last executing test programs:

2m32.651598281s ago: executing program 0 (id=7939):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async, rerun: 64)
r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000007c0), 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async, rerun: 32)
recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}], 0x1, 0x0, 0x0) (rerun: 32)

2m32.241650533s ago: executing program 0 (id=7941):
r0 = socket$kcm(0x10, 0x5, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0xef, r7, {0xe, 0xfff2}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r9, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
r10 = socket$igmp(0x2, 0x3, 0x2)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x40081)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e3fe18b3a506e289bcdcb09a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x93}], 0x1, 0x0, 0x0, 0x7}, 0x8000)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000040)={'veth1_to_batadv\x00', @multicast})

2m31.410228374s ago: executing program 0 (id=7948):
getgid()
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2m31.20139415s ago: executing program 0 (id=7951):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904fcfffffffbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01980200419a04002000128008000100736974001400028008000300ac1414bb0500050001000000"], 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x40008c0) (async)
sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
close(r0) (async)
bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000000, 0x4}, 0x20) (async)
r5 = socket$kcm(0xa, 0x1, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000040)={0x29, 0x2}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0x9, 0x100000000]}}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7}) (async)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000100)=0x1) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
unshare(0x46000480)

2m30.877023361s ago: executing program 0 (id=7955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', <r1=>0x0, 0x4, 0x2, 0xf8, 0x400, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7, 0x3ff, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', <r2=>0x0, 0x80, 0x80, 0x0, 0xc, {{0x31, 0x4, 0x0, 0x31, 0xc4, 0x65, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x54, 0xc3, 0x1, 0x5, [{@broadcast, 0x7}, {@loopback, 0x7}, {@local, 0x6}, {@empty, 0x1}, {@loopback, 0x400}, {@private=0xa010101, 0x2}, {@multicast1}, {@multicast2, 0x4}, {@loopback, 0xd}, {@local}]}, @generic={0x94, 0xc, "6c3c19247f60093730be"}, @end, @timestamp_prespec={0x44, 0x14, 0xd1, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0xb}, {@remote, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x2a, [@empty, @multicast1, @multicast1, @rand_addr=0x64010102, @loopback]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x69, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x16}]}, @ssrr={0x89, 0x7, 0xf7, [@rand_addr=0x9]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r4=>0x0, 0x4, 0x6, 0x5, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x8, 0x7, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x7f, 0x81, 0x401, 0x40, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x4042, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r7=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x5b5042b979007c7e}, 0x4810)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r9)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r9)
sendmsg$IEEE802154_START_REQ(r9, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xf8bba74577579346}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}}, 0x44001)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000008c0))
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x9, 0x5, 0x82, 0x144, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3ff, '\x00', r6, r0, 0x5, 0x2, 0x1}, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c80)=<r13=>0x0, &(0x7f0000000cc0)=0x4)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00)=0xffffffffffffffff, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f0000000f40)={{<r15=>r0, &(0x7f0000000d80)='\\%\x00', 0x2, &(0x7f0000000dc0)={@align=0x9, {0x0, 0x8, 0xffffffce, 0x9}}, 0x40, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0x4}, {[0x29, 0x8, 0x4, 0x9d]}, 0xfffffffa, 0xa1, &(0x7f0000000e80)=""/161})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x2a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0xf, 0x9, 0x7, 0x401, 0x4c25}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b80)='syzkaller\x00', 0x3, 0x9e, &(0x7f0000000bc0)=""/158, 0x41000, 0x2, '\x00', r13, 0x25, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x2, 0x0, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[r12, r0, r11, r12, r12, r12, r11, r15, 0x1], 0x0, 0x10, 0x10001}, 0x94)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x14040, 0x0)
ioctl$TUNSETIFINDEX(r16, 0x400454da, &(0x7f0000001100)=r13)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00', <r17=>0x0})
recvfrom$packet(r15, &(0x7f0000001140)=""/4096, 0x1000, 0x40000041, &(0x7f0000002180)={0x11, 0x10, r17, 0x1, 0xfc, 0x6, @multicast}, 0x14)
r18 = syz_open_procfs$namespace(0x0, &(0x7f0000002200)='ns/time\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r18}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r15}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c8c1)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r19, 0x8008f513, &(0x7f0000002300))

2m30.629706785s ago: executing program 0 (id=7958):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x40881}, 0x0)

2m26.492384895s ago: executing program 2 (id=8014):
r0 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc)
connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0xffffffff, 0x94, 0xc5b, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x2, 0x4, 0x2}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@llu}, @jmp={0x5, 0x1, 0x7, 0x2, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=[{0x2, 0x5, 0x8, 0x5}, {0x4, 0x4}, {0x3, 0x4, 0x0, 0xc}, {0x5, 0x5, 0x1, 0xc}, {0x2, 0x3, 0x4, 0x7}, {0x2, 0x4, 0xd, 0x2}, {0x5, 0x5, 0x5, 0x5}, {0x0, 0x4, 0x6, 0x2}, {0x3, 0x5, 0xc}, {0x2, 0x2, 0x6, 0x1}], 0x10, 0x2}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000280)=r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007000000000000000180000091114900000000009500000000000000d9b5949bb93cd2fc093da67e05cb82ec584dda91301062d0b833fe6a80f805cf8e0525bef4c79a1c68eef4a95d46b5793f87c7a6c5668f5281472d46e7071ece33ca933b8c292c910d0a6df57dfd94db3d00"/125], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

2m26.201048011s ago: executing program 2 (id=8018):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x11, 0x40, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x8) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010)
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0050ec601f56acbffc468067bf09f091b717ec0c3aa0818d8901ade4ee457c259b5cfd88c8d94a3fb1b6df25f0906cf5d6ba64e9d860e8aac0e1b9de0a3ba5c5d2403ce76677538d59a2e0aef873402a33c2629a5b4c6225e17d40cb1442d565e0b1bae701fcd12a28e88bfe540a95269cac23d0c3f064b8a8a4d2ddb6ef549c91a69ea1a05b5fb203f3c40ed3efaa6ead5fa804c3500e25489b2ee2f347ed1d014430728de8c5485ab9e265ac3c61558cea5c10742d7d1a868decedd6b4aed778e511260cc242e21f50c968c84c09c1531280cbc90139"], 0x20}, 0x1, 0x0, 0x0, 0x4c882}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0}) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r13=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000002400000000060000000400000000000012020000000000000001000005000000000000006100000000"], 0x0, 0x42}, 0x20) (async)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r13, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2e, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff37000000007110280000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r14, 0x0)

2m25.82127494s ago: executing program 2 (id=8022):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"})
ioctl(r3, 0x8b2a, &(0x7f0000000040))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]]}, 0x2c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f00000006c0)={<r9=>0x0, 0x1, 0x3})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000ac0)={<r10=>0x0, 0x7, 0x0, [0x47, 0x8, 0x2, 0x5, 0x5], [0x2, 0x3, 0x0, 0xbac, 0x7, 0x164d, 0x80, 0x9, 0x8, 0x8, 0xc, 0xb, 0xfff, 0x5, 0x8001, 0xeed2, 0x8, 0x6, 0x5, 0x9, 0x800, 0x6, 0x7, 0x7, 0x101, 0x49, 0x1, 0x7, 0x0, 0x8, 0x3, 0x200, 0x0, 0x3, 0x7, 0x3, 0x9, 0x4, 0xffffffffffffff7f, 0x8, 0x10, 0xff, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8, 0x3, 0x2, 0x7, 0x6, 0x3, 0x2, 0x0, 0xd, 0x401, 0x8, 0x10001, 0x6f7, 0xbc0, 0x6, 0xe90, 0x76, 0x3, 0x7, 0xd, 0xfffffffffffffffe, 0x80000001, 0x40, 0x4, 0x0, 0x1000000000000, 0x7, 0x4c3bf886, 0x7fffffffffffffff, 0x401, 0x8000000000000000, 0x8, 0x8000000000000001, 0x9, 0xc0f, 0x8, 0x9, 0xff, 0xfffffffffffffffd, 0x883, 0xffffffffffffffff, 0x3, 0x3ff, 0x1000, 0x0, 0x6, 0x1, 0x6, 0x800, 0x4, 0xffffffffffffffff, 0x80000000, 0x7, 0x1000, 0x100000000, 0x2, 0x9, 0xb, 0x2, 0x3, 0xc62, 0x8, 0x9, 0xd7, 0xdeb, 0xfffffffffffff1ae, 0x310, 0xda3f, 0x1, 0x5, 0x6, 0x1000, 0x24, 0x10, 0x5, 0x40, 0x10]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001000)={0xf, 0x4, {0x8, @struct={0x6, 0x4}, 0x0, 0x8, 0x3, 0x5, 0x6ac9, 0x4, 0x8, @struct={0x800, 0x7}, 0x1, 0x8, [0x40000000000000, 0x1, 0x4, 0x2, 0x3, 0x1]}, {0xe5f, @usage=0x1, r9, 0x0, 0x4, 0x7, 0x3, 0x1, 0x20, @usage=0x4, 0x6, 0x1, [0x4, 0x7, 0x1, 0x9, 0x4, 0x780]}, {0xfffffffffffffff7, @usage=0x7, r10, 0x7, 0x0, 0x7, 0xc3, 0xe, 0x34, @usage=0x5, 0x0, 0x1, [0x8, 0x200, 0xffff, 0x1, 0x9, 0x1]}, {0x9, 0x1, 0xdc}})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket(0xb, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000340)={0x0, <r14=>0x0}, &(0x7f00000003c0)=0xc)
sendmsg$nl_generic(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, 0x18, 0x200, 0xfffffffc, 0x25dfdbfc, {0xb}, [@typed={0x8, 0xd2, 0x0, 0x0, @uid=r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8815}, 0x40090)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'})
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r11)

2m25.343573858s ago: executing program 2 (id=8026):
r0 = socket$kcm(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d05d6000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

2m24.946607877s ago: executing program 2 (id=8028):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

2m24.686223465s ago: executing program 2 (id=8030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000)

2m15.568225795s ago: executing program 32 (id=7958):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x40881}, 0x0)

2m9.50950966s ago: executing program 33 (id=8030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000)

2.726977851s ago: executing program 4 (id=9587):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x3, 0x4)
write(r0, &(0x7f0000000000)='l', 0x1)
sendmmsg$sock(r0, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)}, {&(0x7f0000000480)="28b801b5b506c713c1f18f5426662c8398352a9141a0edf51a1cf81c940d1d539fb69406b9b95194297b9f5e48bce08ee3249828ad715cabe3fb8fb357d442e0f3147de6856dad2a8c95378ab8cdb71691693ac25074d9fc54ff2d14f9cdb42b29246cde277066f8ffa0ba09f19bfe3b4508abf3d1072e7f001c90dd09dbc29fc6e73e2fbac59b9658d855da76423ce69a816378b9aef916dc695c3f035f2094fd4af8190e24dc6f27fb4e0df644477a8d1777", 0xb3}, {&(0x7f0000000540)="0b46249fad1948307ec3dc895546378ae85ca310d0ed68dd9f3ce1b55854f4d6b29cbf89e39370a4654ca12f4bfa4b505ca3ae022639d7aaf71075972dcdf5229291c919af343ad4bf94b7fb9b1f7e7d79d47c41c829cc96c46716341fd4d38ea4261964623cbf9b07da9e48cfad6a686b847b33c20e6541b2766ced79da523f018eb58d9ca375f5", 0x88}, {&(0x7f0000000900)="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", 0xd73}], 0x4, &(0x7f0000001d00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1b}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffffffa5}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001e00)="6ad131d76f5f", 0x6}], 0x1}}], 0x2, 0x20048401)

2.45735715s ago: executing program 4 (id=9592):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x0, 0x1a, 0x0, "bb02a3c364ca41d6357e544508474204000b5aa201ecffffffffffffff0f0000000000000034a632ab7193fcf19b2df3ee050000000000000041d269776df1228328cf0a007bbe6c0000000000b800"}, 0xd8) (async)
r0 = socket$kcm(0x23, 0x5, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async, rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) (rerun: 32)
listen(r0, 0x8) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (rerun: 64)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r5 = socket$inet(0x2, 0x6, 0x5)
ppoll(&(0x7f0000000680)=[{r1, 0x1040}, {0xffffffffffffffff, 0x680}, {r1, 0xa003}, {r5, 0x10}, {r1, 0x40}, {r0, 0x2100}, {r0, 0x1000}], 0x7, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000700)={[0xd2]}, 0x8) (async)
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78)

2.225734945s ago: executing program 5 (id=9593):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800032bbfa9b0a1b", 0x8, 0x20008084, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/4067, 0xfe3)

2.159442607s ago: executing program 3 (id=9462):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x6}}}}, 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x400, 0x74}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x1)

1.936371292s ago: executing program 3 (id=9597):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d3500000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aee2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa595b49a5eb2d4e8de20b38c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1)

1.877030128s ago: executing program 6 (id=9598):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001540)=0x5, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x94}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0)

1.839923092s ago: executing program 4 (id=9599):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0xca4fc53707b9e8a7, 0x20, 0x88a7, 0x4, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x29, 0x3, 0x7, 0x6, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x3, 0x4}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)=""/262, 0x106}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)

1.837773473s ago: executing program 3 (id=9600):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x1a8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x34, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2be5f8b4660b33b19c2861986c1d017856d99d7633e9226e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2895286d4727ee5afef8b40aae509306f1f951eaa13378e3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eea80883e91603eb461becd99bc65885d294f1137280c02d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "005e9b8c46fa628a27d969e3a3b056887cc02c0c3033ce15"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "69f944fe8aeba15a67f2fe765e4541395892676343488efa"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40001}, 0x40)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES8=r0], 0x1c}}, 0x4008054)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000180)=0x5, 0x4)
bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r2, 0x80000003)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'lo\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000380)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000004c0)=0x4, 0x4)
ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000040))
setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)
r8 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000002c0)={<r9=>0x0, @multicast1, @initdev}, &(0x7f0000000340)=0xc)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0x428, 0x328, 0x428, 0x0, 0x428, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, &(0x7f0000000440), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff000000, 0xffffff00, 0xff000000, 0xff], [0x26229aa12f5c60a0, 0xff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge0\x00', {0xff}, {}, 0x87, 0x4, 0x3, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xff0000ff, 0xffffffff, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 'veth0_vlan\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x36, 0x3b, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @ipv6=@mcast1, 0x15, 0x18}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x2e, 0x7, 0xc6, 0x4, 0x6, 0x10, 0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x10}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x25}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xff], 'vlan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x2b, 0x1, 0x6, 0x20}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x6, 0x2}}}, @common=@dst={{0x48}, {0x1accfa8c, 0x4, 0x0, [0x0, 0xf, 0x5, 0x1906, 0x2, 0x1, 0x10, 0x3499, 0x2, 0xfff8, 0x6, 0x3, 0xfff, 0x8, 0x11e0, 0x9], 0xd}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x2, 0x25, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x31}, r9}, 0x14)

1.657462575s ago: executing program 6 (id=9601):
socketpair(0x1fb58f2cdba56696, 0x800, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00')
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWNSID={0x4c, 0x58, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000851}, 0x4000011)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6   \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, <r9=>0xffffffffffffffff}, 0x4)
getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, <r10=>0x0}, &(0x7f0000000880)=0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x37, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7261}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x19}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff1c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x10, 0x5, 0x22a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r11, r12, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000b00), 0x10)
close(r0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x180, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xc}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x841}, 0x800)
bpf$ENABLE_STATS(0x20, &(0x7f0000000d80), 0x4)
unshare(0xc060280)
r13 = openat$cgroup(r1, &(0x7f0000000dc0)='syz1\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f0000000e00)='cgroup.controllers\x00', 0x0, 0x0)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r15, 0x84, 0x4, &(0x7f0000000e40)=0x7, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000e80), 0x4)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r16, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x80)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r17 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
shutdown(r17, 0x1)

1.620933776s ago: executing program 6 (id=9602):
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1.519955641s ago: executing program 6 (id=9603):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)

