last executing test programs:

2m15.81315662s ago: executing program 0 (id=986):
r0 = socket(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES16=r2, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_crypto(0x10, 0x3, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe22, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x240448e0}, 0xc4)
socket(0x400000000010, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltclass={0x74, 0x29, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x6}, {0xc, 0xfff2}, {0x8, 0xfffd}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xe, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)

2m15.472570415s ago: executing program 0 (id=992):
r0 = socket(0x23, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23)

2m15.322219147s ago: executing program 0 (id=995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000f80000000000000000ffffac1414bb14000700ffd535"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m14.92858995s ago: executing program 0 (id=1001):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3}]}}, 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000e10000000000000000008112580010001b009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90)

2m14.71210407s ago: executing program 0 (id=1003):
bind$x25(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000019000100922fd1f558ded2300a0a7a04bb7be03500000000fbdbdf251c0080020102000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x40)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x10, 0x1405, 0x621, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x44404)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)="b42d5567db16")
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1)
r8 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

2m12.936083007s ago: executing program 0 (id=1009):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r5=>0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x8918, 0x0) (async, rerun: 32)
recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r9, 0x10e, 0x9, 0x0, &(0x7f0000000100)) (async)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000180), 0x4)
close(r1)

1m57.794660877s ago: executing program 32 (id=1009):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r5=>0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x8918, 0x0) (async, rerun: 32)
recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r9, 0x10e, 0x9, 0x0, &(0x7f0000000100)) (async)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000180), 0x4)
close(r1)

12.952267512s ago: executing program 3 (id=2053):
r0 = socket(0x2a, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/226, 0xbd}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r1, &(0x7f00000003c0)=ANY=[], 0x72)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a2004ff00000071108d00000099008c00aa0c36680000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0)
unshare(0x62040200)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r8, &(0x7f00000000c0)={0x35, 0x1, 0x1}, 0x8)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@gettaction={0xd0, 0x32, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6800000}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff58c}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0xd0}}, 0x0)

9.508316529s ago: executing program 2 (id=2074):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000040000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x110}}, 0x0)
r1 = socket(0x8, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
recvmmsg(r4, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffff46, &(0x7f0000002540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c00007faaa6ebfe02008c704483f07b352200", @ANYRES16=0x0, @ANYBLOB="a79325bd7000fedbdf251f00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01072bbd700026b9be05000000ffdbdf250100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x481}, 0xc010)
ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000))
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x479, 0x0, 0x0, 0x0, 0xd1c8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x37}, @alu={0x7, 0xd056aaf0223c386a, 0x4, 0xd91b0053037290c7, 0x4, 0xfffffffffffffffc, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x7f, 0x7b, &(0x7f0000000480)=""/123, 0x41100, 0x74, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x4, 0xfffffedd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x4, 0x4, 0xf, 0x2}, {0x4, 0x4, 0x10, 0x1}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r10, 0x0, 0xbb, 0xd, &(0x7f00000006c0)="30c987594fee72577c4b3e161b151e558a3158a5944f149de75b1bb7d9a12b42dce03b7c408c9be20b00474e27dd9e97332feb04673cf4c9e2268160fcd03caf898d3b3805e85cf46ba641ba93331a68a1054d69f1bd37133642bb48bfa58606067055c490ed7ba1c90310ed0934593b3010344e0e7a4649c932f524015ab1fc6446969f985049be931163f3f09dba0cbc81afb0f81cef5e8b7d20db779717e17ccc1c58caf48e1bee9d938b0b361c0270fe29732a0e6592ddb837", &(0x7f0000000780)=""/13, 0x2, 0x0, 0xea, 0xf4, &(0x7f0000000800)="c3bdacc6d629b8a2104b4de7778f63bac4139f3dbf41d369c0aef0694776a6744c4eefcda89562b7df9c83b016e0fa69f91010a2ba35fe09ff6058ee6800351f9ed1f3b21c554a49bc7b0575c12b924b1ba47f30f93e6ea62998d09addad50fc001be2ae58d2da648a5774a864ceddbc91f1d591f7666bc28ca2e5216c65a0905746f3ed959cc6b30a262cd4eb6d6b533d27b49365ccd3c94378240dbfa95f1c99478fbebe47a47bcead72b6ecec4917884073126af108f66a051c7b808c3e7bf8eef9584b3a1c7a82c28ea9d0457bfb98f8f8f1f22b07becaacd3a951fe1595bde430d677a998e92dc0", &(0x7f0000000900)="2e12b024ec1845cf488bb44c0f8d34310055201622d8ba93d55461424f38140652ad2c42f85fe19000dd7a168a63367008ed46ba4e2d1c0d0b644093b091f2dc6c383384105fc3151f5d8af6fb1bdb637c2813c3f75de0f162089dd050cd82bdce125f30f75157cb048ce930bf069547fb079718bc1cf398db6e919fa6e5d1f7ae4c81f313210fb265ee76835ac8ca5825dbba978fc9ee60b0323d889d906248504ef9dba496ae7683175e5ec657f55b45bc5ac594a400d17ce8e9e899025665643eae31372eebd9752045a7108a53f2682dd5b36a4b7459b818e69402384b6784f37a6fc2d01fdaac36edb7314c1ce4094a6357", 0x1, 0x0, 0x37879fbd}, 0x50)
getpid()
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020a00090700000026bd7000fbdbdf2505001a00ac14141c", @ANYRESOCT, @ANYRES64], 0x38}}, 0x20000000)
r12 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl$SIOCAX25GETINFOOLD(r12, 0x89e9, &(0x7f0000002000))
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000c40)={@local}, &(0x7f0000000c80)=0x14)

8.289834693s ago: executing program 3 (id=2082):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
unshare(0x6020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x90)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000009c0)='veno', 0x4)
close(0x3)

8.100925443s ago: executing program 3 (id=2085):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x3) (async)
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x66) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, 0x0, 0x0) (async)
socket$inet(0x2, 0x6, 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @multicast}, 0x10)

5.85190407s ago: executing program 3 (id=2093):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"825fe0025e99caa7013a281cc13f2cea", <r6=>0x0, 0x0, {0x8345, 0x2}, {0xc, 0x5}, 0x200, [0x687, 0x3, 0x4, 0x9, 0x7fffffffffffffff, 0x4, 0x0, 0x6968bd7c, 0x2, 0x1, 0xfcde, 0xe, 0x7, 0x4, 0xd57, 0x9]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000680)={<r7=>0x0, 0x100000000, 0x1, [0x3, 0xb, 0x9, 0x1, 0x80000000], [0x1ff, 0x9, 0x7ff, 0x101, 0xffffffff, 0x6, 0x7, 0x4, 0x58f4388c, 0x62, 0x1, 0x81, 0x9, 0x70, 0x2, 0x3ff, 0x9, 0xa00f, 0x7, 0x3ff0000000000, 0x6, 0x3, 0x2, 0x0, 0x3ff, 0x1, 0xfffffffffffffdf4, 0x9, 0x40, 0x81, 0x0, 0x400, 0x1, 0xa264, 0x5, 0x5, 0x33a0, 0x9, 0x9, 0x1ff, 0xdb, 0x400, 0x10000, 0x8, 0x8000000000000000, 0x7, 0x0, 0x2, 0xb, 0x40, 0x0, 0x7fffffff, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x8, 0x7, 0x1, 0xb8c, 0x1, 0x4d, 0x9, 0x7ff0000, 0x9, 0x200, 0x3, 0xb950, 0x7, 0xfffffffffffffff8, 0xe, 0x7fff, 0xfffffffffffffff7, 0x4f24, 0x9, 0x4, 0x1, 0xffffffffffffffc3, 0x6, 0x5, 0xffff, 0xffffffffffffffff, 0xe, 0x0, 0x2, 0x0, 0x8, 0x6, 0x88da, 0x7fffffffffffffff, 0x8, 0x7, 0x401, 0x4, 0xfff, 0x989, 0x8, 0x80000001, 0x9, 0x1000, 0x5, 0x4, 0x8, 0x6, 0x3, 0x98f, 0xdb76, 0x0, 0x8, 0x1, 0xfffffffffffffff7, 0x6, 0x7ff, 0x7fff, 0x7, 0x6, 0x5, 0xea, 0x4, 0x2, 0x1, 0x89d1, 0x7]})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001880)={{r2}, r6, 0x4, @inherit={0x80, &(0x7f0000000000)={0x0, 0x7, 0x8, 0x217, {0x20, 0x8, 0x7, 0x5, 0x8}, [0x5, 0x7ff, 0x7f, 0x4, 0x40, 0x1, 0x4]}}, @devid=r7})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03120000000000001c0012800c0001006d6163766c616e000c000280060000000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x800)

5.663362188s ago: executing program 3 (id=2096):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@nat={'nat\x00', 0x1b, 0x2, 0x468, 0x2c8, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'caif0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @port=0x4e23, @port=0x4e24}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8000, @gre_key=0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @local, [], [0x0, 0x0, 0xffffffff], 'batadv_slave_0\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x40000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4c8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd41bb3668261cdfab63000500050002000000662f163f83b080d0a5b9ffd87a22ebcf72d4602e3af208d69abd3fce8edc53121ef339efeee8c4ccd15647593f799421d156f00d071f1bf05d86f7902fab0976bfcfc441e0370e206eb78bdd29d9f15e953bc73a7675cd53b88f3d5cf9d9ab93295f8da68b439742132148d9860aa8de2d4fe4998ee7d9af5de646ad6278b5f57c3550a5d9cc1958f9d331226e682bec2b17a918c115f38da4f8b2d7bf16721d1c2f3cb2e6b3e27775020bc0ca4899a2fa79b0c41ced7e105136e880eb63"], 0x1c}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5c000000079b775f6265c6a02323ce27e8d03696d09e29975c7a4f081371ccd77df0a1800000004e059ad262c921a5af2da4014d715c713a1303dd0b11603fd2cab74c7fc4aceab6e6ba92fd7cefad7e6f25fe455b8d6b2970926c997ebea355", @ANYRES16=r3, @ANYBLOB="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", @ANYBLOB="7af9125d415a239a5c9eeb459bac5a1177d377452aa347c4088f6c563d166bef6ddbc772f37e51914da0dfe239d34d2e10866512885742e5b1f25eb63535f840ca18d1befa8b48e50995cce4d5c26d", @ANYRESOCT=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x2000004c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100002100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendto$packet(r9, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
close(r5)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={<r11=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000780)={0x19c1, 0x6, 0x0, 0x2, 0x202, 0x786b, 0xf, 0x3, r11}, 0x20)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2)

5.267689635s ago: executing program 1 (id=2100):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1e0, 0x1398, 0x1398, 0x1e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0xff, 0xff, 0xff], [0xff, 0xff0000ff, 0xffffff00, 0xff000000], 'veth1_to_team\x00', 'vlan1\x00', {0xff}, {}, 0x33, 0x81, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xfff7, 0x0, 0x7, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffff00, 0x1fffffffe, 0xffffff, 0xff], 'dvmrp0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x32, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x4, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) (async)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400)
socket$inet_sctp(0x2, 0x0, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={<r4=>0x0, 0xfffffff8}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r4, 0x5, 0x4, [0x7, 0x5, 0x1, 0x2]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r4, 0x5, 0x4, [0x7, 0x5, 0x1, 0x2]}, &(0x7f0000000180)=0x10)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941)

5.162847554s ago: executing program 3 (id=2101):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="7bab6bdf", 0x4}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
unshare(0x62000000)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x100})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

5.03973905s ago: executing program 1 (id=2102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000017769db69f67dac6704050000000000"], 0x14}}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56})
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x30000010})
close(0x3)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x1, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x749, 0x700, 0x0, 0x6}})
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)

4.495215966s ago: executing program 1 (id=2104):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='(%:@-\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0xfffff001, 0x9]}, {0x200, 0xf3, 0x10001, 0x6}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', <r1=>0x0, 0x1, 0x80, 0x8001, 0x1, {{0x18, 0x4, 0x0, 0x19, 0x60, 0x65, 0x0, 0xd2, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x23, 0xb8, [@multicast1, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x44, 0xa, "64bd1b33ba08a56a"}, @noop, @end, @timestamp={0x44, 0x1c, 0x23, 0x0, 0x0, [0x8, 0x5, 0x1, 0x3, 0x5, 0x3]}, @noop]}}}}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000280)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=@newsa={0x1f8, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {{@in=@local, @in=@empty, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x4, r1, r3}, {@in6=@local, 0x4d3, 0x2b}, @in=@broadcast, {0x7, 0x7, 0xb, 0x4, 0x4, 0x100, 0x2, 0xc}, {0x8, 0x4, 0x5, 0x2}, {0x0, 0xe, 0x7ff}, 0x70bd2c, 0x3503, 0x8, 0x3, 0x49, 0x40}, [@lifetime_val={0x24, 0x9, {0x4, 0x800, 0x7fff, 0x4a}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in=@private=0xa010100, 0x4e21, 0xfbe, 0x4e23, 0x6, 0x2, 0x0, 0x0, 0x32, 0x0, r5}, {@in=@multicast1, 0x4d3, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xf9be, 0x8, 0x7fff, 0xfffffffffffffffe, 0x1, 0xb, 0x4188, 0x400}, {0xfffffffffffffffd, 0x4, 0x0, 0x45}, {0x7, 0xfff}, 0x70bd29, 0x3502, 0x2, 0x2, 0x9, 0xed}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x2000c891)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r0)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000700)={@local, @multicast1, <r8=>0x0}, &(0x7f0000000740)=0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000780)={@empty, @empty, <r9=>0x0}, &(0x7f00000007c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000800)={'wg1\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vcan0\x00', <r11=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)={<r12=>0x0, @dev, @initdev}, &(0x7f00000008c0)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0], <r14=>0x0, 0x32, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000c00)={<r15=>0x0, @multicast2, @dev}, &(0x7f0000000c40)=0xc)
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000001840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f0000000c80)={0xb78, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2e6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1d0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x9, 0xac, 0x9}, {0x0, 0x80, 0x5, 0x40}, {0x3, 0x4, 0x7, 0x40}, {0x5, 0xd, 0x2b, 0xf62}, {0x7, 0x0, 0xf7, 0x7}, {0x3, 0x6, 0x8, 0x8}, {0x3, 0x7, 0x1, 0x4}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xb78}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040800)
r16 = syz_open_procfs$namespace(r2, &(0x7f0000001880)='ns/cgroup\x00')
recvfrom$packet(r0, &(0x7f00000018c0)=""/156, 0x9c, 0x40020000, &(0x7f0000001980)={0x11, 0x18, r4, 0x1, 0x7, 0x6, @multicast}, 0x14)
r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xf, &(0x7f0000001b80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb62}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8e9e}], &(0x7f0000001c00)='syzkaller\x00', 0x78, 0xbf, &(0x7f0000001c40)=""/191, 0x40f00, 0x22, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001d00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001d40)={0x0, 0x5, 0x8001, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001d80)=[0x1, r0], &(0x7f0000001dc0)=[{0x4, 0x4, 0x3, 0x2}], 0x10, 0x10}, 0x94)
r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=@base={0x18, 0x8, 0x8, 0x5, 0x40502, r0, 0x8, '\x00', 0x0, r0, 0x5, 0x5, 0x4}, 0x50)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1c, 0x10, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x2, 0x3, 0xcafb4edfa71f252, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a40)='GPL\x00', 0x100, 0x7b, &(0x7f0000001a80)=""/123, 0x40f00, 0x51, '\x00', r12, @fallback=0x15, r0, 0x8, &(0x7f0000001b00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0xf, 0x800, 0x36}, 0x10, r14, r17, 0x6, &(0x7f0000001f40)=[r18, r0, r0], &(0x7f0000001f80)=[{0x3, 0x4, 0x10, 0x1}, {0x0, 0x1, 0xb, 0x2}, {0x3, 0x1, 0x2, 0x9}, {0x2, 0x4, 0xd, 0x8}, {0x2, 0x3, 0x0, 0x2}, {0x3, 0x4, 0x6}], 0x10, 0x9}, 0x94)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r16, 0x8010671f, &(0x7f0000002180)={&(0x7f00000020c0)=""/156, 0x9c})
r20 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r20, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x6c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x400885d)
r21 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xb, 0x8, &(0x7f0000002300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x1, 0x2, 0xb, 0xa, 0x8, 0xffffffffffffffe0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}]}, &(0x7f0000002340)='GPL\x00', 0x9, 0xaa, &(0x7f0000002380)=""/170, 0x41000, 0x70, '\x00', r13, @fallback=0x10, r0, 0x8, &(0x7f0000002440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002480)={0x1, 0xe, 0x8, 0x8}, 0x10, r14, r19, 0x8, 0x0, &(0x7f00000024c0)=[{0x4, 0x4, 0x6, 0x1}, {0x2, 0x3, 0x10, 0xc}, {0x5, 0x3, 0x8, 0x6}, {0x4, 0x5, 0x7}, {0x5, 0x1, 0x6, 0x8}, {0x0, 0x2, 0x9, 0x6}, {0x0, 0x3, 0xc, 0xe}, {0x5, 0x4, 0x10, 0x4}], 0x10, 0x4}, 0x94)
connect$bt_l2cap(r0, &(0x7f0000002600)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x20200)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000002640)=@req3={0x5, 0x0, 0x10001, 0x80000000, 0xd7f, 0x1, 0x9}, 0x1c)
sendto$netrom(0xffffffffffffffff, &(0x7f0000002680)="1f83a527a93e8a95a91434c5e655e0ada9af09471522af0896d34588b9965599c78fbaf019b6f2ba3c0a7241046a6266816e527a7680d7844e803ed9bcef401e6c929eb53432db64905fb2acacb2b47a92094b8b29ae88548676845310577066ac63cc51e4b54eb6bd9cb81d1c7fedf1904c22fc1423baeebf23e63eba5896acbbf0ffe0fa5cabc791604e7c18ee0a8ee6e9cb", 0x93, 0x10004050, &(0x7f0000002740)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8000}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r21, 0xf501, 0x0)

