last executing test programs:

9.881258063s ago: executing program 1 (id=2742):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) (async)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async)
syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c)

8.664605091s ago: executing program 1 (id=2760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039e400"/20, @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08000200ac14142d"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

8.616158625s ago: executing program 1 (id=2766):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x54, 0x211, 0x209, 0x0, 0x8, 0x8, 0x0, 0x0, <r2=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e20, @empty}}, 0x400, 0xde11, 0x3bc, 0x2137, 0xd7, 0x7fffffff}, 0x9c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
pipe(&(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @remote})
close(0x4)

8.375219586s ago: executing program 1 (id=2773):
syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xcf, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @loopback}, "040022eb00000000"}}}}}, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async)
socket(0x1d, 0x2, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@delchain={0x24, 0x64, 0x425, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40)
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0x20004804) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32)
r15 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001900010000009c00000000001c140000fe000001000000000c0012000a000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xfffffffffffffffc, 0x0)

8.104723537s ago: executing program 1 (id=2778):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)
socket(0x10, 0x80002, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) (async)

7.9254426s ago: executing program 1 (id=2782):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f0000000180)=""/211, 0xd3}}], 0x2, 0x4c42bb4f92, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000300)={0x77359400}, 0x10)
shutdown(r0, 0x0)

1.487466475s ago: executing program 3 (id=2868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000), 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffffaa}}, 0x7c}}, 0x0)

1.249869236s ago: executing program 4 (id=2871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r3, &(0x7f0000000280), 0x40000000000003a, 0x12060, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x6, &(0x7f0000000a00)={@mcast1, <r4=>0x0}, &(0x7f0000000ac0)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c00)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl2\x00', <r5=>0x0, 0xa0, 0x80, 0x5, 0xd, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x15, 0x4, 0x0, @private=0xa010101, @empty, {[@generic={0x86, 0x11, "be7baffa51d0c3ed2254a3f853b6a6"}, @cipso={0x86, 0x1b, 0x1, [{0x1, 0x7, "667c01257d"}, {0x3, 0x2}, {0x2, 0x6, "0ce13479"}, {0x6, 0x6, "d4172efc"}]}, @timestamp_prespec={0x44, 0x14, 0x5b, 0x3, 0x6, [{@loopback, 0x9}, {@rand_addr=0x64010100, 0x8001}]}, @timestamp_addr={0x44, 0xc, 0x7a, 0x1, 0x2, [{@remote, 0x9}]}, @rr={0x7, 0x1b, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}, @local, @broadcast]}, @generic={0x88, 0x10, "ebe7c63c2f81b697f43f76c70001"}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001c40)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000080)="ad34dfaeb62412fcc4a752735a75ca8a5bcb1b45e2b4c897ab30afb7a386146c04a7c4a6ae9f6a6dcb3078e92c0b0f22f158a0f49009f086dab7d7ceed415744e8182eb8714ff76643845233242fd6844262d9758a900753010d03a09b8874db7338225eaee089e844492b2a00ed7563687eed4cf487c4f683110a2ba0dbf592e0d3014d906e7a41feb7f912fc5afb18448dafa19aecdba302e51f365be72eb0d9a4eb7a0907c4c5c414c87eec280da6a01da1c33fa5e75ed8f5387f59f70f1932fa7b33a7c45e01270317e33d6d51a269c0b3b5a954970b42cbf9cf8445f3e52be8a3a292ff9231171db87bff", 0xed}, {&(0x7f0000000180)="c1d7e6848a7804a12b1cb40e2a1bb04af60d96f93a2eae4985731773f97ce75b476e5f6d3176311c738c064f5876ba0b65f0097b1ac07a54f40fc9aecf0efff16c89edfab1c17bceb4", 0x49}, {&(0x7f00000002c0)="85837a3733174b56d2e9efb9cfd75f5584bdc78044adf9bbbb79cfb3defa3e79e9171cb4fb60390eae0eae70c4c694d11278e94fb9956616c4be6092a804ea9290dc1d21f467c662ae6f5f355157238686581ee4ff646c371cf3279f6dd16a69c2a1683fa9dfc9968291bc9478b15d73da789777e61914488ebb10889b41be30e66c649ba58ad4b705bdb77674938060cbdd62ba3648e161d33bf6a1286b9f35c177b52abe0022a3190baaa24cd962caa6dc70c767ba3e45a45971486d6e37bc73e2d4cc441d43263d6c7c1024f2e30e62ad3a51b634837eed80f146b012836fc62cf48f1401950cd0ae37", 0xeb}, {&(0x7f0000000500)="fd7585d997afca92c85cd14f06c5e00074539c6647a7954262d591f24ad8cc881403e470d6f0de51d55f982c5a306c35ca66029fab74b4245bb0dfce75945a306e99eeb4a1787f17a51bc377a659a1747d385727e4eef77e", 0x58}, {&(0x7f0000000580)="2e2b2cc221ed169d9ffe0f79955c566b9ef53aec292511c8de9d06fc2e1cdd8714596b23c0058e999825aba1825453278ae5bda27b52f9fb4e530bb00977c22818a455d1c76cbf1e5bd0cd1a93d7c83ecab33b887ebf213cc06f438e389671cf4e7cf458217d9c90bc8ff9b86ea1bc8ff5aead886c0fbeb1d48d4a6c5234474d691f365d35ec24e4818874e9e6e183cc24cb54065d723c0572c76c4b31672b424b81184ac8f5c0dd17ce5e50c8b73f6167ba79bc01", 0xb5}, {&(0x7f0000000640)="78bfc2986e355a5c63811ee3997b7498bfaf087e7cc6ec4e959476f580973f1e95bbcdfd744b0f8e4676dfa483a9c4e3eafbf3e314918c2611ebe921617fc70fa9bf06688992c0dc3ecc9b696b224d4656185178e578ecd531fde074650d739a17d73227c5eb2e405a58c4114c7eaace8f5ee1b3f6e9d85757c73766613aeea6b54c210bdb910362d5fbaa83374d6471e59e0da1161f3b8189aa4d5abc59fc9b3c7dc535e0f685379eff0592ac0545795aa56fa7fa70b364f7ed", 0xba}, {&(0x7f0000000700)="8a3f3ef9fb39d88105244e4b8a275ee6dfea36494c7364809bc2035df2ba771c66d390491d2effbe9ee640849b3fe887bd3d19682dfdb52c933b6638eca984e9fdb63793428d5f726bd14a0c0a06521fcbce5d2b40277cd6b4dab4cdacee8d1a55ef566d8bf426c1a30459caa6b968d88ef9ec59e6710181f2388f7f8d26f227f36ff0d87a0ff57921623b5d02f3411ed605a0a659899930e5630fe304ac9bddbfbfb38dfdae94dbba09df2009c9688969f2e47007b584fc24845b9b8bc4fadcb281", 0xc2}, {&(0x7f0000000800)="12050fa6", 0x4}, {&(0x7f0000000840)="eb2268d5fa28a2472dcc38b1f6557b082f9c1e016fa58b56d3968bdc2bd56aadb66d6f47d2f79c9a4bf65a923761232cd8eb2eb8bdcd241761a29dc3d8f7c7be6311aaca5123d863a49dbb2dd52caf33082ca3b1dfdb388955fc7cdb43c4dba8b3c481e3db842f601737c1d686dcb0f4bf24bea7a8f9fd89abbb364c9e6389e32d45cb01868e73c78dfafc012ffbc6f9b9927362dd7da3ea76ac7ab11e0144d3030a247a3e3a70dee275db07446f28241eac17da15946cb4c632a369ac35831098d7eee7e7d187bf36cad8acb9", 0xcd}], 0xa, &(0x7f0000001c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0xf0}, 0x20080000)

1.212825396s ago: executing program 3 (id=2872):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0)
sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x34}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40c0000) (rerun: 32)

1.040951315s ago: executing program 4 (id=2873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)={0x7c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb522}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000010000000000000000800000000000000000007dbc51c77d9a40e9049fa71ce53a7cd80d80ad1194eef21aa7168a70ea5da290fa9dfb3d8192425110f10c46de9ad31ff99abd65d83a1325d823e33ecc74031576c3948284594596e160e77e52529f8fba80f596dc62ae32a9b9a0598d70c2817455ba5a7cbe51db7b02ab1d02c229b4862dc56c956b5c25a14a273188808a60292db5cfd01536937fdbf1baeefe776d2bed11cca70601ec5c1af81878efbe40860580028f4baef55efee216d6f5c7f8ac69ed8900202c0efb05101dab10712795828be691d3c780f91aff07d9588562ee"], 0x48)
pipe(&(0x7f0000000700)={<r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@local, 0x78, r6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x23, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x6, 0xe, 0x0, 0x0, 0xfffffffffffffffc}, @generic={0x4, 0x8, 0x8, 0x2, 0x130}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x7, 0x1, 0x3, 0x914a, 0xcc05dbc6}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x7, 0xcd, &(0x7f00000008c0)=""/205, 0x41000, 0x39, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x0, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r1], &(0x7f0000000a80)=[{0x4, 0x4, 0xf}, {0x0, 0x5, 0xd, 0x2}, {0x3, 0x5, 0x3, 0x1}], 0x10, 0xffffff95}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f00000006c0)=0xffffffff, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000580)={'gretap0\x00', {0x2, 0x4e21, @loopback}})
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff})
getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@ipv6_newnexthop={0x0, 0x68, 0x800, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x3, 0x0, 0x18}, [@NHA_RES_GROUP={0x0, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x0, 0x2, 0x9}]}, @NHA_ENCAP={0x0, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x0, 0x4, @remote}}, @NHA_RES_GROUP={0x0, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x0, 0x1, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xb}}, 0x14}}, 0x4000000)

1.024837373s ago: executing program 2 (id=2874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r4=>0x0, 0x0, 0x7800, 0x4, 0x7, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x68, 0x0, 0x4, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@noop]}}}}})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000280)=0x4)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="62c6b04a791c1c42e83526d578af42fb9352634e5e15", @ANYRESDEC], 0xb)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000001)

903.721778ms ago: executing program 0 (id=2875):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000060a0800000000000000000002000000180004a0140001800c0001007000001102000000000000000000000300000a00"/84], 0x54}}, 0x4)
sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0)

853.852683ms ago: executing program 3 (id=2876):
syz_extract_tcp_res$synack(&(0x7f0000000080)={<r0=>0x41424344, <r1=>0x41424344}, 0x1, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYBLOB="7cead16101729b4e338f8328f78ce04be17f48afa11533fc0d5bdabacb5f0c3e74d9d14324b452945c8f84f505607f7117797f4dc0cd265b890a643c58145d50ff613fd826a438e4c03f2fb2065485315663a15487bc82c41e158732f8a3c1dcf3ea42806902e2b924c3ef69dc13ecb20f8bfce9b2dd90a0ecd34d9810dca1cfdaf3f6996963b1d9d421d90ddd995af6c2c6b7b568e98d951b61e1bf9cf9d5029a9ebb5e08106fe986bf4d5233c0198fbd5b606bd4d3fb4ef1617db6f91d2373662fdb33c2c4eba8a8299eed2f401674a528fbb7e9cd5c4313bbf09ac8942d92"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x40000)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x48880}, 0x800)
r3 = socket$kcm(0x11, 0x2, 0x300)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000010000000c0000003e"], 0x14}, 0x800) (async)
syz_emit_ethernet(0xb1, &(0x7f00000003c0)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x0, 0xaa, "eac4", "57a18d940c4d6c00ff476114f756112e16ac5bba179607a0845543eee1af7a1ad33abdb43cc7019523efe6f392086c830d675ef76008c1789a0442d4787aa5d60ce274c72d33090402b39399b20f28d13d5511f192163695b326f81057c6baeba1de62033862f39b8a2dd25f95d9efdbbbb8ee74984de4c04a29916bd24115d19aa0ae746cb7508e2a99408082a2f7f54be87370052f50bf497132d1e9a86a"}}}}}, 0x0)

853.349058ms ago: executing program 4 (id=2877):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt(r1, 0x1, 0x7, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffd, @local, 0x9}, 0x1c)
sendmmsg$inet6(r2, 0x0, 0x0, 0x1)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000340)=0x2, 0x4)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
socket(0x10, 0x6, 0x3)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300021c0000000000000000000000120008003804000045ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fe3286855f34db3900030006000000000002000000ac14140000000000000000000200010000000000000006fc0000000003000500000000000200"/224], 0xe0}, 0x1, 0x7}, 0x0)

794.233378ms ago: executing program 3 (id=2878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xd4c091db52733143, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000000)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffff6, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000500)={0x2, 0x0, 0xf8, &(0x7f0000000400)=""/248})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000011)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0)

783.705358ms ago: executing program 2 (id=2879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, r1, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}}, 0x40000)

705.451043ms ago: executing program 0 (id=2880):
socket(0x15, 0x5, 0x0) (async)
r0 = socket(0x15, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))

