last executing test programs:

4.344036122s ago: executing program 1 (id=5680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5cf870225e6dbac39df7e46df423000000060a010400000000000000000a00fffe0900010073797a3100000000300004802c000180090001007866726d000000001c000280080001400000000f050003000200000008000240000000030900020073797a3200000000140000001400010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x38}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) (async, rerun: 32)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) (rerun: 64)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r10}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r8)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r11, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x3, 0x36, 0x30, 0xb, 0x1b, 0x18, 0x30, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2cf, 0x1, 0x80, 0x2, 0x401, 0x7, 0xfff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x45b5f77b9dc5d90c, 0x9, 0x4, 0x30, 0x5, 0x1, 0x36, 0x2, 0x6, 0x48, 0x60, 0x31, 0x30, 0xb, 0x2, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x6}, {0x5, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x6c, 0xc, 0xb, 0xc, 0x1, 0x1, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x80)

4.003249413s ago: executing program 0 (id=5683):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5218)

3.992197453s ago: executing program 1 (id=5684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r4, 0x2, 0x0, 0x25dfdbfc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:etc_mail_t:s0\x00'}]}, 0x5c}, 0x2, 0x34005, 0x0, 0x480c4}, 0x20)

3.909217806s ago: executing program 2 (id=5685):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_dump={0x3f, 0x1ff, 0xfffffff8, 0x2d, "ec56d7ed5da7aee993ba2c090a9020ef20bb0d23c12b2d74c4d9a5d36c3b5c738596ec652217af878025a266cc"}})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0)
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'bridge_slave_1\x00', {0x1}, 0xe5}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x801, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x800, 0x3, 0x7d2, 0x4, 0x8, 0x8, 0x7, <r4=>0x0}, &(0x7f00000002c0)=0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={r4, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x8, 0x9, 0xfffffffb, 0x3cae, 0x8, 0x7fff, 0x4}, 0x9c) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@private, @loopback, <r5=>0x0}, &(0x7f0000000400)=0xc) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20000001) (async)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", ""]}, 0x24}}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x64, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x12000000, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x6010, r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x9, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @alu={0x7, 0x1, 0x1, 0x6, 0x9, 0xfffffffffffffffc, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f00000007c0)='GPL\x00', 0x7fff, 0x74, &(0x7f0000000800)=""/116, 0x41100, 0x11, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a80)=[0xffffffffffffffff, r9, 0x1, r10, r11], &(0x7f0000000ac0)=[{0x4, 0x5, 0x2, 0x9}, {0x3, 0x1, 0x9, 0x7}, {0x5, 0x2, 0xa, 0xb}, {0x5, 0x5, 0x4, 0x7}, {0x5, 0x4, 0xb, 0x2}, {0x4, 0x1, 0xa, 0x8}, {0x5, 0x4, 0x8, 0x9}, {0x3, 0x3, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x5}], 0x10, 0xc44}, 0x94)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r13, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x480c1) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r13, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xda3e, 0x43}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xdf0}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
r15 = accept4$inet(r12, 0x0, &(0x7f0000000f00), 0x100000)
getsockopt$inet_mreqn(r15, 0x0, 0x20, &(0x7f0000000f40)={@multicast1, @multicast1}, &(0x7f0000000f80)=0xc)
ioctl$sock_netdev_private(r12, 0x89fb, &(0x7f0000000fc0)="a7f6ef32aae4f571e4fd70eaa876a8959ad8be9121cda630fd3512a0fb57cd9362304bfe413bf14c756dc142367ca43c2aac188af0b1ec42a9206e3d0c3dd4a9489c24ced4399c6d933d96cff6ee477106e11d98034cd2b4c19a72524bec7c12c7773c4f0a2eb86afbacd8496e6333ae0899d10dec4476de27822d")
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44)
close(0xffffffffffffffff)

3.897006213s ago: executing program 0 (id=5686):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3, 0x10000004, 0x8}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001bc0)={@ifindex, 0xffffffffffffffff, 0x3, 0x2008}, 0x20)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000100)='veth0_macvtap\x00', 0xa000000, 0x6, 0xf7})
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4080084)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3, 0x10000004, 0x8}, 0x2c) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001bc0)={@ifindex, 0xffffffffffffffff, 0x3, 0x2008}, 0x20) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000100)='veth0_macvtap\x00', 0xa000000, 0x6, 0xf7}) (async)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4080084) (async)

3.701617397s ago: executing program 2 (id=5689):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @initdev}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x20008804)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000280))
socket$xdp(0x2c, 0x3, 0x0) (async)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r6, &(0x7f0000000140)={0x2c, 0x2, r3, 0x23}, 0x10) (async)
bind$xdp(r6, &(0x7f0000000140)={0x2c, 0x2, r3, 0x23}, 0x10)

3.697578185s ago: executing program 0 (id=5690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x300, 0x70bd27, 0x40000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MAP={0x24, 0xe, {0xfffffffffffffff9, 0x2, 0x8, 0xfffb, 0x2, 0x3}}]}, 0x60}}, 0xc000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500060000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x30)

3.697082814s ago: executing program 3 (id=5691):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x24, r1, 0xa07, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c011}, 0x2400c844)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x24, r1, 0xa07, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c011}, 0x2400c844) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async)

3.634527692s ago: executing program 1 (id=5692):
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20004c00) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) (async, rerun: 32)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000d0000000b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080002400000000308000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000080))
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000500)={0x20, r5, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20044000) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, 0x0, 0x24000000) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0xffffffffffffffff, "ed6a813c34bd31409588933f25e0db086c2662e21e38db8b01c1ffaffc267164", 0x8, 0xffffff7f, 0x100, 0x8}, 0x3c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x383, 0x0, 0x0, 0x0, 0xffff44d4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @jmp={0x5, 0x1, 0x9, 0x0, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000880)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x7, 0x8, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

3.553176868s ago: executing program 1 (id=5693):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
write$nci(r0, 0x0, 0x0)

3.493644719s ago: executing program 0 (id=5694):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be)
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bind$tipc(r1, 0x0, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)

3.451131572s ago: executing program 3 (id=5695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000007, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x14}, @ldst={0x3, 0x0, 0x2, 0x7, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0)

3.392841763s ago: executing program 0 (id=5696):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = getuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e20, 0x95, 0x4e21, 0x3ff, 0xa, 0x0, 0x80, 0x2f, 0x0, r2}, {0x4, 0x104000000000b, 0x2, 0x4, 0x3, 0x5, 0x8, 0xa19}, {0x4, 0xc, 0x2c25097b, 0x5}, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d3, 0x2b}, 0x2, @in6=@private0, 0x3505, 0x1, 0x1, 0x5, 0x7ff, 0x7, 0xd}}, 0xe8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000040000701feffffff000000000b7c00000400428000004400", @ANYRES32=r2, @ANYBLOB="12200280"], 0x30}}, 0xc000)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000029c0))
socket$nl_rdma(0x10, 0x3, 0x14)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
accept(r0, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="0b0325bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES16=r10, @ANYBLOB="00022cbd7000fcdbdf250b00000008002c0007000000050038ff410000"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r8, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106"], 0x40}}, 0x0)
sendto$packet(r5, &(0x7f0000000380)="05d936277c6f5422007f83", 0xb, 0x8081, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14)
r11 = socket$alg(0x26, 0x5, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040))
bind$alg(r11, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
accept4(r11, 0x0, 0x0, 0x80800)
socket$nl_generic(0x10, 0x3, 0x10)

3.265723446s ago: executing program 2 (id=5697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (async)
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0xffff, 0x3, 0xdb93, 0x4, 0x53}, [{0x6, 0x81, 0x3c, 0x4}, {0x9, 0x6f, 0x81, 0xaa}]}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000580)={&(0x7f0000000480)=""/245, 0xf5}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0x9}, {0x2, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x8010)

3.265202739s ago: executing program 3 (id=5698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}]}, 0x54}}, 0x48000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0)