4.256089385s ago: executing program 1 (id=2106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4040810)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000300))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060500000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683269702c6d61e300"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x406a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50)
sendmsg$nl_generic(r9, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d41300002b00040028bd7000fddbdf2516000000b00018800400278004002f800400d38087004f00ecc87d061ee903fd1a3c7559661f17d9ca8657a3638f42b7e33a9c0d1f1306c6d37e8f6ba3fde754a09e3afb4987a31c339633603ac70795e31e4e186922c385746a9927dcee2fed6318f434f12de994b61349ec0db4b6e5fad701c82fa6202b8cccf18b3880fe8ed04a7c29662be17389cbf072fbbe40fb82b1f6b6269df2b527fad7000b00df00697036746e6c00000800c5000900000004007680c50df67a1e1978c8855e7200f6d47756dd63243ccfdec9a39dba0be8e5b4ca4ee597d87c5ba3eed1cedfae39f6b60125070db438e252cd4fff94eac3fb08ae50b6847c57a75db59189d2a98f11f803d4823068ef59d8263f2455b1c68f418e14fe3204efb76912a57c4e4dae125df6233f8cf6c99de432b109b67f3bf3f52a42d4d3d3a28ab9ce2649de8b5b7c8d878855064bcfcf2fccbc2b4c46ed48320a960508722755e92d34659a2616614a4489b75f1c2c5c8c74ece7be9f870e9f46c8a83c4db2d6d0956a985af0a9d14b7034619100b3800400448004005480615a0e296d587d4814a9ea6802a2947782f2884ece775339334b4c0b2d887f1018f2ea12c7ffc7d60d56a290ade2a85e253ba110223890b2ee4b22a3d7139527362a1fc9fb1547c11c8ff38926066ba0168e2c58ab83ba0e7835668aed06f325de40b87a7faafa1a8a7dad6d2c157cfe917ee88243a183e3411409f8acdc30b3d31553f1f30000006c7656d0fcd2b33366ac5d238499eb8ff9c6f8f41c818b1e39ac445338b99ba6e56fed4ce5e7b562230239326a30f0454d460c5e6e923f2fb3b48b08fdb559192e7f25c57e2f332360f37b52629d6e6340e402a386d456f2042c9df895b8b0662e8e8379b909afe8b2983e747cec167814c3974816eb9f038ce3f2f49ad4119878f27f2a89b44a98e44a399fe26a679072def4ac59b42f41001f29a6460a4b290b3107ce1888057c26c2ae5918bb09136c737c837dcb0b8148601eb19fb6d50eae78888067840462519449cdb7360a4352ba8ccb2db66aa80a26755508fd50fafd6e44f7b88100de1cfb115ff5034b903ab9cd6f478b20fdac6bc9f5de57dd44b5c12baa1f84a2f5022aeaabfab4a9ca23a458a89d4bd1471d2aa865d2d54f700c506d55aaae0b5ec7c9be3c570d3ccc0ed5c9c673240c0a13e9927bc07e2f22493cfe7571140e8d7d61c6e8fe21f5e510f71c0af73038eaa39be7717da4714236e26fbc71ac1e347d60a82a801d0db6b1fd5eb345973feaa5dde48561c51e200f19cb0a706cd5cd37f27e180bfb1e562130519b56e641be84cb08d927f00aad591a1a415f2f85c4ab987a194f1856bc5d6c81edba7bc632227362ac40a46cb4b680993b39eba0dc2a51ec3d0c5235f08d10d296aad5dc82ab653e3335b9d99ebbd5ad1519fb2ebee13e71c1603585cf0a15602f0a8080c8b52a51b3f0a3e5f3ef5ff46f8069c4b0af9bb7ec99b66a736cebec4b741a99e9b71fbadd3421bb156b3a33840048ce8c56955f0ef0bfdb4395ea9125d02a58057952476baa8422b9ca9f53b149b6c68fee55fe9b736d5b75f2306db1498768ff81725b558bbb90615c66c718dcab639f9600bf6b0a69336a092fd78c3efdcb57e1c2b4e1e41bc4f2269f4a449afbfa62ecdf0f4eb6510a6b671b783a9cb09c8982c2fb7bce64154cd547f5cfca8909a1b2001e6a7696534b925cbea015b52189f0489110d1007e854be1e63af76a6478ca60e7df98571c80784ec9b027d9ef2dc01c4586111deaade20c3a5c4bf46ec1cce405209e9d4a4b7daf8107c9483d2edd0ae4b8ccac5e910111e478b70ffca78a63846a6ff9b652676ce3713a8bea0d10cd4d57a36fc418ebf46b54cf787deb7e00ec71143f650ecff805613b6af0d9b2cbeb670c40b9d9b1d9e24aa7d00874008ab23c6ef5155d72980e9a3d69b373fbb84adcf350b210371efc8d36eb7d6a2a6c1e560a3486b406b40e6464adf381c93e6691415ad93fbb7785823a495b93219ffe0bee20e7d2c8ef65be69a6060d4c7f5ad0cde57454a86691e94eab3d19ea48abf99cc34a2544f251edff0373ad3d99729c0ee7d98a2d0118304d34e99fe99873112edfb73083a9942bd236540a55afe648a4b6772c994459391dfca7271f3e34518230740bde33a890428cb3f38dd4bd2c11a94aa36697f0e0364e0de9c7572334d02369bcfd82ff9ff47d421f1aec0fc40fdbad6dd200a71d5ddb67145efd0a59a9d85f5228be8b1529acfa2851bc34222beddd20e37d0d1f5d6929d117248d4c9d9110c4ee1108ecca2798bd9f523ea2e054e904bd66078f04011a630eb3a4e4925dc31efb236970a8d0d53489e5495378c64af2ef39380fac33394916294d56511c9d6f2a4d9d55ac924fd4e5680ba98f11d9b2721ba0ae742f36f4634a1bcd3d285b66a61617da71b6abbf8c469e37b52d25a68b0c0a2d9963a20aadfc057d064252e2ba058d562e188bcb619d79572df2d2ddd0ceee2f27cc9941e965fe9c9aaf22df47127ff6e9b98529e91aba03b5977d4952d303731a4c2e65f3ac3f34c265f4dd002438069658d8fd325968f5344fa8b49de3bdf70958f50c8001cca71b2b5b26bc9cb0cff64d082730a4831c779486425f631ad70a976dc60d57ddd2bf75395ad06584d7689a9706dbfbdd5af8fc2311d6d389bffcc7ce222023bdad9b96a65071a0d8411aee0f2a305b0a47535776af13677738e825bc533575565e92ddd41aeaf49a747a9c0cec15019059960bf54e480c974425b407505f98a5799fa46e4b4a81b6dd1828a231acad260e1eef399284a2a34dc6ee21d62baa9ca96b3ce22b5a99706fda8ce46c49138e47d7df820e593f87c7a089abac6b60a8677715c49acc368c57d52ddae5c04335cb820e04ca45d8fccda227d37072951457c600bdc13ba3c103768ef96bff66484e1b9cf022df1855863a7ff7c295a56a96d4eb802b5d310f902d5e624bbc664a715e9357f56a16d5cdcb9e74286665f5064deb9f647607f35d64bd8afa9bca83ef7b0a199ff2c045bb2575845f5eff2fad7d61b82094d6737e3d3ee6e80f2fe8cc884904795119bd361d82026e283bb5b420b3a99e6d9f7da0e5e34d0d106998824b70feb797f714f7dda36e2410a24e2eeba7d0e46051f9616bbe72a7a39d3b85ce89a92bb25210badf328bb1e45192b96be10e34b5ee124b1e9b23aabb75fd146fb62ed16493a91da214d6fb959669e063744eac5bf694345aef5e91157609387851c737b66ce401870c223d30db1173f4dd75aae15db36d844de75fb710ccca85eca648cd46d15a661998a66805e34e906e7eaa276c6f839fc64b595f0efd9888a6c850f94b60375dc79f4cb0ba03e52180739f07e90cbf8751c85e432068ab9eca35f238797b0ea992237ea6dbfe46556fe819c42bc7db14fe73b6b8c6f464fd2516560452cd7dd7334b66eadcd703f8e370c01501e8b48326a93312ac582c48a6f508018876873852aa5a64ee3b57f785cbce1c1cce7d9275a9491fedfc472a0eb9a6b8ea11f6293ae092ca604ad61c74d91acc8b932aa9ef5dbc0cef99e610e190219c2c27fb70daef581f12d390f244d018c6ff0823baaf01ebfd26ef00eb59c397b9f23abae9623fbd2abaf0a9dde79d12b86d4afd29293ecfeb57e92f632e70fa4d84ab7a5ca524120953b93806671701e23eb5ace74b85e1baf74cba2e137cd8eaaf340f0d4a73b6b9087675ad4d41948685a3366438ad5f8fe68686f4264bb97803b7aee75ac23bf357772fab5b8c7096f97cf29ca3fe23e4ef291ae24591c7321ab2015b0cc0085c235dc94f7d51738713e2fbdb3a7f07cc354d359750d9dad7ebcfb353f74e109908b2a518e80a6b10f5e5da44c24d4625e8ddb7621124be8f62d8f4f216d40848684e340f23f0c2b22dd32020ee2b3389c1b1acac5d85f7c1a3b999b980fec019cd0cdfbee8ffc1b8941f00f0fc6710daf6e5c628d3118e4b54dba8bb3e23e9b354a6785b09e25b653fbe3286134f64c828292fb5db22217e105510716325e95fd0c9167f50df87076829ee35387c958b5c58c0be461a7723d7b02f7dbfd8ce7ee48ffe6cdc882cc241efc67584f7016b862a428776dd3ba1597b646ad02c162c713cfcceb9794cc022fc1b52a459b76754e30a000000000000008861f0b933a29d51c8a665201759bbe57017ce4abfe84a40c27a8630c2d01a6fb50af0e0c4e3aa56051b55913001b3516f4ddb43e58b048f6d6841f421242e32264a2be9e9563eecf365cc8dcf3db3999fbf3933a04ba93f8280750ecc99b626b790e1032d1c3e44d756e06f314feeec5f8fc2828637a1055f89194cedfd0f8ba4cbbf1984df58895b7072f3ff8b927fe96162f70dfaa97de059eed443a63c5b330ca1e0dbf8f3d1198c71e712ba642137a193ff52105b40a305d770f15b975a6dbe4eff7c9daf1607c1aa44416724c20af21479cb0939cdf13e2a06421c6b1ed764883d644b68b0548057623425d0bca9d4641eb1c2a6cde220e0c3cc05f92964335386986c133c2f9116045e75836ccd0539da6968b1ab9c3b5d1e288ecf6933b1ac55d0631faf786fda161648560f9501c368e47c9292b1c75649e9a8315facfbbe713c627da0326b8b26e44a3f1178b8115e039b589af8b36e28b02c060216f033c14683468479018742431ace4d77906bb8eefccf913c25667978e4f407d46afad2776b11e6c7adcf3f35cbb4729dc9894e7c5cd34a9f3079ba439b053b6218afe0237649dd8d0449b18770795c7c2137d46a9da9a07e761268a9b674fddab8a054181f1c3aff8b049928857a984b69265ed97383753fdbd338909542cc7e4916fd2c1fafb229fb20856c82da9ea4eab4ec058d7598652fa378e0457be02e0cf94d7e818bbc4d320068cb352fe75e9db0e912f4c4d4fa76ac8e283626b2e98ddd07594df8b01778c489e16a7d96deb7a9adc0578d6137ef4d16b76fc3ba79662dda9456b88f606b40a20a0ba54cb1515575d9914589d57dd2b4ee2204c87268714500a0ec20415dd386826c11771ae53bf2a991c309ff00314a125e8984586771309c9953d5ad92b7977b2c356454afaddf5e7bfb7e4e09a1f06464fedbbdc9b273a4ba48c6b06bbd48f8f734a4fa9c4b4f2bccb5cb5e0212164b3d9730ed5d2464f1a8e280f75ee543b897a2d48c9d3a268bba247c0619d8f29637111f640a83aa3d31fcdfe6b1cfd3c422152c2de04023f8d69d900b18cf632ba8de0daa45ca8fe5f95e8e25d616b6334466b282c10b4c5ed9c22fc124a2f1c463909da6ac9c2c86c10acc96a5baedf54df930a5fe06a811921aeaee417f07a64d8854fa67f40df92908e1e28e51823b872c6d8edd84de9c3b249baf412e0da80334098005d7eee2edce741aec823129728ed2cdab42daaeb14c895c9e7cfc1451d54428c63a0b56c8413c78d9164892696d1f851ccf56ac2e2b059c04dba03fac8be2601321ea42dc1c2dead92f863aa3757693cf27b50ffc55417a1f946e74fffa4b952d5d92d271502fcde5455531198b0ec059161361c13a1ea65dd75e27ad9f773e8770b2929ca0ec2993580ebe4baaafe9ed58ff07117c9b0f5f6c126fc95e7745ddc0639941b42a9455c956d4a4055a2fe11a352c8f99dc05373fc06ca742416a2215246b7a13c1bbc6bdca773ffbdb07cd0b769f0a374aa86ade4a8238197779bbfc33c8c14444e50ec7ec8980eb2d3fae53fa9b6fc26d11860731c7b6685a79882b026028f871cdb0aafa43d8ea93a630eeeae2a7c1c8eac67aab685024775fabb39b27a662630121285e6692e7b4fcd174fb63e32a782bc6efcdb75623e685b3f764ac65be8b70dda7e5ace5f83d33b689fa7c8765f2abbd8e1da83f6ce8de05142856fb1d979f4da516da86761430d0200624967b4f2fff3057b4bb9ee4753189b2acb596e7b05ef5528a5c11f326ec67ce2d8d1beef5cb83bc72bc2667789b60fdba50d82d07cda7640aa36e5913902cec2f4f0d122da76c15946cd5f3b853450bdd0e0f913beb7af7580e7bcfdea449a1de90f7d7da94b95402885e5fe68a7848a89ce91dfb783ea26d97654758b9dff4096652505db472f394688e95720a3e39f4f9fee744273c3a752e69eb1b85d489db2258ba956fa16e5dd375913f435d75abed74586da5b470f86180ca756654c42e429050a58128ceabefe7e21bf1df6e256bc50d077d482b55e4c4b2c4099294a0d1006ecd9feb50e9e1ef79430aa46ce74afc80de2deeb8903611399321dfc3daa2847a361c4ab968b0cb9edb6bdc77cf65d3f4294547c2c022da2400458836e1d8ba33ec8cff35fe163f720748d7a9aa4abb05c82451be60e832ba36a05170fa0fa8524c9b3c1c6304ef03877123ff5e7f7edbf772fc9d2e207a954cce67a7cc172db6ef1249a2a5f785ba574e57db3e7e7c206b33a2779fac37474d3f897f5a2437f97c678bad6bcb0faa24191d7936bd91e6a6260b47989ac2bd768d3f6ac10013800400978059af7c5e4bb9fd80e3371dc24bf036a812d9fa8571991d867387765f6c6db24f971c26906fec7adee7d9d6930fae0fe1bd3e3d3bf00cf2bd9842cd1e77992e28d47496a932f58713a913e74759d95708b5ad71e547bc076a3c06869b5e7ab04c4f64c87050673f5af9deffba1813ff19e40960d7f7aa349c9f642a109372ab1af754722891425431103d66c25642f9feccd011bf4bc9a86b17a6319ff2b116a3d91820d3a8774796d9cfaeda270c002a000900000000000000000000250090800400238008002f00ffffffff04002e80bc991d79d81f11ee997b40b75d874e7857000000a93aa83ca10bb99607d69361996900339501ee5dce0d5a31b46466a383d8c3e42bd160021add2c8f31cea8e074dccf1dfed049243d4ba85ac3107ae8141552d83dbfe5f7019e65b4d907a7a1748801818cfbc9d1b8897f23d7390cea4afa8cac08c32c25a0333180b94fbe8cab2007e57c024468e3dd97cd6a698b4a069c0e31c9fce35b8c0971977dcdfd2a9e2d911c94b10ed22f100664329f0fa34bf092dd4de9ac19c66e78f48bb01f47ac69cdf8f322ea8bd333f104354f0c63ec1600"], 0x13d4}, 0x1, 0x0, 0x0, 0x840}, 0x81)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)

4.213246925s ago: executing program 4 (id=2107):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000007a1600"/20, @ANYRES32=0x0, @ANYBLOB="00000000181002000a000200ffffffffffff000008001d0006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000ca67e7a9336549b355793e240004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000b00000a54000000090a010400000000000000000a0000030900010073797a310000000008000540000000320000000008000a40ffffff78080008400000000108000c40000000050800034000001100110000000000000000000300000a000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x24000000)
sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00030700000026bd7000fbdbdf2505001a00204cba937ecb65d09f1e91a6760e28c1c72a5aa61fc155c15be108f8a110e4b95ee5dd"], 0x38}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x19, &(0x7f0000000b00)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000440)={@mcast2, <r9=>0x0}, &(0x7f0000000480)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x280440c4}, 0xc050)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb0100180000000000000018010000930100000001000000020001000500000000615f5f2e5fb700000000000000000000000000000025"], 0x0, 0x37, 0x0, 0x9}, 0x28)
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000380))
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xfff2}, {0x9a6ed142c960f000, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x21}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {0xffff, 0x1}, {0xffff, 0x6}, {0x7, 0xffff}}}, 0xff76}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000a00)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001a8822e00a5c5e261cba8469ad044cf3874d23c9dc8b3ed38139a01bcee05adb1b4d8556c559501e7f0c4bc72f952c26394a1692be5627b06a6a97dd70915259ea43886cb17886ee0dee46aae1a2b1d785f5d8436475068bd68f1a1d5bea5ccf38aaf1f857e6c8ed595f94cb6a165233a36c95d80772db90bbbca5dfabbf0d1b3255afa34543c78e9bdbf59859a89deed6de82c90324232a5db8a1e47a9669f07ce1cec75d6d7613b45e8c534de7b12e97deeb90606f144d351"], 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000880)={r8, r6, 0x44e4, 0xa5, &(0x7f00000007c0)="237ba48393d4aa714d0fb1e3f035d3c98734414fda140ae5f22e98b2957a196e311385af87664ce184ad09a029e3c46e36603cf1af8ceed14d55c1212fbd5194c87890447e4c430b5f6381c5834af0c10e56ba7a7e79e44c567dd3d7ccf0ffec10d4f0ea9158b61f9a2e809649f4081789e940bbb439f0f1534fe088623471c72254a4ea54575f3bd46c57ff00d4cfa1f8b6529e37934c51f01bdb03122ccbd10e73bfa662", 0x5, 0x1, 0x80, 0x4, 0x3, 0x1, 0x9, 'syz0\x00'})

3.768283295s ago: executing program 1 (id=2109):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000000000000000050000", @ANYRES32=0x0, @ANYBLOB="0003100000001000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, 0x0, 0x0)

3.76720218s ago: executing program 4 (id=2110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {0x6}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x2e0}}]}, 0x184}}, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x3, 0xffffffffffffff7c)
sendto$inet(r1, &(0x7f00000002c0)="ab", 0xfdef, 0x4000805, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x44, 0x11, 0x839, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0xe}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffff267e}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffb}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures})
accept$alg(r4, 0x0, 0x0)

3.314743406s ago: executing program 1 (id=2112):
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000010000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0)

2.835242646s ago: executing program 4 (id=2115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x108}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f100000"], 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0xfffffdec}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x20002061)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_WEIGHT={0x8, 0xf, 0xc84f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

2.589359448s ago: executing program 4 (id=2116):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x41)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f666973682900"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x18, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x20, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xf}, {0xfff3, 0x6}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080001900", @ANYBLOB="444c875f588065488b86608acdf724b8bb24bae30de257d610cff4ce53df6792cb24a2b956a606ca48ea9f5a60118157bd3b9f46fed1113b02adab48d7494ee6ad8536b985c8e167a83d0ea7066a3fd7485a813327348f1c56b6408ca674a6196aa011ebb70302b243d2e4eea4cf08722db4a3e7c4b5091c877a919dbef6dfd06e3318a643922dbad1220c1dfe4cc856", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c5c4651cef6c16ae3e466a681a8b7b30d3709c10a4c87806af3a66bf004e36aa8890b5f00dd733309de015ec2d5a0c65a952fd8ee6edac26ac6bd31f62ab4c29d7cfdfac319d6b37613e2f0e2422db388b92b778da85d54b14a5b25dd72d859058a2016051a0a0215bbf6793bac001624c0e338eb39278a2a8618c8ad8db926b8e7c93d3692613f6c8713aba430c8c8b090d5c9bf021e03a2dfee49f906722abf8fe97326252b2ff96ea07c8a1888c8a1db32499410b65a0163857e8ec3dcf1ff66545adf1d0b5c99d1e34beffd4db6b677b36ee88c54c855041652c724f97b66981a3f35708293d"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r9 = socket$xdp(0x2c, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044c94)
getsockopt$XDP_STATISTICS(r9, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140020001000010000000000000000000000000a20000000000a010200000000000000ec000080030900010073797a30000000002c000000010000000900010073797a30000000000900030073797a320000000034000000060a010400000000000000000100000008000b40000000000c00034000000000000000050900010073797a7000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket(0x11, 0x80000, 0x6)

