+0x19d/0x1550
[  930.970406][T21348]        nbd_queue_rq+0xc1/0x1150
[  930.975423][T21348]        blk_mq_dispatch_rq_list+0x499/0x1990
[  930.981489][T21348]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  930.988328][T21348]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  930.994825][T21348]        blk_mq_run_work_fn+0x16c/0x300
[  931.000357][T21348]        process_scheduled_works+0xa8e/0x14e0
[  931.006412][T21348]        worker_thread+0xa47/0xfb0
[  931.011508][T21348]        kthread+0x388/0x470
[  931.016087][T21348]        ret_from_fork+0x514/0xb70
[  931.021192][T21348]        ret_from_fork_asm+0x1a/0x30
[  931.026463][T21348] 
[  931.026463][T21348] -> #4 (set->srcu){.+.+}-{0:0}:
[  931.033573][T21348]        __synchronize_srcu+0xc9/0x2f0
[  931.039026][T21348]        elevator_switch+0x1e8/0x7b0
[  931.044400][T21348]        elevator_change+0x2fa/0x480
[  931.049672][T21348]        elevator_set_default+0x375/0x440
[  931.055376][T21348]        blk_register_queue+0x3f3/0x4e0
[  931.060984][T21348]        __add_disk+0x6cb/0xe30
[  931.065818][T21348]        add_disk_fwnode+0xfb/0x4b0
[  931.071025][T21348]        nbd_dev_add+0x733/0xb60
[  931.075957][T21348]        nbd_init+0x15f/0x1e0
[  931.080755][T21348]        do_one_initcall+0x250/0x870
[  931.086034][T21348]        do_initcall_level+0x10a/0x1a0
[  931.091481][T21348]        do_initcalls+0x59/0xa0
[  931.096316][T21348]        kernel_init_freeable+0x29d/0x3e0
[  931.102020][T21348]        kernel_init+0x1d/0x1d0
[  931.106853][T21348]        ret_from_fork+0x514/0xb70
[  931.111953][T21348]        ret_from_fork_asm+0x1a/0x30
[  931.117222][T21348] 
[  931.117222][T21348] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  931.125032][T21348]        __mutex_lock+0x19d/0x1550
[  931.130140][T21348]        elevator_change+0x1af/0x480
[  931.135417][T21348]        elevator_set_none+0xb5/0x140
[  931.140776][T21348]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  931.147120][T21348]        nbd_start_device+0x189/0xb30
[  931.152484][T21348]        nbd_genl_connect+0x1597/0x1c10
[  931.158022][T21348]        genl_family_rcv_msg_doit+0x233/0x340
[  931.164075][T21348]        genl_rcv_msg+0x614/0x7a0
[  931.169107][T21348]        netlink_rcv_skb+0x226/0x4a0
[  931.174388][T21348]        genl_rcv+0x28/0x40
[  931.178884][T21348]        netlink_unicast+0x7bb/0x940
[  931.184170][T21348]        netlink_sendmsg+0x813/0xb40
[  931.189504][T21348]        sock_sendmsg_nosec+0x13a/0x180
[  931.195118][T21348]        ____sys_sendmsg+0x54e/0x850
[  931.200395][T21348]        ___sys_sendmsg+0x2a5/0x360
[  931.205714][T21348]        __x64_sys_sendmsg+0x1b1/0x290
[  931.211188][T21348]        do_syscall_64+0x174/0x580
[  931.216301][T21348]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.222706][T21348] 
[  931.222706][T21348] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  931.231301][T21348]        blk_alloc_queue+0x544/0x690
[  931.236582][T21348]        __blk_mq_alloc_disk+0x194/0x390
[  931.242226][T21348]        nbd_dev_add+0x494/0xb60
[  931.247268][T21348]        nbd_init+0x15f/0x1e0
[  931.251942][T21348]        do_one_initcall+0x250/0x870
[  931.257219][T21348]        do_initcall_level+0x10a/0x1a0
[  931.262667][T21348]        do_initcalls+0x59/0xa0
[  931.267505][T21348]        kernel_init_freeable+0x29d/0x3e0
[  931.273218][T21348]        kernel_init+0x1d/0x1d0
[  931.278070][T21348]        ret_from_fork+0x514/0xb70
[  931.283198][T21348]        ret_from_fork_asm+0x1a/0x30
[  931.288469][T21348] 