3.223149596s ago: executing program 2 (id=5699):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={<r1=>0x0, 0x9}, &(0x7f0000000080)=0xc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0xbc, 0x5}, 0xc) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={<r2=>r1, @in6={{0xa, 0x4e20, 0x0, @empty, 0x2}}, 0x100, 0x2, 0x8, 0x2cd, 0x6}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x2, 0x7}, 0xc) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={<r3=>r2, @in={{0x2, 0x4e22, @loopback}}, 0x1, 0x7, 0x9, 0x3, 0xa9}, &(0x7f0000000300)=0x98) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x3e, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000003c0)) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) (rerun: 32)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x80a, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x315a08b8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async)
ioctl$sock_proto_private(r4, 0x89e2, &(0x7f00000005c0)="15be880af0a8b4c89494a06ca1eb4a0fc9da032c3ac249dc3ef51a789a68dfdfcceb4a19e24ab932ba580dd7338c44487b07ca949ce39b08275a38e686ad4fc1a916d3702125c285eb513c1923463b74b2ffa44314dc50625b2b967c4d32") (async, rerun: 32)
listen(r0, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x270, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2a9a}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6cdbef7886305331806c2dbb98bdbe983de65c29c387b422"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "875301c00de981ff"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9c02257e4eef0bcb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="80ff44be549ce5ccfd27f5c18cea6bf4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="10f4f3561fc95b00744595fbf8d0491d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="526121db87cfa9062f3e046ac83a7c1a9f0f39fd023038de5b7362acad70d941"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12e91cdb6b27c81a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="90c96c377d038a7c36609b974b02aa0c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b05714455b10356e"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1b07358cfe3127fc1ac0e184196ef735caceb85da70ba363ad5eeeedacb0350f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "705b68f2c611c21c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5e4669713cff0ffd33f5f9c5ce286358893f3b7fcb500e7e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "588a99b22bdc8a93"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="007aae09f2594c785ef46136001c9b6ca0e1afaaa3ca118c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="56a37239c0c26bf8e432f58cd7c7e421"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6b}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1ac5c1527b148519c8bdbc378e6e72cbd846f288b8d95a879c3d32d7b14c2be2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8d5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="372bcdf2e5f75798e82ac8a34a4c73fa29a857d546fd31c6"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="38c319a99fd7b6093be6be1c0e4e581fc60dbf6aea040a1f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e857ca49669a9b9fd0e93e5459b7890aac693a640ecc16a9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2624bc703db8fcea434155f38d61793559f5d87f4442564a"}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x800}, 0xc001)
r6 = accept4$rose(r0, &(0x7f0000000980)=@full={0xb, @dev, @bcast, 0x0, [@default, @remote, @netrom, @netrom, @remote, @null]}, &(0x7f00000009c0)=0x40, 0x80800)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000a00)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfe6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000a80)) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) (rerun: 32)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x41}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x10000)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d00)={r3, 0x4}, 0x8) (async)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000d40)=@assoc_value={r1, 0x161}, 0x8) (async)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000d80)={0x4, [0x10, 0x1ff, 0x0, 0x7]}, &(0x7f0000000dc0)=0xc)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000e00)) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={r0, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10) (async, rerun: 64)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000011c0)={<r9=>r6, &(0x7f00000010c0)='.\x00', 0xc440, &(0x7f0000001100)={@_ha_fsid={[0x5dbecc5e, 0x4]}, {0x1000, 0x40, 0x0, 0x3}}, 0x9, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0x3}) (async, rerun: 64)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001640)={{<r10=>r6, &(0x7f0000001200)='\x00', 0x6200, &(0x7f0000001240)={@_ha_fsid={[0x1, 0x8]}, {0x9, 0x0, 0x9, 0xc}}, 0x7, &(0x7f0000001280), &(0x7f00000012c0)=0x500000}, 0x3, &(0x7f00000015c0)=[{0x2, 0x4f0, &(0x7f0000001300)='[[}].\x00', &(0x7f0000001340)="4b34765c619cde134e89e64b2c2d620b35082062bfd98b2bfe7c21dfded74b419a94360af608e343e0e4bf3bd42103baf01d168765ea4d0fe47eda02bef9949b0607ae3390ed6384ca480f96ac4ffab515e58e19a1b8071f7001bc121200800a8b9d7bb1253749f1dd3ddfc037903d91263e43df0898837729b6300d1899ff0477d530cad0bb30683b5706796fbd605f538203145fb999", 0x97, 0xa}, {0x3, 0xe, &(0x7f0000001400)='TIPCv2\x00', &(0x7f0000001440)="63f9554e83e23ea8", 0x8, 0x2}, {0x0, 0x5, &(0x7f0000001480)=',$\'\x00', &(0x7f00000014c0)="f8ee268c5fdafbc152eb4a05c1aa8675312d269845b2fd85844520f69deb4e73e86c7db58aa04405cdfb43d8dadb905778c2ba969f9f1cf58ac40804d8b63872a4d613bf10b725e09c894a24eb228ad229c15e577c84abd0b532ccc297591a5edb846d0bc1f0be25a0bd97832e8061d9b63cf13720a0659f2231ab6d2b7a61bf434e3c27c4111e816f69afc19be90402c6c4d1350a386879000aec294a5686f51b5d8c2fd69843884bc907417aa1a3b5543e69e582162fd9fa85bf5b03622fb1f66670a81bb6255361eeda6489503fd1c61ff8", 0xd3, 0x32}]}) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x12, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x3, 0x1, 0xb, 0x1, 0x5, 0x100, 0xfffffffffffffffc}, @exit, @exit, @generic={0x5, 0x9, 0x2, 0x6, 0x5}, @generic={0x1, 0x6, 0x6, 0x1aab, 0x100}]}, &(0x7f0000000f00)='syzkaller\x00', 0x7, 0x2d, &(0x7f0000000f40)=""/45, 0x40f00, 0x8, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0xfffffff2, 0x554c}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000016c0)=[r0, r0, r0, r0, r9, r0, r10, r0], &(0x7f0000001700)=[{0x4, 0x3, 0xd, 0xa}, {0x0, 0x3, 0x8, 0x9}, {0x1, 0x3, 0x0, 0x9}, {0x1, 0x1, 0xa, 0x8}], 0x10, 0x80}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0x100, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4048011}, 0x60044041) (async)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f00000019c0)={r1, @in6={{0xa, 0x4e20, 0xe, @private1, 0x1}}}, 0x84)
sendmsg$inet(r4, &(0x7f0000002c40)={&(0x7f0000001a80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)="76d64df9b10f58e71a29c8ebe460835b2b795a1498c35c86b0edad062f5affb73a6593540fecb70934ea5da7fe2bf61a61588c22f450b61574f35657910b84b068c9cde427c5ca728cc6863a58ea8de94c64340e95fd6e076d8157bf534e6c4ef29dad5fdbeb17e5e4a32906822b04e5062c66e10f9a04849eeb6ddfdc067d5616d93a276510f956c94ee8ed7a83cb5953cde8d3416754b6c8470a42fac5269d29042307b5cdb340cc5fe74a6222adc4dff934603eaaa817b23d2d29bc31836143a184064ffabb6928ab2edf1849520c923e72613e7e679f5303638f1fedc69551b78b4180463943", 0xe8}, {&(0x7f0000001bc0)="dd872be787144c361e0c209e10c486e807f372ec5831806755a337ed4f5b1d3ab0bfc545d242461c8c31446a488942079b1256f0ae5978a96292fa70d1298dd2dadabe46a1382edcdb1f227490287f22888ec5d46bd5970a41bdf7a5bf15c76bf5b330187242652c41485e9a2326575318ace01c191dd49e1d705b5b706b6eef07379657a4bbae67e7185f9bbd23950469ad29a4eff4739616521f41fc961da19dd334f78469656060d5e313fbd4fece1c42f12a5a7ba2522d1c68384cc363af3725758e02ec31648973cafd249d0f4ab834e94d54bdb547dea69ca8d6ee0debb345399120aa33e6f49a05a1d8a6a7fa374ab259d1b83ebbc99773d745fad4623fb1ba4f06e72262208c47128e3e1527060455ee832f46b448839c861336adc878e79f624f73534c4be2326414bedf3221d31a611dd4fc69e3cf7d367fd2b5d8a422d7e08842cbe34a7f25c0447ebf0572b6f6335204358b9e9e8e76e29f80d3beabcadbffc4ce76e5c4ce36e96aa8a50420e5198e498f5ede50a046b54dee4237792f3b489278e936e0cce10b5d19741f62374e92094e0277d3d068cfa8813d0395a344064781968b660835b5f0ed7433a958e45f4d36498825a0569fc25a392607cfdb76bfafb1e82a8a70a6ce1b22038592c480a0999040758bb0e2c8c615cce338ce538024965778ab2046c15bedc7bac290a8f9e55a4c05935c6b278e9575ba160cac9fa011fc30eb299f8c04165d05d758780b0a2917ee4088deed25608a28b11ace7d63a6f2f22bb4385064d685aa6a00a5f0f7599b469e9b8cbfecbf4a6b2627f45c465da762371d89833544f891e86c313fcd0c6490b968b553b89d8c9d9d7e489e3b5398be3d9e3b688887c63098220d7f2c24191cb21d9106a45965c965b75cd4651c9022bbe9d0f75589548d69dd94c03cda7c31519e0b9930f34edda9d886c1e62922994760904eca09cbc9690f199e52c354820cc74a7c5ce22864c1cb26c47a7891e7bfc37cf61672e50624e8f94b5dcd214385fadc14be225999dd367f2e0780a99f1048d377cd30c3f58728c3c7173ae976b9a7b76363f9c0fcb147f90d5a45302f188e306af5abd767e470874ff2ce2d656938ec023b3b3bd293d944aa70949ce2eb6425ee37de94737606d883c4414d8f9a02a2463c171bbe3c8aabd9d6ecf3a1e8764134ba240afcc4f8e032170ff51a397c175de575f6b3e1ef5454a1ee98aba347a6cb7bbea2e28c21ad8e5283d7344550d5e831016f6593e79560cc77064c80c6dc7138c52d7f2b838c583e49eb0e583bbb85d0f9ac2b6ef1205fa38659a1f1961ccb9ea2a94511fbddbb4d84c8b1102a00112288b495a469d4e814378822b9f532f22160020e7d5014b62358c9322d74106b384dec14426c7b713593adee259158f588dd8590e77040cd317f537908dff055b5d0c666398e6f455da2a1f1ab6f97a5d896a319e010952f56e26bd085b8518aa31cb3a7435b303600daf9b8d50f0607243ec1cd961479dd3ab0092892ce2cec0304c1cd41c986fc1a1bbaf8b0e1c3fd3403d1de4ee484913422f287fd539ed0c92fde2008719781431340e144d8091c73427bcd0b5afb5e7db9ddd8348235cc2c05e754fd5a9e1034457603e87ea139beb6abd96638d78dba68bea4e70d86c931833053a71fe0d2b6e5ab232be2bef1cac88b95989f31ed6c0717120aa7ead5682b4047c3599a180fe543064f4b938999e8b94cb8b1e9000c2e533a404bfcd64c862a68c5d92479d3b47a841cfe6c65f48ddb55f2d72cb74bb2c4ff8d302a88e8d7bb2e696e3126f654199bda992dbb5e80993076532cc208b125adb9f5ebf38701fa64e407d50fa8e8ca2a9401ae67fd8823d7903ca78d04221d7fb2b124c42a7ed79f041543815de35019716645f91cc6f949f505919e37039274a0684426f6f400832547f2ded664520a152dbd937ca197c3918fc0894f7179aa1930db4558af150fa750046bf31a9bc83d59706caac1785d5ad5dd635282d510058bc5dd51da74e7641212ae79ad09a61b294240ed3b7ff54b8751f7e2ab00e4a0423fa467c07c6d84ecf3d3dc05b3ba5ab17365940b0ecc6871e7ed9ce61a88562433c48a084e4c344e12b578137ad4011dbd359c790656eb513263c2bfc2d3bfd8833c5fa0b949471237d03ea454b696aafbc92b921ccc2a46297eabbf0529c6daab504313163d994a3b41fa90d4dea3ebe80d548a0f78b5f8bef967711bf89fa56ce7b5e99c65430baddc21b11042110aa6aca2b00fbf0f44e37401b15d59f861bbfbcae32d33d7654aee40d9f43ee3370d1dbd990ee094ba7748c14135d7c367b861af2f48da1ec1c6c16349294eba1f38ff83197dac23212d3e1bfc422e966a4674706c8eba27e1d2f77f0c7a86f1c888f9e123b8c3cce8a346d06b3407fab9fa0c70cb5c8866e308950b238c45bda95eb3e6e28e87c77f4b718cb9dee73d8f7ea06a7c5f0b2607811c3212e90307f85ef17a36e2b5850bdbcc1d36b862e287e6eeb8cdccae75cb24e8486de2edb57ec94e05eb3551e97800a3d855b75e5e807f64f56bd9e026c45f3964efc5557459644438fd60cfef824a486f4dcb152aa0c235947ef2d552da7291ade2f637f60b0b6175903f8e3d70c3f98ee6b19e723b938f835ddf782d406bdac91a4d37f3261c1a7b6313a387042753a06587ad34ce2b951eb8fef2e869c920318b6cc9d972cfb6e9d206d816c64fcae481c8dc00dee4637e5bb881c266a38b226c16b495dc64633a6ab583bfb87f09fb11801bef36ef7feee1a6dd0bbec77aaa23764a34b84d76ad078eed17276d580684cea67598eeb663fcf136d7cbeb3e8b28821b41adfc2861e2d9b9e1046ad39f0822ee8eccd6afcbee1d46c797ba547a27ddd48b25c8d32a38c21836c7c3079449528230f522310f8158ba3edc4cdca88c101110d2e5146f033742510db2fb207e781c7aa71dee4c874a941d0138c25ce922cc32e7d55eae9bd4de27843d345070b5b60f7a476b022ed987a17441019ee39d47486e05be21a02a09bf57bf1799ce4413129e76602d92a1acedc24521e475442b991cdc7f1f2d31b4eba76330914c840b6f465984a086384ae4c4a2707cf5c3d9e7a78b86138e1bc7c6a5dba43d80c50f1550d82e46689e8de909a7c0e3ef506452fd53ad19fcc23a97830789bce0fa39b2ed19fca5f6e2adafdee8d1a230d388c6ae9872d0e0a81557050a073bce56198688216c95f09c019bb3fbe9e0198f14b716c5b7d283b2ea2f6bde8bc0af2ed88e8631399f87c028fb3e5ccf2b218e102c8fa909139d091f3a8a4ed89586744da08f724f90ce0f5d49d32ae50d09817f14d89997242e3dcfa0f8ce56f9154c055418d68e2b7b494aaa4c6d86a2335e6b34d9c84d563880c200a1181a565641fbc7c7d2fa2afb8150ce1e9123065e23b96c76e2af5d8d61902f380bb46faf8a6ecb5b5270fe1202838e5d38101287847a177aa7cf14df1575bba7be31562e9336157b360ee4f2074808327fa4bf8ab7b936326b5392590b2591115c47256a9d84337e93726518efaba461a3381528a9d3ab81a303cfaccef873fea9cd526a0dd367aa1117ce89616b7bfb902c735282ebf6ebeb5cd74a745cba1abcf7fb61357e4ba796b3997961bda8f7e589ae36f96390dbfcde412d74d85068976353f9c704a81b460c0505d3e0eb25c8da0017a2b5fa9cb7d4326a88f062b3a7c9ed30f80f4cea886586427504675a4d487ed7e9d82a1dec00c6ed947f116e5302cff5b58e60560bd8ceaff2bf9f4c7dc0a6676752cdacdc41fe613dd35e8019b1a17f7a9d608a652e37a7227e9268fb679e927cbc55a1ba000bd3f12908cb928981c83e94f55fe5aafeee67b6eafca95c14f375dba41a3958af0ffbc6a0c7491972049eca57ac9398e53306f9e8d73240bc6a9637a10ffeb29f96ccda5207923485993418190505438908f6b3bd166f25c21644f57bf23124a5e950281056a0cead3961983cce1931c476d85d6561dba0e64bc5877c9f54afb05cb3f940af80a169a870ac51aad8a2d423db24b739393a9427818db2418d16edae1a2be6f52c04a95730283d1c094cc4cf6b23a35e9d87e37c45b02611a25ae9382ca56f45e50df7acaf775e5b568b8787168fbe6e3d7e235e05e21d0a5f1f75d7ce2d49ee2513471ab408e140fc6c100dbf86a6896527bb23fe8f76fa21895d7477c27660bef57cea97d1d52c30e57c541d9b75765135bcdf33726dbdac3ce27eb16757021600b256ef3da376156454315fcae431eb507796bd0b41395cf12646c43632f38ba2f046d86193f37ffcc5a21a5a388b18a5bc09134b93c1d51a239e7db25b7c48c553554c5a70b2011516ac32595a90fa5f5864f297cba721ac8bd09c6a6ec2a8000b84d0f8060f11bac79f08585ae3e895c9127c1c2df4aea74ea31c4f2360068ca4a2fbe838c3585b9f4f1996267722a0572c4326132978e197382b253e605599e818fb9057bcc53cd34af5d59c55ce9443f11040535b3a98b9fc6066f856d29077eb62aefd6317652449b8ba5212c8262ae9d0afa599142ed698fe21394d525357b4324b7afe5fa8ccd279df1cc3a93dcc66c3c1eec12df7d310d42f0ac978212a726d94c878967bebd43e51b4d5c3bc671aa9bdea7fb813c59104be4bfee38ccff2341e95a668949948c5579e2d5b2a346d032e034df38bcfb6cc2226ca14996dfa9d08ab786bd3088a5568ae04d85db9c931f074a90ab0241273d221a3a96d64f72f49445e4007df91c98441a103656ba1bb710804c2b050937a5a5fec186d2efe2b9622323837af4557da659285c8a2e99776da69e8fe44f0772aedc645cfd9b8c47ff42d5a3d587095908719003be4ada0772fab6b7599874336841df6373db49d61ea2bfd0fbc9421179f329067b8f97815f08b7a04133f759faf7f17717d5b120ecbafe6d9fe41bba27fd7d435d09d64585c1d5948e0f877e92402d1a1ea7bde211d454cb57eea9f929e47489b8030548b9f28980b52ba02873fd9e90ad71c238bfde6ebc8218517aa47b1259eafce82aa18b72fc509100a3bb85d22d815cc3ed95a33336fe0ed52429877ffd078a16c0bc657b54d52baf2ad6ac5058bb4a806d4678a0e5ee184dc58040cf4210321027083a14f664ea4c8fc78cd43f4ac43024e64880187536beeb3e57791d477424abf58f74d5bd62df7b256ae57d91dee430728db7efeaa774ad1bbe8269e34cc50902716d9e60df4da03532f1a0cc0b5a6a68640653315a1df9e1a6db2c04ab9d0ca5698d24cb3d8e34477a5be3509b3e2b1d949e71a532cd69c16d2206e9dc182263743917d112967fa02d470bd4ecb2dbc14225a2d93d6ce143ef3971492fabb317c58de06b1de5198e871d8bf86e2df52efb68dbc550b74549908ff13f4a7cbc8241215c16020a751f89a047d52e219fda9785ffc9882ef27ff619aee3ed88e2d9b882a077fb41c5c0b11992a43e63535845cd3a022900ba6822e826ca65d65f1541f9dd3f0e5432856e799c314383f9816eb36e8ae13fb6629d3f77861b072059c5813d03e1f8d147dfa11ffcf144bf538c3ca56e62c95a6b72f0b11a34edfb8b1338ca3101e496b7564558a96631694ee671db977d7781ca5569585ad7c26aeab48f1b6c690fc3f8a32dae1be7650f2fd8ed082910ab349d6fd6e611ea129bc1ac1472c0bca57c3625ca1fa26624177549280e9eea7baee130310556bee435d688098f3b4d60d5331342bd4c9305ca65c79679a9ad3", 0x1000}], 0x2, &(0x7f0000002c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x10)