2.347980959s ago: executing program 2 (id=2117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000040000200"/28], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000004000000040000006b00000008000000", @ANYRESDEC], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110b4000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3, r1}, 0xc)

1.983711891s ago: executing program 2 (id=2118):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)
setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc4, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0)

1.981620281s ago: executing program 4 (id=2119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) (async)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001)
write(r1, 0x0, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
accept(r8, 0x0, 0x0) (async)
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000540)=0x8) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={<r10=>0x0, 0x3, 0x0, 0x5, 0x5}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r10, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0xfffd, 0xe, 0x4, 0xe, 0x60, 0x10}, &(0x7f0000000200)=0x9c)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0}) (async)
r14 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r11)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="30050000", @ANYRES16=r14, @ANYBLOB="000327bd7000fbdbdf250100000008000100", @ANYRES32=r13, @ANYBLOB="b800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000008008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="e401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400040000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000e00000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400acfeffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ca0311283c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000180000008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="f80002803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000a000703040000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004009b14000008000600", @ANYRES32=r13, @ANYBLOB], 0x530}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008041) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9)

1.664073263s ago: executing program 4 (id=2121):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x2000033f)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000340), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x880)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x4000, r3}, 0x18)
sendmmsg(r5, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0)
write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x7, 0x100, @void}}}}}}}}}, 0x46)
bind$alg(r0, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x175c}, 0x1, 0x0, 0x0, 0x4044004}, 0x8084)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6)

1.450862218s ago: executing program 2 (id=2123):
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="09f8000001", 0x5)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.180269588s ago: executing program 2 (id=2124):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
pselect6(0x40, &(0x7f0000000080)={0x1, 0x5, 0x100, 0x7, 0x2, 0x1, 0x79, 0xd936}, 0x0, &(0x7f0000000100)={0x6a, 0x101, 0x2, 0xfffffffffffffffd, 0x81, 0x6, 0x7, 0x7fff}, 0x0, 0x0)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020601040000c6d7d27de89a9c2ef661cf7b000000000000"], 0x1c}}, 0x11000)

1.072532211s ago: executing program 5 (id=2125):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0xffffffff, 0xfffffffd}, 0x10)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

800.563784ms ago: executing program 5 (id=2126):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async)
listen(r0, 0x0) (async)
r1 = socket(0xb, 0x5, 0x80000)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async, rerun: 32)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (rerun: 32)
close(0x4) (async)
close(0x3) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0)
read(r3, &(0x7f0000000040)=""/190, 0xbe) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000001600010000004de30a6628d7e39737f7000000000000fe880000000000000000000000000001ff010000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000200"/176], 0xf8}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x850) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4060000000000007111b100000000008510000002000000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) (async, rerun: 64)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff110000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x0, 0x2, 0x1, @remote, @local, 0x7, 0x8, 0x100, 0x7}}) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

626.704118ms ago: executing program 5 (id=2127):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x6, 0x1, 0xfff, 0xa, 0x8, 0x1d, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000460062ff010000ec00"})
close(r2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x24000091)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48)
splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))

435.703293ms ago: executing program 5 (id=2128):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYBLOB="0008000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e320000000000000000000000000000ea9263502d499e4de9a47b0f5bf90e4be980ac"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) (async)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x8, 0x200})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x40}, {0xc}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0xfffffffc, [{0x1, 0x5, 0x5}]}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x8}, @var={0xb, 0x0, 0x0, 0xe, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x5, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x72}, @func={0xe, 0x0, 0x0, 0xc, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x29, 0x2}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000940)=""/162, 0xc4, 0xa2, 0x0, 0x8f4, 0x10000}, 0x28)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a0002000000080005"], 0x28}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x26, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x4, 0x0, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x100, 0x91, &(0x7f00000006c0)=""/145, 0x41000, 0xa, '\x00', r1, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x9, 0xfffffffa, 0x64c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780), &(0x7f0000000a00)=[{0x1, 0x1, 0x1, 0x2}, {0x2, 0x2, 0x5, 0x7}, {0x0, 0x1, 0x6, 0x7}, {0x1, 0x4, 0xf, 0xb}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x9}, 0x94) (async)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESOCT], 0x114}], 0x1, 0x0, 0x0, 0x20008041}, 0x4008080) (async)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
connect$rose(r11, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async)
connect$rose(r11, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

225.487001ms ago: executing program 5 (id=2129):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))

107.696814ms ago: executing program 2 (id=2130):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'vlan0\x00', {0x3}, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)

0s ago: executing program 5 (id=2131):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000400)=[{0x94}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r7=>0x0})
unshare(0x400)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r10 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x400, 0x9, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
close(r8)
r13 = socket(0x27, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'veth0_to_team\x00', @random="904ad0f41e83"})
sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x7, 0x53}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="a827ce75d97ab3741374e27610cf5ac984f030b24648c5a8eb570f340bfa606a84451975af38e9098c7a49c7836189b67b654b37c65ad4b972993248111629b2b94f63a2c08ab1032bd2003d6e36db372af3a8fc53c06823ff6dc31dde357cdd2c534b096a1792abf840fe76e15b30e27971b5c7f174df90dff4b5bd84b5eabccb5c627aee6847d77344bd6072a7151326f6330a5e573e", 0x97}, {&(0x7f0000000580)="f7173e87e86f93fe9a2855d6055bd90b8c321209403bafbeb7e6a0d8a0e4b7844aad7349f482221ee812af80c94e14a08129e82b2de2d43c3ef88a5b03bfed8a11dcbb5e147b638bd65e64d5ce5ceb03f4a2fd46aa1adbf3461cc4c9ab07684cee79519db8818312f03406384932fecdeaabda5c69215afaf4e8c0bfa9a44c0490394bdef842b6c5f965cb64119a", 0x8e}], 0x2, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x278}, 0xc0)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r12, <r14=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003980)=@bpf_tracing={0x1a, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x3a, &(0x7f00000007c0)=""/58, 0x0, 0x0, '\x00', r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x12d7b, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r14, 0x1, r11], &(0x7f0000003940), 0x10, 0x6}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

