last executing test programs:

4.34853843s ago: executing program 1 (id=3743):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003f0007012dbd7000fbdbdf25047c00000400fc800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x12, r0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
unshare(0x22020600)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r4, r3, 0x4}, 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8)

4.239976587s ago: executing program 2 (id=3747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [@generic={0xdc, 0x8, 0x8, 0x7, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2b0ba1fd3fb55dbb}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x55, '\x00', r1, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x4, 0x5, 0x5e00000}, 0x10, 0x169a8, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000340)=[{0x3, 0x3, 0x8, 0x8}, {0x3, 0x1, 0x4, 0x5}, {0x2, 0x2, 0x6, 0x9}, {0x3, 0x2, 0xb, 0xa}, {0x5, 0x4, 0xf, 0x3}, {0x3, 0x1, 0xf}, {0x5, 0x2, 0x6, 0x7}, {0x2, 0x1, 0xe}, {0x5, 0x5, 0x7, 0x5}, {0x0, 0x3, 0xd}], 0x10, 0x101}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)

4.078104763s ago: executing program 1 (id=3750):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x91}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r4 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4)

4.00555931s ago: executing program 2 (id=3751):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$cgroup_int(r7, &(0x7f0000000000)=0x8, 0x12) (async)
close(r7)
splice(r6, 0x0, r7, 0x0, 0x6, 0x0) (async, rerun: 64)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb5c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (rerun: 64)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x4, 0x1c}, 0xc) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1, &(0x7f0000000340)=@raw=[@generic={0x0, 0x5, 0xa, 0x4, 0x3}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x9, 0xc1fd, 0x82a3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r7, r8, r9, r10], &(0x7f00000008c0)=[{0x3, 0x5, 0x1, 0x1}, {0x5, 0x3, 0x3, 0x4}, {0x2, 0x2, 0x8, 0xc}, {0x0, 0x2, 0x7, 0x8}, {0x1, 0x3, 0x0, 0x3}], 0x10, 0x100}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 64)
close(r13) (async)
r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r15, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0)
sendmsg$NFT_BATCH(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}}, 0x0)

3.928608138s ago: executing program 4 (id=3753):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

3.846567108s ago: executing program 2 (id=3755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xc4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4025}, 0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6fb00cab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4380}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7a03}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d08}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x406c000}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x87a03}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b6181c730c"}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe6}]]}, 0x58}}, 0x890)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200480c4)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r6, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x25}, 0x9cb7ef1de8f4276f)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = accept4$tipc(r3, &(0x7f0000000900)=@name, &(0x7f0000000940)=0x10, 0x80000)
sendmmsg$sock(r8, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000a80)="3013e1af066b57288a2a0102c4603c410b8a886403b07a2e971d00c2fac416a3fbb21641f62e7f9ba10b685ada753f228279ffb7335d6ce9de74fb5d1c64a0c9da23f62871dc07c4f5f053a2189104fde61ed854fe67a725807a0229", 0x5c}, {&(0x7f0000000b00)="fa18e5df4d13318ced9651056f20f134e5358688a66100a2d36932130b63bc16f695cad1a94310a26136ed10673239452b2ec0842be5628b6234834918443a9a7aea9bc7fdcbaea39afe3fdad77228f51a40960a7980906c27e636de0ee4ab29f98772f772f8b8a5e6c17f8a2bf22fe2cb453086b89d023d77655aebafe1050ffc24a1a0d6ea31ba593d6b17663afd3462cd7beeea51592cb3960e12d76e832657212de08b2648d7baa8af4b637a3afd6e03b7464069356ba12865d8f9f043fbdd3f90a869e81d3522c0c9fdb32531e82bdf62e33b033acbad9f5451ae457894f666c1708c831411a981e9ce0472275846b38c109d01d4f8ee", 0xf9}, {&(0x7f0000000c00)="e75a1d2c6cf96dc7bef6e242a1f062bf4a51cb3af97f16994fe5e89db01a4b73f4bae7eb6b311cebcb591c52797034e795fbd84bae53d1f759b283ef45b63762fc58dbc37e4f50ec3c79e713c26b3cdb23782f4cb525", 0x56}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="145a21192a7331e81a63c3f77e9c81935f8e6240a50a28", 0x17}, {&(0x7f0000001cc0)="14b3a4a4b9fdc49b1e0a4cf481904512ba63b130c2d213a12c69aa6dd19dceaad32ad378f32ad0e294c421e97efe73ffa35d1ffa55979d33e25388f85fe0da542e2dc95647aab6e2aa5f07ac41ac2be9c510cbb961b049a635f43df73178a5ed7fbd3048a3243ae1a775547450875abe3f6643f145", 0x75}], 0x7}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001e40)={'wg2\x00', <r9=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000001e80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001ec0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f00000021c0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000001f00)=@deltfilter={0x248, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe0, 0xffe0}, {0x2, 0x3}, {0x9, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x218, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa10a}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf6}, @TCA_ROUTE4_ACT={0x1e4, 0x6, [@m_csum={0x8c, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x5, 0x6}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x3, 0x10000000, 0x8, 0x8}, 0x3f}}]}, {0x25, 0x6, "d833fcb7d3dbf3144eeb88475758a87002122029d9e2a504c5426448ff0cc0c01a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x154, 0x1f, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa64, 0x2, 0x6, 0x800}, {0x2, 0x6, 0xf3, 0x8}, {0x3, 0xfc, 0xc7, 0x1000}, {0x5, 0x81, 0x2, 0x7}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xfd, 0x6, "14d45d0a1256f0ad4518912147dafa96680f50615e6f66e22fc9d6eb0c33e34ab560f822d3823c0e43388c1f52d4d25599777cb6f5d8fcc9e85f7862c85caebdfbb9a42523da96ca74167f1aa1deb9ccac5ed030c605c4f6e2afaa31d5571b6fa56f3f232f7a4237a796ec415eed9b15497e8a8de2605fd76896fdd960cef05586f9e4b067a14c3fc4d7e8b7ae6d725c5d9946fb3ce604788624d932f4d73f28177fd99738c9dfc1705e0a89478a82f1a422d6331ada5883c91961999161eb5071ece5c1f467a061d44dff92e6e9c24454bd347641698ad7f5579f301bb36c97e79a18e4d1d8a114fa8124e145138cdb83539403fb0352be57"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd1}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4008010}, 0x8800)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048080}, 0x4010)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000023c0)={{r0}, &(0x7f0000002340), &(0x7f0000002380)='%pK    \x00'}, 0x20)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002440), r3)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x2c, r12, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x81)
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002580), r3)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000060}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, r13, 0x200, 0xf, 0x25dfdbfd}, 0x14}}, 0x8000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002680)={<r14=>r5})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002700)={'wg0\x00', <r15=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r14, &(0x7f0000002fc0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002d80)={0x1dc, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x2405238085404546}, 0x1)

3.718082187s ago: executing program 4 (id=3756):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000001940)={'tunl0\x00', <r7=>0x0, 0x40, 0x20, 0x5, 0x40, {{0x33, 0x4, 0x2, 0x27, 0xcc, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010100, @loopback, {[@ra={0x94, 0x4, 0x1}, @noop, @end, @end, @cipso={0x86, 0x33, 0x0, [{0x1, 0x12, "771e9f359f03a2bea00fa367856be935"}, {0x2, 0xd, "2072b6bcf117bf44ce29b5"}, {0x6, 0xe, "d73b997b78aa9dbdd1eda452"}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x6, 0x10, "de6b4e3dac9087f219527c619008"}, {0x1, 0xa, "b97de46b7ad54853"}, {0x6, 0x5, "e3ee99"}, {0x7, 0x12, "2f3a78322deb88dab01cbae2c1ab909b"}, {0x7, 0x3, "05"}]}, @cipso={0x86, 0x15, 0x0, [{0x1, 0x3, 'j'}, {0x2, 0xa, "feefabf220133d6b"}, {0x0, 0x2}]}, @lsrr={0x83, 0xb, 0x94, [@multicast1, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1f, 0x90, [@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2]}, @generic={0x94, 0x4, "a55b"}]}}}}})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b00000000300000001000000070000130d0000000f00000007000000020000000b000000030000000400000008000000010000000900000005000000040000000100008010000000d0000000350e00000e000000030014000c00000002000000ff07000005000000040000000000000e01000000010000001000000000000001000000005f0048000f0000000000000a05000000020000005304fa91ae82d802000093080000000c00000004000000ba0000000100000035b00000"], &(0x7f0000001380)=""/130, 0xcb, 0x82, 0x0, 0x7e, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r0, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x36, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0800000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x6, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x40, 0x1000, &(0x7f0000000140)=""/4096, 0x41100, 0x30, '\x00', r7, @fallback=0x2c, r8, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r10], 0x0, 0x10, 0xfffffff7}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r12=>0x0})
setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000)={@remote, r12}, 0x14)

3.540622268s ago: executing program 2 (id=3758):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000050016008900000025bc0e0c37711e68d3d3acf98ab4ceb7617c0c27bdf781be1332054b1532282e5bcb24bc21054cbf4f2a5ae694c5cc171aa949bcb9ebc8328f12cb979ffde00c20fa78e037afe0c461514193045d4240af180d273b8a108ab8dc81f82e6d1d078bbe2d73149c3f96587ca6cf8a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x447c2c7db0cc7d4b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00000024bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0xc010)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000106000000fcdbdf251400000005000b000100000008050000000000000800060006000000050019000100000008000700bc0e0000"], 0x3c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d70000000000007006800", @ANYRES32=r8, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004000580"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@getchain={0x64, 0x66, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xe}, {0xd, 0xfff1}, {0xffe0, 0x8}}, [{0x8, 0xb, 0x3}, {0x8}, {0x8, 0xb, 0x60000000}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44000)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test})
r10 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}}, 0x0)

3.521674099s ago: executing program 1 (id=3759):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r3, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xa4, r3, 0x600, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf454}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000805}, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600})
close(r5)
r6 = socket$tipc(0x1e, 0x2, 0x0)
pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000380)="67b39f661b589e100c97243700ea6f142486bed765cfa002de41868b63319ad00b4ed9bae3af071b4cddc909a92b1f89cf6946ef8b9d4837c1a2f7f7e55b489ad264f8e346f13faa9cbaf19f018d69f0068097abebde0c128752396ce5c7896c54c7f1984f5bae3c1b0602956b42d50b24372eb1c91fc64300e16f81471433f9c59e0ee3e39b0b614406adf069990d90713447dc5ca019bd561a1ae8e2bd2061d02eb12bea617a7b", 0xa8}], 0x1, 0x8, 0x1000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a85fe0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.539024882s ago: executing program 3 (id=3760):
r0 = socket(0x10, 0x80002, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)

2.300317992s ago: executing program 4 (id=3762):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

2.254837366s ago: executing program 0 (id=3763):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000007f145008009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="dc94e8db0e05394a856325f7fd514b0d71106727e1215316213e6f2a08495083c31f55d1bbdac92b8357e355a5dcff60ef049674ffa0c4f77be9dd9ef86aa59240a292cf611f0c252f4d4532fd4f105c87886d295864d5d8121601664f46100e50dfc03e04eb73e413c4e54c2c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e0016000020000004e0ffff0600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='hrtimer_start\x00', r3}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0}) (async)
bpf$MAP_CREATE_RINGBUF(0x1d, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, &(0x7f0000000280)) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) (async)
r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
ioctl$SIOCAX25GETINFOOLD(r10, 0x89e9, &(0x7f0000000200)) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x21, 0xa, 0xfffffffc) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x2f, 0x76, &(0x7f0000000180)="3ba4da3497ac0c5dee9ba7f43a4773c6fc777f396240315f4c120dca80fd1a12cff69a8f873ea50d75ad5f3d1e2899", &(0x7f0000000480)=""/118, 0xfffffffa, 0x0, 0x13, 0xc6, &(0x7f0000000400)="5184fa356a6d62d4c449c5223d35f9e5e4cbea", &(0x7f0000000580)="c42c2f4c0667e17965f1bef2382f776d30bbc291893673bebfdb64053ac331ffb650a82f54019c151b861cb2096335c2f368933255640e5e0edcc2fac9f9b8786f28c46bfb2d75e508c2cee78f50c4c58ccbb60a517df81fab2fca79bf9d2dc3f72fd4c2a8846c3aded740eaa72e232c04db9c1bded52f072440ce1fb5e49208a2efdc6e105e5d69146ec2bf2ae60acda73afdb88dd33aa3a923e22825da5f3a012b32c293312a507d1125e633537175947fe55d2b850f1a2275b614cc2d711ac96b121833ab", 0x1}, 0x50) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001dc0)=@newtaction={0x11ac, 0x30, 0x1, 0x0, 0x0, {}, [{0x1198, 0x1, [@m_mpls={0xc0, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x8a, 0x4, "14d209bbc94410e898392a57132cb002a90a921bc2d59012e643943ca16b7e804057d3015be187dd265eb31da622e7ecdb164511477fd34dda3a7531052a999c4034c3c4e70408431795d10a678e6514b3428b64239b50bc1b25c4747fb0f9c0d9b5bc61e9da1436382b312c1f102c4c03ebf453293faf548e206acce4494459df9849798231"}, {0xc}, {0xc}}}, @m_skbedit={0x1060, 0xd, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x40000006, 0x0, 0x7, 0x8c, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x74, 0xa, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xb, 0x6, 0x4c, 0x14000000}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8f0, 0x0, 0xc5de, 0xb5c}, 0x54}}]}, {0x10, 0x6, "c03a2f3b1084f78c9abdc988"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x11ac}}, 0x0)

2.246422706s ago: executing program 1 (id=3764):
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x14, &(0x7f0000000040)=@raw=[@ringbuf_query, @ldst={0x0, 0x3, 0x1, 0x2, 0x9, 0x4, 0xfffffffffffffffc}, @ldst={0x1, 0x0, 0x0, 0x1, 0xb, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0x8e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x10000, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x21e, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x3, 0x4, 0x3}, {0x0, 0x3, 0x6, 0x7}, {0x5, 0x3, 0x10, 0x4}], 0x10, 0x1}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r4, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340)={r0, r1, 0x0, r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001380)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000)
socket$isdn(0x22, 0x3, 0x21)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}})

2.000585707s ago: executing program 0 (id=3765):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'netpci0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r4, 0x11, 0x0, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delneigh={0x4c, 0x1d, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x4a, 0x4}, [@NDA_NH_ID={0x8, 0xd, 0x3}, @NDA_MASTER={0x8, 0x9, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x4c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delneigh={0x4c, 0x1d, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x4a, 0x4}, [@NDA_NH_ID={0x8, 0xd, 0x3}, @NDA_MASTER={0x8, 0x9, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x4c}}, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) (async)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000002e00)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x94)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r9=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) (async)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800)
socket(0x2, 0x80805, 0x0) (async)
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r11, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
socket(0x10, 0x803, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x1000000, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x1000000, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000"], 0x7c}}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)