2.709645339s ago: executing program 4 (id=5703):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4)
close(r0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) (async)
close(r0) (async)

2.605248166s ago: executing program 4 (id=5704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xc9, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000540)=""/4096, 0x42, 0x1000, 0x0, 0x7}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f00000003c0), 0x4)
recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r4, 0xff08, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xa96)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x7, &(0x7f0000000040)=@raw=[@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000001580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x0, 0x7, 0xfffffc00}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001600)=[r4, r6, r8], &(0x7f0000001640)=[{0x1, 0x1, 0xc, 0x8}, {0x4, 0x4, 0x1, 0x6}], 0x10, 0x3}, 0x94)

1.777966695s ago: executing program 4 (id=5705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfff)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
r8 = socket$kcm(0x2, 0x200000000000004, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f730700000002800800034000000001080001400000001205000200010000000900010873797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240100001e00100029bd7000ffdbdf25ac1414aa000000000000000000000000000004d50a003c00ac1414bb0000000000000000000000000800000000000000e40006000a010101000000000000000000000000fe8000000000000000000000000000aa4e20007f4e24000f0a00202088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x124}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf7e}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x200, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000000)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r4)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r12, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40)

906.569158ms ago: executing program 4 (id=5706):
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r0, 0x301, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000084}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000140))
syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016", @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0)

388.907473ms ago: executing program 2 (id=5707):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xff], [], 'pimreg0\x00', 'geneve1\x00', {}, {}, 0x0, 0x4, 0x0, 0x55}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xffffff00, 0x0, 0xffffff00, 0xffffff], 0x4e21, 0xff, 0x2, 0x4e24, 0x20, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x18, "d05511d4053fa80d56e441286224250ca2535f0c8aa13a6276593694a239"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@icmp6={{0x28}, {0x10, "5bbf", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
socket$inet6_mptcp(0xa, 0x1, 0x106)

388.037192ms ago: executing program 0 (id=5708):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x80000001}}, 0x0, 0x0, 0x80000001, 0x9, 0x32, 0x0, 0xff}, 0x9c)
socket$netlink(0x10, 0x3, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000100)='H', 0x1, 0x80, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c)

386.658031ms ago: executing program 3 (id=5709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7d}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8d0b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

293.733156ms ago: executing program 4 (id=5710):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x6f6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000026c0)={0x2c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000026c0)={0x2c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x20004000)

274.530881ms ago: executing program 2 (id=5711):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f0000000380)="ff1ed8614d03", 0x6}], 0x2}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000053bb467d04f14562c5f463273ef4a720564f485a0000000003000600000000000200100000000000000000000000000002000100000000000000060d01000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94)

192.995213ms ago: executing program 3 (id=5712):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = epoll_create1(0x80000)
ioctl$FICLONE(r2, 0x40049409, r3)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r4, 0x0, 0xfffffffffffffe40, 0xc005, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r3}, 0x18)

162.011464ms ago: executing program 1 (id=5713):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0)="bb7754b5e14ea6d113d880cc2f808bca3fa845dcc1208bcaebd5eac0026e3dedf73a9ce22b24ee719351d6f08e73f917508be71699e13810e49884ee226c9d08db19bf1d34131c69c11fa97d8b990eca39e9d5d20b88387133fd15f7cf1d16ccb8bc73807f8ea256dd", &(0x7f0000000140)=@buf="924e7dfc7c54b2db1512f57f2e51e1cca5a9f3275d0b2485733fc15a2aaae44da8f1ffbd5886ff183903dd94309e98ef4d09a17eb3bd5f38d1bcd63d2e7a93bc47e3f06181bbc52ae774cffbdc23be534b54aafefb0bd65660e220bda769d53457006974bd29cab0b1ae4e84111f7289a9d4c524d98d377cdbed640936b64617d82a875525e0c350dd194f4785305d942058c0076e2686c96c6319eaa08977dec9c697ca8c66ef4bd31d1e97129a9d5dd067b335dd9088d7eb9727a31d1c8265a1", 0x4}, 0x20)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000280)=0x6e2, 0x4)
r1 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e)
bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
listen(r1, 0xffff00b6)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r2)
recvmmsg$unix(r1, &(0x7f0000004600)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/89, 0x59}], 0x3, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)=""/81, 0x51}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/56, 0x38}, {&(0x7f0000001a80)=""/80, 0x50}, {&(0x7f0000001b00)=""/159, 0x9f}, {0xfffffffffffffffc}, {&(0x7f0000001bc0)=""/252, 0xfc}, {&(0x7f0000001cc0)=""/177, 0xb1}, {&(0x7f0000001d80)=""/2, 0x2}], 0x8, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000002340)=[{&(0x7f0000001f80)=""/11, 0xb}, {&(0x7f0000001fc0)=""/209, 0xd1}, {&(0x7f00000020c0)=""/198, 0xc6}, {&(0x7f00000021c0)=""/109, 0x6d}, {&(0x7f0000002240)=""/36, 0x24}, {&(0x7f0000002280)=""/45, 0x2d}, {&(0x7f00000022c0)=""/64, 0x40}, {&(0x7f0000002300)=""/61, 0x3d}], 0x8, &(0x7f00000023c0)=[@rights={{0x18, 0x1, 0x1, [<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000002400), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000002480)=""/253, 0xfd}, {&(0x7f0000002580)=""/123, 0x7b}, {&(0x7f0000002600)=""/243, 0xf3}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/174, 0xae}, {&(0x7f00000037c0)=""/168, 0xa8}, {&(0x7f0000003880)=""/159, 0x9f}, {&(0x7f0000003940)=""/174, 0xae}], 0x8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003b00)=""/162, 0xa2}, {&(0x7f0000003bc0)=""/152, 0x98}, {&(0x7f0000003c80)=""/226, 0xe2}, {&(0x7f0000003d80)=""/179, 0xb3}, {&(0x7f0000003e40)=""/28, 0x1c}, {&(0x7f0000003e80)=""/178, 0xb2}], 0x6, &(0x7f0000003fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000004000)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004080)=""/153, 0x99}, {&(0x7f0000004140)}], 0x2, &(0x7f00000041c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004200), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004280)=""/12, 0xc}, {&(0x7f00000042c0)=""/58, 0x3a}, {&(0x7f0000004300)=""/247, 0xf7}, {&(0x7f0000004400)=""/223, 0xdf}], 0x4, &(0x7f0000004540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x8, 0x0, &(0x7f0000004800)={0x77359400})
socket$nl_audit(0x10, 0x3, 0x9)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004880), r11)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000004940)={&(0x7f0000004840), 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x20, r14, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40811)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000004980)={0x3ff, [{}, {}, {}, {}, {<r15=>0x0}], 0x81, "b11645b5d58222"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000005980)={{r15, 0x5743, 0x668, 0x8001, 0x5, 0x8, 0x5, 0x4, 0x3ff, 0xfffffffb, 0x6, 0x3, 0x100000001, 0xfffffffffffffffc}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r16 = accept4(r8, &(0x7f0000005a40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000005ac0)=0x80, 0x800)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005b40), r13)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r16, &(0x7f00000060c0)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006080)={&(0x7f0000005b80)={0x4fc, r17, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xba}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x739b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x344, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9b2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x2}, {0x4}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x8}, {0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x7}, {0x2}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x7}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x6}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x2}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x3}, {0x3}, {0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff00000000}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x7}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x7}, {0x7, 0xa}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0xa}, {}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0x8}, {0x5, 0x3}, {0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x3}, {0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff6, 0x1, 0x7, 0x100, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x100, 0x8, 0x8001, 0x0, 0x7, 0x99, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x9, 0x9, 0xf37, 0xfff, 0x9, 0x6, 0x100]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0x6, 0xc, 0x6, 0x60, 0xc, 0xc, 0xc, 0x4, 0x36, 0x6c, 0x1, 0x9, 0x3, 0x12]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x5, 0x0, 0xc, 0x6, 0x1, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x5, 0x3, 0x0, 0x5, 0x1000, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x6, 0x30, 0x5, 0x30, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x48, 0x4, 0x48, 0x5, 0xf6f75ea06441aff3, 0x9, 0x1, 0x3, 0x9, 0x6, 0x6c, 0x2, 0x60, 0x4, 0x1b, 0x2, 0x16, 0xb, 0x48, 0xc, 0x9, 0x36, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x6}, {0x4, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff8d, 0x6, 0x800, 0x3, 0x8, 0x10, 0x8000, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x6, 0x6, 0x1b, 0x2c, 0x1b, 0x30, 0x6, 0x6, 0x1b, 0x4]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x18, 0x9, 0x4c, 0x401, 0x4, 0x73]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0xc1c0, 0x3, 0x5, 0x4, 0x800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4df9dc8bc68e508}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, &(0x7f0000006100))
r18 = accept$unix(r7, &(0x7f0000006140), &(0x7f00000061c0)=0x6e)
recvfrom$unix(r18, &(0x7f0000006200)=""/192, 0xc0, 0x1, &(0x7f00000062c0)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f0000006340)={{0x88, @broadcast, 0x4e24, 0x1, 'lblcr\x00', 0x2, 0xfffff800, 0x61}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e20, 0x2, 0x6, 0x7, 0x2}}, 0x44)
r19 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r19, &(0x7f00000063c0)={0x8})
ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000006400))
setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000006800)=0x1, 0x4)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000006840)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default]})
connect$inet6(r6, &(0x7f00000068c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c)
r20 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r20, 0x890b, &(0x7f0000006900)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

145.026464ms ago: executing program 4 (id=5714):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000c40)="ea", 0x1}, {&(0x7f00000000c0)="79c516baf7f19c7ca7b2274ed167e32edae481027249e7836118128649492d3ffafd1f8154d25340bd1ee43cff1f5aa50515f2be667c54a05338257958d272fb07e17863d01d66b6a6b09bc7cf052004061b81c34d8d037649ddd0f854f81c9ffa0a63dd1938d4237738f56855610fe1e781386cc1a03333b0aac80f8c3a47ee1900a4ae35b7dfb32ca0b37d8daf0ff32cf65d0c7a835bd6cb6fc681287c00238bfe3287f967b2a081dbaafd50c41b43f2715751f9e90cf3936de6b885a600d100225c90bc40c35ce6cf1a8a7047d1c43e1eaac80f8ce6a38a018c5d514de727295f6f01fd294fa57d110836", 0xec}], 0x2}}], 0x2, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)

