last executing test programs:

1.988222401s ago: executing program 0 (id=561):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r1 = epoll_create1(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='qdisc_dequeue\x00', r3}, 0x18)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="f400000000dc8b71d5decf66cc00000000000000000000000000000000114b720f00"/57, 0x39}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x2004})
epoll_wait(r1, &(0x7f0000000380), 0x0, 0x1fffc002)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x2000c800)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1cc}}, 0x801)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
sendfile(r5, r9, 0x0, 0xffffffff003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockname$llc(r10, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xf0)

1.827516712s ago: executing program 2 (id=566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x7f}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x80000001, 0x7f, 0xe, 0x80, 0xf, 0x3800000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x58}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007b0140000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044014)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x48005, 0x3f00}, [@IFLA_MAP={0x24, 0xe, {0xffffffffb05c8eab, 0x0, 0x9, 0x8, 0x7, 0x5}}]}, 0x44}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r7, 0x7, 0x8, 0x1, 0x12, {{0xa, 0x4, 0x1, 0x13, 0x28, 0x66, 0x0, 0x2d, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@generic={0x83, 0x5, "6ee732"}, @generic={0x7, 0xc, "1c2d9c38afc74b77cac5"}]}}}}})
r8 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

1.684672346s ago: executing program 2 (id=570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="00e9b72f", 0x4}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000)
write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xfdef)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x29, @mcast2}, 0x18)
write$tun(r3, &(0x7f0000000640)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x1e, 0x0, @wg=@data={0x4, 0xaaa7, 0x1, "69888f31f561"}}}}}}}, 0x44)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xea}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x40841)

1.50774176s ago: executing program 2 (id=572):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x668}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
listen(r0, 0x5)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f12174cc7e9a3346f1b28", 0x96}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r4 = accept(r0, &(0x7f0000000080)=@can={0x1d, <r5=>0x0}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000400), 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r8, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/100, 0x64, 0x0, &(0x7f0000000200)=""/144, 0x90}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f6164625985379ec2d210"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
r11 = socket(0x10, 0x803, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0x5}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x20040054)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000009c0)={'ip6gre0\x00', <r15=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000a00)={'gre0\x00', <r16=>r5, 0x7, 0x8, 0x14000000, 0x9, {{0x20, 0x4, 0x3, 0x1c, 0x80, 0x68, 0x0, 0x80, 0x0, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x4, "710e"}, @rr={0x7, 0x27, 0x76, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @multicast2, @multicast2, @remote, @multicast1]}, @noop, @rr={0x7, 0x7, 0x18, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xf6, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @end, @generic={0x86, 0xe, "bf7db08e22164d1386d73f0b"}, @lsrr={0x83, 0xf, 0x6, [@loopback, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xb8, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d40)={0x45c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r13}, {0x288, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x81, 0x6, 0x6}, {0xe, 0x7, 0x1, 0x80000001}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r15}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8018}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x14044880}, 0x20000040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1)

1.10582543s ago: executing program 0 (id=580):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x100006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', r3, 0x8, 0x80, 0x7, 0xffffffff, {{0x3d, 0x4, 0x0, 0xb, 0xf4, 0x64, 0x0, 0x0, 0x0, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x54, 0x9e, 0x3, 0x5, [{@multicast2, 0xdf}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x58a}, {@private=0xa010101, 0xfffffff8}, {@multicast1, 0xb777}, {@private=0xa010102, 0x8}, {@remote, 0x9}, {@local, 0x10001}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@broadcast, 0xfffffff8}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xb, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}, {@rand_addr=0x64010101, 0x2}, {@private=0xa010100, 0x7}]}, @rr={0x7, 0x7, 0x35, [@private=0xa010101]}, @ssrr={0x89, 0x7, 0x7a, [@loopback]}, @rr={0x7, 0x3, 0x2e}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0x27, 0xce, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @multicast1, @multicast1]}, @rr={0x7, 0x2b, 0x6c, [@dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102, @multicast1, @remote, @multicast1, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}]}}}}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800b00010062726964df59d0fb87cd676500001800028005002600010000000c002e000100"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={r5, 0x1, 0x4, @remote}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x490003, 0x0)

967.661473ms ago: executing program 1 (id=581):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', <r4=>0x0, 0x1, 0x80, 0x4, 0x60, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x66, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@rr={0x7, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x23}, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x3, [{@multicast1}, {@loopback, 0xedb5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xd0a0}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x4, 0x6, 0x4, 0x42, @private1, @loopback, 0x7800, 0x8, 0x2, 0x3}})
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x0, @void}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x124, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000084}, 0x60008000)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15287}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1)

898.11632ms ago: executing program 0 (id=582):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="8f10238e6b610000000000000006", 0x0, 0x4aa2, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40deffff0f0003040000000000740028d3efe0cf78db0b82bcd610d6ceee9326569c426d76d9ac5e650376b94c1c107cd62ff0d23f", @ANYRES32=0x0, @ANYBLOB="0008000087520100200012800b0001006272696467650000100002800c002e000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

897.369097ms ago: executing program 1 (id=583):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x2002, 0x0, 0x0, 0xc, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x90)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000087520100300012800b0001006272696467650000200002800c002e000000000001000000051979000000807e2e00240000000200"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

786.81873ms ago: executing program 1 (id=584):
unshare(0x26020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=<r5=>0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=<r6=>r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
unshare(0x24060400)
r7 = socket(0x2, 0x2, 0x1)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x25, 0x2, @void}, 0x10)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r8}, 0x8)
close(r9)
syz_open_procfs$namespace(0x0, &(0x7f0000000fc0)='ns/pid\x00')
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(r7, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6cc5f11e}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6f33121e}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ac4507c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1946202d}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "e35aa2830bf863ffba68c97e2d68e0410c0e64b0e90e8a581bf18c2b51f05a1e3b9a86daaae972a7675a813c1f4b7039dff76cfd45b6e38d663d8a9c39129562e533eddaaecac43744f89f93d498c6f48b13d9a6c20706de3a00c3c26e954f993b766ce5ac70f68e81002a787d10a6fa3ddafe432d733908ee17bf4195"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "9a391d6a933a87375c20c73be2af5cc15a142beb7ee0627d6e32c0ef1aaf8886c90d2df8e8f249b5b39b1bd0c7ba4690c2754352eb96f8ca22ea3747403b639b2f33c4fb1ee77dff632dc2501e9f35aec9aa65bb2629027095b3832c96dba45e24c52532bc6fe3da22a716765098f4b598c8e97bed3374e9596b03b257a2a0ec8424b94e9435f2913d3d86c5696ba34c710c8a997b1c1e0e0a5565012b000f6d2524d3edbe607dc09a81ec53102de469b9c0b759287404a51a5cb30ccad38f54c74f7549a5fe4957ab60e8cd8b6ece2f6fcdbdf9007677c35289b7630b28"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x35c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
write$cgroup_subtree(r11, &(0x7f0000001000)=ANY=[@ANYRES8=r7, @ANYRES64=r6, @ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES64=r5, @ANYRESOCT=r4], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r11, 0x0)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x0, r9}, 0x18)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000cc0)={<r13=>r2, 0x0, 0x0, 0x7})
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x2e, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000009000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b700b703167100000000850000008300b9f4e912a64c3d0700005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000001d900100000000001867000003000000000000000002000018570000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0x8, 0xe7, &(0x7f0000000d40)=""/231, 0x40f00, 0x32, '\x00', 0x0, 0x19, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2a2ac, r11, 0x7, &(0x7f0000000e40)=[r12, r9, r9, r13], &(0x7f0000000e80)=[{0x0, 0x5, 0xa, 0x1}, {0x2, 0x3, 0xc, 0xb}, {0x4, 0x1, 0x1, 0x7}, {0x1, 0x1, 0x5, 0x1}, {0x4, 0x2, 0x8, 0x8}, {0x3, 0x2, 0x9, 0xa}, {0x5, 0x5, 0xc, 0xa}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r14, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r15=>0x0}, 0x8)
r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r15, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r16, r14, 0x4, r14}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@call={0x85, 0x0, 0x0, 0x92}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{0x4, 0x1, 0x6, 0x5}, {0x0, 0x1, 0x2}, {0x5, 0x4, 0xf, 0x4}, {0x0, 0x4, 0xd, 0xc}, {0x5, 0x2, 0xb, 0xb}, {0x5, 0x4, 0xa, 0xa}], 0x10, 0x80000000}, 0x94)

228.322402ms ago: executing program 2 (id=585):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40901}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0)