1.999987776s ago: executing program 2 (id=3766):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0) (async)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0ffa80b700000d2879f37f828aed240c5bdddc3582a15ecf2b22aeb209d7bd40ff1d081a99337fad354a2de0bf730df0ce5b570e5ecc153596cebb59b79d621de5d5b866ff1d67d42ebf0546a3e922", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r9)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)
recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xfff3}, {0xa, 0x6}, {0xb, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.994976302s ago: executing program 3 (id=3767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x80)

1.87776236s ago: executing program 4 (id=3768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x300, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x20000000)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140d, 0x300, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x20000000) (async)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async)

1.764578884s ago: executing program 1 (id=3769):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240))
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r2 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
syz_emit_ethernet(0xa4, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="91c4f9d4ed92", @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x3, 0x1, 0x3}}, {@x25={0x805, {0x1, 0x2, 0x1b, "6389b81e0eb3595dac5f35d6156a270f6a97bc20f11e9c2ef9a39cebfba30a351910d7c2bae25ad889ae75acbee396ecdf6d28dd72f1b86ee4057a35007068de48ee2a19f48115468ce9fe8f65c87459b0d04f28f3f2cd90a583752e8688f281009ca11b27e3a34eef8befbda29401f92e46465670e408ddfe7695b9de80c75f98a8bf4776f4e196f3f1aa"}}}}, 0x0)

1.756336512s ago: executing program 3 (id=3770):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703692d69a200008500000006000000850000007d0000009500000000000000e7f270dcc8176264"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
pipe(&(0x7f0000000100)) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='svcrdma_no_rwctx_err\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000000080000010000800000000020000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000030000000300ff00"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f00000003c0)="0997f8f52f2aaea690795cde9a2ad49fe960db826231800cba62bf0ce6bf8b67e7115f7428503175a6c6b4f558f2995e7ee8eee6d7146f56facca0c19ec6ce5cda3f5b9251daa37f6ca873b16249d97d6985ad8ac7f9d666a58cabd7360b875424d17c4ada7a71fd20e89aebb7699c877206c12848eaac680c1b2aacccb6", &(0x7f0000000000)=""/36}, 0x20)

1.739902395s ago: executing program 0 (id=3771):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006804400040067636d2861657329000000000000000000000000000000007b4c4ac6ef01630eff"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000600908be021d88c53f6e3d286"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000480006804400040067636d2861657329000000000000000000000000000000007b4c4ac6ef01630eff"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)

1.690557945s ago: executing program 4 (id=3772):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="daae40fd0490bc8e57f4f6637c9ac4c7e79d6de2a37cf3253fd4e5dcbb7ac55f851d647b6f3ea410285ecd6f16ccd693c4a3866af0fa3838949800974fbdc6049492b9cc92f63339cf12da3fbac4877260a6a1cf685a27702620a4db1d1f30660a86346dc76d7b04cbb7411826002aa6c49669d2dfd2d71770aa5a9bcd16c7aec7924604b74534b3269aacedfabb7437f9ef775914454dc7754596cd6f5d0947f1a239e83ae00154ea01198c57605b652fae0cb1d3809a74ad740d34", 0xbc)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

1.543779299s ago: executing program 0 (id=3773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

1.543105164s ago: executing program 1 (id=3774):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
recvmmsg(r2, &(0x7f0000008580)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/145, 0x91}, {&(0x7f0000000740)=""/121, 0x79}], 0x9}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/51, 0x33}], 0x2, &(0x7f00000009c0)=""/61, 0x3d}, 0x5}, {{&(0x7f0000001b40)=@un=@abs, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002c40)=""/238, 0xee}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/31, 0x1f}, {&(0x7f0000003d80)=""/217, 0xd9}, {&(0x7f0000003e80)=""/8, 0x8}, {&(0x7f0000003ec0)=""/102, 0x66}, {&(0x7f0000004000)=""/132, 0x84}, {&(0x7f00000040c0)=""/208, 0xd0}, {&(0x7f0000003f40)=""/72, 0x48}], 0x9, &(0x7f0000004280)=""/67, 0x43}, 0x1}, {{&(0x7f0000004300)=@nl=@proc, 0x80, &(0x7f0000005700)=[{&(0x7f0000004380)=""/147, 0x93}, {&(0x7f0000004440)=""/134, 0x86}, {&(0x7f0000004500)=""/172, 0xac}, {&(0x7f00000045c0)=""/189, 0xbd}, {&(0x7f0000004680)=""/99, 0x63}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000005780)=""/160, 0xa0}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/128, 0x80}, {&(0x7f00000068c0)=""/224, 0xe0}], 0x4, &(0x7f0000006a00)=""/139, 0x8b}, 0x3e1}, {{&(0x7f0000006ac0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000006b40)=""/234, 0xea}, {&(0x7f0000006c40)=""/4096, 0x1000}, {&(0x7f0000007c40)}, {&(0x7f0000007c80)=""/251, 0xfb}, {&(0x7f0000007d80)=""/208, 0xd0}, {&(0x7f0000007e80)=""/114, 0x72}, {&(0x7f0000007f00)=""/188, 0xbc}], 0x7, &(0x7f0000008040)=""/13, 0xd}, 0x9}, {{&(0x7f0000008080)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000084c0)=[{&(0x7f0000008100)=""/224, 0xe0}, {&(0x7f0000008200)=""/127, 0x7f}, {&(0x7f0000008280)=""/56, 0x38}, {&(0x7f00000082c0)=""/85, 0x55}, {&(0x7f0000008340)=""/50, 0x32}, {&(0x7f0000008380)=""/73, 0x49}, {&(0x7f0000008400)=""/105, 0x69}, {&(0x7f0000008480)=""/50, 0x32}], 0x8, &(0x7f0000008540)=""/2, 0x2}, 0x19}], 0x8, 0x40, &(0x7f0000008780))
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async)
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.540848709s ago: executing program 3 (id=3775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xffffe000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x28}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x18}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x25}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})

1.481972866s ago: executing program 0 (id=3776):
r0 = socket$inet6(0xa, 0x800000000000002, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x14}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x0, 0x0, 0x8003}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xe4, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x48010)
sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x100005}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0)

120.611951ms ago: executing program 3 (id=3777):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = accept(0xffffffffffffffff, &(0x7f0000001080)=@ax25={{0x3, @default}, [@rose, @remote, @null, @remote, @rose, @rose, @default, @bcast]}, &(0x7f0000001100)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = gettid()
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/uts\x00')
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000001140), &(0x7f0000001180)=0x30)

91.25524ms ago: executing program 3 (id=3778):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
getsockname$ax25(r1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
close(r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)

87.421957ms ago: executing program 2 (id=3779):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c020500", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000044)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = accept(r5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r9=>0x0})
sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x5, {}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000800)={'erspan0\x00', <r10=>r7, 0x8, 0x1, 0x7, 0xfff, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0x82, 0x4, "6cb1"}, @generic={0x94, 0x5, "4eabd3"}, @end, @lsrr={0x83, 0xb, 0xa8, [@initdev={0xac, 0x1e, 0x4, 0x0}, @remote]}, @noop, @lsrr={0x83, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}})
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', <r14=>0x0, 0x2f, 0xe3, 0x5, 0x7, 0x20, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x40, 0x9, 0x9}})
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r17=>0x0})
sendmsg$nl_route(r16, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r17, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r18=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250b0000001c0001800800030001000000080003000200000008000300010000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="200001800800030002000000140002006272696467655f736c6176655f3000005c000180140002007767310000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32=r13, @ANYBLOB="080003000100000008000100", @ANYRES32=r14, @ANYBLOB="0800030000000000140002006261746164763000000000000000000014000180080003000100000008000100", @ANYRES32=r17, @ANYBLOB="20000180140002006873723000000000000000000000000008000100", @ANYRES32=r18, @ANYBLOB="fdff0080"], 0x114}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)

32.649788ms ago: executing program 4 (id=3780):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, &(0x7f0000000400)}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x44804)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, &(0x7f0000000400)}, 0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x44804) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async)

0s ago: executing program 0 (id=3781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000380)={0x29, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0xb2, 0xa8, "4814e22cf5ff646e2653d386db0c4d787f9de36cff3de5b91eeb039871a857511b413ae26675425124d5f68209e5354a7a90aebf9892c5e1e150723ed8630b95cdebf99c923e296cd2bf10bed0acb39f7f8da2c08094d7e35ebae54e1179b3afafbe0ef03beaa40363fe52a5a1b372e8cbbca28fe2fddc4f7cdea7c49aced84d695844853154203217534e6b0ee4c52cd0f48c967518f4ed098ff53e5aacf67c1d5beca957c4fab7"}]}, 0xb8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'tunl0\x00', @multicast})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r12)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