674.260707ms ago: executing program 4 (id=2881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7182, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0xb9, 0xf6, &(0x7f00000005c0)=""/246, 0x1e00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x5, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x0, 0x2, 0x9, 0x4}, {0x3, 0x4, 0x9, 0xa}, {0x1, 0x5, 0x4}, {0x1, 0x3, 0x0, 0x5}, {0x5, 0x5, 0x6, 0x5}, {0x2, 0x1ff, 0x10, 0xb}, {0x5, 0x4, 0x5}, {0x1, 0x8, 0xf, 0x6}], 0x10, 0x80}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x589e}, 0xc)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x10}, 0x18)
r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x22b}]}, &(0x7f0000000300)='syzkaller\x00', 0xd6, 0x0, 0x0, 0x41100, 0xe95b480824775f85, '\x00', r4, @fallback=0x19, r5, 0x8, &(0x7f0000000400)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x7, 0xfffffff9}, 0x10, 0x0, r6, 0x3, &(0x7f00000009c0)=[r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000a00)=[{0x5, 0x5, 0xd, 0x2}, {0x2, 0x4, 0xf, 0x8}, {0x1, 0x3, 0x1, 0x5}], 0x10, 0x1, @value=r10}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r13, 0x308, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xf}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000cc0)={<r14=>r11, 0x7ff, 0x4, 0x9})
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002e00)={&(0x7f0000000d00)="7e33b4f621115e4468fe027a7802d1de06cf84b281f0dfb7c4145dd8d4a0e0649bb11afce1bf30bf6f44b88151917b62a5dbf3aee54786f10f0fc1d87191eadaeadf0d68014ef9d5224054bbbf0ba228b6bb256154cd0c92e086c480b6981baadb505b437a296029ab16de6cf2b7a5303fbc8ced5c066933efbc737da327ddee2770f481e1d0fccd1f005f3d447dc0e343b3e1e1a0faa35a440608544195c1edf64ecdec3c5ec5fa6bb059c0b614e1fd065fa63e5f9b4c7b5357e6369cb3b612569f769ab00cf4a7e1fae8d7fa09f5426e7b1bf4b63f7049d712c041b0c5bdc4dfafd32f0dc7b29e18507f65d491e090de37de47e1e79bdc1131d22a353f0381e0fcb3af9fc4581bbbd319301acbd78e9087cbe3f3cddccc6a22002db45536d73545e03806f7aa08cace367914f8c534128a9ffb3d35303d44e3eef53ef78a241f6dd5e504010a916f215103b88683dccad9b43dbe22957615aae2301c636e76149db4c1e3ef5d01d2905ee8d2bafa37b9922999a51dab003fb832ee39c08cd49d751f016d1b743ea03a5b5ac4a701085db2b750da39a4ca11a550641cb04c7a5bc7e0aecca98d63381b3b27d579c728c0df83c1588f6a09ffc733567ac32ec64b71ac253fe1eafa79e80f5c4e8fde7e3d527ffa0d270160779290b25564a256921134194c32e35b8768ee07357623de14ea4dc2c89aa8f297045518f42c1dd33b1a1824a01535b3d23c8923c4a4297a5e295f160e23e9354deb0c2aead2ef1a04f5f48c17827aac2a83413d7bb7d912486286e0d60dd1306731753f5e0e9dd9d6002e3347421a3ac6d961ac7ab518f60544b0f2d26ad196b8824159c8f08902107fd0d54e1d66fe7518245b32ee427546994f36b2c3a621152f693288b21e95e8d48e0a58d5dd1a44f739837fb52231b090240548f30d834d6213cdebae81ebe76b1ab99ed30fc60b65611070bfd902358028347bd93b6ee9fc9bf1bff023a3791b22feeab8b9161fde34260d20f36e83d85e082ca814d9b6ec65b2832b7d06ef31d360ca09f42061d7cfd4301647e50a74f2d414f08c286190bc2f9df6641a2ce1d78a208e9413a3f1c40c2cd5292333e25877bfec90880bb97225d77bb7801ad4c3102303caca2f35c30633df145e951fe9abcb88cb52bfebc4f202397cb8c11c9294a889abe981e69649d13f9f7b10b548101ae21f2c6b990396eb7d37f8f3b9f450b72b858c6ad2b35b25a07f1a89dc62c3a22be9d1207645d9b069c578ba26d1552d5dcb71ef4ba97d2b4ee6312088d0cb3f891321fd33ed787b0ad9429f8676280753857ca59f65cb536f8b4cc59ba9d9db344a2471ed967e74df35ee9fea420c23d9da0eff47e56eacb928dc36a3b4c81b96b9f8cf51cc6de699f591e4a3d9cc23a0e7b41412472a598533dbb8a782ae9a6fd406c6b13cec857d91a2adea22bf7da153c5449db792a9651f24f9afa32f198b9894dbd7483fcf5b9c7594df089858aae60a701a15c0b4b5faf4d399cfd1372464425cbfe8196bd635a770c93936deafe453baadf2fa68261790a30fdf5b2e507b43eed7ff8b76ee13da9629d9e8254f95f268f5bdc83b14f8952153d00374a061d37876fc9d2e15ba83107e687a451dd8145462b3c190897c0edb4106a863ff8d33a2658b078cc827bd314fbb170e5ac3dafb5edf672e9401df8750794993d8e93dfee6f92ebcdd719ccb9571f8f64232c03c9648c96cb6547b87ef20f4d0cafaf03e697a6e20ca4f11b0c4ae0d9ef8b0fdf008d54c2309cba62208a822bf3124351727df33d8db701b47d3602081a935df6c27c2acab5e80c723d51f9d98b9103cc1df8f7683cc08993f1bad8ee8d2a2b87210fd555fc2ca1f4ef3e834406d839df6d6cd98ec32bce926a7fa9adb2c44c51a2c94182fb3bc3f1c629e4d276ad746e377dd90f0cc4043727a9900e9c3641e34b2e32c60a01247bdefa199d5b5d8a0abdb1a9444f294126ae563f3063f6a90093c7d307d43744fa3fa293302116f97ff1954b5fa0c423d2a6dd5ae310fe80e1a38af5d472b4438737a5fd6f92d862f73fff5cae5658cf4987ca1307418645310b2421fce3cf7fb782d591423e0135336826ff933322e0fa258454e519b3bea3ce7e6a5bc07fb70998090ee96b11aae30dd815156fc4c6b2c9930b07544adcad47cf333a2642736b7f0ad3c55cccda7cd02a5368be14c20b165e2427772c71084a74d3b2faca93e3cf4e4c924a1ca71093f7de3ef5454aec227bf0cd5282297b03e00271d200e7491a8559409af320b7656181996c155692a3e221cef7a2f1be39a0a86f510f039f315aab38b82583ff57cf2b287fd16a626c587fa44bbbf49bbc19bcf4a3fe768ac3ab79b186a81c750f155e907b2ebe419dc3107e3e6642a45f213bddb129de54d0ac804ffad52d6e519c3254c5a06da624d6385268f20ef2431c731dfdefbae47698015d1d5ecddca0d4f713488bf0879e1a79f31fbf567b6e944ff83af400951a901a94ddecfde50c7ef736de4c42dbf55979f485a8b150c1045afe558dbd4bba5e2c4885f82acb0ceabaf101400f3cc29e9a47e888c0a3d16cc12ece05dd40fd25ab20d71620679fe156e067fbd5903ea0182c2d49fbb7adf8ba0edbbfa77b76b4a7f3df95d39bf9071d9028e3c5548f1c9d63d3f8f9e323902c4781688793f49dcbad6ffb7f1fb73108e53fea93055a0a393852d3acb4ff2d25175521c649a0ffac867c759b620885a880206280e0fa6d492c85d2f9bf4e40a859cc3f20747b82a5872ba2d48a1228204891b551060e70ab2c763cb8789c84524c65ea1c3c903e7383bff30cbca3fc50c2474f06594ab5d86543c66f519483dcdb4a8d86302a315aab0a193f4800b9e3e0cc5ed6b77265832b935ece916ff25369eb11d37a81f2b91cdcf89ff1402da2b15714c74505cd557dcedb3925ef3ee79ec080f7921253d0c8591dbc28dac0fff441bf0ff2c5520ab4e485b9eed60a3d27502ef57da94d99833dc82d098fb30e29d3a262610e71bc0c3eac332b6b2c3133d2ac5f345f62d1fa30be65da1d86f8ea5c53639df218c532d9d0f3c9849ae403afc3de624396ac734509f430acdd6c2a6c900df8c591bcff0895f09f520af78a9107bbab7643add42fb68a6f10cfea046f12d1c4569d419d3a2d611e2aca977147a5548260a9a963420a3c1047b7acd22dc05c88950fe2bf3fa48eb8d660e0f4b0cdc9d9f4b4775f1d603b7e76f31457fa08df24033aaf89115cbd8e694c87a50aaaa3a75402a57df0c0cd202da257191a58c80850ba45220edbeae30dc34b909102094ded172a72dc9ca7e9fae652202ab10895bc9c56f087af891acd1ac92ae852541a82eff6e8a1d26ac66dcd311b7392faeac723421f2bef28fe0ddab153b790ee1ccf2aca31f459774006162d4283e1d911d2e9aaba72f1523736dea5c6f0299460b39d399c490a3883baeb7b5bff85641d026bc2d9cd40b1923966ec47da040b74bd6d859c94dc31e9a66f9b207e565c3ab803b781cd29a9bdff4d176b6cf6b6c652223aa188b93d284f33afc75beaaabe9c99d20c46eebf3b4d7ccef1f3e409fd8831965f34db16874e7ee1016741aeb4374de0fd22172f89cf1f4ce0972a8d4aa6a8b1db3be5d6dfb69985196a6ba0b2180f2f2bbab93959a48ffebcf336956846c43df5151b988eef5e8582df975b43f3b57c7e393bee4c7dd7b1acbda0f122c707375109c6f799c4b10b9589cf09d670060b8a376063dab8c1372c3d471d7cdd80401f17cbe0691bb08c08787ed5f3ea2498891d3d8f668eeda4edc38b83fb75a3b1f3d82f2a3d0836d2f785f02c69b2ce421e2202f91e8df802cb7ae4f31d5a9beef091ea5a41454790cfea4c7509f66969c448d7f79d05d7a37dcccd9aab9d9a0de83022f3b734f83763bed094a8df275514828c72c1b333474f9b2a4cee55491d27063b2f6c08b9973b9201eccf9f45309ef5257a68924609720912ed14f7e51200b3bc764049a923bbf368fee3d7e835fbf8acf4019a4e0adccebefe015bc1627125e6d9810151521c8d4fbf2a6829737da9a3c46eefd0533640a97150087b0499de74ba553f822fbba58cc4f45d769048bdb74550d65c5606302d666dd925840c4b0490918d1fda4174f55f6e3712a25eeb02beee2c67511d0a71ccc30b04976525c5177a5cd11dcfaecc213087cc9449a36149e747c161cb49da0abf49a9a6e3e09cc966dbcf03766e75cfca30acbb0aefcae8682c06ab4850c8693434b0ab6e2db0280da3331a275fa5ef6d95485470e9926a3a95eabf279d5331583608b3ae1ecb102dad2e8f36c4ff375f4a1812ea77c7cd68c2f4f1713fad769a3d24d1c56b271f10d83d6677c8655da528af76ef2a5d6a759d610490a2ba2f51061299cea535c533453a1566b7697d8aab3dcda95fe51216fdd0435600873d476bfe88a848c03b12edd0e1ca77ff5db8ade97836a10dfe79748c72b6e622d76b9d1f41dc3e9496fbea5b65b071d0df8e6d08513ec5745e35118bdccd780a5d96326517c76a73819e4ca1ea20b465c5c0787772c0a1040195521e7ddb709ffee837bf2d9e009afb1e984356eb8a53b08ab54533ee545477822802eb40cd8be2ad5a70bbd2c6c0240418a80f13c736bc4358cd49c8abad16a6fb5810edb2d3915501574c2ca003cf626178d23517c9bce4167826d5b117d9ae25bff9fa2bc80c91fb3908b4c4c20912a063b4dbbdb4a77d03a6e91aad62c424e87bab33456310eb3f2697a7122e149f6dc4c4c3613752fe785b272c4b17f778768c89a090f457c2d3c864d3e48f412ac0850be557ed56dc8c9c9d7dcdb328cd58f752eadd650445adbffa2be3174e4822a848761fd506af53c30b4a7922962149f538247f6fe23b4fdf7977159f056f9673a85a1d3734c5cfa5e2b16b3ee2716e9fe83aca35c5de3b8d0151356b69412771ca236845845c6ed807db5555fbd16afe598718f0c189a049517ee2e4e5f4a1f24450462cea29c00ccfa6d585ae506b69c5199583f9b747e0326f8dc32763881927bfa9d4141911a5a0ef8de9fb1733d3342c1f2278f69dcd6c07728a7eb56d3936586feb924d4eb633f87fbd2a35194bac05a416e8ec3dbf1516cac570675802a30ae934c0a623839771497c58aa7a2cec6216928f89072c0945e76b45a4a6f5b35eafd853a1eae6a2dc9ba1e8141fc2064b82de8793f15e6208a4ecc4010acf6f2b502b0a3cf514af24794d9cdba92738eb203f260cc1fd81b0704e55eb6b5f5bef9decfa8d791d88d95c37b5f33fe9c9a8e15a7ea0c4484e3b71a641c052406a602a27ee63c7a3b3b25f23d4eddd9a38b0563fb1116ba0a4366fec41e63cd0becb67f88f3e81f17816f34129f7808ecfcc6aa3b31c9ed7c42a1a6713eb02459a897f6b44723ebab0e3738f58797205f4984fa8cc4bd83f33a18a8908935a8abebe8fdfad3e4bd1bbb05bea0c96c8487a03d45298eccdfa890ab893b132dd286f734c605a41a97777b0c3e17c7bcf68e055de8a89d20d6fb0478508eeca135c62043bd386a6012e01ba5dc1097b6490ffdf16ac7a4edaf39b779ea4c48877d4adb3f03a5b8b3aea790f7b6901bc7ca602b48e611639538ccbb1528ded0aa07dfaaa22733dae67e919dcd877b6cc67e4fffce3e5bfce45dde16d58ad6276784bcf119648270b3d61c61beeaa73aab7a53b37c52e7d8c23c1cfa6d99d6bf796160058856cef04e476eb1d69061d9bdb65052e3b5a23df0e0b789db5f8a0b06b28e8dcf3af797", &(0x7f0000001d00)=""/4096, &(0x7f0000002d00)="ce8728aea7064bf35398fff401be64eecd07ffb4c396cddd3f52b23e01a9907765a6381b411c7bf51595d77ad409ea541eebe891ca8b020ce8c58e98d916e8066f41caca231f4f73617a231ebe6f573fb54f494e7189a39e2a3ab77ae5f3e217010129d57888136a4ca24636d357434cc8676a49ae96fcab8f9b8f50eec0b24c8d9edd423ea41dae916893a5ff143d", &(0x7f0000002dc0)="9bf1fa0fbe", 0x3, r7, 0x4}, 0x38)
recvfrom$inet(r8, &(0x7f0000002e40)=""/167, 0xa7, 0x1, &(0x7f0000002f00)={0x2, 0x4e24, @broadcast}, 0x10)
bind$alg(r14, &(0x7f0000002f40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58)
setsockopt$packet_drop_memb(r14, 0x107, 0x2, &(0x7f0000002fc0)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r14, 0x8983, &(0x7f0000003000))
bpf$PROG_BIND_MAP(0x23, &(0x7f0000003040)={r11, r9}, 0xc)
getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000003080), 0x10)
r15 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r15, &(0x7f00000030c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0xe9, 0x0}}}, 0x1e)
bind$pptp(r14, &(0x7f0000003100)={0x18, 0x2, {0x2, @broadcast}}, 0x1e)
r16 = accept(r15, &(0x7f0000003140)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000031c0)=0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(r16, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

618.428903ms ago: executing program 0 (id=2882):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYRES16=r0], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00001700000000000c001a8008"], 0x2c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

561.69344ms ago: executing program 3 (id=2883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "1c6868009464e3cc"}}}}}, 0x36)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

559.28255ms ago: executing program 2 (id=2884):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x60)
sendmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000000)=@phonet={0x23, 0x7f, 0x0, 0x6}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000080)="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", 0xfd}, {&(0x7f0000000180)="4f5d62dc2ba7d719d001906fe75335ecd0088286a5377587abf433329a7aebea62ce48a1802a2c502ab3aa209836484d211fdc50801b63afb083221abf8d35968977783efbfdec861929a5601fff34fb3c693f38525758d2", 0x58}, {&(0x7f0000000200)="8e08fb4618", 0x5}, {&(0x7f0000000240)="59587f2132625071b6a44c0264d603c9b5c9a2b5bbd731c417b5a2003736f7b29ec8ca249676cf3c937deb51e861ab827e", 0x31}, {&(0x7f0000000280)="8aad9a04b4a5e207b4c4cac0fb5b2e733c64e00419b1a8735694aa23813fbf13261e2a3c8bc44719f4deca16267ce74580", 0x31}, {&(0x7f0000001600)="92e2f07648020c9d3d6926c0ad4f825b0d178ceec09884c307679a4febf525913bed61189420842625ff303f61fa74e9647bbb401cadfa353ef59cd5ee5056dfaacd20f885c76ce6f13c7f002fd8de23485d8e36a690fc173620b949627e62d4a7265d5c6e3d12a8161c01d7f21174cdb94afb14a6e07b79ccd0b658556aee61e6210dedaa7186b858ec0af50d374d32bd06583ba39a6294fa9a6d7b2ca60d30620b1161d02855e230e003a94a42041ceff45fd00a4ca231c72b2a58097db25d72c7293fcf2b14b081f47fc07c89ce6075f13873e2005c836a0338a9b4cf9c5bb732fad0e5a4af5b0e4ff7b22eef4a90b2", 0xf1}, {&(0x7f0000000380)="6c9612aebac2856b1046cfc9cd03f5e64cdc33890fcf20670aad28e66b6bcf04911329d5617fcad48d2e122f6379dcc530747a3664020c3584656699045ee6c3433aeab8ac7d84beef4647ad27393f2a854aed494b225cfeb24b2808f2009b81153866c63315337232f36f703ef81a8101ba9b8f1021568a05e56c9502aa27f68b74079b69109517d0bc986a626866b349584f8f88bf34fe804e4e063edd92388c6d7acd25a3957c057e1590f3576d71e3b959765677bd201eaf91d27332efd78676e3d3d549204f94b91d970c09f107253045aa44c11bd1ac21dd06a6f8cd04b90e90f45f3e8ce0265df25b43fcb518cd388e4731ede861418c1cc36151bb19c1c00d1f3a974db43bf9214be72aeccd9aef1db8e62f49306044796943b8ed58b4957db4b43c204a1ab4cdc01cb4b9f1246d64aaf0c42e7a57af49d2bd980f663da9b276345088265f2ac686993959222d82723d0f054fc826f4d550a96d517d3fb6a445c86d55be4f2302cd54f5647184deed3068e9d10ba3f70a25133f2f5079b358645935b8cc5a4179ea81539389a10ef359c79b9b43b1d5703d4d691d2a7d0a54aabdfbfc98de8467ffaeb23326e2b0eeb98c38c9b4a7420adad70d4b4b3cf9dfd65d9bf86409b141bc5fea7bf1e423b34cf996f770d1f0c73423fac9118b4b5645da83221645958658c2e7147bfeef4d8591342cdd360508bf7b3c827c84b329cac6321dc03f64d47a5197f74b15d8f72dd884f9cb1610a047a943992ae043063ab9bd215ba42dfdc36557f270d32d614d6a0c918a397c9befce095e2b77ddc550b4e5d266c88a6c503586fc6d96303c71aa178af1d8c3bfba8696cbc5b93f312cff9470600ff6bea2539f549e597340b315e8d4606b770a6e3924faf685aeb44faf33bd5e3ab6276e9ef00460c5f3e9bc66656a3d32c1db7e486716d6c38cc6a0d64b598a8af98297778c94a2746b53a0cd19faaee4078d5aff4a33495f497622cfc0abfca816b348d2f18f4c05d789f0f8b326fd497547436786e00766ebbe1d5d8fadc82c6a5b299d89ae136adbdade050f82a364949bc535541fa1e879bc722827b1325c4c95fc17e8ad6536de297f4284533c70d13747ad416f7ec2f9accd76f9d38e8534a7ac509a4bbe5b26ed4bfbd58ecd7d8234a4bc325cac7f6322c18cf7ecb8e82cd7deeb84222b630524f63e9d4713f2e44ecda1f1a0bd2ea3507608f7cbc6eaf90ea6e5736366b5d7f7175b49c4d1a48960015b41f70934d727f5f03533ef1439382622f2161f63e958a514dead150e8388e406ae56410977691e0cef8bc967f84774b7a189435936cad6a526147f7f5f492c05c90ad45919b01b0d22d749d2e6d4e25064bbb8284d79df0ba0cb4ef4b33bc787014208005d3be225b080803fc35fc896fa0f8116594486b8f9d25f9d9da7a893bab42b1dbe8597da01a76027cc934a77697b0252d73248abf2db587466266c096333e95f15b4871b3ae85cedb18e9631283254a17645a6636d69a57e4c68cba71aabd609b26bc8ce1eebd46304daf68bd0ad5b9bcce8b3f5b9d423bdf0ec521a6d00a6de8dd0eb285b5e8778c75fa065993db59625d129fa02c2e2d68b41b7ea7e9d44a9bb11b1d57ca569fea24cc5594db1ca379624920182bf6c6bb0290730801e8dfc293a0d8ae744759f7bd4bd6b031ced7245e8143596e1648d26b3cd0a826743838a62ca6a168723753d019dcb596763479accc503e28243c1dc540d074a5a4166dc9d2912c8ff05041b21dab78c6208fbea1aa24890edb2411b41a72fadd1d30edcf91ad212835d5820351e35275c2896705e53b0d5b08c68b4269294abb3da4cc8f9010956ee836e28aff85e98af38c1e806ac3b413832d135f5f61d1230993f6093a3351035960fd9760555552d15b1e39071d750c14f68fec9104bab7296d4583f10dba6eb317052ec043bc8d33685080c126f7c97ce58af0f0ce1d517ffaf42f24722ce9148167e379251353cf86b97070c86634a23ec324608f7b6fa302d5957b189ee3aa899438e158b52ac8193211f78aad2fa375aed4976ae0bc14b90c2bcf10b015dcc5d9bcd98406ee81c1a7ba2be142fe72badd53f5ddfc2629c3a6f8fbdfb36d1977df90376001d69be2bbf81b207c0dd0d898c0028890dcd6b7f65082692d45a55ab898ff848b9f12a09d8b39e41e69103bca24c3ae83ffcb541478b6c75881f82723c9676f65063db28c5a705a2d4a5e336aaef37faa1a0b096fdcb2c5dbbc277f530fd8cf02c9446f283e74c9c0870d333b78209bf09814bd3377b6b727fb1e91cfb49417ac6aec46d07a1eb02b6ff609796bff6676eb1334c3a8f284d57d88580e64541341429b975f4e855b58c740f947f49dfacfd0c46aad75fd52b7138ad28c728d2d9a51295fd160d4d6a5e12f7988696a9838bf98a0e640c48d4085972feb98daf0fecc1577062ebb7f4cee433579e53b717deb392d82b2c783bba99e5cef99a99ab908c99325f01903fbba33d47a60034f71eab66e765cc0c994c357d895d496b2ba5fa3fb1677a3ebd7438e77c5f569a7bb0fd74b56ca31db4c80a0741be4017934fa2444f0e0d8e4ef8cce05fc7499dc15192cab8c5eebacda1daa9fe5885a6c35ca99c9bb0a014bc4a6e039237d72d39c200a222eb9eb95e1f65c8f368d6b7311c3218bb328a2c41230b199e438edeed2da1fa8d6709aa42f13a6e88478f1d8f17a7731b52e7ca698589a9ba75dc625364ad691a09971e66eb2283e90b849f34da12be293b483726ecc1a0acf1d7747d4c3be6ee3d27e8f4568f824a858ad17256c27e931b777bc46cd6b1210dc56e8527eb709963a90e858617fbb18f30a4ed53d71e29df38b3db85dd85171502924fa5c1baf389118b7f79633c80d6bc8b86a3a03f8706de76df9383906ad3d4f877ecf18b026d59863f1a40968249f8970963cc17f0582ab74d9cf4b7dd811b1fd9f6ecddb3dfcc08c41f904ada633d49bb2b0fbd893977f67aabaf6335fe800eb491c82802a4d732e9169f198d222f20e72bed097bd68adf9ff023226b3fa2bef62dd1745f469e00b460a57e5634b9852e5108cabf356cab7fe7d47019787e8abf2fc73e70e77e44862bfd7fdab801cd8fe7ab9fec01563427d6be553b6b1444a8b625e6f5a5a7bbb6d8d5dd9bf533523a2b11a9ee8f282a9ff3b72719097cf14023890eb92243c4d29cf15698674ffa83afe1616582b95f9afa95ab7afb6fdda2f99a82f688b563251332064c40e7dc38623bbfd100d77bea9171fcc2167f3f177f2daea4934fb27f38068149f882e4e4384361edee254e54234e9835d5000f75bcf6a5431dd06671e681c2b1781ac6b066901e3db56f0bc3675dd7f1db9734686691f62355461042b02838c17f6aacb4aed179907ce295a622fd1b78e3bcaad0e49fa3761ef33fa8aaf765e0ab56360e997121836cd5ecf8814105459fd27bd6c01bc08faeef3a4d5990d3c99e1e42e769cc63ef10fc3b8ef42f8fb6b1e53b90908ace8b8bbab4548c9fb1bd12234560dbcee11880d1e8dec2f273202ad3207fdc269e11f7396a1bd961406ea8270b09e897a561a0edad4a5c46accc75caa25f3018fb6bfda01f4bbc7d7fb6ff9aa4b8b4b7c3bd3ebfdc4fe7b4dff724b46528744829fcf8e9cbd27913bb814de8f195d9fec1c91b0f141f56ea288f0f67070bd0a9ddc497fcabd46b1eff28667aee634cdb1f857bd0aceb4f6c99d7b30a6a6c712183a84e41ef8526a4deadad671ed708a619fd02cc25a4c540930b9678e198a53ad4e7ea0221b0e7b88065707ac60e9dfc90fba0d641db9c62d5e6fcca302dfa7725004f74990c89cb1b6982e98ea6e67ea5fa07a569e5fcbdc6d249add3d4af91cf07c642e5512e0dbcb2e6d2cd667d9906a4156b5aa477af0af160d01a7332502d27b7808548844048a8daaf027188a6e6d47ea2b852f04a7ab8ed33e73bd026078ce0e473d947dc2064ce425a8a0acf05fdc131c8f60911b9ebcb43435ade9aad6865f976b425c550d42a76ef913a1d36b9252288be89a02dc4fd3f28151fe8b8e30de0e2b110ad828fde0aeab6ed320e607ef696a56a1799fa97431ce7fdced1a83adef6c01e55b8d9bf9043cca731f3847fc92b80f62267f52dec7e9e05b74aad4db44c5eaa478a8c8e7a5c1adc0727c20c385745fe7fed566680f082044340adcc0747285c5e134d00c27a97bd19b4db705b38016a60bcf700b751f538dda2fb4118e8190e357f453cf56181a528224be95ce9074f4a86a06f90a3b206200f25975413059cdc8fb64797deb3e454d39afca479078a8986e87b5685c38d483695c3b8ef12e2c31319d7301a5007341517891b736709d792d24a09d3ea14d85a90b875855596bbcfcb0e11a41e28bfb32d3a4dd839a799e67aa84bf5ccb7d92f2ef3903e6120c90fd6ec094810acc54958d1ba2a3ff7bd79f75a806a1acfe99d0c019e415323eace98953bfcd19fc18c1068162edd74fe4cdd8e25b8b715d12deb6d4b9ca594b1a4b4dd1f82589dc68165bc62d4a248d2d69af396852dc4baccbebeb70dc364fea754d154e33c5e24c8bb7e78f39694f636c7586b2fecb940c2021c5fe05fa5480e695e1f8f5a9b51dba4c867bdae5aa24115bd1e8e07bb79100d4e0b0cd0c0cfaff71b359f40af961cb0fbd930af6771c28b8078c4d92a0a55230f96b002d2a5f308d109fd6c4232433e3a2d9eeccfa8955cc6aa04c9e2d63bdc5a6e6da275c68978a4187050841b7c70fc131afd04a1ac309c2884d76f56e76badbf965c79f042c129aabc7d739dadadd0abe22fab9a82fc09d3441937b4522a3c4494721b1821473ab40b74ead4e65e3dc9944b65dcd59adcd896da6c4c2af10adecb53a2c5d277537eb6f3d44c8a530ef5092545c176a2f30535a24055aa8e469e13e44fcb62b5a4de4d735fd21a4ab5555d78dbfdf93f97ee3ce10a2fcc039a743812eb4dd0f6579b38d71dacc442cc48e0d6820c3e3c56dcbd9511e6fe285914c567f5e42ecf8f1a396b0fe33b1d46a6500a50ad2616770bb7a483ef44e8b842018d0e7abfc34efb0f82f3dee5c57e47971a638f9cf3c023ff3549e42d84572247ad214eeed252282caaf2042224384475bcedfb66f80948ca7771944014c50f18b7d99357f4c77adc682b42f1e40f27c720e6ffd8bd17af6e4ac6aa327165c0bec5f3bfb3592c23234b4d4cccdb45b0ac9d49adea6c510d9f1f4d45649fd4c31e2b0634a8e4ab81f7bf9a207a643ee21773ed883f7ac3494b6dcc047a7de34d5729ef559762ab3c16e2678aad7c4971dd0ba2c9c3bd350ef81c5cfcdf1be8f7a88062aa968e7a94bfdba2973f341ac852ad10382a5f1b0f524da84b97328d68ed748827c11b5cd8345a5b924bbb8a2db60e3acc7e22661548fd25dba2fad55369b508f702f76a5b4815c84caac261abd895834541172f7ee7c8c2b5e102255ea73d6372f8fa134f7e9a872488f5eb14d1a14f6264acf0e02fe7230311712f4414358c9cf3822da988790e8e443bedf5bf7f289c1fd86c8c5407738165007bbf2999c6d908aac7141bb07c09e86d9e04ac8d6e881b7a0431ed052288292649b3522163d2268f84c25e233bcab561b2efc022cdb365440c2f586615828b2724d53e91632f4a69257fc7be0b7ab14b29c67d03c47152a135ef554d96b9b4eac1dde3f923c410fd714183e3f0435b1de57d430d5c37447267116f2c28cc884913e51cf473e2af7dddd103279a339ea627968d3336fec9b521917b75af0620", 0x1000}, {&(0x7f0000001380)="1206d99d812301b388a7cf4026584f32cb44b3013799e5a73d5345954f44369abdc4e3533c98b36755057487f7ad4b05352949a1ae4fd7d0e58f80864de10ab17cc6867e32f3c7294b3fcb5f205717804f65e3b3b36b8de54d0c685277fc7def82cefae7606ed47c0e47e55846e34813da8d2863cdc9cec64a6594aa8e4090e6b1cddc5d5b6ea230dbdf0a45ad616abf703f1dcacb2fd74f39d0b77bde", 0x9d}], 0x8}}], 0x1, 0x40004)