228.032274ms ago: executing program 0 (id=586):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0002000000000000000000000000004000000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000240)={'pimreg0\x00', 0xffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg2\x00', <r6=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
r7 = accept4(r4, 0x0, 0x0, 0x80000)
sendto$inet(r7, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0)
accept4$tipc(r7, 0x0, 0x0, 0x800)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005})
epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0xaa)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff0000000080000000000000003d420c2de844c10f2026fd545603ea3c3515782cf188a81c5db75d2d9695a6091fb48bb197eca83cf82c9889e5fbcaf4ffa7f06f621e52ea9fbe4a29670be68dc3699ffd16117d9cf8fc00fc0dca44233620fa8127709484a07ab54f2c9a2779e2ee6df8178bd323a4c9b4d7563bd6fb9dd48c6bd709e92d07037a43fbd7b894bba60c5e4b104171186e1513b02c1c5bb963a76b3fa23cacb11087d0a0c063e071751f0a7a52540bddabe273ce07bbf65eb71094d8e8653590abf02a33b4a0a0c1b9e6ecf935fec17601912ffe16a475f2e58b8bd5defbbf82d5", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800b00010062726964676500001800028005002600010000000c002e000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

156.232763ms ago: executing program 2 (id=587):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffa7a}, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) (async)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee)
write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x100)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, 0x0, 0x40000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

97.62497ms ago: executing program 1 (id=588):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r3}, 0x18) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r1, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), 0x4) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendto$inet6(r4, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) (async, rerun: 64)
writev(r4, &(0x7f0000001180)=[{&(0x7f0000001240)="06367d6d", 0x4}], 0x1) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)

97.02554ms ago: executing program 0 (id=589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000008c0)="1cc2cf490f20e3d4cb1caa38371e27629577dee407fe124cff44e58b678505e7c2d7c5abda2f5dab6bbf489f801b071c22153fc1e88a75cd72f9d2debd3f97b8301ed5d19018803d1f7e1a22aad8d19ae35fed5a8db02e2f02d46b2b78260496fc0c701b4db58383606047cbc28f46d38526248f3971ea4c55473a26754ffcc414a85d2e0bd8d8697968b104e95a52418f26d9aa5dbb2a1ccb988bde09970b66dc841cbc9034008bb5dc917affa8e36e")
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x47810, 0x24003}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0xff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x200}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6, 0x37, 0x0, 0x6}]}, 0x10)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r10, 0x29, 0xd1, &(0x7f0000000040)=0xffffffff, 0x4)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000a80)={<r11=>0x0}, &(0x7f0000000ac0)=0xc)
sendmsg$nl_netfilter(r9, &(0x7f0000000dc0)={&(0x7f0000000a40), 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x270, 0x13, 0x3, 0x101, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x8}, [@generic="9ecb8b296334870599a513e7541bfabee5d5aa81ab52c6200bbdba036d35ca90ad0adde36c8a5e9448b4201d673484ae414375b687ed30600de1731e8824d60320fe2d0e8d634b4c0a0878988ab1e4fa7833fa11fb15dbb89b46e33b80a30219e1ede0543cba61f372e2a7888bd23943c0d9e7f4e1f478b86ba986f9f54f98c3945ab3074bfb5322af8b83056ca9fb8bb05b6d5b372a92bf0a1a86cbb60b39a5e0c4a57863ffd92aca9d03dc4f5aece78cc9d70bcc00ad6d5e09d6e034fe20f6d32e5769ad305cfcb0b341f613743cc561d28afeb5f98fe8cfb95d45a7f2baf8fcd6f5", @typed={0x8, 0x90, 0x0, 0x0, @uid=r4}, @nested={0xb0, 0x39, 0x0, 0x1, [@generic="0fc8564073a9326694d676b0ca62a4714a7bec2613407a8bd448510f95746f060a4304c533eef3eae4f446b6de511ed38b563a7a5618fd2f3e4b0850caec7badd4af4fc5d7ebc67b1d9a70d548058995", @typed={0x8, 0x4f, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xe}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @typed={0x32, 0x101, 0x0, 0x0, @binary="4f91502e20a7d1baf02c5becf7262fea7dfe17e62faac03da1578fed1aeb1ac860c3edd328cc0eb528c366503dcd"}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r4}]}, @typed={0x8, 0x104, 0x0, 0x0, @pid=r11}, @generic="1b34e554c627b261372637cb20418646b5cdff177ba299bec515b9d3afe08249fc0bf08807bd340208c89a249346311e523a133625ad24aea4622fa7159db3ab8bf5029d68ca42a779ce49a51033d993a9bdd248a1fb73177bfcd583cd6fe8b2937342377e0ea1d32eecc91b97e3b337b7076ec2a6422564427fccf3233dbb88de740190861d7ff1973828f267bb4633651b6b25ba519c3791827ffe139b3e8a778b3880279e99c50e1290799c9c58a6b831829eeaa58f"]}, 0x270}, 0x1, 0x0, 0x0, 0x20004000}, 0x85)
setsockopt$inet_int(r8, 0x0, 0x21, &(0x7f0000000280)=0x3, 0x1)
r12 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000009c0)='%ps    \x00'}, 0x20)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r14, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r14, 0x84, 0x20, &(0x7f0000001d00), &(0x7f0000001d40)=0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r15=>0x0}, &(0x7f00000003c0)=0xc)
listen(r14, 0x3ff)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x20, 0x28, 0x100, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x91, 0x0, 0x0, @pid=r3}, @nested={0x8, 0x4d, 0x0, 0x1, [@nested={0x4, 0x68}]}]}, 0x20}, {&(0x7f0000000440)={0x2d8, 0x3d, 0x800, 0x70bd27, 0x25dfdbfd, "", [@nested={0x226, 0x26, 0x0, 0x1, [@typed={0x9, 0xc7, 0x0, 0x0, @str=')!])\x00'}, @generic="80a7f4442ca4c7ab0d52d9ca7af2111ebdcbeb2f31ba8c3740006712da62701ec0eb424eef95c1ef1d05ed74039d60b6379bdc576e35f4e2eaefa9858b01ac3157ef0cac25efc7dbc0150d49f321707c7cd9a73ed1beeb63320dce23e29fe7d71c16bdb4e1aeb095f7973202", @typed={0x84, 0x129, 0x0, 0x0, @binary="91ca6d1a57371db17eaa27499d16b3464ecc3e32b8db5aea391524920225852d8f788673d3a1b5f4e3c7492a7c30542173137283bb14e394431c7395485889bbdea8b18beab27dac4f49e9b217c804cfab5e349ec7fd126c55851a0fb4a472b3ed9084a4447ac64b02fb6ee5a6f0187ca00e34a6f225aa8b5efe5ac8d6f25a41"}, @generic="4cf6051e80b34b090d96c65f19fbaf2100f815dfdd5a1c74c4b40fc66017a8206ce5f166b5ed24be87b9eb36e4c3834d46c1ad8765af132e88fd4f497a977b1f778a76de01ce803f47", @generic="28f9499cc4b239c3e0623142da34880d8963f77f6f40414cfb43c4d353a5dd5e2e24765f4856ffc4fc17d112e30489f22a2e4e5d84fff2a783ce45d2a02b5737ad294b49730b0837465caaa9a2a8b6734d9c574cb423d06c7cb9ef7ece5b798fdacf4034954af8b47eb79981db3816786fa18f793cea480f2323c5120b246a67c878c1ed9a8863e0ca694c7be3923fce63e67e6099b2729d8d8b88f5808a8b629c6d4c5a55b9732c736f53d1b8258bcf46bb396db41d4d2bd0", @typed={0x8, 0x36, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="8a99aa744ff3cb57fcf13209be550944592e070d07f8eee88662d70355099d2d0c2d7b2cfd510b93a645700887e67e08414212ebad920101", @generic="2dcbaf13bb9acefef20339b58b1b00bc382bf87bcbfb14e36b4c718562bec3bd40bec7c930fd77aa4d78dbe2016847b2bd6e280bb160b66860654a16d2d0497a9f204282e223bfd3caec8f929ceed88120afdf9f18338a29678000c1315e7e011bc1d94ad3c897"]}, 0x2d8}], 0x2, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [r7, r8, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r15}}}], 0x40, 0x20000801}, 0x24000040)