125'.
[  333.426499][T13069] x_tables: duplicate underflow at hook 2
[  333.529728][T13071] 8021q: adding VLAN 0 to HW filter on device bond7
[  333.544714][T13086] x_tables: duplicate underflow at hook 3
[  333.550466][T13071] bond6: (slave bond7): making interface the new active one
[  333.560188][T13087] x_tables: duplicate underflow at hook 3
[  333.569588][T13071] bond6: (slave bond7): Enslaving as an active interface with an up link
[  333.730828][T13094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.749429][T13095] netlink: 'syz.3.2135': attribute type 2 has an invalid length.
[  333.854199][T13101] bridge0: entered allmulticast mode
[  333.930820][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'.
[  334.108837][T13116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2143'.
[  334.118876][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'.
[  334.129128][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'.
[  334.296928][T13125] bond5: (slave bond_slave_1): Device is not bonding slave
[  334.304174][T13125] bond5: option active_slave: invalid value (bond_slave_1)
[  334.317934][T13125] bond5 (unregistering): Released all slaves
[  334.358637][T13131] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2148'.
[  334.384692][T13129] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  334.406583][T13129] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  334.476191][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2150'.
[  334.919262][T13171] netlink: 'syz.4.2159': attribute type 1 has an invalid length.
[  334.919776][T13170] netlink: 'syz.4.2159': attribute type 1 has an invalid length.
[  335.079361][T13188] batadv0: left promiscuous mode
[  335.094492][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.151373][T13190] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  335.374154][T13208] netlink: 'syz.0.2168': attribute type 3 has an invalid length.
[  335.389369][T13209] netlink: 'syz.0.2168': attribute type 11 has an invalid length.
[  335.617339][T13226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.630448][T13229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  335.642352][T13224] syzkaller0: entered promiscuous mode
[  335.650070][T13224] syzkaller0: entered allmulticast mode
[  335.711217][T13224] tipc: Resetting bearer <eth:syzkaller0>
[  335.770971][T13224] tipc: Disabling bearer <eth:syzkaller0>
[  336.639635][T13285] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000
[  336.642410][T13287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.655038][T13286] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.668340][T13287] syzkaller0: entered promiscuous mode
[  336.673904][T13287] syzkaller0: entered allmulticast mode
[  336.733095][T13286] tipc: Resetting bearer <eth:syzkaller0>
[  336.744466][T13283] tipc: Resetting bearer <eth:syzkaller0>
[  336.760789][T13283] tipc: Disabling bearer <eth:syzkaller0>
[  336.778944][T13295] tipc: Enabled bearer <udp:s>, priority 10
[  337.355811][T13332] __nla_validate_parse: 7 callbacks suppressed
[  337.355829][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'.
[  337.401172][T13345] netlink: 'syz.3.2214': attribute type 25 has an invalid length.
[  337.457212][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'.
[  337.589008][T13351] netlink: 'syz.1.2216': attribute type 3 has an invalid length.
[  337.698477][T13353] vxcan1: entered promiscuous mode
[  337.820213][T13360] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2218'.
[  337.843284][T13362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.858921][T13362] tipc: Resetting bearer <eth:syzkaller0>
[  337.891505][T13361] tipc: Disabling bearer <eth:syzkaller0>
[  338.011016][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'.
[  338.049511][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'.
[  338.087130][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2227'.
[  338.096754][T13380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2227'.
[  338.116699][T13380] gretap2: entered promiscuous mode
[  338.142253][T13380] gretap2: entered allmulticast mode
[  338.175538][T13386] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.330790][T13391] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2231'.
[  338.787227][T13414] team0: Device wireguard0 is of different type
[  339.140719][T13439] netlink: 'syz.4.2246': attribute type 2 has an invalid length.
[  339.212325][T13439] syzkaller0: entered promiscuous mode
[  339.219291][T13439] syzkaller0: entered allmulticast mode
[  339.243021][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'.
[  339.264984][T13439] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) !
[  339.316077][T13439] syzkaller0: mtu less than device minimum
[  339.347619][T13462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2251'.
[  339.562958][T13477] syzkaller0: entered promiscuous mode
[  339.571081][T13477] syzkaller0: entered allmulticast mode
[  339.694051][T13486] bond8 (unregistering): Released all slaves
[  339.890368][T13506] netlink: 'syz.1.2267': attribute type 1 has an invalid length.
[  339.900043][T13503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.907803][T13508] netlink: 'syz.4.2266': attribute type 21 has an invalid length.
[  339.917992][T13503] syzkaller0: entered promiscuous mode
[  339.923480][T13503] syzkaller0: entered allmulticast mode
[  339.932176][T13508] netlink: 'syz.4.2266': attribute type 6 has an invalid length.
[  339.987237][T13503] tipc: Resetting bearer <eth:syzkaller0>
[  340.231756][T13530] netlink: 'syz.1.2274': attribute type 1 has an invalid length.
[  340.489051][T13549] delete_channel: no stack
[  340.560969][T13554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.587201][T13554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.613526][T13554] batman_adv: batadv0: Removing interface: team0
[  340.653060][T13558] netlink: 'syz.3.2281': attribute type 1 has an invalid length.
[  340.661325][T13498] tipc: Resetting bearer <eth:syzkaller0>
[  340.688378][T13498] tipc: Disabling bearer <eth:syzkaller0>
[  340.820486][T13572] tipc: Can't bind to reserved service type 1
[  341.528704][T13602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.564705][T13603] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  341.572431][T13602] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  341.656531][T13618] nbd: nbd1 already in use
[  341.675686][T13618] block nbd1: NBD_DISCONNECT
[  341.689069][T13618] block nbd1: Send disconnect failed -32
[  341.703472][T13618] block nbd1: shutting down sockets
[  342.034236][T13632] 8021q: adding VLAN 0 to HW filter on device bond8
[  342.218895][T13658] netlink: 'syz.3.2312': attribute type 12 has an invalid length.
[  342.232076][T13662] netlink: 'syz.3.2312': attribute type 12 has an invalid length.
[  342.244137][T13666] netlink: 'syz.1.2314': attribute type 29 has an invalid length.
[  342.259990][T13664] netlink: 'syz.0.2315': attribute type 1 has an invalid length.
[  342.391510][T13664] bond7: entered promiscuous mode
[  342.429511][T13664] 8021q: adding VLAN 0 to HW filter on device bond7
[  342.467622][T13671] 8021q: adding VLAN 0 to HW filter on device bond7
[  342.474878][T13671] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  342.486433][T13671] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  342.512453][T13671] bond7: (slave wireguard1): making interface the new active one
[  342.525579][T13671] wireguard1: entered promiscuous mode
[  342.551701][T13671] bond7: (slave wireguard1): Enslaving as an active interface with an up link
[  342.687216][T13696] __nla_validate_parse: 14 callbacks suppressed
[  342.687233][T13696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'.
[  342.730502][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'.
[  342.747398][T13696] macsec0: entered promiscuous mode
[  342.752776][T13696] macsec0: entered allmulticast mode
[  342.773332][T13699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2322'.
[  342.788354][T13699] `: renamed from bond0 (while UP)
[  343.069080][T13725] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  343.078404][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'.
[  343.190823][T13734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2334'.
[  343.216068][T13730] lo speed is unknown, defaulting to 1000
[  343.239620][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'.
[  343.339739][T13746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2337'.
[  343.492178][T13751] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2338'.
[  343.641943][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2341'.
[  343.684340][T13765] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  343.727571][T13765] gretap3: entered promiscuous mode
[  343.735633][T13765] gretap3: entered allmulticast mode
[  343.870849][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'.
[  344.311020][T13788] tipc: Enabled bearer <eth:macvlan1>, priority 2
[  344.318651][T13783] validate_nla: 5 callbacks suppressed
[  344.318668][T13783] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  344.332594][T13789] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  344.356383][T13797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.373579][T13796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.446375][T13797] syzkaller0: entered promiscuous mode
[  344.474143][T13797] syzkaller0: entered allmulticast mode
[  344.490677][T13797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  344.501641][T13804] netlink: 'syz.3.2355': attribute type 11 has an invalid length.
[  344.512705][T13796] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  344.537300][T13797] tipc: Resetting bearer <eth:syzkaller0>
[  344.585877][T13795] tipc: Resetting bearer <eth:syzkaller0>
[  344.638002][T13795] tipc: Disabling bearer <eth:syzkaller0>
[  345.072790][T13833] C: entered promiscuous mode
[  345.086251][T13833] tunl0: entered promiscuous mode
[  345.095192][T13833] gre0: entered promiscuous mode
[  345.100749][T13833] tipc: Resetting bearer <ib:gretap0>
[  345.110855][T13833] gretap0: entered promiscuous mode
[  345.120017][T13833] erspan0: entered promiscuous mode
[  345.126517][T13833] ip_vti0: entered promiscuous mode
[  345.162888][T13829] lo speed is unknown, defaulting to 1000
[  345.171645][T13833] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  345.425735][ T8013] tipc: Node number set to 3242985432
[  346.326679][T13894] sock: sock_timestamping_bind_phc: sock not bind to device
[  346.344964][T13894] sock: sock_timestamping_bind_phc: sock not bind to device
[  346.415403][T13901] netlink: 'syz.0.2384': attribute type 11 has an invalid length.
[  346.428912][T13901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.525964][T13908] sctp: [Deprecated]: syz.2.2387 (pid 13908) Use of int in max_burst socket option deprecated.
[  346.525964][T13908] Use struct sctp_assoc_value instead
[  346.594740][T13910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.617617][T13910] syzkaller0: entered promiscuous mode
[  346.635466][T13910] syzkaller0: entered allmulticast mode
[  346.679778][T13910] tipc: Resetting bearer <eth:syzkaller0>
[  346.684652][T13916] netlink: 'syz.3.2390': attribute type 1 has an invalid length.
[  346.694654][T13906] tipc: Resetting bearer <eth:syzkaller0>
[  346.722208][T13906] tipc: Disabling bearer <eth:syzkaller0>
[  346.788207][T13916] 8021q: adding VLAN 0 to HW filter on device bond10
[  346.823692][T13921] veth9: entered promiscuous mode
[  346.845386][T13921] bond10: (slave veth9): Enslaving as an active interface with an up link
[  346.880485][T13926] netlink: 'syz.1.2392': attribute type 62 has an invalid length.
[  347.032277][T13932] syzkaller0: entered promiscuous mode
[  347.045215][T13932] syzkaller0: entered allmulticast mode
[  347.775986][T13993] sctp: [Deprecated]: syz.1.2409 (pid 13993) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.775986][T13993] Use struct sctp_sack_info instead
[  347.950170][T14003] netlink: 'syz.2.2413': attribute type 10 has an invalid length.
[  347.998209][T14003] dummy0: left allmulticast mode
[  348.030262][T14003] dummy0: left promiscuous mode
[  348.048564][T14013] netlink: 'syz.2.2413': attribute type 10 has an invalid length.
[  348.075431][T14003] bridge0: port 3(dummy0) entered disabled state
[  348.125790][T14003] dummy0: entered promiscuous mode
[  348.143534][T14003] team0: Port device dummy0 added
[  348.183055][T14020] __nla_validate_parse: 18 callbacks suppressed
[  348.183078][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'.
[  348.187812][T14013] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  348.219784][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'.
[  348.234233][T14013] dummy0: left promiscuous mode
[  348.250783][T14013] team0: Failed to send options change via netlink (err -105)
[  348.262659][T14013] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  348.273605][T14013] team0: Port device dummy0 removed
[  348.283408][T14013] dummy0: entered promiscuous mode
[  348.290959][T14013] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  348.328079][T14029] netlink: 'syz.4.2420': attribute type 3 has an invalid length.
[  348.455422][T14034] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2422'.
[  348.803742][T14064] veth1_to_bond: entered allmulticast mode
[  348.811353][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'.
[  348.889066][T14064] veth1_to_bond (unregistering): left allmulticast mode
[  349.162231][T14097] netlink: 'syz.1.2441': attribute type 4 has an invalid length.
[  349.173373][T14100] netlink: 'syz.1.2441': attribute type 4 has an invalid length.
[  349.189036][T14101] netlink: 'syz.3.2440': attribute type 1 has an invalid length.
[  349.267297][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[  349.343983][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2446'.
[  349.354596][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'.
[  349.383626][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'.
[  349.451288][T14121] nbd: must specify at least one socket
[  349.528507][T14127] validate_nla: 1 callbacks suppressed
[  349.528526][T14127] netlink: 'syz.0.2448': attribute type 1 has an invalid length.
[  349.542813][T14127] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2448'.
[  349.851023][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'.
[  349.912272][T14155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  349.919641][T14155] IPv6: NLM_F_CREATE should be set when creating new route
[  349.926942][T14155] IPv6: NLM_F_CREATE should be set when creating new route
[  349.937408][T14155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.511045][T14179] gretap2: entered promiscuous mode
[  350.523245][T14179] gretap2: entered allmulticast mode
[  350.594984][T14185] netlink: 'syz.1.2467': attribute type 11 has an invalid length.
[  351.077805][T14209] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  351.211334][T14218] netlink: 'syz.0.2478': attribute type 1 has an invalid length.
[  351.311115][T14218] bond8: entered promiscuous mode
[  351.331048][T14218] 8021q: adding VLAN 0 to HW filter on device bond8
[  351.341727][T14235] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[  351.383606][T14222] 8021q: adding VLAN 0 to HW filter on device bond8
[  351.395901][T14222] bond8: (slave wireguard2): The slave device specified does not support setting the MAC address
[  351.412694][T14222] bond8: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  351.435882][T14222] bond8: (slave wireguard2): making interface the new active one
[  351.443925][T14222] wireguard2: entered promiscuous mode
[  351.451410][T14222] bond8: (slave wireguard2): Enslaving as an active interface with an up link
[  351.479084][T14231] bond8: (slave wireguard3): The slave device specified does not support setting the MAC address
[  351.513417][T14231] bond8: (slave wireguard3): Enslaving as a backup interface with an up link
[  351.554322][T14234] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  351.694065][T14218] bond8 (unregistering): (slave wireguard2): Releasing backup interface
[  351.704077][T14218] wireguard2: left promiscuous mode
[  351.713860][T14218] bond8 (unregistering): (slave wireguard3): Releasing backup interface
[  351.727636][T14218] bond8 (unregistering): Released all slaves
[  351.752235][T14239] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  351.752700][T14246] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  351.976898][T14276] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001
[  352.002165][T14272] netlink: 'syz.0.2489': attribute type 10 has an invalid length.
[  352.011843][T14272] bridge0: port 5(team0) entered blocking state
[  352.020278][T14272] bridge0: port 5(team0) entered disabled state
[  352.028361][T14272] team0: entered allmulticast mode
[  352.033991][T14272] C: entered allmulticast mode
[  352.052253][T14272] team_slave_1: entered allmulticast mode
[  352.071100][T14272] team0: left allmulticast mode
[  352.091943][T14272] C: left allmulticast mode
[  352.102146][T14272] team_slave_1: left allmulticast mode
[  352.596625][T14321] netlink: 'syz.1.2504': attribute type 1 has an invalid length.
[  352.910695][T14334] team_slave_0: entered promiscuous mode
[  352.916701][T14334] team_slave_1: entered promiscuous mode
[  352.924221][T14334] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  352.938533][T14338] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  353.340623][T14369] netlink: 'syz.0.2516': attribute type 13 has an invalid length.
[  353.510944][T14380] __nla_validate_parse: 16 callbacks suppressed
[  353.510989][T14380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2513'.
[  353.527974][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'.
[  353.529795][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'.
[  353.547195][T14381] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2517'.
[  353.554458][T14369] bridge0: port 3(syz_tun) entered blocking state
[  353.556974][T14381] openvswitch: netlink: Missing key (keys=40, expected=100)
[  353.563023][T14369] bridge0: port 3(syz_tun) entered listening state
[  353.575455][T14381] netlink: 'syz.1.2517': attribute type 1 has an invalid length.
[  353.588612][T14369] 8021q: adding VLAN 0 to HW filter on device team0
[  353.601333][T14369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.721567][T14390] IPVS: set_ctl: invalid protocol: 44 172.20.20.54:20000
[  353.737982][T14390] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004
[  353.789284][T14381] bond11: entered promiscuous mode
[  353.794993][T14381] 8021q: adding VLAN 0 to HW filter on device bond11
[  353.820300][T14383] syzkaller0: entered promiscuous mode
[  353.827272][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'.
[  353.834439][T14383] syzkaller0: entered allmulticast mode
[  353.909045][T14395] IPVS: length: 71 != 8
[  354.570291][T14449] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  354.831513][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2539'.
[  355.305777][T14505] C: renamed from lo
[  355.323469][T14507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2547'.
[  355.329103][T14511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2549'.
[  355.342873][T14507] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2547'.
[  355.364107][T14507] netlink: 'syz.2.2547': attribute type 5 has an invalid length.
[  355.384913][T14507] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2547'.
[  355.870454][T14552] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  355.880908][T14552] SET target dimension over the limit!