499.273153ms ago: executing program 4 (id=2885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x5, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0)

400.785436ms ago: executing program 0 (id=2886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x8, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="8300fb31", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a3000000000380004001400010003004e237f0000010000000000000000200002000a00"/90], 0x60}}, 0x0)

345.395048ms ago: executing program 2 (id=2887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x0)

333.411494ms ago: executing program 4 (id=2888):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x80003, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x40003800, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0x800, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0xf, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7d, 0x80000000, 0x80000c, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x3, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x401, 0xf8a, 0x7ffffffe, 0xffff, 0x6, 0x0, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0xa, 0x6, 0x10000, 0xffffffff, 0x9, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x0, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b3, 0x1, 0x8, 0xe, 0x8, 0x0, 0x9, 0xfffffffd, 0x4, 0xb, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2, 0x40]}]}}]}, 0x434}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x24000000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0xa8}}, 0x0)

248.857012ms ago: executing program 0 (id=2889):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x17, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async)

229.763319ms ago: executing program 2 (id=2890):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xfd74, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0)

5.164539ms ago: executing program 3 (id=2891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
socket$inet6(0xa, 0x2, 0x3)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x20, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c)

4.068928ms ago: executing program 0 (id=2892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
accept4(r0, 0x0, &(0x7f0000000100), 0x80800) (async)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async)
unshare(0x22020600) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001)
recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x6d6}], 0x2, 0x102, 0x0)
socket$inet(0x2, 0x2, 0x1) (async)
socket$inet(0x2, 0x2, 0x1) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
write(r7, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

0s ago: executing program 2 (id=2893):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x100000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x510, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4f4, 0x3, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "7f336c01ecce59dbde72035310b7e907ffa798dcd32fc37c"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x52}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9c}, @NFTA_SOCKET_DREG={0x8}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xcc, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffff}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb77d24cc7607490e}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe1}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x84, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "ffc864c3e8271e2fe52b822721811e681479509f98762bcab49118dc930228f4a65671a80b5410e517"}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "f44559b9633b5ef0492f649e937aa720cd6dec9c14ad851c5d903e26491bd22670d794371ca5b0d83bb17e43660ba2fda9a55d506ef12a686c5ef635569a4b4b75028fb47213"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xd6, 0x6, 0x1, 0x0, "31b651b77ea40c07f1a3350a25bd54ff08931f70b948ef06ff72e3ad7c1e502a8c4c53330e6c08cb42ea96e8ed31a08b6a233fe17016a86737bc49d33f61603e9a95584a89192f1f5715d28a407b51cb9e5cc19759dbf9fa6746804876282e76a9a2de8e4a34f362aa3485f0890fd91c190bcaba365c7088a51cda717c74de9477505b19c7df8da572e1ede385cfbd60e253668e158467acf3c102081491e28c2da38ba1d1be83f5f309f60f13c08631a6e453566dd13a716e249a8e184ff01a36ee133eba6cbac456bdf2575dbb212c3db6"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x554}, 0x1, 0x0, 0x0, 0x20000014}, 0x2000880)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

kernel console output (not intermixed with test programs):