96.21726ms ago: executing program 2 (id=590):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x0, 0x9e, 0x0, 0x0, 0x8, 0x10000, @value=r0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r2, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e25}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="f65dc06008d337ca6fd32a87b23b0ca6bdc47c2376b33da264e4f3b29a6f69e471ce8ce4915f96f45cd95d6d7bb25a5d1935311a22cb83a740933811571e33b9b12eb04e33857edd74046f37dad45aa05856f1258d8164077bbdaf9f9768c8d4527c20b152ca1eca5af8375e2bb69b4c12111578afd5e2d8fb76232243047f10c721d6ba7005e4cd404da032df95f8a7eeab95ed03fd9af6498db22cb911672bae0e39bfb06932d147d8b43a7cfdc1dfae9fcde4171ebac9c4afd0fd5ed9770e25436ac53bd76fade4df192d0c43d190d70142a51c331aca9493", 0xda}, {&(0x7f0000000500)="33ec018e56a7a77bf15e3505922de3cd9dde6edc4bf0dd8e213688043915ea3cc1d17c4f1c1d6f26282d3574cd75f0c404e9b908ed9d9a3821133abde4cd9cc088108de429a0e6c31b51405d92c31330d3fb2cd008081d73c34e057bce558ecd238d36b4e0d35bd8386a982dab9e1b8028d9923c24cce616fd6f3ca09e7dc11cc5d7e1b48640ef257c5ec4a7863467ced819e54fa728ad1aefa35ceff4c082e26df0c8e8d325a13d4576878e4f4de96a4d68b1953264afb998c70d6ce1", 0xbd}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000007c0)="0719e04580973538763c12dc18f7b6596b22664c023d6682605bd1df28ea6efac733c5d99e7974507ffd1671b0d32a23194a9022b6b3758f307ae2a925c92066fa5e707281a1946f16c1adbc675ecf2efa8aacd7634ababa18681f11ce89f326c69f455f039a86f54f8fc653fa2893d4fabd22a6ebed2cde81d573468736a549445a35c0c456fb22efb0f3d522010f5f1a4e5377e892783be31446f3e2", 0x9d}, {&(0x7f0000000880)="823f0a739f732953914b48ef43c38390024a706ac204da022813bbd421b65104311d8fdf55b485c594f8dd817cf0037e130bbd8c96bdf6cd8884c4dd67e6b80cb650be47176dd2f4a37c556cae68a1d3648d94bcf9ff7d5bb55fcd8bdb3060c1737fead174c67fd75a1a61b9e2e1cde130433eac2c9795a47417da8f9d35bd8d3a20a9a63b28b9c54607e10546f6c388df16daee86b86817ac6ef2d7f392411aec011db6c3f4f9eb17", 0xa9}, {&(0x7f0000000d40)}], 0x6, &(0x7f0000002d40)}}], 0x2, 0x40)
socket$key(0xf, 0x3, 0x2)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0xfffffffd, {0x2, 0x20, 0x80, 0x0, 0xfd, 0x0, 0xc8, 0x7}}, 0x1c}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
r4 = socket$inet(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000080)="bbb376b7bd831c7c00000000000000000000000000000000000000000000ef0b00000000000000", 0x27}, {&(0x7f00000000c0)="c7a26c6b1e38a32eff9d181ee85612ba049bc3593c8fc0ae8f1a079bae667206c90cc3c5342e80a962de9b78a4c5ee0aa6aeff35", 0x34}], 0x3}, 0x0)

18.15751ms ago: executing program 1 (id=591):
socket$nl_route(0x10, 0x3, 0x0)

16.30998ms ago: executing program 0 (id=592):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvfrom(r0, 0x0, 0xd, 0x3, 0x0, 0xfffffdd1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)