1.413613969s ago: executing program 4 (id=9604):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611570000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000005000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{<r3=>r0, &(0x7f0000000200)='GPL\x00', 0x408080, &(0x7f0000000280)={@align=0x8, {0xc1, 0x1000, 0x5, 0x100000000}}, 0xd1, &(0x7f00000002c0), &(0x7f0000000300)=0xbe9}, {[0xfffffff9, 0xa7, 0xfffffffd, 0x8]}, 0xe3, 0x49, &(0x7f0000000340)=""/73})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000800)=""/222, 0x29, 0xde, 0x1}, 0x28)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r9)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r10, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
write$cgroup_devices(r9, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x894b, &(0x7f00000002c0)={r9})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x9, 0x7fffffff, 0xffffff10, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0xc03, 0xdd, &(0x7f0000000680)=""/221, 0x41000, 0x4, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x2, 0x40, 0x309}, 0x10, 0x114d, r0, 0x2, &(0x7f0000000c80)=[r6, r7, r8, r9, r11, r12, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x4, 0x3, 0xf, 0x2}, {0x4, 0x1, 0xa, 0x1}], 0x10, 0x3}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000006d0001002dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000000400000800452f1c00", @ANYRES32, @ANYBLOB="b93c7c002c97657777fd8edb4cac30c311c7ea58108c40fa9082b23c42ff3d89a8bfeb186685d34411d128a0414316b8e8202c95e7a850fc5fae81fc69c333f9a3023d009f93f2d66ec1a3756a9d206ebdc07910052dab59c8b4c4800ff9cdb1fec551a7890e36dde794ea114f8315666ccad3954a5c52af7b45c6ef15c3ac47f935308fbc888725c1d891a17353981e3ccbb4e64515ac25b1fd1f1e1315434651b029bc2934dff585719b97eabef6328aa51efaf6f1e0e07b8fadbd3be7311ec4dd639c81364e93a72eb873bd4cc3d06cc8d4dbbb77c740fa50df3097a25a3a7a614e58560b4ba255f6"], 0x28}}, 0x4)
r13 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r14, 0x89e1, &(0x7f0000000180)={0x8})
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f00000000c0)={@remote, 0x37})

1.413175315s ago: executing program 6 (id=9605):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r1=>0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', <r4=>0x0})
r5 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000004001010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x4)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000001c0)=0x9c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r13, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x8, 0xae, 0x0, 0x0, @uid=r1}, @typed={0xc, 0x4c, 0x0, 0x0, @u64=0xd}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r14 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x1419, 0x1}, 0x10}}, 0x0)
r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r15, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20040864)

1.3283179s ago: executing program 5 (id=9606):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FIONCLEX(r0, 0x5450)

1.225367337s ago: executing program 5 (id=9607):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
sendto$inet6(r0, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @remote, 0x6}, 0x1c)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
shutdown(r2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800)
read$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20044894) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20044894)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0x0, 0x9}, {0xf, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000021}, 0x20040054)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) (async)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8)
setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f0000000100)=r4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'dvmrp0\x00', {0x2, 0x0, @multicast2}})
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)

1.129299113s ago: executing program 1 (id=9608):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc"], 0xdd12}], 0x1}, 0x200400d1)

1.106499757s ago: executing program 1 (id=9609):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80032002)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES32=r0, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4)
sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
r8 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r9=>0x0})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x10010, r0, 0x80000000)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x40}}]}, 0x38}, 0x1, 0xf2ff, 0x0, 0x4000}, 0x44080)

1.062874776s ago: executing program 1 (id=9610):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1)

1.041694841s ago: executing program 1 (id=9611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8}, 0x20)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r2)
recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/227, 0xe3}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), r2)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x78, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbc0}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x78}}, 0x20000e5)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500000800001e0106000700000006e761c98b57d7ed21bd8ccc6ab545e4d5cb9c440bb06edebcc47582ac254c044ba66c3eb3316059b0d33adb87aaaf0f2fd469697ce28e739f68fe549345f2f5be96eb38bbffd439c4d4a9429186a94437adbb774485849a5cd9c34b82808f329c719b674f9c334c62357240df811317e63f0f9adcfdc72e84a458dfd1932bd02297f6fe4da89fa241e69d3dbef422f8d632f8c07663c6d1ad2b860e2c26feeab1e0a7f1b38580c828558d8264052cecc3937025a49b3785fab4fc1d5cc081d5299edef2eecaa68d27fa6cf7d6a6a6f6a993260f2666df80e53e870c78d7d7a3b7da8c879a6db1b0f9d238762e6a85e5f66458fe6b69a010315b2935be959838cf00bd3d13746078e05fb6a2112ea9e93b498f4bdefc0000"], 0x154}}, 0x0)

886.010242ms ago: executing program 1 (id=9612):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
sendto$inet6(r0, &(0x7f00000001c0)="ed4c21b133546f6fc5ea8e7690a31620dfdcf9c617982ee23f4f68f4f13014e2772412c3b1f124e8b5d5a5741a93f218b8ba33010c35617b277a5bc6390b5875535241157df44d2afbe4df35e4a8a99815e6274a26988a131cd2f4778fa8e3307266789e8de1e65ce32da5971b4d451fb8b36f932f3593e2c3aeeb4c0a23488a126ce6931cea14028e6d04adb0a2e9d717c7e873424ed200596f4aa0a83db99fae7257e1047c7ec6e4de080e469ec86d63fa64bed7049ddce7256510078307f26a83e205672713e76774dc29e061787c4026ae41beda42fdfc254df9da85071c0f057cd6f63b1fd4c44ae15d695d", 0xee, 0x20008050, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)

870.739534ms ago: executing program 1 (id=9613):
r0 = socket(0x40000000015, 0x5, 0x0)
close(r0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
write(r2, &(0x7f0000001080)="0e269f715a15bc583f6537d5a75ffa30c3c0f19d40cd34aed3cba198435a0b13dfb07173a5df72a71c734e55a9e5803587cdd934e80a6368b482133e0324e258ef10a9bd8d66fc3cb9b155692c83506c", 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}})
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
r5 = accept4$inet(r1, &(0x7f0000001100)={0x2, 0x0, @empty}, &(0x7f0000001140)=0x10, 0x80000)
r6 = socket$kcm(0x10, 0x4, 0x10)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002480)={{r4}, 0x0, 0x1e, @unused=[0xa1, 0x8, 0x100000001, 0x4], @name="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"})
bind$tipc(r0, &(0x7f0000001180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0)

737.562033ms ago: executing program 5 (id=9614):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="1ca81cbaaaac12eb"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0)

597.657539ms ago: executing program 3 (id=9615):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000d90690780a210104ac1414aa070704030e5c610000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c8000009078000094bafb98df039afff02fb24d051dd4ba9a28"], 0x0)

503.091735ms ago: executing program 4 (id=9616):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800032bbfa9b0a1b", 0x8, 0x20008084, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4)
read(r0, 0x0, 0x0)

473.755561ms ago: executing program 5 (id=9617):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x8080)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r1, r1, 0x0, 0x9)

357.567482ms ago: executing program 6 (id=9618):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r2], 0x38}}, 0x10)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000001940)={0x4f0, r5, 0x10, 0x70bd25, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x7}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @broadcast, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x4aa, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @random="f98208d96211", {0xe, 0xc}, "", @value={0x8, 0x1, 0x1, 0x1, 0xc}}, @random="5da93b551b673b3e9533edef259329ebf0a7c5a84985e0e51f29ffa1679f9d1662a5d0305f424ac68d422e93c303e9910e6ebc97da6dfdc6c788ab29959b386569138ea2313d4482e3b67b7b7951e356f7ddf71a03f523738c740a9dc88cb7b0012f11b1b31155a2f47d7550a974d42180ac559a5e5df5209b91481a0ca2ad536c4784d5c1838a971a6f262f6c7749a0dbcc4a1b6982347387878b10b4909c04a1bac56a732e3bf24a2def6e39854d259ed7715f9d004b31e949813e8e0e1ee0a0fd2f6a18f4dade43c79e43fc3aebe4dbaa46d368fd252cd2f8ebf14048175fff9118c6ea618d0a6216ea9da27df10a735761c7f0f4c38f4802ee02fcb948911b507049348d993c6e6be9833ff9ddf94125a649532d1cbbcbb3779283f3ea1a304b68110fb7e3a9f10072f2502d01071658535c2d2ef54401bfd330a3b7a4e7846110429a02892ccf9bfeeee26084a4243ca9eba8698ba404e2efd800d851047029f01652c9cf5c990eda089f847f5f2aa95ba842459acbee101d478c7134e4c6d26eebf6627e5777261f9e4f7843e4a990425647ef71ef5b41d4ec80c4d553a5e2e992d82bfcf5b75421b429ba5bc63d71c7f22a154e12dba6c93ae6e6e9c13f01a8796cdd16a3540ea75f01cd9d83839cc2d0256a483af8669ca3b3417fa991cad2b2665cf4f654834d8da4d92579b2d6e163863ec312fac91cd8a82d13578274af7e515b8386d7736ad5eac56e3671d7a427432aa15da9bf1f191e3c1def63205164b9a3f2f3f7c4779c2a5f089b8421d5c90b8ead0d01615e7e57a580588199669976211797de34fc3e9ed92a8faf67236b182ea18d4d2d739ebf427ee14e6092c453e3a720d8f1d2156c29c342ac35d2399b33aeee8698b042a73c9ae205fad9bbeb8d0c270e1da4e04a76034352836a4958f42846df2350b53a87deacf7383373938b7254a5d6bd4d3d641acc319cfced88fb9e896ac1f1ea40e06a5df64e237a037fb8439051f772afbb08696d959b07d661feb1359c29b401ae200aca07728354af0162aa1e96091bfce15b76dce63b349acf7c7ddf94021e41dec63378405592c1310e3fea38555ef552b12ef4d44d7e9d8d6dd058b1f8e308a50f33a141bd1c1e08e42547021c530920f899aaf3b962ded0c5ebe2b5b7e541bf072d9de7bf2b99980f24ebfe00fc49b0f3afe261578e3ab16099cd37f8f8e76a46df20b157f9b16b0ff836b1b3989c3bbf07f4aae6f26f9e73d34f8355095744f48d1446e2f07edc9feff88b0070a843b13b595606eae0d10ee6e24e4798ee5d87a462c5044ce220f7e1de113216be2b03e9a023dbdd1e30763795aebd268f698bf621b24fb65758389844ca906ec040940752f765c09d4ba753ad9883e4e39fcf3bdc80926955b875d8543b782d4492c99a0c5db973c59f5da47f0b17cef050873e5f6ebe66318f86d09f93bebc7a071b38fb6a6a6be0d40cb508241e3c47b692b2d76d412a9440e17c78b7b3c5808b28abf57267276459004bc2ebb55dd3b3b2c36c5c591557d4244838705a910abb71dd0f016dfeefab93d840c4a62e0fa132685f61b2b212c188d404a221bd661edc1d8448f5829a0f14cf1850cfefb58b9edf58596389e56295374bebae"}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x50}, 0x4048080)
r6 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'bond0\x00', <r13=>0x0})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r13, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)

355.740311ms ago: executing program 3 (id=9619):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) (fail_nth: 1)

279.561265ms ago: executing program 4 (id=9620):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000800)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x12, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000880)=[0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x3, 0x1, 0xe, 0x2}, {0x3, 0x1, 0x8, 0x4}, {0x5, 0x3, 0x3, 0xc}, {0x3, 0x1, 0x9, 0x6}, {0x2, 0x4, 0x7, 0x2}, {0x1, 0x5, 0xa, 0xc}, {0x0, 0x1, 0xf, 0x3}, {0x3, 0x2, 0x4}], 0x10, 0xf}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f0000000680), &(0x7f0000000a00)=r5}, 0x20)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000000})
shutdown(r8, 0x0)
epoll_wait(r7, &(0x7f0000000280)=[{}], 0x1, 0x101)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)={0x2000200b})
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
close(0x3)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x10}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x2, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x6c}}, 0x24040004)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x4f8, 0xffffffff, 0x330, 0x0, 0x330, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2, [0xffffffff, 0xffffff00, 0x0, 0xd0f5bcfa7c76e88e], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'bond0\x00', 'wg0\x00', {}, {}, 0x87, 0x6, 0x5, 0x61}, 0x203, 0x210, 0x238, 0x8502, {}, [@common=@rt={{0x138}, {0x7, [0x77], 0x4, 0x1, 0x5, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @mcast1, @private1], 0x3}}, @common=@unspec=@cluster={{0x30}, {0x800, 0x7, 0x7, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8, 0x3}, {0x0, 0x24, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xffffffff, 0xffffffff], 'bond0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x29, 0xb6, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5b2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)

701.371µs ago: executing program 5 (id=9621):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d3500000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aee2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa595b49a5eb2d4e8de20b38c8808b365b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1)

0s ago: executing program 3 (id=9622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x901, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4}]}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