[  931.288469][T21348] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  931.295667][T21348]        fs_reclaim_acquire+0x71/0x100
[  931.301131][T21348]        kmem_cache_alloc_noprof+0x64/0x5f0
[  931.307012][T21348]        __kernfs_iattrs+0xdd/0x380
[  931.312378][T21348]        kernfs_iop_setattr+0xe6/0x3f0
[  931.317844][T21348]        notify_change+0xbba/0xea0
[  931.322942][T21348]        do_truncate+0x1c2/0x250
[  931.327879][T21348]        path_openat+0x2fed/0x3830
[  931.332989][T21348]        do_file_open+0x23e/0x4a0
[  931.338012][T21348]        do_sys_openat2+0x115/0x200
[  931.343289][T21348]        __x64_sys_openat+0x138/0x170
[  931.348692][T21348]        do_syscall_64+0x174/0x580
[  931.353812][T21348]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.360233][T21348] 
[  931.360233][T21348] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  931.368736][T21348]        __lock_acquire+0x1520/0x2cf0
[  931.374104][T21348]        lock_acquire+0x106/0x350
[  931.379128][T21348]        down_write+0x96/0x200
[  931.383886][T21348]        kernfs_unlink_sibling+0x6d/0x170
[  931.389598][T21348]        kernfs_rename_ns+0x48e/0x800
[  931.394962][T21348]        sysfs_rename_link_ns+0x16e/0x1b0
[  931.400681][T21348]        device_rename+0x110/0x210
[  931.405880][T21348]        __dev_change_net_namespace+0x1519/0x1fb0
[  931.412344][T21348]        cfg802154_switch_netns+0xbd/0x410
[  931.418192][T21348]        cfg802154_pernet_exit+0x75/0xc0
[  931.423817][T21348]        ops_undo_list+0x43d/0x8d0
[  931.429057][T21348]        cleanup_net+0x572/0x810
[  931.433992][T21348]        process_scheduled_works+0xa8e/0x14e0
[  931.440049][T21348]        worker_thread+0xa47/0xfb0
[  931.445151][T21348]        kthread+0x388/0x470
[  931.449750][T21348]        ret_from_fork+0x514/0xb70
[  931.454877][T21348]        ret_from_fork_asm+0x1a/0x30
[  931.460156][T21348] 
[  931.460156][T21348] other info that might help us debug this:
[  931.460156][T21348] 
[  931.470384][T21348] Chain exists of:
[  931.470384][T21348]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  931.470384][T21348] 
[  931.484804][T21348]  Possible unsafe locking scenario:
[  931.484804][T21348] 
[  931.492243][T21348]        CPU0                    CPU1
[  931.497601][T21348]        ----                    ----
[  931.502955][T21348]   lock(&root->kernfs_rwsem);
[  931.507721][T21348]                                lock(cpuhp_state_mutex);
[  931.514818][T21348]                                lock(&root->kernfs_rwsem);
[  931.522091][T21348]   lock(&root->kernfs_iattr_rwsem);
[  931.527366][T21348] 
[  931.527366][T21348]  *** DEADLOCK ***
[  931.527366][T21348] 
[  931.535494][T21348] 5 locks held by kworker/u8:21/21348:
[  931.540938][T21348]  #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  931.551809][T21348]  #1: ffffc90006a7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  931.562324][T21348]  #2: ffffffff9001cfa8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  931.571626][T21348]  #3: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0
[  931.581189][T21348]  #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800
[  931.591218][T21348] 
[  931.591218][T21348] stack backtrace:
[  931.597109][T21348] CPU: 0 UID: 0 PID: 21348 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) 
[  931.597141][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  931.597159][T21348] Workqueue: netns cleanup_net
[  931.597194][T21348] Call Trace:
[  931.597206][T21348]  <TASK>
[  931.597214][T21348]  dump_stack_lvl+0xe8/0x150