0s ago: executing program 1 (id=593):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0)={0x4, 0xfffff001, 0x1, 0xffffffff, 0x3}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26036' (ED25519) to the list of known hosts.
syzkaller login: [   47.978340][ T5836] cgroup: Unknown subsys name 'net'
[   48.078396][ T5836] cgroup: Unknown subsys name 'cpuset'
[   48.082390][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.537535][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.507780][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.511047][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.513765][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.516942][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.520173][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.558140][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.561773][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.565319][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.569038][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.572508][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.576102][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.579439][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.582369][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.586844][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.596613][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.765149][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   53.834512][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   53.873807][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   53.898970][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.902817][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.906462][ T5845] bridge_slave_0: entered allmulticast mode
[   53.909344][ T5845] bridge_slave_0: entered promiscuous mode
[   53.935282][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.938179][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.940606][ T5845] bridge_slave_1: entered allmulticast mode
[   53.943401][ T5845] bridge_slave_1: entered promiscuous mode
[   53.988343][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.990897][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.993303][ T5850] bridge_slave_0: entered allmulticast mode
[   53.996565][ T5850] bridge_slave_0: entered promiscuous mode
[   53.999738][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.002032][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.004437][ T5850] bridge_slave_1: entered allmulticast mode
[   54.008022][ T5850] bridge_slave_1: entered promiscuous mode
[   54.012583][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.017371][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.070573][ T5845] team0: Port device team_slave_0 added
[   54.074331][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.078198][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.080763][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.083213][ T5851] bridge_slave_0: entered allmulticast mode
[   54.086789][ T5851] bridge_slave_0: entered promiscuous mode
[   54.090691][ T5845] team0: Port device team_slave_1 added
[   54.094197][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.098350][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.101066][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.103945][ T5851] bridge_slave_1: entered allmulticast mode
[   54.108143][ T5851] bridge_slave_1: entered promiscuous mode
[   54.150129][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.152691][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.161309][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.166440][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.168898][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.177649][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.183546][ T5850] team0: Port device team_slave_0 added
[   54.200447][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.207061][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.222702][ T5850] team0: Port device team_slave_1 added
[   54.251873][ T5851] team0: Port device team_slave_0 added
[   54.273922][ T5851] team0: Port device team_slave_1 added
[   54.287642][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.290248][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.301270][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.307691][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.310685][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.320437][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.342907][ T5845] hsr_slave_0: entered promiscuous mode
[   54.346670][ T5845] hsr_slave_1: entered promiscuous mode
[   54.365138][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.368732][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.378984][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.399661][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.402320][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.413347][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.450620][ T5850] hsr_slave_0: entered promiscuous mode
[   54.453530][ T5850] hsr_slave_1: entered promiscuous mode
[   54.457596][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   54.459886][ T5850] Cannot create hsr debugfs directory
[   54.558146][ T5851] hsr_slave_0: entered promiscuous mode
[   54.561222][ T5851] hsr_slave_1: entered promiscuous mode
[   54.564067][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   54.568267][ T5851] Cannot create hsr debugfs directory
[   54.799855][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.823629][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.841928][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.850017][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.883982][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.897789][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.904332][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.923852][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.003180][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.008624][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.013458][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.021477][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.111134][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.144716][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.154968][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.172132][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.175461][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.192474][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.195639][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.211592][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   55.221086][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.228923][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.231885][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.269797][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.272909][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.303027][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   55.325213][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.328282][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.346447][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.349595][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.470023][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.533528][ T5845] veth0_vlan: entered promiscuous mode
[   55.549598][ T5845] veth1_vlan: entered promiscuous mode
[   55.554019][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.568246][ T5855] Bluetooth: hci0: command tx timeout
[   55.582223][ T5845] veth0_macvtap: entered promiscuous mode
[   55.586952][ T5845] veth1_macvtap: entered promiscuous mode
[   55.603199][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.621570][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.633016][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.645758][ T5855] Bluetooth: hci2: command tx timeout
[   55.648331][ T5847] Bluetooth: hci1: command tx timeout
[   55.663900][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.668333][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.671506][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.674774][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.682852][ T5850] veth0_vlan: entered promiscuous mode
[   55.707929][ T5850] veth1_vlan: entered promiscuous mode
[   55.718558][ T5851] veth0_vlan: entered promiscuous mode
[   55.741309][ T5851] veth1_vlan: entered promiscuous mode
[   55.779636][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.782243][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.789711][ T5850] veth0_macvtap: entered promiscuous mode
[   55.799513][ T5850] veth1_macvtap: entered promiscuous mode
[   55.822287][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.831204][ T5851] veth0_macvtap: entered promiscuous mode
[   55.843017][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.850805][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.852746][ T5851] veth1_macvtap: entered promiscuous mode
[   55.860080][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.863672][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.876762][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.879719][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.882789][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.908086][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.909224][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.923132][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.949193][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.953056][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.966055][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.969327][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.058120][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.063284][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.110422][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.114849][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.134182][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.137438][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.152438][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.159460][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.250737][ T5919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.316994][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.330400][ T5919] team0: Port device team_slave_0 removed
[   56.471076][ T5933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6'.
[   56.474281][ T5933] Zero length message leads to an empty skb
[   56.520766][ T5937] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   56.544318][ T5937] bridge_slave_0: left allmulticast mode
[   56.551402][ T5937] bridge_slave_0: left promiscuous mode
[   56.555797][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.568763][ T5937] bridge_slave_1: left allmulticast mode
[   56.571346][ T5937] bridge_slave_1: left promiscuous mode
[   56.576134][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.590945][ T5937] bond0: (slave bond_slave_0): Releasing backup interface
[   56.597229][ T5937] bond0: (slave bond_slave_1): Releasing backup interface
[   56.612239][ T5937] team0: Port device team_slave_0 removed
[   56.622962][ T5937] team0: Port device team_slave_1 removed
[   56.625436][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.628894][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.633165][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.641997][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.661054][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   56.773561][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.783087][ T5956] 8021q: VLANs not supported on vcan0
[   56.792640][ T5956] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   56.876757][ T5958] syz_tun: entered allmulticast mode