ute type 12 has an invalid length.
[  705.698424][ T1757] netlink: 'syz.1.7967': attribute type 29 has an invalid length.
[  705.709799][ T1757] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7967'.
[  705.720024][ T1757] netlink: 'syz.1.7967': attribute type 1 has an invalid length.
[  705.753583][ T1762] bond8: (slave bridge6): making interface the new active one
[  705.774228][ T1762] bridge6: entered promiscuous mode
[  705.788945][ T1762] bridge6: entered allmulticast mode
[  705.799389][ T1762] bond8: (slave bridge6): Enslaving as an active interface with an up link
[  706.030404][ T1771] geneve3: entered allmulticast mode
[  706.040274][ T1771] siw: device registration error -23
[  706.115387][ T1773] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  706.308724][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7974'.
[  706.323143][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7974'.
[  706.390620][ T1785] Cannot find del_set index 0 as target
[  706.393952][ T1786] Cannot find del_set index 0 as target
[  706.441284][ T1786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7976'.
[  706.451299][ T1786] bond0: Caught tx_queue_len zero misconfig
[  707.130466][ T1821] veth0: entered promiscuous mode
[  707.144121][ T1821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7987'.
[  707.174990][ T1820] veth0: left promiscuous mode
[  707.205453][ T1823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7985'.
[  707.355297][ T1829] netlink: 'syz.1.7989': attribute type 1 has an invalid length.
[  707.698913][ T1847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7995'.
[  707.806946][ T1851] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7996'.
[  708.470328][ T1879] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  708.497992][ T1879] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  708.508533][ T1879] gretap1: entered promiscuous mode
[  708.514898][ T1879] gretap1: entered allmulticast mode
[  708.685855][ T1888] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  709.421251][ T1917] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004
[  709.440510][ T1921] netlink: 'syz.2.8018': attribute type 1 has an invalid length.
[  709.537964][ T1922] bond5: (slave veth0_to_bond): Releasing active interface
[  709.611240][ T1921] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  710.367099][ T1964] netlink: 'syz.2.8026': attribute type 8 has an invalid length.
[  710.414256][ T1964] __nla_validate_parse: 6 callbacks suppressed
[  710.414286][ T1964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8026'.
[  710.570425][ T1972] syzkaller0: entered promiscuous mode
[  710.609511][ T1972] syzkaller0: entered allmulticast mode
[  710.716301][ T1975] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  711.058746][ T1989] syzkaller0: entered promiscuous mode
[  711.085776][ T1989] syzkaller0: entered allmulticast mode
[  711.178229][ T1989] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  711.249336][ T1970] lo speed is unknown, defaulting to 1000
[  711.257985][ T1970] vxcan1 speed is unknown, defaulting to 1000
[  711.529962][ T2004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8036'.
[  711.567543][ T2004] netlink: 'syz.4.8036': attribute type 1 has an invalid length.
[  711.604016][ T2004] netlink: 'syz.4.8036': attribute type 2 has an invalid length.
[  711.678878][ T2010] netlink: 'syz.4.8038': attribute type 8 has an invalid length.
[  711.686722][ T2010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8038'.
[  712.129996][ T2025] netlink: 'syz.4.8041': attribute type 1 has an invalid length.
[  712.246945][ T2025] bond3: entered promiscuous mode
[  712.256289][ T2025] 8021q: adding VLAN 0 to HW filter on device bond3
[  712.266395][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8043'.
[  712.378517][ T2025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8041'.
[  712.880668][ T2048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8048'.
[  712.970975][ T2059] netlink: 'syz.4.8050': attribute type 8 has an invalid length.
[  712.996570][ T2059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8050'.
[  713.111438][ T2061] netlink: 'syz.1.8051': attribute type 1 has an invalid length.
[  713.121526][ T2061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8051'.
[  713.348780][ T2072] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  713.359122][ T2071] syzkaller0: entered promiscuous mode
[  713.366634][ T2071] syzkaller0: entered allmulticast mode
[  713.443640][ T2074] netlink: 'syz.4.8057': attribute type 1 has an invalid length.
[  713.509173][ T2074] bond4: (slave geneve4): making interface the new active one
[  713.519072][ T2074] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  713.528715][  T208] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  713.550705][ T2074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8057'.
[  713.558785][T13427] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  713.584034][T13427] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  713.593370][T13427] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  713.820783][ T2086] x_tables: duplicate entry at hook 1
[  713.885703][ T2086] sctp: [Deprecated]: syz.3.8062 (pid 2086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  713.885703][ T2086] Use struct sctp_sack_info instead
[  713.926939][ T2088] netlink: 'syz.4.8063': attribute type 8 has an invalid length.
[  713.936813][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8063'.
[  714.306218][ T2111] openvswitch: netlink: IPv6 tunnel dst address is zero
[  714.435369][ T2114] syzkaller0: entered promiscuous mode
[  714.455187][ T2114] syzkaller0: entered allmulticast mode
[  714.469835][T18681] tipc: Node number set to 1133687056
[  714.703609][ T2130] netlink: 'syz.4.8076': attribute type 1 has an invalid length.
[  714.734875][ T2130] 8021q: adding VLAN 0 to HW filter on device bond5
[  714.793359][ T2130] bond5: (slave veth9): Enslaving as an active interface with a down link
[  714.918276][ T2130] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  714.941134][ T2130] IPVS: Error connecting to the multicast addr
[  715.032534][ T2158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  715.419535][ T2173] netlink: 'syz.4.8088': attribute type 2 has an invalid length.
[  715.429398][ T2173] netlink: 'syz.4.8088': attribute type 8 has an invalid length.
[  715.437669][ T2173] __nla_validate_parse: 8 callbacks suppressed
[  715.437700][ T2173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8088'.
[  715.920218][ T2191] syzkaller1: entered promiscuous mode
[  715.926280][ T2191] syzkaller1: entered allmulticast mode
[  716.287980][ T2207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8099'.
[  716.299698][ T2210] sctp: [Deprecated]: syz.1.8100 (pid 2210) Use of struct sctp_assoc_value in delayed_ack socket option.
[  716.299698][ T2210] Use struct sctp_sack_info instead
[  716.311752][ T2206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8099'.
[  716.319885][ T2210] sctp: [Deprecated]: syz.1.8100 (pid 2210) Use of struct sctp_assoc_value in delayed_ack socket option.
[  716.319885][ T2210] Use struct sctp_sack_info instead
[  716.481483][ T2216] netlink: 'syz.4.8102': attribute type 1 has an invalid length.
[  716.525568][ T2216] 8021q: adding VLAN 0 to HW filter on device bond6
[  716.556824][ T2219] bond6: (slave veth13): Enslaving as an active interface with a down link
[  716.609851][ T2216] bond5: (slave veth0_to_bond): Releasing active interface
[  716.624913][ T2216] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  716.810432][ T2223] sctp: [Deprecated]: syz.4.8104 (pid 2223) Use of struct sctp_assoc_value in delayed_ack socket option.
[  716.810432][ T2223] Use struct sctp_sack_info instead
[  716.861310][ T2225] netlink: 'syz.4.8106': attribute type 3 has an invalid length.
[  716.869086][ T2225] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8106'.
[  717.151128][ T2235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.239342][ T2244] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8112'.
[  717.251238][ T2244] sctp: [Deprecated]: syz.3.8112 (pid 2244) Use of struct sctp_assoc_value in delayed_ack socket option.
[  717.251238][ T2244] Use struct sctp_sack_info instead
[  717.381352][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8112'.
[  717.638372][ T2259] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  717.726666][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8116'.
[  717.748528][ T2263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  717.824006][ T2263] syzkaller0: entered promiscuous mode
[  717.831944][ T2263] syzkaller0: entered allmulticast mode
[  717.840642][ T2263] tipc: Resetting bearer <eth:syzkaller0>
[  717.883778][ T2262] tipc: Resetting bearer <eth:syzkaller0>
[  717.913060][ T2269] netlink: 'syz.3.8118': attribute type 10 has an invalid length.
[  717.921430][ T2269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8118'.
[  717.969041][ T2262] tipc: Disabling bearer <eth:syzkaller0>
[  717.987280][ T2269] team0: Port device geneve1 added
[  717.998599][T12726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  718.023396][T12726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  718.050167][T12726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  718.088290][T12726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.142298][ T2276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8121'.
[  718.165269][ T2276] syzkaller1: entered promiscuous mode
[  718.171151][ T2276] syzkaller1: entered allmulticast mode
[  718.246045][ T2280] sctp: [Deprecated]: syz.1.8123 (pid 2280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  718.246045][ T2280] Use struct sctp_sack_info instead
[  718.277196][ T2280] sctp: [Deprecated]: syz.1.8123 (pid 2280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  718.277196][ T2280] Use struct sctp_sack_info instead
[  718.458111][T10195] IPVS: starting estimator thread 0...
[  718.553181][ T2286] IPVS: using max 54 ests per chain, 129600 per kthread
[  718.635031][ T2290] netlink: 'syz.4.8124': attribute type 5 has an invalid length.
[  719.529556][ T2308] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8127'.
[  719.680666][ T2314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  719.796207][ T2314] syzkaller0: entered promiscuous mode
[  719.803587][ T2314] syzkaller0: entered allmulticast mode
[  719.810625][ T2314] tipc: Resetting bearer <eth:syzkaller0>
[  719.823953][T13427] tipc: Resetting bearer <eth:syzkaller0>
[  719.830807][ T2312] tipc: Resetting bearer <eth:syzkaller0>
[  719.899398][ T2312] tipc: Disabling bearer <eth:syzkaller0>
[  720.164942][ T2330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  720.175794][ T2330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  720.183915][ T2330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  720.192926][ T2330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  720.201103][ T2330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  720.353927][ T2336] netlink: 'syz.1.8139': attribute type 12 has an invalid length.
[  720.366313][ T2336] netlink: 'syz.1.8139': attribute type 29 has an invalid length.
[  720.386370][ T2336] netlink: 'syz.1.8139': attribute type 3 has an invalid length.
[  720.395786][ T2336] netlink: 'syz.1.8139': attribute type 2 has an invalid length.
[  720.411419][ T2337] netlink: 'syz.1.8139': attribute type 12 has an invalid length.
[  720.425031][ T2337] netlink: 'syz.1.8139': attribute type 29 has an invalid length.
[  720.434866][ T2337] netlink: 'syz.1.8139': attribute type 3 has an invalid length.
[  720.443881][ T2337] netlink: 'syz.1.8139': attribute type 2 has an invalid length.
[  720.452409][ T2337] __nla_validate_parse: 3 callbacks suppressed
[  720.452436][ T2337] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8139'.
[  720.551332][ T2344] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8140'.
[  720.877909][ T2354] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8143'.
[  720.910984][ T2354] netlink: Conntrack attr has 4 unknown bytes
[  721.046277][ T2329] lo speed is unknown, defaulting to 1000
[  721.054065][ T2329] vxcan1 speed is unknown, defaulting to 1000
[  721.180082][ T2364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  721.224830][ T2364] syzkaller0: entered promiscuous mode
[  721.230343][ T2364] syzkaller0: entered allmulticast mode
[  721.241388][ T2364] tipc: Resetting bearer <eth:syzkaller0>
[  721.251800][ T2363] tipc: Resetting bearer <eth:syzkaller0>
[  721.284578][ T2363] tipc: Disabling bearer <eth:syzkaller0>
[  721.317706][ T2369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  721.609436][ T2376] netlink: 'syz.3.8149': attribute type 2 has an invalid length.
[  721.665670][ T2376] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  722.074505][ T2385] syzkaller0: entered promiscuous mode
[  722.080468][ T2385] syzkaller0: entered allmulticast mode
[  722.188592][ T2406] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8156'.
[  722.203508][ T2403] tipc: Disabling bearer <eth:ipvlan0>
[  722.252346][   T50] Bluetooth: hci3: command tx timeout
[  722.331956][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.341102][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.351664][ T2329] bridge_slave_0: entered allmulticast mode
[  722.361430][ T2329] bridge_slave_0: entered promiscuous mode
[  722.373854][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.381589][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.400332][ T2329] bridge_slave_1: entered allmulticast mode
[  722.409332][ T2329] bridge_slave_1: entered promiscuous mode
[  722.467836][ T2329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  722.482908][ T2329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.543620][ T2329] team0: Port device team_slave_0 added
[  722.557745][ T2329] team0: Port device team_slave_1 added
[  722.609363][ T2329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.628105][ T2329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.659468][ T2329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.684110][ T2329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.699427][ T2329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.730689][ T2329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.868761][ T2427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8162'.
[  722.886023][ T2329] hsr_slave_0: entered promiscuous mode
[  722.910824][ T2329] hsr_slave_1: entered promiscuous mode
[  722.926756][ T2329] debugfs: 'hsr0' already exists in 'hsr'
[  722.940656][ T2329] Cannot create hsr debugfs directory
[  723.021267][ T2435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.038068][ T2435] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  723.516169][ T2329] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  723.541342][ T2329] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  723.574902][ T2329] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  723.658283][ T2329] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  723.686802][ T2329] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  723.724453][ T2329] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  723.733914][ T2329] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  723.784132][ T2329] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  723.965464][ T2329] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.038148][ T2329] 8021q: adding VLAN 0 to HW filter on device team0
[  724.067474][T12726] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.075043][T12726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.124417][T13445] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.132061][T13445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.332773][   T50] Bluetooth: hci3: command tx timeout
[  725.049437][ T2537] validate_nla: 3 callbacks suppressed
[  725.049468][ T2537] netlink: 'syz.1.8185': attribute type 1 has an invalid length.
[  725.154085][ T2329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.350091][ T2550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8188'.
[  725.403297][ T2557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  725.429755][ T2550] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8188'.
[  725.866030][ T2580] bond9: option lp_interval: invalid value (0)
[  725.873501][ T2580] bond9: option lp_interval: allowed values 1 - 2147483647
[  725.883580][ T2580] bond9 (unregistering): Released all slaves
[  725.901363][ T2591] netlink: 'syz.4.8196': attribute type 13 has an invalid length.
[  726.219999][ T2601] syzkaller0: entered promiscuous mode
[  726.239319][ T2601] syzkaller0: entered allmulticast mode
[  726.240416][ T2330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  726.254216][ T2330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  726.267232][ T2330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  726.277392][ T2330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  726.289483][ T2330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  726.318575][ T2601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  726.330097][ T2329] veth0_vlan: entered promiscuous mode
[  726.412732][ T2330] Bluetooth: hci3: command tx timeout
[  726.457420][ T2329] veth1_vlan: entered promiscuous mode
[  726.619526][ T2329] veth0_macvtap: entered promiscuous mode
[  726.636273][ T2329] veth1_macvtap: entered promiscuous mode
[  726.697939][ T2329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  726.769479][ T2329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  726.807111][  T208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  726.831188][  T208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  726.870639][  T208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  726.896032][  T208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  726.900220][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8201'.
[  727.015837][ T2599] tipc: Resetting bearer <eth:syzkaller0>
[  727.027505][ T2599] tipc: Disabling bearer <eth:syzkaller0>
[  727.061375][ T2623] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8202'.
[  727.089888][ T2623] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8202'.
[  727.135961][ T2623] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8202'.
[  727.175749][ T2604] lo speed is unknown, defaulting to 1000
[  727.228609][ T2630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'.
[  727.247640][ T2628] netlink: 'syz.3.8203': attribute type 39 has an invalid length.
[  727.258331][T13427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.288008][ T2604] vxcan1 speed is unknown, defaulting to 1000
[  727.296510][ T2628] netlink: 'syz.3.8203': attribute type 137 has an invalid length.
[  727.299735][T13427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.414832][ T2632] FAULT_INJECTION: forcing a failure.
[  727.414832][ T2632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  727.470155][ T2633] syzkaller0: entered promiscuous mode
[  727.482954][ T2632] CPU: 0 UID: 0 PID: 2632 Comm: syz.4.8205 Not tainted syzkaller #0 PREEMPT(full) 
[  727.482978][ T2632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  727.482987][ T2632] Call Trace:
[  727.483005][ T2632]  <TASK>
[  727.483013][ T2632]  dump_stack_lvl+0xe8/0x150
[  727.483041][ T2632]  should_fail_ex+0x40c/0x560
[  727.483062][ T2632]  _copy_from_iter+0x1d3/0x1660
[  727.483083][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.483100][ T2632]  ? trace_kmem_cache_alloc+0x29/0xe0
[  727.483123][ T2632]  ? __pfx__copy_from_iter+0x10/0x10
[  727.483146][ T2632]  skb_copy_datagram_from_iter+0xe6/0x720
[  727.483166][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.483182][ T2632]  ? tun_get_user+0xad6/0x4350
[  727.483203][ T2632]  ? trace_irq_enable+0x3b/0x140
[  727.483222][ T2632]  ? iov_iter_single_seg_count+0xc9/0x2f0
[  727.483243][ T2632]  tun_get_user+0xc71/0x4350
[  727.483269][ T2632]  ? is_bpf_text_address+0x26/0x2b0
[  727.483337][ T2632]  ? __pfx_tun_get_user+0x10/0x10
[  727.483355][ T2632]  ? aa_file_perm+0x18b/0x15f0
[  727.483373][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.483390][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.483406][ T2632]  ? lock_release+0x4b/0x3c0
[  727.483427][ T2632]  ? aa_file_perm+0x18b/0x15f0
[  727.483445][ T2632]  ? ref_tracker_alloc+0x341/0x4b0
[  727.483465][ T2632]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  727.483483][ T2632]  ? tun_get+0x1c/0x2f0
[  727.483500][ T2632]  ? tun_get+0x1c/0x2f0