inconsistent configuration, please check.
[  223.878115][ T9041] sctp: [Deprecated]: syz.1.807 (pid 9041) Use of int in maxseg socket option.
[  223.878115][ T9041] Use struct sctp_assoc_value instead
[  224.666324][ T9081] veth7: entered allmulticast mode
[  224.673642][ T9085] __nla_validate_parse: 9 callbacks suppressed
[  224.673659][ T9085] netlink: 96 bytes leftover after parsing attributes in process `syz.4.821'.
[  224.877167][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'.
[  225.157689][ T9106] bond3: option packets_per_slave: invalid value (18446744073709551615)
[  225.184232][ T9106] bond3: option packets_per_slave: allowed values 0 - 65535
[  225.260910][ T9106] bond3 (unregistering): Released all slaves
[  225.575793][ T9138] openvswitch: netlink: Flow key attribute not present in set flow.
[  225.602471][ T9138] netlink: 19 bytes leftover after parsing attributes in process `syz.1.833'.
[  225.963484][ T9166] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  226.257335][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'.
[  226.288791][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'.
[  226.575578][ T9187] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  226.831819][ T9204] netlink: 'syz.3.850': attribute type 11 has an invalid length.
[  226.855602][ T9204] netlink: 'syz.3.850': attribute type 11 has an invalid length.
[  226.864180][ T9204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.850'.
[  226.909010][ T9204] validate_nla: 2 callbacks suppressed
[  226.909039][ T9204] netlink: 'syz.3.850': attribute type 33 has an invalid length.
[  227.308361][ T9227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.498941][ T9236] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.863'.
[  227.742749][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  227.972789][ T9262] pim6reg: entered allmulticast mode
[  227.981256][ T9265] pim6reg: left allmulticast mode
[  228.403682][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'.
[  228.413313][ T9293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.452590][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.642667][ T9298] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  228.694024][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.711255][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.726207][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.762171][ T9301] netlink: 348 bytes leftover after parsing attributes in process `syz.2.880'.
[  228.773988][ T9301] tipc: Started in network mode
[  228.779269][ T9301] tipc: Node identity 860a12af9fac, cluster identity 4711
[  228.786645][ T9301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.873034][ T9301] syzkaller0: entered promiscuous mode
[  228.880955][ T9313] netlink: 108 bytes leftover after parsing attributes in process `syz.0.881'.
[  228.890162][ T9301] syzkaller0: entered allmulticast mode
[  228.897211][ T9301] tipc: Resetting bearer <eth:syzkaller0>
[  228.902867][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.915248][ T9299] tipc: Resetting bearer <eth:syzkaller0>
[  228.991938][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.038558][ T9299] tipc: Disabling bearer <eth:syzkaller0>
[  230.091174][ T5893] tipc: Node number set to 430314159
[  230.268080][ T9329] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  230.311813][ T9336] : entered promiscuous mode
[  230.327984][ T9329] __nla_validate_parse: 1 callbacks suppressed
[  230.328002][ T9329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.886'.
[  230.368179][ T9338] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  230.508086][ T9344] netlink: 'syz.0.893': attribute type 11 has an invalid length.
[  230.524365][ T9344] netlink: 228 bytes leftover after parsing attributes in process `syz.0.893'.
[  230.667411][ T9354] netlink: 'syz.4.897': attribute type 1 has an invalid length.
[  230.675395][ T9354] netlink: 'syz.4.897': attribute type 1 has an invalid length.
[  230.906566][ T9366] netlink: 'syz.1.901': attribute type 10 has an invalid length.
[  230.928220][ T9363] xt_CT: No such helper "syz0"
[  230.977654][ T9366] team0: Device veth1_macvtap failed to register rx_handler
[  231.152525][ T9377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.904'.
[  231.174891][ T9377] openvswitch: netlink: Flow key attr not present in new flow.
[  231.188274][ T9377] netlink: 144 bytes leftover after parsing attributes in process `syz.2.904'.
[  231.211285][ T9385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.904'.
[  231.231084][ T9377] netlink: 144 bytes leftover after parsing attributes in process `syz.2.904'.
[  231.245897][ T9385] openvswitch: netlink: Flow key attr not present in new flow.
[  231.303606][ T9389] netlink: 68 bytes leftover after parsing attributes in process `syz.4.908'.
[  231.313233][ T9388] netlink: 68 bytes leftover after parsing attributes in process `syz.4.908'.
[  231.451125][ T9398] syzkaller0: entered allmulticast mode
[  231.495039][ T9399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.911'.
[  231.541636][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.549482][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.566470][ T9403] nftables ruleset with unbound chain
[  231.737338][ T9407] xt_hashlimit: size too large, truncated to 1048576
[  231.904986][ T9413] netlink: 'syz.3.915': attribute type 1 has an invalid length.
[  231.960849][ T9413] bond3: (slave geneve3): making interface the new active one
[  231.969316][ T9413] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  231.978082][ T1028] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  231.999632][ T1028] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  232.008941][ T1028] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  232.017789][ T1028] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  232.086646][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  232.144548][ T9420] netlink: 'syz.3.916': attribute type 2 has an invalid length.
[  232.613620][ T9442] netlink: 'syz.1.925': attribute type 1 has an invalid length.
[  232.785959][ T9451] wg1 speed is unknown, defaulting to 1000
[  232.930103][ T9457] Illegal XDP return value 4294967274 on prog  (id 181) dev N/A, expect packet loss!
[  233.245935][ T9478] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  233.258553][ T9478] netlink: 'syz.2.934': attribute type 2 has an invalid length.
[  233.675400][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  233.727551][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  233.751641][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  233.779508][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  233.819453][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  233.827356][ T9491] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  234.830218][ T9539] 8021q: adding VLAN 0 to HW filter on device bond5
[  234.920590][ T9554] IPv6: NLM_F_CREATE should be specified when creating new route
[  235.023889][ T9547] bond5: (slave veth3): Enslaving as an active interface with a down link
[  235.077232][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv1
[  235.144827][ T9539] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  235.335393][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.388189][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.767822][ T9570] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  235.822324][ T9570] bond6 (unregistering): Released all slaves
[  235.878071][ T9578] __nla_validate_parse: 42 callbacks suppressed
[  235.878090][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'.
[  236.407874][ T9611] netlink: 1 bytes leftover after parsing attributes in process `syz.2.974'.
[  236.425656][ T9611] xt_policy: neither incoming nor outgoing policy selected
[  236.461502][ T9611] vlan2: entered promiscuous mode
[  236.466605][ T9611] bridge0: entered promiscuous mode
[  236.675596][ T9622] xt_bpf: check failed: parse error
[  236.862614][ T9635] netlink: 172 bytes leftover after parsing attributes in process `syz.4.983'.
[  236.900126][ T9635] NCSI netlink: No device for ifindex 813332851
[  237.109317][ T9649] ipvlan2: entered promiscuous mode
[  237.145140][ T9646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.154289][ T9646] +
: renamed from syzkaller0
[  237.167989][ T9646] tipc: Disabling bearer <eth:syzkaller0>
[  237.285952][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'.
[  237.667327][ T9680] netem: unknown loss type 0
[  237.683092][ T9680] netem: change failed
[  237.826245][ T9685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.885067][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'.
[  238.011000][ T5943] wg1 speed is unknown, defaulting to 1000
[  238.027677][ T9694] syzkaller0: entered allmulticast mode
[  238.450929][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  238.553167][ T9709] syzkaller0: entered promiscuous mode
[  238.559533][ T9709] syzkaller0: entered allmulticast mode
[  240.041284][ T9729] validate_nla: 31 callbacks suppressed
[  240.041305][ T9729] netlink: 'syz.1.1015': attribute type 3 has an invalid length.
[  240.059478][ T9729] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1015'.
[  240.794038][ T9773] netlink: 'syz.2.1028': attribute type 39 has an invalid length.
[  241.056591][ T9782] bridge0: port 3(batadv1) entered blocking state
[  241.073964][ T9782] bridge0: port 3(batadv1) entered disabled state
[  241.081273][ T9782] batadv1: entered allmulticast mode
[  241.089865][ T9782] batadv1: entered promiscuous mode
[  241.142094][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1032'.
[  241.168280][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'.
[  241.229057][ T9794] netlink: 'syz.1.1033': attribute type 21 has an invalid length.
[  241.245572][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'.
[  241.451125][ T9784] syzkaller0: entered allmulticast mode
[  241.466752][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1035'.
[  241.634649][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  241.644700][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  241.854978][ T9820] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.155950][ T9832] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  242.194583][ T9832] gretap1: left promiscuous mode
[  242.231998][ T9832] geneve2: left promiscuous mode
[  242.252337][ T9832] ip6gre1: left promiscuous mode
[  242.438637][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'.
[  242.587265][ T9844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.629437][ T9844] bond_slave_0: left allmulticast mode
[  242.670035][ T9844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.700210][ T9844] bond_slave_1: left allmulticast mode
[  242.717473][ T9844] bond0 (unregistering): Released all slaves
[  242.758322][ T9861] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1049'.
[  242.869581][ T9861] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.876723][ T9861] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  242.929707][ T9861] bond0: (slave gre0): Error -95 calling set_mac_address
[  243.052587][ T9871] IPv4: Oversized IP packet from 172.20.20.24
[  243.060568][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  243.067300][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  243.146001][ T9861] bond0: (slave rose0): Enslaving as an active interface with an up link
[  243.529706][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'.
[  243.653612][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1061'.
[  243.719963][ T9906] block nbd1: server does not support multiple connections per device.
[  243.732372][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'.
[  243.777944][ T9906] block nbd1: shutting down sockets
[  243.799772][ T9910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1061'.
[  244.294972][ T9934] netlink: 'syz.1.1066': attribute type 12 has an invalid length.
[  244.327713][ T9934] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  245.042085][ T9978] x_tables: duplicate underflow at hook 3
[  245.154894][ T9981] openvswitch: netlink: Message has 8 unknown bytes.
[  246.167501][T10037] netlink: 'syz.1.1093': attribute type 10 has an invalid length.
[  246.555756][T10060] __nla_validate_parse: 5 callbacks suppressed
[  246.555775][T10060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1099'.
[  246.600822][T10062] tipc: Can't bind to reserved service type 0
[  246.654178][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'.
[  246.708561][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  246.936426][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'.
[  247.265614][T10088] netlink: 'syz.0.1108': attribute type 1 has an invalid length.
[  247.358641][T10084] syzkaller0: entered promiscuous mode
[  247.381637][T10084] syzkaller0: entered allmulticast mode
[  248.932852][T10103] bond6: Removing last ns target with arp_interval on
[  249.089961][T10136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.121383][T10137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1120'.
[  249.267750][T10146] netlink: 'syz.0.1124': attribute type 3 has an invalid length.
[  249.306140][T10146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1124'.
[  249.803632][T10182] netlink: 97 bytes leftover after parsing attributes in process `syz.3.1134'.
[  249.881938][T10182] netlink: 97 bytes leftover after parsing attributes in process `syz.3.1134'.
[  249.926336][T10182] netlink: 97 bytes leftover after parsing attributes in process `syz.3.1134'.
[  250.047569][T10196] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  250.185454][T10208] netlink: 'syz.3.1138': attribute type 1 has an invalid length.
[  250.211164][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'.
[  250.459227][T10219] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1141'.
[  251.166007][T10262] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  251.186056][T10262] netlink: 'syz.1.1155': attribute type 2 has an invalid length.
[  251.216068][T10262] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  251.229561][T10262] netlink: 'syz.1.1155': attribute type 3 has an invalid length.
[  251.304210][T10269] netlink: 'syz.2.1153': attribute type 4 has an invalid length.
[  251.446730][T10280] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  251.457904][T10282] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  251.523385][T10287] dvmrp6: left allmulticast mode
[  251.591722][T10295] netlink: 'syz.1.1160': attribute type 9 has an invalid length.
[  251.613650][T10295] __nla_validate_parse: 3 callbacks suppressed
[  251.613668][T10295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1160'.
[  251.983489][ T6263] udevd[6263]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  252.044799][ T6267] udevd[6267]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  252.130352][T10328] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1166'.
[  252.203447][T10332] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1165'.
[  252.660389][T10354] ip6tnl2: entered allmulticast mode
[  252.818678][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'.
[  252.879919][T10367] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1176'.
[  253.066724][T10378] sctp: [Deprecated]: syz.4.1178 (pid 10378) Use of struct sctp_assoc_value in delayed_ack socket option.
[  253.066724][T10378] Use struct sctp_sack_info instead
[  253.225704][T10365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.250330][T10365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  253.261242][T10365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.277853][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  253.299284][T10389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1183'.
[  253.314722][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'.
[  253.364514][T10358] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  253.385939][ T4479] netdevsim netdevsim2 ������: set [1, 1] type 2 family 0 port 20004 - 0
[  253.396241][ T4479] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  253.433843][ T4479] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  253.491693][T10365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.524887][T10365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  253.559802][T10365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.578963][T10365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  253.637081][T10400] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  253.652183][T10400] bond0 (unregistering): Released all slaves
[  253.752109][T10365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.784035][T10365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  253.800361][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'.
[  253.805680][T10365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.841891][T10365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  253.870261][T10406] netlink: 'syz.0.1188': attribute type 9 has an invalid length.
[  253.890644][T10408] netlink: 'syz.0.1188': attribute type 9 has an invalid length.
[  253.899199][T10403] syzkaller0: entered allmulticast mode
[  254.002392][T10365] netdevsim netdevsim2 ������ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.073644][T10365] netdevsim netdevsim2 ������ (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  254.112782][T10365] netdevsim netdevsim2 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.125080][T10365] netdevsim netdevsim2 ������ (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  254.418084][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.442408][   T13] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 49158 - 0
[  254.451158][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  254.460846][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  254.524749][ T6729] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.553501][ T6729] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 49158 - 0
[  254.585653][ T6729] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  254.608855][ T6729] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  254.643330][T10453] netlink: 'syz.4.1198': attribute type 1 has an invalid length.
[  254.675211][ T1153] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.702496][ T1153] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 49158 - 0
[  254.728011][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  254.748616][ T1153] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  254.782033][T10462] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1200'.
[  254.813487][T10453] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.818190][T10462] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  254.868689][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  254.868915][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  254.912626][T10456] 8021q: adding VLAN 0 to HW filter on device bond2
[  254.923972][T10456] bond0: (slave bond2): making interface the new active one
[  254.934509][T10456] bond0: (slave bond2): Enslaving as an active interface with an up link
[  254.963410][ T1153] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.980491][ T1153] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 49158 - 0
[  254.990152][ T1153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  255.000308][ T1153] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  255.011159][T10453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.463595][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.642784][T10506] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  255.727860][T10506] geneve3: entered promiscuous mode
[  255.790582][T10506] geneve3: entered allmulticast mode
[  255.816244][   T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  255.850544][   T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  255.879813][   T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  255.919566][   T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  256.019240][T10531] Cannot find map_set index 33 as target
[  256.062433][T10531] Cannot find map_set index 33 as target
[  256.607572][T10565] openvswitch: netlink: Missing key (keys=40, expected=100)
[  256.663843][T10563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.673503][T10563] syzkaller0: entered promiscuous mode
[  256.690984][T10563] syzkaller0: entered allmulticast mode
[  256.715287][T10563] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  256.826265][T10563] tipc: Resetting bearer <eth:syzkaller0>
[  256.965159][T10562] tipc: Resetting bearer <eth:syzkaller0>
[  256.992541][T10576] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  257.070445][T10577] __nla_validate_parse: 7 callbacks suppressed
[  257.070467][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  257.139570][T10562] tipc: Disabling bearer <eth:syzkaller0>
[  257.351990][T10585] validate_nla: 2 callbacks suppressed
[  257.352009][T10585] netlink: 'syz.1.1230': attribute type 142 has an invalid length.
[  257.469884][T10591] netlink: 'syz.3.1231': attribute type 2 has an invalid length.
[  257.477780][T10591] netlink: 'syz.3.1231': attribute type 1 has an invalid length.
[  257.600835][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'.
[  257.650861][T10599] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes.
[  257.687597][T10602] siw: device registration error -23
[  257.767750][T10605] netlink: 'syz.1.1235': attribute type 28 has an invalid length.
[  257.786343][T10605] netlink: 'syz.1.1235': attribute type 3 has an invalid length.
[  257.805769][T10605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1235'.
[  257.956208][T10613] x_tables: ip6_tables: mh match: only valid for protocol 135
[  258.286296][T10637] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  258.317880][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1243'.
[  258.551891][    T9] IPVS: starting estimator thread 0...
[  258.638571][T10653] blkio.reset_stats is deprecated
[  258.649472][T10651] IPVS: using max 27 ests per chain, 64800 per kthread
[  258.666911][T10653] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1247'.
[  258.755411][T10659] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1247'.
[  258.802076][T10647] syzkaller0: entered promiscuous mode
[  258.807909][T10647] syzkaller0: entered allmulticast mode
[  260.296531][T10667] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.304850][T10685] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1253'.
[  260.332265][T10685] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1253'.
[  260.482807][T10692] set match dimension is over the limit!
[  260.573264][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.617007][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.634255][T10705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.659293][T10708] netlink: 'syz.2.1260': attribute type 64 has an invalid length.
[  260.668935][T10708] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1260'.
[  260.802187][T10719] netlink: 'syz.4.1262': attribute type 13 has an invalid length.
[  260.866730][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'.
[  260.955107][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  260.966678][T10725] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  260.980323][T10725] tipc: Enabled bearer <udp:syz0>, priority 10
[  260.986840][T10724] bridge_slave_1: left allmulticast mode
[  261.027329][T10724] bridge_slave_1: left promiscuous mode
[  261.039652][T10724] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.068257][T10724] bridge_slave_0: left allmulticast mode
[  261.081092][T10724] bridge_slave_0: left promiscuous mode
[  261.086970][T10724] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.288250][T10741] veth0_to_team: entered promiscuous mode
[  262.093979][T10791] netlink: 'syz.4.1288': attribute type 5 has an invalid length.
[  262.165115][T10794] netlink: 'syz.2.1291': attribute type 10 has an invalid length.
[  262.173700][T10794] bridge0: port 3(team0) entered blocking state
[  262.184678][T10794] bridge0: port 3(team0) entered disabled state
[  262.191572][T10794] team0: entered allmulticast mode
[  262.196865][T10794] team_slave_0: entered allmulticast mode
[  262.203473][T10794] team_slave_1: entered allmulticast mode
[  262.228305][T10794] team0: entered promiscuous mode
[  262.239916][T10794] team_slave_0: entered promiscuous mode
[  262.250734][T10794] team_slave_1: entered promiscuous mode
[  262.267382][    T9] tipc: Node number set to 2419685977
[  262.305130][T10801] Cannot find add_set index 65532 as target
[  262.446153][T10804] set match dimension is over the limit!
[  262.459801][T10804] set match dimension is over the limit!
[  262.482066][T10804] set match dimension is over the limit!
[  262.510161][T10811] __nla_validate_parse: 5 callbacks suppressed
[  262.510178][T10811] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1294'.
[  262.526292][T10804] set match dimension is over the limit!
[  262.541555][T10804] set match dimension is over the limit!
[  262.558015][T10804] set match dimension is over the limit!
[  262.575348][T10804] set match dimension is over the limit!
[  262.581699][T10804] set match dimension is over the limit!
[  262.587660][T10804] set match dimension is over the limit!
[  262.594875][T10804] set match dimension is over the limit!
[  262.631273][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.666834][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.825489][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'.
[  262.902065][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1301'.
[  263.100601][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1302'.
[  263.137342][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'.
[  263.315235][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'.
[  263.333753][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'.
[  264.077737][T10877] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  264.417411][T10897] sctp: [Deprecated]: syz.2.1322 (pid 10897) Use of int in maxseg socket option.