[   56.893975][ T5958] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.903939][ T5958] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   56.951460][ T5958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.965295][ T5957] syz_tun: left allmulticast mode
[   57.112679][ T5976] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   57.115464][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'.
[   57.119212][ T5974] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   57.262663][ T5989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23'.
[   57.267456][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   57.370001][ T5999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26'.
[   57.378703][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   57.428923][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   57.564511][ T6024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.585955][ T6019] openvswitch: netlink: Missing key (keys=40, expected=100)
[   57.651288][ T5847] Bluetooth: hci0: command tx timeout
[   57.726611][ T5855] Bluetooth: hci2: command tx timeout
[   57.728683][ T5847] Bluetooth: hci1: command tx timeout
[   57.737185][ T6041] sctp: [Deprecated]: syz.0.39 (pid 6041) Use of int in max_burst socket option deprecated.
[   57.737185][ T6041] Use struct sctp_assoc_value instead
[   58.495686][ T6034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   58.696544][ T6059] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   58.793204][ T6068] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET)
[   58.872543][ T6073] netlink: 'syz.1.49': attribute type 1 has an invalid length.
[   58.986270][ T6076] bond1 (unregistering): Released all slaves
[   59.463108][ T6109] tipc: Started in network mode
[   59.465040][ T6109] tipc: Node identity 822098a42462, cluster identity 4711
[   59.467978][ T6109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.470476][ T6108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   59.490065][ T6108] netlink: 'syz.1.58': attribute type 10 has an invalid length.
[   59.499593][ T6108] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.606824][ T6109] tipc: Disabling bearer <eth:syzkaller0>
[   59.727089][ T5847] Bluetooth: hci0: command tx timeout
[   59.736699][  T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.805778][ T5847] Bluetooth: hci1: command tx timeout
[   59.807777][ T5855] Bluetooth: hci2: command tx timeout
[   59.810526][  T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.938385][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.995932][ T6157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.079395][ T6163] bridge_slave_1: left allmulticast mode
[   60.081237][ T6163] bridge_slave_1: left promiscuous mode
[   60.083272][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.088266][ T6163] bridge_slave_0: left allmulticast mode
[   60.090103][ T6163] bridge_slave_0: left promiscuous mode
[   60.102930][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.129156][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.196226][ T6165] batman_adv: batadv0: Adding interface: vxlan0
[   60.199029][ T6165] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.209062][ T6165] batman_adv: batadv0: Interface activated: vxlan0
[   60.212103][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.215117][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.230525][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.233973][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.413142][ T6187] tipc: Started in network mode
[   60.414916][ T6187] tipc: Node identity 42e2aa1feb8d, cluster identity 4711
[   60.418235][ T6187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.421625][ T6187] syzkaller0: entered promiscuous mode
[   60.423764][ T6187] syzkaller0: entered allmulticast mode
[   60.435472][ T6187] tipc: Resetting bearer <eth:syzkaller0>
[   60.451763][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[   60.470391][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[   60.722399][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.725405][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.796708][ T6218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.799848][ T6218] syzkaller0: entered promiscuous mode
[   60.801792][ T6218] syzkaller0: entered allmulticast mode
[   60.817713][ T6218] tipc: Resetting bearer <eth:syzkaller0>
[   60.821251][ T6218] netlink: 'syz.1.88': attribute type 1 has an invalid length.
[   60.848533][ T6218] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.891761][ T6218] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.899434][ T6218] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   60.903689][ T6218] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   60.927868][ T6230] netlink: 'syz.2.90': attribute type 33 has an invalid length.
[   60.934615][ T6230] trusted_key: syz.2.90 sent an empty control message without MSG_MORE.
[   60.947141][ T6231] bond1: (slave bridge4): Enslaving as an active interface with a down link
[   60.993845][ T6217] tipc: Resetting bearer <eth:syzkaller0>
[   61.002506][ T6217] tipc: Disabling bearer <eth:syzkaller0>
[   61.168863][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.311020][ T6252] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   61.386152][ T6252] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   61.485268][ T6260] __nla_validate_parse: 39 callbacks suppressed
[   61.485280][ T6260] netlink: 277 bytes leftover after parsing attributes in process `syz.2.95'.
[   61.494313][ T6262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'.
[   61.499457][ T6262] netlink: 6 bytes leftover after parsing attributes in process `syz.1.96'.
[   61.653546][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'.
[   61.805917][ T5847] Bluetooth: hci0: command tx timeout
[   61.885812][ T5855] Bluetooth: hci2: command tx timeout
[   61.887718][ T5847] Bluetooth: hci1: command tx timeout
[   61.923190][ T6284] xt_l2tp: unknown flags: 51
[   61.941302][ T6284] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.955587][    C0] net_ratelimit: 1627 callbacks suppressed
[   61.955598][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.961097][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.964348][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.968294][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.971227][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.974151][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.977266][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.980222][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.983088][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.986473][ T6279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.070209][ T6284] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.188854][ T6284] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.203383][ T6303] dvmrp1: tun_chr_ioctl cmd 1074025677
[   62.212824][ T6303] dvmrp1: linktype set to 773
[   62.317008][ T6284] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.352380][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   62.407866][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   62.492093][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.504492][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.508366][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   62.514816][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.524153][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   62.528295][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.600483][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[   62.645927][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   62.844948][ T6347] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   63.012481][ T6367] veth0_to_bridge: entered promiscuous mode
[   63.016678][ T6367] veth0_to_bridge: left promiscuous mode
[   63.287610][ T6376] netlink: 'syz.2.129': attribute type 4 has an invalid length.
[   63.385136][ T6389] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   63.721818][ T6414] warning: `syz.0.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.953140][ T6427] netlink: 'syz.2.148': attribute type 4 has an invalid length.
[   63.966099][ T6428] netlink: 'syz.1.147': attribute type 1 has an invalid length.
[   64.071775][ T6439] tipc: Started in network mode
[   64.073678][ T6439] tipc: Node identity 66934a611baa, cluster identity 4711
[   64.076888][ T6439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.110603][ T6441] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.114082][ T6439] syzkaller0: entered promiscuous mode
[   64.118449][ T6439] syzkaller0: entered allmulticast mode
[   64.138357][ T6441] batman_adv: batadv0: Interface deactivated: vxlan0
[   64.141224][ T6441] batman_adv: batadv0: Removing interface: vxlan0
[   64.161474][ T6439] tipc: Resetting bearer <eth:syzkaller0>
[   64.250392][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[   64.269080][ T6438] tipc: Disabling bearer <eth:syzkaller0>
[   64.348710][ T6451] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   64.370781][ T6451] bond2: entered promiscuous mode
[   64.372526][ T6451] bond2: entered allmulticast mode
[   64.374436][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.382918][ T6451] bridge7: entered promiscuous mode
[   64.384771][ T6451] bridge7: entered allmulticast mode
[   64.388330][ T6451] bond2: (slave bridge7): Enslaving as a backup interface with an up link
[   64.513405][ T6464] netlink: 'syz.1.158': attribute type 58 has an invalid length.
[   64.832821][ T6472] can: request_module (can-proto-0) failed.
[   65.910117][ T6498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.928372][ T6497] tipc: Disabling bearer <eth:syzkaller0>
[   66.150342][ T6508] netlink: 'syz.1.174': attribute type 10 has an invalid length.
[   66.155257][ T6508] team0: Device ipvlan1 failed to register rx_handler
[   66.298623][ T6517] netlink: 'syz.2.178': attribute type 5 has an invalid length.
[   66.301371][ T6517] netlink: 'syz.2.178': attribute type 5 has an invalid length.
[   66.304520][ T6517] netlink: 'syz.2.178': attribute type 21 has an invalid length.
[   66.307443][ T6517] netlink: 'syz.2.178': attribute type 6 has an invalid length.
[   66.507155][ T6542] __nla_validate_parse: 30 callbacks suppressed
[   66.507168][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'.
[   66.529527][ T6539] batadv1: entered promiscuous mode
[   66.531996][ T6539] batadv1: entered allmulticast mode
[   66.630374][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'.
[   66.662238][ T6557] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   66.690822][ T6559] geneve2: entered promiscuous mode
[   66.820487][ T6572] ip6erspan0: entered allmulticast mode
[   66.911394][ T6577] pim6reg1: entered promiscuous mode
[   66.913424][ T6577] pim6reg1: entered allmulticast mode
[   67.885388][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   67.917209][ T6584] netlink: 44 bytes leftover after parsing attributes in process `syz.1.198'.
[   67.921418][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'.
[   67.949196][ T6594] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[   68.011639][ T6605] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   68.024623][ T6603] netlink: 44 bytes leftover after parsing attributes in process `syz.1.201'.
[   68.035927][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   68.055238][ T6607] bond0: option ad_select: unable to set because the bond device is up
[   68.472150][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   68.817875][ T6669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.221'.
[   68.827481][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[   68.978227][ T6674] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   69.280501][ T6694] validate_nla: 1 callbacks suppressed