[  931.597238][T21348]  print_circular_bug+0x2e1/0x300
[  931.597255][T21348]  check_noncircular+0x12e/0x150
[  931.597280][T21348]  __lock_acquire+0x1520/0x2cf0
[  931.597302][T21348]  ? __lock_acquire+0x683/0x2cf0
[  931.597321][T21348]  ? __lock_acquire+0x683/0x2cf0
[  931.597340][T21348]  ? lockdep_hardirqs_on+0x7a/0x110
[  931.597361][T21348]  ? kernfs_unlink_sibling+0x6d/0x170
[  931.597384][T21348]  lock_acquire+0x106/0x350
[  931.597402][T21348]  ? kernfs_unlink_sibling+0x6d/0x170
[  931.597428][T21348]  down_write+0x96/0x200
[  931.597448][T21348]  ? kernfs_unlink_sibling+0x6d/0x170
[  931.597469][T21348]  ? __pfx_down_write+0x10/0x10
[  931.597488][T21348]  ? kernfs_root+0x1c/0x230
[  931.597505][T21348]  ? kernfs_root+0x1c/0x230
[  931.597522][T21348]  ? kernfs_root+0x1c/0x230
[  931.597540][T21348]  ? kernfs_root+0x1ea/0x230
[  931.597558][T21348]  kernfs_unlink_sibling+0x6d/0x170
[  931.597581][T21348]  kernfs_rename_ns+0x48e/0x800
[  931.597605][T21348]  sysfs_rename_link_ns+0x16e/0x1b0
[  931.597625][T21348]  device_rename+0x110/0x210
[  931.597643][T21348]  __dev_change_net_namespace+0x1519/0x1fb0
[  931.597665][T21348]  ? __lock_acquire+0x683/0x2cf0
[  931.597683][T21348]  ? __pfx___dev_change_net_namespace+0x10/0x10
[  931.597700][T21348]  ? __lock_acquire+0x683/0x2cf0
[  931.597725][T21348]  ? do_raw_spin_lock+0x12b/0x2f0
[  931.597747][T21348]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  931.597764][T21348]  ? lockdep_hardirqs_on+0x7a/0x110
[  931.597783][T21348]  ? __mutex_lock+0x1092/0x1550
[  931.597802][T21348]  ? __mutex_lock+0x5d4/0x1550
[  931.597822][T21348]  ? cfg802154_pernet_exit+0x18/0xc0
[  931.597839][T21348]  ? __pfx___mutex_lock+0x10/0x10
[  931.597862][T21348]  cfg802154_switch_netns+0xbd/0x410
[  931.597879][T21348]  cfg802154_pernet_exit+0x75/0xc0
[  931.597894][T21348]  ops_undo_list+0x43d/0x8d0
[  931.597915][T21348]  ? __pfx_ops_undo_list+0x10/0x10
[  931.597934][T21348]  ? idr_destroy+0x218/0x290
[  931.598016][T21348]  ? do_raw_spin_unlock+0xf5/0x210
[  931.598034][T21348]  cleanup_net+0x572/0x810
[  931.598053][T21348]  ? __pfx_cleanup_net+0x10/0x10
[  931.598079][T21348]  ? rcu_is_watching+0x15/0xb0
[  931.598102][T21348]  ? process_scheduled_works+0xa20/0x14e0
[  931.598119][T21348]  process_scheduled_works+0xa8e/0x14e0
[  931.598144][T21348]  ? __pfx_process_scheduled_works+0x10/0x10
[  931.598163][T21348]  ? assign_work+0x3cf/0x5d0
[  931.598179][T21348]  worker_thread+0xa47/0xfb0
[  931.598201][T21348]  ? __kthread_parkme+0x71/0x1f0
[  931.598221][T21348]  kthread+0x388/0x470
[  931.598241][T21348]  ? __pfx_worker_thread+0x10/0x10
[  931.598256][T21348]  ? __pfx_kthread+0x10/0x10
[  931.598275][T21348]  ret_from_fork+0x514/0xb70
[  931.598296][T21348]  ? __pfx_ret_from_fork+0x10/0x10
[  931.598316][T21348]  ? __switch_to+0xc89/0x1420
[  931.598334][T21348]  ? __pfx_kthread+0x10/0x10
[  931.598353][T21348]  ret_from_fork_asm+0x1a/0x30
[  931.598373][T21348]  </TASK>
[  931.979309][ T1314] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  931.988582][  T754] batadv_slave_1: left promiscuous mode
[  931.994739][  T754] veth0: left promiscuous mode
[  932.003567][  T768] dvmrp0: entered allmulticast mode
[  932.027280][T21348] hsr_slave_0: left promiscuous mode
[  932.040909][T21348] hsr_slave_1: left promiscuous mode
[  932.046768][T21348] batman_adv: batadv0: Removing interface: ipvlan3
[  932.557748][T21348] IPVS: stop unused estimator thread 0...
[  936.843944][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!