[  264.417411][T10897] Use struct sctp_assoc_value instead
[  264.542928][T10908] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1323'.
[  264.632203][T10908] bond3: (slave erspan0): Device is not bonding slave
[  264.644749][T10908] bond3: option active_slave: invalid value (erspan0)
[  264.657284][T10908] bond3 (unregistering): Released all slaves
[  264.705052][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.758660][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.982834][T10923] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1328'.
[  265.306794][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  265.315967][T10946] openvswitch: netlink: Missing key (keys=40, expected=80)
[  265.426621][T10952] sctp: [Deprecated]: syz.1.1339 (pid 10952) Use of int in max_burst socket option.
[  265.426621][T10952] Use struct sctp_assoc_value instead
[  265.525810][T10950] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.921754][T10971] ip6tnl2: entered allmulticast mode
[  266.016126][T10979] FAULT_INJECTION: forcing a failure.
[  266.016126][T10979] name failslab, interval 1, probability 0, space 0, times 0
[  266.040473][T10973] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  266.082155][T10979] CPU: 0 UID: 0 PID: 10979 Comm: syz.1.1345 Not tainted syzkaller #0 PREEMPT(full) 
[  266.082184][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  266.082215][T10979] Call Trace:
[  266.082223][T10979]  <TASK>
[  266.082232][T10979]  dump_stack_lvl+0xe8/0x150
[  266.082266][T10979]  should_fail_ex+0x412/0x560
[  266.082302][T10979]  should_failslab+0xa8/0x100
[  266.082329][T10979]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  266.082360][T10979]  ? __alloc_skb+0x193/0x390
[  266.082389][T10979]  ? __alloc_skb+0x1d7/0x390
[  266.082415][T10979]  ? __local_bh_enable_ip+0xd0/0x130
[  266.082438][T10979]  ? __alloc_skb+0x193/0x390
[  266.082468][T10979]  __alloc_skb+0x1d7/0x390
[  266.082502][T10979]  netlink_sendmsg+0x5d4/0xb40
[  266.082535][T10979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.082560][T10979]  ? aa_file_perm+0x12d/0x1630
[  266.082589][T10979]  ? aa_sock_msg_perm+0xf1/0x1b0
[  266.082618][T10979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.082637][T10979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.082661][T10979]  __sock_sendmsg+0x21c/0x270
[  266.082689][T10979]  ____sys_sendmsg+0x4d7/0x810
[  266.082709][T10979]  ? __might_fault+0xaf/0x130
[  266.082744][T10979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.082772][T10979]  ? import_iovec+0x73/0xa0
[  266.082798][T10979]  ___sys_sendmsg+0x2a5/0x360
[  266.082848][T10979]  ? __lock_acquire+0x6b5/0x2cf0
[  266.082874][T10979]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.082932][T10979]  ? __fget_files+0x2a/0x420
[  266.082956][T10979]  ? __fget_files+0x3a0/0x420
[  266.082990][T10979]  __x64_sys_sendmsg+0x1bd/0x2a0
[  266.083012][T10979]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.083041][T10979]  ? __pfx_ksys_write+0x10/0x10
[  266.083072][T10979]  do_syscall_64+0xe2/0xf80
[  266.083100][T10979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.083119][T10979]  ? trace_irq_disable+0x37/0x100
[  266.083146][T10979]  ? clear_bhb_loop+0x60/0xb0
[  266.083170][T10979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.083189][T10979] RIP: 0033:0x7f40f4f9acb9
[  266.083215][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.083231][T10979] RSP: 002b:00007f40f31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.083252][T10979] RAX: ffffffffffffffda RBX: 00007f40f5215fa0 RCX: 00007f40f4f9acb9
[  266.083265][T10979] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003
[  266.083276][T10979] RBP: 00007f40f31f6090 R08: 0000000000000000 R09: 0000000000000000
[  266.083287][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.083298][T10979] R13: 00007f40f5216038 R14: 00007f40f5215fa0 R15: 00007fffd2079058
[  266.083329][T10979]  </TASK>
[  266.510799][T10985] team0: Caught tx_queue_len zero misconfig
[  266.818642][T11000] netlink: 'syz.1.1352': attribute type 29 has an invalid length.
[  266.878593][T11000] netlink: 'syz.1.1352': attribute type 29 has an invalid length.
[  267.423210][T11043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  267.625187][T11056] __nla_validate_parse: 7 callbacks suppressed
[  267.625207][T11056] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1372'.
[  267.654673][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  267.993367][T11075] netlink: 'syz.3.1378': attribute type 16 has an invalid length.
[  268.003890][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'.
[  268.312189][T11092] netlink: 'syz.2.1383': attribute type 11 has an invalid length.
[  268.349332][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'.
[  268.654307][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'.
[  268.820257][T11115] bridge0: port 3(veth0_to_bridge) entered blocking state
[  268.830932][T11115] bridge0: port 3(veth0_to_bridge) entered disabled state
[  268.841029][T11115] veth0_to_bridge: entered allmulticast mode
[  268.850946][T11115] veth0_to_bridge: entered promiscuous mode
[  269.079503][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'.
[  269.119387][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1396'.
[  269.123610][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'.
[  269.182825][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'.
[  269.200327][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1396'.
[  269.575028][T11168] netlink: 'syz.0.1403': attribute type 41 has an invalid length.
[  269.623290][T11168] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  269.724060][T11175] netlink: 'syz.3.1406': attribute type 2 has an invalid length.
[  269.804449][T11183] syzkaller0: entered promiscuous mode
[  269.823451][T11183] syzkaller0: entered allmulticast mode
[  270.321773][T11199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.738372][T11237] netlink: 'syz.3.1426': attribute type 6 has an invalid length.
[  270.777827][T11237] netlink: 'syz.3.1426': attribute type 6 has an invalid length.
[  270.867393][T11249] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  270.944817][T11250] raw_sendmsg: syz.2.1428 forgot to set AF_INET. Fix it!
[  271.471222][T11274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.489498][T11274] +
: renamed from syzkaller0
[  271.513579][T11274] tipc: Disabling bearer <eth:syzkaller0>
[  272.001130][T11298] netlink: 'syz.2.1445': attribute type 2 has an invalid length.
[  272.011770][T11298] netlink: 'syz.2.1445': attribute type 11 has an invalid length.
[  272.386673][T11328] netlink: zone id is out of range
[  272.410968][T11328] netlink: zone id is out of range
[  272.428623][T11328] netlink: zone id is out of range
[  272.433809][T11328] netlink: zone id is out of range
[  272.439227][T11328] netlink: zone id is out of range
[  272.444729][T11328] netlink: zone id is out of range
[  272.450096][T11328] netlink: zone id is out of range
[  272.455243][T11328] netlink: set zone limit has 4 unknown bytes
[  272.545803][T11334] IPv6: addrconf: prefix option has invalid lifetime
[  272.552742][T11334] IPv6: addrconf: prefix option has invalid lifetime
[  272.629827][T11339] __nla_validate_parse: 11 callbacks suppressed
[  272.629849][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'.
[  272.998358][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.207175][T11354] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1462'.
[  273.282870][T11356] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  273.347747][T11363] netlink: 'syz.2.1465': attribute type 21 has an invalid length.
[  273.371129][T11363] netlink: 'syz.2.1465': attribute type 22 has an invalid length.
[  273.392313][T11363] netlink: 'syz.2.1465': attribute type 23 has an invalid length.
[  273.401740][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'.
[  273.411175][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1467'.
[  273.420598][T11363] netlink: 'syz.2.1465': attribute type 25 has an invalid length.
[  273.429418][T11363] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1465'.
[  273.445805][T11369] vlan3: entered allmulticast mode
[  273.464165][T11369] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  273.664043][T11388] sctp: [Deprecated]: syz.1.1471 (pid 11388) Use of int in max_burst socket option.
[  273.664043][T11388] Use struct sctp_assoc_value instead
[  273.746927][T11394] netlink: 'syz.4.1475': attribute type 11 has an invalid length.
[  273.781311][T11394] netlink: 'syz.4.1475': attribute type 4 has an invalid length.
[  273.808110][T11398] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  273.850488][T11394] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.1475'.
[  274.136831][T11419] xt_l2tp: missing protocol rule (udp|l2tpip)
[  274.310673][T11426] xt_hashlimit: overflow, rate too high: 0
[  274.549396][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  274.558354][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'.
[  274.651119][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'.
[  274.818154][T11454] netlink: 1136 bytes leftover after parsing attributes in process `syz.3.1498'.
[  275.204130][T11471] xt_TCPMSS: Only works on TCP SYN packets
[  275.837769][T11491] syzkaller0: entered promiscuous mode
[  275.847788][T11491] syzkaller0: entered allmulticast mode
[  275.974104][T11492] Bluetooth: MGMT ver 1.23
[  276.030479][T11510] wg1 speed is unknown, defaulting to 1000
[  276.451443][T11522] netlink: 'syz.2.1517': attribute type 4 has an invalid length.
[  276.917645][T11529] x_tables: ip_tables: icmp match: only valid for protocol 1
[  277.137111][T11541] syzkaller1: entered promiscuous mode
[  277.146546][T11541] syzkaller1: entered allmulticast mode
[  277.502069][T11563] ip6t_srh: unknown srh invflags 4000
[  277.648021][T11576] __nla_validate_parse: 10 callbacks suppressed
[  277.648040][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'.
[  277.699422][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'.
[  277.979594][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'.
[  278.033856][T11597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'.
[  278.053786][T11598] netlink: 'syz.0.1541': attribute type 16 has an invalid length.
[  278.066471][T11598] netlink: 'syz.0.1541': attribute type 17 has an invalid length.
[  278.111198][T11603] xt_recent: Unsupported userspace flags (000000b1)
[  278.127707][T11607] xt_recent: Unsupported userspace flags (000000b1)
[  278.252910][T11598] net_ratelimit: 1 callbacks suppressed
[  278.252922][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.497480][T11623] syzkaller0: entered promiscuous mode
[  278.503805][T11623] syzkaller0: entered allmulticast mode
[  278.513353][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  278.515398][T11623] netlink: 'syz.1.1547': attribute type 4 has an invalid length.
[  278.525723][T11621] openvswitch: netlink: Flow key attr not present in new flow.
[  278.539574][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  278.550041][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  278.559857][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  278.569395][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  278.581010][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  279.154946][T11654] netlink: Conntrack attr has 4 unknown bytes
[  279.727252][T11680] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  279.951077][T11694] IPv6: NLM_F_CREATE should be specified when creating new route
[  280.170635][T11708] xt_hashlimit: overflow, try lower: 3/0
[  280.564696][T11723] wg1 speed is unknown, defaulting to 1000
[  281.266444][T11763] netlink: 'syz.2.1585': attribute type 16 has an invalid length.
[  281.275185][T11763] netlink: 'syz.2.1585': attribute type 17 has an invalid length.
[  281.379043][T11768] Bluetooth: MGMT ver 1.23
[  282.466388][T11763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.725203][T11773] __nla_validate_parse: 66 callbacks suppressed
[  282.725225][T11773] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1590'.
[  282.922980][T11793] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  282.936063][T11791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1594'.
[  283.062327][T11801] netlink: 'syz.1.1598': attribute type 83 has an invalid length.
[  283.152742][T11798] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  283.167445][T11798] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  283.286891][T11793] xt_socket: unknown flags 0xe4
[  283.438468][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  283.441018][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  283.669586][T11843] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1604'.
[  283.825837][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1611'.
[  283.846636][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1609'.
[  284.033012][T11868] netlink: 'syz.0.1615': attribute type 1 has an invalid length.
[  284.043542][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'.
[  284.054999][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'.
[  284.067196][T11857] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1614'.
[  284.477333][T11874] IPv6: NLM_F_CREATE should be specified when creating new route
[  284.665085][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'.
[  284.835758][T11882] xt_limit: Overflow, try lower: 348/0
[  285.248287][T11908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1630'.
[  285.283690][T11908] openvswitch: netlink: Tunnel attr 44 out of range max 16
[  285.587889][T11926] macvtap1: entered allmulticast mode
[  285.593674][T11926] veth0_macvtap: entered allmulticast mode
[  285.755365][T11936] FAULT_INJECTION: forcing a failure.
[  285.755365][T11936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.793047][T11936] CPU: 1 UID: 0 PID: 11936 Comm: syz.0.1638 Not tainted syzkaller #0 PREEMPT(full) 
[  285.793077][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  285.793090][T11936] Call Trace:
[  285.793098][T11936]  <TASK>
[  285.793107][T11936]  dump_stack_lvl+0xe8/0x150
[  285.793140][T11936]  should_fail_ex+0x412/0x560
[  285.793176][T11936]  _copy_from_user+0x2d/0xb0
[  285.793200][T11936]  ___sys_sendmsg+0x1c6/0x360
[  285.793220][T11936]  ? __lock_acquire+0x6b5/0x2cf0
[  285.793246][T11936]  ? __pfx____sys_sendmsg+0x10/0x10
[  285.793303][T11936]  ? __fget_files+0x2a/0x420
[  285.793329][T11936]  ? __fget_files+0x3a0/0x420
[  285.793365][T11936]  __x64_sys_sendmsg+0x1bd/0x2a0
[  285.793389][T11936]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  285.793419][T11936]  ? __pfx_ksys_write+0x10/0x10
[  285.793460][T11936]  do_syscall_64+0xe2/0xf80
[  285.793490][T11936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.793511][T11936]  ? clear_bhb_loop+0x60/0xb0
[  285.793537][T11936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.793557][T11936] RIP: 0033:0x7ff48279acb9
[  285.793575][T11936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.793593][T11936] RSP: 002b:00007ff4835ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.793616][T11936] RAX: ffffffffffffffda RBX: 00007ff482a15fa0 RCX: 00007ff48279acb9
[  285.793631][T11936] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003
[  285.793645][T11936] RBP: 00007ff4835ad090 R08: 0000000000000000 R09: 0000000000000000
[  285.793657][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.793669][T11936] R13: 00007ff482a16038 R14: 00007ff482a15fa0 R15: 00007fff634c9a88
[  285.793703][T11936]  </TASK>
[  286.012371][T11938] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  286.622996][T11978] openvswitch: netlink: Missing key (keys=40, expected=100)
[  287.685045][T12051] IPv6: NLM_F_REPLACE set, but no existing node found!
[  287.773485][T12054] __nla_validate_parse: 10 callbacks suppressed
[  287.773507][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'.
[  287.844038][T12051] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  287.861555][T12057] netlink: 'syz.3.1670': attribute type 1 has an invalid length.
[  288.190578][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'.
[  288.346097][T12073] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1674'.
[  288.555021][T12088] Cannot find del_set index 49151 as target
[  288.825534][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'.
[  288.834536][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'.
[  288.862016][T12106] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1684'.
[  289.063790][T12118] netlink: 'syz.4.1688': attribute type 2 has an invalid length.
[  289.196521][T12126] netlink: 'syz.0.1691': attribute type 7 has an invalid length.
[  289.208209][T12126] netlink: 'syz.0.1691': attribute type 8 has an invalid length.
[  289.222081][T12127] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1691'.
[  289.354934][T12135] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  289.553977][T12152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1699'.
[  289.577217][T12152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1699'.
[  289.599623][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'.
[  289.615470][T12152] gretap1: entered promiscuous mode
[  289.621007][T12152] gretap1: entered allmulticast mode
[  289.845278][T12168] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  289.855994][T12164] unsupported nla_type 512
[  290.013008][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.064119][T12177] netlink: 'syz.0.1706': attribute type 2 has an invalid length.
[  290.173793][T12191] netlink: 'syz.2.1708': attribute type 3 has an invalid length.
[  290.343539][T12200] �
: renamed from veth1_vlan (while UP)
[  290.390127][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.399573][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.407908][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.418282][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.427757][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.436187][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.446029][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.454388][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.463593][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.472994][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.585898][T12214] netlink: 'syz.4.1716': attribute type 10 has an invalid length.
[  290.901940][T12224] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  291.001784][T12230] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  291.240604][T12242] netlink: 'syz.4.1725': attribute type 1 has an invalid length.
[  291.453517][T12257] syzkaller0: entered promiscuous mode
[  291.463253][T12257] syzkaller0: entered allmulticast mode
[  291.935451][T12280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.953230][T12280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.184519][T12282] netlink: 'syz.3.1740': attribute type 1 has an invalid length.
[  293.033367][T12282] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  293.165998][T12288] syzkaller1: entered promiscuous mode
[  293.183690][T12288] syzkaller1: entered allmulticast mode
[  293.681560][T12318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.687867][T12327] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  294.107433][T12339] netlink: 'syz.2.1755': attribute type 1 has an invalid length.
[  294.153262][T12341] netlink: 'syz.0.1754': attribute type 4 has an invalid length.
[  294.428187][T12353] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  294.473849][T12356] __nla_validate_parse: 12 callbacks suppressed
[  294.473867][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1757'.
[  294.509857][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'.
[  294.746574][T12378] netlink: 'syz.0.1763': attribute type 3 has an invalid length.
[  294.934831][T12390] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  295.670833][  T106] net_ratelimit: 16 callbacks suppressed
[  295.670854][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.717178][T12405] syzkaller0: entered promiscuous mode
[  295.742742][T12405] syzkaller0: entered allmulticast mode
[  295.798862][ T6729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.895689][T12414] netlink: 'syz.3.1777': attribute type 1 has an invalid length.
[  295.911621][T12417] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1779'.
[  295.970975][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1780'.
[  295.992897][T12414] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  296.046625][T12425] 8021q: adding VLAN 0 to HW filter on device bond6
[  296.054851][ T1028] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  296.150467][ T6729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.159736][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.170119][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.179839][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.189965][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.200228][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.200377][ T1154] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  296.410202][T12440] 8021q: adding VLAN 0 to HW filter on device bond4
[  296.422959][T12440] bond0: (slave bond4): Enslaving as an active interface with a down link
[  296.459545][T12448] netlink: 'syz.1.1788': attribute type 83 has an invalid length.
[  296.480104][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  296.530777][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'.
[  296.554963][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'.
[  296.583053][T12442] netlink: 'syz.3.1786': attribute type 14 has an invalid length.
[  296.595631][T12442] netlink: 'syz.3.1786': attribute type 13 has an invalid length.
[  296.670573][T12458] syzkaller0: entered promiscuous mode
[  296.676125][T12458] syzkaller0: entered allmulticast mode
[  296.817669][T12462] xt_CT: No such helper "syz1"
[  297.063703][T12482] netlink: 'syz.1.1798': attribute type 1 has an invalid length.
[  297.175276][T12482] 8021q: adding VLAN 0 to HW filter on device bond7
[  297.190011][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  297.233776][T12490] netlink: 580 bytes leftover after parsing attributes in process `syz.2.1797'.
[  297.255741][T12495] netlink: 'syz.3.1801': attribute type 1 has an invalid length.
[  297.306902][T12491] 8021q: adding VLAN 0 to HW filter on device bond7
[  297.315274][T12491] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  297.334107][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1798'.
[  297.345922][T12491] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  297.434775][T12482] veth7: entered promiscuous mode
[  297.447468][T12482] bond7: (slave veth7): Enslaving as an active interface with a down link
[  297.462919][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'.
[  297.502276][T12501] 8021q: adding VLAN 0 to HW filter on device bond7
[  297.539966][T12504] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address
[  297.558141][T12504] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  297.571014][T12504] bond7: (slave xfrm1): making interface the new active one
[  297.579335][T12504] bond7: (slave xfrm1): Enslaving as an active interface with an up link
[  297.635199][T12508] bond7 (unregistering): (slave xfrm1): Releasing backup interface
[  297.665371][T12508] bond7 (unregistering): Released all slaves
[  298.079619][T12535] ipt_REJECT: TCP_RESET invalid for non-tcp
[  298.086947][T12536] ipt_REJECT: TCP_RESET invalid for non-tcp
[  298.368875][T12560] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  298.381258][T12548] bond3 (unregistering): Released all slaves
[  298.670273][T12568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.081981][T12597] bond4 (unregistering): Released all slaves
[  299.404788][T12624] netlink: 'syz.4.1832': attribute type 1 has an invalid length.
[  299.433558][T12623] netlink: 'syz.4.1832': attribute type 1 has an invalid length.
[  299.533207][T12631] netlink: 'syz.3.1833': attribute type 1 has an invalid length.
[  299.575655][T12631] bond7: entered promiscuous mode
[  299.582111][T12631] 8021q: adding VLAN 0 to HW filter on device bond7
[  299.661190][T12627] 8021q: adding VLAN 0 to HW filter on device bond7
[  299.690545][T12627] bond7: (slave gre3): The slave device specified does not support setting the MAC address
[  299.701569][T12627] bond7: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  299.716260][T12627] bond7: (slave gre3): making interface the new active one
[  299.737952][T12627] gre3: entered promiscuous mode
[  299.745020][T12627] bond7: (slave gre3): Enslaving as an active interface with an up link
[  299.756095][T12642] __nla_validate_parse: 15 callbacks suppressed
[  299.756113][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  300.379590][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  300.823428][T12689] netlink: 'syz.0.1844': attribute type 4 has an invalid length.
[  300.870681][  T106] net_ratelimit: 40 callbacks suppressed
[  300.870702][  T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.063407][T12697] netlink: 'syz.3.1848': attribute type 1 has an invalid length.
[  301.121597][T12697] 8021q: adding VLAN 0 to HW filter on device bond8
[  301.261980][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.274749][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.292970][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.301829][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.331502][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'.
[  301.342319][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.392143][T12710] bond8: (slave gretap3): making interface the new active one
[  301.427119][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.436789][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.475660][T12710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.484307][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.500796][T12710] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  301.641090][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'.