[  727.483518][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.483532][ T2632]  ? tun_get+0x1c/0x2f0
[  727.483549][ T2632]  ? lock_release+0x4b/0x3c0
[  727.483568][ T2632]  ? __pfx_aa_file_perm+0x10/0x10
[  727.483585][ T2632]  ? tun_get+0x1c/0x2f0
[  727.483605][ T2632]  tun_chr_write_iter+0x113/0x200
[  727.483626][ T2632]  do_iter_readv_writev+0x612/0x8c0
[  727.483648][ T2632]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  727.483671][ T2632]  ? bpf_lsm_file_permission+0x9/0x20
[  727.483693][ T2632]  ? security_file_permission+0x75/0x260
[  727.483775][ T2632]  ? rw_verify_area+0x203/0x4c0
[  727.483796][ T2632]  vfs_writev+0x343/0x990
[  727.483810][ T2632]  ? taprio_dequeue+0x26/0x540
[  727.483873][ T2632]  ? __pfx_vfs_writev+0x10/0x10
[  727.483893][ T2632]  ? lock_release+0x4b/0x3c0
[  727.483914][ T2632]  ? sched_clock_cpu+0x74/0x440
[  727.483947][ T2632]  ? __fget_files+0x3a2/0x420
[  727.483964][ T2632]  ? __fget_files+0x2a/0x420
[  727.483985][ T2632]  do_writev+0x154/0x2e0
[  727.484001][ T2632]  ? __pfx_do_writev+0x10/0x10
[  727.484015][ T2632]  ? rcu_is_watching+0x15/0xb0
[  727.484032][ T2632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.484049][ T2632]  do_syscall_64+0x174/0x580
[  727.484074][ T2632]  ? clear_bhb_loop+0x40/0x90
[  727.484092][ T2632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.484106][ T2632] RIP: 0033:0x7f2bdcd9ce59
[  727.484121][ T2632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.484135][ T2632] RSP: 002b:00007f2bddcfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  727.484154][ T2632] RAX: ffffffffffffffda RBX: 00007f2bdd015fa0 RCX: 00007f2bdcd9ce59
[  727.484166][ T2632] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003
[  727.484176][ T2632] RBP: 00007f2bddcfa090 R08: 0000000000000000 R09: 0000000000000000
[  727.484186][ T2632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.484197][ T2632] R13: 00007f2bdd016038 R14: 00007f2bdd015fa0 R15: 00007ffc7c79ca88
[  727.484217][ T2632]  </TASK>
[  727.510221][ T2633] syzkaller0: entered allmulticast mode
[  728.042334][T13431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.052158][T13431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.149473][ T2652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8209'.
[  728.216028][ T2652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8209'.
[  728.255359][ T2652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8209'.
[  728.335385][ T2330] Bluetooth: hci6: command tx timeout
[  728.493659][ T2330] Bluetooth: hci3: command tx timeout
[  728.687609][T10195] IPVS: starting estimator thread 0...
[  728.820846][ T2686] IPVS: using max 51 ests per chain, 122400 per kthread
[  728.952610][ T2695] netlink: 'syz.4.8217': attribute type 17 has an invalid length.
[  728.998392][ T2695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8217'.
[  729.038465][ T2695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8217'.
[  729.356721][ T2604] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.367239][ T2725] sctp: [Deprecated]: syz.1.8224 (pid 2725) Use of struct sctp_assoc_value in delayed_ack socket option.
[  729.367239][ T2725] Use struct sctp_sack_info instead
[  729.418851][ T2604] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.487272][ T2604] bridge_slave_0: entered allmulticast mode
[  729.521943][ T2604] bridge_slave_0: entered promiscuous mode
[  729.557453][ T2604] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.565781][ T2604] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.575783][ T2604] bridge_slave_1: entered allmulticast mode
[  729.583959][ T2604] bridge_slave_1: entered promiscuous mode
[  729.662140][ T2604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  729.681885][ T2744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  729.726267][ T2745] veth0_macvtap: Caught tx_queue_len zero misconfig
[  729.751078][ T2604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  729.782508][ T2604] team0: Port device team_slave_0 added
[  729.790189][ T2604] team0: Port device team_slave_1 added
[  729.827436][ T2604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.834409][ T2604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.884947][ T2604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  729.896823][ T2604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  729.903947][ T2604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  729.956442][ T2604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  729.992172][ T2604] hsr_slave_0: entered promiscuous mode
[  729.998725][ T2604] hsr_slave_1: entered promiscuous mode
[  730.004990][ T2604] debugfs: 'hsr0' already exists in 'hsr'
[  730.010836][ T2604] Cannot create hsr debugfs directory
[  730.128043][   T29] audit: type=1804 audit(1782209280.675:21): pid=2774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8232" name="/newroot/321/cgroup.controllers" dev="tmpfs" ino=1661 res=1 errno=0
[  730.215661][   T29] audit: type=1800 audit(1782209280.675:22): pid=2774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8232" name="cgroup.controllers" dev="tmpfs" ino=1661 res=0 errno=0
[  730.404633][ T2604] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  730.412763][   T50] Bluetooth: hci6: command tx timeout
[  730.438239][ T2604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  730.447937][ T2783] openvswitch: netlink: Flow actions attr not present in new flow.
[  730.458120][ T2604] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  730.476673][ T2604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  730.505922][ T2790] bond7: left allmulticast mode
[  730.514022][ T2790] vlan3: left allmulticast mode
[  730.519537][ T2790] bond8: left allmulticast mode
[  730.525928][ T2790] bridge6: left allmulticast mode
[  730.535344][ T2604] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  730.549251][ T2604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  730.559058][ T2604] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  730.570653][ T2604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  730.897977][ T2809] netlink: 'syz.3.8242': attribute type 1 has an invalid length.
[  730.957260][ T2604] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.111340][ T2809] 8021q: adding VLAN 0 to HW filter on device bond9
[  731.170622][ T2604] 8021q: adding VLAN 0 to HW filter on device team0
[  731.216163][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.223767][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  731.232380][ T2838] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004
[  731.241404][ T2838] openvswitch: netlink: IP tunnel dst address not specified
[  731.262639][ T2819] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  731.282991][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.298607][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.323847][ T2842] netlink: 'syz.5.8245': attribute type 1 has an invalid length.
[  731.621617][ T2846] bond7: entered promiscuous mode
[  731.713862][ T2855] netlink: 'syz.1.8248': attribute type 39 has an invalid length.
[  732.182647][ T2876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  732.299661][ T2880] syzkaller1: entered promiscuous mode
[  732.310995][ T2880] syzkaller1: entered allmulticast mode
[  732.514105][ T2890] __nla_validate_parse: 8 callbacks suppressed
[  732.514138][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8254'.
[  732.596925][   T50] Bluetooth: hci6: command 0x040f tx timeout
[  732.857622][ T2899] netlink: 'syz.3.8257': attribute type 2 has an invalid length.
[  732.951833][ T2908] tunl0: Caught tx_queue_len zero misconfig
[  732.973830][ T2906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8256'.
[  733.044694][ T2917] netlink: 'syz.3.8260': attribute type 23 has an invalid length.
[  733.230667][ T2604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.442974][ T2927] netlink: 'syz.5.8263': attribute type 1 has an invalid length.
[  733.457768][ T2927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8263'.
[  733.467925][ T2931] lo: Caught tx_queue_len zero misconfig
[  733.842197][ T2604] veth0_vlan: entered promiscuous mode
[  733.855296][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8272'.
[  733.866228][ T2604] veth1_vlan: entered promiscuous mode
[  733.891736][ T2604] veth0_macvtap: entered promiscuous mode
[  733.900437][ T2604] veth1_macvtap: entered promiscuous mode
[  733.938033][ T2604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  733.949622][ T2604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  733.962314][   T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  733.992858][T13430] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.001854][T13430] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  734.048216][T13430] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  734.308354][ T2974] syzkaller1: entered promiscuous mode
[  734.384600][ T2974] syzkaller1: entered allmulticast mode
[  734.407407][  T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.447108][  T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.538543][  T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.565437][  T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.653388][ T2891] Bluetooth: hci6: command 0x040f tx timeout
[  735.265239][ T3025] netlink: 'syz.3.8285': attribute type 1 has an invalid length.
[  735.290655][ T3025] netlink: 'syz.3.8285': attribute type 2 has an invalid length.
[  735.305992][ T3026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8286'.
[  735.350266][ T3025] netlink: 'syz.3.8285': attribute type 1 has an invalid length.
[  735.384324][ T3025] netlink: 'syz.3.8285': attribute type 2 has an invalid length.
[  735.423344][ T3025] sch_fq: defrate 0 ignored.
[  735.465624][ T3032] sch_fq: defrate 0 ignored.
[  735.873981][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'.
[  735.954089][ T3068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8297'.
[  735.986700][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8295'.
[  736.025244][ T3061] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  736.055082][ T3061] bond10 (unregistering): Released all slaves
[  736.475917][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'.
[  736.558732][ T3088] openvswitch: netlink: IP tunnel dst address not specified
[  736.732155][ T2891] Bluetooth: hci6: command 0x040f tx timeout
[  736.793246][ T3103] netlink: 'syz.4.8310': attribute type 8 has an invalid length.
[  736.801640][ T3103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8310'.
[  736.856025][ T3106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.053297][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  737.069252][ T3111] netlink: 'syz.3.8312': attribute type 1 has an invalid length.
[  737.130889][ T3119] netlink: 'syz.3.8312': attribute type 5 has an invalid length.
[  737.304781][   T29] audit: type=1804 audit(1782209287.855:23): pid=3129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8318" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=131 res=1 errno=0
[  737.337398][ T3111] 8021q: adding VLAN 0 to HW filter on device bond10
[  737.407270][   T29] audit: type=1800 audit(1782209287.855:24): pid=3129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8318" name="cgroup.controllers" dev="tmpfs" ino=131 res=0 errno=0
[  737.440496][ T3119] bond10: (slave geneve2): making interface the new active one
[  737.460038][ T3119] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  737.571310][ T3138] tipc: Started in network mode
[  737.601693][ T3138] tipc: Node identity 06d513b5340e, cluster identity 4711
[  737.636557][ T3138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  737.865683][ T3153] netlink: 'syz.1.8324': attribute type 1 has an invalid length.
[  737.888186][ T3139] syzkaller0: entered promiscuous mode
[  737.899172][ T3139] syzkaller0: entered allmulticast mode
[  737.910965][ T3139] tipc: Resetting bearer <eth:syzkaller0>
[  737.919489][T13431] tipc: Resetting bearer <eth:syzkaller0>
[  737.971944][ T3132] tipc: Resetting bearer <eth:syzkaller0>
[  738.233310][ T3132] tipc: Disabling bearer <eth:syzkaller0>
[  738.476353][ T3184] __nla_validate_parse: 2 callbacks suppressed
[  738.476400][ T3184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8333'.
[  738.600027][ T3190] syzkaller0: entered promiscuous mode
[  738.621041][ T3190] syzkaller0: entered allmulticast mode
[  738.650025][ T3196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.928583][ T3206] tipc: Failed to remove unknown binding: 66,1,1/10005162:2307946238/2307946240
[  739.135642][ T3233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8340'.
[  739.168682][ T3217] syzkaller0: entered promiscuous mode
[  739.195510][ T3234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8341'.
[  739.218686][ T3217] syzkaller0: entered allmulticast mode
[  739.268202][ T3234] openvswitch: netlink: EtherType 50a is less than min 600
[  739.318554][ T3234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8341'.
[  739.730129][ T3255] openvswitch: netlink: IP tunnel dst address not specified
[  739.877698][   T42] IPVS: starting estimator thread 0...
[  739.884849][ T3264] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  739.983958][ T3267] IPVS: using max 48 ests per chain, 115200 per kthread
[  740.265380][ T3287] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:12
[  740.439509][ T3295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8357'.
[  740.570569][ T3298] bridge11: entered promiscuous mode
[  740.608903][ T3298] bridge11: entered allmulticast mode
[  740.666256][ T3298] team0: Port device bridge11 added
[  740.682987][ T3295] bridge0: port 1(team0) entered blocking state
[  740.711414][ T3295] bridge0: port 1(team0) entered disabled state
[  740.736940][ T3295] team0: entered allmulticast mode
[  740.744051][ T3295] geneve1: entered allmulticast mode
[  740.751910][ T3295] team0: entered promiscuous mode
[  740.758363][ T3295] geneve1: entered promiscuous mode
[  740.787383][ T3309] siw: device registration error -23
[  740.795682][ T3302] bond1: option all_slaves_active: invalid value (222)
[  740.805612][ T3302] bond1 (unregistering): Released all slaves
[  740.954423][ T3312] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8364'.
[  741.043544][ T3320] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8367'.
[  741.052628][ T3320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8367'.
[  741.086741][ T3323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  741.229414][ T3328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8370'.
[  741.297436][ T3331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8370'.
[  741.388521][ T3334] netlink: 'syz.5.8371': attribute type 1 has an invalid length.
[  741.396371][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.403765][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.416544][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  741.528460][ T3337] l2tp_ppp: sess 2/0: no socket in recv
[  741.539741][ T3337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  741.914493][ T3355] netlink: 'syz.4.8377': attribute type 83 has an invalid length.
[  742.076180][ T3363] bond0: Error: CAN devices cannot be enslaved
[  742.084036][ T3364] bond0: Error: CAN devices cannot be enslaved
[  742.093037][ T3358] netlink: 'syz.3.8379': attribute type 23 has an invalid length.
[  742.183185][ T1325] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  742.387874][ T3384] netlink: 'syz.1.8388': attribute type 1 has an invalid length.
[  742.583788][ T3395] syzkaller0: entered promiscuous mode
[  742.623701][ T3395] syzkaller0: entered allmulticast mode
[  742.624887][ T3403] 0: reclassify loop, rule prio 0, protocol 800
[  742.868774][ T3418] netlink: 'syz.3.8395': attribute type 23 has an invalid length.
[  743.096389][ T3426] netlink: 'syz.1.8397': attribute type 13 has an invalid length.
[  743.128366][ T3423] ip6gretap0: default FDB implementation only supports local addresses
[  743.313949][ T3426] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  743.376098][ T3426] bond7 (unregistering): Released all slaves
[  743.720804][ T3440] bond7: left promiscuous mode
[  743.764072][ T3440] vlan3: left promiscuous mode
[  743.769279][ T3440] bond8: left promiscuous mode
[  743.776354][ T3440] bridge6: left promiscuous mode
[  743.828785][ T3442] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  743.889343][  T133] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.945634][  T133] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.963632][  T133] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  743.980796][  T133] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  744.269785][ T3470] netlink: 'syz.3.8406': attribute type 4 has an invalid length.
[  744.312905][ T3470] __nla_validate_parse: 13 callbacks suppressed
[  744.312937][ T3470] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8406'.
[  744.363873][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8406'.
[  744.390519][ T3470] .`: renamed from bond0
[  744.421118][ T3475] macvlan3: entered allmulticast mode
[  744.438287][ T3475] dummy0: entered allmulticast mode
[  744.549099][ T3485] bond0: Caught tx_queue_len zero misconfig
[  744.730488][   T29] audit: type=1804 audit(1782209295.275:25): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8413" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3056 res=1 errno=0
[  744.756514][   T29] audit: type=1800 audit(1782209295.275:26): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8413" name="cgroup.controllers" dev="tmpfs" ino=3056 res=0 errno=0
[  747.155430][ T3470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  747.166179][ T3483] netlink: 'syz.6.8411': attribute type 1 has an invalid length.
[  747.174929][ T3483] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8411'.
[  747.507168][ T3514] 8021q: VLANs not supported on xfrm0
[  747.546836][ T3513] team_slave_1: Caught tx_queue_len zero misconfig
[  747.616838][ T3516] dvmrp1: entered allmulticast mode
[  747.720208][ T3521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  747.899283][ T3524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  747.931362][ T3525] ip6t_rpfilter: unknown options
[  747.951836][ T3525] netlink: 'syz.1.8422': attribute type 21 has an invalid length.
[  747.972801][ T3525] netlink: 'syz.1.8422': attribute type 22 has an invalid length.
[  747.995722][ T3525] netlink: 'syz.1.8422': attribute type 23 has an invalid length.
[  748.034865][ T3525] netlink: 'syz.1.8422': attribute type 25 has an invalid length.
[  748.039277][ T3529] tcf_pedit_act: 7 callbacks suppressed
[  748.039392][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.050601][ T3525] netlink: 'syz.1.8422': attribute type 26 has an invalid length.
[  748.055623][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.055653][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.055663][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.065315][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8422'.
[  748.070475][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.099832][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.106286][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.112989][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.119591][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.126044][ T3529] tc action pedit 'at' offset 5 out of bounds
[  748.132627][ T3529] 0: reclassify loop, rule prio 0, protocol 800
[  748.436075][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'.
[  748.449268][ T3554] openvswitch: netlink: IP tunnel TTL not specified.
[  748.493223][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'.
[  748.657742][ T3561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8433'.
[  748.716887][ T3563] IPVS: set_ctl: invalid protocol: 12 172.30.1.2:20001
[  749.030660][ T3579] netlink: 'syz.1.8440': attribute type 1 has an invalid length.
[  749.200298][ T3579] 8021q: adding VLAN 0 to HW filter on device bond7
[  749.382558][T21848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  749.393477][T21848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  749.401448][T21848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  749.410127][T21848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  749.418538][T21848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  749.619525][ T3587] syzkaller0: entered promiscuous mode
[  749.642137][ T3587] syzkaller0: entered allmulticast mode
[  750.403889][ T3602] lo speed is unknown, defaulting to 1000