ubj=unconfined op=collect_data cause=failed comm="syz.1.1054" name="memory.events" dev="tmpfs" ino=1018 res=0 errno=0
[  209.633559][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056702000: abort rx timeout. Force session deactivation
[  209.916016][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056702400: rx timeout, send abort
[  210.006894][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  210.354309][T10775] syzkaller1: entered promiscuous mode
[  210.406797][T10775] syzkaller1: entered allmulticast mode
[  210.416157][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805745e000: rx timeout, send abort
[  210.424610][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056702400: abort rx timeout. Force session deactivation
[  210.449720][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805745e000: connection exists (fe ff). last cmd: 20
[  210.630309][T10792] netlink: 'syz.1.1069': attribute type 5 has an invalid length.
[  210.699681][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880290d5400: rx timeout, send abort
[  211.108684][ T5837] Bluetooth: hci4: link tx timeout
[  211.114712][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  211.208034][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880290d5400: abort rx timeout. Force session deactivation
[  211.485516][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079ae1400: rx timeout, send abort
[  211.763672][T10833] __nla_validate_parse: 4 callbacks suppressed
[  211.763693][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'.
[  211.857270][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  211.863824][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  211.868401][ T5142] Bluetooth: hci2: command 0x0406 tx timeout
[  211.909832][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'.
[  211.985403][T10846] xt_bpf: check failed: parse error
[  211.990879][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806b413000: rx timeout, send abort
[  211.999380][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079ae1400: abort rx timeout. Force session deactivation
[  212.021666][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806b413000: connection exists (fe ff). last cmd: 20
[  212.125341][T10846] lo speed is unknown, defaulting to 1000
[  212.162103][T10846] lo speed is unknown, defaulting to 1000
[  212.195664][T10846] lo speed is unknown, defaulting to 1000
[  212.260435][T10846] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  212.271625][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801afb1000: rx timeout, send abort
[  212.286273][T10846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  212.337744][T10846] lo speed is unknown, defaulting to 1000
[  212.368726][T10846] lo speed is unknown, defaulting to 1000
[  212.379002][T10846] lo speed is unknown, defaulting to 1000
[  212.399483][T10846] lo speed is unknown, defaulting to 1000
[  212.414834][T10846] lo speed is unknown, defaulting to 1000
[  212.502400][T10866] lo speed is unknown, defaulting to 1000
[  212.779921][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801afb1000: abort rx timeout. Force session deactivation
[  213.053338][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad17800: rx timeout, send abort
[  213.126802][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  213.233095][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'.
[  213.388064][T10897] 8021q: adding VLAN 0 to HW filter on device bond11
[  213.457455][T10904] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  213.470220][T10904] team0: Port device macvlan7 added
[  213.553465][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057724c00: rx timeout, send abort
[  213.561874][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad17800: abort rx timeout. Force session deactivation
[  213.582282][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057724c00: connection exists (fe ff). last cmd: 20
[  213.667323][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1093'.
[  213.689517][T10914] bond0: entered promiscuous mode
[  213.694769][T10914] bond_slave_0: entered promiscuous mode
[  213.713830][T10914] bond_slave_1: entered promiscuous mode
[  213.723419][T10914] bond0: left promiscuous mode
[  213.729360][T10914] bond_slave_0: left promiscuous mode
[  213.735216][T10914] bond_slave_1: left promiscuous mode
[  213.832246][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7c00: rx timeout, send abort
[  214.023240][T10927] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  214.064112][T10927] bond12 (unregistering): Released all slaves
[  214.340554][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7c00: abort rx timeout. Force session deactivation
[  214.625994][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7800: rx timeout, send abort
[  214.630592][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'.
[  214.793338][T10958] 8021q: adding VLAN 0 to HW filter on device bond12
[  214.866358][T10961] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  214.893697][T10961] team0: Port device macvlan8 added
[  214.922147][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'.
[  214.943374][T10455] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.943601][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'.
[  214.983836][T10455] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.998188][T10455] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.012764][T10455] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.126112][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807b0d9000: rx timeout, send abort
[  215.134534][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7800: abort rx timeout. Force session deactivation
[  215.155960][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807b0d9000: connection exists (fe ff). last cmd: 20
[  215.318539][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  215.405899][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259de400: rx timeout, send abort
[  215.510165][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'.
[  215.520943][T10993] netlink: 'syz.1.1111': attribute type 22 has an invalid length.
[  215.530031][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'.
[  215.914244][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259de400: abort rx timeout. Force session deactivation
[  215.947089][T11011] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  216.116875][T11022] SET target dimension over the limit!
[  216.188501][T11026] openvswitch: netlink: Flow key attr not present in new flow.
[  216.196164][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259de800: rx timeout, send abort
[  216.271062][T11020] 8021q: adding VLAN 0 to HW filter on device bond13
[  216.324129][T11023] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  216.356286][T11023] macvlan9: entered allmulticast mode
[  216.382783][T11023] bond13: entered allmulticast mode
[  216.428363][T11023] team0: Port device macvlan9 added
[  216.690839][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880569f2400: rx timeout, send abort
[  216.699414][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259de800: abort rx timeout. Force session deactivation
[  216.720854][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880569f2400: connection exists (fe ff). last cmd: 20
[  216.970813][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dec00: rx timeout, send abort
[  217.244261][T11081] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 1, id = 0
[  217.479154][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dec00: abort rx timeout. Force session deactivation
[  217.635627][T11095] team0: Device macvlan2 failed to change mtu
[  217.660798][T11096] __nla_validate_parse: 2 callbacks suppressed
[  217.660820][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'.
[  217.719292][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'.
[  217.757260][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dc800: rx timeout, send abort
[  217.776106][T11098] 8021q: adding VLAN 0 to HW filter on device bond10
[  218.198458][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'.
[  218.257028][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056c09c00: rx timeout, send abort
[  218.266356][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dc800: abort rx timeout. Force session deactivation
[  218.289837][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056c09c00: connection exists (fe ff). last cmd: 20
[  218.492872][T11128] lo speed is unknown, defaulting to 1000
[  218.539787][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dc000: rx timeout, send abort
[  219.048094][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880259dc000: abort rx timeout. Force session deactivation
[  219.203461][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'.
[  219.306084][T11166] netlink: zone id is out of range
[  219.311525][T11166] netlink: zone id is out of range
[  219.317245][T11166] netlink: zone id is out of range
[  219.322525][T11166] netlink: zone id is out of range
[  219.328407][T11166] netlink: zone id is out of range
[  219.333595][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057f93800: rx timeout, send abort
[  219.344093][T11166] netlink: zone id is out of range
[  219.350063][T11166] netlink: zone id is out of range
[  219.355470][T11166] netlink: zone id is out of range
[  219.361235][T11166] netlink: zone id is out of range
[  219.366760][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  219.643689][T11163] 8021q: adding VLAN 0 to HW filter on device bond14
[  219.670660][T11164] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  219.681884][T11164] team0: Port device macvlan7 added
[  219.832713][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057fbac00: rx timeout, send abort
[  219.841419][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057f93800: abort rx timeout. Force session deactivation
[  219.865872][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057fbac00: connection exists (fe ff). last cmd: 20
[  219.936477][T11181] lo speed is unknown, defaulting to 1000
[  220.115845][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057f92c00: rx timeout, send abort
[  220.257420][T11197] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  220.409399][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.419457][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.428001][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.446932][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.457510][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.572420][T11210] FAULT_INJECTION: forcing a failure.
[  220.572420][T11210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.624415][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057f92c00: abort rx timeout. Force session deactivation
[  220.644737][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.1.1159 Not tainted syzkaller #0 PREEMPT(full) 
[  220.644767][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  220.644780][T11210] Call Trace:
[  220.644788][T11210]  <TASK>
[  220.644797][T11210]  dump_stack_lvl+0xe8/0x150
[  220.644830][T11210]  should_fail_ex+0x412/0x560
[  220.644859][T11210]  _copy_from_user+0x2d/0xb0
[  220.644890][T11210]  ___sys_sendmsg+0x1c6/0x360
[  220.644924][T11210]  ? __pfx____sys_sendmsg+0x10/0x10
[  220.644957][T11210]  ? kstrtouint+0x6e/0xe0
[  220.645014][T11210]  ? __fget_files+0x2a/0x420
[  220.645042][T11210]  ? __fget_files+0x3a0/0x420
[  220.645081][T11210]  __sys_sendmmsg+0x27c/0x4e0
[  220.645127][T11210]  ? __pfx___sys_sendmmsg+0x10/0x10
[  220.645156][T11210]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  220.645205][T11210]  ? ksys_write+0x242/0x270
[  220.645229][T11210]  ? __pfx_ksys_write+0x10/0x10
[  220.645258][T11210]  __x64_sys_sendmmsg+0xa0/0xc0
[  220.645292][T11210]  do_syscall_64+0x14d/0xf80
[  220.645312][T11210]  ? trace_irq_disable+0x3b/0x150
[  220.645342][T11210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.645363][T11210]  ? clear_bhb_loop+0x40/0x90
[  220.645390][T11210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.645411][T11210] RIP: 0033:0x7f8148f9c799
[  220.645431][T11210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.645448][T11210] RSP: 002b:00007f8149e16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  220.645471][T11210] RAX: ffffffffffffffda RBX: 00007f8149215fa0 RCX: 00007f8148f9c799
[  220.645486][T11210] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  220.645500][T11210] RBP: 00007f8149e16090 R08: 0000000000000000 R09: 0000000000000000
[  220.645512][T11210] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001
[  220.645525][T11210] R13: 00007f8149216038 R14: 00007f8149215fa0 R15: 00007ffd05a29e78
[  220.645559][T11210]  </TASK>
[  220.910107][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079af9400: rx timeout, send abort
[  220.995852][T11203] lo speed is unknown, defaulting to 1000
[  221.197334][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'.
[  221.252958][T11219] 8021q: adding VLAN 0 to HW filter on device bond14
[  221.357932][T11222] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  221.378018][T11222] team0: Port device macvlan9 added
[  221.410604][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028209c00: rx timeout, send abort
[  221.419000][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079af9400: abort rx timeout. Force session deactivation
[  221.442425][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888028209c00: connection exists (fe ff). last cmd: 20
[  221.489565][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'.
[  221.648323][T11235] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1164'.
[  221.672369][T11235] syzkaller1: tun_chr_ioctl cmd 1074025677
[  221.689870][T11235] syzkaller1: linktype set to 825
[  221.692474][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047add800: rx timeout, send abort
[  221.783723][T11203] chnl_net:caif_netlink_parms(): no params data found
[  221.966438][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'.
[  222.022153][T11261] FAULT_INJECTION: forcing a failure.
[  222.022153][T11261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.057977][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.4.1169 Not tainted syzkaller #0 PREEMPT(full) 
[  222.058009][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  222.058022][T11261] Call Trace:
[  222.058031][T11261]  <TASK>
[  222.058040][T11261]  dump_stack_lvl+0xe8/0x150
[  222.058076][T11261]  should_fail_ex+0x412/0x560
[  222.058107][T11261]  _copy_from_user+0x2d/0xb0
[  222.058139][T11261]  __copy_msghdr+0x3c5/0x5b0
[  222.058176][T11261]  ___sys_sendmsg+0x213/0x360
[  222.058214][T11261]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.058252][T11261]  ? kstrtouint+0x6e/0xe0
[  222.058303][T11261]  ? __fget_files+0x2a/0x420
[  222.058332][T11261]  ? __fget_files+0x3a0/0x420
[  222.058372][T11261]  __sys_sendmmsg+0x27c/0x4e0
[  222.058411][T11261]  ? __pfx___sys_sendmmsg+0x10/0x10
[  222.058440][T11261]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  222.058495][T11261]  ? ksys_write+0x242/0x270
[  222.058527][T11261]  ? __pfx_ksys_write+0x10/0x10
[  222.058556][T11261]  __x64_sys_sendmmsg+0xa0/0xc0
[  222.058590][T11261]  do_syscall_64+0x14d/0xf80
[  222.058610][T11261]  ? trace_irq_disable+0x3b/0x150
[  222.058640][T11261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.058662][T11261]  ? clear_bhb_loop+0x40/0x90
[  222.058687][T11261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.058708][T11261] RIP: 0033:0x7f156e39c799
[  222.058728][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.058745][T11261] RSP: 002b:00007f156c5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  222.058768][T11261] RAX: ffffffffffffffda RBX: 00007f156e615fa0 RCX: 00007f156e39c799
[  222.058784][T11261] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  222.058797][T11261] RBP: 00007f156c5ee090 R08: 0000000000000000 R09: 0000000000000000
[  222.058810][T11261] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001
[  222.058822][T11261] R13: 00007f156e616038 R14: 00007f156e615fa0 R15: 00007ffd92506a08
[  222.058855][T11261]  </TASK>
[  222.203238][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047add800: abort rx timeout. Force session deactivation
[  222.542262][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047ade000: rx timeout, send abort
[  222.566968][   T51] Bluetooth: hci5: command tx timeout
[  222.640994][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'.
[  222.724740][T11284] 8021q: adding VLAN 0 to HW filter on device bond11
[  222.733414][T11203] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.741220][T11203] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.749066][T11203] bridge_slave_0: entered allmulticast mode
[  222.763696][T11203] bridge_slave_0: entered promiscuous mode
[  222.773741][T11203] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.781663][T11203] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.789437][T11203] bridge_slave_1: entered allmulticast mode
[  222.798263][T11203] bridge_slave_1: entered promiscuous mode
[  222.937383][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.950831][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.042390][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805624f000: rx timeout, send abort
[  223.050882][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047ade000: abort rx timeout. Force session deactivation
[  223.071309][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805624f000: connection exists (fe ff). last cmd: 20
[  223.112094][T11203] team0: Port device team_slave_0 added
[  223.138048][T11203] team0: Port device team_slave_1 added
[  223.154934][T11299] xt_connbytes: Forcing CT accounting to be enabled
[  223.185864][T11306] FAULT_INJECTION: forcing a failure.
[  223.185864][T11306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.230010][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.246567][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.273284][T11306] CPU: 0 UID: 0 PID: 11306 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(full) 
[  223.273313][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  223.273326][T11306] Call Trace:
[  223.273335][T11306]  <TASK>
[  223.273343][T11306]  dump_stack_lvl+0xe8/0x150
[  223.273380][T11306]  should_fail_ex+0x412/0x560
[  223.273411][T11306]  _copy_from_user+0x2d/0xb0
[  223.273444][T11306]  ____sys_sendmsg+0x334/0xad0
[  223.273487][T11306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.273529][T11306]  ? import_iovec+0x73/0xa0
[  223.273563][T11306]  ___sys_sendmsg+0x2a5/0x360
[  223.273601][T11306]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.273639][T11306]  ? kstrtouint+0x6e/0xe0
[  223.273690][T11306]  ? __fget_files+0x2a/0x420
[  223.273719][T11306]  ? __fget_files+0x3a0/0x420
[  223.273759][T11306]  __sys_sendmmsg+0x27c/0x4e0
[  223.273798][T11306]  ? __pfx___sys_sendmmsg+0x10/0x10
[  223.273828][T11306]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  223.273877][T11306]  ? ksys_write+0x242/0x270
[  223.273902][T11306]  ? __pfx_ksys_write+0x10/0x10
[  223.273940][T11306]  __x64_sys_sendmmsg+0xa0/0xc0
[  223.273975][T11306]  do_syscall_64+0x14d/0xf80
[  223.273995][T11306]  ? trace_irq_disable+0x3b/0x150
[  223.274026][T11306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.274047][T11306]  ? clear_bhb_loop+0x40/0x90
[  223.274073][T11306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.274094][T11306] RIP: 0033:0x7f086d39c799
[  223.274114][T11306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.274131][T11306] RSP: 002b:00007f086e210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  223.274155][T11306] RAX: ffffffffffffffda RBX: 00007f086d615fa0 RCX: 00007f086d39c799
[  223.274170][T11306] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  223.274183][T11306] RBP: 00007f086e210090 R08: 0000000000000000 R09: 0000000000000000
[  223.274195][T11306] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001
[  223.274207][T11306] R13: 00007f086d616038 R14: 00007f086d615fa0 R15: 00007ffeac41eef8
[  223.274241][T11306]  </TASK>
[  223.486926][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047addc00: rx timeout, send abort
[  223.508943][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.524388][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.537986][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.582577][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.679780][T11203] hsr_slave_0: entered promiscuous mode
[  223.688086][T11203] hsr_slave_1: entered promiscuous mode
[  223.819660][T11321] tipc: Enabled bearer <eth:gre0>, priority 10
[  223.868652][T11327] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  223.995162][    C0] vcan0: j1939_tp_rxtimer: 0xffff888047addc00: abort rx timeout. Force session deactivation
[  224.188600][T11203] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  224.221651][T11203] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  224.277528][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880290e6800: rx timeout, send abort
[  224.294068][T11203] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  224.332552][T11203] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  224.361030][T11352] FAULT_INJECTION: forcing a failure.
[  224.361030][T11352] name failslab, interval 1, probability 0, space 0, times 0
[  224.382490][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1192'.
[  224.396598][T11352] CPU: 0 UID: 0 PID: 11352 Comm: syz.4.1193 Not tainted syzkaller #0 PREEMPT(full) 
[  224.396626][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  224.396638][T11352] Call Trace:
[  224.396647][T11352]  <TASK>
[  224.396656][T11352]  dump_stack_lvl+0xe8/0x150
[  224.396691][T11352]  should_fail_ex+0x412/0x560
[  224.396723][T11352]  should_failslab+0xa8/0x100
[  224.396748][T11352]  ? dst_alloc+0x105/0x170
[  224.396769][T11352]  kmem_cache_alloc_noprof+0x87/0x650
[  224.396811][T11352]  dst_alloc+0x105/0x170
[  224.396829][T11352]  ? ip_check_mc_rcu+0x400/0x680
[  224.396858][T11352]  ip_route_output_key_hash_rcu+0x14d0/0x25d0
[  224.396900][T11352]  ? ip_route_output_key_hash+0xd8/0x2a0
[  224.396941][T11352]  ip_route_output_key_hash+0x18d/0x2a0
[  224.396974][T11352]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  224.397001][T11352]  ? __lock_acquire+0x6b5/0x2cf0
[  224.397065][T11352]  ip_route_output_flow+0x2a/0x150
[  224.397091][T11352]  ? security_sk_classify_flow+0x6d/0x150
[  224.397128][T11352]  udp_sendmsg+0x154a/0x22f0
[  224.397178][T11352]  ? __pfx_udplite_getfrag+0x10/0x10
[  224.397214][T11352]  ? __pfx_udp_sendmsg+0x10/0x10
[  224.397253][T11352]  ? tomoyo_supervisor+0x4cb/0x1570
[  224.397291][T11352]  ? register_lock_class+0x31/0x2e0
[  224.397323][T11352]  ? __lock_acquire+0x6b5/0x2cf0
[  224.397357][T11352]  ? get_random_u32+0x497/0x8b0
[  224.397388][T11352]  ? lockdep_hardirqs_on+0x7a/0x110
[  224.397419][T11352]  ? get_random_u32+0x13a/0x8b0
[  224.397449][T11352]  ? get_random_u32+0x4ce/0x8b0
[  224.397491][T11352]  udpv6_sendmsg+0xd1c/0x2560
[  224.397531][T11352]  ? __lock_acquire+0x6b5/0x2cf0
[  224.397562][T11352]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  224.397621][T11352]  ? inet_send_prepare+0x1b9/0x270
[  224.397654][T11352]  ? inet_send_prepare+0x1b9/0x270
[  224.397689][T11352]  ? inet_send_prepare+0x1b9/0x270
[  224.397718][T11352]  ? __local_bh_enable_ip+0xd0/0x130
[  224.397746][T11352]  ? inet_send_prepare+0x1b9/0x270
[  224.397781][T11352]  ? inet6_sendmsg+0xe4/0x120
[  224.397806][T11352]  ____sys_sendmsg+0x62c/0xad0
[  224.397848][T11352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.397890][T11352]  ? import_iovec+0x73/0xa0
[  224.397931][T11352]  ___sys_sendmsg+0x2a5/0x360
[  224.397970][T11352]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.398008][T11352]  ? kstrtouint+0x6e/0xe0
[  224.398060][T11352]  ? __fget_files+0x2a/0x420
[  224.398089][T11352]  ? __fget_files+0x3a0/0x420
[  224.398131][T11352]  __sys_sendmmsg+0x27c/0x4e0
[  224.398170][T11352]  ? __pfx___sys_sendmmsg+0x10/0x10
[  224.398199][T11352]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  224.398250][T11352]  ? ksys_write+0x242/0x270
[  224.398274][T11352]  ? __pfx_ksys_write+0x10/0x10
[  224.398303][T11352]  __x64_sys_sendmmsg+0xa0/0xc0
[  224.398339][T11352]  do_syscall_64+0x14d/0xf80
[  224.398358][T11352]  ? trace_irq_disable+0x3b/0x150
[  224.398389][T11352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.398411][T11352]  ? clear_bhb_loop+0x40/0x90
[  224.398438][T11352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.398459][T11352] RIP: 0033:0x7f156e39c799
[  224.398479][T11352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.398497][T11352] RSP: 002b:00007f156c5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  224.398520][T11352] RAX: ffffffffffffffda RBX: 00007f156e615fa0 RCX: 00007f156e39c799
[  224.398535][T11352] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  224.398548][T11352] RBP: 00007f156c5ee090 R08: 0000000000000000 R09: 0000000000000000
[  224.398561][T11352] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001
[  224.398573][T11352] R13: 00007f156e616038 R14: 00007f156e615fa0 R15: 00007ffd92506a08
[  224.398608][T11352]  </TASK>
[  224.777685][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805650e000: rx timeout, send abort