[   69.280511][ T6694] netlink: 'syz.0.229': attribute type 10 has an invalid length.
[   69.293392][ T6694] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.371765][ T6693] netlink: 'syz.1.230': attribute type 1 has an invalid length.
[   69.400658][ T6693] bond3 (unregistering): Released all slaves
[   69.520335][ T6717] ip6tnl1: entered promiscuous mode
[   69.522233][ T6717] ip6tnl1: entered allmulticast mode
[   69.525015][ T6717] team0: Device ip6tnl1 is of different type
[   69.830586][ T5895] IPVS: starting estimator thread 0...
[   69.926730][ T6729] IPVS: using max 80 ests per chain, 192000 per kthread
[   69.955203][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.957803][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.020030][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.027956][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.088452][ T6739] macvlan2: entered promiscuous mode
[   70.090210][ T6739] vlan0: entered promiscuous mode
[   70.113674][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.117599][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.126534][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.132618][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.381243][ T6765] bridge0: port 3(erspan0) entered blocking state
[   70.384202][ T6765] bridge0: port 3(erspan0) entered disabled state
[   70.387302][ T6765] erspan0: entered allmulticast mode
[   70.391354][ T6765] erspan0: entered promiscuous mode
[   70.397301][ T6766] erspan0: left allmulticast mode
[   70.399572][ T6766] erspan0: left promiscuous mode
[   70.402457][ T6766] bridge0: port 3(erspan0) entered disabled state
[   70.807532][ T6779] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   70.810647][ T6779] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   70.813765][ T6776] netlink: 'syz.0.253': attribute type 1 has an invalid length.
[   70.862219][ T6776] bond0: (slave bond_slave_1): Releasing backup interface
[   70.931887][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.961423][ T6791] gre2: entered allmulticast mode
[   70.978809][ T6791] ipvlan2: entered promiscuous mode
[   70.981219][ T6791] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   70.990027][ T6793] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.240079][ T6793] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.424409][ T6793] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.475061][ T6793] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.606437][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.611233][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.624882][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.628565][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.684092][ T6824] __nla_validate_parse: 12 callbacks suppressed
[   71.684106][ T6824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.265'.
[   71.691386][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   71.811157][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.266'.
[   72.547509][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   72.624046][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   73.229066][ T6862] net_ratelimit: 422 callbacks suppressed
[   73.229078][ T6862] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   73.499592][ T6899] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   73.509250][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.286'.
[   73.513976][ T6899] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   73.690555][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'.
[   73.702846][ T6919] bond0: (slave dummy0): Releasing backup interface
[   73.709196][ T6919] batman_adv: batadv0: Adding interface: dummy0
[   73.711409][ T6919] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.721325][ T6919] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   73.823689][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'.
[   73.827712][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'.
[   73.847730][ T6924] dvmrp0: entered allmulticast mode
[   73.948767][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'.
[   73.991718][ T6931] netlink: 'syz.2.296': attribute type 1 has an invalid length.
[   74.083043][ T6933] netlink: 'syz.2.296': attribute type 1 has an invalid length.
[   74.087989][ T6933] netlink: 'syz.2.296': attribute type 4 has an invalid length.
[   74.131085][ T6935] IPv6: sit1: Disabled Multicast RS
[   74.237674][ T6941] netlink: 'syz.0.300': attribute type 7 has an invalid length.
[   74.560012][ T7004] netlink: 'syz.2.306': attribute type 1 has an invalid length.
[   74.782958][ T7016] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[   74.864056][ T7016] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.932054][ T7019] veth3: entered promiscuous mode
[   75.293519][ T7027] netlink: 'syz.1.311': attribute type 6 has an invalid length.
[   75.329570][ T1271] cfg80211: failed to load regulatory.db
[   75.844272][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.854780][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.859976][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.867630][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.878907][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.892035][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.906488][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.643161][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.646924][ T7112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.859870][ T7118] __nla_validate_parse: 14 callbacks suppressed
[   76.859882][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   76.859880][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'.
[   76.950182][ T7122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.342'.
[   77.006543][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   77.203003][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'.
[   77.404376][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'.
[   77.452050][ T7138] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   77.479447][ T7138] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[   77.483671][ T7138] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   77.490323][ T7138] bond4: (slave vcan1): making interface the new active one
[   77.493895][ T7138] bond4: (slave vcan1): Enslaving as an active interface with an up link
[   77.501835][ T7143] pim6reg99999999: entered allmulticast mode
[   77.519237][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[   77.531118][ T7138] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.600922][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.351'.
[   77.604269][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   77.708159][ T7156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.352'.
[   77.807125][ T7160] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.001144][ T7175] vlan0 (unregistering): left promiscuous mode
[   78.703237][ T7198] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[   78.736272][ T7198] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   78.739502][ T7198] bond0: (slave wlan1): Opening slave failed
[   79.035126][ T7226] bond1: entered promiscuous mode
[   79.081075][ T7227] netlink: 'syz.2.369': attribute type 37 has an invalid length.
[   79.128501][ T7235] netlink: 'syz.2.370': attribute type 1 has an invalid length.
[   79.183902][ T7244] xfrm1: entered promiscuous mode
[   79.187172][ T7244] xfrm1: entered allmulticast mode
[   79.360575][ T7257] netlink: 'syz.0.375': attribute type 6 has an invalid length.
[   80.283261][ T7351] bridge20: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   81.146759][ T7393] bond0: entered promiscuous mode
[   81.149362][ T7393] bond0: left promiscuous mode
[   81.492008][ T7405] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   81.523328][ T7407] netlink: 'syz.2.410': attribute type 3 has an invalid length.
[   81.527699][ T7407] netlink: 'syz.2.410': attribute type 2 has an invalid length.
[   81.530376][ T7407] netlink: 'syz.2.410': attribute type 2 has an invalid length.
[   81.708683][ T7424] netlink: 'syz.0.415': attribute type 2 has an invalid length.
[   81.729320][ T7424] tc_dump_action: action bad kind
[   81.953868][ T7443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.957463][ T7443] syzkaller0: entered promiscuous mode
[   81.959357][ T7443] syzkaller0: entered allmulticast mode
[   81.975092][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[   81.978731][ T7448] netlink: 'syz.1.421': attribute type 1 has an invalid length.
[   81.982336][ T7448] __nla_validate_parse: 32 callbacks suppressed
[   81.982345][ T7448] netlink: 224 bytes leftover after parsing attributes in process `syz.1.421'.
[   81.992545][ T7444] tipc: Disabling bearer <eth:syzkaller0>
[   82.061648][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[   82.555354][ T7464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'.
[   82.599540][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[   82.602996][ T7465] hsr_slave_0: left promiscuous mode
[   82.605177][ T7465] hsr_slave_1: left promiscuous mode
[   82.644568][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[   82.684357][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.685306][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.841306][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'.
[   82.845393][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[   82.846570][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[   82.888055][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.433'.
[   83.031970][ T7478] bridge0: port 3(erspan0) entered blocking state
[   83.034618][ T7478] bridge0: port 3(erspan0) entered disabled state
[   83.038774][ T7478] erspan0: entered allmulticast mode
[   83.042444][ T7478] erspan0: entered promiscuous mode
[   83.046102][ T7478] erspan0: left allmulticast mode
[   83.048340][ T7478] erspan0: left promiscuous mode
[   83.051360][ T7478] bridge0: port 3(erspan0) entered disabled state
[   83.214803][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[   83.471361][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[   83.517504][ T7496] syzkaller0: entered promiscuous mode
[   83.519901][ T7496] syzkaller0: entered allmulticast mode
[   83.527764][ T7496] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   84.628464][ T7512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.630743][ T7513] syzkaller0: entered promiscuous mode
[   84.633170][ T7513] syzkaller0: entered allmulticast mode
[   84.671583][ T7510] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   84.696684][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[   84.704495][ T7509] tipc: Resetting bearer <eth:syzkaller0>
[   84.711904][ T7509] tipc: Disabling bearer <eth:syzkaller0>
[   84.764447][ T7525] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   84.770780][ T7525] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.902505][ T7540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.421948][ T7584] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   85.659235][ T7601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.662105][ T7601] syzkaller0: entered promiscuous mode
[   85.664095][ T7601] syzkaller0: entered allmulticast mode
[   85.673014][ T7601] tipc: Resetting bearer <eth:syzkaller0>
[   85.682846][ T7601] tipc: Resetting bearer <eth:syzkaller0>
[   85.694288][ T7601] tipc: Disabling bearer <eth:syzkaller0>
[   85.778521][ T7608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.802374][ T7608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.876049][ T7617] syzkaller1: entered promiscuous mode
[   85.878281][ T7617] syzkaller1: entered allmulticast mode
[   85.956829][ T7622] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   85.959301][ T7622] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   86.069684][ T7630] dummy0: entered promiscuous mode
[   86.072250][ T7630] dummy0: entered allmulticast mode