[  750.411511][ T3602] vxcan1 speed is unknown, defaulting to 1000
[  750.419057][ T3637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8450'.
[  750.839436][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.847220][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state
[  750.855180][ T3602] bridge_slave_0: entered allmulticast mode
[  750.863929][ T3602] bridge_slave_0: entered promiscuous mode
[  750.874150][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.881789][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.889885][ T3602] bridge_slave_1: entered allmulticast mode
[  750.900431][ T3602] bridge_slave_1: entered promiscuous mode
[  750.947905][ T3602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  750.962554][ T3602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  751.002931][ T3602] team0: Port device team_slave_0 added
[  751.015383][ T3602] team0: Port device team_slave_1 added
[  751.051209][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.058877][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.086557][ T3602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.099396][ T3602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.106373][ T3602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.132248][ T3602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.168973][ T3602] hsr_slave_0: entered promiscuous mode
[  751.175601][ T3602] hsr_slave_1: entered promiscuous mode
[  751.181964][ T3602] debugfs: 'hsr0' already exists in 'hsr'
[  751.194262][ T3602] Cannot create hsr debugfs directory
[  751.276633][ T3602] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  751.339079][ T3602] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  751.397566][ T3602] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  751.454548][T21848] Bluetooth: hci7: command tx timeout
[  751.476642][ T3602] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  752.034666][ T3581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  752.059365][ T3602] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  752.120914][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  752.150998][ T3602] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  752.210274][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  752.261824][ T3602] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  752.298678][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  752.321715][ T3602] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  752.389096][ T3602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.680067][ T3676] syzkaller0: entered promiscuous mode
[  752.691807][ T3676] syzkaller0: entered allmulticast mode
[  752.762633][ T3676] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  752.867394][ T3684] netlink: 'syz.6.8460': attribute type 1 has an invalid length.
[  752.881796][ T3684] netlink: 'syz.6.8460': attribute type 7 has an invalid length.
[  752.893401][ T3684] netlink: 'syz.6.8460': attribute type 8 has an invalid length.
[  752.922056][ T3684] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8460'.
[  753.033272][ T3602] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.127861][ T3602] 8021q: adding VLAN 0 to HW filter on device team0
[  753.197699][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.205351][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[  753.218931][ T3692] xt_cgroup: xt_cgroup: no path or classid specified
[  753.297718][ T3692] xt_cgroup: xt_cgroup: no path or classid specified
[  753.317372][ T3694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8464'.
[  753.354436][  T208] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.362072][  T208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  753.431604][ T3705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8464'.
[  753.461649][ T3705] nbd: device at index 64 is going down
[  753.498971][ T3691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  753.535444][T21848] Bluetooth: hci7: command tx timeout
[  753.684282][ T3712] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8467'.
[  753.732195][ T2166] udevd[2166]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  753.754406][ T3691] syzkaller0: entered promiscuous mode
[  753.778856][ T3691] syzkaller0: entered allmulticast mode
[  753.794672][ T3691] tipc: Resetting bearer <eth:syzkaller0>
[  753.863426][T13427] tipc: Resetting bearer <eth:syzkaller0>
[  753.985427][ T3723] veth1_to_team: Caught tx_queue_len zero misconfig
[  754.026136][ T3689] tipc: Resetting bearer <eth:syzkaller0>
[  754.149230][ T3689] tipc: Disabling bearer <eth:syzkaller0>
[  754.398614][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8475'.
[  755.086662][ T3773] hsr0: entered allmulticast mode
[  755.103214][ T3773] hsr_slave_0: entered allmulticast mode
[  755.109468][ T3773] hsr_slave_1: entered allmulticast mode
[  755.369089][ T3602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  755.391258][ T3790] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  755.445777][ T3790] bond8: (slave lo): Enslaving as an active interface with an up link
[  755.459872][ T3790] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  755.613663][T21848] Bluetooth: hci7: command tx timeout
[  755.871278][ T3805] bond1: option fail_over_mac: invalid value (16)
[  755.885770][ T3805] bond1 (unregistering): Released all slaves
[  756.296475][ T3840] xt_ecn: cannot match TCP bits for non-tcp packets
[  756.325180][ T3835] 8021q: VLANs not supported on lo
[  756.564805][ T3847] netlink: 'syz.5.8499': attribute type 1 has an invalid length.
[  756.593391][ T3602] veth0_vlan: entered promiscuous mode
[  756.623960][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8499'.
[  756.646201][ T3602] veth1_vlan: entered promiscuous mode
[  756.653745][ T3853] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8501'.
[  756.910595][ T3602] veth0_macvtap: entered promiscuous mode
[  756.984652][ T3602] veth1_macvtap: entered promiscuous mode
[  757.087743][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  757.147215][ T3602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  757.215574][T21848] block nbd9: Receive control failed (result -32)
[  757.231000][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.274584][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  757.294644][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.343631][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  757.690823][ T3889] netlink: 'syz.3.8507': attribute type 3 has an invalid length.
[  757.704875][T21848] Bluetooth: hci7: command tx timeout
[  757.767789][  T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.847028][  T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.006140][ T3901] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.007997][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  758.014178][ T3901] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.045963][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.269390][ T3910] netlink: 'syz.5.8515': attribute type 1 has an invalid length.
[  758.470557][ T3921] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8518'.
[  758.550479][ T3917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  758.769741][ T3930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8520'.
[  758.815808][ T3935] netlink: 'syz.1.8522': attribute type 1 has an invalid length.
[  758.868216][ T3941] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8523'.
[  758.927000][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8523'.
[  759.281171][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8528'.
[  759.967838][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8538'.
[  760.077451][ T3989] tcf_pedit_act: 7 callbacks suppressed
[  760.077479][ T3989] tc action pedit 'at' offset 9 out of bounds
[  760.329271][ T3998] netlink: 'syz.5.8542': attribute type 21 has an invalid length.
[  760.357071][ T3998] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8542'.
[  760.401438][ T4002] netlink: 'syz.4.8544': attribute type 2 has an invalid length.
[  760.419514][ T4002] netlink: 'syz.4.8544': attribute type 2 has an invalid length.
[  760.505016][ T3989] lo speed is unknown, defaulting to 1000
[  760.521778][ T3989] vxcan1 speed is unknown, defaulting to 1000
[  760.717721][ T4022] batadv0: Caught tx_queue_len zero misconfig
[  760.735589][ T4022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8549'.
[  760.817696][ T2891] Bluetooth: hci7: command 0x0405 tx timeout
[  760.903610][ T4034] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  761.658773][ T4059] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8558'.
[  761.731533][ T4058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8559'.
[  762.311494][ T4082] netlink: 'syz.3.8567': attribute type 17 has an invalid length.
[  762.330113][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8567'.
[  762.357908][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8567'.
[  762.385204][ T4084] openvswitch: netlink: IPv4 tun info is not correct
[  762.662798][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8570'.
[  762.736252][ T4091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8570'.
[  763.058863][ T4117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  763.904181][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8590'.
[  763.957008][ T4155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8590'.
[  764.023841][ T4154] 8021q: adding VLAN 0 to HW filter on device bond9
[  764.344457][ T4175] IPv6: NLM_F_CREATE should be specified when creating new route
[  764.390902][ T4179] Cannot find set identified by id 65534 to match
[  764.558124][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8600'.
[  764.838750][ T4203] netlink: 'syz.6.8604': attribute type 39 has an invalid length.
[  765.135697][ T4194] syzkaller0: entered promiscuous mode
[  765.145794][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8602'.
[  765.161318][ T4194] syzkaller0: entered allmulticast mode
[  765.288402][ T4219] syzkaller0: entered promiscuous mode
[  765.318375][ T4219] syzkaller0: entered allmulticast mode
[  765.540165][ T4233] nbd: illegal input index -8454144
[  765.944953][ T4247] syzkaller0: entered promiscuous mode
[  765.966199][ T4247] syzkaller0: entered allmulticast mode
[  766.069346][ T4255] veth0: entered promiscuous mode
[  766.105240][ T4254] veth0: left promiscuous mode
[  766.125617][ T4265] netlink: 'syz.6.8621': attribute type 11 has an invalid length.
[  766.936582][ T4304] netlink: 'syz.3.8633': attribute type 2 has an invalid length.
[  766.978705][ T4304] __nla_validate_parse: 6 callbacks suppressed
[  766.978722][ T4304] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8633'.
[  767.117002][ T4314] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8637'.
[  767.173610][ T4312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8636'.
[  767.206411][ T4315] syzkaller0: entered promiscuous mode
[  767.410663][ T4329] netlink: 'syz.4.8638': attribute type 2 has an invalid length.
[  767.422393][ T4332] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  767.895535][ T4356] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8642'.
[  768.031503][ T4361] netlink: 'syz.5.8646': attribute type 11 has an invalid length.
[  768.059450][ T4361] netlink: 'syz.5.8646': attribute type 5 has an invalid length.
[  768.079234][ T4361] netlink: 6548 bytes leftover after parsing attributes in process `syz.5.8646'.
[  768.155238][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8647'.
[  768.192384][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8647'.
[  768.359059][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8650'.
[  768.387431][ T4379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8653'.
[  768.421028][ T4376] netlink: 'syz.4.8652': attribute type 10 has an invalid length.
[  768.436416][ T4376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8652'.
[  768.483065][ T4376] team0: Port device geneve1 added
[  768.858413][ T4398] xt_hashlimit: size too large, truncated to 1048576
[  768.904172][ T4401] openvswitch: netlink: IPv6 tunnel dst address is zero
[  768.926746][ T4401] Cannot find del_set index 3 as target
[  769.383644][ T4417] netlink: 'syz.3.8663': attribute type 1 has an invalid length.
[  769.414794][   T29] audit: type=1804 audit(1782209319.955:27): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8662" name="/newroot/93/cgroup.controllers" dev="tmpfs" ino=494 res=1 errno=0
[  769.487655][   T29] audit: type=1800 audit(1782209319.955:28): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8662" name="cgroup.controllers" dev="tmpfs" ino=494 res=0 errno=0
[  769.579664][ T4425] syzkaller0: entered promiscuous mode
[  769.586811][ T4425] syzkaller0: entered allmulticast mode
[  769.757733][ T4428] bond0: entered promiscuous mode
[  769.771270][ T4428] bond_slave_0: entered promiscuous mode
[  769.787551][ T4428] bond_slave_1: entered promiscuous mode
[  769.795652][ T4428] bond0: entered allmulticast mode
[  769.801213][ T4428] bond_slave_0: entered allmulticast mode
[  769.809564][ T4428] bond_slave_1: entered allmulticast mode
[  770.151250][ T4443] syzkaller0: entered promiscuous mode
[  770.180350][ T4443] syzkaller0: entered allmulticast mode
[  771.257840][ T4477] macvtap1: entered promiscuous mode
[  771.281044][ T4477] macvtap1: entered allmulticast mode
[  771.306172][ T4477] veth1_vlan: entered allmulticast mode
[  771.400324][ T4485] macvtap2: entered promiscuous mode
[  771.415936][ T4485] macvtap2: entered allmulticast mode
[  771.550259][ T4498] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode
[  772.351552][ T4535] netlink: 'syz.1.8699': attribute type 2 has an invalid length.
[  773.595446][ T4607] openvswitch: netlink: IP tunnel dst address not specified
[  773.622205][ T4607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.666227][ T4607] __nla_validate_parse: 7 callbacks suppressed
[  773.666257][ T4607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8719'.
[  774.036263][ T4628] syzkaller0: entered promiscuous mode
[  774.066895][ T4628] syzkaller0: entered allmulticast mode
[  774.151794][ T4636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8725'.
[  774.271169][ T4642] lo: entered promiscuous mode
[  774.296234][ T4642] tunl0: entered promiscuous mode
[  774.329394][ T4642] gre0: entered promiscuous mode
[  774.391526][ T4642] gretap0: entered promiscuous mode
[  774.438561][ T4642] erspan0: left allmulticast mode
[  774.454109][ T4642] ip_vti0: entered promiscuous mode
[  774.498496][ T4642] ip6_vti0: entered promiscuous mode
[  774.539581][ T4642] sit0: entered promiscuous mode
[  774.554425][ T4642] ip6tnl0: entered promiscuous mode
[  774.569039][ T4642] ip6gre0: entered promiscuous mode
[  774.596017][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.620851][ T4642] bridge0: entered promiscuous mode
[  774.651914][ T4642] vcan0: entered promiscuous mode
[  774.735514][ T4642] bond0: entered promiscuous mode
[  774.757014][ T4668] netlink: 'syz.3.8734': attribute type 3 has an invalid length.
[  774.787091][ T4642] bond_slave_0: entered promiscuous mode
[  774.822834][ T4642] bond_slave_1: entered promiscuous mode
[  774.846662][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8734'.
[  774.873296][ T4642] nlmon0: entered promiscuous mode
[  774.900109][ T4642] vxcan0: entered promiscuous mode
[  774.953229][ T4642] vxcan1: entered promiscuous mode
[  775.005522][ T4642] veth0: entered promiscuous mode
[  775.046517][ T4642] veth1: entered promiscuous mode
[  775.125818][ T4642] wg0: entered promiscuous mode
[  775.196733][ T4642] wg2: entered promiscuous mode
[  775.240914][ T4642] veth0_to_bridge: entered promiscuous mode
[  775.299306][ T4642] veth0_to_bond: entered promiscuous mode
[  775.315674][ T4690] FAULT_INJECTION: forcing a failure.
[  775.315674][ T4690] name failslab, interval 1, probability 0, space 0, times 0
[  775.337406][ T4642] veth0_to_bond: left allmulticast mode
[  775.370776][ T4690] CPU: 0 UID: 0 PID: 4690 Comm: syz.6.8739 Not tainted syzkaller #0 PREEMPT(full) 
[  775.370801][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  775.370811][ T4690] Call Trace:
[  775.370818][ T4690]  <TASK>
[  775.370834][ T4690]  dump_stack_lvl+0xe8/0x150
[  775.370860][ T4690]  should_fail_ex+0x40c/0x560
[  775.370883][ T4690]  should_failslab+0xa8/0x100
[  775.370906][ T4690]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  775.370926][ T4690]  ? rcu_is_watching+0x15/0xb0
[  775.370945][ T4690]  ? __alloc_skb+0x1d7/0x7a0
[  775.370966][ T4690]  ? trace_irq_enable+0x3b/0x140
[  775.370989][ T4690]  __alloc_skb+0x1d7/0x7a0
[  775.371009][ T4690]  netlink_sendmsg+0x5d4/0xb40
[  775.371030][ T4690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.371052][ T4690]  ? trace_irq_disable+0x3b/0x140
[  775.371070][ T4690]  ? aa_sock_msg_perm+0xf1/0x1b0
[  775.371089][ T4690]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  775.371107][ T4690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.371129][ T4690]  ____sys_sendmsg+0x9b9/0xa20
[  775.371154][ T4690]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.371176][ T4690]  ? lock_release+0x4b/0x3c0
[  775.371219][ T4690]  ? import_iovec+0x73/0xa0
[  775.371240][ T4690]  ___sys_sendmsg+0x2a5/0x360
[  775.371261][ T4690]  ? rcu_is_watching+0x15/0xb0
[  775.371275][ T4690]  ? get_pid_task+0x20/0x1f0
[  775.371292][ T4690]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.371315][ T4690]  ? rcu_is_watching+0x15/0xb0
[  775.371340][ T4690]  ? __fget_files+0x2a/0x420
[  775.371358][ T4690]  ? __fget_files+0x3a2/0x420
[  775.371379][ T4690]  __x64_sys_sendmsg+0x1b1/0x290
[  775.371401][ T4690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.371428][ T4690]  ? rcu_is_watching+0x15/0xb0
[  775.371445][ T4690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.371463][ T4690]  do_syscall_64+0x174/0x580
[  775.371486][ T4690]  ? trace_irq_disable+0x3b/0x140
[  775.371505][ T4690]  ? clear_bhb_loop+0x40/0x90
[  775.371523][ T4690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.371538][ T4690] RIP: 0033:0x7f3a4679ce59
[  775.371555][ T4690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.371569][ T4690] RSP: 002b:00007f3a47591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.371587][ T4690] RAX: ffffffffffffffda RBX: 00007f3a46a16090 RCX: 00007f3a4679ce59
[  775.371599][ T4690] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006
[  775.371610][ T4690] RBP: 00007f3a47591090 R08: 0000000000000000 R09: 0000000000000000
[  775.371620][ T4690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.371630][ T4690] R13: 00007f3a46a16128 R14: 00007f3a46a16090 R15: 00007fffcff02758
[  775.371649][ T4690]  </TASK>
[  775.671119][ T4642] veth1_to_bond: entered promiscuous mode
[  775.830380][ T4642] veth0_to_team: entered promiscuous mode
[  775.870132][ T4642] team_slave_0: entered promiscuous mode
[  775.893094][ T4642] veth1_to_team: entered promiscuous mode
[  775.904048][ T4642] team_slave_1: entered promiscuous mode
[  775.910725][ T4642] veth0_to_batadv: entered promiscuous mode
[  775.921449][ T4642] batadv_slave_0: entered promiscuous mode
[  775.934005][ T4642] xfrm0: entered promiscuous mode
[  775.955127][ T4642] veth0_to_hsr: entered promiscuous mode
[  775.970445][ T4642] veth1_to_hsr: entered promiscuous mode
[  775.985708][ T4642] hsr0: entered promiscuous mode
[  776.011429][ T4699] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8742'.
[  776.054791][ T4642] macvtap0: entered promiscuous mode
[  776.064543][ T4642] macsec0: entered promiscuous mode
[  776.077009][ T4642] geneve0: entered promiscuous mode
[  776.095523][ T4642] geneve1: entered promiscuous mode
[  776.107776][ T4642] netdevsim netdevsim1 
: entered promiscuous mode
[  776.125634][ T4642] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  776.161446][ T4642] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  776.181115][ T4642] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  776.193336][ T4642] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode
[  776.202442][ T4642] wireguard0: entered promiscuous mode
[  776.211301][ T4642] macsec1: entered promiscuous mode
[  776.221610][ T4642] bond1: entered promiscuous mode
[  776.231907][ T4642] sit1: entered promiscuous mode
[  776.237792][ T4642] mac80211_hwsim hwsim79 wlan2: entered promiscuous mode
[  776.247729][ T4642] gre1: entered promiscuous mode
[  776.262555][ T4642] mac80211_hwsim hwsim81 wlan3: entered promiscuous mode
[  776.276726][ T4642] sit2: entered promiscuous mode
[  776.307236][ T4642] geneve2: left allmulticast mode