42.431742ms ago: executing program 3 (id=5715):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=<r12=>0x0, &(0x7f00000003c0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', <r13=>0x0, 0x1, 0x8, 0x1, 0x7f, {{0x23, 0x4, 0x0, 0x26, 0x8c, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x4, [{@rand_addr=0x64010100, 0xf70}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010100, 0x3}, {@loopback, 0x5}, {@multicast1, 0x1}, {@remote, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe, [@local, @loopback, @remote]}, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x401}, {@multicast2, 0x88}, {@empty, 0x9}, {@multicast1, 0x2}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', <r14=>0x0, 0x29, 0x1, 0x3, 0x4, 0x1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x4, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', <r16=>0x0, 0x2f, 0x6, 0x5, 0x5, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0x40, 0x8, 0x8}}) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000840)={@private2, <r17=>0x0}, &(0x7f0000000880)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'tunl0\x00', <r18=>0x0, 0x1, 0x1, 0x800, 0x5, {{0x18, 0x4, 0x1, 0x5, 0x60, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1f, 0xf1, [@broadcast, @local, @multicast2, @empty, @rand_addr=0x64010102, @remote, @remote]}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x2, [{@remote, 0x7}, {@private=0xa010101, 0x1}, {@private=0xa010102, 0x3}, {@remote, 0x7}, {@multicast2, 0x33280}]}]}}}}}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gretap0\x00', <r19=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f00000009c0)={0x5c0, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xcc0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x2e, 0x9, 0x4}, {0x4d, 0x2, 0x1, 0xe}, {0x4f6, 0x7, 0x81, 0x401}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r15}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x88}, 0x80) (async)
r20 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async)
r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r22 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r22, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r22, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r21, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

0s ago: executing program 1 (id=5716):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000e700000000000012000000"], 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r4=>r0, 0xffffffffffffffff, 0xf, 0x3})
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2814}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x84)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r6=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

kernel console output (not intermixed with test programs):