[  301.662555][T12720] bond0: entered promiscuous mode
[  301.667746][T12720] bond_slave_0: entered promiscuous mode
[  301.675470][T12720] bond_slave_1: entered promiscuous mode
[  301.686011][T12720] gretap0: entered promiscuous mode
[  301.694396][T12720] hsr1: entered promiscuous mode
[  301.786661][T12727] netlink: 'syz.2.1854': attribute type 21 has an invalid length.
[  301.805675][T12727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'.
[  301.830140][T12727] netlink: 'syz.2.1854': attribute type 21 has an invalid length.
[  301.847732][T12727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'.
[  301.935597][T12734] netlink: 'syz.2.1854': attribute type 3 has an invalid length.
[  302.002718][T12745] SET target dimension over the limit!
[  302.026879][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1857'.
[  302.047362][T12740] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  302.195850][T12757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1861'.
[  302.317612][T12766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1863'.
[  302.391248][T12774] netlink: 'syz.0.1865': attribute type 5 has an invalid length.
[  302.577839][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  303.062415][T12800] syzkaller0: entered promiscuous mode
[  303.067962][T12800] syzkaller0: entered allmulticast mode
[  303.698249][T12841] xt_hashlimit: size too large, truncated to 1048576
[  304.031557][T12860] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  304.137442][T12860] team1: entered promiscuous mode
[  304.146692][T12860] team1: entered allmulticast mode
[  304.811164][T12898] __nla_validate_parse: 10 callbacks suppressed
[  304.811183][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'.
[  305.068163][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'.
[  305.099155][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'.
[  305.139936][T12912] netlink: 'syz.2.1906': attribute type 3 has an invalid length.
[  305.282414][T12919] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1909'.
[  305.310124][T12929] x_tables: duplicate underflow at hook 1
[  305.843716][T12959] netlink: 'syz.3.1920': attribute type 1 has an invalid length.
[  305.897741][T12968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1920'.
[  305.992819][T12962] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1922'.
[  306.002468][ T1154] net_ratelimit: 13 callbacks suppressed
[  306.002488][ T1154] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.037762][T12971] netlink: 'syz.4.1923': attribute type 178 has an invalid length.
[  306.075754][T12975] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1924'.
[  306.092041][T12975] xt_policy: neither incoming nor outgoing policy selected
[  306.144716][ T6732] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.275773][T12985] tipc: Started in network mode
[  306.281147][T12985] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  306.294382][T12985] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  306.311866][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[  306.369432][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.410518][T12991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1929'.
[  306.491357][ T6732] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.619102][ T6027] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.672703][T13002] IPVS: length: 239 != 24
[  306.704796][T13002] xt_hashlimit: size too large, truncated to 1048576
[  306.748806][ T6027] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.890490][ T6027] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  306.998860][ T6422] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  307.118588][ T6422] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  307.214097][T13021] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  307.254194][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  307.588856][T13047] sctp: [Deprecated]: syz.0.1945 (pid 13047) Use of int in max_burst socket option.
[  307.588856][T13047] Use struct sctp_assoc_value instead
[  307.616653][T13048] sctp: [Deprecated]: syz.0.1945 (pid 13048) Use of int in maxseg socket option.
[  307.616653][T13048] Use struct sctp_assoc_value instead
[  307.645773][T13050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'.
[  308.229661][T13080] syzkaller1: entered promiscuous mode
[  308.248595][T13080] syzkaller1: entered allmulticast mode
[  308.331926][T13083] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  308.608532][T13095] batadv1: entered allmulticast mode
[  308.974180][T13118] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  309.207530][T13133] netlink: 'syz.0.1973': attribute type 12 has an invalid length.
[  309.439325][T13148] netlink: 'syz.3.1976': attribute type 30 has an invalid length.
[  309.536917][T13155] xt_TPROXY: Can be used only with -p tcp or -p udp
[  309.984329][T13174] netlink: 'syz.3.1982': attribute type 3 has an invalid length.
[  310.162788][T13179] syzkaller0: entered promiscuous mode
[  310.168354][T13179] syzkaller0: entered allmulticast mode
[  310.230265][T13179] syzkaller0: left promiscuous mode
[  310.680175][T13208] __nla_validate_parse: 10 callbacks suppressed
[  310.680195][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1995'.
[  310.919152][T13222] netlink: 'syz.0.1998': attribute type 20 has an invalid length.
[  310.965697][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'.
[  311.008731][T13222] netlink: 'syz.0.1998': attribute type 20 has an invalid length.
[  311.026840][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'.
[  311.049230][T13035] net_ratelimit: 26 callbacks suppressed
[  311.049253][T13035] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  311.063152][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'.
[  311.195248][T13237] veth0: entered promiscuous mode
[  311.212291][T13237] veth0: left promiscuous mode
[  311.228024][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'.
[  311.237302][T13035] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  311.320951][T13244] Cannot find set identified by id 65534 to match
[  311.332258][T13244] Cannot find set identified by id 65534 to match
[  311.464804][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  311.599216][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  311.787562][T13265] bond5: option miimon: invalid value (18446744073709551585)
[  311.797022][T13265] bond5: option miimon: allowed values 0 - 2147483647
[  311.809863][T13265] bond5 (unregistering): Released all slaves
[  311.868767][ T6733] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.025020][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.057945][T13285] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.091106][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'.
[  312.114513][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2017'.
[  312.161092][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.299657][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.380656][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'.
[  312.464729][T13313] vlan2: entered allmulticast mode
[  312.472861][T13313] geneve1: entered allmulticast mode
[  312.518614][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.639990][T13035] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  312.911075][T13337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.931904][T13336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.953181][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'.
[  312.985610][T13351] ieee802154 phy1 wpan1: encryption failed: -22
[  313.020670][T13345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  313.214772][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'.
[  313.269005][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  313.275153][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  313.295634][T13033] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  313.329907][T13033] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  313.339015][T13033] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  313.347771][T13033] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  313.494360][T13378] netlink: 'syz.4.2039': attribute type 1 has an invalid length.
[  313.559262][T13378] xt_TCPMSS: Only works on TCP SYN packets
[  313.714739][T13384] bond8: invalid ARP target 0.0.0.0 specified for addition
[  313.725179][T13384] bond8: option arp_ip_target: invalid value (0)
[  313.737375][T13384] bond8 (unregistering): Released all slaves
[  314.391035][   T10] IPVS: starting estimator thread 0...
[  314.400309][T13422] IPVS: ip_vs_edit_dest(): server weight less than zero
[  314.528580][T13423] IPVS: using max 27 ests per chain, 64800 per kthread
[  314.680869][ T4479] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa0
[  315.557579][T13468] syzkaller0: entered promiscuous mode
[  315.570535][T13468] syzkaller0: entered allmulticast mode
[  316.047564][T13500] netlink: 'syz.3.2070': attribute type 1 has an invalid length.
[  316.106938][T13500] bond10: entered promiscuous mode
[  316.115155][T13500] 8021q: adding VLAN 0 to HW filter on device bond10
[  316.163383][T13499] bond10: (slave bridge4): making interface the new active one
[  316.173056][T13499] bridge4: entered promiscuous mode
[  316.187573][T13499] bridge4: left promiscuous mode
[  316.265968][T13505] smc: net device wlan0 applied user defined pnetid SYZ0
[  316.288488][   T30] net_ratelimit: 26 callbacks suppressed
[  316.288510][   T30] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  316.397544][T13516] delete_channel: no stack
[  316.409621][   T30] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  316.437589][T13518] __nla_validate_parse: 11 callbacks suppressed
[  316.437611][T13518] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2075'.
[  316.541638][ T1154] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  316.652912][T13534] netlink: 'syz.0.2079': attribute type 25 has an invalid length.
[  316.700475][ T6733] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  316.710187][T13538] ieee802154 phy1 wpan1: encryption failed: -22
[  316.718620][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'.
[  316.787347][T13542] netlink: 'syz.2.2082': attribute type 2 has an invalid length.
[  316.797657][T13542] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  316.810339][T13543] netlink: 'syz.2.2082': attribute type 2 has an invalid length.
[  316.818740][T13543] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  316.828995][ T6733] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  316.948764][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  317.073591][ T6735] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  317.202862][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  317.233860][T13571] netlink: 'syz.4.2091': attribute type 29 has an invalid length.
[  317.260094][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'.
[  317.478577][ T6733] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  317.589837][ T4479] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  317.660193][T13590] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2095'.
[  317.679500][T13583] syzkaller1: entered promiscuous mode
[  317.688930][T13583] syzkaller1: entered allmulticast mode
[  318.091758][T13614] syzkaller1: entered promiscuous mode
[  318.097349][T13614] syzkaller1: entered allmulticast mode
[  318.133793][T13617] netlink: 'syz.2.2104': attribute type 4 has an invalid length.
[  318.173929][T13617] netlink: 'syz.2.2104': attribute type 4 has an invalid length.
[  318.395819][T13626] netlink: 'syz.4.2105': attribute type 10 has an invalid length.
[  318.573588][T13640] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  318.584552][T13640] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  318.976381][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2119'.
[  319.026403][T13666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2120'.
[  319.043831][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2120'.
[  319.060574][T13666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2120'.
[  319.157585][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'.
[  319.185081][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'.
[  319.387393][T13688] x_tables: duplicate underflow at hook 3
[  319.880913][T13708] �: renamed from vxcan1 (while UP)
[  320.007059][T13709] 8021q: adding VLAN 0 to HW filter on device bond5
[  320.030094][T13709] bond4: (slave bond5): making interface the new active one
[  320.038321][T13709] bond4: (slave bond5): Enslaving as an active interface with an up link
[  320.104067][T13702] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  320.116130][T13724] vcan0: tx address claim with dest, not broadcast
[  320.124995][T13715] 8021q: adding VLAN 0 to HW filter on device bond4
[  321.359673][ T1154] net_ratelimit: 25 callbacks suppressed
[  321.359693][ T1154] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  321.423637][T13785] validate_nla: 1 callbacks suppressed
[  321.423657][T13785] netlink: 'syz.2.2157': attribute type 5 has an invalid length.
[  321.445019][T13785] __nla_validate_parse: 7 callbacks suppressed
[  321.445038][T13785] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2157'.
[  321.479490][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'.
[  321.499228][T13791] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  321.509202][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'.
[  321.641829][T13792] hsr_slave_1 (unregistering): left promiscuous mode
[  321.679278][   T30] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  321.709649][T13795] bridge0: port 4(syz_tun) entered blocking state
[  321.716399][T13795] bridge0: port 4(syz_tun) entered disabled state
[  321.723783][T13795] syz_tun: entered allmulticast mode
[  321.761169][T13795] syz_tun: entered promiscuous mode
[  321.838850][ T1028] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  321.853058][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2165'.
[  321.944106][T13813] IPVS: Unknown mcast interface: vcan0
[  321.974053][T13813] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2164'.
[  322.025544][T13818] ieee802154 phy1 wpan1: encryption failed: -90
[  322.032687][T13813] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2164'.
[  322.088728][   T30] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  322.106145][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'.
[  322.134845][T13821] syzkaller0: entered allmulticast mode
[  322.232550][ T1154] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  322.368812][ T1154] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  322.402157][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  322.488750][ T6426] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  322.530885][T13845] netlink: 197004 bytes leftover after parsing attributes in process `syz.2.2178'.
[  322.676879][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'.
[  322.940603][T13869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2180'.
[  323.046952][T13850] bond_slave_0: left promiscuous mode
[  323.060202][T13850] bond_slave_1: left promiscuous mode
[  323.065789][T13850] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  323.496041][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.531215][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.727229][T13850] vlan0: left promiscuous mode
[  323.837650][T13850] macsec0: left promiscuous mode
[  323.842969][T13850] macsec0: left allmulticast mode
[  323.985810][T13850] gre1: left promiscuous mode
[  323.994722][T13850] gre1: left allmulticast mode
[  324.069598][T13850] veth1_vlan: left allmulticast mode
[  324.079695][T13850] macvtap1: left promiscuous mode
[  324.084798][T13850] macvtap1: left allmulticast mode
[  324.109364][T13850] gretap1: left promiscuous mode
[  324.115935][T13850] gretap1: left allmulticast mode
[  324.243295][T13850] veth7: left allmulticast mode
[  324.309686][T13850] bond7: left promiscuous mode
[  324.314841][T13850] gre3: left promiscuous mode
[  324.358239][T13850] bond10: left promiscuous mode
[  324.388907][T13848] vlan2: entered promiscuous mode
[  324.394020][T13848] bridge0: entered promiscuous mode
[  324.429284][T13855] geneve4: entered promiscuous mode
[  324.434571][T13855] geneve4: entered allmulticast mode
[  324.490058][T13035] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  324.523884][T13035] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  324.539029][ T6027] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  324.593294][ T6027] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  324.663983][T13891] netlink: 'syz.3.2186': attribute type 7 has an invalid length.
[  324.702057][T13891] netlink: 'syz.3.2186': attribute type 8 has an invalid length.
[  324.740692][T13897] : entered promiscuous mode
[  324.847258][T13902] ip6gre0: Master is either lo or non-ether device
[  324.851586][T13904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.904711][T13906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.623167][T13948] syzkaller1: entered promiscuous mode
[  325.641049][T13948] syzkaller1: entered allmulticast mode
[  326.151673][T13970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.294405][T13978] xfrm1: entered promiscuous mode
[  326.313517][T13978] xfrm1: entered allmulticast mode
[  326.591445][T13989] __nla_validate_parse: 12 callbacks suppressed
[  326.591465][T13989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2211'.
[  326.617778][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'.
[  326.796538][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'.
[  327.244827][T14036] syz.4.2222: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  327.288705][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.4.2222 Not tainted syzkaller #0 PREEMPT(full) 
[  327.288737][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  327.288750][T14036] Call Trace:
[  327.288759][T14036]  <TASK>
[  327.288776][T14036]  dump_stack_lvl+0xe8/0x150
[  327.288809][T14036]  warn_alloc+0x249/0x340
[  327.288835][T14036]  ? stack_trace_save+0xa9/0x100
[  327.288871][T14036]  ? __pfx_warn_alloc+0x10/0x10
[  327.288902][T14036]  ? kasan_save_track+0x4f/0x80
[  327.288922][T14036]  ? kasan_save_track+0x3e/0x80
[  327.288942][T14036]  ? __kasan_kmalloc+0x93/0xb0
[  327.288963][T14036]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  327.288982][T14036]  ? xskq_create+0x56/0x170
[  327.289008][T14036]  ? xsk_setsockopt+0x54c/0x990
[  327.289029][T14036]  ? do_sock_setsockopt+0x17c/0x1b0
[  327.289059][T14036]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  327.289089][T14036]  ? do_syscall_64+0xe2/0xf80
[  327.289122][T14036]  __vmalloc_node_range_noprof+0x132/0x1730
[  327.289179][T14036]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  327.289208][T14036]  ? __kasan_kmalloc+0x93/0xb0
[  327.289237][T14036]  vmalloc_user_noprof+0xad/0xe0
[  327.289258][T14036]  ? xskq_create+0xbf/0x170
[  327.289284][T14036]  xskq_create+0xbf/0x170
[  327.289314][T14036]  xsk_init_queue+0xad/0x110
[  327.289342][T14036]  xsk_setsockopt+0x54c/0x990
[  327.289370][T14036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.289394][T14036]  ? __pfx_aa_sk_perm+0x10/0x10
[  327.289426][T14036]  ? aa_sock_opt_perm+0xff/0x1a0
[  327.289459][T14036]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  327.289479][T14036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.289504][T14036]  do_sock_setsockopt+0x17c/0x1b0
[  327.289541][T14036]  __x64_sys_setsockopt+0x13d/0x1b0
[  327.289580][T14036]  do_syscall_64+0xe2/0xf80
[  327.289610][T14036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.289639][T14036]  ? trace_irq_disable+0x37/0x100
[  327.289667][T14036]  ? clear_bhb_loop+0x60/0xb0
[  327.289693][T14036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.289714][T14036] RIP: 0033:0x7f279c99acb9
[  327.289734][T14036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.289751][T14036] RSP: 002b:00007f279d8a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.289781][T14036] RAX: ffffffffffffffda RBX: 00007f279cc15fa0 RCX: 00007f279c99acb9
[  327.289796][T14036] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  327.289808][T14036] RBP: 00007f279ca08bf7 R08: 0000000000000004 R09: 0000000000000000
[  327.289821][T14036] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.289834][T14036] R13: 00007f279cc16038 R14: 00007f279cc15fa0 R15: 00007ffe8cf23578
[  327.289866][T14036]  </TASK>
[  327.289888][T14036] Mem-Info:
[  327.373476][T14044] netlink: 'syz.3.2224': attribute type 2 has an invalid length.
[  327.522511][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.542302][T14036] active_anon:5746 inactive_anon:0 isolated_anon:0
[  327.542302][T14036]  active_file:3400 inactive_file:40012 isolated_file:0
[  327.542302][T14036]  unevictable:768 dirty:100 writeback:0
[  327.542302][T14036]  slab_reclaimable:11332 slab_unreclaimable:105151
[  327.542302][T14036]  mapped:29382 shmem:1352 pagetables:1173
[  327.542302][T14036]  sec_pagetables:0 bounce:0
[  327.542302][T14036]  kernel_misc_reclaimable:0
[  327.542302][T14036]  free:1317469 free_pcp:15185 free_cma:0
[  327.638618][T14036] Node 0 active_anon:22984kB inactive_anon:0kB active_file:13600kB inactive_file:159848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117628kB dirty:400kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14136kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.691754][T14036] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.734478][T14036] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  327.798176][T14036] lowmem_reserve[]: 0 2495 2497 2497 2497
[  327.804386][T14036] Node 0 DMA32 free:1369312kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22684kB inactive_anon:0kB active_file:13600kB inactive_file:159848kB unevictable:1536kB writepending:400kB zspages:0kB present:3129332kB managed:2555788kB mlocked:0kB bounce:0kB free_pcp:45180kB local_pcp:27548kB free_cma:0kB
[  327.844057][T14052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.856425][T14052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.868002][T14036] lowmem_reserve[]: 0 0 1 1 1
[  327.873642][T14036] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  327.955206][T14036] lowmem_reserve[]: 0 0 0 0 0
[  327.965312][T14057] sock: sock_set_timeout: `syz.1.2229' (pid 14057) tries to set negative timeout
[  327.974782][T14036] Node 1 Normal free:3885332kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16004kB local_pcp:6532kB free_cma:0kB
[  328.022152][T14036] lowmem_reserve[]: 0 0 0 0 0
[  328.026960][T14036] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  328.051584][T14036] Node 0 DMA32: 4723*4kB (UME) 2637*8kB (UM) 657*16kB (UME) 333*32kB (UM) 925*64kB (UME) 277*128kB (UE) 77*256kB (U) 30*512kB (UE) 7*1024kB (U) 5*2048kB (UE) 284*4096kB (UM) = 1371556kB
[  328.088997][T14036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  328.107218][T14036] Node 1 Normal: 167*4kB (UE) 39*8kB (UME) 38*16kB (UME) 87*32kB (UME) 30*64kB (UME) 7*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885332kB
[  328.128056][T14036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.138059][T14036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.165939][T14036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  328.184579][T14036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  328.208003][T14036] 44760 total pagecache pages
[  328.236008][T14036] 0 pages in swap cache
[  328.249188][T14036] Free swap  = 124996kB
[  328.258724][T14036] Total swap = 124996kB
[  328.267733][T14036] 2097051 pages RAM
[  328.278502][T14036] 0 pages HighMem/MovableOnly
[  328.290759][T14036] 426142 pages reserved
[  328.295064][T14036] 0 pages cma reserved
[  328.386914][T14073] netlink: 'syz.0.2233': attribute type 6 has an invalid length.
[  328.467879][T14079] netlink: 'syz.4.2235': attribute type 1 has an invalid length.
[  328.476841][T14079] netlink: 'syz.4.2235': attribute type 1 has an invalid length.
[  328.571878][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'.
[  328.615244][T14087] 8021q: adding VLAN 0 to HW filter on device bond9
[  328.713001][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'.
[  328.746484][T14097] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  328.822045][T14099] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2241'.
[  328.852555][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2242'.
[  328.865722][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'.
[  328.896380][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'.
[  329.119160][T14118] x_tables: duplicate entry at hook 2
[  329.164144][T14122] netlink: 'syz.3.2248': attribute type 1 has an invalid length.
[  329.186055][T14122] netlink: 'syz.3.2248': attribute type 1 has an invalid length.
[  329.194529][T14122] netlink: 'syz.3.2248': attribute type 1 has an invalid length.
[  329.233845][T14122] netlink: 'syz.3.2248': attribute type 2 has an invalid length.
[  329.245556][T14122] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2248'.
[  329.266058][T14129] openvswitch: netlink: Multiple metadata blocks provided
[  329.276840][T14129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.285505][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.350096][T14129] syzkaller0: entered promiscuous mode
[  329.355739][T14129] syzkaller0: entered allmulticast mode
[  329.638598][T14146] netlink: 'syz.3.2257': attribute type 1 has an invalid length.
[  329.726907][T14160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.778599][T14156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.804170][T14163] netlink: 'syz.3.2261': attribute type 22 has an invalid length.
[  329.822906][T13035] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.835448][T13035] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.859246][T13035] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.881857][T13035] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.956441][T14172] ip6gre1: entered promiscuous mode