[  776.315662][ T4642] bond3: entered promiscuous mode
[  776.321587][ T4642] sit3: entered promiscuous mode
[  776.337907][ T4642] ipvlan2: entered promiscuous mode
[  776.344172][ T4642] ipvlan3: entered promiscuous mode
[  776.350169][ T4642] bridge1: entered promiscuous mode
[  776.357352][ T4642] vlan2: entered promiscuous mode
[  776.367761][ T4642] vlan2: left allmulticast mode
[  776.373786][ T4642] bond0: left allmulticast mode
[  776.380411][ T4642] bond_slave_0: left allmulticast mode
[  776.387590][ T4642] bond_slave_1: left allmulticast mode
[  776.394246][ T4642] ip6erspan0: entered promiscuous mode
[  776.400300][ T4642] veth2: entered promiscuous mode
[  776.406074][ T4642] veth3: entered promiscuous mode
[  776.424294][ T4642] mac80211_hwsim hwsim86 wlan4: entered promiscuous mode
[  776.438509][ T4642] geneve3: entered promiscuous mode
[  776.445006][ T4642] geneve3: left allmulticast mode
[  776.450778][ T4642] syztnl2: entered promiscuous mode
[  776.457158][ T4642] mac80211_hwsim hwsim89 wlan5: entered promiscuous mode
[  776.466435][ T4642] bridge2: entered promiscuous mode
[  776.478194][ T4642] syztnl1: entered promiscuous mode
[  776.484158][    C1] vcan0: j1939_tp_rxtimer: 0xffff88809d828000: rx timeout, send abort
[  776.494323][ T4642] mac80211_hwsim hwsim92 wlan6: entered promiscuous mode
[  776.502680][ T4642] geneve4: entered promiscuous mode
[  776.508836][ T4642] ipip0: entered promiscuous mode
[  776.516822][ T4642] gtp0: entered promiscuous mode
[  776.523734][ T4642] mac80211_hwsim hwsim98 wlan7: entered promiscuous mode
[  776.530941][ T4642] bond6: entered promiscuous mode
[  776.536350][ T4642] dvmrp1: entered promiscuous mode
[  776.543442][ T4642] bond7: entered promiscuous mode
[  776.549518][ T4642] sit4: entered promiscuous mode
[  776.554571][ T4642] bond8: entered promiscuous mode
[  776.559820][ T4642] erspan1: entered promiscuous mode
[  776.566262][ T4642] bond9: entered promiscuous mode
[  776.572442][ T4642] vti0: entered promiscuous mode
[  776.577538][ T4642] ipvlan0: entered promiscuous mode
[  776.588508][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8734'.
[  776.597435][T13431] netdevsim netdevsim1 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.605904][T13431] netdevsim netdevsim1 
: unset [1, 1] type 2 family 0 port 19999 - 0
[  776.614279][T13431] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.637321][T13431] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  776.671408][ T4715] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001
[  776.678251][T13431] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.687137][T13431] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  776.696137][T13431] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  776.705194][T13431] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  776.726612][T13431] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  776.759035][T13431] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  776.773945][T13431] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  776.798936][T13431] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  776.979531][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880677ee400: rx timeout, send abort
[  776.988308][    C1] vcan0: j1939_tp_rxtimer: 0xffff88809d828000: abort rx timeout. Force session deactivation
[  777.298101][ T4738] IPVS: rr: FWM 3 0x00000003 - no destination available
[  777.488264][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880677ee400: abort rx timeout. Force session deactivation
[  777.599719][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8757'.
[  777.676523][ T4754] netlink: 'syz.1.8757': attribute type 1 has an invalid length.
[  777.708272][ T4754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8757'.
[  778.053224][ T4776] syzkaller1: tun_chr_ioctl cmd 1074025677
[  778.064462][ T4776] syzkaller1: linktype set to 823
[  778.420896][ T4790] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.446790][ T4792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8764'.
[  778.476655][ T4792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8764'.
[  778.534116][ T4796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  778.549432][T13431] bond12: left allmulticast mode
[  778.565159][T13431] bond12: left promiscuous mode
[  778.583378][T13431] bridge0: port 1(bond12) entered disabled state
[  778.606079][T13431] bond4: left allmulticast mode
[  778.615381][T13431] bond4: left promiscuous mode
[  778.627057][T13431] bridge0: port 3(bond4) entered disabled state
[  778.760679][ T4803] netlink: 'syz.5.8766': attribute type 1 has an invalid length.
[  779.171869][T13431] bond1 (unregistering): Released all slaves
[  779.190768][T13431] bond2 (unregistering): Released all slaves
[  779.207101][T13431] bond3 (unregistering): Released all slaves
[  779.224633][T13431] bond4 (unregistering): Released all slaves
[  779.252586][T13431] bond5 (unregistering): Released all slaves
[  779.268613][T13431] bond6 (unregistering): Released all slaves
[  779.285343][T13431] bond7 (unregistering): Released all slaves
[  779.303243][T13431] bond8 (unregistering): Released all slaves
[  779.322961][T13431] bond9 (unregistering): Released all slaves
[  779.339864][T13431] bond10 (unregistering): (slave veth5): Releasing active interface
[  779.360974][T13431] bond10 (unregistering): (slave veth7): Releasing active interface
[  779.374522][T13431] bond10 (unregistering): Released all slaves
[  779.390639][T13431] bond11 (unregistering): Released all slaves
[  779.407089][T13431] bond12 (unregistering): Released all slaves
[  779.425251][T13431] bond13 (unregistering): Released all slaves
[  779.446471][ T4759] lo speed is unknown, defaulting to 1000
[  779.464262][ T4801] gre2: entered promiscuous mode
[  779.508018][ T4759] vxcan1 speed is unknown, defaulting to 1000
[  779.632922][T13431] tipc: Disabling bearer <udp:syz2>
[  779.675041][T13431] tipc: Disabling bearer <eth:vlan0>
[  779.705443][T13431] tipc: Left network mode
[  779.718062][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8772'.
[  780.849281][ T4856] atomic_op ffff888057f5f998 conn xmit_atomic 0000000000000000
[  781.087386][ T4859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8787'.
[  781.439152][T13431] hsr_slave_0: left promiscuous mode
[  781.481661][T13431] hsr_slave_1: left promiscuous mode
[  781.584588][T13431] veth1_macvtap: left promiscuous mode
[  781.615557][T13431] veth1_vlan: left promiscuous mode
[  781.642885][T13431] veth0_vlan: left promiscuous mode
[  781.651363][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8792'.
[  781.814364][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8796'.
[  782.248256][ T4887] vlan2: entered promiscuous mode
[  782.264310][ T4887] bridge0: entered promiscuous mode
[  782.678152][ T4901] bridge_slave_0: left allmulticast mode
[  782.716201][ T4901] bridge_slave_0: left promiscuous mode
[  782.722683][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.739068][ T4901] bridge_slave_1: left allmulticast mode
[  782.751917][ T4901] bridge_slave_1: left promiscuous mode
[  782.769112][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.794031][ T4901] bond0: (slave bond_slave_0): Releasing backup interface
[  782.833832][ T4901] bond_slave_0: left promiscuous mode
[  782.839927][ T4901] bond_slave_0: left allmulticast mode
[  782.915638][ T4901] bond0: (slave bond_slave_1): Releasing backup interface
[  782.927914][ T4901] bond_slave_1: left promiscuous mode
[  782.934675][ T4901] bond_slave_1: left allmulticast mode
[  782.953310][ T4901] team0: Port device team_slave_0 removed
[  782.968189][ T4901] team0: Port device team_slave_1 removed
[  782.977730][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  782.989358][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.000863][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.009086][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  783.020941][ T4901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  783.056068][T13431] IPVS: stop unused estimator thread 0...
[  783.133660][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  784.270858][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8830'.
[  784.295506][ T4984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8831'.
[  784.634384][ T4998] netlink: 'syz.3.8835': attribute type 1 has an invalid length.
[  784.784862][ T4998] bond0 (unregistering): Released all slaves
[  784.835403][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8839'.
[  785.078150][ T5019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8841'.
[  785.287642][ T5028] netlink: 'syz.4.8847': attribute type 2 has an invalid length.
[  785.328501][ T5028] netlink: 'syz.4.8847': attribute type 11 has an invalid length.
[  785.339315][ T5034] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8846'.
[  785.348525][ T5028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8847'.
[  785.363214][ T5035] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8846'.
[  785.375228][ T5032] syzkaller0: entered promiscuous mode
[  785.381330][ T5032] syzkaller0: entered allmulticast mode
[  785.558695][ T5039] Set syz1 is full, maxelem 770 reached
[  785.625826][ T5045] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8850'.
[  785.801548][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8852'.
[  785.917408][T19227] IPVS: starting estimator thread 0...
[  785.928341][ T5060] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available
[  785.940671][ T5060] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.8853'.
[  785.955113][ T5060] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  785.966650][ T5060] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[  786.022951][ T5061] IPVS: using max 48 ests per chain, 115200 per kthread
[  786.379646][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8860'.
[  786.562981][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8862'.
[  786.704702][ T5098] Set syz1 is full, maxelem 770 reached
[  786.761522][ T5101] vcan0 (unregistering): left allmulticast mode
[  787.111914][T12726] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  787.138048][ T5117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  787.142129][T12726] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  787.187985][T12726] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  787.225205][T12726] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  787.457962][ T5130] tipc: Failed to obtain node identity
[  787.493910][ T5130] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  787.965306][ T5152] Set syz1 is full, maxelem 770 reached
[  788.534858][ T5169] syzkaller0: entered promiscuous mode
[  788.558546][ T5169] syzkaller0: entered allmulticast mode
[  788.673063][ T5181] syzkaller0: entered promiscuous mode
[  788.678974][ T5181] syzkaller0: entered allmulticast mode
[  788.878821][ T5187] netlink: 'syz.5.8891': attribute type 5 has an invalid length.
[  788.879848][ T5190] syzkaller0: entered promiscuous mode
[  788.898984][ T5190] syzkaller0: entered allmulticast mode
[  789.235954][ T5197] syzkaller0: entered promiscuous mode
[  789.257673][ T5197] syzkaller0: entered allmulticast mode
[  789.713401][ T5219] nbd: must specify an index to disconnect
[  790.665074][ T5255] openvswitch: netlink: IPv4 tunnel dst address is zero
[  790.896354][T13449] wlan1: Trigger new scan to find an IBSS to join
[  791.271654][ T5291] gre1: entered promiscuous mode
[  791.565982][ T5320] __nla_validate_parse: 10 callbacks suppressed
[  791.566015][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8922'.
[  791.746059][ T5325] geneve3: entered promiscuous mode
[  791.754241][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 56896 - 0
[  791.764009][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 56896 - 0
[  791.777944][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 56896 - 0
[  791.794648][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 56896 - 0
[  791.804612][ T5330] syzkaller0: entered promiscuous mode
[  791.810469][ T5330] syzkaller0: entered allmulticast mode
[  791.819543][ T5325] lo: entered promiscuous mode
[  791.825487][ T5325] tunl0: entered promiscuous mode
[  791.832901][ T5325] gre0: entered promiscuous mode
[  791.839225][ T5325] erspan0: entered promiscuous mode
[  791.845829][ T5325] ip_vti0: entered promiscuous mode
[  792.507535][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8929'.
[  793.932369][T13429] wlan1: Trigger new scan to find an IBSS to join
[  794.103348][ T5300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  794.324502][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8931'.
[  794.468860][ T5353] netlink: 'syz.3.8934': attribute type 10 has an invalid length.
[  794.570252][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8936'.
[  794.876468][ T5379] xt_hashlimit: size too large, truncated to 1048576
[  794.925976][ T5383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8940'.
[  794.944168][ T5384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8940'.
[  794.989888][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8940'.
[  795.015108][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8940'.
[  795.271205][ T5399] netlink: 54 bytes leftover after parsing attributes in process `syz.4.8942'.
[  795.296075][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8943'.
[  795.859339][ T5410] veth1_vlan (unregistering): left allmulticast mode
[  796.121141][ T5446] bond1: entered promiscuous mode
[  796.127337][ T5446] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.144370][ T5453] xt_l2tp: v2 sid > 0xffff: 1114112
[  796.249327][ T5446] 8021q: adding VLAN 0 to HW filter on device bond1
[  796.258576][ T5446] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  796.276083][ T5446] bond1: (slave sit1): Error -95 calling set_mac_address
[  796.975299][   T35] wlan1: Trigger new scan to find an IBSS to join
[  797.992342][T13427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.493385][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  798.582162][ T5414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  798.788709][ T5476] __nla_validate_parse: 5 callbacks suppressed
[  798.788750][ T5476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8961'.
[  799.116319][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8969'.
[  799.171494][ T5493] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8969'.
[  799.236615][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8969'.
[  799.264237][ T5499] netlink: 'syz.1.8970': attribute type 8 has an invalid length.
[  799.278190][ T5495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8969'.
[  799.307221][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8970'.
[  800.068226][ T5538] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  800.089387][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8981'.
[  800.139134][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8981'.
[  800.538401][ T5567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8990'.
[  801.111723][ T2330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  801.122920][ T2330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  801.131807][ T2330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  801.148090][ T2330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  801.161918][ T2330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  801.596902][ T5597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8996'.
[  802.093279][ T5626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  802.450269][ T5635] netlink: 'syz.5.9005': attribute type 8 has an invalid length.
[  802.493818][ T5635] veth1_to_team: entered promiscuous mode
[  802.521377][ T5635] gretap0: entered promiscuous mode
[  802.540379][ T5635] veth1_to_team: left promiscuous mode
[  802.563285][ T5635] gretap0: left promiscuous mode
[  802.584891][ T5591] lo speed is unknown, defaulting to 1000
[  802.593037][ T5591] vxcan1 speed is unknown, defaulting to 1000
[  803.182865][ T5650] syzkaller0: entered promiscuous mode
[  803.191546][ T5650] syzkaller0: entered allmulticast mode
[  803.217238][ T2891] Bluetooth: hci1: command tx timeout
[  803.618122][ T1325] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  803.808340][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.815987][ T5670] bridge0: port 2(bridge_slave_1) entered listening state
[  803.823817][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.831341][ T5670] bridge0: port 1(bridge_slave_0) entered listening state
[  804.034521][ T5670] gretap0: entered promiscuous mode
[  804.063755][T13427] ip6_tunnel:  xmit: Local address not yet configured!
[  804.072953][T13427] ip6_tunnel:  xmit: Local address not yet configured!
[  804.247827][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.256507][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.264820][ T5591] bridge_slave_0: entered allmulticast mode
[  804.280459][ T5591] bridge_slave_0: entered promiscuous mode
[  804.306012][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.322209][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.333453][ T5706] __nla_validate_parse: 5 callbacks suppressed
[  804.333495][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9018'.
[  804.351071][ T5591] bridge_slave_1: entered allmulticast mode
[  804.361262][ T5591] bridge_slave_1: entered promiscuous mode
[  804.370497][ T5706] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9018'.
[  804.383479][ T5692] batadv_slave_1: entered promiscuous mode
[  804.449826][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.461327][ T5692] batadv_slave_1: left promiscuous mode
[  804.466574][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9018'.
[  804.525686][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  804.691592][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9021'.
[  804.717496][ T5591] team0: Port device team_slave_0 added
[  804.850769][ T5750] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9021'.
[  804.898795][ T5591] team0: Port device team_slave_1 added
[  805.240443][ T5774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9021'.
[  805.292196][ T2891] Bluetooth: hci1: command tx timeout
[  805.468263][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  805.494617][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  805.578594][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.614989][ T5766] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  805.615920][ T5770] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  805.661013][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  805.686758][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  805.738841][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  805.807784][ T5786] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  805.907728][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9031'.
[  805.993644][ T5591] hsr_slave_0: entered promiscuous mode
[  806.010335][ T5591] hsr_slave_1: entered promiscuous mode
[  806.029572][ T5591] debugfs: 'hsr0' already exists in 'hsr'
[  806.039494][ T5591] Cannot create hsr debugfs directory
[  806.380620][ T5819] netlink: 'syz.5.9041': attribute type 10 has an invalid length.
[  806.412571][ T5819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9041'.
[  806.493148][ T5819] team0: entered allmulticast mode
[  806.509797][ T5819] team_slave_0: entered allmulticast mode
[  806.548748][ T5819] team_slave_1: entered allmulticast mode
[  806.559209][ T5819] bridge0: port 3(team0) entered blocking state
[  806.597114][ T5819] bridge0: port 3(team0) entered disabled state
[  806.619404][ T5819] team0: entered promiscuous mode
[  806.638547][ T5819] team_slave_0: entered promiscuous mode
[  806.662396][ T5819] team_slave_1: entered promiscuous mode
[  806.673164][ T5819] bridge0: port 3(team0) entered blocking state
[  806.679945][ T5819] bridge0: port 3(team0) entered forwarding state
[  807.272781][ T5860] netlink: 'syz.3.9047': attribute type 2 has an invalid length.
[  807.288934][ T5860] netlink: 'syz.3.9047': attribute type 1 has an invalid length.
[  807.344749][ T5860] netlink: 'syz.3.9047': attribute type 1 has an invalid length.
[  807.373000][ T2891] Bluetooth: hci1: command tx timeout
[  807.389930][ T5860] netlink: 'syz.3.9047': attribute type 1 has an invalid length.
[  807.589997][ T5870] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9051'.
[  807.749961][ T5876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9054'.