[  224.785969][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880290e6800: abort rx timeout. Force session deactivation
[  224.803334][   T51] Bluetooth: hci5: command tx timeout
[  224.809328][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805650e000: connection exists (fe ff). last cmd: 20
[  224.941448][T11362] netlink: 'syz.1.1194': attribute type 10 has an invalid length.
[  225.011162][T10510] tipc: Node number set to 343597202
[  225.059299][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079888400: rx timeout, send abort
[  225.121662][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'.
[  225.145381][T11203] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.159458][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1196'.
[  225.338943][T11368] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.346750][T11368] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.488663][T11368] team_slave_1: left promiscuous mode
[  225.567598][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079888400: abort rx timeout. Force session deactivation
[  225.849992][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079888800: rx timeout, send abort
[  225.911984][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.935985][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.043456][T11368] veth0_to_hsr: left allmulticast mode
[  226.069191][T11368] bond1: left allmulticast mode
[  226.253530][T11368] bond11: left allmulticast mode
[  226.262245][T11368] bond12: left allmulticast mode
[  226.275133][T11368] bond13: left allmulticast mode
[  226.310819][T11371] vlan2: entered promiscuous mode
[  226.321574][T11371] bridge0: entered promiscuous mode
[  226.350092][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803158f400: rx timeout, send abort
[  226.358442][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079888800: abort rx timeout. Force session deactivation
[  226.381820][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803158f400: connection exists (fe ff). last cmd: 20
[  226.541026][T10459] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.589907][T10459] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.619995][T11393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1202'.
[  226.631813][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802b1fa000: rx timeout, send abort
[  226.666959][T11393] netlink: 'syz.2.1202': attribute type 1 has an invalid length.
[  226.680949][T10459] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.711331][T10459] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.788135][T10502] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  226.811558][T11385] lo speed is unknown, defaulting to 1000
[  226.829240][T11203] 8021q: adding VLAN 0 to HW filter on device team0
[  226.871890][T10459] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.879149][T10459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.888128][   T51] Bluetooth: hci5: command tx timeout
[  227.038940][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.046126][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.140121][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802b1fa000: abort rx timeout. Force session deactivation
[  227.206740][T11382] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  227.410575][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c2c00: rx timeout, send abort
[  227.427631][T10458] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  227.588225][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  227.731249][T11437] netlink: 'syz.3.1213': attribute type 10 has an invalid length.
[  227.747992][T11440] netlink: 'syz.3.1213': attribute type 10 has an invalid length.
[  227.764137][T11440] veth0_vlan: left promiscuous mode
[  227.792060][T11444] netlink: 'syz.1.1215': attribute type 1 has an invalid length.
[  227.815981][T11440] veth0_vlan: entered promiscuous mode
[  227.868807][T11440] team0: Device veth0_vlan failed to register rx_handler
[  227.910710][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056e79c00: rx timeout, send abort
[  227.919167][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c2c00: abort rx timeout. Force session deactivation
[  227.949023][T11437] veth0_vlan: left promiscuous mode
[  227.952954][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056e79c00: connection exists (fe ff). last cmd: 20
[  227.968275][T11437] veth0_vlan: entered promiscuous mode
[  227.977208][T11437] team0: Device veth0_vlan failed to register rx_handler
[  228.076274][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.181663][T11463] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  228.202865][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c2800: rx timeout, send abort
[  228.256129][T11467] team0: Port device dummy0 removed
[  228.282688][T11467] batman_adv: batadv0: Adding interface: dummy0
[  228.301325][T11467] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.360836][T11467] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  228.490130][T10443] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  228.520789][T10443] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  228.711217][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c2800: abort rx timeout. Force session deactivation
[  228.750646][T11491] lo speed is unknown, defaulting to 1000
[  228.967179][   T51] Bluetooth: hci5: command tx timeout
[  228.978833][T11203] veth0_vlan: entered promiscuous mode
[  228.990641][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c3c00: rx timeout, send abort
[  228.995043][T11203] veth1_vlan: entered promiscuous mode
[  229.183126][T11203] veth0_macvtap: entered promiscuous mode
[  229.221915][T11203] veth1_macvtap: entered promiscuous mode
[  229.346421][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  229.490791][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056cde000: rx timeout, send abort
[  229.499642][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c3c00: abort rx timeout. Force session deactivation
[  229.512193][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.527013][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056cde000: connection exists (fe ff). last cmd: 20
[  229.539459][T11526] syzkaller0: entered promiscuous mode
[  229.544998][T11526] syzkaller0: entered allmulticast mode
[  229.553867][T10509] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  229.599278][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.642719][T10443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.664324][T10443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.679535][T10443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.689098][T10443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.777134][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c1800: rx timeout, send abort
[  230.007785][T11543] netlink: 'syz.1.1234': attribute type 11 has an invalid length.
[  230.055981][T11549] netlink: 'syz.4.1235': attribute type 1 has an invalid length.
[  230.138852][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.164870][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.173541][T11555] macvlan8: entered promiscuous mode
[  230.200333][T11555] macvlan8: entered allmulticast mode
[  230.207179][T11555] bond15: entered promiscuous mode
[  230.213107][T11555] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  230.285474][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880558c1800: abort rx timeout. Force session deactivation
[  230.367307][T11555] bond15: left promiscuous mode
[  230.485793][T10459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.504976][T10459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.558922][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e800: rx timeout, send abort
[  230.975305][T11592] tipc: Started in network mode
[  230.992129][T11592] tipc: Node identity 56f5d565a025, cluster identity 4711
[  231.018100][T11592] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  231.059067][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057727000: rx timeout, send abort
[  231.067566][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e800: abort rx timeout. Force session deactivation
[  231.099001][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888057727000: connection exists (fe ff). last cmd: 20
[  231.152376][T11578] infiniband syz1: set down
[  231.170210][T11578] infiniband syz1: added ipvlan0
[  231.310347][T11578] RDS/IB: syz1: added
[  231.315328][T11578] smc: adding ib device syz1 with port count 1
[  231.323205][T11578] smc:    ib device syz1 port 1 has no pnetid
[  231.348966][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e400: rx timeout, send abort
[  231.747112][T11612] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1245'.
[  231.857404][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e400: abort rx timeout. Force session deactivation
[  232.055375][T11629] netlink: 'syz.4.1247': attribute type 1 has an invalid length.
[  232.068656][T11618] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.076912][T11618] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.142880][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e000: rx timeout, send abort
[  232.416129][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.434928][T11645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.485963][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.523111][T11618] tipc: Resetting bearer <eth:xfrm0>
[  232.643040][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807e2ccc00: rx timeout, send abort
[  232.651565][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8e000: abort rx timeout. Force session deactivation
[  232.677952][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807e2ccc00: connection exists (fe ff). last cmd: 20
[  232.759840][T11629] 8021q: adding VLAN 0 to HW filter on device bond16
[  232.770819][T10502] tipc: Node number set to 4140881253
[  232.793856][ T1084] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.816774][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  232.855175][ T1084] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.911222][ T1084] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.923679][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'.
[  232.933084][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8dc00: rx timeout, send abort
[  232.947516][ T1084] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.010254][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'.
[  233.093564][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.103043][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.130538][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.155626][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.194904][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.217202][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.244142][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'.
[  233.433137][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8dc00: abort rx timeout. Force session deactivation
[  233.525127][T11688] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  233.703609][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d800: rx timeout, send abort
[  233.816973][T11697] lo speed is unknown, defaulting to 1000
[  234.203861][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d707c00: rx timeout, send abort
[  234.212395][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d800: abort rx timeout. Force session deactivation
[  234.238791][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807d707c00: connection exists (fe ff). last cmd: 20
[  234.383923][T11721] IPVS: Scheduler module ip_vs_sip not found
[  234.488764][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d400: rx timeout, send abort
[  234.997103][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d400: abort rx timeout. Force session deactivation
[  235.103242][T11748] bond0: option arp_validate: invalid value (55553)
[  235.275525][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d000: rx timeout, send abort
[  235.329160][T11763] tipc: Started in network mode
[  235.343967][T11763] tipc: Node identity 42bdb5e7109, cluster identity 4711
[  235.369738][T11763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.389577][T11763] bridge0: entered promiscuous mode
[  235.394992][T11763] bridge0: entered allmulticast mode
[  235.573259][T11775] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  235.590540][T11775] netlink: 'syz.3.1277': attribute type 2 has an invalid length.
[  235.775707][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029283c00: rx timeout, send abort
[  235.784124][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8d000: abort rx timeout. Force session deactivation
[  235.814536][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888029283c00: connection exists (fe ff). last cmd: 20
[  236.064506][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8cc00: rx timeout, send abort
[  236.170826][T11791] syzkaller0: entered promiscuous mode
[  236.176376][T11791] syzkaller0: entered allmulticast mode
[  236.367163][T10502] tipc: Node number set to 1378727399
[  236.511945][T11800] bond14: entered promiscuous mode
[  236.551761][T11800] 8021q: adding VLAN 0 to HW filter on device bond14
[  236.572867][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8cc00: abort rx timeout. Force session deactivation
[  236.657702][T11802] 8021q: adding VLAN 0 to HW filter on device bond14
[  236.698804][T11802] bond14: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  236.734322][T11802] bond14: (slave ip6tnl2): Error -95 calling set_mac_address
[  236.843353][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c800: rx timeout, send abort
[  236.937127][T11760] siw: device registration error -23
[  237.343564][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803154a400: rx timeout, send abort
[  237.351939][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c800: abort rx timeout. Force session deactivation
[  237.375427][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803154a400: connection exists (fe ff). last cmd: 20
[  237.426292][T11858] netlink: 'syz.4.1293': attribute type 1 has an invalid length.
[  237.449388][T11862] __nla_validate_parse: 33 callbacks suppressed
[  237.449409][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'.
[  237.625343][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c400: rx timeout, send abort
[  237.784637][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'.
[  237.956292][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  237.977724][T11879] ieee802154 phy1 wpan1: encryption failed: -22
[  238.133671][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c400: abort rx timeout. Force session deactivation
[  238.410135][T11897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1302'.
[  238.414138][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c000: rx timeout, send abort
[  238.501348][T11897] bond_slave_1: entered promiscuous mode
[  238.550091][T11897] bond_slave_1: entered allmulticast mode
[  238.566704][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  238.584723][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'.
[  238.594401][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'.
[  238.618037][T11897] ip6gretap0: entered promiscuous mode
[  238.636758][T11897] syz_tun: entered promiscuous mode
[  238.648488][T11897] debugfs: 'hsr0' already exists in 'hsr'
[  238.662566][T11897] Cannot create hsr debugfs directory
[  238.677317][T11897] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  238.705065][T11897] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  238.722952][T11908] net_ratelimit: 13 callbacks suppressed
[  238.722973][T11908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  238.916726][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056510800: rx timeout, send abort
[  238.927583][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8c000: abort rx timeout. Force session deactivation
[  238.963051][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056510800: connection exists (fe ff). last cmd: 20
[  239.179831][T11917] netlink: 644 bytes leftover after parsing attributes in process `syz.2.1305'.
[  239.213014][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880577fd800: rx timeout, send abort
[  239.569103][T11942] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1312'.
[  239.648058][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'.
[  239.721316][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880577fd800: abort rx timeout. Force session deactivation
[  239.886769][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'.
[  239.965819][T11945] team0: Port device team_slave_0 removed
[  240.005733][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635800: rx timeout, send abort
[  240.029239][   T29] audit: type=1800 audit(1772778769.264:6): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1308" name="memory.events" dev="tmpfs" ino=1359 res=0 errno=0
[  240.075493][T11954] batman_adv: batadv0: Adding interface: macvtap1
[  240.101748][T11954] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  240.151442][T11954] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  240.389990][T11979] netlink: 'syz.3.1319': attribute type 9 has an invalid length.
[  240.505981][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056457000: rx timeout, send abort
[  240.514554][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635800: abort rx timeout. Force session deactivation
[  240.545014][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056457000: connection exists (fe ff). last cmd: 20
[  240.794977][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635400: rx timeout, send abort
[  241.303334][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635400: abort rx timeout. Force session deactivation
[  241.579762][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635000: rx timeout, send abort
[  241.591709][T12035] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  241.766866][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  241.844265][T12044] 8021q: adding VLAN 0 to HW filter on device bond18
[  241.864577][T12044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.874097][T12044] bond18: (slave batadv0): Enslaving as an active interface with an up link
[  242.083417][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805642c800: rx timeout, send abort
[  242.092628][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d635000: abort rx timeout. Force session deactivation
[  242.124294][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88805642c800: connection exists (fe ff). last cmd: 20
[  242.379790][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634c00: rx timeout, send abort
[  242.495268][T12044] bond18 (unregistering): (slave batadv0): Releasing backup interface
[  242.601765][T12044] bond18 (unregistering): Released all slaves
[  242.668266][T12064] 8021q: VLANs not supported on ip6_vti0
[  242.888745][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634c00: abort rx timeout. Force session deactivation
[  243.002627][T12081] __nla_validate_parse: 10 callbacks suppressed
[  243.002648][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'.
[  243.168691][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634800: rx timeout, send abort
[  243.220549][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'.
[  243.228256][T12081] 8021q: adding VLAN 0 to HW filter on device bond18
[  243.244870][T12087] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  243.254062][T12087] team0: Port device macvlan8 added
[  243.668335][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d322800: rx timeout, send abort
[  243.676984][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634800: abort rx timeout. Force session deactivation
[  243.707575][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807d322800: connection exists (fe ff). last cmd: 20
[  243.842272][T12123] netlink: 'syz.3.1348': attribute type 1 has an invalid length.
[  243.860782][T12123] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1348'.
[  243.870566][T12120] pimreg: entered allmulticast mode
[  243.957841][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634400: rx timeout, send abort
[  244.044722][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'.
[  244.279054][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'.
[  244.466184][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634400: abort rx timeout. Force session deactivation
[  244.510238][T12145] 8021q: adding VLAN 0 to HW filter on device bond19
[  244.563267][T12151] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  244.588516][T12151] team0: Port device macvlan9 added
[  244.738597][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634000: rx timeout, send abort
[  244.811081][T12175] batadv_slave_0: entered promiscuous mode
[  244.840596][T12177] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1361'.
[  244.856799][T12177] netlink: ct family unspecified
[  244.981632][T12175] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1360'.
[  245.038330][T12184] ..0ªî{X¹¦: left allmulticast mode
[  245.073723][T12184] bridge0: left allmulticast mode
[  245.084863][T12184] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.095020][T12184] 8021q: adding VLAN 0 to HW filter on device team0
[  245.098886][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  245.119650][T12184] batman_adv: batadv0: Interface activated: dummy0
[  245.129285][T12184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.145726][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  245.181596][T12174] batadv_slave_0: left promiscuous mode
[  245.238906][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056752c00: rx timeout, send abort
[  245.247252][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d634000: abort rx timeout. Force session deactivation
[  245.258448][T12185] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1363'.
[  245.272766][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888056752c00: connection exists (fe ff). last cmd: 20
[  245.320181][T12185] IPv6: sit3: Disabled Multicast RS
[  245.335875][T12185] sit3: entered allmulticast mode
[  245.405648][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.419152][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.476088][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.522692][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8fc00: rx timeout, send abort
[  245.547019][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.555445][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.568062][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.592749][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.608895][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.634514][T12198] netlink: 'syz.4.1366': attribute type 1 has an invalid length.
[  245.930884][T12215] 8021q: adding VLAN 0 to HW filter on device bond20
[  245.946397][T12218] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  246.000282][T12218] team0: Port device macvlan10 added
[  246.031021][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8fc00: abort rx timeout. Force session deactivation
[  246.248696][T12241] lo speed is unknown, defaulting to 1000
[  246.254559][T12241] lo speed is unknown, defaulting to 1000
[  246.303380][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f800: rx timeout, send abort
[  246.312111][T12241] lo speed is unknown, defaulting to 1000
[  246.333197][T12241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  246.429688][T12241] lo speed is unknown, defaulting to 1000
[  246.457853][T12241] lo speed is unknown, defaulting to 1000
[  246.480942][T12241] lo speed is unknown, defaulting to 1000
[  246.519545][T12254] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.561823][T12241] lo speed is unknown, defaulting to 1000
[  246.591699][T12254] tipc: Resetting bearer <eth:syzkaller0>
[  246.607677][T12241] lo speed is unknown, defaulting to 1000
[  246.615359][T12241] lo speed is unknown, defaulting to 1000
[  246.803529][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806b2d2800: rx timeout, send abort
[  246.811896][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f800: abort rx timeout. Force session deactivation
[  246.835317][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806b2d2800: connection exists (fe ff). last cmd: 20
[  247.085286][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f400: rx timeout, send abort
[  247.363730][T12293] lo speed is unknown, defaulting to 1000
[  247.410116][T12293] lo speed is unknown, defaulting to 1000
[  247.424169][T12293] lo speed is unknown, defaulting to 1000
[  247.593615][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f400: abort rx timeout. Force session deactivation
[  247.869068][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f000: rx timeout, send abort
[  248.023636][T12348] __nla_validate_parse: 9 callbacks suppressed
[  248.023660][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'.
[  248.141629][T12342] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  248.164774][T12342] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  248.220799][T12357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1397'.