in process `syz.0.3910'.
[  443.456975][T20177] syzkaller0: entered promiscuous mode
[  443.462725][T20177] syzkaller0: entered allmulticast mode
[  443.562280][T20184] netlink: 'syz.0.3912': attribute type 23 has an invalid length.
[  443.594768][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3911'.
[  443.940838][T20206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3917'.
[  444.041440][   T13] IPVS: stop unused estimator thread 0...
[  444.400782][T20229] bond0: entered promiscuous mode
[  444.426349][T20229] bond_slave_0: entered promiscuous mode
[  444.453743][T20229] bond_slave_1: entered promiscuous mode
[  444.921875][T20255] 8021q: VLANs not supported on lo
[  444.959599][T20255] veth0: entered promiscuous mode
[  444.967205][T20261] 8021q: VLANs not supported on lo
[  444.996159][T20261] veth0: left promiscuous mode
[  445.481291][T20284] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.534346][T20284] 8021q: adding VLAN 0 to HW filter on device bond5
[  445.777592][T20309] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  445.824166][T20309] team0: Device macvlan2 is already an upper device of the team interface
[  446.164240][T20321] __nla_validate_parse: 4 callbacks suppressed
[  446.164261][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3945'.
[  446.452140][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3948'.
[  446.782051][T20355] netlink: 'syz.2.3953': attribute type 1 has an invalid length.
[  447.219105][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'.
[  447.228125][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'.
[  447.352377][T20385] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  447.391736][T20385] gre0: left promiscuous mode
[  447.400911][T20385] gre0: left allmulticast mode
[  447.476675][T20385] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.568670][T20385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.582564][T20385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.725626][T20385] h: left promiscuous mode
[  447.732834][T20385] ip6erspan0: left promiscuous mode
[  447.739354][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3955'.
[  447.752692][   T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.775136][   T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.800096][   T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.830793][   T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.045121][T20405] veth3: entered allmulticast mode
[  448.071944][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'.
[  448.108961][T20413] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3964'.
[  448.117996][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'.
[  448.193426][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'.
[  448.209421][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  448.306542][T20421] hsr_slave_0: left promiscuous mode
[  448.366700][T20421] hsr_slave_1: left promiscuous mode
[  448.601321][T20444] netlink: 'syz.4.3969': attribute type 21 has an invalid length.
[  448.618191][T20446] netlink: 'syz.0.3971': attribute type 32 has an invalid length.
[  448.846553][T20446] bond2: option coupled_control: invalid value (60)
[  448.857715][T20446] bond2 (unregistering): Released all slaves
[  448.868745][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  448.876830][    C0] lec:lec_tx_timeout: lec0
[  448.882463][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  449.330713][T20483] netlink: 'syz.3.3979': attribute type 2 has an invalid length.
[  449.723989][T20490] lo: entered allmulticast mode
[  449.759285][T20490] tunl0: left promiscuous mode
[  449.772365][T20490] tunl0: entered allmulticast mode
[  449.779524][T20490] gre0: entered allmulticast mode
[  449.799728][T20490] gretap0: entered allmulticast mode
[  449.805375][T20490] erspan0: left promiscuous mode
[  449.810679][T20490] ip_vti0: entered allmulticast mode
[  449.816322][T20490] ip6_vti0: entered allmulticast mode
[  449.822205][T20490] sit0: entered allmulticast mode
[  449.827560][T20490] ip6tnl0: entered allmulticast mode
[  449.841954][T20490] ip6gre0: entered allmulticast mode
[  449.848126][T20490] syz_tun: entered allmulticast mode
[  449.853894][T20490] ip6gretap0: entered allmulticast mode
[  449.859893][T20490] bridge0: entered allmulticast mode
[  449.865553][T20490] bond0: entered allmulticast mode
[  449.870947][T20490] bond_slave_0: entered allmulticast mode
[  449.877232][T20495] openvswitch: netlink: Message has 4096 unknown bytes.
[  449.892973][T20490] bond_slave_1: entered allmulticast mode
[  449.899533][T20490] team0: entered allmulticast mode
[  449.905099][T20490] team_slave_0: entered allmulticast mode
[  449.911568][T20490] team_slave_1: entered allmulticast mode
[  449.917494][T20490] batadv1: entered allmulticast mode
[  449.923232][T20490] dummy0: entered allmulticast mode
[  449.928826][T20490] nlmon0: entered allmulticast mode
[  449.934438][T20490] caif0: entered allmulticast mode
[  449.956631][T20490] batadv0: entered allmulticast mode
[  449.962301][T20490] vxcan0: entered allmulticast mode
[  449.967951][T20490] –: entered allmulticast mode
[  449.974168][T20490] veth0: entered allmulticast mode
[  449.979731][T20490] veth1: entered allmulticast mode
[  449.985149][T20490] wg0: entered allmulticast mode
[  449.990529][T20490] wg1: entered allmulticast mode
[  449.995807][T20490] wg2: entered allmulticast mode
[  450.026408][T20490] veth0_to_bridge: entered allmulticast mode
[  450.047621][T20490] veth1_to_bridge: entered allmulticast mode
[  450.057620][T20490] veth0_to_bond: entered allmulticast mode
[  450.074918][T20490] veth1_to_bond: entered allmulticast mode
[  450.091112][T20490] veth0_to_team: entered allmulticast mode
[  450.097220][T20490] veth1_to_team: entered allmulticast mode
[  450.103591][T20490] veth0_to_batadv: entered allmulticast mode
[  450.110799][T20490] batadv_slave_0: entered allmulticast mode
[  450.116959][T20490] veth1_to_batadv: entered allmulticast mode
[  450.123429][T20490] batadv_slave_1: entered allmulticast mode
[  450.130028][T20490] xfrm0: entered allmulticast mode
[  450.135354][T20490] veth0_to_hsr: entered allmulticast mode
[  450.141472][T20490] hsr_slave_0: entered allmulticast mode
[  450.147285][T20490] veth1_to_hsr: entered allmulticast mode
[  450.155226][T20490] hsr_slave_1: entered allmulticast mode
[  450.161168][T20490] hsr0: entered allmulticast mode
[  450.166535][T20490] veth1_virt_wifi: entered allmulticast mode
[  450.172923][T20490] veth0_virt_wifi: entered allmulticast mode
[  450.179259][T20490] virt_wifi0: entered allmulticast mode
[  450.184994][T20490] veth1_vlan: entered allmulticast mode
[  450.190836][T20490] veth0_vlan: entered allmulticast mode
[  450.196568][T20490] vlan0: entered allmulticast mode
[  450.202098][T20490] vlan1: entered allmulticast mode
[  450.207351][T20490] macvlan0: entered allmulticast mode
[  450.213052][T20490] macvlan1: entered allmulticast mode
[  450.218917][T20490] ipvlan0: entered allmulticast mode
[  450.224391][T20490] ipvlan1: entered allmulticast mode
[  450.230678][T20490] veth1_macvtap: entered allmulticast mode
[  450.236671][T20490] veth0_macvtap: entered allmulticast mode
[  450.243332][T20490] macvtap0: entered allmulticast mode
[  450.248964][T20490] macsec0: entered allmulticast mode
[  450.254770][T20490] geneve0: entered allmulticast mode
[  450.260401][T20490] geneve1: entered allmulticast mode
[  450.265891][T20490] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  450.273902][T20490] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  450.281959][T20490] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  450.289854][T20490] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  450.297627][T20490] mac80211_hwsim hwsim30 wlan0: left promiscuous mode
[  450.307797][T20490] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[  450.315534][T20490] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  450.323306][T20490] mac80211_hwsim hwsim34 wlan2: entered allmulticast mode
[  450.331069][T20490] mac80211_hwsim hwsim35 wlan3: entered allmulticast mode
[  450.338554][T20490] bond1: entered allmulticast mode
[  450.344450][T20490] bridge1: entered allmulticast mode
[  450.350272][T20490] ip6tnl1: entered allmulticast mode
[  450.356694][T20490] ip6tnl2: entered allmulticast mode
[  450.368537][T20490] bond3: left promiscuous mode
[  450.373826][T20490] vti0: left promiscuous mode
[  450.381577][T20490] bond3: entered allmulticast mode
[  450.387250][T20490] vti0: entered allmulticast mode
[  450.392944][T20490] ip6gre1: entered allmulticast mode
[  450.398492][T20490] bridge2: entered allmulticast mode
[  450.404335][T20490] erspan1: entered allmulticast mode
[  450.410367][T20490] geneve2: entered allmulticast mode
[  450.415960][T20490] batadv2: entered allmulticast mode
[  450.421676][T20490] veth2: entered allmulticast mode
[  450.427034][T20490] veth3: entered allmulticast mode
[  450.433080][T20490] bond4: left promiscuous mode
[  450.438333][T20490] batadv3: left promiscuous mode
[  450.447845][T20490] bond4: entered allmulticast mode
[  450.453334][T20490] batadv3: entered allmulticast mode
[  450.462244][T20490] bridge3: entered allmulticast mode
[  450.471917][T20498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.798909][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.826123][T20532] netlink: 'syz.4.3992': attribute type 7 has an invalid length.
[  451.025209][T20542] netlink: 'syz.0.3993': attribute type 4 has an invalid length.
[  451.081678][T20544] syzkaller0: entered promiscuous mode
[  451.082727][T20546] xt_l2tp: missing protocol rule (udp|l2tpip)
[  451.087218][T20544] syzkaller0: entered allmulticast mode
[  451.122979][T20546] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  451.213789][T20551] syzkaller1: entered promiscuous mode
[  451.219429][T20551] syzkaller1: entered allmulticast mode
[  451.232019][T20554] netlink: 'syz.4.4000': attribute type 1 has an invalid length.
[  451.244466][T20551] __nla_validate_parse: 11 callbacks suppressed
[  451.244484][T20551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3998'.
[  451.359753][T20565] netlink: 'syz.1.4002': attribute type 9 has an invalid length.
[  451.379685][T20565] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4002'.
[  451.470965][T20570] netlink: 'syz.4.4003': attribute type 1 has an invalid length.
[  451.479439][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'.
[  451.876974][T20596] syzkaller0: entered promiscuous mode
[  451.887891][T20596] syzkaller0: entered allmulticast mode
[  452.022501][T20607] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  452.043923][T20607] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  452.059933][T20608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4016'.
[  452.062210][T20607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  452.369645][T20631] syzkaller1: entered promiscuous mode
[  452.375473][T20631] syzkaller1: entered allmulticast mode
[  452.446688][T20638] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4024'.
[  452.463741][T20639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4024'.
[  452.573288][T20645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4026'.
[  452.604639][T20646] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[  452.612997][T20646] –: left allmulticast mode
[  452.619910][T20646] –: entered allmulticast mode
[  452.624889][T20646] team0: Device – is of different type
[  452.641104][ T5911] IPVS: starting estimator thread 0...
[  452.652900][T20645] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4026'.
[  452.743431][T20650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4027'.
[  452.753056][T20648] IPVS: using max 32 ests per chain, 76800 per kthread
[  453.046550][T20662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4031'.
[  453.300355][T20675] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  453.343039][T20675] tipc: Trying to set illegal importance in message
[  453.375591][T20673] syzkaller0: entered promiscuous mode
[  453.401649][T20673] syzkaller0: entered allmulticast mode
[  453.447828][T20681] xt_hashlimit: size too large, truncated to 1048576
[  453.898761][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  453.906871][    C0] lec:lec_tx_timeout: lec0
[  453.913649][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  454.132624][T20701] netlink: 'syz.0.4045': attribute type 1 has an invalid length.
[  455.249263][T20701] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  455.382704][T20719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.398311][T20719] IPv6: NLM_F_CREATE should be set when creating new route
[  455.649419][T20729] bond4: (slave lo): Releasing backup interface
[  455.669530][T20729] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  455.707582][T20729] bridge_slave_0: left allmulticast mode
[  455.739460][T20729] bridge_slave_0: left promiscuous mode
[  455.746382][T20729] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.813525][T20729] bridge_slave_1: left allmulticast mode
[  455.863420][T20729] bridge_slave_1: left promiscuous mode
[  455.889874][T20729] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.938061][T20729] bond0: (slave bond_slave_0): Releasing backup interface
[  455.977191][T20729] bond_slave_0: left promiscuous mode
[  456.019291][T20729] bond0: (slave bond_slave_1): Releasing backup interface
[  456.040489][T20729] bond_slave_1: left promiscuous mode
[  456.057100][T20729] team0: Port device team_slave_0 removed
[  456.101834][T20729] team0: Port device team_slave_1 removed
[  456.113022][T20729] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.121487][T20729] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.141065][T20729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  456.279638][T20758] __nla_validate_parse: 8 callbacks suppressed
[  456.279660][T20758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4054'.
[  456.466190][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4056'.
[  456.873137][T20790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4063'.
[  456.946709][T20788] lo speed is unknown, defaulting to 1000
[  457.212079][T20805] x_tables: duplicate underflow at hook 1
[  457.269799][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'.
[  457.279197][T20805] bond2: left promiscuous mode
[  457.284367][T20805] bridge0: port 3(bond2) entered disabled state
[  457.322741][T20805] bridge_slave_1: left promiscuous mode
[  457.328766][T20805] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.350934][ T5842] Bluetooth: hci5: command 0x0406 tx timeout
[  457.391127][T20805] bridge_slave_0: left promiscuous mode
[  457.405001][T20805] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.452936][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'.
[  457.573038][T20814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4072'.
[  457.588866][T20814] netlink: 320 bytes leftover after parsing attributes in process `syz.4.4072'.
[  457.693270][T20814] syzkaller0: entered promiscuous mode
[  457.699837][T20814] syzkaller0: entered allmulticast mode
[  457.748107][T20817] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  457.782256][T20817] bond5 (unregistering): Released all slaves
[  458.938755][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  458.946805][    C0] lec:lec_tx_timeout: lec0
[  458.951640][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  459.099126][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'.
[  459.487772][T20817] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  459.488680][T20829] netlink: 'syz.0.4076': attribute type 20 has an invalid length.
[  459.519926][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'.
[  459.579914][T20829] netlink: 'syz.0.4076': attribute type 20 has an invalid length.
[  459.581347][  T759] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.587770][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'.
[  459.629120][  T759] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.637361][  T759] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.667657][  T759] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  460.066144][T20881] netlink: 'syz.4.4091': attribute type 11 has an invalid length.
[  460.162259][T20881] syzkaller0: entered promiscuous mode
[  460.167826][T20881] syzkaller0: entered allmulticast mode
[  460.311093][T20894] netlink: 'syz.2.4096': attribute type 11 has an invalid length.
[  460.443866][T20897] nbd: must specify an index to disconnect
[  460.967563][T20934] netlink: 'syz.3.4111': attribute type 13 has an invalid length.
[  460.989953][T20934] netlink: 'syz.3.4111': attribute type 17 has an invalid length.
[  460.999748][T20934] lo: left allmulticast mode
[  461.014930][T20934] tunl0: left allmulticast mode
[  461.040755][T20934] gre0: left allmulticast mode
[  461.052925][T20934] gretap0: left allmulticast mode
[  461.084191][T20934] erspan0: left allmulticast mode
[  461.113413][T20934] ip_vti0: left allmulticast mode
[  461.150728][T20934] ip6_vti0: left allmulticast mode
[  461.173258][T20934] sit0: left allmulticast mode
[  461.187759][T20934] ip6tnl0: left allmulticast mode
[  461.198185][T20934] ip6gre0: left allmulticast mode
[  461.206280][T20934] syz_tun: left allmulticast mode
[  461.222368][T20934] ip6gretap0: left allmulticast mode
[  461.255533][T20934] bond0: left allmulticast mode
[  461.281019][T20934] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.303634][T20934] team0: left allmulticast mode
[  461.323269][T20934] 8021q: adding VLAN 0 to HW filter on device team0
[  461.342100][T20934] dummy0: left allmulticast mode
[  461.352731][T20934] nlmon0: left allmulticast mode
[  461.361040][T20934] caif0: left allmulticast mode
[  461.366022][T20934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  461.419917][T20949] bridge5: entered promiscuous mode
[  461.434162][T20949] bridge5: entered allmulticast mode
[  461.523148][T20956] __nla_validate_parse: 8 callbacks suppressed
[  461.523169][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'.
[  461.735522][T20966] syzkaller1: entered promiscuous mode
[  461.741448][T20966] syzkaller1: entered allmulticast mode
[  462.790840][T20984] netlink: 'syz.2.4123': attribute type 9 has an invalid length.
[  463.103097][T20990] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  463.837320][T20924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  463.958786][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  463.966858][    C0] lec:lec_tx_timeout: lec0
[  463.971781][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  464.092164][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4130'.
[  464.111313][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4128'.
[  464.386224][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'.
[  464.421080][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'.
[  464.425391][T21013] bond3: option miimon: invalid value (18446744073709551585)
[  464.437549][T21013] bond3: option miimon: allowed values 0 - 2147483647
[  464.483798][T21013] bond3 (unregistering): Released all slaves