[  356.693155][T14604] netlink: zone id is out of range
[  356.699147][T14604] netlink: zone id is out of range
[  357.067284][T14626] veth0: entered promiscuous mode
[  357.285419][T14636] IPv6: Can't replace route, no match found
[  357.472961][T14644] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  358.092289][T14676] erspan0: entered promiscuous mode
[  358.112774][T14676] vlan0: entered promiscuous mode
[  358.233226][T14687] sctp: [Deprecated]: syz.4.2600 (pid 14687) Use of int in maxseg socket option.
[  358.233226][T14687] Use struct sctp_assoc_value instead
[  368.945526][    C0] bridge0: port 3(syz_tun) entered learning state
[  381.809595][T14708] netlink: 'syz.2.2606': attribute type 1 has an invalid length.
[  381.821786][T14708] netlink: 'syz.2.2606': attribute type 2 has an invalid length.
[  381.834535][T14713] __nla_validate_parse: 16 callbacks suppressed
[  381.834551][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'.
[  381.852308][T14713] bridge_slave_1: left allmulticast mode
[  381.856353][T14709] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  381.858969][T14713] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.884404][T14709] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2604'.
[  381.908825][T14713] bridge_slave_0: left allmulticast mode
[  381.914695][T14713] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.005995][T14713] vlan2 (unregistering): left promiscuous mode
[  382.027607][T14713] bridge0 (unregistering): left promiscuous mode
[  382.041516][T14713] bridge5: port 1(vlan2) entered disabled state
[  382.182170][T14727] nbd: must specify at least one socket
[  382.199450][T14733] bridge0: entered allmulticast mode
[  382.207012][T14727] nbd: must specify at least one socket
[  382.227127][T14727] nbd: must specify at least one socket
[  382.232847][T14727] nbd: must specify at least one socket
[  382.252445][T14727] nbd: must specify at least one socket
[  382.470882][T14753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'.
[  382.557711][T14762] xt_TPROXY: Can be used only with -p tcp or -p udp
[  382.746422][T14769] tap0: tun_chr_ioctl cmd 2148553947
[  382.803257][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2625'.
[  382.872396][T14777] syzkaller1: entered promiscuous mode
[  382.878210][T14777] syzkaller1: entered allmulticast mode
[  382.888804][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'.
[  382.901651][T14779] macvlan0: left promiscuous mode
[  382.912065][T14779] netlink: 'syz.2.2623': attribute type 1 has an invalid length.
[  382.935231][T14779] netlink: 'syz.2.2623': attribute type 2 has an invalid length.
[  383.023425][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'.
[  383.632932][T14825] netlink: 'syz.2.2638': attribute type 33 has an invalid length.
[  383.675833][T14825] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2638'.
[  383.784174][T14831] xt_hashlimit: overflow, try lower: 3/0
[  383.981557][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2640'.
[  384.289098][T14862] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2647'.
[  384.305262][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  384.311941][    C0] bridge0: topology change detected, propagating
[  384.347405][T14865] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  384.354962][T14865] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  384.400528][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'.
[  384.722398][T14889] netdevsim netdevsim0: Direct firmware load for -.€ failed with error -2
[  384.763435][T14889] netdevsim netdevsim0: Falling back to sysfs fallback for: -.€
[  384.963900][T14910] netlink: 'syz.1.2660': attribute type 10 has an invalid length.
[  385.498741][T14951] netlink: 'syz.4.2672': attribute type 10 has an invalid length.
[  385.574320][T14951] team0: Device veth0_vlan failed to register rx_handler
[  386.386772][T14973] IPVS: set_ctl: invalid protocol: 1 172.20.20.38:20003
[  386.408107][T14975] Bluetooth: hci0: unsupported parameter 33553
[  386.424691][T14975] Bluetooth: hci0: invalid length 5, exp 2 for type 8
[  387.052911][T14994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.438223][T15019] syzkaller0: entered promiscuous mode
[  387.443814][T15019] syzkaller0: entered allmulticast mode
[  387.558323][T15038] C: renamed from team_slave_0
[  387.570655][T15038] netlink: 'syz.4.2696': attribute type 1 has an invalid length.
[  387.592372][T15038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  387.683368][T14989] tipc: Disabling bearer <eth:syzkaller0>
[  387.719145][T15048] syzkaller0: entered promiscuous mode
[  387.726102][T15048] syzkaller0: entered allmulticast mode
[  387.817188][T15058] netlink: 'syz.3.2705': attribute type 83 has an invalid length.
[  388.100465][T15076] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  388.354904][T15084] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.371142][T15092] sctp: [Deprecated]: syz.1.2715 (pid 15092) Use of int in maxseg socket option.
[  388.371142][T15092] Use struct sctp_assoc_value instead
[  388.455423][T15100] __nla_validate_parse: 8 callbacks suppressed
[  388.455439][T15100] netlink: 564 bytes leftover after parsing attributes in process `syz.4.2716'.
[  388.471705][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2716'.
[  388.530492][T15109] netlink: 'syz.0.2720': attribute type 2 has an invalid length.
[  388.564481][T15100] netlink: 'syz.4.2716': attribute type 2 has an invalid length.
[  388.802893][T15132] netlink: 'syz.4.2724': attribute type 1 has an invalid length.
[  389.056129][T15140] netlink: 'syz.4.2724': attribute type 1 has an invalid length.
[  389.110640][T15147] vlan0: entered allmulticast mode
[  389.129763][T15147] bond0: entered allmulticast mode
[  389.198856][T15150] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.211796][T15150] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.388653][T15150] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.417227][T15150] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.590623][T15150] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.602761][T15150] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.623946][T15174] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2738'.
[  389.652699][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2738'.
[  389.664877][T15176] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  389.743405][T15150] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.763978][T15150] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.947584][   T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.967552][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.024443][ T7543] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.046809][ T7543] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.090565][ T7543] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.099581][ T7543] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.111944][T15207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2749'.
[  390.142140][ T7543] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.153083][ T7543] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.439873][T15231] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  390.449488][T15234] netlink: 'syz.3.2757': attribute type 21 has an invalid length.
[  390.459950][T15234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2757'.
[  390.611439][T15248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2755'.
[  390.688178][T15246] vlan2: entered allmulticast mode
[  390.701234][T15246] bridge_slave_0: entered allmulticast mode
[  390.912938][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'.
[  391.056275][T15278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2768'.
[  391.080185][T15283] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2769'.
[  391.850011][T15334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.933662][T15339] bridge0: port 2(batadv1) entered blocking state
[  391.940587][T15339] bridge0: port 2(batadv1) entered disabled state
[  391.948121][T15339] batadv1: entered allmulticast mode
[  391.968190][T15339] batadv1: entered promiscuous mode
[  392.057336][T15357] netlink: 'syz.0.2791': attribute type 4 has an invalid length.
[  392.205514][T15366] netlink: 'syz.0.2795': attribute type 1 has an invalid length.
[  392.216209][T15366] netlink: 'syz.0.2795': attribute type 1 has an invalid length.
[  392.266125][T15366] NCSI netlink: No device for ifindex 830110067
[  392.435540][   T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  392.444776][   T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  392.783070][T15410] C: left promiscuous mode
[  392.789569][T15409] openvswitch: netlink: Message has 512 unknown bytes.
[  392.798137][T15410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  392.863197][T15417] validate_nla: 1 callbacks suppressed
[  392.863219][T15417] netlink: 'syz.3.2811': attribute type 1 has an invalid length.
[  392.898188][T15417] netlink: 'syz.3.2811': attribute type 4 has an invalid length.
[  392.917624][T15417] netlink: 'syz.3.2811': attribute type 1 has an invalid length.
[  392.936805][T15417] netlink: 'syz.3.2811': attribute type 4 has an invalid length.
[  393.247281][T15439] can: request_module (can-proto-5) failed.
[  393.368732][T15454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.376433][T15454] syzkaller0: entered promiscuous mode
[  393.400365][T15454] syzkaller0: entered allmulticast mode
[  393.501227][T15466] __nla_validate_parse: 15 callbacks suppressed
[  393.501245][T15466] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2824'.
[  393.527722][T15466] netlink: 'syz.0.2824': attribute type 10 has an invalid length.
[  393.538535][T15464] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  393.548462][T15466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2824'.
[  393.750242][T15466] geneve0: entered promiscuous mode
[  393.757712][T15466] team0: Port device geneve0 added
[  393.776536][T15475] tipc: Resetting bearer <eth:syzkaller0>
[  393.813973][T15452] tipc: Resetting bearer <eth:syzkaller0>
[  393.831389][T15452] tipc: Disabling bearer <eth:syzkaller0>
[  393.850432][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'.
[  393.986054][T15486] can: request_module (can-proto-0) failed.
[  394.084348][T15490] netlink: 'syz.2.2829': attribute type 27 has an invalid length.
[  394.281352][T15505] netlink: 'syz.2.2833': attribute type 13 has an invalid length.
[  394.281352][T15503] netlink: 'syz.2.2833': attribute type 13 has an invalid length.
[  394.520893][T15503] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.540234][T15503] 8021q: adding VLAN 0 to HW filter on device team0
[  394.591892][T15503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.601613][T15503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.614615][T15503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  394.625430][T15503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  394.636928][T15503] 8021q: adding VLAN 0 to HW filter on device hsr0
[  394.658928][T15503] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  394.690451][T15505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  394.863703][T15525] bridge_slave_0: entered promiscuous mode
[  394.874795][T15525] bridge_slave_0: entered allmulticast mode
[  394.890229][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'.
[  395.050742][T15537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  395.065929][T15537] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  395.074830][T15537] gretap3: entered promiscuous mode
[  395.082166][T15537] gretap3: entered allmulticast mode
[  395.137345][T15539] bond11 (unregistering): Released all slaves
[  395.303805][T15556] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2851'.
[  395.755627][T15587] netlink: 'syz.1.2861': attribute type 12 has an invalid length.
[  395.763779][T15587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2861'.
[  395.816164][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'.
[  396.444432][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'.
[  396.485793][T15614] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  396.538459][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'.
[  396.558004][T15622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2873'.
[  396.584374][T15622] syzkaller1: entered promiscuous mode
[  396.591362][T15622] syzkaller1: entered allmulticast mode
[  397.127432][T15647] geneve2: entered promiscuous mode
[  397.132689][T15647] geneve2: entered allmulticast mode
[  397.177097][ T3581] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  397.194341][ T3581] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  397.229143][T15649] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.245241][T15649] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.296189][ T3581] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  397.438608][ T5826] bridge0: port 3(syz_tun) entered disabled state
[  397.473442][ T5826] syz_tun (unregistering): left allmulticast mode
[  397.485973][ T5826] syz_tun (unregistering): left promiscuous mode
[  397.492522][ T5826] bridge0: port 3(syz_tun) entered disabled state
[  397.500303][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  397.512272][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  397.524337][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  397.534678][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  397.544346][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  397.562258][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  397.570424][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  397.577859][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  397.597263][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  397.606216][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  397.661735][ T3581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.769754][ T3581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.794191][T15656] lo speed is unknown, defaulting to 1000
[  397.854025][T15667] syzkaller1: entered promiscuous mode
[  397.860065][T15667] syzkaller1: entered allmulticast mode
[  397.924236][ T3581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.049847][ T3581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.410261][ T3581] batadv2: left allmulticast mode
[  398.418024][ T3581] batadv2: left promiscuous mode
[  398.424858][ T3581] bridge0: port 4(batadv2) entered disabled state
[  398.437115][ T3581] bridge_slave_1: left allmulticast mode
[  398.442932][ T3581] bridge_slave_1: left promiscuous mode
[  398.451695][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.462529][ T3581] bridge_slave_0: left allmulticast mode
[  398.469768][ T3581] bridge_slave_0: left promiscuous mode
[  398.475612][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.393480][T15702] netlink: 'syz.1.2894': attribute type 32 has an invalid length.
[  399.406717][T15702] __nla_validate_parse: 2 callbacks suppressed
[  399.406736][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'.
[  399.422839][ T3581] dvmrp1 (unregistering): left allmulticast mode
[  399.453335][ T3581] bond3 (unregistering): (slave geneve3): Releasing active interface
[  399.490163][ T3581] team0: Port device geneve0 removed
[  399.504961][ T3581] bridge0 (unregistering): left allmulticast mode
[  399.666917][ T5833] Bluetooth: hci0: command tx timeout
[  399.989308][ T3581] bond0 (unregistering): Released all slaves
[  400.072856][ T3581] bond1 (unregistering): Released all slaves
[  400.160398][ T3581] bond2 (unregistering): Released all slaves
[  400.245759][ T3581] bond3 (unregistering): Released all slaves
[  400.326798][ T3581] bond4 (unregistering): Released all slaves
[  400.340418][ T3581] bond5 (unregistering): Released all slaves
[  400.352799][ T3581] bond6 (unregistering): Released all slaves
[  400.439060][ T3581] bond7 (unregistering): (slave wireguard1): Releasing backup interface
[  400.447529][ T3581] wireguard1: left promiscuous mode
[  400.454295][ T3581] bond7 (unregistering): Released all slaves
[  400.534529][ T3581] bond8 (unregistering): Released all slaves
[  400.598988][T15702] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  400.743823][T15708] netlink: 'syz.4.2895': attribute type 16 has an invalid length.
[  400.763844][T15714] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  400.780205][T15656] chnl_net:caif_netlink_parms(): no params data found
[  400.805323][T15708] netlink: 'syz.4.2895': attribute type 17 has an invalid length.
[  400.880677][T15708] 0ªî{X¹¦: left allmulticast mode
[  400.910963][T15708] 8021q: adding VLAN 0 to HW filter on device `
[  400.920952][T15708] 8021q: adding VLAN 0 to HW filter on device team0
[  400.932596][T15708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  400.966880][T15649] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.978443][T15649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.989301][T15649] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.031188][T15725] netlink: 'syz.2.2898': attribute type 23 has an invalid length.
[  401.091968][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2898'.
[  401.142963][T15649] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.157364][T15649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.168397][T15649] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.186511][T15656] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.193837][T15656] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.201432][T15656] bridge_slave_0: entered allmulticast mode
[  401.212641][T15656] bridge_slave_0: entered promiscuous mode
[  401.235589][T15656] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.243294][T15656] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.251445][T15656] bridge_slave_1: entered allmulticast mode
[  401.265578][T15656] bridge_slave_1: entered promiscuous mode
[  401.290141][T15649] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.302097][T15649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.312470][T15649] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.382553][T15656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.418653][T15656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.499899][T15656] team0: Port device team_slave_0 added
[  401.536358][T15656] team0: Port device team_slave_1 added
[  401.563774][ T7544] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  401.580707][ T7544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  401.598273][ T7544] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  401.626956][T15754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2908'.
[  401.667773][ T1157] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  401.679506][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  401.691063][ T1157] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  401.712279][T15656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.726629][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.745932][ T5833] Bluetooth: hci0: command tx timeout
[  401.758187][T15656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.772327][ T1157] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  401.781717][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  401.792000][ T1157] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  401.822428][T15656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.835403][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.862128][T15656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.891887][   T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  401.922925][   T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  401.950052][   T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  402.137632][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'.