[   86.178662][ T7635] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[   86.265280][ T7635] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.277855][ T7638] bond5: (slave gretap1): making interface the new active one
[   86.288689][ T7638] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   86.420240][ T7652] netlink: 'syz.0.488': attribute type 2 has an invalid length.
[   86.876789][ T7692] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[   86.920473][ T7692] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   86.931049][ T7692] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.933509][ T5909] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   86.950640][ T7692] veth3: entered promiscuous mode
[   86.979592][ T7692] bond2: (slave ip6gretap1): Removing an active aggregator
[   86.983805][ T7692] bond2: (slave ip6gretap1): Releasing backup interface
[   87.510597][ T7712] __nla_validate_parse: 23 callbacks suppressed
[   87.510612][ T7712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'.
[   87.663548][ T7707] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.677406][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[   87.681339][ T5909] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.685233][ T5909] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.689683][ T5909] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.693844][ T5909] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.698292][ T5909] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.701927][ T5909] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.706312][ T5909] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.710330][ T5909] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.962671][ T7727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'.
[   87.988788][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[   88.066781][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[   88.071649][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'.
[   88.150987][ T7742] netlink: 'syz.1.513': attribute type 7 has an invalid length.
[   88.181358][ T7742] : entered promiscuous mode
[   88.242961][ T7756] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   88.280877][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'.
[   88.338863][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[   88.351654][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[   88.449923][ T7767] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[   88.482900][ T7767] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.501770][ T7767] veth7: entered promiscuous mode
[   88.507573][ T7767] bond2: (slave veth7): Enslaving as an active interface with a down link
[   88.517878][ T7767] erspan0: entered allmulticast mode
[   88.523887][ T7767] bond2: (slave erspan0): making interface the new active one
[   88.529935][ T7767] erspan0: entered promiscuous mode
[   88.532674][ T7767] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   88.537935][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'.
[   88.544039][ T7771] bridge_slave_0: left allmulticast mode
[   88.546346][ T7771] bridge_slave_0: left promiscuous mode
[   88.548460][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.554562][ T7771] bridge_slave_1: left allmulticast mode
[   88.563455][ T7771] bridge_slave_1: left promiscuous mode
[   88.567715][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.574744][ T7767] syz.0.519 (7767) used greatest stack depth: 19832 bytes left
[   88.583807][ T7771] bond0: (slave bond_slave_0): Releasing backup interface
[   88.593820][ T7771] bond0: (slave bond_slave_1): Releasing backup interface
[   88.613226][ T7771] team0: Port device team_slave_0 removed
[   88.628637][ T7771] team0: Port device team_slave_1 removed
[   88.631306][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.643805][ T7771] bond0: (slave wlan1): Releasing backup interface
[   88.658620][ T7771] bond1: (slave bridge4): Releasing active interface
[   88.668900][ T7790] netlink: 'syz.2.522': attribute type 13 has an invalid length.
[   88.672074][ T7790] netlink: 'syz.2.522': attribute type 17 has an invalid length.
[   88.692886][ T7771] bond2: (slave bridge7): Removing an active aggregator
[   88.697910][ T7771] bond2: (slave bridge7): Releasing backup interface
[   88.701821][ T7771] bridge7: left promiscuous mode
[   88.704185][ T7771] bridge7: left allmulticast mode
[   88.711249][ T7771] bond4: (slave vcan1): Releasing backup interface
[   88.721998][ T7771] bond5: (slave gretap1): Releasing active interface
[   88.796753][ T7790] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.808670][ T7790] 8021q: adding VLAN 0 to HW filter on device team0
[   88.814935][ T7790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.824873][ T7777] xfrm0: entered promiscuous mode
[   88.826933][ T7777] xfrm0: entered allmulticast mode
[   88.928455][ T7777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.997637][ T7777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.235093][ T7823] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   89.259695][ T7823] 8021q: adding VLAN 0 to HW filter on device bond6
[   89.425212][ T7829] veth1_macvtap: left promiscuous mode
[   89.427708][ T7829] macsec0: entered promiscuous mode
[   89.429987][ T7829] macsec0: entered allmulticast mode
[   89.440343][ T7829] veth1_macvtap: entered promiscuous mode
[   89.442983][ T7829] veth1_macvtap: entered allmulticast mode
[   89.446482][ T7829] macsec0: left promiscuous mode
[   89.448334][ T7829] macsec0: left allmulticast mode
[   89.450423][ T7829] veth1_macvtap: left allmulticast mode
[   89.983169][ T7834] vlan0: entered promiscuous mode
[   89.996943][ T7834] vlan0: entered allmulticast mode
[   89.999270][ T7834] hsr_slave_1: entered allmulticast mode
[   90.332404][   T33] audit: type=1804 audit(1757085864.774:2): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.539" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1114 res=1 errno=0
[   90.361097][   T33] audit: type=1800 audit(1757085864.774:3): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.539" name="cgroup.controllers" dev="tmpfs" ino=1114 res=0 errno=0
[   90.623188][ T7881] netlink: 'syz.1.547': attribute type 10 has an invalid length.
[   90.874636][ T7907] netlink: zone id is out of range
[   90.878989][ T7907] netlink: zone id is out of range
[   90.886507][ T7907] netlink: zone id is out of range
[   90.888709][ T7907] netlink: zone id is out of range
[   90.894225][ T7907] netlink: zone id is out of range
[   90.898219][ T7907] netlink: zone id is out of range
[   90.903232][ T7907] netlink: zone id is out of range
[   90.905350][ T7907] netlink: zone id is out of range
[   90.987746][ T7922] netlink: 'syz.1.557': attribute type 2 has an invalid length.
[   91.005429][ T7922] k*]: entered promiscuous mode
[   91.021680][ T7922] dummy0: left promiscuous mode
[   91.023683][ T7922] dummy0: left allmulticast mode
[   91.032172][ T7922] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[   91.035399][ T7922] bond2: left promiscuous mode
[   91.044983][ T7922] bond2: left allmulticast mode
[   91.055390][ T7922] ip6erspan0: left allmulticast mode
[   91.114464][ T7922] veth0_to_team: entered promiscuous mode
[   91.117823][ T7922] veth0_to_team: entered allmulticast mode
[   91.258306][ T7944] syz_tun: entered allmulticast mode
[   91.263569][ T7945] dvmrp8: entered allmulticast mode
[   91.268247][ T7944] syz_tun: left allmulticast mode
[   91.270342][ T7944] dvmrp8: left allmulticast mode
[   91.599802][ T7972] netlink: 'syz.2.570': attribute type 83 has an invalid length.
[   91.695322][ T7979] team0: Port device netdevsim0 added
[   91.888284][ T7989] 8021q: adding VLAN 0 to HW filter on device bond7
[   91.946590][ T7991] erspan0: entered allmulticast mode
[   91.951722][ T7991] bond7: (slave erspan0): making interface the new active one
[   91.956320][ T7991] bond7: (slave erspan0): Enslaving as an active interface with an up link
[   92.094297][ T7998] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3)
[   92.106697][ T7998] bond0: entered promiscuous mode
[   92.108968][ T7998] batadv0: entered promiscuous mode
[   92.122017][ T7998] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   92.125924][ T7998] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   92.129165][ T7998] hsr1: entered allmulticast mode
[   92.130845][ T7998] bond0: entered allmulticast mode
[   92.132626][ T7998] batadv0: entered allmulticast mode
[   92.135309][ T7998] 8021q: adding VLAN 0 to HW filter on device hsr1
[   92.139813][ T7998] bond0: left promiscuous mode
[   92.141953][ T7998] batadv0: left promiscuous mode
[   92.262046][ T8000] veth0_to_bridge: entered promiscuous mode
[   92.265468][ T7999] veth0_to_bridge: left promiscuous mode
[   93.030560][ T8019] __nla_validate_parse: 22 callbacks suppressed
[   93.030574][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'.
[   93.044050][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.586'.
[   93.110150][ T8033] net_ratelimit: 18 callbacks suppressed
[   93.110166][ T8033] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.191045][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.194133][ T8043] veth8: entered allmulticast mode
[   93.232300][ T8045] validate_nla: 2 callbacks suppressed
[   93.232315][ T8045] netlink: 'syz.1.593': attribute type 1 has an invalid length.
[   93.244162][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.248457][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.252215][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.258490][ T8036] netlink: 540 bytes leftover after parsing attributes in process `syz.2.590'.
[   93.261942][ T8045] 8021q: adding VLAN 0 to HW filter on device bond8
[   93.265238][ T8036] netlink: 'syz.2.590': attribute type 10 has an invalid length.
[   93.279722][ T8036] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   93.297879][ T8045] ipvlan2: entered allmulticast mode
[   93.299707][ T8045] bond8: entered allmulticast mode
[   93.312719][ T8045] bond8: (slave gretap2): making interface the new active one
[   93.317487][ T8045] gretap2: entered allmulticast mode
[   93.322161][ T8045] 
[   93.322963][ T8045] ============================================
[   93.325160][ T8045] WARNING: possible recursive locking detected
[   93.327325][ T8045] syzkaller #0 Not tainted
[   93.329426][ T8045] --------------------------------------------
[   93.332115][ T8045] syz.1.593/8045 is trying to acquire lock:
[   93.334389][ T8045] ffff888021263d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   93.337972][ T8045] 
[   93.337972][ T8045] but task is already holding lock:
[   93.340873][ T8045] ffff88811432ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   93.344205][ T8045] 
[   93.344205][ T8045] other info that might help us debug this:
[   93.347318][ T8045]  Possible unsafe locking scenario:
[   93.347318][ T8045] 
[   93.350277][ T8045]        CPU0
[   93.351640][ T8045]        ----
[   93.353021][ T8045]   lock(&qdisc_xmit_lock_key#4);
[   93.355045][ T8045]   lock(&qdisc_xmit_lock_key#4);
[   93.357039][ T8045] 
[   93.357039][ T8045]  *** DEADLOCK ***
[   93.357039][ T8045] 
[   93.360269][ T8045]  May be due to missing lock nesting notation
[   93.360269][ T8045] 
[   93.363492][ T8045] 10 locks held by syz.1.593/8045:
[   93.365506][ T8045]  #0: ffffffff8fa53020 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[   93.369290][ T8045]  #1: ffffffff8f538ac8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   93.372894][ T8045]  #2: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   93.376844][ T8045]  #3: ffff88811ae3d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[   93.381635][ T8045]  #4: ffff88811432ed58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   93.385712][ T8045]  #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[   93.389210][ T8045]  #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[   93.393135][ T8045]  #7: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[   93.396647][ T8045]  #8: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   93.400771][ T8045]  #9: ffff88811976b258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[   93.406106][ T8045] 