[  464.714359][T21026] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4135'.
[  464.743261][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'.
[  464.752944][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'.
[  464.810044][T21029] netlink: 'syz.3.4136': attribute type 10 has an invalid length.
[  464.830301][T21029] team0: Device – is of different type
[  464.910742][T21032] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.951794][T21032] bridge_slave_0 (unregistering): left allmulticast mode
[  464.972318][T21032] bridge_slave_0 (unregistering): left promiscuous mode
[  464.979655][T21032] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.996127][T21038] netlink: 'syz.1.4138': attribute type 1 has an invalid length.
[  465.086471][T21046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4139'.
[  465.140289][T21047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'.
[  465.176301][T21039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.348665][T21056] openvswitch: netlink: Key 32 has unexpected len 8 expected 2
[  465.655833][T21078] netlink: 'syz.0.4151': attribute type 64 has an invalid length.
[  465.838011][T21086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.849884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.894303][T21088] netlink: 'syz.0.4152': attribute type 4 has an invalid length.
[  466.367598][T21111] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003
[  466.404230][T21111] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003
[  466.433201][T21111] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003
[  466.475105][T21116] netlink: 'syz.0.4161': attribute type 1 has an invalid length.
[  466.564369][T21116] bond2: entered promiscuous mode
[  466.569950][T21116] 8021q: adding VLAN 0 to HW filter on device bond2
[  466.616816][T21116] 8021q: adding VLAN 0 to HW filter on device bond2
[  466.637312][T21116] bond2: (slave vti1): The slave device specified does not support setting the MAC address
[  466.662639][T21116] bond2: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  466.679281][T21116] bond2: (slave vti1): making interface the new active one
[  466.686949][T21116] vti1: entered promiscuous mode
[  466.695599][T21116] bond2: (slave vti1): Enslaving as an active interface with an up link
[  466.705258][T21134] __nla_validate_parse: 9 callbacks suppressed
[  466.705274][T21134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4163'.
[  466.720960][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'.
[  466.776953][T21132] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4165'.
[  466.928570][T21141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'.
[  466.963447][T21141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4168'.
[  467.416174][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4177'.
[  467.589201][ T5842] Bluetooth: hci4: command 0x0406 tx timeout
[  467.822083][T21202] xt_l2tp: missing protocol rule (udp|l2tpip)
[  467.967506][T21208] netlink: 'syz.4.4186': attribute type 39 has an invalid length.
[  468.121479][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'.
[  468.221794][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4190'.
[  468.262799][T21217] : entered promiscuous mode
[  468.345407][T21224] syzkaller0: entered promiscuous mode
[  468.359429][T21224] syzkaller0: entered allmulticast mode
[  468.700510][T21252] netlink: 'syz.4.4200': attribute type 75 has an invalid length.
[  468.708907][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  468.942724][T21267] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  468.963408][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4204'.
[  469.025287][T21272] vlan2: entered promiscuous mode
[  469.044797][T21272] erspan0: entered promiscuous mode
[  469.135433][T21273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'.
[  469.222067][T21282] netlink: 'syz.3.4208': attribute type 153 has an invalid length.
[  469.371888][T21282] bond5: entered promiscuous mode
[  469.377300][T21284] 8021q: VLANs not supported on caif0
[  469.988820][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms
[  469.996927][    C0] lec:lec_tx_timeout: lec0
[  470.001790][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  471.790730][T21360] lo: entered promiscuous mode
[  471.805189][T21360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.266578][T21385] netlink: 'syz.2.4236': attribute type 2 has an invalid length.
[  472.383407][T21389] __nla_validate_parse: 5 callbacks suppressed
[  472.383427][T21389] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4237'.
[  472.480483][T21402] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  472.545217][T21414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4243'.
[  472.814460][T21425] netlink: 'syz.0.4247': attribute type 11 has an invalid length.
[  472.825178][T21425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4247'.
[  472.952269][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'.
[  473.017793][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'.
[  473.028016][T21437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4251'.
[  473.323546][T21451] x_tables: ip_tables: TTL target: only valid in mangle table, not 
[  473.706519][T21476] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  473.720527][T21480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4266'.
[  473.732298][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'.
[  473.745030][T21476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.755431][T21480] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  473.770018][T21482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4263'.
[  473.813942][T21488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.893665][T21481] lo speed is unknown, defaulting to 1000
[  474.031783][T12094] IPVS: starting estimator thread 0...
[  474.039140][T21503] delete_channel: no stack
[  474.092063][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4271'.
[  474.120368][T21501] IPVS: using max 29 ests per chain, 69600 per kthread
[  474.153100][T21507] IPVS: ip_vs_add_dest(): server weight less than zero
[  474.588202][T21530] lo speed is unknown, defaulting to 1000
[  475.021941][T21550] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  475.121995][T21550] bond6: (slave lo): Enslaving as an active interface with an up link
[  475.139471][T21550] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  475.139667][T21557] netlink: 'syz.1.4288': attribute type 1 has an invalid length.
[  475.217893][ T5911] lo speed is unknown, defaulting to 1000
[  475.226596][ T5911] syz0: Port: 1 Link ACTIVE
[  475.263844][T12105] lo speed is unknown, defaulting to 1000
[  475.340277][T21557] 8021q: adding VLAN 0 to HW filter on device bond3
[  475.347860][T21560] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  475.372472][T21560] bond3: entered allmulticast mode
[  475.445918][T21570] lo speed is unknown, defaulting to 1000
[  475.652018][T21588] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  475.660639][T21588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.751338][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  475.759393][    C0] lec:lec_tx_timeout: lec0
[  475.766754][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  476.237214][T21617] netlink: 'syz.1.4304': attribute type 10 has an invalid length.
[  476.435623][T21621] netlink: 'syz.1.4306': attribute type 1 has an invalid length.
[  476.540478][T21628] xt_bpf: check failed: parse error
[  476.547305][T21627] xt_bpf: check failed: parse error
[  476.575704][T21627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.599878][T21627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.623287][T21627] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  476.643673][T21627] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  476.654483][T21627] bond0 (unregistering): Released all slaves
[  476.811586][T21647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.827095][T21647] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.842178][T21647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.872842][T21647] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.155772][T21671] xt_hashlimit: size too large, truncated to 1048576
[  477.273777][T21674] bridge_slave_0 (unregistering): left allmulticast mode
[  477.319170][T21674] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.480926][T21689] netlink: 'syz.3.4328': attribute type 1 has an invalid length.
[  477.489274][T21689] __nla_validate_parse: 16 callbacks suppressed
[  477.489293][T21689] netlink: 476 bytes leftover after parsing attributes in process `syz.3.4328'.
[  477.525502][T21689] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4328'.
[  477.552571][T21692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4328'.
[  477.710116][T21698] netlink: 'syz.3.4331': attribute type 22 has an invalid length.
[  477.719195][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4332'.
[  477.739375][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'.
[  477.758279][T21705] netlink: 'syz.0.4333': attribute type 1 has an invalid length.
[  477.778123][T21698] netlink: 'syz.3.4331': attribute type 22 has an invalid length.
[  477.786487][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'.
[  477.815957][T21705] bond3: entered promiscuous mode
[  477.821558][T21705] 8021q: adding VLAN 0 to HW filter on device bond3
[  477.829367][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  477.836314][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  477.845245][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  477.861960][T21699] bond7: entered promiscuous mode
[  477.867115][T21699] bond7: entered allmulticast mode
[  477.882727][T21708] bond3: (slave bridge1): making interface the new active one
[  477.891318][T21708] bridge1: entered promiscuous mode
[  477.897230][T21708] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  477.906984][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  477.919600][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  478.483631][T21745] netlink: 'syz.2.4347': attribute type 2 has an invalid length.
[  478.637334][T21754] lo speed is unknown, defaulting to 1000
[  478.647546][T21748] lo speed is unknown, defaulting to 1000
[  479.093626][T21771] xt_CT: No such helper "pptp"
[  479.101472][T21771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4353'.
[  479.123005][T21771] netlink: 'syz.3.4353': attribute type 7 has an invalid length.
[  479.140259][T21776] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4355'.
[  479.145686][T21771] netlink: 'syz.3.4353': attribute type 8 has an invalid length.
[  479.179033][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'.
[  479.330886][T21787] netlink: 'syz.1.4357': attribute type 1 has an invalid length.
[  479.385540][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4360'.
[  479.495505][T21787] bond0: (slave gretap1): making interface the new active one
[  479.504882][T21787] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  479.553622][T21787] macvlan2: entered promiscuous mode
[  479.565864][T21787] macvlan2: entered allmulticast mode
[  479.583521][T21787] bond0: entered promiscuous mode
[  479.593760][T21787] gretap1: entered promiscuous mode
[  479.600704][T21787] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  479.609892][T21787] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  479.644228][T21787] bond0: left promiscuous mode
[  479.660735][T21787] gretap1: left promiscuous mode
[  479.901365][T21821] netlink: 'syz.0.4367': attribute type 33 has an invalid length.
[  479.973132][T21821] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  479.993273][T21821] bond4 (unregistering): Released all slaves
[  480.296156][T21843] netlink: 'syz.0.4373': attribute type 18 has an invalid length.
[  480.648083][T21871] gre0: left promiscuous mode
[  480.741490][T21870] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  480.758863][T21871] gre0: left allmulticast mode
[  480.766434][T21871] F: left allmulticast mode
[  480.788829][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  480.796937][    C0] lec:lec_tx_timeout: lec0
[  480.801914][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  480.813417][T21871] bond0: left promiscuous mode
[  480.820206][T21871] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.847021][T21871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.436802][T21867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.735725][T21912] bond4: (slave gretap2): making interface the new active one
[  481.744247][T21912] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  482.557439][T21939] __nla_validate_parse: 10 callbacks suppressed
[  482.557467][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'.
[  482.698030][T21939] bond6: option xmit_hash_policy: invalid value (64)
[  482.741417][T21939] bond6 (unregistering): Released all slaves
[  482.759820][T21953] validate_nla: 3 callbacks suppressed
[  482.759841][T21953] netlink: 'syz.4.4403': attribute type 1 has an invalid length.
[  482.941495][T21953] 8021q: adding VLAN 0 to HW filter on device bond5
[  482.960734][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  483.024118][T21966] netlink: 'syz.3.4407': attribute type 4 has an invalid length.
[  483.280136][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4415'.
[  483.307767][T21984] netlink: 'syz.3.4413': attribute type 3 has an invalid length.
[  483.342683][T21984] netlink: 'syz.3.4413': attribute type 1 has an invalid length.
[  483.357475][T21984] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4413'.
[  483.368906][T21984] NCSI netlink: No device for ifindex 813332851
[  483.403246][T21984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4413'.
[  483.499285][T21997] netlink: 'syz.4.4417': attribute type 3 has an invalid length.
[  483.518557][T21998] geneve3: entered promiscuous mode
[  483.526803][T21997] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4417'.
[  483.537020][T21998] geneve3: entered allmulticast mode
[  483.554836][  T759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  483.568820][  T759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  483.594401][  T759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  483.620722][T22006] netlink: 'syz.0.4421': attribute type 33 has an invalid length.
[  483.634002][  T759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  483.762974][T22010] syzkaller0: entered promiscuous mode
[  483.768518][T22010] syzkaller0: entered allmulticast mode
[  483.859185][T22006] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  483.871559][T22006] bond4 (unregistering): Released all slaves
[  483.936705][T22016] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  483.955708][T22016] bond6: (slave lo): Enslaving as an active interface with an up link
[  483.984486][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4425'.
[  484.009826][T22016] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  484.058164][T22023] netlink: 'syz.1.4424': attribute type 25 has an invalid length.
[  484.075891][T22023] netlink: 'syz.1.4424': attribute type 28 has an invalid length.
[  484.221332][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'.
[  484.354560][T22056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4431'.
[  485.811060][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  485.819112][    C0] lec:lec_tx_timeout: lec0
[  485.823672][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  486.404653][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4433'.
[  486.442229][T22064] syzkaller0: entered promiscuous mode
[  486.447837][T22064] syzkaller0: entered allmulticast mode
[  486.540438][T22071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4435'.
[  486.812840][T22091] netlink: 'syz.2.4442': attribute type 1 has an invalid length.
[  486.924644][T22088] gre0: entered promiscuous mode
[  486.950832][T22088] gre0: entered allmulticast mode
[  487.039217][T22096] bond8: (slave gretap1): making interface the new active one
[  487.061580][T22096] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  487.281368][T22117] netem: change failed
[  487.462881][T22133] netlink: 'syz.4.4452': attribute type 12 has an invalid length.
[  487.715793][T22151] __nla_validate_parse: 6 callbacks suppressed
[  487.715812][T22151] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4457'.
[  487.751811][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4458'.
[  487.773145][T22144] bond7: (slave vxcan2): The slave device specified does not support setting the MAC address
[  487.783643][T22144] bond7: (slave vxcan2): Setting fail_over_mac to active for active-backup mode
[  487.796723][T22144] bond7: (slave vxcan2): making interface the new active one
[  487.805412][T22144] bond7: (slave vxcan2): Enslaving as an active interface with an up link
[  487.824377][T22148] bond7: (slave vxcan4): The slave device specified does not support setting the MAC address
[  487.845916][T22148] bond7: (slave vxcan4): Enslaving as a backup interface with an up link
[  487.863319][T22153] veth0_macvtap: left promiscuous mode
[  487.922682][T22151] 0·: renamed from hsr_slave_1
[  487.930438][T22151] 0·: entered allmulticast mode
[  487.943852][T22151] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  487.961515][T22155] validate_nla: 2 callbacks suppressed
[  487.961529][T22155] netlink: 'syz.1.4457': attribute type 4 has an invalid length.
[  488.084117][T22167] netlink: 'syz.1.4461': attribute type 1 has an invalid length.
[  488.174397][T22168] bond5: (slave geneve4): making interface the new active one
[  488.202729][T22168] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  488.213123][  T759] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  488.223497][  T759] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  488.290183][  T759] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  488.317125][  T759] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  488.377652][T22187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4467'.
[  488.534746][T22194] syzkaller1: entered promiscuous mode
[  488.553432][T22194] syzkaller1: entered allmulticast mode
[  488.592347][T22194] netlink: 'syz.3.4469': attribute type 1 has an invalid length.
[  488.679922][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4469'.
[  488.720010][T22182] gre0: entered promiscuous mode
[  488.733893][T22182] gre0: entered allmulticast mode
[  488.806136][T22209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'.
[  489.010611][T22219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4476'.
[  489.142309][T22227] sctp: [Deprecated]: syz.2.4480 (pid 22227) Use of int in max_burst socket option.
[  489.142309][T22227] Use struct sctp_assoc_value instead
[  489.536526][T22247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4484'.
[  489.815475][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4491'.
[  489.841873][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4491'.