[  329.985970][T14172] ip6gre1: entered allmulticast mode
[  330.015546][T13035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.032848][T13035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.041488][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.198325][T14181] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.213296][T14181] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.367721][T14181] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.385526][T14181] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.522777][T14181] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.540225][T14181] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.562118][T14208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.569082][T14206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.614369][T14181] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.631912][T14181] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.668778][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.774526][ T6027] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.783656][ T6027] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.808489][T13035] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.817719][T13035] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.869633][  T106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.909337][T13035] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.925894][T13035] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.983963][ T1028] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.992696][ T1028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.501343][T14265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.524313][T14265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.589389][T14272] erspan0: refused to change device tx_queue_len
[  331.595981][T14272] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  332.335063][T14312] __nla_validate_parse: 19 callbacks suppressed
[  332.335103][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2307'.
[  332.493069][T14317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.727477][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2315'.
[  332.864639][T14339] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2317'.
[  332.892155][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  332.904102][T14339] syzkaller0: entered promiscuous mode
[  332.918527][T14339] syzkaller0: entered allmulticast mode
[  333.187436][T14352] validate_nla: 7 callbacks suppressed
[  333.187456][T14352] netlink: 'syz.4.2320': attribute type 2 has an invalid length.
[  333.272594][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.507320][T14363] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2324'.
[  333.662342][T14373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.674868][T14373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.697459][T14368] netlink: 'syz.3.2326': attribute type 10 has an invalid length.
[  333.732960][T14368] team0: Port device dummy0 added
[  333.990476][T14399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2336'.
[  334.102849][T14407] macvtap1: entered promiscuous mode
[  334.109823][T14407] macvtap1: entered allmulticast mode
[  334.115412][T14407] veth1_vlan: entered allmulticast mode
[  334.209742][T14416] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  334.336394][T14423] netem: change failed
[  334.468617][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  334.478842][T14433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2349'.
[  334.594532][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2351'.
[  334.654326][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'.
[  334.758628][T14448] netlink: 'syz.3.2351': attribute type 1 has an invalid length.
[  335.005125][T14467] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2354'.
[  335.347803][T14497] tap0: tun_chr_ioctl cmd 2148553947
[  336.100799][T14489] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  336.107527][T14489] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  336.125946][T14489] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  336.136332][T14489] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  336.155375][T14489] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  336.164315][T14489] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  336.180970][T14489] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  336.187016][T14489] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  336.202075][T14489] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  336.209059][T14489] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  337.827802][T14454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.020128][T14582] netlink: 'syz.2.2364': attribute type 9 has an invalid length.
[  338.030757][T14582] __nla_validate_parse: 5 callbacks suppressed
[  338.030779][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'.
[  338.194946][T14591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2367'.
[  338.220710][T14593] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2369'.
[  338.240184][T14593] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2369'.
[  338.396902][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.405367][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.413987][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.640293][T14618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2373'.
[  338.654948][T14621] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2374'.
[  338.703541][T14624] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  338.734966][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'.
[  338.744441][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'.
[  338.868772][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'.
[  338.882834][T14629] netlink: 'syz.2.2377': attribute type 1 has an invalid length.
[  338.926350][T14629] netlink: 'syz.2.2377': attribute type 1 has an invalid length.
[  339.082920][T14648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.120521][T14640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.129700][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.334019][T14632] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2378'.
[  339.607535][T14667] netlink: 'syz.1.2382': attribute type 3 has an invalid length.
[  339.949695][T14695] syzkaller0: entered promiscuous mode
[  339.967412][T14695] syzkaller0: entered allmulticast mode
[  340.099591][T14699] netlink: 'syz.1.2392': attribute type 5 has an invalid length.
[  340.297041][T14719] netlink: 'syz.0.2396': attribute type 1 has an invalid length.
[  340.544626][T14734] sctp: [Deprecated]: syz.3.2401 (pid 14734) Use of int in maxseg socket option.
[  340.544626][T14734] Use struct sctp_assoc_value instead
[  340.678990][T14738] netlink: 'syz.1.2402': attribute type 1 has an invalid length.
[  340.727642][T14740] x_tables: duplicate underflow at hook 2
[  340.770578][T14742] netlink: 'syz.0.2405': attribute type 10 has an invalid length.
[  340.847792][T14742] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  340.987989][T14751] 
s5���: renamed from vlan1 (while UP)
[  341.005535][T14753] xt_ipcomp: unknown flags 1D
[  341.071464][T14755] 8021q: adding VLAN 0 to HW filter on device bond10
[  341.089529][T14754] : entered promiscuous mode
[  341.094587][T14753] tipc: Enabling of bearer <dth:sye> rejected, media not registered
[  341.388709][T14787] netlink: 'syz.4.2419': attribute type 21 has an invalid length.
[  341.437422][T14787] netlink: 'syz.4.2419': attribute type 5 has an invalid length.
[  341.611902][T14798] 8021q: adding VLAN 0 to HW filter on device bond12
[  341.780174][T14815] netlink: 'syz.3.2427': attribute type 12 has an invalid length.
[  341.855636][T14818] vlan2: entered allmulticast mode
[  341.872143][T14818] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  342.085532][T14834] 8021q: adding VLAN 0 to HW filter on device bond6
[  342.137026][T14840] bond6: (slave geneve2): making interface the new active one
[  342.168973][T14840] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  342.263715][T14834] veth15: entered promiscuous mode
[  342.282273][T14834] bond6: (slave veth15): Enslaving as an active interface with a down link
[  342.440885][T14849] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  342.508254][T14850] delete_channel: no stack
[  342.611822][T14864] SET target dimension over the limit!
[  342.869348][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.911478][T14889] sctp: [Deprecated]: syz.3.2449 (pid 14889) Use of int in max_burst socket option.
[  342.911478][T14889] Use struct sctp_assoc_value instead
[  343.031240][T14897] syzkaller0: entered promiscuous mode
[  343.036884][T14897] syzkaller0: entered allmulticast mode
[  343.508931][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  343.638076][T14910] __nla_validate_parse: 20 callbacks suppressed
[  343.638093][T14910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2455'.
[  344.150431][ T6027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.744115][T14917] macvtap1: entered promiscuous mode
[  344.762708][T14917] macvtap1: entered allmulticast mode
[  344.764381][T14932] netlink: 8240 bytes leftover after parsing attributes in process `syz.4.2461'.
[  344.789215][T14917] veth1_vlan: entered allmulticast mode
[  345.077740][T14943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.099842][T14943] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2464'.
[  345.982765][T14963] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2470'.
[  345.992466][T14963] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  346.052995][T14963] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2470'.
[  346.132570][T14963] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  346.144338][T14968] validate_nla: 6 callbacks suppressed
[  346.144358][T14968] netlink: 'syz.3.2473': attribute type 1 has an invalid length.
[  346.330999][T14977] bond5: option all_slaves_active: invalid value (222)
[  346.345668][T14977] bond5 (unregistering): Released all slaves
[  346.605872][T14986] syzkaller0: entered promiscuous mode
[  346.622349][T14986] syzkaller0: entered allmulticast mode
[  346.642395][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'.
[  346.759196][T15009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.822364][T15001] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  347.911160][T15024] netlink: 'syz.0.2488': attribute type 1 has an invalid length.
[  347.919520][T15024] netlink: 'syz.0.2488': attribute type 2 has an invalid length.
[  348.409369][T15001] netlink: 'syz.1.2479': attribute type 6 has an invalid length.
[  348.529695][T15031] .: renamed from bridge_slave_1 (while UP)
[  348.587370][T15036] tipc: Failed to remove unknown binding: 66,0,0/430314159:4058393377/4058393378
[  348.589074][T15033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2493'.
[  348.611558][T15036] tipc: Failed to remove unknown binding: 66,0,0/430314159:4058393377/4058393378
[  348.639975][T15036] netlink: 'syz.2.2491': attribute type 7 has an invalid length.
[  348.666051][T15033] bond13: (slave gretap0): Device is not bonding slave
[  348.673139][T15036] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2491'.
[  348.703485][T15042] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2491'.
[  348.718064][T15033] bond13: option active_slave: invalid value (gretap0)
[  348.753070][T15033] bond13 (unregistering): Released all slaves
[  348.997818][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2499'.
[  349.009761][T15061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2498'.
[  349.023628][T15061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'.
[  349.194969][T15071] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  349.236935][T15071] syzkaller0: entered promiscuous mode
[  349.248677][T15071] syzkaller0: entered allmulticast mode
[  349.273751][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.578063][T15097] netlink: 'syz.3.2512': attribute type 10 has an invalid length.
[  349.671123][T15097] veth0_macvtap: left promiscuous mode
[  349.739874][T15097] team0: Device veth0_macvtap failed to register rx_handler
[  349.779410][T15104] nbd: couldn't find device at index 0
[  350.045682][T15116] erspan0: entered promiscuous mode
[  350.053456][T15120] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.2519'.
[  350.079267][T15120] netlink: ct family unspecified
[  350.080703][T15116] erspan0: entered allmulticast mode
[  350.095920][T15124] openvswitch: netlink: IP tunnel dst address not specified
[  350.136900][T15125] veth0: entered promiscuous mode
[  350.160234][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'.
[  350.189951][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'.
[  350.674624][T15156] ipvlan2: entered allmulticast mode
[  350.704514][T15156] batadv_slave_1: entered allmulticast mode
[  350.736884][T15156] batman_adv: batadv0: Adding interface: ipvlan2
[  350.756573][T15156] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.794295][T15156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.814156][T15156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.824659][T15156] batman_adv: batadv0: Interface activated: ipvlan2
[  350.907467][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2533'.
[  350.960171][T15175] netlink: 'syz.4.2533': attribute type 30 has an invalid length.
[  351.016013][T15175] bond5: option arp_missed_max: invalid value (0)
[  351.033561][T15184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.083420][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.103924][T15175] bond5: option arp_missed_max: allowed values 1 - 255
[  351.113939][T15184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.179532][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.192901][T15175] bond5 (unregistering): Released all slaves
[  351.219427][T15184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.228176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.242888][T15181] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  351.298776][T15184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.460361][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2537'.
[  351.479588][T15198] syzkaller1: entered promiscuous mode
[  351.485335][T15198] syzkaller1: entered allmulticast mode
[  351.803689][T15208] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  351.862856][T15208] bond7 (unregistering): Released all slaves
[  352.261745][T15243] x_tables: duplicate underflow at hook 2
[  352.463646][T15260] netlink: 'syz.3.2556': attribute type 1 has an invalid length.
[  352.488674][T15260] netlink: 'syz.3.2556': attribute type 7 has an invalid length.
[  352.528946][T15260] netlink: 'syz.3.2556': attribute type 8 has an invalid length.
[  352.559019][T15265] atomic_op ffff888057310198 conn xmit_atomic 0000000000000000
[  352.567410][T15260] NCSI netlink: No device for ifindex 65584
[  352.576051][T15265] ieee802154 phy1 wpan1: encryption failed: -22
[  352.614882][T15253] syzkaller1: entered promiscuous mode
[  352.624463][T15253] syzkaller1: entered allmulticast mode
[  352.973050][T15288] wg1 speed is unknown, defaulting to 1000
[  353.277076][T15311] netlink: 'syz.0.2577': attribute type 4 has an invalid length.
[  353.360611][T15311] `: renamed from bond0 (while UP)
[  353.499924][T15316] xt_hashlimit: overflow, rate too high: 0
[  353.581307][T15328] netlink: 'syz.0.2581': attribute type 1 has an invalid length.
[  353.589510][T15328] netlink: 'syz.0.2581': attribute type 4 has an invalid length.
[  353.672915][T15332] netlink: 'syz.4.2583': attribute type 4 has an invalid length.
[  353.681315][T15333] netlink: 'syz.4.2583': attribute type 4 has an invalid length.
[  353.933132][T15334] can: request_module (can-proto-3) failed.
[  354.006491][T15354] __nla_validate_parse: 13 callbacks suppressed
[  354.006514][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'.
[  354.077096][T15341] wg1 speed is unknown, defaulting to 1000
[  354.225552][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'.
[  354.256440][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'.
[  354.399756][   T30] net_ratelimit: 9 callbacks suppressed
[  354.399777][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.138185][T15404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2606'.
[  355.222084][T15405] netlink: 'syz.4.2607': attribute type 1 has an invalid length.
[  355.267116][T15405] bond5: entered promiscuous mode
[  355.274967][T15405] bond5: entered allmulticast mode
[  355.281568][T15405] 8021q: adding VLAN 0 to HW filter on device bond5
[  355.313785][T15405] macvlan4: entered promiscuous mode
[  355.319284][T15405] macvlan4: entered allmulticast mode
[  355.375509][T15415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2611'.
[  355.386249][T15415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2611'.
[  355.448564][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'.
[  355.492866][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2611'.
[  355.623565][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2615'.
[  355.680874][T15441] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2616'.
[  356.078207][T15456] veth1_vlan (unregistering): left allmulticast mode
[  357.056680][T15491] ip6t_REJECT: ECHOREPLY is not supported
[  357.207437][T15507] netlink: 'syz.3.2633': attribute type 1 has an invalid length.
[  357.435756][T15513] wg1 speed is unknown, defaulting to 1000
[  357.716416][T15535] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  357.717414][T15532] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  357.725565][T15535] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  357.768729][T15532] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  358.229258][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  358.236817][ T3499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.245698][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.312798][T15555] netlink: 'syz.1.2648': attribute type 2 has an invalid length.
[  358.587177][T15577] netlink: 'syz.1.2654': attribute type 16 has an invalid length.
[  358.761668][T15590] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  358.882199][T15590] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  359.088328][T15608] __nla_validate_parse: 8 callbacks suppressed
[  359.105004][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'.
[  359.147025][T15608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.169030][T15608] bond_slave_0: left allmulticast mode
[  359.184833][T15608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.195633][T15608] bond_slave_1: left allmulticast mode
[  359.211135][T15608] bond0 (unregistering): Released all slaves
[  359.512634][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.672704][T15641] veth0_to_bond: entered allmulticast mode
[  359.821651][T15651] sctp: [Deprecated]: syz.3.2674 (pid 15651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.821651][T15651] Use struct sctp_sack_info instead
[  360.061043][T15665] netlink: 'syz.3.2679': attribute type 1 has an invalid length.
[  360.081568][T15665] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2679'.
[  360.130594][T15667] netlink: 'syz.0.2680': attribute type 3 has an invalid length.
[  360.152631][T15667] ieee802154 phy1 wpan1: encryption failed: -22
[  360.345481][T15672] netlink: 'syz.2.2682': attribute type 10 has an invalid length.
[  360.529110][T15689] syzkaller0: entered promiscuous mode
[  360.539037][T15689] syzkaller0: entered allmulticast mode
[  360.563765][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2687'.
[  360.688205][T15700] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2690'.
[  360.730018][T15698] syzkaller0: entered promiscuous mode
[  360.735671][T15698] syzkaller0: entered allmulticast mode
[  360.821976][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'.
[  360.838668][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'.
[  361.055054][T15709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.117762][T15715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2695'.
[  361.197055][T15718] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  361.214525][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2696'.
[  361.431517][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.527067][T15735] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2702'.
[  361.549032][T15735] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  361.605056][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'.
[  362.649611][T15709] tipc: Resetting bearer <eth:syzkaller0>
[  362.674221][T15709] tipc: Disabling bearer <eth:syzkaller0>
[  362.692718][T13875] tipc: Node number set to 1
[  362.921617][T15750] netlink: 'syz.3.2704': attribute type 33 has an invalid length.
[  362.982665][T15748] syzkaller0: entered promiscuous mode
[  363.010874][T15756] vlan0: entered allmulticast mode
[  363.409449][T15783] netlink: 'syz.3.2715': attribute type 39 has an invalid length.
[  363.533336][T15794] ieee802154 phy1 wpan1: encryption failed: -22
[  363.821045][T15806] openvswitch: netlink: Missing key (keys=40, expected=80)
[  363.993527][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.002056][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.222367][T15829] __nla_validate_parse: 7 callbacks suppressed
[  364.222387][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2731'.
[  364.532259][T15848] netlink: 'syz.3.2738': attribute type 10 has an invalid length.
[  364.552192][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.581795][T15848] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  364.626051][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2738'.
[  364.655381][T15852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.663849][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.741580][T15858] .: renamed from bridge_slave_1 (while UP)
[  364.767128][T15858] veth0_virt_wifi: entered allmulticast mode
[  364.896850][T15867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.912566][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2744'.
[  364.948292][T15868] syzkaller0: entered promiscuous mode
[  364.962091][T15868] syzkaller0: entered allmulticast mode
[  365.368333][T15900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.377289][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.507274][ T5893] IPVS: starting estimator thread 0...
[  365.517855][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2758'.
[  365.571263][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2758'.
[  365.608472][T15911] IPVS: using max 28 ests per chain, 67200 per kthread
[  365.701952][T15918] wireguard0: entered promiscuous mode
[  365.716755][T15918] wireguard0: entered allmulticast mode
[  365.740352][T15918] team0: Device wireguard0 is of different type
[  366.109540][T15940] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  366.141377][T15944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2767'.
[  366.173637][T15940] 8021q: adding VLAN 0 to HW filter on device bond14
[  366.277000][T15947] bond14: (slave veth11): Enslaving as an active interface with a down link
[  366.307053][T15940] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  366.382346][T15954] bond14: (slave veth13): Enslaving as an active interface with a down link
[  366.403258][T15954] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2768'.
[  366.545736][T15971] Unsupported ieee802154 address type: 0
[  366.680772][T15982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2778'.
[  366.691998][T15982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2778'.
[  366.712066][T15982] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2778'.
[  366.758104][T15986] syzkaller0: entered promiscuous mode
[  366.764151][T15986] syzkaller0: entered allmulticast mode
[  366.784973][T15989] x_tables: duplicate underflow at hook 4
[  367.742048][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  367.754631][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  367.763763][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.775170][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.783035][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  367.825946][T16023] 8021q: VLANs not supported on caif0
[  367.841003][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  367.874951][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  367.883527][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.895587][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.907777][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  367.975612][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.024438][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.048208][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.103204][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.113667][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.156193][T16030] wg1 speed is unknown, defaulting to 1000
[  368.883178][T16075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.084979][T16030] chnl_net:caif_netlink_parms(): no params data found
[  369.229587][T16089] netlink: 'syz.0.2810': attribute type 10 has an invalid length.
[  369.246708][T16089] __nla_validate_parse: 4 callbacks suppressed
[  369.246727][T16089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2810'.
[  369.377665][T16030] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.387648][T16030] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.395855][T16030] bridge_slave_0: entered allmulticast mode
[  369.406874][T16030] bridge_slave_0: entered promiscuous mode
[  369.456480][T16030] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.465691][T16030] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.480435][T16030] bridge_slave_1: entered allmulticast mode
[  369.490741][T16030] bridge_slave_1: entered promiscuous mode