[  402.263301][T15775] netlink: 'syz.1.2914': attribute type 11 has an invalid length.
[  402.283381][T15656] hsr_slave_0: entered promiscuous mode
[  402.298913][T15656] hsr_slave_1: entered promiscuous mode
[  402.306527][T15656] debugfs: 'hsr0' already exists in 'hsr'
[  402.312278][T15656] Cannot create hsr debugfs directory
[  402.439177][ T3581] : left promiscuous mode
[  402.519509][ T3581] tipc: Disabling bearer <udp:syz2>
[  402.526048][ T3581] tipc: Disabling bearer <udp:s>
[  402.546547][ T3581] tipc: Left network mode
[  402.920446][T15656] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  402.932544][T15656] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  402.948167][T15656] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  402.964770][T15656] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  403.117868][ T3581] hsr_slave_0: left promiscuous mode
[  403.382529][ T3581] team0 (unregistering): Port device team_slave_1 removed
[  403.417391][ T3581] team0 (unregistering): Port device C removed
[  403.701967][T15656] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.721363][T15656] 8021q: adding VLAN 0 to HW filter on device team0
[  403.734983][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.742189][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.761048][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.768218][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.827125][ T5833] Bluetooth: hci0: command tx timeout
[  403.978708][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.012824][T15656] veth0_vlan: entered promiscuous mode
[  404.027101][T15656] veth1_vlan: entered promiscuous mode
[  404.064340][T15656] veth0_macvtap: entered promiscuous mode
[  404.087288][T15656] veth1_macvtap: entered promiscuous mode
[  404.113012][T15656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.134529][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.152476][ T7389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.161694][ T7389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.179556][ T7389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.198119][ T7389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.253178][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.262124][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.288104][ T7544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.297338][ T7544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.755915][ T3581] IPVS: stop unused estimator thread 0...
[  405.905524][ T5833] Bluetooth: hci0: command tx timeout
[  427.108157][T15800] netlink: 'syz.0.2918': attribute type 28 has an invalid length.
[  427.127400][T15800] netlink: 'syz.0.2918': attribute type 3 has an invalid length.
[  427.145953][T15800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2918'.
[  427.199846][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2918'.
[  427.844708][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  427.860072][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  427.868680][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  427.883373][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  427.893679][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  427.930831][ T7544] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  427.942418][ T7544] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  427.967619][ T7544] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  427.996420][T15837] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2931'.
[  428.054663][T15832] lo speed is unknown, defaulting to 1000
[  428.082786][ T7544] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.125116][ T7544] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  428.134993][ T7544] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  428.246511][ T7544] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.265283][ T7544] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  428.306977][ T7544] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  428.421981][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2936'.
[  428.447031][T15863] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  428.468652][ T7544] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.482597][T15863] netlink: 'syz.4.2937': attribute type 11 has an invalid length.
[  428.489724][ T7544] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  428.519443][ T7544] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  428.672285][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2940'.
[  428.684910][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2940'.
[  428.685852][T15875] netlink: 'syz.0.2941': attribute type 10 has an invalid length.
[  428.850378][T15875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2941'.
[  428.865593][ T5896] IPVS: starting estimator thread 0...
[  428.865601][T15876] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  428.918547][T15880] netlink: 'syz.0.2941': attribute type 10 has an invalid length.
[  428.929216][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2941'.
[  429.008024][T15882] IPVS: using max 32 ests per chain, 76800 per kthread
[  429.050372][ T7544] bond2 (unregistering): (slave ip6gretap1): Releasing active interface
[  429.242852][ T7544] tipc: Disabling bearer <ib:gretap0>
[  429.610447][ T7544] bond1 (unregistering): Released all slaves
[  429.625206][ T7544] bond0 (unregistering): Released all slaves
[  429.639626][ T7544] bond2 (unregistering): Released all slaves
[  429.655290][ T7544] bond3 (unregistering): Released all slaves
[  429.677063][ T7544] bond4 (unregistering): Released all slaves
[  429.798560][ T7544] bond5 (unregistering): Released all slaves
[  429.816422][ T7544] bond6 (unregistering): (slave bond7): Releasing backup interface
[  429.824875][ T7544] bond6 (unregistering): Released all slaves
[  429.913097][ T7544] bond7 (unregistering): Released all slaves
[  429.986292][ T5833] Bluetooth: hci4: command tx timeout
[  430.001852][ T7544] bond8 (unregistering): Released all slaves
[  430.017972][ T7544] bond9 (unregistering): Released all slaves
[  430.103761][ T7544] bond10 (unregistering): (slave veth9): Releasing backup interface
[  430.113386][ T7544] bond10 (unregistering): Released all slaves
[  430.147138][T15875] batadv0: entered promiscuous mode
[  430.152835][T15875] batadv0: entered allmulticast mode
[  430.158904][T15875] bridge0: port 3(batadv0) entered blocking state
[  430.167189][T15875] bridge0: port 3(batadv0) entered disabled state
[  430.176734][T15875] bridge0: port 3(batadv0) entered blocking state
[  430.183299][T15875] bridge0: port 3(batadv0) entered forwarding state
[  430.221151][T15896] veth1_virt_wifi: mtu less than device minimum
[  430.332095][ T7544] tipc: Left network mode
[  430.429938][ T3581] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  430.439257][ T3581] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  430.479193][T15832] chnl_net:caif_netlink_parms(): no params data found
[  430.488789][T15917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2950'.
[  430.499838][T15917] netlink: 'syz.2.2950': attribute type 7 has an invalid length.
[  430.535630][T15917] netlink: 'syz.2.2950': attribute type 8 has an invalid length.
[  430.553628][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  430.916754][T15832] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.931724][T15832] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.939384][T15832] bridge_slave_0: entered allmulticast mode
[  430.948158][T15832] bridge_slave_0: entered promiscuous mode
[  430.962018][T15832] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.984410][T15832] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.991968][T15832] bridge_slave_1: entered allmulticast mode
[  431.003053][T15832] bridge_slave_1: entered promiscuous mode
[  431.181332][T15832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.227812][T15832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.403489][ T7544] hsr_slave_0: left promiscuous mode
[  431.423109][ T7544] veth1_vlan: left promiscuous mode
[  431.433035][ T7544] veth0_vlan: left promiscuous mode
[  431.488046][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.065533][ T5833] Bluetooth: hci4: command tx timeout
[  432.143007][T15832] team0: Port device team_slave_0 added
[  432.151423][T15832] team0: Port device team_slave_1 added
[  432.264254][T15832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.271749][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.285522][T15991] __nla_validate_parse: 4 callbacks suppressed
[  432.285540][T15991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2970'.
[  432.300005][T15832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.304817][T15991] openvswitch: netlink: Flow key attr not present in new flow.
[  432.361340][T15832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.368688][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.398230][T15832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.433195][T15995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.480430][T15990] syzkaller0: entered promiscuous mode
[  432.518589][T15990] syzkaller0: entered allmulticast mode
[  432.630174][T15990] tipc: Resetting bearer <eth:syzkaller0>
[  432.719018][T15988] tipc: Resetting bearer <eth:syzkaller0>
[  432.719173][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'.
[  432.753782][T15988] tipc: Disabling bearer <eth:syzkaller0>
[  432.777003][T15832] hsr_slave_0: entered promiscuous mode
[  432.787300][T15832] hsr_slave_1: entered promiscuous mode
[  432.793425][T15832] debugfs: 'hsr0' already exists in 'hsr'
[  432.799626][T15832] Cannot create hsr debugfs directory
[  432.996938][ T7544] IPVS: stop unused estimator thread 0...
[  433.011060][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'.
[  433.293201][T16030] syzkaller0: entered promiscuous mode
[  433.312656][T16030] syzkaller0: entered allmulticast mode
[  433.414697][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'.
[  433.449777][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'.
[  433.462268][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'.
[  433.473416][T16048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2985'.
[  433.533347][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'.
[  433.740108][T16062] delete_channel: no stack
[  433.749809][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'.
[  433.796519][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'.
[  433.861527][T15832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  433.878792][T15832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  433.894756][T15832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  433.913818][T15832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  433.980217][T16074] netlink: 'syz.0.2994': attribute type 1 has an invalid length.
[  434.145260][ T5833] Bluetooth: hci4: command tx timeout
[  434.181013][T16084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.203774][T15832] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.219581][T16084] syzkaller0: entered promiscuous mode
[  434.232564][T16084] syzkaller0: entered allmulticast mode
[  434.300574][T16090] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  434.314271][T16090] bond6 (unregistering): Released all slaves
[  434.353561][T16084] tipc: Resetting bearer <eth:syzkaller0>
[  434.376094][T15832] 8021q: adding VLAN 0 to HW filter on device team0
[  434.402635][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.409882][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.461564][T16084] bond0: entered allmulticast mode
[  434.471560][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.478765][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.488580][T16083] tipc: Resetting bearer <eth:syzkaller0>
[  434.514288][T16083] tipc: Disabling bearer <eth:syzkaller0>
[  434.689668][T15832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.735309][T15832] veth0_vlan: entered promiscuous mode
[  434.746298][T15832] veth1_vlan: entered promiscuous mode
[  434.772527][T15832] veth0_macvtap: entered promiscuous mode
[  434.781306][T15832] veth1_macvtap: entered promiscuous mode
[  434.799785][T15832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.813611][T15832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.827982][ T1157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.836893][ T1157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.848213][ T1157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.857296][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.920454][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.937300][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.961316][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.969832][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.226118][ T5833] Bluetooth: hci4: command tx timeout
[  453.730747][T16135] __nla_validate_parse: 7 callbacks suppressed
[  453.730765][T16135] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3011'.
[  453.758781][T16135] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3011'.
[  453.879159][T16144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3015'.
[  453.905124][T16144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3015'.
[  453.924386][T16144] netlink: 'syz.3.3015': attribute type 6 has an invalid length.
[  453.933359][T16144] netlink: 'syz.3.3015': attribute type 5 has an invalid length.
[  453.941721][T16144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3015'.
[  453.957108][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  454.056296][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3015'.
[  454.119786][T16155] netlink: 'syz.2.3018': attribute type 10 has an invalid length.
[  454.142136][T16155] bridge_slave_1: left promiscuous mode
[  454.178542][T16155] bridge_slave_1: entered promiscuous mode
[  454.200895][T16155] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  454.205656][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3019'.
[  454.333506][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'.
[  454.390026][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'.
[  454.559843][T16183] netlink: 'syz.1.3026': attribute type 19 has an invalid length.
[  454.586539][T16183] netlink: 'syz.1.3026': attribute type 19 has an invalid length.
[  455.206972][T16239] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  455.259850][T16239] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  455.527773][ T5833] Bluetooth: hci4: command tx timeout
[  455.648005][ T5832] bridge0: port 1(syz_tun) entered disabled state
[  455.694483][T15657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  455.704522][T15657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  455.713408][T15657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  455.722053][T15657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  455.723031][ T5832] syz_tun (unregistering): left allmulticast mode
[  455.729765][T15657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  455.754919][ T5832] syz_tun (unregistering): left promiscuous mode
[  455.761420][ T5832] bridge0: port 1(syz_tun) entered disabled state
[  455.823699][T16254] pim6reg: entered allmulticast mode
[  455.897380][T16268] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  455.935564][T16267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  455.971833][T16255] lo speed is unknown, defaulting to 1000
[  456.260877][T16290] netlink: 'syz.0.3050': attribute type 10 has an invalid length.
[  456.437019][T16300] netlink: 'syz.3.3054': attribute type 21 has an invalid length.
[  456.741800][T16310] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.749567][T16310] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.906838][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.927975][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.055733][ T3581] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.075377][ T3581] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.114678][T16320] tap0: tun_chr_ioctl cmd 1074025677
[  457.120428][T16320] tap0: linktype set to 65534
[  457.126153][ T3581] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.191335][ T3581] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.240472][T16330] Cannot find del_set index 0 as target
[  457.258728][T16327] team1: entered promiscuous mode
[  457.266759][T16327] team1: entered allmulticast mode
[  457.390656][T16340] netlink: 'syz.4.3066': attribute type 8 has an invalid length.
[  457.404995][T16338] syz.0.3064: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  457.438272][T16342] sctp: [Deprecated]: syz.3.3065 (pid 16342) Use of int in max_burst socket option deprecated.
[  457.438272][T16342] Use struct sctp_assoc_value instead
[  457.471180][T16255] chnl_net:caif_netlink_parms(): no params data found
[  457.478856][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz.0.3064 Not tainted syzkaller #0 PREEMPT(full) 
[  457.478882][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  457.478899][T16338] Call Trace:
[  457.478908][T16338]  <TASK>
[  457.478916][T16338]  dump_stack_lvl+0x189/0x250
[  457.478946][T16338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  457.478969][T16338]  ? __pfx__printk+0x10/0x10
[  457.478990][T16338]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  457.479018][T16338]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  457.479048][T16338]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  457.479079][T16338]  warn_alloc+0x214/0x310
[  457.479107][T16338]  ? stack_depot_save_flags+0x40/0x860
[  457.479134][T16338]  ? __pfx_warn_alloc+0x10/0x10
[  457.479163][T16338]  ? kasan_save_track+0x3e/0x80
[  457.479189][T16338]  ? __kasan_kmalloc+0x93/0xb0
[  457.479226][T16338]  ? xsk_setsockopt+0x4dc/0x8d0
[  457.479245][T16338]  ? do_sock_setsockopt+0x179/0x1b0
[  457.479267][T16338]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  457.479287][T16338]  ? do_syscall_64+0xfa/0xfa0
[  457.479310][T16338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.479340][T16338]  __vmalloc_node_range_noprof+0x125/0x12d0
[  457.479402][T16338]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  457.479435][T16338]  ? __kasan_kmalloc+0x93/0xb0
[  457.479469][T16338]  vmalloc_user_noprof+0xad/0xf0
[  457.479497][T16338]  ? xskq_create+0xbf/0x170
[  457.479521][T16338]  xskq_create+0xbf/0x170
[  457.479547][T16338]  xsk_init_queue+0xb0/0x110
[  457.479573][T16338]  xsk_setsockopt+0x4dc/0x8d0
[  457.479597][T16338]  ? __pfx_xsk_setsockopt+0x10/0x10
[  457.479621][T16338]  ? __pfx_aa_sk_perm+0x10/0x10
[  457.479648][T16338]  ? aa_sock_opt_perm+0xff/0x1b0
[  457.479679][T16338]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  457.479698][T16338]  ? __pfx_xsk_setsockopt+0x10/0x10
[  457.479720][T16338]  do_sock_setsockopt+0x179/0x1b0
[  457.479748][T16338]  __x64_sys_setsockopt+0x13f/0x1b0
[  457.479777][T16338]  do_syscall_64+0xfa/0xfa0
[  457.479800][T16338]  ? lockdep_hardirqs_on+0x9c/0x150
[  457.479823][T16338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.479843][T16338]  ? clear_bhb_loop+0x60/0xb0
[  457.479871][T16338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.479896][T16338] RIP: 0033:0x7f7c09f8eec9