[  248.288562][T12348] bond15: (slave bridge5): Enslaving as an active interface with a down link
[  248.298513][T12293] infiniband syz0: set down
[  248.303193][T12293] infiniband syz0: added lo
[  248.312742][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'.
[  248.369243][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801baa4000: rx timeout, send abort
[  248.377650][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8f000: abort rx timeout. Force session deactivation
[  248.395233][T12357] 8021q: adding VLAN 0 to HW filter on device bond15
[  248.403682][T12360] bridge0: entered allmulticast mode
[  248.412063][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88801baa4000: connection exists (fe ff). last cmd: 20
[  248.416179][T12293] RDS/IB: syz0: added
[  248.427608][T12293] smc: adding ib device syz0 with port count 1
[  248.433901][T12293] smc:    ib device syz0 port 1 has no pnetid
[  248.444417][ T5989] lo speed is unknown, defaulting to 1000
[  248.466786][ T5959] lo speed is unknown, defaulting to 1000
[  248.477057][T12293] lo speed is unknown, defaulting to 1000
[  248.648468][T12371] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1403'.
[  248.662032][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8ec00: rx timeout, send abort
[  248.691909][T12371] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1403'.
[  248.960100][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1405'.
[  249.170352][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ac8ec00: abort rx timeout. Force session deactivation
[  249.450839][T12293] lo speed is unknown, defaulting to 1000
[  249.450878][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444800: rx timeout, send abort
[  249.951041][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806421b400: rx timeout, send abort
[  249.964954][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444800: abort rx timeout. Force session deactivation
[  250.000469][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806421b400: connection exists (fe ff). last cmd: 20
[  250.038739][T12372] lo speed is unknown, defaulting to 1000
[  250.062676][T12293] lo speed is unknown, defaulting to 1000
[  250.250428][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444400: rx timeout, send abort
[  250.528104][T12387] lo speed is unknown, defaulting to 1000
[  250.603597][T12372] lo speed is unknown, defaulting to 1000
[  250.758759][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444400: abort rx timeout. Force session deactivation
[  251.031266][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444000: rx timeout, send abort
[  251.049685][T12389] lo speed is unknown, defaulting to 1000
[  251.167410][T12387] lo speed is unknown, defaulting to 1000
[  251.531417][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802913dc00: rx timeout, send abort
[  251.539911][    C0] vcan0: j1939_tp_rxtimer: 0xffff888053444000: abort rx timeout. Force session deactivation
[  251.562492][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802913dc00: connection exists (fe ff). last cmd: 20
[  251.792744][T12293] lo speed is unknown, defaulting to 1000
[  251.812314][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637c00: rx timeout, send abort
[  252.320664][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637c00: abort rx timeout. Force session deactivation
[  252.373309][T12389] lo speed is unknown, defaulting to 1000
[  252.594101][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637800: rx timeout, send abort
[  252.822473][T12464] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1413'.
[  252.903308][T12293] lo speed is unknown, defaulting to 1000
[  253.003662][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1414'.
[  253.042450][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'.
[  253.094291][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880564d7000: rx timeout, send abort
[  253.102723][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637800: abort rx timeout. Force session deactivation
[  253.107024][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'.
[  253.124257][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880564d7000: connection exists (fe ff). last cmd: 20
[  253.377228][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637400: rx timeout, send abort
[  253.885532][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637400: abort rx timeout. Force session deactivation
[  254.155924][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637000: rx timeout, send abort
[  254.656047][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806b513000: rx timeout, send abort
[  254.664514][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d637000: abort rx timeout. Force session deactivation
[  254.688949][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88806b513000: connection exists (fe ff). last cmd: 20
[  254.938936][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d636c00: rx timeout, send abort
[  255.447273][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d636c00: abort rx timeout. Force session deactivation
[  255.732693][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d636800: rx timeout, send abort
[  255.860182][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  256.232842][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055b3d000: rx timeout, send abort
[  256.241238][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d636800: abort rx timeout. Force session deactivation
[  256.333461][T12293] lo speed is unknown, defaulting to 1000
[  256.507842][T12500] syzkaller0: entered promiscuous mode
[  256.535522][T12500] syzkaller0: entered allmulticast mode
[  256.741161][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055b3d000: abort rx timeout. Force session deactivation
[  257.011423][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1423'.
[  258.077145][T12557] validate_nla: 62 callbacks suppressed
[  258.077166][T12557] netlink: 'syz.4.1429': attribute type 2 has an invalid length.
[  258.406686][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  258.465924][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1432'.
[  258.684285][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1436'.
[  258.711439][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'.
[  258.833352][T12577] syz_tun (unregistering): left promiscuous mode
[  258.872739][T12583] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  258.913946][T12592] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  258.934064][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1438'.
[  259.205874][  T150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.275809][T12616] netlink: 'syz.5.1441': attribute type 1 has an invalid length.
[  259.541204][T12616] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.643790][  T150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.762809][  T150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.888931][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'.
[  259.908510][T12652] xt_l2tp: v2 sid > 0xffff: 4294967294
[  259.925765][T12640] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  260.072464][  T150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.200871][T12659] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1449'.
[  260.239344][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'.
[  260.405532][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'.
[  260.481759][  T150] bridge_slave_1: left allmulticast mode
[  260.499574][  T150] bridge_slave_1: left promiscuous mode
[  260.512458][  T150] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.611313][  T150] bridge_slave_0: left allmulticast mode
[  260.653702][  T150] bridge_slave_0: left promiscuous mode
[  260.677815][  T150] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.689099][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1455'.
[  260.919992][T12706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1457'.
[  261.448754][  T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.461679][  T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.472542][  T150] bond0 (unregistering): Released all slaves
[  261.488058][  T150] team0: Port device macvlan3 removed
[  261.500911][  T150] bond1 (unregistering): Released all slaves
[  261.520382][  T150] team0: Port device macvlan4 removed
[  261.535148][  T150] bond2 (unregistering): Released all slaves
[  261.563221][  T150] team0: Port device macvlan5 removed
[  261.573763][  T150] bond3 (unregistering): Released all slaves
[  261.589705][  T150] bond4 (unregistering): Released all slaves
[  261.604446][  T150] bond5 (unregistering): Released all slaves
[  261.621367][  T150] bond6 (unregistering): Released all slaves
[  261.648069][  T150] bond7 (unregistering): Released all slaves
[  261.665640][  T150] team0: Port device macvlan7 removed
[  261.675832][  T150] bond8 (unregistering): Released all slaves
[  261.831380][T12664] lo speed is unknown, defaulting to 1000
[  261.855289][T12664] lo speed is unknown, defaulting to 1000
[  261.879363][  T150] tipc: Disabling bearer <udp:syz2>
[  261.889844][  T150] tipc: Left network mode
[  262.202197][T12721] bond2: option tlb_dynamic_lb: invalid value (109)
[  262.239524][T12721] bond2 (unregistering): Released all slaves
[  262.388211][T12732] netlink: 'syz.1.1463': attribute type 13 has an invalid length.
[  262.396347][T12732] netlink: 'syz.1.1463': attribute type 17 has an invalid length.
[  262.602271][T12732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.628731][T12739] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  263.860803][T12790] __nla_validate_parse: 3 callbacks suppressed
[  263.860825][T12790] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1475'.
[  264.277062][T12807] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.1477'.
[  264.352389][T12799] erspan1: entered promiscuous mode
[  264.358018][T12799] erspan1: entered allmulticast mode
[  264.363884][T12806] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  265.398577][  T150] hsr_slave_0: left promiscuous mode
[  265.405145][  T150] hsr_slave_1: left promiscuous mode
[  265.413521][  T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.421311][  T150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.475049][  T150] veth1_vlan: left allmulticast mode
[  265.485656][  T150] veth1_macvtap: left promiscuous mode
[  265.503850][  T150] veth0_macvtap: left promiscuous mode
[  265.509821][  T150] veth1_vlan: left promiscuous mode
[  265.515200][  T150] veth0_vlan: left promiscuous mode
[  265.592303][T12826] openvswitch: netlink: IP tunnel dst address not specified
[  265.816258][  T150] team0 (unregistering): Port device team_slave_1 removed
[  265.840065][  T150] team0 (unregistering): Port device team_slave_0 removed
[  266.272101][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'.
[  266.385653][T12850] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1486'.
[  266.403324][T12834] 8021q: adding VLAN 0 to HW filter on device bond16
[  266.430521][T12850] netlink: Unknown conntrack attr (0)
[  266.462184][T12843] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  266.472443][T12843] macvlan10: entered allmulticast mode
[  266.478438][T12843] bond16: entered allmulticast mode
[  266.485808][T12843] team0: Port device macvlan10 added
[  266.830590][T12866] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  266.858705][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1493'.
[  266.900459][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'.
[  267.021981][  T150] IPVS: stop unused estimator thread 0...
[  267.382097][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'.
[  267.422559][T12895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1497'.
[  267.495843][T12895] geneve4: entered promiscuous mode
[  267.502248][T12897] netlink: 'syz.3.1498': attribute type 13 has an invalid length.
[  267.504151][T12895] geneve4: entered allmulticast mode
[  267.559562][  T150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.588273][  T150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.665962][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1500'.
[  267.750054][  T150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.794582][T12905] 8021q: adding VLAN 0 to HW filter on device bond2
[  267.819613][T12910] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.829603][T12910] team0: Port device macvlan2 added
[  267.838227][  T150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.096826][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  268.411699][T12906] lo speed is unknown, defaulting to 1000
[  268.423973][T12906] lo speed is unknown, defaulting to 1000
[  268.550062][T12939] netlink: 'syz.2.1508': attribute type 1 has an invalid length.
[  268.725070][T12946] FAULT_INJECTION: forcing a failure.
[  268.725070][T12946] name failslab, interval 1, probability 0, space 0, times 0
[  268.738077][T12946] CPU: 1 UID: 0 PID: 12946 Comm: syz.1.1510 Not tainted syzkaller #0 PREEMPT(full) 
[  268.738106][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  268.738137][T12946] Call Trace:
[  268.738145][T12946]  <TASK>
[  268.738154][T12946]  dump_stack_lvl+0xe8/0x150
[  268.738191][T12946]  should_fail_ex+0x412/0x560
[  268.738223][T12946]  should_failslab+0xa8/0x100
[  268.738252][T12946]  __kmalloc_cache_noprof+0x88/0x660
[  268.738275][T12946]  ? __pfx_llc_sap_find+0x10/0x10
[  268.738307][T12946]  ? llc_sap_open+0xe1/0x3b0
[  268.738343][T12946]  llc_sap_open+0xe1/0x3b0
[  268.738380][T12946]  llc_ui_autobind+0x217/0x530
[  268.738410][T12946]  ? __local_bh_enable_ip+0xd0/0x130
[  268.738443][T12946]  llc_ui_sendmsg+0x1ff/0xea0
[  268.738487][T12946]  ? __pfx_aa_sk_perm+0x10/0x10
[  268.738510][T12946]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  268.738542][T12946]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  268.738572][T12946]  ? aa_sock_msg_perm+0xf1/0x1b0
[  268.738599][T12946]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.738630][T12946]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  268.738659][T12946]  ____sys_sendmsg+0xa68/0xad0
[  268.738702][T12946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.738745][T12946]  ? import_iovec+0x73/0xa0
[  268.738780][T12946]  ___sys_sendmsg+0x2a5/0x360
[  268.738818][T12946]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.738857][T12946]  ? kstrtouint+0x6e/0xe0
[  268.738911][T12946]  ? __fget_files+0x2a/0x420
[  268.738940][T12946]  ? __fget_files+0x3a0/0x420
[  268.738983][T12946]  __sys_sendmmsg+0x27c/0x4e0
[  268.739021][T12946]  ? __pfx___sys_sendmmsg+0x10/0x10
[  268.739060][T12946]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  268.739112][T12946]  ? ksys_write+0x242/0x270
[  268.739137][T12946]  ? __pfx_ksys_write+0x10/0x10
[  268.739166][T12946]  __x64_sys_sendmmsg+0xa0/0xc0
[  268.739201][T12946]  do_syscall_64+0x14d/0xf80
[  268.739220][T12946]  ? trace_irq_disable+0x3b/0x150
[  268.739251][T12946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.739272][T12946]  ? clear_bhb_loop+0x40/0x90
[  268.739299][T12946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.739321][T12946] RIP: 0033:0x7f8148f9c799
[  268.739343][T12946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.739362][T12946] RSP: 002b:00007f8149e16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  268.739385][T12946] RAX: ffffffffffffffda RBX: 00007f8149215fa0 RCX: 00007f8148f9c799
[  268.739401][T12946] RDX: 1e1730a30afb6559 RSI: 0000200000000c40 RDI: 0000000000000006
[  268.739416][T12946] RBP: 00007f8149e16090 R08: 0000000000000000 R09: 0000000000000000
[  268.739429][T12946] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001
[  268.739442][T12946] R13: 00007f8149216038 R14: 00007f8149215fa0 R15: 00007ffd05a29e78
[  268.739477][T12946]  </TASK>
[  269.054878][T12951] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  269.066092][T12951] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  269.088197][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1508'.
[  269.438439][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'.
[  269.461894][T12939] bond14: (slave bridge3): Enslaving as an active interface with a down link
[  269.568604][T12964] 8021q: adding VLAN 0 to HW filter on device bond17
[  269.615301][T12965] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  269.652256][T12965] macvlan11: entered allmulticast mode
[  269.660536][T12965] bond17: entered allmulticast mode
[  269.667346][T12965] team0: Port device macvlan11 added
[  269.684422][T12939] macvlan3: entered promiscuous mode
[  269.690220][T12939] macvlan3: entered allmulticast mode
[  269.736379][T12939] bond14: entered promiscuous mode
[  269.745374][T12939] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  269.770061][T12939] bond14: left promiscuous mode
[  269.823794][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'.
[  269.862762][T12979] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1516'.
[  269.914341][T12976] bond18: entered promiscuous mode
[  269.920902][T12976] 8021q: adding VLAN 0 to HW filter on device bond18
[  270.122570][T12980] 8021q: adding VLAN 0 to HW filter on device bond19
[  270.149955][T12980] bond19: entered promiscuous mode
[  270.179753][T12980] bond18: (slave bond19): Enslaving as an active interface with an up link
[  270.704219][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1519'.
[  271.051308][T13011] IPVS: length: 163 != 8
[  271.072059][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'.
[  271.096910][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1521'.
[  271.137167][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'.
[  271.207714][T13019] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  271.257134][T13019] syzkaller1: entered promiscuous mode
[  271.262669][T13019] syzkaller1: entered allmulticast mode
[  271.349153][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1525'.
[  271.441848][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'.
[  271.742852][T13034] 8021q: adding VLAN 0 to HW filter on device bond20
[  271.844987][T13036] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  271.884555][T13036] macvlan12: entered allmulticast mode
[  271.911548][T13036] bond20: entered allmulticast mode
[  271.928103][T13036] team0: Port device macvlan12 added
[  272.756090][T13098] netlink: 'syz.3.1542': attribute type 29 has an invalid length.
[  272.784653][T13098] netlink: 'syz.3.1542': attribute type 29 has an invalid length.
[  272.955296][T13106] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  273.261163][T13122] xt_TCPMSS: Only works on TCP SYN packets
[  273.527816][T13130] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003
[  273.539909][T13132] netlink: 'syz.4.1549': attribute type 1 has an invalid length.
[  273.555645][T13130] vlan2: entered promiscuous mode
[  273.576587][T13130] veth0_to_team: entered promiscuous mode
[  273.582560][T13130] vlan2: entered allmulticast mode
[  273.601840][T13130] veth0_to_team: entered allmulticast mode
[  273.721879][T13132] 8021q: adding VLAN 0 to HW filter on device bond21
[  273.853618][T13138] bond21: (slave veth9): Enslaving as an active interface with a down link
[  273.870705][T13143] bond21: (slave dummy0): making interface the new active one
[  273.887734][T13143] dummy0: entered promiscuous mode
[  273.899728][T13143] bond21: (slave dummy0): Enslaving as an active interface with an up link
[  273.942886][T13149] bond21: (slave dummy0): Releasing active interface
[  273.953590][T13149] dummy0 (unregistering): left promiscuous mode
[  274.534453][T13142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.941687][T13199] lo: Caught tx_queue_len zero misconfig
[  275.027542][T13194] __nla_validate_parse: 94 callbacks suppressed
[  275.027565][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1563'.
[  275.107056][T13194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.135159][T13223] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  275.161545][T13233] netlink: 'syz.3.1570': attribute type 8 has an invalid length.
[  275.684709][T13254] sctp: [Deprecated]: syz.3.1574 (pid 13254) Use of int in max_burst socket option.
[  275.684709][T13254] Use struct sctp_assoc_value instead
[  275.734467][T13226] lo speed is unknown, defaulting to 1000
[  275.742510][T13226] lo speed is unknown, defaulting to 1000
[  275.757663][T13255] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  276.019939][T13265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1577'.
[  276.072689][T13268] 
: renamed from bond_slave_0
[  276.113784][T13268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1578'.
[  276.373335][T13276] bond21: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  276.420383][T13276] bond21 (unregistering): Released all slaves
[  276.579600][T13284] netlink: 'syz.1.1583': attribute type 10 has an invalid length.
[  276.596746][T13284] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1583'.
[  277.085060][T13305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1589'.
[  277.088137][T13306] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1590'.
[  277.166276][T13305] netlink: 'syz.4.1589': attribute type 5 has an invalid length.
[  277.277163][ T5989] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  277.455145][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'.
[  277.479789][ T5989] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  277.722065][T13322] delete_channel: no stack
[  277.807165][T13322] delete_channel: no stack
[  277.811849][T13322] delete_channel: no stack
[  277.842595][T13322] delete_channel: no stack
[  277.851026][T13322] delete_channel: no stack
[  277.856454][T13322] delete_channel: no stack
[  277.867164][T13322] delete_channel: no stack
[  277.872341][T13322] delete_channel: no stack
[  277.899719][T13322] delete_channel: no stack
[  277.904400][T13322] delete_channel: no stack
[  277.936814][T13322] delete_channel: no stack
[  277.950009][T13322] delete_channel: no stack
[  277.954702][T13322] delete_channel: no stack
[  278.017723][T13322] delete_channel: no stack
[  278.022414][T13322] delete_channel: no stack
[  278.039138][T13322] delete_channel: no stack
[  278.046889][T13322] delete_channel: no stack
[  278.051624][T13322] delete_channel: no stack
[  278.056322][T13322] delete_channel: no stack
[  278.073912][T13322] delete_channel: no stack
[  278.090264][T13322] delete_channel: no stack
[  278.102843][T13322] delete_channel: no stack
[  278.118599][T13322] delete_channel: no stack
[  278.132897][T13322] delete_channel: no stack
[  278.142996][T13322] delete_channel: no stack
[  278.170633][T13322] delete_channel: no stack
[  278.183318][T13322] delete_channel: no stack
[  278.193476][T13322] delete_channel: no stack
[  278.204183][T13322] delete_channel: no stack
[  278.212370][T13322] delete_channel: no stack
[  278.220914][T13322] delete_channel: no stack
[  278.226454][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'.
[  278.242066][T13322] delete_channel: no stack
[  278.247204][T13322] delete_channel: no stack
[  278.251977][T13361] netlink: 'syz.3.1604': attribute type 1 has an invalid length.
[  278.272351][T13322] delete_channel: no stack
[  278.281609][T13322] delete_channel: no stack
[  278.286860][T13322] delete_channel: no stack
[  278.291612][T13322] delete_channel: no stack
[  278.296352][T13322] delete_channel: no stack
[  278.301119][T13322] delete_channel: no stack
[  278.305877][T13322] delete_channel: no stack
[  278.310950][T13322] delete_channel: no stack
[  278.315583][T13322] delete_channel: no stack
[  278.321030][T13322] delete_channel: no stack
[  278.325743][T13322] delete_channel: no stack
[  278.331769][T13322] delete_channel: no stack
[  278.333910][T13361] netlink: 'syz.3.1604': attribute type 1 has an invalid length.
[  278.346882][T13361] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1604'.
[  278.416988][T13361] netlink: 534 bytes leftover after parsing attributes in process `syz.3.1604'.
[  278.457075][T13322] delete_channel: no stack
[  278.466797][T13322] delete_channel: no stack
[  278.471617][T13322] delete_channel: no stack
[  278.499535][T13322] delete_channel: no stack
[  278.504234][T13322] delete_channel: no stack
[  278.513884][T13322] delete_channel: no stack
[  278.549652][T13322] delete_channel: no stack
[  278.554337][T13322] delete_channel: no stack
[  278.620813][T13322] delete_channel: no stack
[  278.625486][T13322] delete_channel: no stack
[  278.644867][T13379] syzkaller1: entered promiscuous mode
[  278.666837][T13322] delete_channel: no stack
[  278.671417][T13379] syzkaller1: entered allmulticast mode
[  278.671920][T13322] delete_channel: no stack
[  278.713163][T13322] delete_channel: no stack
[  278.720680][T13322] delete_channel: no stack
[  278.750660][T13322] delete_channel: no stack
[  278.755366][T13322] delete_channel: no stack
[  278.773625][T13322] delete_channel: no stack
[  278.795808][T13322] delete_channel: no stack
[  278.807099][T13322] delete_channel: no stack
[  278.811781][T13322] delete_channel: no stack
[  279.165473][T13404] tipc: New replicast peer: 255.255.255.255
[  279.180496][T13404] tipc: Enabled bearer <udp:syz2>, priority 10
[  279.295354][T13373] lo speed is unknown, defaulting to 1000
[  279.308369][T13373] lo speed is unknown, defaulting to 1000