[  489.860460][T22274] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  489.868061][T22274] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  489.885026][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4491'.
[  489.999505][T22285] openvswitch: netlink: Message has 8 unknown bytes.
[  490.006269][T22285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.120839][T22295] netlink: 'syz.1.4496': attribute type 2 has an invalid length.
[  490.343833][T22304] netlink: 'syz.3.4501': attribute type 13 has an invalid length.
[  490.414624][T22311] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  490.521521][T22316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.534286][T22316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.545823][T22316] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  490.674130][T22316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.684737][T22316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.695738][T22316] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  490.743637][T22329] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[  490.752980][T22329] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[  490.809460][T22316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.823242][T22316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.833873][T22316] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  490.844198][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  490.844227][    C0] lec:lec_tx_timeout: lec0
[  490.852383][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  490.880909][T22332] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  491.001299][T22316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  491.044038][T22316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.069941][T22316] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  491.102570][T22349] openvswitch: netlink: IP tunnel dst address not specified
[  491.125735][T22353] veth0: entered promiscuous mode
[  491.203818][T22354] bond6: entered promiscuous mode
[  491.215749][T22354] bond6: entered allmulticast mode
[  491.296980][T22353] veth0: left promiscuous mode
[  491.417191][  T759] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  491.425720][  T759] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  491.434394][  T759] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  491.480679][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  491.501738][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  491.510308][   T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  491.536829][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  491.545621][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  491.554160][   T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  491.574937][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  491.583883][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  491.617379][   T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  491.640252][T22375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.038046][  T759] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  492.047248][  T759] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  492.080408][  T759] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  492.105852][T22402] xt_socket: unknown flags 0x50
[  492.111569][  T759] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  492.297025][T22412] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.338934][T22412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  492.348675][T22412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  492.554931][T22412] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.590465][T22412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  492.623143][T22412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  492.751169][T22412] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  492.813680][T22412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  492.881990][T22412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  492.987034][T22412] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  493.022022][T22412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  493.059070][T22412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  493.342596][T22480] __nla_validate_parse: 16 callbacks suppressed
[  493.342616][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'.
[  493.358545][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4552'.
[  493.395144][  T759] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  493.414365][  T759] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  493.432653][T22480] netlink: 'syz.2.4552': attribute type 8 has an invalid length.
[  493.449408][  T759] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  493.482010][  T759] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.502375][  T759] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  493.518822][  T759] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  493.548804][  T759] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  493.557142][  T759] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  493.577347][  T759] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  493.593270][ T5842] Bluetooth: hci2: link tx timeout
[  493.598533][ T5842] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  493.620227][  T759] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.645494][T22486] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  493.653885][  T759] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  493.671511][  T759] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  493.719939][T22491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4555'.
[  494.096088][T22512] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  494.223343][   T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca
[  494.255032][T22528] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  494.494471][T22533] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  495.668989][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  495.868749][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  495.876871][    C0] lec:lec_tx_timeout: lec0
[  497.161055][T22515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  497.171203][T22525] netlink: 'syz.1.4564': attribute type 1 has an invalid length.
[  497.202404][T22525] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4564'.
[  497.236487][T22535] netlink: 'syz.4.4565': attribute type 2 has an invalid length.
[  497.248931][T22535] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4565'.
[  497.399585][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4567'.
[  497.405855][T22606] netlink: 'syz.0.4568': attribute type 1 has an invalid length.
[  497.408601][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4567'.
[  497.466913][T22611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4570'.
[  497.522661][T22611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4570'.
[  497.724585][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4574'.
[  497.750854][T22615] "syz.4.4571" (22615) uses obsolete ecb(arc4) skcipher
[  498.571483][T22679] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  498.598269][T22679] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[  498.646049][T22684] netlink: 'syz.3.4586': attribute type 1 has an invalid length.
[  498.786948][T22687] bond9: (slave gretap1): making interface the new active one
[  498.839729][T22687] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  499.220567][T22717] __nla_validate_parse: 1 callbacks suppressed
[  499.220589][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4593'.
[  499.259972][T22719] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4595'.
[  499.299988][T22719] nftables ruleset with unbound chain
[  499.328368][T22717] 8021q: adding VLAN 0 to HW filter on device bond6
[  499.464071][T22717] vxcan3: entered promiscuous mode
[  499.503229][T22734] netlink: 'syz.2.4598': attribute type 11 has an invalid length.
[  499.532136][T22734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4598'.
[  499.553958][T22717] 8021q: adding VLAN 0 to HW filter on device bond6
[  499.577352][T22717] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  499.598163][T22741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.610741][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4598'.
[  499.621805][T22717] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  499.630760][T22734] IPVS: set_ctl: invalid protocol: 108 172.20.20.14:20004
[  499.700130][T12105] tipc: Node number set to 1195830795
[  499.852597][T22751] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4602'.
[  500.150505][T22770] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4606'.
[  500.177051][T22770] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4606'.
[  500.188891][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4607'.
[  500.205794][T22775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4608'.
[  500.220177][T22773] hsr_slave_0: left promiscuous mode
[  500.228255][T22773] 0·: left promiscuous mode
[  500.574008][T22791] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  500.616836][T22794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4612'.
[  501.131281][T22833] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  501.182473][T22833] bond7: (slave lo): Enslaving as an active interface with an up link
[  501.216090][T22833] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  501.357030][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.372062][ T1296] lec:lec_start_xmit: lec0:No lecd attached
[  501.440757][T22842] netlink: 'syz.3.4624': attribute type 1 has an invalid length.
[  501.473670][T22844] netlink: 'syz.1.4623': attribute type 1 has an invalid length.
[  501.543400][T22844] bond8: entered promiscuous mode
[  501.548512][T22844] bond8: entered allmulticast mode
[  501.554848][T22844] 8021q: adding VLAN 0 to HW filter on device bond8
[  501.662673][T22852] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  501.673708][T22853] lo: Caught tx_queue_len zero misconfig
[  501.853110][T22866] tunl0: entered promiscuous mode
[  501.859606][T22866] netlink: 'syz.1.4632': attribute type 3 has an invalid length.
[  502.127875][T22883] gre0: entered promiscuous mode
[  502.133291][T22883] gre0: entered allmulticast mode
[  502.203851][T22890] pim6reg1: entered promiscuous mode
[  502.219159][T22890] pim6reg1: entered allmulticast mode
[  502.533426][T22904] Cannot find set identified by id 65534 to match
[  502.769607][T22919] sctp: [Deprecated]: syz.0.4648 (pid 22919) Use of struct sctp_assoc_value in delayed_ack socket option.
[  502.769607][T22919] Use struct sctp_sack_info instead
[  502.862366][T22928] netlink: 'syz.4.4652': attribute type 10 has an invalid length.
[  503.074924][T22941] syzkaller0: entered promiscuous mode
[  503.081065][T22941] syzkaller0: entered allmulticast mode
[  503.510666][T22967] delete_channel: no stack
[  503.671060][T22978] netlink: 'syz.0.4668': attribute type 1 has an invalid length.
[  503.685273][T22980] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  503.758637][T22984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.773764][T22978] bond5: entered promiscuous mode
[  503.800183][T22978] 8021q: adding VLAN 0 to HW filter on device bond5
[  503.871759][T22988] 8021q: adding VLAN 0 to HW filter on device bond5
[  503.888532][T22988] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  503.905846][T22988] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  503.932009][T22988] bond5: (slave ip6gre1): making interface the new active one
[  503.940056][T22988] ip6gre1: entered promiscuous mode
[  503.947069][T22988] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  503.978137][T22991] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  504.031460][T22991] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  504.041534][T22991] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  504.098581][T23000] lo speed is unknown, defaulting to 1000
[  504.124748][T23003] bond0: entered promiscuous mode
[  504.130183][T23003] bond_slave_0: entered promiscuous mode
[  504.136159][T23003] bond_slave_1: entered promiscuous mode
[  504.142840][T23003] bridge_slave_1: entered promiscuous mode
[  504.243602][T23009] __nla_validate_parse: 16 callbacks suppressed
[  504.243622][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'.
[  504.259705][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'.
[  504.306563][T23007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4677'.
[  504.324502][T23011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4677'.
[  504.510424][T23020] xfrm2: entered allmulticast mode
[  504.570888][T23024] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.4681'.
[  504.785072][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4685'.
[  505.139853][T23053] xt_CONNSECMARK: invalid mode: 0
[  505.254464][T23060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4692'.
[  505.316130][T23060] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  505.351486][T23060] bond4: (slave lo): Enslaving as an active interface with an up link
[  505.395835][T23060] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  505.432526][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4696'.
[  505.508068][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4697'.
[  505.550915][T23078] netlink: 'syz.1.4698': attribute type 1 has an invalid length.
[  505.627356][T23078] 8021q: adding VLAN 0 to HW filter on device bond9
[  505.664183][T23078] bond9: (slave bridge2): making interface the new active one
[  505.672631][T23078] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  505.717062][T23086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4702'.
[  505.842981][T23100] netlink: 'syz.4.4703': attribute type 12 has an invalid length.
[  505.877034][T23100] netlink: 'syz.4.4703': attribute type 12 has an invalid length.
[  506.322970][T23136] lo speed is unknown, defaulting to 1000
[  506.371000][T23145] netlink: 'syz.0.4717': attribute type 2 has an invalid length.
[  506.788767][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms
[  506.796882][    C0] lec:lec_tx_timeout: lec0
[  507.313455][T23178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.584897][T23203] blkio.reset_stats is deprecated
[  508.100427][T23230] netlink: 'syz.2.4740': attribute type 10 has an invalid length.
[  508.276942][T23238] netlink: 'syz.3.4743': attribute type 2 has an invalid length.
[  508.291276][T23238] netlink: 'syz.3.4743': attribute type 2 has an invalid length.
[  508.458321][T23244] netlink: 'syz.0.4744': attribute type 11 has an invalid length.
[  508.466618][T23244] netlink: 'syz.0.4744': attribute type 11 has an invalid length.
[  508.949476][T23271] netlink: 'syz.2.4750': attribute type 4 has an invalid length.
[  509.021929][T23274] netlink: 'syz.2.4750': attribute type 4 has an invalid length.
[  509.104790][T23266] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  509.757937][T23310] __nla_validate_parse: 17 callbacks suppressed
[  509.757957][T23310] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4757'.
[  509.811664][T23314] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  509.831280][T23310] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4757'.
[  509.856634][T23310] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4757'.
[  510.200107][T23326] netlink: 'syz.2.4760': attribute type 8 has an invalid length.
[  510.219252][T23327] netlink: 'syz.2.4760': attribute type 8 has an invalid length.
[  510.435855][T23345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  510.459341][T23333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  512.360836][T23405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4779'.
[  512.591125][T23414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.663394][T13427] lec:lec_start_xmit: lec0:No lecd attached
[  513.131569][T23448] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4794'.
[  513.150915][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'.
[  513.451604][T23454] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4796'.
[  513.477957][T23454] ksmbd: Unknown IPC event: 16, ignore.
[  513.621089][ T5911] IPVS: starting estimator thread 0...
[  513.657968][   T30] audit: type=1800 audit(1776232700.524:4): pid=23463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4798" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC0430895 dev="tmpfs" ino=1539 res=0 errno=0
[  513.749129][T23464] IPVS: using max 27 ests per chain, 64800 per kthread
[  513.774525][T23468] netlink: 'syz.1.4800': attribute type 8 has an invalid length.
[  513.878585][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'.
[  513.913552][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'.
[  514.161006][T23504] netlink: 'syz.0.4810': attribute type 11 has an invalid length.
[  514.180916][T23504] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4810'.
[  514.470182][T23523] xt_hashlimit: size too large, truncated to 1048576
[  514.505234][T23529] xt_hashlimit: size too large, truncated to 1048576
[  514.587810][T23535] netlink: 'syz.4.4818': attribute type 1 has an invalid length.
[  514.796980][T23533] bridge_slave_0 (unregistering): left allmulticast mode
[  514.856117][T23533] bridge_slave_0 (unregistering): left promiscuous mode
[  514.888820][T23533] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.016207][T23550] vcan0: entered allmulticast mode
[  515.209620][T23568] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  515.431333][T23581] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode
[  515.461249][T23581] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode
[  515.807447][T23599] netem: change failed
[  515.957038][   T30] audit: type=1800 audit(1776232702.824:5): pid=23605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4835" name="memory.events" dev="tmpfs" ino=1592 res=0 errno=0
[  516.276080][T23629] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  516.386183][T23638] netlink: 'syz.2.4845': attribute type 21 has an invalid length.
[  516.404698][T23639] netlink: 'syz.2.4845': attribute type 21 has an invalid length.
[  516.421847][T23638] __nla_validate_parse: 3 callbacks suppressed
[  516.421868][T23638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4845'.
[  516.487765][T23639] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4845'.
[  516.514627][T23638] netlink: 'syz.2.4845': attribute type 5 has an invalid length.
[  516.568327][T23638] netlink: 'syz.2.4845': attribute type 6 has an invalid length.
[  516.608781][T23638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4845'.
[  516.623151][T23654] openvswitch: netlink: Key type 343 is out of range max 32
[  516.631991][T23654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4848'.
[  516.668000][T23639] netlink: 'syz.2.4845': attribute type 5 has an invalid length.
[  516.688746][T23639] netlink: 'syz.2.4845': attribute type 6 has an invalid length.
[  516.725064][T23639] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4845'.
[  516.750743][T23654] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  516.901204][T23659] bond10: option miimon: invalid value (18446744073709551585)