[  457.479915][T16338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.479933][T16338] RSP: 002b:00007f7c0adf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  457.479955][T16338] RAX: ffffffffffffffda RBX: 00007f7c0a1e5fa0 RCX: 00007f7c09f8eec9
[  457.479971][T16338] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  457.479983][T16338] RBP: 00007f7c0a011f91 R08: 0000000000000004 R09: 0000000000000000
[  457.479996][T16338] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.480010][T16338] R13: 00007f7c0a1e6038 R14: 00007f7c0a1e5fa0 R15: 00007ffd7c6db4d8
[  457.480045][T16338]  </TASK>
[  457.480122][T16338] Mem-Info:
[  457.779588][T16338] active_anon:4988 inactive_anon:0 isolated_anon:0
[  457.779588][T16338]  active_file:3012 inactive_file:39979 isolated_file:0
[  457.779588][T16338]  unevictable:768 dirty:12 writeback:0
[  457.779588][T16338]  slab_reclaimable:12141 slab_unreclaimable:114456
[  457.779588][T16338]  mapped:28977 shmem:1354 pagetables:1039
[  457.779588][T16338]  sec_pagetables:0 bounce:0
[  457.779588][T16338]  kernel_misc_reclaimable:0
[  457.779588][T16338]  free:1312113 free_pcp:11653 free_cma:0
[  457.828333][ T5833] Bluetooth: hci2: command tx timeout
[  457.836506][T16338] Node 0 active_anon:20016kB inactive_anon:0kB active_file:12048kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115944kB dirty:24kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  457.870004][T16342] 8021q: VLANs not supported on lo
[  457.872295][T16338] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  457.906699][T16338] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  457.957043][T16338] lowmem_reserve[]: 0 2501 2503 2503 2503
[  457.962880][T16338] Node 0 DMA32 free:1348808kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19916kB inactive_anon:0kB active_file:12048kB inactive_file:159712kB unevictable:1536kB writepending:24kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:25852kB local_pcp:6648kB free_cma:0kB
[  458.037193][T16338] lowmem_reserve[]: 0 0 1 1 1
[  458.045427][T16338] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  458.099502][T16255] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.110732][T16255] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.120205][T16255] bridge_slave_0: entered allmulticast mode
[  458.128614][T16255] bridge_slave_0: entered promiscuous mode
[  458.139364][T16338] lowmem_reserve[]: 0 0 0 0 0
[  458.144347][T16255] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.151983][T16338] Node 1 Normal free:3884028kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21124kB local_pcp:8676kB free_cma:0kB
[  458.185227][T16255] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.192491][T16255] bridge_slave_1: entered allmulticast mode
[  458.201155][T16255] bridge_slave_1: entered promiscuous mode
[  458.274908][T16338] lowmem_reserve[]: 0 0 0 0 0
[  458.290803][T16255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.311810][T16338] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  458.332688][T16255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.346510][T16338] Node 0 DMA32: 498*4kB (M) 378*8kB (UM) 165*16kB (UM) 71*32kB (UME) 47*64kB (ME) 85*128kB (UME) 144*256kB (U) 58*512kB (UME) 29*1024kB (UME) 2*2048kB (UM) 298*4096kB (UM) = 1344776kB
[  458.366549][T16338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  458.378643][T16338] Node 1 Normal: 205*4kB (UE) 45*8kB (UME) 50*16kB (UME) 104*32kB (UME) 29*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3884028kB
[  458.397611][T16338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  458.407375][T16338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  458.416866][T16338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  458.427907][T16338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  458.437315][T16338] 44342 total pagecache pages
[  458.442367][T16338] 0 pages in swap cache
[  458.447510][T16338] Free swap  = 124996kB
[  458.451696][T16338] Total swap = 124996kB
[  458.458918][T16338] 2097051 pages RAM
[  458.469006][T16255] team0: Port device team_slave_0 added
[  458.474727][T16338] 0 pages HighMem/MovableOnly
[  458.482611][T16338] 424543 pages reserved
[  458.489131][T16338] 0 pages cma reserved
[  458.496979][T16255] team0: Port device team_slave_1 added
[  458.594771][T16255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.605649][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.636640][T16255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.652034][T16255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.659190][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.686497][T16255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.741276][T16389] __nla_validate_parse: 12 callbacks suppressed
[  458.741294][T16389] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3081'.
[  458.768833][T16255] hsr_slave_0: entered promiscuous mode
[  458.775633][T16255] hsr_slave_1: entered promiscuous mode
[  458.781792][T16255] debugfs: 'hsr0' already exists in 'hsr'
[  458.788060][T16255] Cannot create hsr debugfs directory
[  458.825167][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'.
[  459.069311][T16255] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.080537][T16255] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.106692][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3085'.
[  459.122000][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3085'.
[  459.140251][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'.
[  459.157330][T16407] netlink: 4520 bytes leftover after parsing attributes in process `syz.2.3087'.
[  459.170646][T16255] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.182307][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'.
[  459.196857][T16255] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.212132][T16402] : renamed from hsr0
[  459.222773][T16402] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3085'.
[  459.278261][T16255] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.299872][T16255] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.354666][T16255] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.367583][T16255] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.514646][T16429] openvswitch: netlink: Tunnel attr 138 out of range max 16
[  459.551657][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'.
[  459.588281][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'.
[  459.600547][T16255] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  459.613207][T16255] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  459.631385][T16255] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  459.659530][T16255] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  459.723287][T16444] netlink: 'syz.0.3097': attribute type 1 has an invalid length.
[  459.731615][T16444] netlink: 'syz.0.3097': attribute type 4 has an invalid length.
[  459.743716][T16440] bridge0: port 3(vlan2) entered blocking state
[  459.751880][T16454] netlink: 'syz.0.3097': attribute type 1 has an invalid length.
[  459.752641][T16440] bridge0: port 3(vlan2) entered disabled state
[  459.763742][T16454] netlink: 'syz.0.3097': attribute type 4 has an invalid length.
[  459.767963][T16440] vlan2: entered allmulticast mode
[  459.780056][T16440] bridge0: entered allmulticast mode
[  459.792116][T16440] vlan2: left allmulticast mode
[  459.797979][T16440] bridge0: left allmulticast mode
[  459.852652][T16458] netlink: 'syz.0.3099': attribute type 1 has an invalid length.
[  459.880693][T16458] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  459.906075][ T5833] Bluetooth: hci2: command tx timeout
[  459.989120][T16462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.037360][T16255] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.067790][T16255] 8021q: adding VLAN 0 to HW filter on device team0
[  460.112828][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.120054][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.137981][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.145219][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.149160][T16475] netlink: 'syz.2.3104': attribute type 4 has an invalid length.
[  460.436908][T16490] openvswitch: netlink: IP tunnel dst address not specified
[  460.480329][T16488] netlink: 'syz.2.3108': attribute type 8 has an invalid length.
[  460.668607][T16255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.747582][T16255] veth0_vlan: entered promiscuous mode
[  460.762411][T16255] veth1_vlan: entered promiscuous mode
[  460.797879][T16515] netlink: 'syz.2.3113': attribute type 1 has an invalid length.
[  460.829730][T16255] veth0_macvtap: entered promiscuous mode
[  460.839186][T16255] veth1_macvtap: entered promiscuous mode
[  460.859835][T16255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.880531][T16255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.893808][ T1157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.903132][ T1157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.913305][ T1157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.923169][ T1157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.947251][T16519] team1: entered promiscuous mode
[  460.952304][T16519] team1: entered allmulticast mode
[  461.494394][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.512428][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.612304][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.632892][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.870941][ T3581] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.912359][ T3581] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  461.971960][ T7389] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.995635][ T5833] Bluetooth: hci2: command tx timeout
[  462.021763][ T3581] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.141649][T16551] pim6reg1: entered promiscuous mode
[  462.158869][T16551] pim6reg1: entered allmulticast mode
[  462.494966][T16561] team0: Device geneve2 is up. Set it down before adding it as a team port
[  462.630250][T15657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  462.640602][T15657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  462.663620][T15657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  462.671996][T15657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  462.680434][T15657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  462.690553][T16565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.833749][T16566] lo speed is unknown, defaulting to 1000
[  462.981261][T16582] netlink: 'syz.0.3137': attribute type 1 has an invalid length.
[  463.049282][T16582] bond2 (unregistering): Released all slaves
[  463.071967][T16589] sctp: Trying to GSO but underlying device doesn't support it.
[  463.324879][T16600] netlink: 'syz.1.3140': attribute type 14 has an invalid length.
[  463.398292][T16606] gretap0: entered promiscuous mode
[  463.426373][T16600] 0ªî{X¹¦: renamed from gretap0
[  463.441112][T16600] 0ªî{X¹¦: left promiscuous mode
[  463.447127][T16600] 0ªî{X¹¦: entered allmulticast mode
[  463.457808][T16600] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  463.662116][T16619] bridge0: port 4(syz_tun) entered blocking state
[  463.669983][T16619] bridge0: port 4(syz_tun) entered disabled state
[  463.676789][T16619] syz_tun: entered allmulticast mode
[  463.687498][T16619] syz_tun: entered promiscuous mode
[  463.695653][T16619] bridge0: port 4(syz_tun) entered blocking state
[  463.702171][T16619] bridge0: port 4(syz_tun) entered forwarding state
[  463.719519][T16615] bridge0: port 4(syz_tun) entered disabled state
[  463.726189][T16615] bridge0: port 3(batadv0) entered disabled state
[  463.733076][T16615] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.741877][T16615] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.777049][T16615] bridge0: port 4(syz_tun) entered blocking state
[  463.783657][T16615] bridge0: port 4(syz_tun) entered forwarding state
[  463.790584][T16615] bridge0: port 3(batadv0) entered blocking state
[  463.797160][T16615] bridge0: port 3(batadv0) entered forwarding state
[  463.804085][T16615] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.811324][T16615] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.818831][T16615] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.826064][T16615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.842815][T16615] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  463.953487][T16566] chnl_net:caif_netlink_parms(): no params data found
[  464.018370][T16637] lo speed is unknown, defaulting to 1000
[  464.066377][ T5833] Bluetooth: hci2: command tx timeout
[  464.288272][T16566] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.307079][T16566] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.314353][T16566] bridge_slave_0: entered allmulticast mode
[  464.328410][T16566] bridge_slave_0: entered promiscuous mode
[  464.361510][T16566] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.375820][T16566] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.392103][T16566] bridge_slave_1: entered allmulticast mode
[  464.400166][T16566] bridge_slave_1: entered promiscuous mode
[  464.467563][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.496586][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.536196][T16663] __nla_validate_parse: 18 callbacks suppressed
[  464.536214][T16663] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3158'.
[  464.664440][T16566] team0: Port device team_slave_0 added
[  464.718171][T16566] team0: Port device team_slave_1 added
[  464.731459][T16673] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  464.791250][ T5833] Bluetooth: hci1: command tx timeout
[  464.839719][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.847294][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.874116][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.947093][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.954078][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.987977][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.001440][T16673] syz.0.3160 (16673) used greatest stack depth: 17128 bytes left
[  465.158264][T16566] hsr_slave_0: entered promiscuous mode
[  465.181482][T16566] hsr_slave_1: entered promiscuous mode
[  465.200329][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3166'.
[  465.221067][T16692] erspan0: entered promiscuous mode
[  465.266017][T16692] erspan0: entered allmulticast mode
[  465.313933][T16709] validate_nla: 5 callbacks suppressed
[  465.313951][T16709] netlink: 'syz.3.3169': attribute type 1 has an invalid length.
[  465.328675][T16709] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3169'.
[  465.342054][T16692] netlink: 'syz.0.3167': attribute type 5 has an invalid length.
[  465.520239][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.552762][T16716] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  465.561365][T16716] netlink: 'syz.0.3172': attribute type 2 has an invalid length.
[  465.570577][T16716] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  465.581381][T16716] netlink: 'syz.0.3172': attribute type 12 has an invalid length.
[  465.669319][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'.
[  465.705993][T16716] syz_tun: left allmulticast mode
[  465.711063][T16716] syz_tun: left promiscuous mode
[  465.720246][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'.
[  465.722020][T16716] bridge0: port 4(syz_tun) entered disabled state
[  465.741024][T16716] bridge0: port 3(batadv0) entered disabled state
[  465.753759][T16716] bridge_slave_1: left allmulticast mode
[  465.761104][T16716] bridge_slave_1: left promiscuous mode
[  465.767466][T16716] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.781421][T16716] bridge_slave_0: left allmulticast mode
[  465.788607][T16716] bridge_slave_0: left promiscuous mode
[  465.794508][T16716] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.819173][T16716] bond0: (slave bridge0): Releasing backup interface
[  465.879445][T16566] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.890681][T16566] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.978556][T16566] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.998728][T16566] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.097518][T16566] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.112220][T16566] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.126829][T16751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.136220][T16752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.201702][T16566] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.212351][T16566] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.827509][T16753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.828329][T16566] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  466.865473][ T5833] Bluetooth: hci1: command tx timeout
[  466.911693][T16566] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  466.943431][T16566] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  466.986556][T16566] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  466.994253][T16770] xt_ecn: cannot match TCP bits for non-tcp packets
[  467.059167][T16772] bond2: option resend_igmp: invalid value (32767)
[  467.067276][T16772] bond2: option resend_igmp: allowed values 0 - 255
[  467.076823][T16772] bond2 (unregistering): Released all slaves
[  467.099758][T16768] netlink: 'syz.0.3186': attribute type 5 has an invalid length.
[  467.124997][T16765] syzkaller1: entered promiscuous mode
[  467.132306][T16765] syzkaller1: entered allmulticast mode
[  467.198820][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'.
[  467.444517][T16566] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.478674][T16805] vxcan1: entered promiscuous mode
[  467.495889][T16802] netlink: 'syz.1.3192': attribute type 3 has an invalid length.
[  467.503906][T16802] netlink: 'syz.1.3192': attribute type 3 has an invalid length.
[  467.567162][T16566] 8021q: adding VLAN 0 to HW filter on device team0
[  467.602900][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.610101][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.628769][T16804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3194'.
[  467.642895][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.650070][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.672367][T16816] xt_socket: unknown flags 0xe4
[  468.182298][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.769834][T16566] veth0_vlan: entered promiscuous mode
[  468.792330][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'.
[  468.811830][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'.
[  468.815348][T16566] veth1_vlan: entered promiscuous mode
[  468.868876][T16566] veth0_macvtap: entered promiscuous mode
[  468.888326][T16566] veth1_macvtap: entered promiscuous mode
[  468.914930][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.945215][ T5833] Bluetooth: hci1: command tx timeout
[  469.060942][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.103548][   T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.121385][ T7389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.136409][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'.
[  469.157627][ T7389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.192845][ T7389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.301790][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.321485][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.375762][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.395383][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.443522][T16911] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  469.582457][T16912] netlink: 'syz.2.3220': attribute type 5 has an invalid length.