[  807.799974][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  807.821895][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  807.835429][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  807.850754][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  807.863641][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  807.879209][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  807.901896][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  807.916436][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  808.040796][ T5885] syzkaller0: entered promiscuous mode
[  808.046825][ T5885] syzkaller0: entered allmulticast mode
[  808.172156][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  808.332361][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  808.500006][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[  808.631885][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[  808.684635][T13447] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.692266][T13447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  808.775703][T13436] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.783359][T13436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  809.271164][ T5937] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  809.377072][ T5937] veth0_to_bond: Caught tx_queue_len zero misconfig
[  809.453231][ T2891] Bluetooth: hci1: command tx timeout
[  809.459191][ T5953] netlink: 'syz.4.9077': attribute type 1 has an invalid length.
[  809.508926][ T5951] netlink: 'syz.4.9077': attribute type 1 has an invalid length.
[  809.539749][ T5953] netlink: 'syz.4.9077': attribute type 2 has an invalid length.
[  809.558819][ T5951] netlink: 'syz.4.9077': attribute type 2 has an invalid length.
[  809.610645][ T5958] __nla_validate_parse: 4 callbacks suppressed
[  809.610676][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9079'.
[  809.890993][ T5970] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9082'.
[  809.996503][ T5970] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9082'.
[  810.003654][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9083'.
[  810.061172][ T5970] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9082'.
[  810.135934][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9083'.
[  810.165302][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9083'.
[  810.224916][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9083'.
[  810.255211][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  810.308262][ T5591] veth0_vlan: entered promiscuous mode
[  810.411298][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9085'.
[  810.425449][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9087'.
[  810.431426][ T5591] veth1_vlan: entered promiscuous mode
[  810.478970][ T5990] netlink: 'syz.6.9086': attribute type 1 has an invalid length.
[  810.501324][ T5990] netlink: 'syz.6.9086': attribute type 2 has an invalid length.
[  810.528118][ T5990] netlink: 'syz.6.9086': attribute type 1 has an invalid length.
[  810.555248][ T5990] netlink: 'syz.6.9086': attribute type 3 has an invalid length.
[  810.569697][ T5995] netlink: 'syz.3.9088': attribute type 3 has an invalid length.
[  810.592901][ T5995] netlink: 'syz.3.9088': attribute type 3 has an invalid length.
[  810.604710][ T5591] veth0_macvtap: entered promiscuous mode
[  810.684266][ T5591] veth1_macvtap: entered promiscuous mode
[  810.781884][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.864391][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  810.931677][T13436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.014638][T13436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.044270][T13436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.100133][T13436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.220753][ T6017] macvlan0: entered allmulticast mode
[  811.232265][ T6017] dummy0: entered allmulticast mode
[  811.238164][ T6017] dummy0: entered promiscuous mode
[  811.475433][T13436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.500468][T13436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.550577][ T6029] mac80211_hwsim hwsim103 syzkaller0: entered promiscuous mode
[  811.573870][ T6029] mac80211_hwsim hwsim103 syzkaller0: entered allmulticast mode
[  811.633777][T13449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.669490][T13449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.887736][ T6052] x_tables: duplicate underflow at hook 2
[  812.076198][ T6054] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  812.209553][ T6054] bond2 (unregistering): Released all slaves
[  813.304953][ T6121] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[  814.043941][ T6162] tunl0: Caught tx_queue_len zero misconfig
[  814.423693][ T6174] syzkaller0: entered promiscuous mode
[  814.439757][ T6174] syzkaller0: entered allmulticast mode
[  814.672717][ T6182] __nla_validate_parse: 36 callbacks suppressed
[  814.672750][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9141'.
[  814.736688][ T6182] validate_nla: 1 callbacks suppressed
[  814.736718][ T6182] netlink: 'syz.4.9141': attribute type 1 has an invalid length.
[  814.796935][ T6182] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9141'.
[  814.809557][ T6182] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9141'.
[  814.828717][ T6182] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9141'.
[  814.965886][ T6203] sctp: [Deprecated]: syz.4.9147 (pid 6203) Use of int in maxseg socket option.
[  814.965886][ T6203] Use struct sctp_assoc_value instead
[  815.043647][ T6208] netlink: 'syz.1.9148': attribute type 11 has an invalid length.
[  815.066147][ T6208] netlink: 'syz.1.9148': attribute type 11 has an invalid length.
[  815.080064][ T6208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9148'.
[  815.410365][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9153'.
[  815.438653][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9153'.
[  815.529616][ T6232] netlink: 'syz.3.9155': attribute type 30 has an invalid length.
[  815.592717][ T6237] netlink: 'syz.4.9156': attribute type 1 has an invalid length.
[  815.670267][ T6237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9156'.
[  816.279301][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9161'.
[  816.412155][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  816.456857][ T6255] hsr_slave_1 (unregistering): left promiscuous mode
[  816.483165][ T6267] netlink: 'syz.6.9165': attribute type 1 has an invalid length.
[  816.485804][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9166'.
[  817.060036][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  817.096704][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  817.242093][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf78400: rx timeout, send abort
[  817.309861][ T6309] netlink: 'syz.6.9182': attribute type 3 has an invalid length.
[  817.343244][ T6309] netlink: 'syz.6.9182': attribute type 3 has an invalid length.
[  817.397324][ T6309] netlink: 'syz.6.9182': attribute type 3 has an invalid length.
[  817.430050][ T6309] netlink: 'syz.6.9182': attribute type 3 has an invalid length.
[  817.750826][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf78400: abort rx timeout. Force session deactivation
[  818.102633][ T6350] Cannot find add_set index 4 as target
[  818.187880][ T6356] tipc: Started in network mode
[  818.209043][ T6356] tipc: Node identity 080211000001, cluster identity 4711
[  818.218542][ T6356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  818.264649][ T6352] syzkaller1: entered promiscuous mode
[  818.290663][ T6352] syzkaller1: entered allmulticast mode
[  818.928449][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880287ec000: rx timeout, send abort
[  819.166260][ T6407] lo: left promiscuous mode
[  819.178806][ T6407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  819.344362][T19227] tipc: Node number set to 134418688
[  819.355431][ T6412] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  819.404095][ T6412] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  819.415291][ T6414] IPv6: sit1: Disabled Multicast RS
[  819.428570][    C1] vcan0: j1939_tp_rxtimer: 0xffff888026f68400: rx timeout, send abort
[  819.435616][ T6412] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  819.437711][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880287ec000: abort rx timeout. Force session deactivation
[  819.665846][ T6423] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001
[  819.842191][ T6432] __nla_validate_parse: 5 callbacks suppressed
[  819.842222][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9216'.
[  819.911889][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9217'.
[  819.937339][    C1] vcan0: j1939_tp_rxtimer: 0xffff888026f68400: abort rx timeout. Force session deactivation
[  820.033393][ T6434] syzkaller0: entered promiscuous mode
[  820.054988][ T6434] syzkaller0: entered allmulticast mode
[  820.066359][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9219'.
[  820.083333][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9219'.
[  820.125074][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9219'.
[  820.182946][ T6445] IPv6: NLM_F_CREATE should be specified when creating new route
[  820.439559][ T6454] netlink: 'syz.4.9222': attribute type 2 has an invalid length.
[  820.789534][ T6474] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001
[  820.951580][  T208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.000169][  T208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  821.146917][ T6490] netlink: 'syz.4.9233': attribute type 267 has an invalid length.
[  821.174471][ T6490] netlink: 'syz.4.9233': attribute type 30 has an invalid length.
[  821.334705][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9236'.
[  821.591065][ T6510] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001
[  821.723481][ T6507] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9240'.
[  821.820386][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9245'.
[  821.920062][ T6528] netlink: 'syz.1.9246': attribute type 1 has an invalid length.
[  822.053203][ T6538] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9249'.
[  822.605233][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9255'.
[  823.186001][ T6579] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) !
[  823.200238][ T6579] syzkaller0: entered promiscuous mode
[  823.209572][ T6579] syzkaller0: entered allmulticast mode
[  823.386734][ T6586] netlink: 'syz.5.9262': attribute type 7 has an invalid length.
[  823.420449][ T6586] netlink: 'syz.5.9262': attribute type 8 has an invalid length.
[  824.267430][ T6629] xt_hashlimit: size too large, truncated to 1048576
[  824.330773][ T6632] nbd: must specify an index to disconnect
[  824.338571][ T6629] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  824.403436][ T6632] block nbd11: Unsupported socket: should be TCP or UNIX.
[  824.455460][ T6637] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  824.555027][ T6637] 0ªX¹¦Dö»: entered allmulticast mode
[  824.584315][ T6635] syzkaller0: entered promiscuous mode
[  824.612654][ T6635] syzkaller0: entered allmulticast mode
[  824.930783][ T6655] Cannot find del_set index 4 as target
[  824.953452][ T6649] __nla_validate_parse: 11 callbacks suppressed
[  824.953483][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9285'.
[  824.960435][ T6652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  825.002578][ T6652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.031876][ T6649] netlink: 120 bytes leftover after parsing attributes in process `syz.6.9285'.
[  825.064566][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9285'.
[  825.125187][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9285'.
[  825.139520][ T6652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  825.204302][ T6652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.292647][ T6652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  825.311161][ T6652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.484115][ T6652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  825.504501][ T6652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.759931][T13427] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  825.811802][T13427] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  825.823766][ T6696] IPv6: NLM_F_REPLACE set, but no existing node found!
[  825.938814][T12726] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  825.982781][T12726] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.083073][T13430] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  826.143506][T13430] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.197930][T12726] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  826.244348][T12726] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.346374][ T6721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9307'.
[  826.375180][ T6722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9307'.
[  826.525849][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9311'.
[  826.769318][ T6741] netlink: 'syz.3.9316': attribute type 24 has an invalid length.
[  826.817188][ T6745] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  826.841196][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  827.026047][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9320'.
[  827.197955][ T6766] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.9322'.
[  827.538628][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9325'.
[  827.673079][ T6784] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  829.872169][ T6749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  830.307640][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9334'.
[  830.351850][ T6804] netlink: 'syz.1.9334': attribute type 1 has an invalid length.
[  830.417582][ T6804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  830.447677][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9335'.
[  830.675630][ T6816] netlink: 'syz.3.9339': attribute type 2 has an invalid length.
[  830.684419][ T6819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9341'.
[  831.121242][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9346'.
[  831.132284][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  831.206410][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9348'.
[  831.283013][ T6851] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  831.337085][ T6851] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  831.357493][ T6851] gretap0: entered promiscuous mode
[  831.378368][ T6851] gretap0: entered allmulticast mode
[  831.399482][ T6859] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  831.483625][ T6861] syzkaller0: entered promiscuous mode
[  831.517514][ T6861] syzkaller0: entered allmulticast mode
[  831.608254][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9355'.
[  831.769865][ T6866] tipc: Disabling bearer <eth:vlan0>
[  831.976004][ T6881] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9360'.
[  832.001047][ T6887] netlink: 'syz.1.9363': attribute type 10 has an invalid length.
[  832.022696][ T6887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  832.408717][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9371'.
[  832.554161][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9372'.
[  832.576536][ T6920] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9372'.
[  832.723708][ T6929] bond1 (unregistering): Released all slaves
[  833.052212][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  833.776542][ T6988] Unsupported ieee802154 address type: 0
[  833.824154][ T6991] netlink: 'syz.3.9395': attribute type 3 has an invalid length.
[  833.909538][ T6995] Bluetooth: MGMT ver 1.23
[  833.917442][ T6995] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  834.020924][ T6993] syzkaller0: entered promiscuous mode
[  834.028224][ T6993] syzkaller0: entered allmulticast mode
[  834.040810][ T6993] netlink: 'syz.5.9394': attribute type 1 has an invalid length.
[  834.332360][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  834.340129][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  834.569934][ T7023] netlink: 'syz.6.9404': attribute type 1 has an invalid length.
[  834.659157][ T7029] netlink: 'syz.5.9407': attribute type 21 has an invalid length.
[  834.668208][ T7029] netlink: 'syz.5.9407': attribute type 1 has an invalid length.
[  834.736873][ T7031] syzkaller1: entered promiscuous mode
[  834.769856][ T7031] syzkaller1: entered allmulticast mode
[  834.898610][ T7033] smc: removing ib device syz0
[  834.963137][ T7033] smbdirect: ib_dev[syz0] removed
[  834.978785][ T7041] netlink: 'syz.4.9409': attribute type 1 has an invalid length.
[  835.303899][ T7054] sctp: [Deprecated]: syz.5.9415 (pid 7054) Use of int in max_burst socket option.
[  835.303899][ T7054] Use struct sctp_assoc_value instead
[  835.344662][ T7056] __nla_validate_parse: 8 callbacks suppressed
[  835.344695][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9416'.
[  835.369968][ T7056] block nbd11: Unsupported socket: should be TCP or UNIX.
[  835.478435][ T7066] netlink: 13 bytes leftover after parsing attributes in process `syz.5.9417'.
[  835.545271][ T7061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.759779][ T7061] lo speed is unknown, defaulting to 1000
[  835.766447][ T7061] vxcan1 speed is unknown, defaulting to 1000
[  836.071815][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9421'.
[  836.471274][ T7088] netlink: 'syz.1.9425': attribute type 21 has an invalid length.
[  836.514019][ T7088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9425'.
[  836.637239][ T7088] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9425'.
[  836.788369][ T7094] netlink: 'syz.1.9426': attribute type 5 has an invalid length.
[  837.548442][ T7118] tipc: Invalid UDP bearer configuration
[  837.548477][ T7118] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  837.621409][ T7119] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9433'.
[  837.884586][ T7128] netlink: 'syz.6.9436': attribute type 4 has an invalid length.
[  838.566505][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9440'.
[  838.690409][ T7146] bond2 (unregistering): Released all slaves
[  839.184214][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9445'.
[  839.399769][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9449'.
[  839.426890][ T7186] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available
[  839.674300][ T7199] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9454'.
[  839.734760][ T7205] xt_hashlimit: size too large, truncated to 1048576
[  840.347429][ T7239] __nla_validate_parse: 2 callbacks suppressed
[  840.347461][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9464'.
[  840.376144][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9463'.
[  840.445123][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9465'.
[  840.494306][ T7205] xt_hashlimit: size too large, truncated to 1048576
[  840.674367][ T2330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  840.682827][ T2330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  840.690642][ T2330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  840.704697][ T2330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  840.714316][ T2330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  841.408769][ T7272] syzkaller0: entered promiscuous mode
[  841.446285][ T7272] syzkaller0: entered allmulticast mode
[  841.733923][ T7287] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9474'.
[  841.843638][ T7293] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9476'.
[  842.104841][ T7248] lo speed is unknown, defaulting to 1000
[  842.145470][ T7248] vxcan1 speed is unknown, defaulting to 1000
[  842.227141][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  842.237219][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9479'.
[  842.301717][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9479'.
[  842.329432][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  842.349817][ T7304] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9479'.
[  842.377600][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  842.534216][ T7324] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9486'.
[  842.551899][ T7318] netlink: 'syz.5.9484': attribute type 11 has an invalid length.
[  842.572197][ T7318] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.9484'.
[  842.658366][ T7328] gre1: entered promiscuous mode