[   93.406106][ T8045] stack backtrace:
[   93.408560][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.1.593 Not tainted syzkaller #0 PREEMPT(full) 
[   93.408577][ T8045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.408584][ T8045] Call Trace:
[   93.408589][ T8045]  <TASK>
[   93.408597][ T8045]  dump_stack_lvl+0x189/0x250
[   93.408616][ T8045]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.408630][ T8045]  ? __pfx__printk+0x10/0x10
[   93.408646][ T8045]  ? skb_network_protocol+0x508/0x760
[   93.408661][ T8045]  ? print_lock_name+0xde/0x100
[   93.408678][ T8045]  print_deadlock_bug+0x28b/0x2a0
[   93.408691][ T8045]  validate_chain+0x1a3f/0x2140
[   93.408702][ T8045]  ? validate_xmit_xfrm+0xbf/0x1160
[   93.408721][ T8045]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[   93.408738][ T8045]  ? __pfx_netif_skb_features+0x10/0x10
[   93.408751][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.408768][ T8045]  __lock_acquire+0xab9/0xd20
[   93.408784][ T8045]  ? sch_direct_xmit+0x153/0x4b0
[   93.408799][ T8045]  lock_acquire+0x120/0x360
[   93.408814][ T8045]  ? sch_direct_xmit+0x153/0x4b0
[   93.408833][ T8045]  _raw_spin_lock+0x2e/0x40
[   93.408847][ T8045]  ? sch_direct_xmit+0x153/0x4b0
[   93.408861][ T8045]  sch_direct_xmit+0x153/0x4b0
[   93.408878][ T8045]  ? __pfx_sch_direct_xmit+0x10/0x10
[   93.408895][ T8045]  __dev_queue_xmit+0x1857/0x3b50
[   93.408908][ T8045]  ? arp_send_dst+0xa7/0x2d0
[   93.408921][ T8045]  ? arp_solicit+0xc1d/0xe60
[   93.408934][ T8045]  ? __neigh_event_send+0xf70/0x1560
[   93.408951][ T8045]  ? __dev_queue_xmit+0x27b/0x3b50
[   93.408964][ T8045]  ? do_set_master+0x533/0x6d0
[   93.408974][ T8045]  ? rtnl_newlink_create+0x677/0xb00
[   93.408985][ T8045]  ? rtnl_newlink+0x16d6/0x1c70
[   93.409001][ T8045]  ? netlink_rcv_skb+0x208/0x470
[   93.409017][ T8045]  ? netlink_unicast+0x82f/0x9e0
[   93.409030][ T8045]  ? __sock_sendmsg+0x21c/0x270
[   93.409044][ T8045]  ? ____sys_sendmsg+0x505/0x830
[   93.409055][ T8045]  ? ___sys_sendmsg+0x21f/0x2a0
[   93.409065][ T8045]  ? __x64_sys_sendmsg+0x19b/0x260
[   93.409104][ T8045]  ? do_syscall_64+0xfa/0x3b0
[   93.409116][ T8045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.409129][ T8045]  ? __pfx___dev_queue_xmit+0x10/0x10
[   93.409148][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.409170][ T8045]  ? NF_HOOK+0x9e/0x3a0
[   93.409185][ T8045]  NF_HOOK+0x310/0x3a0
[   93.409199][ T8045]  ? __pfx_arp_xmit_finish+0x10/0x10
[   93.409214][ T8045]  ? NF_HOOK+0x9e/0x3a0
[   93.409228][ T8045]  ? __pfx_NF_HOOK+0x10/0x10
[   93.409242][ T8045]  ? arp_xmit+0x23/0x270
[   93.409258][ T8045]  arp_xmit+0x16c/0x270
[   93.409271][ T8045]  ? arp_xmit+0x23/0x270
[   93.409284][ T8045]  arp_solicit+0xc1d/0xe60
[   93.409299][ T8045]  ? arp_solicit+0x11a/0xe60
[   93.409314][ T8045]  ? __pfx_arp_solicit+0x10/0x10
[   93.409330][ T8045]  ? __neigh_event_send+0xf08/0x1560
[   93.409347][ T8045]  ? __pfx_arp_solicit+0x10/0x10
[   93.409360][ T8045]  __neigh_event_send+0xf70/0x1560
[   93.409380][ T8045]  neigh_resolve_output+0x198/0x750
[   93.409397][ T8045]  ? __pfx_ip_neigh_gw4+0x10/0x10
[   93.409411][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.409427][ T8045]  ip_finish_output2+0xd40/0x1160
[   93.409443][ T8045]  ? ip_finish_output2+0x452/0x1160
[   93.409457][ T8045]  ? __pfx_ip_finish_output2+0x10/0x10
[   93.409471][ T8045]  ? ip_skb_dst_mtu+0x1a5/0xab0
[   93.409484][ T8045]  ? ip_skb_dst_mtu+0x866/0xab0
[   93.409497][ T8045]  ? ip_finish_output+0x33a/0x3f0
[   93.409510][ T8045]  ip_output+0x2a1/0x3c0
[   93.409523][ T8045]  ? ip_output+0x60/0x3c0
[   93.409542][ T8045]  iptunnel_xmit+0x592/0xa40
[   93.409558][ T8045]  ip_tunnel_xmit+0x1c41/0x2390
[   93.409579][ T8045]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[   93.409591][ T8045]  ? gre_build_header+0x3fd/0xa40
[   93.409605][ T8045]  ? __pfx_gre_build_header+0x10/0x10
[   93.409620][ T8045]  gre_tap_xmit+0x590/0x7a0
[   93.409634][ T8045]  ? __pfx_gre_tap_xmit+0x10/0x10
[   93.409645][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.409663][ T8045]  dev_hard_start_xmit+0x2d7/0x830
[   93.409681][ T8045]  sch_direct_xmit+0x241/0x4b0
[   93.409697][ T8045]  ? __pfx_sch_direct_xmit+0x10/0x10
[   93.409712][ T8045]  ? netlink_rcv_skb+0x208/0x470
[   93.409730][ T8045]  __dev_queue_xmit+0x1857/0x3b50
[   93.409746][ T8045]  ? __dev_queue_xmit+0x27b/0x3b50
[   93.409764][ T8045]  ? __pfx___dev_queue_xmit+0x10/0x10
[   93.409777][ T8045]  ? trace_kmem_cache_alloc+0x1f/0xc0
[   93.409791][ T8045]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   93.409807][ T8045]  ? __build_skb_around+0x257/0x3e0
[   93.409822][ T8045]  ? __pfx___netdev_alloc_skb+0x10/0x10
[   93.409833][ T8045]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   93.409848][ T8045]  ? alb_send_lp_vid+0x139/0x510
[   93.409866][ T8045]  alb_send_lp_vid+0x324/0x510
[   93.409883][ T8045]  ? __pfx_alb_send_lp_vid+0x10/0x10
[   93.409898][ T8045]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[   93.409916][ T8045]  alb_send_learning_packets+0x10d/0x2c0
[   93.409932][ T8045]  ? __pfx_alb_send_learning_packets+0x10/0x10
[   93.409949][ T8045]  ? alb_swap_mac_addr+0x221/0x320
[   93.409963][ T8045]  ? dev_addr_check+0x20/0x250
[   93.409976][ T8045]  alb_fasten_mac_swap+0x665/0xfa0
[   93.409994][ T8045]  bond_alb_handle_active_change+0xc10/0xec0
[   93.410011][ T8045]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[   93.410032][ T8045]  ? __local_bh_enable_ip+0x12d/0x1c0
[   93.410047][ T8045]  bond_change_active_slave+0x1048/0x3770
[   93.410065][ T8045]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[   93.410111][ T8045]  ? __pfx_bond_change_active_slave+0x10/0x10
[   93.410126][ T8045]  ? __queue_work+0x102/0xfb0
[   93.410139][ T8045]  ? preempt_schedule_notrace_thunk+0x16/0x30
[   93.410152][ T8045]  ? mod_delayed_work_on+0x128/0x200
[   93.410164][ T8045]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.410181][ T8045]  ? mod_delayed_work_on+0x1ac/0x200
[   93.410195][ T8045]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.410209][ T8045]  ? netdev_change_features+0x8d/0xd0
[   93.410225][ T8045]  bond_select_active_slave+0x8e2/0xd00
[   93.410242][ T8045]  ? __pfx_bond_select_active_slave+0x10/0x10
[   93.410256][ T8045]  ? __pfx_bond_set_carrier+0x10/0x10
[   93.410270][ T8045]  ? netdev_is_rx_handler_busy+0x6e/0x140
[   93.410283][ T8045]  ? __pfx_bond_handle_frame+0x10/0x10
[   93.410298][ T8045]  bond_enslave+0x229c/0x3a20
[   93.410319][ T8045]  ? __pfx_bond_enslave+0x10/0x10
[   93.410337][ T8045]  ? __pfx___dev_notify_flags+0x10/0x10
[   93.410349][ T8045]  ? mutex_is_locked+0x17/0x50
[   93.410361][ T8045]  do_set_master+0x533/0x6d0
[   93.410376][ T8045]  rtnl_newlink_create+0x677/0xb00
[   93.410391][ T8045]  ? __pfx_rtnl_newlink_create+0x10/0x10
[   93.410404][ T8045]  ? __pfx___mutex_lock+0x10/0x10
[   93.410416][ T8045]  ? ns_capable+0x8a/0xf0
[   93.410428][ T8045]  rtnl_newlink+0x16d6/0x1c70
[   93.410449][ T8045]  ? __pfx_rtnl_newlink+0x10/0x10
[   93.410467][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410485][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410503][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410524][ T8045]  ? is_bpf_text_address+0x26/0x2b0
[   93.410550][ T8045]  ? is_bpf_text_address+0x292/0x2b0
[   93.410566][ T8045]  ? is_bpf_text_address+0x26/0x2b0
[   93.410585][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410609][ T8045]  ? __pfx_rtnl_newlink+0x10/0x10
[   93.410626][ T8045]  rtnetlink_rcv_msg+0x7cf/0xb70
[   93.410643][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410660][ T8045]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   93.410674][ T8045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.410690][ T8045]  netlink_rcv_skb+0x208/0x470
[   93.410705][ T8045]  ? __lock_acquire+0xab9/0xd20
[   93.410718][ T8045]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   93.410731][ T8045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.410747][ T8045]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.410761][ T8045]  netlink_unicast+0x82f/0x9e0
[   93.410775][ T8045]  ? __pfx_netlink_unicast+0x10/0x10
[   93.410787][ T8045]  ? netlink_sendmsg+0x642/0xb30
[   93.410797][ T8045]  ? skb_put+0x11b/0x210
[   93.410807][ T8045]  netlink_sendmsg+0x805/0xb30
[   93.410818][ T8045]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.410827][ T8045]  ? aa_sock_msg_perm+0xf1/0x1d0
[   93.410837][ T8045]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.410849][ T8045]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.410858][ T8045]  __sock_sendmsg+0x21c/0x270
[   93.410873][ T8045]  ____sys_sendmsg+0x505/0x830
[   93.410884][ T8045]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.410895][ T8045]  ? import_iovec+0x74/0xa0
[   93.410909][ T8045]  ___sys_sendmsg+0x21f/0x2a0
[   93.410920][ T8045]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.410935][ T8045]  ? __fget_files+0x2a/0x420
[   93.410948][ T8045]  ? __fget_files+0x3a0/0x420
[   93.410962][ T8045]  __x64_sys_sendmsg+0x19b/0x260
[   93.410973][ T8045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.410987][ T8045]  ? rcu_is_watching+0x15/0xb0
[   93.411000][ T8045]  ? do_syscall_64+0xbe/0x3b0
[   93.411011][ T8045]  do_syscall_64+0xfa/0x3b0
[   93.411021][ T8045]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.411036][ T8045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.411048][ T8045]  ? exc_page_fault+0x9f/0xf0
[   93.411064][ T8045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.411102][ T8045] RIP: 0033:0x7f217718ebe9
[   93.411117][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.411127][ T8045] RSP: 002b:00007f2177f9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.411140][ T8045] RAX: ffffffffffffffda RBX: 00007f21773c5fa0 RCX: 00007f217718ebe9
[   93.411150][ T8045] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[   93.411157][ T8045] RBP: 00007f2177211e19 R08: 0000000000000000 R09: 0000000000000000
[   93.411164][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.411170][ T8045] R13: 00007f21773c6038 R14: 00007f21773c5fa0 R15: 00007ffffb5e7748
[   93.411183][ T8045]  </TASK>
[   93.415944][ T8049] netlink: 248 bytes leftover after parsing attributes in process `syz.2.595'.
[   93.428505][ T8045] bond8: (slave gretap2): Enslaving as an active interface with an up link
[   93.780950][ T8049] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[   93.791802][ T8045] syz.1.593 (8045) used greatest stack depth: 15848 bytes left
[   99.655735][ T5722] erspan0: left promiscuous mode

VM DIAGNOSIS:
15:24:27  Registers:
info registers vcpu 0

CPU#0
RAX=1a3e61243032c000 RBX=ffffffff819683c8 RCX=1a3e61243032c000 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=000000002718c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f46abe12e53
XMM06=0000000000000000 00007f46abe12e4d XMM07=0000000000000000 00007f46abe12e61
XMM08=0000000000000000 00007f46abe12ee7 XMM09=0000000000000000 00007f46abe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000022dc0 RDI=0000000000022dc1 RBP=00000000000003f8 RSP=ffffc900031cc8b0
R8 =ffff8880204c8237 R9 =1ffff11004099046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8c5 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2177f9c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f46acb78fc8 CR3=000000010b2ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f46abf97498 00007f46abf97470 XMM03=00007f46abf974a8 00007f46abf974a0
XMM04=00007f46acafd100 00007f46abf97460 XMM05=00007f46abf97478 00007f46abf974c0
XMM06=00007f46abf974b8 00007f46abf974b0 XMM07=00007f46abf974a8 00007f46abf974a0
XMM08=0000000000000000 00007f46abe12ee7 XMM09=0000000000000000 00007f46abe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