[  469.615823][T16912] __nla_validate_parse: 2 callbacks suppressed
[  469.615842][T16912] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3220'.
[  470.503631][T16958] veth0_to_bridge: entered promiscuous mode
[  470.507471][T16951] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3233'.
[  471.025422][ T5833] Bluetooth: hci1: command tx timeout
[  471.385734][T16960] veth0_to_bridge: left promiscuous mode
[  471.793210][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3241'.
[  471.851188][T16977] netlink: 'syz.3.3241': attribute type 16 has an invalid length.
[  471.885209][T16977] netlink: 'syz.3.3241': attribute type 17 has an invalid length.
[  471.990991][T16977] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.999983][T16977] 8021q: adding VLAN 0 to HW filter on device team0
[  472.034883][T16977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.087557][ T1157] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  472.139953][ T1157] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  472.177047][ T1157] bond0: now running without any active interface!
[  472.302124][T16997] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3248'.
[  472.369708][T16997] 8021q: VLANs not supported on gre0
[  472.424430][T15657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  472.435645][T15657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  472.445693][T15657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.454687][T15657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.465676][T15657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.493632][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.614602][T17001] lo speed is unknown, defaulting to 1000
[  472.615278][T17015] netlink: 'syz.4.3252': attribute type 1 has an invalid length.
[  472.699476][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.888773][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.951392][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'.
[  472.985270][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'.
[  473.020280][T17032] netlink: 'syz.4.3257': attribute type 15 has an invalid length.
[  473.074852][T17029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.136527][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.228308][T17029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.356534][T17029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.481158][T17029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.529418][T17064] tipc: Started in network mode
[  473.534713][T17064] tipc: Node identity ce05e0991599, cluster identity 4711
[  473.544715][T17064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.552102][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3266'.
[  473.600989][T17064] veth1_to_bond: entered allmulticast mode
[  473.628575][T17064] tipc: Resetting bearer <eth:syzkaller0>
[  473.659000][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'.
[  473.879682][T17063] tipc: Disabling bearer <eth:syzkaller0>
[  473.920464][T17084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3271'.
[  473.983659][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'.
[  474.322499][T17098] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  474.560713][T15657] Bluetooth: hci3: command tx timeout
[  475.878954][   T36] bond2 (unregistering): (slave geneve2): Releasing active interface
[  476.137047][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.148395][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.159086][   T36] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  476.167596][   T36] dummy0: left promiscuous mode
[  476.174956][   T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  476.184537][   T36] bridge_slave_1: left promiscuous mode
[  476.191446][   T36] bond0 (unregistering): Released all slaves
[  476.282439][   T36] bond1 (unregistering): Released all slaves
[  476.294874][   T36] bond2 (unregistering): Released all slaves
[  476.307851][   T36] bond3 (unregistering): Released all slaves
[  476.321330][   T36] bond4 (unregistering): Released all slaves
[  476.337883][   T36] bond5 (unregistering): Released all slaves
[  476.356092][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.497857][T17110] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  476.522712][   T36] tipc: Disabling bearer <udp:syz2>
[  476.528743][   T36] tipc: Disabling bearer <udp:s>
[  476.534480][   T36] tipc: Left network mode
[  476.585550][ T7543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.593806][ T7543] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.627886][T15657] Bluetooth: hci3: command tx timeout
[  476.699577][T17001] chnl_net:caif_netlink_parms(): no params data found
[  476.719029][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.739148][T17119] __nla_validate_parse: 1 callbacks suppressed
[  476.739177][T17119] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3280'.
[  477.004476][T17001] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.041783][T17001] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.049657][T17001] bridge_slave_0: entered allmulticast mode
[  477.060525][T17001] bridge_slave_0: entered promiscuous mode
[  477.102913][T17001] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.111365][T17001] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.119482][T17001] bridge_slave_1: entered allmulticast mode
[  477.127771][T17001] bridge_slave_1: entered promiscuous mode
[  477.267520][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.289440][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.355706][T17145] macvtap1: entered promiscuous mode
[  477.362763][T17145] vlan0: entered promiscuous mode
[  477.374019][T17145] macvtap1: entered allmulticast mode
[  477.379712][T17145] vlan0: entered allmulticast mode
[  477.384973][T17145] veth0_vlan: entered allmulticast mode
[  477.511960][T17147] macvtap2: entered promiscuous mode
[  477.517921][T17147] macvtap2: entered allmulticast mode
[  477.524347][T17148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3285'.
[  477.640141][T17001] team0: Port device team_slave_0 added
[  477.654981][T17001] team0: Port device team_slave_1 added
[  477.762403][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.773468][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.803577][T17161] xt_CT: No such helper "syz1"
[  477.805474][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.821205][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.830365][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.857285][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.049306][T17172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'.
[  478.058874][T17171] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3294'.
[  478.110197][T17001] hsr_slave_0: entered promiscuous mode
[  478.116717][T17001] hsr_slave_1: entered promiscuous mode
[  478.123017][T17001] debugfs: 'hsr0' already exists in 'hsr'
[  478.129136][T17001] Cannot create hsr debugfs directory
[  478.144162][   T36] hsr_slave_0: left promiscuous mode
[  478.151278][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.159040][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.167202][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.174580][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.267516][   T36] pim6reg527 (unregistering): left allmulticast mode
[  478.712360][   T36] team0 (unregistering): Port device team_slave_1 removed
[  478.715287][T15657] Bluetooth: hci3: command tx timeout
[  478.761187][   T36] team0 (unregistering): Port device team_slave_0 removed
[  478.901790][T17193] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  479.312429][T17201] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  479.351937][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'.
[  479.469735][   T36] IPVS: stop unused estimator thread 0...
[  479.540749][T17218] nftables ruleset with unbound set
[  479.749571][T17225] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  479.757928][T17225] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  479.771660][T17225] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  479.790282][T17225] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  479.803502][T17001] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  479.803549][T17225] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  479.831593][T17001] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  479.843031][T17001] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  479.855401][T17001] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  479.970464][T17001] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.000502][T17001] 8021q: adding VLAN 0 to HW filter on device team0
[  480.014301][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.021514][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.044777][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.052025][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.296033][T17245] x_tables: duplicate underflow at hook 1
[  480.509868][T17251] syzkaller0: entered promiscuous mode
[  480.519603][T17251] syzkaller0: entered allmulticast mode
[  480.556957][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.581767][T17259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3317'.
[  480.606568][T17259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3317'.
[  480.718787][T17268] netlink: 'syz.0.3319': attribute type 11 has an invalid length.
[  480.735001][T17001] veth0_vlan: entered promiscuous mode
[  480.756321][T17270] lo speed is unknown, defaulting to 1000
[  480.777994][T17001] veth1_vlan: entered promiscuous mode
[  480.787713][T15657] Bluetooth: hci3: command tx timeout
[  480.812949][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'.
[  480.891297][T17001] veth0_macvtap: entered promiscuous mode
[  480.939941][T17001] veth1_macvtap: entered promiscuous mode
[  480.996917][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3323'.
[  481.008132][T17284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.035304][T17284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.048060][T17284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.064499][T17284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.119857][T17281] tipc: Started in network mode
[  481.127108][T17281] tipc: Node identity 065ab305cf2d, cluster identity 4711
[  481.147919][T17281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  481.163382][T17285] syzkaller0: entered promiscuous mode
[  481.174045][T17285] syzkaller0: entered allmulticast mode
[  481.208670][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.259746][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.284232][T17285] tipc: Resetting bearer <eth:syzkaller0>
[  481.309628][T17285] tipc: Disabling bearer <eth:syzkaller0>
[  481.368052][ T7389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.420793][ T7389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.459246][T17297] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  481.471469][ T7389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.492247][ T7389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.510779][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'.
[  481.648671][T17300] smc: net device gre0 applied user defined pnetid SYZ1
[  481.755449][T17312] __nla_validate_parse: 3 callbacks suppressed
[  481.755470][T17312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3333'.
[  481.778928][T17315] xt_bpf: check failed: parse error
[  481.788050][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'.
[  481.800617][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'.
[  481.939697][ T7543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.962930][ T7543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.965123][T17320] netlink: 'syz.1.3337': attribute type 12 has an invalid length.
[  482.121513][T17320] bond1: option primary_reselect: invalid value (255)
[  482.131417][T17320] bond1 (unregistering): Released all slaves
[  482.339058][ T7544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.363587][ T7544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.448611][T17345] netlink: 'syz.3.3343': attribute type 9 has an invalid length.
[  482.469464][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'.
[  482.495319][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'.
[  482.511006][T17347] netlink: 'syz.2.3236': attribute type 1 has an invalid length.
[  482.694299][T17357] bond1 (unregistering): Released all slaves
[  482.863510][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'.
[  482.880833][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3350'.
[  482.904523][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'.
[  482.922720][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3350'.
[  482.965477][T17377] netlink: 'syz.4.3349': attribute type 1 has an invalid length.
[  482.978108][T17377] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3349'.
[  483.067383][T17382] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.075180][T17382] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.089036][T17382] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.096238][T17382] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.103768][T17382] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.111253][T17382] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.136713][T17382] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  483.310157][T17401] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  483.494194][T17412] syzkaller0: entered promiscuous mode
[  483.503278][T17412] syzkaller0: entered allmulticast mode
[  483.512468][T17412] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  483.809169][T17433] unsupported nla_type 52263
[  484.819726][T17514] Cannot find add_set index 0 as target
[  485.281068][ T8014] IPVS: starting estimator thread 0...
[  485.385449][T17540] IPVS: using max 30 ests per chain, 72000 per kthread
[  485.699797][T17567] batadv_slave_1: entered promiscuous mode
[  485.710715][T17566] batadv_slave_1: left promiscuous mode
[  485.776731][T17569] openvswitch: netlink: Missing valid actions attribute.
[  485.783816][T17569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.916125][T17579] validate_nla: 8 callbacks suppressed
[  485.916144][T17579] netlink: 'syz.0.3415': attribute type 3 has an invalid length.
[  486.229111][T17597] netlink: 'syz.3.3420': attribute type 1 has an invalid length.
[  486.248339][T17597] netlink: 'syz.3.3420': attribute type 1 has an invalid length.
[  486.402765][T17612] netlink: 'syz.4.3424': attribute type 8 has an invalid length.
[  486.477849][ T7544] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  486.515128][ T7544] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  486.544590][ T7544] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  486.561506][ T7544] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  486.607726][T17622] netlink: 'syz.1.3427': attribute type 2 has an invalid length.
[  486.655262][ T8015] IPVS: starting estimator thread 0...
[  486.746082][T17628] IPVS: using max 31 ests per chain, 74400 per kthread
[  486.904697][T17648] openvswitch: netlink: Message has 4 unknown bytes.
[  486.919459][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.143289][T17671] __nla_validate_parse: 30 callbacks suppressed
[  487.143305][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'.
[  487.783062][T17710] netlink: 'syz.1.3452': attribute type 7 has an invalid length.
[  487.790938][T17711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3451'.
[  487.792630][T17711] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3451'.
[  487.820491][T17711] vlan2: entered allmulticast mode
[  487.826246][T17711] syz_tun: entered allmulticast mode
[  487.863854][T17713] netlink: 'syz.1.3453': attribute type 11 has an invalid length.
[  488.040955][T17721] tipc: Started in network mode
[  488.049062][T17721] tipc: Node identity 080211, cluster identity 4711
[  488.056343][T17721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.213646][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'.
[  488.245392][T17738] bridge_slave_1: left allmulticast mode
[  488.251068][T17738] bridge_slave_1: left promiscuous mode
[  488.261250][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3461'.
[  488.262051][T17738] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.319167][T17738] bridge_slave_0: left allmulticast mode
[  488.328826][T17738] bridge_slave_0: left promiscuous mode
[  488.345285][T17738] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.630318][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'.
[  488.687011][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'.
[  488.760991][T17764] xt_hashlimit: max too large, truncated to 1048576
[  488.776993][T17764] netlink: 'syz.0.3469': attribute type 6 has an invalid length.
[  488.889799][T17764] netlink: 'syz.0.3469': attribute type 6 has an invalid length.
[  488.980889][T17785] xt_hashlimit: max too large, truncated to 1048576
[  488.988961][T17764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  488.993332][T17784] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  489.053051][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'.
[  489.175359][ T8015] tipc: Node number set to 134353152
[  489.383687][T17810] netlink: 'syz.3.3481': attribute type 1 has an invalid length.
[  489.466144][T17812] veth5: entered allmulticast mode
[  489.522382][T17816] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3483'.
[  489.887578][   T30] audit: type=1800 audit(1760322074.753:3): pid=17824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3483" name="memory.events" dev="tmpfs" ino=354 res=0 errno=0
[  489.917455][T17847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3492'.
[  490.162822][T17860] dvmrp0: entered allmulticast mode
[  490.258548][T17867] macvtap1: entered promiscuous mode
[  490.266571][T17867] macvtap1: entered allmulticast mode
[  490.272645][T17867] bond_slave_0: entered promiscuous mode
[  490.278720][T17867] bond_slave_1: entered promiscuous mode
[  490.285414][T17867] bond0: entered allmulticast mode
[  490.290616][T17867] bond_slave_0: entered allmulticast mode
[  490.297670][T17867] bond_slave_1: entered allmulticast mode
[  490.303540][T17867] bond0: entered promiscuous mode
[  490.310754][T17867] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  490.320084][T17867] team0: Device macvtap1 failed to register rx_handler
[  490.328395][T17867] bond0: left allmulticast mode
[  490.333430][T17867] bond_slave_0: left allmulticast mode
[  490.339616][T17867] bond_slave_1: left allmulticast mode
[  490.345311][T17867] bond0: left promiscuous mode
[  490.350572][T17867] bond_slave_0: left promiscuous mode
[  490.356056][T17867] bond_slave_1: left promiscuous mode
[  490.536274][T17883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.659482][T17891] nbd: must specify a size in bytes for the device
[  491.315445][T17925] netlink: 'syz.0.3519': attribute type 29 has an invalid length.
[  491.325663][T17925] netlink: 'syz.0.3519': attribute type 29 has an invalid length.
[  491.405739][T17933] bond0: (slave bond_slave_0): Releasing backup interface
[  491.424659][T17933] bond0: (slave bond_slave_1): Releasing backup interface
[  491.440061][T17933] team0: Port device team_slave_0 removed
[  491.551136][T17933] team0: Port device team_slave_1 removed