[  280.110075][T13453] x_tables: duplicate underflow at hook 4
[  280.166109][T13453] tipc: Enabling of bearer <eth:syzkaller0Ð> rejected, max 3 bearers permitted
[  280.396778][T13464] netlink: 'syz.3.1626': attribute type 11 has an invalid length.
[  281.176291][T13490] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  281.291944][T13490] xt_hashlimit: size too large, truncated to 1048576
[  281.298865][T13490] xt_hashlimit: max too large, truncated to 1048576
[  281.315648][T13490] xt_CT: You must specify a L4 protocol and not use inversions on it
[  281.600914][T13514] __nla_validate_parse: 2 callbacks suppressed
[  281.600933][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'.
[  281.889695][T13530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1642'.
[  281.911066][T13530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1642'.
[  281.933936][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'.
[  282.012654][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1641'.
[  282.050536][   T51] block nbd2: Receive control failed (result -32)
[  282.110949][T13466] lo speed is unknown, defaulting to 1000
[  282.123675][T13466] lo speed is unknown, defaulting to 1000
[  282.238878][T13541] : entered promiscuous mode
[  282.352410][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'.
[  282.507883][T10509] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  282.590491][T13555] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1651'.
[  282.620449][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'.
[  282.766146][  T150] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  283.177489][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'.
[  283.226356][T13592] netlink: 'syz.2.1660': attribute type 1 has an invalid length.
[  283.529757][T10502] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  283.564810][T13595] bond15: entered promiscuous mode
[  283.600308][T13595] bond15: entered allmulticast mode
[  283.631316][T13595] 8021q: adding VLAN 0 to HW filter on device bond15
[  283.712398][T13602] bridge4: entered promiscuous mode
[  283.728030][T13602] bridge4: entered allmulticast mode
[  283.743871][T13602] bond15: (slave bridge4): Enslaving as a backup interface with an up link
[  283.778836][   T58] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  283.809499][T13606] bridge5: entered promiscuous mode
[  283.825274][T13606] bridge5: entered allmulticast mode
[  283.847487][T13606] bond15: (slave bridge5): Enslaving as a backup interface with a down link
[  283.891935][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  283.906632][T10443] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  283.907451][   T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  284.215681][T13587] lo speed is unknown, defaulting to 1000
[  284.240283][T13587] lo speed is unknown, defaulting to 1000
[  284.447212][ T5989] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  285.258196][T13682] syzkaller0: entered allmulticast mode
[  285.687289][T13693] netlink: 'syz.1.1677': attribute type 1 has an invalid length.
[  285.773003][T13697] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1678'.
[  286.212538][T13712] netlink: 'syz.5.1680': attribute type 1 has an invalid length.
[  286.244145][T13712] netlink: 'syz.5.1680': attribute type 1 has an invalid length.
[  286.351391][T13716] 8021q: adding VLAN 0 to HW filter on device bond15
[  286.399878][T13719] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  286.458759][T13719] team0: Port device macvlan11 added
[  286.891828][T13745] __nla_validate_parse: 1 callbacks suppressed
[  286.891851][T13745] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1685'.
[  286.941183][T13742] Bluetooth: MGMT ver 1.23
[  286.966335][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'.
[  287.095968][T13750] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1686'.
[  287.329939][T13758] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1687'.
[  287.337424][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1688'.
[  287.358993][T13758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.375245][T13764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1691'.
[  287.401569][T13758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.443132][T13758] bond0 (unregistering): Released all slaves
[  287.501108][T13761] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.530339][T13757] bond3: (slave batadv2): Opening slave failed
[  287.550739][T13764] netlink: 'syz.3.1691': attribute type 11 has an invalid length.
[  287.561364][T13764] netlink: 'syz.3.1691': attribute type 23 has an invalid length.
[  287.569957][T13764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1691'.
[  287.687352][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  288.514378][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'.
[  289.097684][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'.
[  289.107231][T13840] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1703'.
[  289.362477][T13847] 0ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP)
[  289.463236][T13847] 0ªî{X¹¦: entered allmulticast mode
[  289.475096][T13847] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  289.939599][T13885] hsr0: entered promiscuous mode
[  289.953091][T13885] macvlan12: entered allmulticast mode
[  289.976374][T13885] hsr0: entered allmulticast mode
[  290.000707][T13885] ip6gretap0: entered allmulticast mode
[  290.244282][T13897] netlink: 'syz.1.1713': attribute type 2 has an invalid length.
[  290.541278][T13848] lo speed is unknown, defaulting to 1000
[  290.567969][T13848] lo speed is unknown, defaulting to 1000
[  290.877814][T13888] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  290.899373][T13888] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  290.980477][T13888] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  291.000980][T13888] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  291.032420][T13888] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  291.052021][T13888] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  291.101654][T13888] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  291.134704][T13888] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  291.210479][T13888] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  291.235234][T13888] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  291.363114][T13946] 8021q: adding VLAN 0 to HW filter on device bond4
[  291.377597][T13949] FAULT_INJECTION: forcing a failure.
[  291.377597][T13949] name failslab, interval 1, probability 0, space 0, times 0
[  291.392390][T13949] CPU: 0 UID: 0 PID: 13949 Comm: syz.5.1725 Not tainted syzkaller #0 PREEMPT(full) 
[  291.392420][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  291.392435][T13949] Call Trace:
[  291.392443][T13949]  <TASK>
[  291.392453][T13949]  dump_stack_lvl+0xe8/0x150
[  291.392489][T13949]  should_fail_ex+0x412/0x560
[  291.392533][T13949]  should_failslab+0xa8/0x100
[  291.392558][T13949]  ? __kernfs_new_node+0xe9/0x8e0
[  291.392588][T13949]  kmem_cache_alloc_noprof+0x87/0x650
[  291.392632][T13949]  __kernfs_new_node+0xe9/0x8e0
[  291.392676][T13949]  ? __pfx___kernfs_new_node+0x10/0x10
[  291.392706][T13949]  ? kernfs_root+0x1c/0x230
[  291.392741][T13949]  ? kernfs_root+0x1c/0x230
[  291.392768][T13949]  ? kernfs_root+0x1c/0x230
[  291.392793][T13949]  ? kernfs_root+0x1c/0x230
[  291.392827][T13949]  kernfs_new_node+0x102/0x210
[  291.392862][T13949]  __kernfs_create_file+0x4b/0x2e0
[  291.392888][T13949]  sysfs_add_file_mode_ns+0x238/0x300
[  291.392922][T13949]  internal_create_group+0x673/0x1180
[  291.392968][T13949]  ? __pfx_internal_create_group+0x10/0x10
[  291.393002][T13949]  ? up_write+0x1ab/0x410
[  291.393027][T13949]  sysfs_create_groups+0x59/0x120
[  291.393059][T13949]  device_add_attrs+0xdd/0x5b0
[  291.393095][T13949]  ? __pfx_device_add_attrs+0x10/0x10
[  291.393133][T13949]  ? device_add_class_symlinks+0x21f/0x240
[  291.393169][T13949]  device_add+0x496/0xb70
[  291.393199][T13949]  ? device_initialize+0x24b/0x440
[  291.393232][T13949]  netdev_register_kobject+0x178/0x310
[  291.393260][T13949]  register_netdevice+0x12c0/0x1cf0
[  291.393298][T13949]  ? __pfx_register_netdevice+0x10/0x10
[  291.393337][T13949]  macvlan_common_newlink+0x127c/0x19e0
[  291.393366][T13949]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  291.393400][T13949]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  291.393434][T13949]  ? __pfx_macvlan_newlink+0x10/0x10
[  291.393468][T13949]  rtnl_newlink_create+0x329/0xb70
[  291.393504][T13949]  ? __mutex_lock+0x5ac/0x1300
[  291.393548][T13949]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  291.393584][T13949]  ? __pfx___mutex_lock+0x10/0x10
[  291.393617][T13949]  ? ns_capable+0x89/0xe0
[  291.393655][T13949]  rtnl_newlink+0x1666/0x1be0
[  291.393701][T13949]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.393740][T13949]  ? __lock_acquire+0x6b5/0x2cf0
[  291.393776][T13949]  ? __lock_acquire+0x6b5/0x2cf0
[  291.393806][T13949]  ? __lock_acquire+0x6b5/0x2cf0
[  291.393847][T13949]  ? unwind_next_frame+0xa5/0x23c0
[  291.393905][T13949]  ? __lock_acquire+0x6b5/0x2cf0
[  291.393936][T13949]  ? is_bpf_text_address+0x26/0x2b0
[  291.393963][T13949]  ? kernel_text_address+0xa5/0xe0
[  291.394017][T13949]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.394045][T13949]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  291.394076][T13949]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  291.394103][T13949]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.394135][T13949]  ? __lock_acquire+0x6b5/0x2cf0
[  291.394174][T13949]  netlink_rcv_skb+0x232/0x4b0
[  291.394203][T13949]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.394234][T13949]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.394274][T13949]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.394310][T13949]  netlink_unicast+0x80f/0x9b0
[  291.394344][T13949]  ? __pfx_netlink_unicast+0x10/0x10
[  291.394371][T13949]  ? netlink_sendmsg+0x650/0xb40
[  291.394397][T13949]  ? skb_put+0x11b/0x210
[  291.394431][T13949]  netlink_sendmsg+0x813/0xb40
[  291.394469][T13949]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.394501][T13949]  ? aa_sock_msg_perm+0xf1/0x1b0
[  291.394529][T13949]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  291.394554][T13949]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.394581][T13949]  ____sys_sendmsg+0xa68/0xad0
[  291.394624][T13949]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.394673][T13949]  ? import_iovec+0x73/0xa0
[  291.394707][T13949]  ___sys_sendmsg+0x2a5/0x360
[  291.394746][T13949]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.394819][T13949]  ? __fget_files+0x2a/0x420
[  291.394848][T13949]  ? __fget_files+0x3a0/0x420
[  291.394890][T13949]  __x64_sys_sendmsg+0x1bd/0x2a0
[  291.394926][T13949]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  291.394970][T13949]  ? __pfx_ksys_write+0x10/0x10
[  291.395005][T13949]  do_syscall_64+0x14d/0xf80
[  291.395031][T13949]  ? trace_irq_disable+0x3b/0x150
[  291.395061][T13949]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.395083][T13949]  ? clear_bhb_loop+0x40/0x90
[  291.395110][T13949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.395137][T13949] RIP: 0033:0x7fc40e39c799
[  291.395158][T13949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.395176][T13949] RSP: 002b:00007fc40f1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.395201][T13949] RAX: ffffffffffffffda RBX: 00007fc40e616090 RCX: 00007fc40e39c799
[  291.395217][T13949] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  291.395231][T13949] RBP: 00007fc40f1e3090 R08: 0000000000000000 R09: 0000000000000000
[  291.395244][T13949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  291.395256][T13949] R13: 00007fc40e616128 R14: 00007fc40e616090 R15: 00007fff28752d68
[  291.395292][T13949]  </TASK>
[  291.888167][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  292.011781][T13957] __nla_validate_parse: 9 callbacks suppressed
[  292.011802][T13957] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1727'.
[  292.200011][T13955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.422227][T13965] bond16: left allmulticast mode
[  292.481598][T13965] bond17: left allmulticast mode
[  292.586216][T13965] bond20: left allmulticast mode
[  292.620840][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1731'.
[  293.250934][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1739'.
[  293.283692][T13998] vlan0: entered allmulticast mode
[  293.306704][T13998] veth0_vlan: entered allmulticast mode
[  293.351383][T13999] ip6gre1: entered allmulticast mode
[  293.418878][T14010] rdma_rxe: rxe_newlink: failed to add wg1
[  293.437326][T14012] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  293.604962][T14020] bond16: Unable to set up delay as MII monitoring is disabled
[  293.625068][T14020] bond16 (unregistering): Released all slaves
[  293.807484][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1748'.
[  293.868827][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'.
[  293.908635][T14041] bond21: entered promiscuous mode
[  293.914387][T14041] 8021q: adding VLAN 0 to HW filter on device bond21
[  293.969283][T14041] 8021q: adding VLAN 0 to HW filter on device bond22
[  293.980244][T14041] bond22: entered promiscuous mode
[  293.987329][T14041] bond21: (slave bond22): Enslaving as an active interface with an up link
[  294.175079][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'.
[  294.203614][T14062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1753'.
[  294.402594][T14074] netlink: 'syz.1.1756': attribute type 6 has an invalid length.
[  294.434588][T14078] netlink: 'syz.2.1758': attribute type 4 has an invalid length.
[  294.453166][T14078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1758'.
[  294.698143][T14095] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1764'.
[  294.721362][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'.
[  294.743026][T14094] IPv6: Can't replace route, no match found
[  294.745745][T14100] netlink: 'syz.2.1762': attribute type 21 has an invalid length.
[  295.526685][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  295.697389][T14164] syzkaller0: entered promiscuous mode
[  295.713597][T14164] syzkaller0: entered allmulticast mode
[  295.846107][T14169] 8021q: adding VLAN 0 to HW filter on device bond23
[  295.868917][T14169] FAULT_INJECTION: forcing a failure.
[  295.868917][T14169] name failslab, interval 1, probability 0, space 0, times 0
[  295.920475][T14169] CPU: 0 UID: 0 PID: 14169 Comm: syz.3.1783 Not tainted syzkaller #0 PREEMPT(full) 
[  295.920505][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.920518][T14169] Call Trace:
[  295.920527][T14169]  <TASK>
[  295.920537][T14169]  dump_stack_lvl+0xe8/0x150
[  295.920572][T14169]  should_fail_ex+0x412/0x560
[  295.920605][T14169]  should_failslab+0xa8/0x100
[  295.920631][T14169]  ? __kernfs_new_node+0xe9/0x8e0
[  295.920662][T14169]  kmem_cache_alloc_noprof+0x87/0x650
[  295.920706][T14169]  __kernfs_new_node+0xe9/0x8e0
[  295.920744][T14169]  ? __pfx___kernfs_new_node+0x10/0x10
[  295.920776][T14169]  ? kernfs_root+0x1c/0x230
[  295.920812][T14169]  ? kernfs_root+0x1c/0x230
[  295.920840][T14169]  ? kernfs_root+0x1c/0x230
[  295.920866][T14169]  ? kernfs_root+0x1c/0x230
[  295.920901][T14169]  kernfs_new_node+0x102/0x210
[  295.920938][T14169]  __kernfs_create_file+0x4b/0x2e0
[  295.920965][T14169]  sysfs_add_file_mode_ns+0x238/0x300
[  295.921001][T14169]  internal_create_group+0x673/0x1180
[  295.921049][T14169]  ? __pfx_internal_create_group+0x10/0x10
[  295.921084][T14169]  ? up_write+0x1ab/0x410
[  295.921109][T14169]  sysfs_create_groups+0x59/0x120
[  295.921141][T14169]  device_add_attrs+0xdd/0x5b0
[  295.921178][T14169]  ? __pfx_device_add_attrs+0x10/0x10
[  295.921217][T14169]  ? device_add_class_symlinks+0x21f/0x240
[  295.921254][T14169]  device_add+0x496/0xb70
[  295.921286][T14169]  ? device_initialize+0x24b/0x440
[  295.921322][T14169]  netdev_register_kobject+0x178/0x310
[  295.921351][T14169]  register_netdevice+0x12c0/0x1cf0
[  295.921391][T14169]  ? __pfx_register_netdevice+0x10/0x10
[  295.921441][T14169]  macvlan_common_newlink+0x127c/0x19e0
[  295.921470][T14169]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  295.921506][T14169]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  295.921540][T14169]  ? __pfx_macvlan_newlink+0x10/0x10
[  295.921574][T14169]  rtnl_newlink_create+0x329/0xb70
[  295.921605][T14169]  ? __pfx___nla_validate_parse+0x10/0x10
[  295.921647][T14169]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  295.921684][T14169]  ? __pfx___mutex_lock+0x10/0x10
[  295.921717][T14169]  ? ns_capable+0x89/0xe0
[  295.921749][T14169]  rtnl_newlink+0x1666/0x1be0
[  295.921795][T14169]  ? __pfx_rtnl_newlink+0x10/0x10
[  295.921834][T14169]  ? __lock_acquire+0x6b5/0x2cf0
[  295.921863][T14169]  ? __pfx___schedule+0x10/0x10
[  295.921898][T14169]  ? __lock_acquire+0x6b5/0x2cf0
[  295.921928][T14169]  ? __lock_acquire+0x6b5/0x2cf0
[  295.921963][T14169]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  295.921995][T14169]  ? lockdep_hardirqs_on+0x7a/0x110
[  295.922028][T14169]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  295.922060][T14169]  ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0
[  295.922109][T14169]  ? __lock_acquire+0x6b5/0x2cf0
[  295.922139][T14169]  ? is_bpf_text_address+0x26/0x2b0
[  295.922165][T14169]  ? kernel_text_address+0xa5/0xe0
[  295.922220][T14169]  ? __pfx_rtnl_newlink+0x10/0x10
[  295.922248][T14169]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  295.922281][T14169]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  295.922308][T14169]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  295.922340][T14169]  ? __lock_acquire+0x6b5/0x2cf0
[  295.922379][T14169]  netlink_rcv_skb+0x232/0x4b0
[  295.922416][T14169]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  295.922447][T14169]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  295.922486][T14169]  ? netlink_deliver_tap+0x2e/0x1b0
[  295.922529][T14169]  netlink_unicast+0x80f/0x9b0
[  295.922562][T14169]  ? __pfx_netlink_unicast+0x10/0x10
[  295.922588][T14169]  ? netlink_sendmsg+0x650/0xb40
[  295.922613][T14169]  ? skb_put+0x11b/0x210
[  295.922648][T14169]  netlink_sendmsg+0x813/0xb40
[  295.922686][T14169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.922718][T14169]  ? aa_sock_msg_perm+0xf1/0x1b0
[  295.922746][T14169]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.922773][T14169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.922800][T14169]  ____sys_sendmsg+0xa68/0xad0
[  295.922844][T14169]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.922887][T14169]  ? import_iovec+0x73/0xa0
[  295.922922][T14169]  ___sys_sendmsg+0x2a5/0x360
[  295.922960][T14169]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.923030][T14169]  ? __fget_files+0x2a/0x420
[  295.923059][T14169]  ? __fget_files+0x3a0/0x420
[  295.923098][T14169]  __x64_sys_sendmsg+0x1bd/0x2a0
[  295.923137][T14169]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.923181][T14169]  ? __pfx_ksys_write+0x10/0x10
[  295.923217][T14169]  do_syscall_64+0x14d/0xf80
[  295.923237][T14169]  ? trace_irq_disable+0x3b/0x150
[  295.923267][T14169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.923289][T14169]  ? clear_bhb_loop+0x40/0x90
[  295.923317][T14169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.923339][T14169] RIP: 0033:0x7f0ff779c799
[  295.923360][T14169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.923379][T14169] RSP: 002b:00007f0ff8586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.923402][T14169] RAX: ffffffffffffffda RBX: 00007f0ff7a15fa0 RCX: 00007f0ff779c799
[  295.923446][T14169] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  295.923459][T14169] RBP: 00007f0ff8586090 R08: 0000000000000000 R09: 0000000000000000
[  295.923472][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  295.923485][T14169] R13: 00007f0ff7a16038 R14: 00007f0ff7a15fa0 R15: 00007fffe3a232e8
[  295.923520][T14169]  </TASK>
[  296.733374][T14190] bond16: Removing last ns target with arp_interval on
[  296.769082][T14195] 8021q: adding VLAN 0 to HW filter on device bond24
[  296.787860][T14195] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  296.798063][T14195] macvlan13: entered allmulticast mode
[  296.803594][T14195] bond24: entered allmulticast mode
[  296.814057][T14195] team0: Port device macvlan13 added
[  297.419670][T14233] unsupported nlmsg_type 40
[  297.582608][T14233] tipc: Resetting bearer <eth:syzkaller0>
[  297.592012][T14244] __nla_validate_parse: 7 callbacks suppressed
[  297.592032][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'.
[  297.642657][T14233] tipc: Resetting bearer <eth:syzkaller0>
[  297.826860][T14244] 8021q: adding VLAN 0 to HW filter on device bond25
[  297.852072][T14248] FAULT_INJECTION: forcing a failure.
[  297.852072][T14248] name failslab, interval 1, probability 0, space 0, times 0
[  297.865687][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.3.1801 Not tainted syzkaller #0 PREEMPT(full) 
[  297.865718][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  297.865731][T14248] Call Trace:
[  297.865740][T14248]  <TASK>
[  297.865749][T14248]  dump_stack_lvl+0xe8/0x150
[  297.865785][T14248]  should_fail_ex+0x412/0x560
[  297.865817][T14248]  should_failslab+0xa8/0x100
[  297.865843][T14248]  ? __kernfs_new_node+0xe9/0x8e0
[  297.865874][T14248]  kmem_cache_alloc_noprof+0x87/0x650
[  297.865925][T14248]  __kernfs_new_node+0xe9/0x8e0
[  297.865963][T14248]  ? __pfx___kernfs_new_node+0x10/0x10
[  297.865995][T14248]  ? kernfs_root+0x1c/0x230
[  297.866036][T14248]  ? kernfs_root+0x1c/0x230
[  297.866065][T14248]  ? kernfs_root+0x1c/0x230
[  297.866092][T14248]  ? kernfs_root+0x1c/0x230
[  297.866127][T14248]  kernfs_new_node+0x102/0x210
[  297.866164][T14248]  __kernfs_create_file+0x4b/0x2e0
[  297.866190][T14248]  sysfs_add_file_mode_ns+0x238/0x300
[  297.866229][T14248]  internal_create_group+0x673/0x1180
[  297.866277][T14248]  ? __pfx_internal_create_group+0x10/0x10
[  297.866312][T14248]  ? up_write+0x1ab/0x410
[  297.866338][T14248]  sysfs_create_groups+0x59/0x120
[  297.866371][T14248]  device_add_attrs+0xdd/0x5b0
[  297.866409][T14248]  ? __pfx_device_add_attrs+0x10/0x10
[  297.866449][T14248]  ? device_add_class_symlinks+0x21f/0x240
[  297.866486][T14248]  device_add+0x496/0xb70
[  297.866517][T14248]  ? device_initialize+0x24b/0x440
[  297.866557][T14248]  netdev_register_kobject+0x178/0x310
[  297.866592][T14248]  register_netdevice+0x12c0/0x1cf0
[  297.866631][T14248]  ? __pfx_register_netdevice+0x10/0x10
[  297.866671][T14248]  macvlan_common_newlink+0x127c/0x19e0
[  297.866701][T14248]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  297.866733][T14248]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  297.866768][T14248]  ? __pfx_macvlan_newlink+0x10/0x10
[  297.866802][T14248]  rtnl_newlink_create+0x329/0xb70
[  297.866839][T14248]  ? __mutex_lock+0x5ac/0x1300
[  297.866867][T14248]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  297.866903][T14248]  ? __pfx___mutex_lock+0x10/0x10
[  297.866936][T14248]  ? ns_capable+0x89/0xe0
[  297.866969][T14248]  rtnl_newlink+0x1666/0x1be0
[  297.867015][T14248]  ? __pfx_rtnl_newlink+0x10/0x10
[  297.867054][T14248]  ? __lock_acquire+0x6b5/0x2cf0
[  297.867090][T14248]  ? __lock_acquire+0x6b5/0x2cf0
[  297.867119][T14248]  ? __lock_acquire+0x6b5/0x2cf0
[  297.867158][T14248]  ? unwind_next_frame+0xa5/0x23c0
[  297.867216][T14248]  ? __lock_acquire+0x6b5/0x2cf0
[  297.867247][T14248]  ? is_bpf_text_address+0x26/0x2b0
[  297.867274][T14248]  ? kernel_text_address+0xa5/0xe0
[  297.867328][T14248]  ? __pfx_rtnl_newlink+0x10/0x10
[  297.867356][T14248]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  297.867388][T14248]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  297.867415][T14248]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  297.867448][T14248]  ? __lock_acquire+0x6b5/0x2cf0
[  297.867486][T14248]  netlink_rcv_skb+0x232/0x4b0
[  297.867515][T14248]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  297.867545][T14248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  297.867592][T14248]  ? netlink_deliver_tap+0x2e/0x1b0
[  297.867629][T14248]  netlink_unicast+0x80f/0x9b0
[  297.867662][T14248]  ? __pfx_netlink_unicast+0x10/0x10
[  297.867690][T14248]  ? netlink_sendmsg+0x650/0xb40
[  297.867715][T14248]  ? skb_put+0x11b/0x210
[  297.867749][T14248]  netlink_sendmsg+0x813/0xb40
[  297.867788][T14248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  297.867820][T14248]  ? aa_sock_msg_perm+0xf1/0x1b0
[  297.867848][T14248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  297.867873][T14248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  297.867899][T14248]  ____sys_sendmsg+0xa68/0xad0
[  297.867941][T14248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  297.867982][T14248]  ? import_iovec+0x73/0xa0
[  297.868016][T14248]  ___sys_sendmsg+0x2a5/0x360
[  297.868055][T14248]  ? __pfx____sys_sendmsg+0x10/0x10
[  297.868129][T14248]  ? __fget_files+0x2a/0x420
[  297.868159][T14248]  ? __fget_files+0x3a0/0x420
[  297.868201][T14248]  __x64_sys_sendmsg+0x1bd/0x2a0
[  297.868238][T14248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  297.868282][T14248]  ? __pfx_ksys_write+0x10/0x10