[  369.604788][T16030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.644732][T16114] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2817'.
[  369.661553][T16030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.782710][T16120] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2819'.
[  369.814720][T16030] team0: Port device team_slave_0 added
[  369.859268][T16030] team0: Port device team_slave_1 added
[  369.902413][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2820'.
[  369.915117][T16123] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2820'.
[  369.970159][T16030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.985351][T16135] netlink: 'syz.0.2824': attribute type 4 has an invalid length.
[  369.993236][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.993311][ T5838] Bluetooth: hci5: command tx timeout
[  370.025347][T16030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.038706][T16135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2824'.
[  370.058630][T16030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.065706][T16030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.093132][T16030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.136686][T16138] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2825'.
[  370.163781][T16138] netlink: 'syz.4.2825': attribute type 21 has an invalid length.
[  370.182200][T16138] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2825'.
[  370.336430][T16030] hsr_slave_0: entered promiscuous mode
[  370.346364][T16030] hsr_slave_1: entered promiscuous mode
[  370.353391][T16030] debugfs: 'hsr0' already exists in 'hsr'
[  370.359635][T16030] Cannot create hsr debugfs directory
[  370.391938][ T1154] net_ratelimit: 5 callbacks suppressed
[  370.391956][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.443355][T16148] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2828'.
[  370.455992][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2827'.
[  370.470995][T16152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.480347][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.690870][T16161] IPVS: ip_vs_add_dest(): server weight less than zero
[  370.740407][T16161] netlink: 'syz.3.2831': attribute type 15 has an invalid length.
[  370.821018][T16166] netlink: 'syz.4.2833': attribute type 1 has an invalid length.
[  370.849299][T16166] netlink: 'syz.4.2833': attribute type 1 has an invalid length.
[  370.966563][T16030] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.007683][T16030] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.176249][T16030] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.203633][T16030] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.214177][T16188] netlink: 'syz.3.2840': attribute type 13 has an invalid length.
[  371.562512][T16030] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.602687][T16030] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.646806][T16229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.713273][T16218] wg1 speed is unknown, defaulting to 1000
[  371.915467][T16234] bridge0: port 5(ipvlan3) entered blocking state
[  371.950692][T16234] bridge0: port 5(ipvlan3) entered disabled state
[  371.963827][T16234] ipvlan3: entered allmulticast mode
[  371.977332][T16234] bridge0: entered allmulticast mode
[  371.989667][T16234] ipvlan3: left allmulticast mode
[  371.994893][T16234] bridge0: left allmulticast mode
[  372.023219][T16030] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.040992][T16030] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.069689][ T5838] Bluetooth: hci5: command tx timeout
[  372.150574][T16242] xt_TPROXY: Can be used only with -p tcp or -p udp
[  372.222303][T16245] netlink: 'syz.4.2852': attribute type 1 has an invalid length.
[  372.505577][T16259] netlink: 'syz.3.2857': attribute type 1 has an invalid length.
[  372.639253][T16263] ipt_ECN: cannot use operation on non-tcp rule
[  372.772536][T16030] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  372.840955][T16030] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  372.959387][T16030] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  373.017340][T16280] netlink: 'syz.4.2863': attribute type 7 has an invalid length.
[  373.040689][T16030] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  373.186968][T16298] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004
[  373.277511][T16298] veth7: entered promiscuous mode
[  373.286827][T16298] bond6: (slave veth7): Enslaving as a backup interface with a down link
[  373.396019][T16306] syzkaller0: entered promiscuous mode
[  373.401703][T16306] syzkaller0: entered allmulticast mode
[  373.413620][T16306] workqueue: name exceeds WQ_NAME_LEN. Truncating to: K��u�cr��K:����̥�B����|���
[  373.459950][T16030] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.533929][T16030] 8021q: adding VLAN 0 to HW filter on device team0
[  373.546004][T16306] xt_cluster: node mask cannot exceed total number of nodes
[  373.575295][T16313] xt_l2tp: missing protocol rule (udp|l2tpip)
[  373.617140][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.624478][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.716401][T13033] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.723698][T13033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.020730][T16334] netlink: Unknown conntrack attr (0)
[  374.150392][ T5838] Bluetooth: hci5: command tx timeout
[  374.157372][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.166140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.269543][T16345] __nla_validate_parse: 21 callbacks suppressed
[  374.269568][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'.
[  374.372991][T16351] validate_nla: 4 callbacks suppressed
[  374.373010][T16351] netlink: 'syz.3.2883': attribute type 83 has an invalid length.
[  374.427674][T16030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.513419][T16355] netlink: 'syz.4.2888': attribute type 1 has an invalid length.
[  374.550313][T16355] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2888'.
[  374.560893][T16355] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2888'.
[  374.576558][T16355] netlink: 'syz.4.2888': attribute type 1 has an invalid length.
[  374.613358][T16030] veth0_vlan: entered promiscuous mode
[  374.638944][T16355] netlink: 'syz.4.2888': attribute type 8 has an invalid length.
[  374.647370][T16355] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2888'.
[  374.723208][T16030] veth1_vlan: entered promiscuous mode
[  374.768859][T16369] 
[  374.771265][T16369] ======================================================
[  374.778401][T16369] WARNING: possible circular locking dependency detected
[  374.785555][T16369] syzkaller #0 Not tainted
[  374.790003][T16369] ------------------------------------------------------
[  374.797060][T16369] syz.0.2892/16369 is trying to acquire lock:
[  374.803163][T16369] ffffffff8f924738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  374.812533][T16369] 
[  374.812533][T16369] but task is already holding lock:
[  374.820092][T16369] ffff88814cd3e370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  374.829569][T16369] 
[  374.829569][T16369] which lock already depends on the new lock.
[  374.829569][T16369] 
[  374.839989][T16369] 
[  374.839989][T16369] the existing dependency chain (in reverse order) is:
[  374.849035][T16369] 
[  374.849035][T16369] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  374.857108][T16369]        _raw_spin_lock_bh+0x36/0x50
[  374.862418][T16369]        nr_rt_device_down+0x12a/0x720
[  374.867899][T16369]        nr_device_event+0x137/0x150
[  374.873216][T16369]        notifier_call_chain+0x19d/0x3a0
[  374.878867][T16369]        netif_close_many+0x2ae/0x420
[  374.884271][T16369]        netif_close+0x160/0x220
[  374.889237][T16369]        dev_close+0x10a/0x220
[  374.894011][T16369]        bpq_device_event+0x377/0x6a0
[  374.899397][T16369]        notifier_call_chain+0x19d/0x3a0
[  374.905054][T16369]        netif_close_many+0x2ae/0x420
[  374.910442][T16369]        netif_close+0x160/0x220
[  374.915397][T16369]        dev_close+0x10a/0x220
[  374.920179][T16369]        bond_setup_by_slave+0x5f/0x3d0
[  374.925836][T16369]        bond_enslave+0x83b/0x3b70
[  374.930981][T16369]        bond_do_ioctl+0x6ec/0x8d0
[  374.936189][T16369]        bond_siocdevprivate+0x19c/0x1f0
[  374.941845][T16369]        dev_ifsioc+0xb57/0xf00
[  374.946807][T16369]        dev_ioctl+0x84c/0x1150
[  374.951763][T16369]        sock_ioctl+0x75f/0x7f0
[  374.956670][T16369]        __se_sys_ioctl+0xfc/0x170
[  374.961818][T16369]        do_syscall_64+0xe2/0xf80
[  374.966864][T16369]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.973297][T16369] 
[  374.973297][T16369] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  374.981219][T16369]        _raw_spin_lock_bh+0x36/0x50
[  374.986623][T16369]        nr_rt_device_down+0xa9/0x720
[  374.992042][T16369]        nr_device_event+0x137/0x150
[  374.997351][T16369]        notifier_call_chain+0x19d/0x3a0
[  375.002998][T16369]        netif_close_many+0x2ae/0x420
[  375.008400][T16369]        netif_close+0x160/0x220
[  375.013364][T16369]        dev_close+0x10a/0x220
[  375.018137][T16369]        bpq_device_event+0x377/0x6a0
[  375.023524][T16369]        notifier_call_chain+0x19d/0x3a0
[  375.029170][T16369]        netif_close_many+0x2ae/0x420
[  375.034659][T16369]        netif_close+0x160/0x220
[  375.039620][T16369]        dev_close+0x10a/0x220
[  375.044403][T16369]        bond_setup_by_slave+0x5f/0x3d0
[  375.050008][T16369]        bond_enslave+0x83b/0x3b70
[  375.055141][T16369]        bond_do_ioctl+0x6ec/0x8d0
[  375.060268][T16369]        bond_siocdevprivate+0x19c/0x1f0
[  375.065909][T16369]        dev_ifsioc+0xb57/0xf00
[  375.070783][T16369]        dev_ioctl+0x84c/0x1150
[  375.075744][T16369]        sock_ioctl+0x75f/0x7f0
[  375.080614][T16369]        __se_sys_ioctl+0xfc/0x170
[  375.085753][T16369]        do_syscall_64+0xe2/0xf80
[  375.090797][T16369]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.097225][T16369] 
[  375.097225][T16369] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  375.105152][T16369]        __lock_acquire+0x15a5/0x2cf0
[  375.110541][T16369]        lock_acquire+0x106/0x330
[  375.115582][T16369]        _raw_spin_lock_bh+0x36/0x50
[  375.120893][T16369]        nr_remove_neigh+0x25/0xe0
[  375.126116][T16369]        nr_add_node+0x1d9f/0x2570
[  375.131248][T16369]        nr_rt_ioctl+0xcb0/0xdf0
[  375.136213][T16369]        sock_do_ioctl+0x101/0x320
[  375.141339][T16369]        sock_ioctl+0x5c6/0x7f0
[  375.146203][T16369]        __se_sys_ioctl+0xfc/0x170
[  375.151339][T16369]        do_syscall_64+0xe2/0xf80
[  375.156475][T16369]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.162904][T16369] 
[  375.162904][T16369] other info that might help us debug this:
[  375.162904][T16369] 
[  375.173142][T16369] Chain exists of:
[  375.173142][T16369]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  375.173142][T16369] 
[  375.186994][T16369]  Possible unsafe locking scenario:
[  375.186994][T16369] 
[  375.194483][T16369]        CPU0                    CPU1
[  375.199875][T16369]        ----                    ----
[  375.205258][T16369]   lock(&nr_node->node_lock);
[  375.210051][T16369]                                lock(nr_node_list_lock);
[  375.217177][T16369]                                lock(&nr_node->node_lock);
[  375.224487][T16369]   lock(nr_neigh_list_lock);
[  375.229183][T16369] 
[  375.229183][T16369]  *** DEADLOCK ***
[  375.229183][T16369] 
[  375.237339][T16369] 1 lock held by syz.0.2892/16369:
[  375.242461][T16369]  #0: ffff88814cd3e370 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  375.252242][T16369] 
[  375.252242][T16369] stack backtrace:
[  375.258160][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.0.2892 Not tainted syzkaller #0 PREEMPT(full) 
[  375.258185][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  375.258202][T16369] Call Trace:
[  375.258208][T16369]  <TASK>
[  375.258215][T16369]  dump_stack_lvl+0xe8/0x150
[  375.258238][T16369]  print_circular_bug+0x2e1/0x300
[  375.258262][T16369]  check_noncircular+0x12e/0x150
[  375.258286][T16369]  __lock_acquire+0x15a5/0x2cf0
[  375.258313][T16369]  ? nr_remove_neigh+0x25/0xe0
[  375.258328][T16369]  lock_acquire+0x106/0x330
[  375.258343][T16369]  ? nr_remove_neigh+0x25/0xe0
[  375.258363][T16369]  ? nr_add_node+0xcce/0x2570
[  375.258392][T16369]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  375.258417][T16369]  ? nr_remove_neigh+0x25/0xe0
[  375.258432][T16369]  _raw_spin_lock_bh+0x36/0x50
[  375.258452][T16369]  ? nr_remove_neigh+0x25/0xe0
[  375.258466][T16369]  nr_remove_neigh+0x25/0xe0
[  375.258482][T16369]  nr_add_node+0x1d9f/0x2570
[  375.258508][T16369]  ? __asan_memcpy+0x40/0x70
[  375.258534][T16369]  ? nr_call_to_digi+0x126/0x1b0
[  375.258560][T16369]  nr_rt_ioctl+0xcb0/0xdf0
[  375.258589][T16369]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  375.258617][T16369]  ? apparmor_capable+0x137/0x1a0
[  375.258637][T16369]  ? capable+0x88/0xe0
[  375.258654][T16369]  ? nr_ioctl+0x1b1/0x3b0
[  375.258675][T16369]  sock_do_ioctl+0x101/0x320
[  375.258696][T16369]  ? __pfx_sock_do_ioctl+0x10/0x10
[  375.258714][T16369]  ? do_futex+0x333/0x420
[  375.258737][T16369]  sock_ioctl+0x5c6/0x7f0
[  375.258756][T16369]  ? __pfx_sock_ioctl+0x10/0x10
[  375.258779][T16369]  ? __fget_files+0x2a/0x420
[  375.258799][T16369]  ? __fget_files+0x3a0/0x420
[  375.258818][T16369]  ? __fget_files+0x2a/0x420
[  375.258839][T16369]  ? bpf_lsm_file_ioctl+0x9/0x20
[  375.258856][T16369]  ? __pfx_sock_ioctl+0x10/0x10
[  375.258874][T16369]  __se_sys_ioctl+0xfc/0x170
[  375.258901][T16369]  do_syscall_64+0xe2/0xf80
[  375.258923][T16369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.258939][T16369]  ? trace_irq_disable+0x37/0x100
[  375.258961][T16369]  ? clear_bhb_loop+0x60/0xb0
[  375.258979][T16369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.258999][T16369] RIP: 0033:0x7ff48279acb9
[  375.259014][T16369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.259028][T16369] RSP: 002b:00007ff4835ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.259045][T16369] RAX: ffffffffffffffda RBX: 00007ff482a15fa0 RCX: 00007ff48279acb9
[  375.259058][T16369] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000007
[  375.259068][T16369] RBP: 00007ff482808bf7 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  375.259079][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.259088][T16369] R13: 00007ff482a16038 R14: 00007ff482a15fa0 R15: 00007fff634c9a88
[  375.259108][T16369]  </TASK>
[  375.540317][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.560281][T16030] veth0_macvtap: entered promiscuous mode
[  375.575178][T16030] veth1_macvtap: entered promiscuous mode
[  375.584563][T16373] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2891'.
[  375.596527][T16030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.666542][T16030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.970543][ T5844] syz_tun (unregistering): left allmulticast mode
[  375.977032][ T5844] syz_tun (unregistering): left promiscuous mode
[  375.998842][ T5844] bridge0: port 4(syz_tun) entered disabled state
[  376.228581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.294583][ T5830] `: (slave syz_tun): Releasing backup interface
[  376.381295][ T6027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.392048][ T6027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.439693][ T6027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.450304][ T6027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.519491][ T6027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.529873][ T6027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.609813][ T6027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.620480][ T6027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.875143][ T6027] bond6 (unregistering): (slave geneve2): Releasing active interface
[  376.883465][ T6027] bond6 (unregistering): (slave geneve2): the permanent HWaddr of slave - fe:b2:d1:00:cd:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  377.433043][ T6027] ` (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.443597][ T6027] ` (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.453676][ T6027] ` (unregistering): (slave bond4): Releasing backup interface
[  377.462108][ T6027] ` (unregistering): Released all slaves
[  377.470750][ T6027] bond1 (unregistering): Released all slaves
[  377.481380][ T6027] bond2 (unregistering): (slave veth3): Releasing active interface
[  377.490974][ T6027] bond2 (unregistering): Released all slaves
[  377.500880][ T6027] bond3 (unregistering): Released all slaves
[  377.585433][ T6027] bond4 (unregistering): Released all slaves
[  377.596073][ T6027] bond5 (unregistering): Released all slaves
[  377.608960][ T6027] bond6 (unregistering): (slave veth15): Releasing active interface
[  377.618221][ T6027] bond6 (unregistering): Released all slaves
[  377.628217][ T6027] bond0 (unregistering): Released all slaves
[  377.703707][ T6027] tipc: Left network mode
[  378.059682][ T6027] hsr_slave_0: left promiscuous mode
[  378.065620][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.084261][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.092610][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.100469][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.110549][ T6027] veth1_vlan: left allmulticast mode
[  378.116193][ T6027] veth1_macvtap: left promiscuous mode
[  378.122175][ T6027] veth0_macvtap: left promiscuous mode
[  378.127787][ T6027] veth1_vlan: left promiscuous mode
[  378.133514][ T6027] veth0_vlan: left promiscuous mode
[  378.523245][ T6027] team0 (unregistering): Port device team_slave_1 removed
[  378.554184][ T6027] team0 (unregistering): Port device team_slave_0 removed
[  378.947590][ T6027] IPVS: stop unused estimator thread 0...
[  379.312106][ T6027] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.324747][ T6027] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  379.335001][ T6027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  379.345761][ T6027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.417530][ T6027] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.427518][ T6027] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  379.442917][ T6027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  379.453296][ T6027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.492108][ T6027] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.504607][ T6027] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  379.514973][ T6027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  379.525087][ T6027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.562066][ T6027] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.572570][ T6027] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 49158 - 0
[  379.582989][ T6027] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  379.595085][ T6027] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.705044][ T6027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.716663][ T6027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.790049][ T6027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.805725][ T6027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.889936][ T6027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.901057][ T6027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.949838][ T6027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.960674][ T6027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.056664][ T6027] bridge_slave_1: left allmulticast mode
[  380.064406][ T6027] bridge_slave_1: left promiscuous mode
[  380.070740][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.080094][ T6027] bridge_slave_0: left allmulticast mode
[  380.085774][ T6027] bridge_slave_0: left promiscuous mode
[  380.094524][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.105774][ T6027] team0: left allmulticast mode
[  380.111602][ T6027] team_slave_0: left allmulticast mode
[  380.117119][ T6027] team_slave_1: left allmulticast mode
[  380.122917][ T6027] team0: left promiscuous mode
[  380.127751][ T6027] team_slave_0: left promiscuous mode
[  380.134690][ T6027] team_slave_1: left promiscuous mode
[  380.140504][ T6027] bridge0: port 3(team0) entered disabled state
[  380.148137][ T6027] bridge_slave_1: left allmulticast mode
[  380.154710][ T6027] bridge_slave_1: left promiscuous mode
[  380.161057][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.170255][ T6027] bridge_slave_0: left promiscuous mode
[  380.175969][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.381149][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.392818][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.403708][ T6027] bond0 (unregistering): Released all slaves
[  380.497329][ T6027] gretap0 (unregistering): left promiscuous mode
[  380.508974][ T6027] bond4 (unregistering): (slave gretap2): Releasing backup interface
[  380.537980][ T6027] dvmrp6 (unregistering): left allmulticast mode
[  380.563768][ T6027] bond3 (unregistering): (slave geneve2): Releasing backup interface
[  381.347189][ T6027] bond0 (unregistering): left promiscuous mode
[  381.353739][ T6027] bond_slave_0: left promiscuous mode
[  381.359580][ T6027] bond_slave_1: left promiscuous mode
[  381.367923][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.378192][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.389703][ T6027] bond0 (unregistering): Released all slaves
[  381.463950][ T6027] bond1 (unregistering): Released all slaves
[  381.473605][ T6027] bond2 (unregistering): Released all slaves
[  381.483533][ T6027] bond3 (unregistering): Released all slaves
[  381.496047][ T6027] bond4 (unregistering): (slave bond5): Releasing backup interface
[  381.504746][ T6027] bond4 (unregistering): Released all slaves
[  381.585349][ T6027] bond5 (unregistering): Released all slaves
[  381.595487][ T6027] bond6 (unregistering): (slave veth7): Releasing backup interface
[  381.605163][ T6027] bond6 (unregistering): Released all slaves
[  381.636363][ T6027] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  381.645922][ T6027] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[  381.758873][ T6027] bond8 (unregistering): (slave gretap3): Releasing active interface
[  381.828955][ T6027] bond7 (unregistering): (slave gre3): Releasing backup interface
[  381.865397][ T6027] bond3 (unregistering): (slave geneve3): Releasing active interface
[  381.884290][ T6027] bond1 (unregistering): (slave geneve2): Releasing active interface
[  382.276107][ T6027] bond2 (unregistering): (slave macvlan2): Releasing active interface
[  382.286887][ T1089] smc: removing ib device syz0
[  382.292127][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.302509][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.312206][ T6027] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  382.321753][ T6027] bond0 (unregistering): Released all slaves
[  382.395413][ T6027] bond1 (unregistering): Released all slaves
[  382.473066][ T6027] bond2 (unregistering): Released all slaves
[  382.483175][ T6027] bond3 (unregistering): Released all slaves
[  382.493072][ T6027] bond4 (unregistering): Released all slaves
[  382.502656][ T6027] bond5 (unregistering): Released all slaves
[  382.581875][ T6027] bond6 (unregistering): Released all slaves
[  382.660504][ T6027] bond7 (unregistering): Released all slaves
[  382.739599][ T6027] bond8 (unregistering): Released all slaves
[  382.749397][ T6027] bond9 (unregistering): Released all slaves
[  382.832218][ T6027] bond10 (unregistering): Released all slaves
[  382.842521][ T6027] bond11 (unregistering): Released all slaves
[  382.922106][ T6027] bond12 (unregistering): Released all slaves
[  382.932228][ T6027] bond13 (unregistering): Released all slaves
[  383.010512][ T6027] bond14 (unregistering): (slave veth11): Releasing active interface
[  383.020343][ T6027] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface
[  383.031543][ T6027] bond14 (unregistering): (slave veth13): Releasing active interface
[  383.041021][ T6027] bond14 (unregistering): Released all slaves
[  383.562060][ T6027] �9: left promiscuous mode
[  383.608534][ T6027] : left promiscuous mode
[  383.659479][ T6027] : left promiscuous mode
[  383.707396][ T6027] tipc: Left network mode
[  383.723974][ T6027] tipc: Left network mode
[  383.734694][ T6027] IPVS: stopping master sync thread 6149 ...
[  383.831717][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  384.335969][ T6027] hsr_slave_0: left promiscuous mode
[  384.342687][ T6027] hsr_slave_1: left promiscuous mode
[  384.353161][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.360971][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.373472][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.381679][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.392217][ T6027] hsr_slave_0: left promiscuous mode
[  384.398058][ T6027] hsr_slave_1: left promiscuous mode
[  384.404904][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.412643][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.420834][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.428321][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.439958][ T6027] hsr_slave_0: left promiscuous mode
[  384.445748][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.453850][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.468976][ T6027] veth1_macvtap: left promiscuous mode
[  384.474520][ T6027] veth0_macvtap: left promiscuous mode
[  384.480256][ T6027] veth1_vlan: left promiscuous mode
[  384.485572][ T6027] veth0_vlan: left promiscuous mode
[  384.491786][ T6027] veth1_macvtap: left promiscuous mode
[  384.497299][ T6027] veth0_macvtap: left promiscuous mode
[  384.699513][ T6027] team0 (unregistering): Port device team_slave_1 removed
[  384.726285][ T6027] team0 (unregistering): Port device team_slave_0 removed