[  842.812284][ T2891] Bluetooth: hci2: command tx timeout
[  843.469697][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.500348][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.509996][ T7248] bridge_slave_0: entered allmulticast mode
[  843.521051][ T7248] bridge_slave_0: entered promiscuous mode
[  843.695305][ T7357] bond2: option min_links: invalid value (18446744073709551614)
[  843.718353][ T7357] bond2: option min_links: allowed values 0 - 2147483647
[  843.733037][ T7357] bond2 (unregistering): Released all slaves
[  843.771144][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.808889][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.848479][ T7248] bridge_slave_1: entered allmulticast mode
[  843.875451][ T7248] bridge_slave_1: entered promiscuous mode
[  843.927712][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  843.945962][ T7373] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  843.991879][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  844.165681][ T7248] team0: Port device team_slave_0 added
[  844.203400][ T7248] team0: Port device team_slave_1 added
[  844.296225][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  844.323169][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.445197][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  844.462966][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  844.471027][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.532569][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  844.685759][ T7248] hsr_slave_0: entered promiscuous mode
[  844.695188][ T7248] hsr_slave_1: entered promiscuous mode
[  844.706298][ T7248] debugfs: 'hsr0' already exists in 'hsr'
[  844.717929][ T7248] Cannot create hsr debugfs directory
[  844.892832][ T2330] Bluetooth: hci2: command tx timeout
[  845.108927][ T7248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.145214][ T7248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 56896 - 0
[  845.158659][ T7431] netlink: 'syz.5.9513': attribute type 8 has an invalid length.
[  845.186198][ T7431] veth1_to_team: entered promiscuous mode
[  845.193464][ T7431] gretap0: entered promiscuous mode
[  845.202541][ T7431] veth1_to_team: left promiscuous mode
[  845.217540][ T7431] gretap0: left promiscuous mode
[  845.293517][ T7248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.317188][ T7248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 56896 - 0
[  845.434998][ T7450] __nla_validate_parse: 4 callbacks suppressed
[  845.435039][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9520'.
[  845.483239][ T7248] .`: (slave netdevsim1): Releasing backup interface
[  845.504092][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9519'.
[  845.528627][ T7248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.562324][ T7248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 56896 - 0
[  845.646926][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9524'.
[  845.721371][ T7248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.721388][ T7468] netlink: 'syz.5.9525': attribute type 1 has an invalid length.
[  845.731664][ T7248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 56896 - 0
[  845.767472][ T7468] bond2: (slave bridge3): making interface the new active one
[  845.775686][ T7468] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  846.155941][ T7479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9530'.
[  846.652724][ T2330] Bluetooth: hci3: command 0x0406 tx timeout
[  846.972706][ T2330] Bluetooth: hci2: command tx timeout
[  848.345033][ T7444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  848.359709][ T7248] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  848.444955][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  848.479597][ T7248] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  848.538369][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  848.584265][ T7248] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  848.631174][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  848.662152][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9534'.
[  848.675493][ T7248] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  848.713782][ T7248] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  848.730111][ T7504] mac80211_hwsim hwsim103 syzkaller0: left promiscuous mode
[  848.741569][ T7504] mac80211_hwsim hwsim103 syzkaller0: left allmulticast mode
[  849.053073][ T2330] Bluetooth: hci2: command tx timeout
[  849.126183][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.262866][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[  849.288729][ T7534] syzkaller0: entered promiscuous mode
[  849.309135][ T7534] syzkaller0: entered allmulticast mode
[  849.321082][ T7533] netlink: 'syz.4.9541': attribute type 1 has an invalid length.
[  849.336832][ T7533] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9541'.
[  849.378557][  T208] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.386331][  T208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.412915][ T7540] syzkaller1: entered promiscuous mode
[  849.437554][ T7540] syzkaller1: entered allmulticast mode
[  849.544339][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.552180][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.608898][ T7549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.670869][ T7547] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  850.115467][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'.
[  850.156734][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'.
[  850.208904][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'.
[  850.261325][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9555'.
[  850.345191][ T7566] netlink: 'syz.4.9555': attribute type 4 has an invalid length.
[  850.454768][ T7566] __nla_validate_parse: 5 callbacks suppressed
[  850.454822][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9555'.
[  851.431381][ T7628] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  851.576084][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  851.707827][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9572'.
[  851.809394][ T7248] veth0_vlan: entered promiscuous mode
[  851.890144][ T7248] veth1_vlan: entered promiscuous mode
[  852.007142][ T7647] syzkaller0: entered promiscuous mode
[  852.015956][ T7647] syzkaller0: entered allmulticast mode
[  852.032900][ T7647] netlink: 'syz.1.9573': attribute type 4 has an invalid length.
[  852.066584][ T7647] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9573'.
[  852.077008][ T7248] veth0_macvtap: entered promiscuous mode
[  852.115625][ T7647] .`: renamed from bond0 (while UP)
[  852.151082][ T7248] veth1_macvtap: entered promiscuous mode
[  852.218068][ T7656] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9577'.
[  852.270510][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  852.367033][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  852.378834][ T7660] netlink: 'syz.5.9578': attribute type 1 has an invalid length.
[  852.385131][ T7661] netlink: 'syz.4.9579': attribute type 11 has an invalid length.
[  852.409210][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.470128][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.537932][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.577475][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  852.968913][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.997642][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.069735][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9589'.
[  853.170439][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.214868][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.269028][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9591'.
[  853.759457][ T7715] netlink: 'syz.6.9598': attribute type 1 has an invalid length.
[  853.775585][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9598'.
[  853.819626][ T7719] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9599'.
[  853.913645][ T7722] x_tables: duplicate underflow at hook 1
[  854.220149][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9605'.
[  854.343672][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9605'.
[  854.366278][ T7733] openvswitch: netlink: Flow key attr not present in new flow.
[  854.402843][ T7745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  854.412804][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  854.429621][ T7748] xt_cgroup: invalid path, errno=-2
[  854.627124][T12726] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  854.639662][T12726] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  854.649336][T12726] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  854.660740][T12726] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  855.248836][ T7773] FAULT_INJECTION: forcing a failure.
[  855.248836][ T7773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  855.295846][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.3.9619 Not tainted syzkaller #0 PREEMPT(full) 
[  855.295871][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  855.295883][ T7773] Call Trace:
[  855.295890][ T7773]  <TASK>
[  855.295897][ T7773]  dump_stack_lvl+0xe8/0x150
[  855.295922][ T7773]  should_fail_ex+0x40c/0x560
[  855.295943][ T7773]  _copy_from_user+0x2d/0xb0
[  855.295965][ T7773]  ___sys_sendmsg+0x1c6/0x360
[  855.295989][ T7773]  ? rcu_is_watching+0x15/0xb0
[  855.296006][ T7773]  ? get_pid_task+0x20/0x1f0
[  855.296022][ T7773]  ? __pfx____sys_sendmsg+0x10/0x10
[  855.296046][ T7773]  ? rcu_is_watching+0x15/0xb0
[  855.296073][ T7773]  ? __fget_files+0x2a/0x420
[  855.296091][ T7773]  ? __fget_files+0x3a2/0x420
[  855.296111][ T7773]  __x64_sys_sendmsg+0x1b1/0x290
[  855.296133][ T7773]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  855.296161][ T7773]  ? rcu_is_watching+0x15/0xb0
[  855.296178][ T7773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.296195][ T7773]  do_syscall_64+0x174/0x580
[  855.296218][ T7773]  ? clear_bhb_loop+0x40/0x90
[  855.296236][ T7773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.296252][ T7773] RIP: 0033:0x7f01ecb9ce59
[  855.296266][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.296279][ T7773] RSP: 002b:00007f01eda9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  855.296298][ T7773] RAX: ffffffffffffffda RBX: 00007f01ece15fa0 RCX: 00007f01ecb9ce59
[  855.296310][ T7773] RDX: 00000000200400d1 RSI: 0000200000002ac0 RDI: 0000000000000003
[  855.296319][ T7773] RBP: 00007f01eda9b090 R08: 0000000000000000 R09: 0000000000000000
[  855.296328][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  855.296337][ T7773] R13: 00007f01ece16038 R14: 00007f01ece15fa0 R15: 00007ffcbaaf6378
[  855.296356][ T7773]  </TASK>
[  855.541711][   T30] INFO: task syz.2.8030:1982 blocked for more than 143 seconds.
[  855.549389][   T30]       Not tainted syzkaller #0
[  855.554340][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  855.563008][   T30] task:syz.2.8030      state:D stack:27736 pid:1982  tgid:1981  ppid:28247  task_flags:0x400140 flags:0x00080002
[  855.574943][   T30] Call Trace:
[  855.578494][   T30]  <TASK>
[  855.581439][   T30]  __schedule+0x17d9/0x56c0
[  855.585971][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  855.591802][   T30]  ? kasan_save_track+0x3e/0x80
[  855.596678][   T30]  ? genl_family_rcv_msg_doit+0x233/0x340
[  855.609595][   T30]  ? genl_rcv_msg+0x614/0x7a0
[  855.614343][   T30]  ? __pfx___schedule+0x10/0x10
[  855.619216][   T30]  ? rcu_is_watching+0x15/0xb0
[  855.623997][   T30]  ? rcu_is_watching+0x15/0xb0
[  855.628775][   T30]  ? lock_release+0x4b/0x3c0
[  855.633386][   T30]  ? rcu_is_watching+0x15/0xb0
[  855.638171][   T30]  schedule+0x164/0x360
[  855.642356][   T30]  schedule_preempt_disabled+0x13/0x30
[  855.647861][   T30]  __mutex_lock+0x7bf/0x1550
[  855.652478][   T30]  ? __mutex_lock+0x5d4/0x1550
[  855.657265][   T30]  ? nfsd_nl_listener_get_doit+0x104/0x610
[  855.663229][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  855.668286][   T30]  ? __nlmsg_put+0xef/0x1b0
[  855.672823][   T30]  ? genlmsg_put+0x137/0x2e0
[  855.678218][   T30]  nfsd_nl_listener_get_doit+0x104/0x610
[  855.683876][   T30]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  855.690310][   T30]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  855.696667][   T30]  genl_family_rcv_msg_doit+0x233/0x340
[  855.702238][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  855.716167][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  855.722708][   T30]  genl_rcv_msg+0x614/0x7a0
[  855.727567][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  855.733100][   T30]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  855.739713][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  855.745465][   T30]  ? rcu_is_watching+0x15/0xb0
[  855.750597][   T30]  netlink_rcv_skb+0x226/0x4a0
[  855.755843][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  855.761222][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  855.767119][   T30]  ? down_read+0x2be/0x330
[  855.771867][   T30]  genl_rcv+0x28/0x40
[  855.777366][   T30]  netlink_unicast+0x7bb/0x940
[  855.783590][   T30]  netlink_sendmsg+0x813/0xb40
[  855.788739][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  855.794512][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  855.799836][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  855.805552][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  855.811188][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  855.820493][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  855.826263][   T30]  ? lock_release+0x4b/0x3c0
[  855.831181][   T30]  ? import_iovec+0x73/0xa0
[  855.836196][   T30]  ___sys_sendmsg+0x2a5/0x360
[  855.841205][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  855.847843][   T30]  ? __fget_files+0x2a/0x420
[  855.862004][   T30]  ? __fget_files+0x3a2/0x420
[  855.867063][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  855.873452][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  855.878945][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  855.884850][   T30]  ? handle_softirqs+0x70f/0x840
[  855.890157][   T30]  ? rcu_is_watching+0x15/0xb0
[  855.895350][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.901881][   T30]  do_syscall_64+0x174/0x580
[  855.907921][   T30]  ? clear_bhb_loop+0x40/0x90
[  855.913026][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.919583][   T30] RIP: 0033:0x7fbac159ce59
[  855.926539][   T30] RSP: 002b:00007fbac23a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  855.937568][   T30] RAX: ffffffffffffffda RBX: 00007fbac1815fa0 RCX: 00007fbac159ce59
[  855.951268][   T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000003
[  855.960373][   T30] RBP: 00007fbac1632e6f R08: 0000000000000000 R09: 0000000000000000
[  855.970056][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  855.979397][   T30] R13: 00007fbac1816038 R14: 00007fbac1815fa0 R15: 00007fff1770e958
[  855.988006][   T30]  </TASK>
[  855.991550][   T30] INFO: lockdep is turned off.
[  856.002657][   T30] NMI backtrace for cpu 1
[  856.002678][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  856.002695][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  856.002705][   T30] Call Trace:
[  856.002712][   T30]  <TASK>
[  856.002718][   T30]  dump_stack_lvl+0xe8/0x150
[  856.002742][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  856.002835][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  856.002876][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  856.002895][   T30]  sys_info+0x135/0x170
[  856.002910][   T30]  watchdog+0xfd7/0x1030
[  856.002941][   T30]  ? watchdog+0x1c7/0x1030
[  856.002963][   T30]  kthread+0x388/0x470
[  856.002979][   T30]  ? __pfx_watchdog+0x10/0x10
[  856.002996][   T30]  ? __pfx_kthread+0x10/0x10
[  856.003011][   T30]  ret_from_fork+0x514/0xb70
[  856.003039][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  856.003054][   T30]  ? __switch_to+0xc89/0x1420
[  856.003077][   T30]  ? __pfx_kthread+0x10/0x10
[  856.003092][   T30]  ret_from_fork_asm+0x1a/0x30
[  856.003116][   T30]  </TASK>
[  856.003174][   T30] Sending NMI from CPU 1 to CPUs 0:
[  856.125001][    C0] NMI backtrace for cpu 0
[  856.125022][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  856.125042][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  856.125053][    C0] Workqueue: events_unbound fsnotify_connector_destroy_workfn
[  856.125119][    C0] RIP: 0010:unwind_next_frame+0x46e/0x2550
[  856.125142][    C0] Code: d1 48 89 15 04 fc c9 11 48 85 d2 0f 84 2e 02 00 00 48 8d 5a 04 48 89 54 24 18 4c 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0
[  856.125156][    C0] RSP: 0018:ffffc90000ab7620 EFLAGS: 00000a02
[  856.125170][    C0] RAX: 0000000000000000 RBX: ffffffff90d3a8e0 RCX: ffffffff9053546c
[  856.125183][    C0] RDX: ffffffff90d3a8dc RSI: ffffffff90d3a8dc RDI: ffffffff8c2910c0
[  856.125195][    C0] RBP: ffffffff8231171b R08: 0000000000000019 R09: 0000000000000000
[  856.125206][    C0] R10: ffffc90000ab7718 R11: ffffffff81b10630 R12: dffffc0000000000
[  856.125219][    C0] R13: ffffffff90d3a8e1 R14: ffffc90000ab76c8 R15: ffffffff90535468
[  856.125231][    C0] FS:  0000000000000000(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000
[  856.125245][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  856.125256][    C0] CR2: 00007f86f51e8158 CR3: 000000009c2fe000 CR4: 00000000003526f0
[  856.125271][    C0] Call Trace:
[  856.125277][    C0]  <TASK>
[  856.125289][    C0]  ? __kasan_slab_free+0x5c/0x80
[  856.125312][    C0]  ? unwind_next_frame+0x8f/0x2550
[  856.125331][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  856.125355][    C0]  arch_stack_walk+0x11b/0x150
[  856.125377][    C0]  ? __kasan_slab_free+0x5c/0x80
[  856.125418][    C0]  stack_trace_save+0xa9/0x100
[  856.125440][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  856.125461][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.125482][    C0]  ? rcu_is_watching+0x15/0xb0
[  856.125501][    C0]  kasan_save_track+0x3e/0x80
[  856.125520][    C0]  ? kasan_save_track+0x3e/0x80
[  856.125540][    C0]  ? kasan_save_free_info+0x40/0x50
[  856.125557][    C0]  ? __kasan_slab_free+0x5c/0x80
[  856.125599][    C0]  kasan_save_free_info+0x40/0x50
[  856.125615][    C0]  __kasan_slab_free+0x5c/0x80
[  856.125637][    C0]  kfree+0x1c5/0x640
[  856.125663][    C0]  ? fsnotify_connector_destroy_workfn+0x76/0xa0
[  856.125690][    C0]  fsnotify_connector_destroy_workfn+0x76/0xa0
[  856.125715][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  856.125737][    C0]  process_scheduled_works+0xa8e/0x14e0
[  856.125769][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  856.125788][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  856.125810][    C0]  ? assign_work+0x3cf/0x5d0
[  856.125831][    C0]  worker_thread+0xa47/0xfb0
[  856.125862][    C0]  kthread+0x388/0x470
[  856.125877][    C0]  ? __pfx_worker_thread+0x10/0x10
[  856.125897][    C0]  ? __pfx_kthread+0x10/0x10
[  856.125912][    C0]  ret_from_fork+0x514/0xb70
[  856.125929][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  856.125943][    C0]  ? __switch_to+0xc89/0x1420
[  856.125967][    C0]  ? __pfx_kthread+0x10/0x10
[  856.125980][    C0]  ret_from_fork_asm+0x1a/0x30
[  856.126014][    C0]  </TASK>
[  856.452779][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  856.459696][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  856.468903][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  856.479143][   T30] Call Trace:
[  856.482425][   T30]  <TASK>
[  856.485353][   T30]  vpanic+0x56c/0xa60
[  856.489387][   T30]  ? __pfx___schedule+0x10/0x10
[  856.494436][   T30]  ? __pfx_vpanic+0x10/0x10
[  856.499015][   T30]  ? rcu_is_watching+0x15/0xb0
[  856.503781][   T30]  ? trace_irq_enable+0x3b/0x140
[  856.508811][   T30]  panic+0xc5/0xd0
[  856.512530][   T30]  ? __pfx_panic+0x10/0x10
[  856.517287][   T30]  watchdog+0x1030/0x1030
[  856.521627][   T30]  ? watchdog+0x1c7/0x1030
[  856.526074][   T30]  kthread+0x388/0x470
[  856.530161][   T30]  ? __pfx_watchdog+0x10/0x10
[  856.534855][   T30]  ? __pfx_kthread+0x10/0x10
[  856.539468][   T30]  ret_from_fork+0x514/0xb70
[  856.544069][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  856.549263][   T30]  ? __switch_to+0xc89/0x1420
[  856.554195][   T30]  ? __pfx_kthread+0x10/0x10
[  856.558796][   T30]  ret_from_fork_asm+0x1a/0x30
[  856.563645][   T30]  </TASK>
[  856.566963][   T30] Kernel Offset: disabled
[  856.571279][   T30] Rebooting in 86400 seconds..