[  297.868317][T14248]  do_syscall_64+0x14d/0xf80
[  297.868337][T14248]  ? trace_irq_disable+0x3b/0x150
[  297.868373][T14248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.868395][T14248]  ? clear_bhb_loop+0x40/0x90
[  297.868434][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.868454][T14248] RIP: 0033:0x7f0ff779c799
[  297.868492][T14248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.868511][T14248] RSP: 002b:00007f0ff59f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  297.868535][T14248] RAX: ffffffffffffffda RBX: 00007f0ff7a16090 RCX: 00007f0ff779c799
[  297.868551][T14248] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  297.868571][T14248] RBP: 00007f0ff59f6090 R08: 0000000000000000 R09: 0000000000000000
[  297.868584][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  297.868597][T14248] R13: 00007f0ff7a16128 R14: 00007f0ff7a16090 R15: 00007fffe3a232e8
[  297.868630][T14248]  </TASK>
[  298.732905][T14276] netlink: 'syz.5.1809': attribute type 1 has an invalid length.
[  298.766667][T14276] netlink: 'syz.5.1809': attribute type 4 has an invalid length.
[  298.774522][T14276] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1809'.
[  298.883898][T14283] xt_hashlimit: size too large, truncated to 1048576
[  298.959836][T14287] netlink: 'syz.3.1810': attribute type 1 has an invalid length.
[  299.093768][T14299] x_tables: duplicate underflow at hook 1
[  299.229187][T14295] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  299.501877][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'.
[  299.696346][T14325] netem: change failed
[  299.853766][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1819'.
[  299.884763][T14304] lo speed is unknown, defaulting to 1000
[  300.061026][T14304] lo speed is unknown, defaulting to 1000
[  300.214714][T14335] lo speed is unknown, defaulting to 1000
[  300.551015][T14361] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1826'.
[  300.560638][T14361] netlink: 2256 bytes leftover after parsing attributes in process `syz.2.1826'.
[  300.652318][T14335] lo speed is unknown, defaulting to 1000
[  301.180124][T14380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1829'.
[  301.879689][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1836'.
[  302.049515][T14410] 8021q: adding VLAN 0 to HW filter on device bond5
[  302.081535][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'.
[  302.106103][T14414] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  302.138302][T14414] team0: Port device macvlan3 added
[  302.358816][T14427] openvswitch: netlink: Flow key attr not present in new flow.
[  302.709093][T14434] netlink: 'syz.2.1842': attribute type 1 has an invalid length.
[  302.837681][T14434] bond16: entered promiscuous mode
[  302.862644][T14434] bond16: entered allmulticast mode
[  302.900246][T14434] 8021q: adding VLAN 0 to HW filter on device bond16
[  302.964441][T14448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1845'.
[  303.000818][T14440] erspan2: entered allmulticast mode
[  303.074297][T14440] bond16: (slave erspan2): making interface the new active one
[  303.120936][T14440] erspan2: entered promiscuous mode
[  303.151091][T14440] bond16: (slave erspan2): Enslaving as an active interface with an up link
[  303.646301][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1847'.
[  303.655452][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'.
[  303.788508][T14447] syzkaller1: entered promiscuous mode
[  303.794175][T14447] syzkaller1: entered allmulticast mode
[  303.978607][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'.
[  304.078626][T14483] 8021q: adding VLAN 0 to HW filter on device bond17
[  304.209891][T14485] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  304.238606][T14485] team0: Port device macvlan13 added
[  304.485002][T14506] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1854'.
[  305.387579][T14539] veth1: entered promiscuous mode
[  305.392717][T14539] veth1: entered allmulticast mode
[  305.547860][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'.
[  305.640972][T14555] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  305.728037][T14551] 8021q: adding VLAN 0 to HW filter on device bond27
[  306.217844][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'.
[  306.248440][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'.
[  306.644484][ T5989] IPVS: starting estimator thread 0...
[  306.651147][T14607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'.
[  306.766710][T14620] IPVS: using max 25 ests per chain, 60000 per kthread
[  307.065265][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'.
[  307.222242][T14605] lo speed is unknown, defaulting to 1000
[  307.317327][T14637] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.363834][T14638] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  307.373451][T14638] team0: Port device macvlan11 added
[  307.440608][T14605] lo speed is unknown, defaulting to 1000
[  307.725844][T14653] pim6reg: entered allmulticast mode
[  307.731657][T14653] pim6reg: left allmulticast mode
[  307.992299][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'.
[  308.199631][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'.
[  308.382344][T14692] netlink: 'syz.5.1889': attribute type 12 has an invalid length.
[  309.158902][T14723] syzkaller0: left promiscuous mode
[  309.175489][T14723] syzkaller0: left allmulticast mode
[  309.440721][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'.
[  309.616693][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  310.159595][T14759] netlink: 'syz.3.1904': attribute type 20 has an invalid length.
[  310.174688][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'.
[  310.232251][T10443] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.240974][T14759] netlink: 'syz.3.1904': attribute type 20 has an invalid length.
[  310.243137][T10443] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.279282][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'.
[  310.322341][T10443] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.346677][T10443] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.410832][T14766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1907'.
[  311.275217][T14820] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  311.722457][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  311.750955][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'.
[  311.768570][T14841] bond28: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  311.826380][T14841] bond28 (unregistering): Released all slaves
[  311.947175][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  311.955073][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'.
[  311.999010][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  312.056943][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'.
[  312.068839][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  312.110734][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'.
[  312.150608][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  312.276803][T14852] netlink: 'syz.2.1921': attribute type 10 has an invalid length.
[  312.302942][T14871] netlink: 'syz.1.1925': attribute type 13 has an invalid length.
[  312.424915][T14869] openvswitch: netlink: Invalid VLAN frame
[  312.480779][T14789] lo speed is unknown, defaulting to 1000
[  312.540571][T14789] lo speed is unknown, defaulting to 1000
[  312.705753][T14891] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  313.178338][T14919] __nla_validate_parse: 72 callbacks suppressed
[  313.178371][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'.
[  313.681291][T14953] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1942'.
[  313.797685][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'.
[  313.838899][T14960] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1943'.
[  313.854777][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'.
[  313.867404][T14792] lo speed is unknown, defaulting to 1000
[  313.914914][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'.
[  313.938514][T14792] lo speed is unknown, defaulting to 1000
[  313.956817][T14961] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1943'.
[  313.986713][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'.
[  314.023528][T14966] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1945'.
[  314.035062][T14966] validate_nla: 60 callbacks suppressed
[  314.035086][T14966] netlink: 'syz.1.1945': attribute type 2 has an invalid length.
[  314.624635][T14914] lo speed is unknown, defaulting to 1000
[  314.704212][T14914] lo speed is unknown, defaulting to 1000
[  315.056036][T14989] tunl0: Caught tx_queue_len zero misconfig
[  315.216107][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'.
[  315.726126][T15022] 8021q: adding VLAN 0 to HW filter on device bond23
[  315.887986][T15028] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  315.899363][T15028] team0: Port device macvlan12 added
[  315.991282][T15037] netlink: 'syz.4.1959': attribute type 10 has an invalid length.
[  316.099521][T15037] team0: Port device geneve0 added
[  316.186530][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.195608][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.205093][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.250403][T15041] netlink: 'syz.4.1959': attribute type 10 has an invalid length.
[  316.343978][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.368173][   T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.382527][   T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.394061][   T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.403589][   T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.381704][T15083] x_tables: duplicate underflow at hook 3
[  317.415913][T15083] netlink: 'syz.4.1969': attribute type 1 has an invalid length.
[  317.751213][T15110] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  318.386909][T15148] __nla_validate_parse: 18 callbacks suppressed
[  318.386932][T15148] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1987'.
[  318.433612][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1987'.
[  318.486966][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'.
[  318.525945][T15152] tipc: Resetting bearer <eth:syzkaller0>
[  318.647522][T10443] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  318.661617][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'.
[  318.677530][T10443] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  318.698136][T10443] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  318.731246][T10443] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  318.766307][T15167] ip6_vti0: entered promiscuous mode
[  318.786568][T15167] ip6_vti0: entered allmulticast mode
[  319.400750][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1995'.
[  319.440792][T15197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1995'.
[  319.586033][T15143] lo speed is unknown, defaulting to 1000
[  319.624118][T15143] lo speed is unknown, defaulting to 1000
[  319.805459][T15219] netlink: 'syz.4.2001': attribute type 11 has an invalid length.
[  319.871691][T15222] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  319.893877][T15222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.502998][T15248] netlink: 'syz.4.2008': attribute type 61 has an invalid length.
[  320.564830][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'.
[  320.573891][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'.
[  320.718996][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  320.723951][T15227] lo speed is unknown, defaulting to 1000
[  320.728571][T15258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2011'.
[  320.741585][T15227] lo speed is unknown, defaulting to 1000
[  321.409579][T15291] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000
[  321.510388][T15294] syz.4.2020 (15294) used obsolete PPPIOCDETACH ioctl
[  321.833932][T15307] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  322.422563][T15325] 8021q: adding VLAN 0 to HW filter on device bond28
[  322.597164][T15329] 8021q: adding VLAN 0 to HW filter on device macvlan14
[  322.617571][T15329] macvlan14: entered allmulticast mode
[  322.625276][T15329] bond28: entered allmulticast mode
[  322.634208][T15329] team0: Port device macvlan14 added
[  323.399170][T15379] __nla_validate_parse: 13 callbacks suppressed
[  323.399193][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'.
[  323.432838][T15379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2039'.
[  323.729083][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'.
[  323.829085][T15398] 8021q: adding VLAN 0 to HW filter on device bond17
[  324.529195][T15437] lo: Caught tx_queue_len zero misconfig
[  324.788329][T15455] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  324.818960][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'.
[  324.836809][T15456] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2051'.
[  324.865189][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'.
[  326.019413][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'.
[  326.039545][T15493] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  326.114107][T15462] lo speed is unknown, defaulting to 1000
[  326.176153][T15492] 8021q: adding VLAN 0 to HW filter on device bond24
[  326.204588][T15500] netlink: 'syz.2.2060': attribute type 1 has an invalid length.
[  326.211621][T15494] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  326.212978][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[  326.240010][T15503] netlink: 'syz.2.2060': attribute type 1 has an invalid length.
[  326.249752][T15494] team0: Port device macvlan13 added
[  326.256035][T15462] lo speed is unknown, defaulting to 1000
[  326.286920][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[  326.906272][T15522] raw_sendmsg: syz.2.2063 forgot to set AF_INET. Fix it!
[  326.909679][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'.
[  327.065373][T15511] lo speed is unknown, defaulting to 1000
[  327.186001][T15511] lo speed is unknown, defaulting to 1000
[  327.448622][T15546] geneve1: entered promiscuous mode
[  327.466774][T15546] macsec1: entered promiscuous mode
[  327.846774][T15559] netlink: 'syz.5.2071': attribute type 21 has an invalid length.
[  327.918431][T15557] 8021q: adding VLAN 0 to HW filter on device bond18
[  328.105195][T15567] bridge4: entered promiscuous mode
[  328.110657][T15567] bridge4: entered allmulticast mode
[  328.495741][T15575] syz.2.2074 uses old SIOCAX25GETINFO
[  328.817978][T15592] __nla_validate_parse: 2 callbacks suppressed
[  328.818001][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'.
[  328.859203][T15592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2077'.
[  329.282615][T15609] ip6tnl0: Caught tx_queue_len zero misconfig
[  329.733342][T15629] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2086'.
[  330.020540][T15629] syzkaller0: entered promiscuous mode
[  330.026305][T15629] syzkaller0: entered allmulticast mode
[  330.148931][T15646] netlink: 'syz.5.2089': attribute type 21 has an invalid length.
[  330.173254][T15646] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2089'.
[  331.459999][T15667] xt_TCPMSS: Only works on TCP SYN packets
[  331.755669][T15580] lo speed is unknown, defaulting to 1000
[  331.788311][T15646] netlink: 'syz.5.2089': attribute type 4 has an invalid length.
[  331.801686][T15646] netlink: 'syz.5.2089': attribute type 5 has an invalid length.
[  331.826557][T15646] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2089'.
[  331.937297][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'.
[  331.952356][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'.
[  331.963510][T15580] lo speed is unknown, defaulting to 1000
[  332.590012][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'.
[  333.186771][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'.
[  333.367654][T15706] lo speed is unknown, defaulting to 1000
[  333.377664][T15706] lo speed is unknown, defaulting to 1000
[  333.521681][T15729] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2105'.
[  333.602054][T15729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.707159][T15729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.727579][T15729] bond0 (unregistering): Released all slaves
[  333.902791][T11382] IPVS: starting estimator thread 0...
[  334.017673][T15740] IPVS: using max 28 ests per chain, 67200 per kthread
[  334.030518][T15747] __nla_validate_parse: 3 callbacks suppressed
[  334.030535][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'.
[  334.070951][T15750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2110'.
[  334.163737][T15747] 8021q: adding VLAN 0 to HW filter on device bond19
[  334.288631][T15751] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  334.318186][T15751] team0: Port device macvlan0 added
[  334.560293][T15768] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  334.717062][T15713] lo speed is unknown, defaulting to 1000
[  334.769508][T15713] lo speed is unknown, defaulting to 1000
[  335.213903][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2116'.
[  335.812556][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  335.907315][T15765] lo speed is unknown, defaulting to 1000
[  335.999121][T15765] lo speed is unknown, defaulting to 1000
[  336.436703][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2122'.
[  336.684307][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'.
[  337.320796][T15823] lo speed is unknown, defaulting to 1000
[  337.330507][T15823] lo speed is unknown, defaulting to 1000
[  337.379553][T15862] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2128'.
[  337.538727][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'.
[  337.549003][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'.
[  337.688623][   T58] 
[  337.691020][   T58] ============================================
[  337.697204][   T58] WARNING: possible recursive locking detected
[  337.703421][   T58] syzkaller #0 Not tainted
[  337.707887][   T58] --------------------------------------------
[  337.714061][   T58] kworker/u8:4/58 is trying to acquire lock:
[  337.720054][   T58] ffff888034127158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  337.729956][   T58] 
[  337.729956][   T58] but task is already holding lock:
[  337.737348][   T58] ffff8880578e0d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  337.747302][   T58] 
[  337.747302][   T58] other info that might help us debug this:
[  337.755396][   T58]  Possible unsafe locking scenario:
[  337.755396][   T58] 
[  337.762876][   T58]        CPU0
[  337.766173][   T58]        ----
[  337.769478][   T58]   lock(&qdisc_xmit_lock_key#4);
[  337.774539][   T58]   lock(&qdisc_xmit_lock_key#4);
[  337.779598][   T58] 
[  337.779598][   T58]  *** DEADLOCK ***
[  337.779598][   T58] 
[  337.787756][   T58]  May be due to missing lock nesting notation
[  337.787756][   T58] 
[  337.796088][   T58] 11 locks held by kworker/u8:4/58:
[  337.801304][   T58]  #0: ffff88802bf71148 ((wq_completion)bond16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  337.812502][   T58]  #1: ffffc900015f7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  337.825437][   T58]  #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  337.835050][   T58]  #3: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0
[  337.844997][   T58]  #4: ffff88806b725228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0
[  337.857650][   T58]  #5: ffff8880578e0d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  337.867960][   T58]  #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  337.876880][   T58]  #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  337.886690][   T58]  #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  337.895534][   T58]  #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0
[  337.905491][   T58]  #10: ffff88801f71a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0
[  337.918230][   T58] 
[  337.918230][   T58] stack backtrace:
[  337.924138][   T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  337.924159][   T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  337.924178][   T58] Workqueue: bond16 bond_alb_monitor
[  337.924206][   T58] Call Trace:
[  337.924214][   T58]  <TASK>
[  337.924221][   T58]  dump_stack_lvl+0xe8/0x150
[  337.924246][   T58]  print_deadlock_bug+0x279/0x290
[  337.924273][   T58]  __lock_acquire+0x253f/0x2cf0
[  337.924296][   T58]  ? skb_network_protocol+0x23d/0x3f0
[  337.924325][   T58]  ? netif_skb_features+0x9bc/0xe40
[  337.924351][   T58]  ? ret_from_fork_asm+0x1a/0x30
[  337.924378][   T58]  ? validate_xmit_skb+0xc5f/0x14a0
[  337.924407][   T58]  lock_acquire+0xf0/0x2e0
[  337.924427][   T58]  ? sch_direct_xmit+0x15f/0x4c0
[  337.924452][   T58]  _raw_spin_lock+0x2e/0x40
[  337.924476][   T58]  ? sch_direct_xmit+0x15f/0x4c0
[  337.924494][   T58]  sch_direct_xmit+0x15f/0x4c0
[  337.924516][   T58]  ? __pfx_sch_direct_xmit+0x10/0x10
[  337.924535][   T58]  ? arp_create+0x140/0xa00
[  337.924558][   T58]  ? arp_send_dst+0xa7/0x2a0
[  337.924584][   T58]  __dev_queue_xmit+0x1615/0x38d0
[  337.924602][   T58]  ? __dev_queue_xmit+0x28d/0x38d0
[  337.924623][   T58]  ? arpt_do_table+0x261/0x1ec0
[  337.924646][   T58]  ? __pfx___dev_queue_xmit+0x10/0x10
[  337.924666][   T58]  ? __pfx_arpt_do_table+0x10/0x10
[  337.924687][   T58]  ? trace_kmem_cache_alloc+0x29/0xf0
[  337.924722][   T58]  ? NF_HOOK+0xa2/0x3c0
[  337.924746][   T58]  NF_HOOK+0x33a/0x3c0
[  337.924770][   T58]  ? __pfx_arp_xmit_finish+0x10/0x10
[  337.924795][   T58]  ? NF_HOOK+0xa2/0x3c0
[  337.924817][   T58]  ? __pfx_NF_HOOK+0x10/0x10
[  337.924841][   T58]  ? __pfx_arp_xmit_finish+0x10/0x10
[  337.924870][   T58]  arp_xmit+0x16c/0x270
[  337.924893][   T58]  ? arp_xmit+0x23/0x270
[  337.924916][   T58]  arp_solicit+0xbe0/0xe40
[  337.924944][   T58]  ? arp_solicit+0x119/0xe40
[  337.924969][   T58]  ? __pfx_arp_solicit+0x10/0x10
[  337.924995][   T58]  ? __neigh_event_send+0xe9d/0x1530
[  337.925017][   T58]  ? __pfx_arp_solicit+0x10/0x10
[  337.925042][   T58]  __neigh_event_send+0xf05/0x1530
[  337.925068][   T58]  neigh_resolve_output+0x198/0x750
[  337.925091][   T58]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  337.925120][   T58]  ? ip_finish_output2+0x3c2/0x1070
[  337.925144][   T58]  ip_finish_output2+0xca9/0x1070
[  337.925175][   T58]  ? ip_skb_dst_mtu+0x109/0xa50
[  337.925199][   T58]  ? ip_finish_output+0x33a/0x3f0
[  337.925223][   T58]  ip_output+0x29f/0x450
[  337.925244][   T58]  ? ip_output+0x5b/0x450
[  337.925267][   T58]  iptunnel_xmit+0x59f/0xa00
[  337.925289][   T58]  ip_tunnel_xmit+0x193a/0x1f20
[  337.925322][   T58]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  337.925349][   T58]  ? __pfx_gre_build_header+0x10/0x10
[  337.925372][   T58]  ? kmem_cache_free+0x187/0x630
[  337.925388][   T58]  ? pskb_expand_head+0x4bb/0x1320
[  337.925406][   T58]  __gre_xmit+0x19e/0x240
[  337.925427][   T58]  ? __pfx___gre_xmit+0x10/0x10
[  337.925452][   T58]  erspan_xmit+0xa81/0x1670
[  337.925481][   T58]  ? __pfx_erspan_xmit+0x10/0x10
[  337.925508][   T58]  dev_hard_start_xmit+0x2d8/0x870
[  337.925541][   T58]  sch_direct_xmit+0x251/0x4c0
[  337.925563][   T58]  ? __pfx_sch_direct_xmit+0x10/0x10
[  337.925582][   T58]  ? kthread+0x370/0x470
[  337.925596][   T58]  ? ret_from_fork+0x51e/0xb90
[  337.925621][   T58]  __dev_queue_xmit+0x1615/0x38d0
[  337.925639][   T58]  ? __dev_queue_xmit+0x28d/0x38d0
[  337.925662][   T58]  ? __pfx___dev_queue_xmit+0x10/0x10
[  337.925680][   T58]  ? rcu_is_watching+0x15/0xb0
[  337.925704][   T58]  ? trace_kmem_cache_alloc+0x29/0xf0
[  337.925731][   T58]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  337.925766][   T58]  ? alb_send_lp_vid+0x14e/0x550
[  337.925783][   T58]  alb_send_lp_vid+0x348/0x550
[  337.925801][   T58]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  337.925816][   T58]  ? __lock_acquire+0x6b5/0x2cf0
[  337.925844][   T58]  alb_send_learning_packets+0x12c/0x300
[  337.925870][   T58]  ? register_lock_class+0x31/0x2e0
[  337.925891][   T58]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  337.925923][   T58]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  337.925948][   T58]  bond_alb_monitor+0x3d5/0x17e0
[  337.925976][   T58]  ? bond_alb_monitor+0xf8/0x17e0
[  337.926002][   T58]  ? __pfx_bond_alb_monitor+0x10/0x10
[  337.926029][   T58]  ? process_scheduled_works+0xa25/0x1830
[  337.926051][   T58]  ? process_scheduled_works+0xa25/0x1830
[  337.926073][   T58]  process_scheduled_works+0xb02/0x1830
[  337.926107][   T58]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.926132][   T58]  ? assign_work+0x3d5/0x5e0
[  337.926154][   T58]  worker_thread+0xa50/0xfc0
[  337.926195][   T58]  kthread+0x388/0x470
[  337.926211][   T58]  ? __pfx_worker_thread+0x10/0x10
[  337.926232][   T58]  ? __pfx_kthread+0x10/0x10
[  337.926248][   T58]  ret_from_fork+0x51e/0xb90
[  337.926271][   T58]  ? __pfx_ret_from_fork+0x10/0x10
[  337.926292][   T58]  ? __switch_to+0xc7d/0x1450
[  337.926312][   T58]  ? __pfx_kthread+0x10/0x10
[  337.926328][   T58]  ret_from_fork_asm+0x1a/0x30
[  337.926360][   T58]  </TASK>
[  338.480384][T15876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.719215][T15879] tipc: Resetting bearer <eth:syzkaller0>