[  491.561048][T17933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.589850][T17933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.609998][T17933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  491.660193][T17949] netlink: 'syz.1.3528': attribute type 10 has an invalid length.
[  491.746900][T17955] xt_CT: You must specify a L4 protocol and not use inversions on it
[  492.026772][T17968] netlink: 'syz.3.3537': attribute type 1 has an invalid length.
[  492.037910][T17972] netlink: 'syz.0.3538': attribute type 1 has an invalid length.
[  492.040876][T17977] netem: unknown loss type 0
[  492.050700][T17977] netem: change failed
[  492.178791][T17971] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  492.202765][T17985] Bluetooth: MGMT ver 1.23
[  492.225685][T17985] Bluetooth: hci0: invalid length 39, exp 2 for type 23
[  492.268229][T17990] __nla_validate_parse: 7 callbacks suppressed
[  492.268248][T17990] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3544'.
[  492.392708][T17990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.587755][T18013] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  492.613806][T18017] netlink: 'syz.2.3551': attribute type 12 has an invalid length.
[  492.781127][T18031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3555'.
[  492.808836][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'.
[  492.849468][T18039] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  492.891988][T18040] netlink: 'syz.0.3559': attribute type 1 has an invalid length.
[  492.901448][T18039] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  492.910926][T18040] netlink: 'syz.0.3559': attribute type 2 has an invalid length.
[  492.919344][T18039] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  492.951299][T18040] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  493.270847][T18063] netlink: 'syz.0.3563': attribute type 2 has an invalid length.
[  493.315168][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3565'.
[  493.751080][T18106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.984919][T18125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3580'.
[  494.026047][T18124] geneve2: entered promiscuous mode
[  494.032894][T18124] geneve2: entered allmulticast mode
[  494.042984][ T7544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.057156][ T7544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.068381][ T7544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.109365][ T7544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.240214][T18138] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3582'.
[  494.383525][T18150] netlink: 'syz.0.3584': attribute type 16 has an invalid length.
[  494.421886][T18150] erspan0: left promiscuous mode
[  494.433802][T18150] erspan0: left allmulticast mode
[  494.476898][T18158] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3591'.
[  494.494653][T18150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.936596][T18183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3598'.
[  494.950343][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'.
[  495.001440][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3600'.
[  495.264680][T18210] ip6t_srh: unknown srh match flags  5F28
[  495.540801][T18225] syzkaller1: entered promiscuous mode
[  495.556012][T18225] syzkaller1: entered allmulticast mode
[  495.682797][T18238] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  496.189507][T18259] bond1: entered allmulticast mode
[  496.230983][T18259] 8021q: adding VLAN 0 to HW filter on device bond1
[  496.268596][T18259] bridge0: port 3(bond1) entered blocking state
[  496.299268][T18259] bridge0: port 3(bond1) entered disabled state
[  496.317841][T15657] Bluetooth: hci3: command tx timeout
[  496.334055][T18259] bond1: entered promiscuous mode
[  496.346693][T18259] bridge0: port 3(bond1) entered blocking state
[  496.353162][T18259] bridge0: port 3(bond1) entered forwarding state
[  496.675876][ T7543] bridge0: port 3(bond1) entered disabled state
[  496.861604][T18300] validate_nla: 4 callbacks suppressed
[  496.861622][T18300] netlink: 'syz.4.3622': attribute type 1 has an invalid length.
[  496.911710][T18300] netlink: 'syz.4.3622': attribute type 1 has an invalid length.
[  497.515556][T18351] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  497.610859][T18356] __nla_validate_parse: 7 callbacks suppressed
[  497.610878][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'.
[  497.626517][T18356] netlink: 'syz.2.3640': attribute type 5 has an invalid length.
[  497.635847][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3640'.
[  497.677923][T18361] netlink: 'syz.4.3641': attribute type 1 has an invalid length.
[  497.729890][T18369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3641'.
[  497.790052][T18361] bond1: entered promiscuous mode
[  497.806700][T18361] 8021q: adding VLAN 0 to HW filter on device bond1
[  497.834552][T18372] 8021q: adding VLAN 0 to HW filter on device bond1
[  497.843154][T18372] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  497.854364][T18372] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  497.869318][T18372] bond1: (slave wireguard0): making interface the new active one
[  497.877388][T18372] wireguard0: entered promiscuous mode
[  497.885179][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'.
[  497.890740][T18372] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  498.030523][T18387] bridge2: entered promiscuous mode
[  498.189041][T18405] netlink: 'syz.1.3654': attribute type 1 has an invalid length.
[  498.227504][T18406] netlink: 'syz.1.3654': attribute type 1 has an invalid length.
[  498.298082][T18420] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3659'.
[  498.324111][T18410] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  498.337008][T18410] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  498.666973][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'.
[  498.788153][T18441] erspan0: entered promiscuous mode
[  498.871482][T18447] netlink: 'syz.3.3667': attribute type 6 has an invalid length.
[  498.895757][T18447] netlink: 'syz.3.3667': attribute type 1 has an invalid length.
[  498.903519][T18447] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3667'.
[  498.935816][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'.
[  498.953409][T18450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3669'.
[  499.038865][T18450] bond2 (unregistering): Released all slaves
[  499.109298][T18472] netlink: 'syz.0.3673': attribute type 8 has an invalid length.
[  499.336980][T18472] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  499.361665][T18483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3676'.
[  499.500350][T18486] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  499.831849][T18507] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  499.991161][T18529] macvtap3: entered promiscuous mode
[  500.004372][T18529] macvtap3: entered allmulticast mode
[  500.059735][T18533] macvtap3: entered promiscuous mode
[  500.089881][T18533] macvtap3: entered allmulticast mode
[  500.280435][T18551] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode
[  500.289042][T18551] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode
[  500.510420][T18577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  500.517741][T18577] IPv6: NLM_F_CREATE should be set when creating new route
[  500.524988][T18577] IPv6: NLM_F_CREATE should be set when creating new route
[  500.532269][T18577] IPv6: NLM_F_CREATE should be set when creating new route
[  500.542164][T18577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  500.550315][T18577] netlink: 'syz.2.3704': attribute type 1 has an invalid length.
[  500.560256][T18581] lo speed is unknown, defaulting to 1000
[  500.631330][T18585] 8021q: adding VLAN 0 to HW filter on device bond3
[  500.640990][T18585] bond2: (slave bond3): making interface the new active one
[  500.648909][T18585] bond2: (slave bond3): Enslaving as an active interface with an up link
[  501.109044][T18615] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  501.178202][   T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  501.197400][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  501.207865][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  501.226249][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  501.412093][T18633] veth0: entered promiscuous mode
[  501.552847][T18647] Bluetooth: MGMT ver 1.23
[  501.755960][T18664] syzkaller1: entered promiscuous mode
[  501.763539][T18664] syzkaller1: entered allmulticast mode
[  501.773417][T18667] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  501.949590][T18675] bridge0: entered allmulticast mode
[  502.042223][T18684] netlink: 'syz.4.3735': attribute type 1 has an invalid length.
[  502.142896][T18692] netlink: 'syz.4.3738': attribute type 10 has an invalid length.
[  502.161209][T18692] team0: Device dummy0 failed to register rx_handler
[  502.179355][T18692] netlink: 'syz.4.3738': attribute type 10 has an invalid length.
[  502.349146][T18706] gretap2: entered promiscuous mode
[  502.354511][T18706] gretap2: entered allmulticast mode
[  502.508423][T18714] openvswitch: netlink: Missing key (keys=40, expected=80)
[  502.520998][T18716] tipc: Enabled bearer <udp:s>, priority 10
[  502.592904][T18723] bond4: (slave bond_slave_1): Device is not our slave
[  502.600839][T18723] bond4: option active_slave: invalid value (bond_slave_1)
[  502.612023][T18723] bond4 (unregistering): Released all slaves
[  503.105970][T18765] netlink: 'syz.0.3757': attribute type 10 has an invalid length.
[  503.113571][T18764] __nla_validate_parse: 19 callbacks suppressed
[  503.113590][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'.
[  503.135224][T18765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3757'.
[  503.149364][T18765] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  503.159656][T18765] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  503.171868][T18765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  503.287066][T18764] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.294777][T18764] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.420011][T18764] veth1_to_bond: left allmulticast mode
[  503.453253][T18764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.473843][T18764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.493522][T18784] netlink: 'syz.2.3758': attribute type 1 has an invalid length.
[  503.645127][ T8017] tipc: Node number set to 3380065029
[  504.300376][T18764] vlan2: left allmulticast mode
[  504.306348][T18764] syz_tun: left allmulticast mode
[  504.314967][T18764] bond1: left promiscuous mode
[  504.320765][T18764] wireguard0: left promiscuous mode
[  504.338189][T18764] bridge2: left promiscuous mode
[  504.471649][T18787] bond4 (unregistering): Released all slaves
[  504.532484][T18791] ip6tnl2: entered promiscuous mode
[  504.542377][T18791] ip6tnl2: entered allmulticast mode
[  504.564675][ T7543] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.574506][ T7543] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.588305][T18796] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3760'.
[  504.599186][T18796] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3760'.
[  504.648334][ T7543] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.669738][ T7543] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.755838][ T7543] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.779456][ T7543] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.796396][ T7543] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.824805][ T7543] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.064380][T18831] syzkaller0: entered promiscuous mode
[  505.071223][T18831] syzkaller0: entered allmulticast mode
[  505.306587][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'.
[  506.588154][T18862] team0: Device ip6gre1 is of different type
[  506.708020][T18868] 
[  506.710398][T18868] ======================================================
[  506.717415][T18868] WARNING: possible circular locking dependency detected
[  506.724455][T18868] syzkaller #0 Not tainted
[  506.728875][T18868] ------------------------------------------------------
[  506.735888][T18868] syz.2.3779/18868 is trying to acquire lock:
[  506.741951][T18868] ffffffff8f639558 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  506.751111][T18868] 
[  506.751111][T18868] but task is already holding lock:
[  506.758476][T18868] ffff88814d65d470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  506.767712][T18868] 
[  506.767712][T18868] which lock already depends on the new lock.
[  506.767712][T18868] 
[  506.778100][T18868] 
[  506.778100][T18868] the existing dependency chain (in reverse order) is:
[  506.787101][T18868] 
[  506.787101][T18868] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  506.795093][T18868]        lock_acquire+0x120/0x360
[  506.800109][T18868]        _raw_spin_lock_bh+0x36/0x50
[  506.805384][T18868]        nr_rt_device_down+0x12a/0x720
[  506.810838][T18868]        nr_device_event+0x137/0x150
[  506.816118][T18868]        notifier_call_chain+0x1b6/0x3e0
[  506.821737][T18868]        __dev_notify_flags+0x18d/0x2e0
[  506.827268][T18868]        netif_change_flags+0xe8/0x1a0
[  506.832714][T18868]        dev_change_flags+0x130/0x260
[  506.838093][T18868]        dev_ioctl+0x7b4/0x1150
[  506.842937][T18868]        sock_do_ioctl+0x22c/0x300
[  506.848039][T18868]        sock_ioctl+0x576/0x790
[  506.852888][T18868]        __se_sys_ioctl+0xfc/0x170
[  506.858006][T18868]        do_syscall_64+0xfa/0xfa0
[  506.863052][T18868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.869459][T18868] 
[  506.869459][T18868] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  506.877275][T18868]        lock_acquire+0x120/0x360
[  506.882294][T18868]        _raw_spin_lock_bh+0x36/0x50
[  506.887574][T18868]        nr_rt_device_down+0xa9/0x720
[  506.892933][T18868]        nr_device_event+0x137/0x150
[  506.898207][T18868]        notifier_call_chain+0x1b6/0x3e0
[  506.903831][T18868]        __dev_notify_flags+0x18d/0x2e0
[  506.909363][T18868]        netif_change_flags+0xe8/0x1a0
[  506.914809][T18868]        dev_change_flags+0x130/0x260
[  506.920168][T18868]        dev_ioctl+0x7b4/0x1150
[  506.925003][T18868]        sock_do_ioctl+0x22c/0x300
[  506.930125][T18868]        sock_ioctl+0x576/0x790
[  506.934963][T18868]        __se_sys_ioctl+0xfc/0x170
[  506.940064][T18868]        do_syscall_64+0xfa/0xfa0
[  506.945080][T18868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.951486][T18868] 
[  506.951486][T18868] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  506.959396][T18868]        validate_chain+0xb9b/0x2140
[  506.964677][T18868]        __lock_acquire+0xab9/0xd20
[  506.969859][T18868]        lock_acquire+0x120/0x360
[  506.974866][T18868]        _raw_spin_lock_bh+0x36/0x50
[  506.980138][T18868]        nr_rt_ioctl+0x390/0xd50
[  506.985066][T18868]        sock_do_ioctl+0xd9/0x300
[  506.990090][T18868]        sock_ioctl+0x576/0x790
[  506.994927][T18868]        __se_sys_ioctl+0xfc/0x170
[  507.000025][T18868]        do_syscall_64+0xfa/0xfa0
[  507.005037][T18868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.011436][T18868] 
[  507.011436][T18868] other info that might help us debug this:
[  507.011436][T18868] 
[  507.021646][T18868] Chain exists of:
[  507.021646][T18868]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  507.021646][T18868] 
[  507.035457][T18868]  Possible unsafe locking scenario:
[  507.035457][T18868] 
[  507.042892][T18868]        CPU0                    CPU1
[  507.048249][T18868]        ----                    ----
[  507.053599][T18868]   lock(&nr_node->node_lock);
[  507.058351][T18868]                                lock(nr_node_list_lock);
[  507.065450][T18868]                                lock(&nr_node->node_lock);
[  507.072720][T18868]   lock(nr_neigh_list_lock);
[  507.077382][T18868] 
[  507.077382][T18868]  *** DEADLOCK ***
[  507.077382][T18868] 
[  507.085505][T18868] 2 locks held by syz.2.3779/18868:
[  507.090680][T18868]  #0: ffffffff8f6395b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  507.100158][T18868]  #1: ffff88814d65d470 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  507.109808][T18868] 
[  507.109808][T18868] stack backtrace:
[  507.115677][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.2.3779 Not tainted syzkaller #0 PREEMPT(full) 
[  507.115697][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  507.115707][T18868] Call Trace:
[  507.115715][T18868]  <TASK>
[  507.115723][T18868]  dump_stack_lvl+0x189/0x250
[  507.115744][T18868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.115761][T18868]  ? __pfx__printk+0x10/0x10
[  507.115775][T18868]  ? stack_trace_save+0x9c/0xe0
[  507.115801][T18868]  print_circular_bug+0x2ee/0x310
[  507.115823][T18868]  check_noncircular+0x134/0x160
[  507.115844][T18868]  validate_chain+0xb9b/0x2140
[  507.115867][T18868]  ? look_up_lock_class+0x74/0x170
[  507.115889][T18868]  ? register_lock_class+0x51/0x320
[  507.115906][T18868]  __lock_acquire+0xab9/0xd20
[  507.115924][T18868]  ? nr_rt_ioctl+0x390/0xd50
[  507.115940][T18868]  lock_acquire+0x120/0x360
[  507.115954][T18868]  ? nr_rt_ioctl+0x390/0xd50
[  507.115972][T18868]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  507.116002][T18868]  ? nr_rt_ioctl+0x390/0xd50
[  507.116018][T18868]  _raw_spin_lock_bh+0x36/0x50
[  507.116035][T18868]  ? nr_rt_ioctl+0x390/0xd50
[  507.116051][T18868]  nr_rt_ioctl+0x390/0xd50
[  507.116072][T18868]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  507.116088][T18868]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.116111][T18868]  ? apparmor_capable+0x137/0x1b0
[  507.116130][T18868]  ? capable+0x89/0xe0
[  507.116147][T18868]  ? nr_ioctl+0x1b1/0x3b0
[  507.116171][T18868]  sock_do_ioctl+0xd9/0x300
[  507.116195][T18868]  ? __pfx_sock_do_ioctl+0x10/0x10
[  507.116223][T18868]  sock_ioctl+0x576/0x790
[  507.116245][T18868]  ? __pfx_sock_ioctl+0x10/0x10
[  507.116267][T18868]  ? __fget_files+0x3a0/0x420
[  507.116281][T18868]  ? __fget_files+0x2a/0x420
[  507.116295][T18868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  507.116314][T18868]  ? __pfx_sock_ioctl+0x10/0x10
[  507.116334][T18868]  __se_sys_ioctl+0xfc/0x170
[  507.116355][T18868]  do_syscall_64+0xfa/0xfa0
[  507.116374][T18868]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.116393][T18868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.116409][T18868]  ? clear_bhb_loop+0x60/0xb0
[  507.116427][T18868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.116443][T18868] RIP: 0033:0x7f2ffed8eec9
[  507.116459][T18868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.116475][T18868] RSP: 002b:00007f2fffc4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  507.116492][T18868] RAX: ffffffffffffffda RBX: 00007f2ffefe5fa0 RCX: 00007f2ffed8eec9
[  507.116505][T18868] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  507.116515][T18868] RBP: 00007f2ffee11f91 R08: 0000000000000000 R09: 0000000000000000
[  507.116526][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.116536][T18868] R13: 00007f2ffefe6038 R14: 00007f2ffefe5fa0 R15: 00007ffc6d510e08
[  507.116555][T18868]  </TASK>
[  507.140886][T18877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  507.248608][T18873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3779'.
[  507.316987][T18880] tunl0: entered promiscuous mode
[  507.435452][T18880] tunl0: entered allmulticast mode