[  516.965879][T23659] bond10: option miimon: allowed values 0 - 2147483647
[  517.009577][T23659] bond10 (unregistering): Released all slaves
[  517.137279][T23663] lo speed is unknown, defaulting to 1000
[  517.479559][T23694] ipvlan2: entered allmulticast mode
[  517.484953][T23694] batadv_slave_1: entered allmulticast mode
[  517.521329][T23694] batman_adv: batadv0: Adding interface: ipvlan2
[  517.527862][T23694] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.574331][T23694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  517.589125][T23694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.616078][T23694] batman_adv: batadv0: Interface activated: ipvlan2
[  517.748713][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms
[  517.756833][    C0] lec:lec_tx_timeout: lec0
[  517.805127][T23715] netlink: 'syz.3.4858': attribute type 4 has an invalid length.
[  517.841280][T23712] netlink: 'syz.3.4858': attribute type 4 has an invalid length.
[  517.957933][T23719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.024713][T23719] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  518.545219][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'.
[  518.677523][T23760] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  518.683483][T23759] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  518.808275][T23765] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  518.863581][T23769] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  518.923107][T23770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4877'.
[  519.207360][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'.
[  519.235211][T23789] wireguard0: entered promiscuous mode
[  519.248950][T23789] wireguard0: entered allmulticast mode
[  519.547921][T23810] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4886'.
[  519.609765][T23817] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  519.617076][T23817] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  519.704287][T23817] validate_nla: 3 callbacks suppressed
[  519.704308][T23817] netlink: 'syz.2.4889': attribute type 1 has an invalid length.
[  519.740752][T23824] batadv_slave_0: entered promiscuous mode
[  519.753434][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4889'.
[  519.923427][T23822] batadv_slave_0: left promiscuous mode
[  520.545898][T23868] IPv6: NLM_F_REPLACE set, but no existing node found!
[  520.554873][T23868] netlink: 'syz.4.4904': attribute type 7 has an invalid length.
[  520.581878][T23865] bond10: Removing last arp target with arp_interval on
[  520.590889][T23868] netlink: 'syz.4.4904': attribute type 7 has an invalid length.
[  520.706781][T23879] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[  520.715345][T23879] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[  520.792258][T23883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  520.836794][T23888] netlink: 'syz.4.4907': attribute type 3 has an invalid length.
[  520.996490][T23891] tunl0: entered promiscuous mode
[  521.002786][T23891] gre0: entered promiscuous mode
[  521.016728][T23891] gretap0: entered promiscuous mode
[  521.032699][T23891] erspan0: entered promiscuous mode
[  521.042553][T23891] ip_vti0: entered promiscuous mode
[  521.052349][T12094] lo speed is unknown, defaulting to 1000
[  521.058122][T12094] syz0: Port: 1 Link DOWN
[  521.239365][T23910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.310698][T23914] team0: Port device team_slave_0 removed
[  521.440238][T23923] __nla_validate_parse: 5 callbacks suppressed
[  521.440258][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4920'.
[  521.716657][T23936] vlan1: entered promiscuous mode
[  521.722470][T23936] geneve1: entered promiscuous mode
[  521.728107][T23936] vlan1: entered allmulticast mode
[  521.733750][T23936] geneve1: entered allmulticast mode
[  521.864938][T23947] netlink: 'syz.3.4929': attribute type 1 has an invalid length.
[  522.013248][T23957] netlink: 'syz.3.4932': attribute type 2 has an invalid length.
[  522.021526][T23957] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4932'.
[  522.157029][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.173128][T23964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.184748][T23964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.194367][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.212224][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.235088][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4935'.
[  522.287549][T23966] netlink: 'syz.3.4936': attribute type 10 has an invalid length.
[  522.383287][T23970] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4938'.
[  522.394930][T23970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4938'.
[  522.596318][T23984] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20002
[  523.581255][T24044] netlink: 'syz.1.4960': attribute type 1 has an invalid length.
[  523.629680][T24044] netlink: 'syz.1.4960': attribute type 1 has an invalid length.
[  523.647422][T24046] netlink: 'syz.3.4961': attribute type 11 has an invalid length.
[  523.787253][T24060] netlink: 'syz.4.4966': attribute type 21 has an invalid length.
[  523.844315][T24057] syzkaller0: entered promiscuous mode
[  523.852285][T24057] syzkaller0: entered allmulticast mode
[  523.905076][T24064] syzkaller0: entered promiscuous mode
[  523.912329][T24064] syzkaller0: entered allmulticast mode
[  524.054186][T24074] nbd: couldn't find device at index 1
[  524.135893][T24078] openvswitch: netlink: IP tunnel TTL not specified.
[  524.151537][T24078] netlink: 'syz.4.4971': attribute type 11 has an invalid length.
[  524.197993][T24083] bond10: (slave ip6gretap1): making interface the new active one
[  524.206783][T24083] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.215664][T24083] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  524.224741][T24083] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  524.776625][T24131] openvswitch: netlink: Flow key attr not present in new flow.
[  524.818819][T24131] validate_nla: 2 callbacks suppressed
[  524.818840][T24131] netlink: 'syz.1.4988': attribute type 3 has an invalid length.
[  524.900881][T24133] xt_CT: You must specify a L4 protocol and not use inversions on it
[  524.929431][T24135] netlink: 'syz.3.4991': attribute type 1 has an invalid length.
[  525.051959][T24146] netlink: 'syz.3.4991': attribute type 2 has an invalid length.
[  525.066831][T24145] bond11: (slave geneve3): making interface the new active one
[  525.123785][T24145] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  525.183098][T24146] �9: entered promiscuous mode
[  525.195939][  T759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  525.240612][  T759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  525.270587][  T759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  525.335589][  T759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  525.567123][T24176] netlink: 'syz.2.5001': attribute type 10 has an invalid length.
[  526.032575][T24206] : entered promiscuous mode
[  526.129502][T24205] bond7: Removing last arp target with arp_interval on
[  526.211379][T24212] tun0: tun_chr_ioctl cmd 1074025675
[  526.230986][T24212] tun0: persist disabled
[  526.271091][T24222] xt_socket: unknown flags 0x50
[  526.398815][T24229] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  526.971466][T24249] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  527.021432][T24249] __nla_validate_parse: 24 callbacks suppressed
[  527.021451][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5017'.
[  527.065070][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5017'.
[  527.074978][T24255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5018'.
[  527.102591][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5017'.
[  527.933397][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  527.946204][T24298] sctp: [Deprecated]: syz.4.5030 (pid 24298) Use of int in maxseg socket option.
[  527.946204][T24298] Use struct sctp_assoc_value instead
[  527.972116][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.002807][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.040181][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.060584][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.088977][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.110262][T24292] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  528.186738][T24308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5034'.
[  528.226968][T24306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5031'.
[  528.280148][T24311] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  528.293416][T24309] netlink: 'syz.4.5033': attribute type 3 has an invalid length.
[  528.370492][T24313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5035'.
[  529.402323][T24346] netlink: 67 bytes leftover after parsing attributes in process `syz.3.5045'.
[  529.999932][T24384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5054'.
[  530.013960][T24384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5054'.
[  530.083864][T24384] gretap0: entered promiscuous mode
[  530.149367][T24384] gretap0: left promiscuous mode
[  530.415449][T24359] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  530.490925][T24397] xt_hashlimit: size too large, truncated to 1048576
[  530.938037][T24413] netlink: 'syz.3.5058': attribute type 16 has an invalid length.
[  530.963865][T24413] netlink: 'syz.3.5058': attribute type 17 has an invalid length.
[  530.982373][T24413] gre0: left promiscuous mode
[  530.987146][T24413] gre0: left allmulticast mode
[  531.251165][T24413] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.258616][T24428] netlink: 'syz.4.5063': attribute type 1 has an invalid length.
[  531.267265][T24413] 8021q: adding VLAN 0 to HW filter on device team0
[  531.285175][T24421] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  531.294588][T24428] netlink: 'syz.4.5063': attribute type 2 has an invalid length.
[  531.309809][T24413] batadv0: left allmulticast mode
[  531.316576][T24413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.331312][T24413] vxcan0: left allmulticast mode
[  531.341546][T24413] veth0: left allmulticast mode
[  531.348917][T24428] netlink: 'syz.4.5063': attribute type 1 has an invalid length.
[  531.370792][T24413] veth1: left allmulticast mode
[  531.387165][T24428] netlink: 'syz.4.5063': attribute type 3 has an invalid length.
[  531.398973][T24413] wg0: left allmulticast mode
[  531.418188][T24413] wg1: left allmulticast mode
[  531.454696][T24413] wg2: left allmulticast mode
[  531.463160][T24413] veth0_to_bridge: left allmulticast mode
[  531.490948][T24413] veth1_to_bridge: left allmulticast mode
[  531.503201][T24413] bridge_slave_1: left allmulticast mode
[  531.512577][T24413] veth0_to_bond: left allmulticast mode
[  531.528665][T24413] bond_slave_0: left allmulticast mode
[  531.543070][T24413] veth1_to_bond: left allmulticast mode
[  531.558574][T24413] bond_slave_1: left allmulticast mode
[  531.567162][T24413] veth1_to_team: left allmulticast mode
[  531.574735][T24413] team_slave_1: left allmulticast mode
[  531.582141][T24413] veth0_to_batadv: left allmulticast mode
[  531.594839][T24413] batadv_slave_0: left allmulticast mode
[  531.606537][T24413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.615227][T24413] veth1_to_batadv: left allmulticast mode
[  531.623618][T24413] batadv_slave_1: left allmulticast mode
[  531.631307][T24413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.639635][T24413] xfrm0: left allmulticast mode
[  531.647507][T24413] veth0_to_hsr: left allmulticast mode
[  531.658916][T24413] veth1_to_hsr: left allmulticast mode
[  531.668651][T24413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  531.680760][T24413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  531.692510][T24413] hsr0: left allmulticast mode
[  531.697429][T24413] hsr_slave_0: left allmulticast mode
[  531.703470][T24413] hsr_slave_1: left allmulticast mode
[  531.712509][T24413] veth1_virt_wifi: left allmulticast mode
[  531.720756][T24413] veth0_virt_wifi: left allmulticast mode
[  531.729381][T24413] virt_wifi0: left allmulticast mode
[  531.740290][T24413] veth1_vlan: left promiscuous mode
[  531.745664][T24413] veth1_vlan: left allmulticast mode
[  531.754827][T24413] veth0_vlan: left promiscuous mode
[  531.770505][T24413] veth0_vlan: entered promiscuous mode
[  531.780748][T24413] vlan0: left allmulticast mode
[  531.790049][T24413] vlan1: left allmulticast mode
[  531.795737][T24413] veth1_vlan: entered promiscuous mode
[  531.809113][T24413] veth1_vlan: entered allmulticast mode
[  531.814740][T24413] macvlan0: left allmulticast mode
[  531.838729][T24413] veth1_vlan: left allmulticast mode
[  531.845983][T24413] veth1_vlan: entered allmulticast mode
[  531.860948][T24413] macvlan1: left allmulticast mode
[  531.866182][T24413] veth1_vlan: left allmulticast mode
[  531.891052][T24413] ipvlan0: left allmulticast mode
[  531.897237][T24413] tipc: Resetting bearer <eth:ipvlan0>
[  531.909085][T24413] ipvlan1: left allmulticast mode
[  531.914152][T24413] veth0_vlan: left allmulticast mode
[  531.940180][T24413] veth1_macvtap: left promiscuous mode
[  531.945681][T24413] veth1_macvtap: left allmulticast mode
[  531.962455][T24413] veth0_macvtap: left promiscuous mode
[  531.968104][T24413] veth0_macvtap: left allmulticast mode
[  531.975289][T24413] veth0_macvtap: entered promiscuous mode
[  531.981112][T24413] veth0_macvtap: entered allmulticast mode
[  531.986965][T24413] macvtap0: left allmulticast mode
[  531.992292][T24413] veth0_macvtap: left allmulticast mode
[  531.999916][T24413] veth1_macvtap: entered promiscuous mode
[  532.005771][T24413] veth1_macvtap: entered allmulticast mode
[  532.012259][T24413] macsec0: left allmulticast mode
[  532.017332][T24413] veth1_macvtap: left allmulticast mode
[  532.024968][T24413] geneve0: left allmulticast mode
[  532.033436][T24413] geneve1: left allmulticast mode
[  532.041880][T24413] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  532.049387][T24413] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.056763][T24413] batman_adv: batadv0: Interface activated: netdevsim0
[  532.073139][T24413] netdevsim netdevsim3 netdevsim1: left allmulticast mode
[  532.080915][T24413] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.090852][T24413] netdevsim netdevsim3 netdevsim2: left allmulticast mode
[  532.098307][T24413] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.111516][T24413] netdevsim netdevsim3 netdevsim3: left allmulticast mode
[  532.125721][T24413] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.134574][T24413] mac80211_hwsim hwsim30 wlan0: left allmulticast mode
[  532.142646][T24413] mac80211_hwsim hwsim31 wlan1: left allmulticast mode
[  532.151536][T24413] mac80211_hwsim hwsim34 wlan2: left allmulticast mode
[  532.160215][T24413] mac80211_hwsim hwsim35 wlan3: left allmulticast mode
[  532.170550][T24413] bond1: left allmulticast mode
[  532.175898][T24413] 8021q: adding VLAN 0 to HW filter on device bond1
[  532.200156][T24413] bridge1: left allmulticast mode
[  532.206724][T24413] ip6tnl1: left allmulticast mode
[  532.231367][T24413] bond2: left allmulticast mode
[  532.236622][T24413] 8021q: adding VLAN 0 to HW filter on device bond2
[  532.250087][T24413] batadv1: left allmulticast mode
[  532.256703][T24413] 8021q: adding VLAN 0 to HW filter on device batadv1
[  532.281021][T24413] ip6tnl2: left allmulticast mode
[  532.287358][T24413] bond3: left allmulticast mode
[  532.292926][T24413] 8021q: adding VLAN 0 to HW filter on device bond3
[  532.311983][T24413] vti0: left allmulticast mode
[  532.318344][T24413] ip6gre1: left allmulticast mode
[  532.325495][T24413] bridge2: left allmulticast mode
[  532.341254][T24413] erspan1: left allmulticast mode
[  532.349937][T24413] geneve2: left allmulticast mode
[  532.356975][T24413] batadv2: left allmulticast mode
[  532.369889][T24413] 8021q: adding VLAN 0 to HW filter on device batadv2
[  532.378590][T24413] veth2: left allmulticast mode
[  532.390994][T24413] veth3: left allmulticast mode
[  532.397016][T24413] bond4: left allmulticast mode
[  532.406505][T24413] 8021q: adding VLAN 0 to HW filter on device bond4
[  532.420458][T24413] batadv3: left allmulticast mode
[  532.425819][T24413] 8021q: adding VLAN 0 to HW filter on device batadv3
[  532.434687][T24413] bridge3: left allmulticast mode
[  532.446405][T24413] vlan2: left promiscuous mode
[  532.454423][T24413] bond5: left promiscuous mode
[  532.460068][T24413] 8021q: adding VLAN 0 to HW filter on device bond5
[  532.472056][T24413] 8021q: adding VLAN 0 to HW filter on device bond6
[  532.492014][T24413] 8021q: adding VLAN 0 to HW filter on device bond7
[  532.508637][T24413] 8021q: adding VLAN 0 to HW filter on device bond8
[  532.519882][T24413] 8021q: adding VLAN 0 to HW filter on device bond9
[  532.535593][T24413] 8021q: adding VLAN 0 to HW filter on device bond10
[  532.548335][T24413] 8021q: adding VLAN 0 to HW filter on device bond11
[  532.638639][T24429] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  532.649512][T24429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  532.666512][T24429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  532.678503][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  532.753308][   T13] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  532.853002][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  532.866639][ T5911] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.897127][   T13] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  532.921301][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  532.960642][   T13] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  533.021015][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  533.045012][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  533.065078][   T13] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  533.116972][T24472] __nla_validate_parse: 3 callbacks suppressed
[  533.116995][T24472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5071'.
[  533.239941][ T5904] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  533.277810][T24483] net_ratelimit: 3141 callbacks suppressed
[  533.277830][T24483] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  533.333619][T24481] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  533.369663][T24488] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5075'.
[  533.540924][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  533.657928][T24504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5080'.
[  533.677467][T24505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5079'.
[  534.004596][T24522] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5085'.
[  534.077247][  T759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.087391][  T759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.145160][T24525] netlink: 'syz.1.5086': attribute type 9 has an invalid length.
[  534.359025][T24535] openvswitch: netlink: Message has 8 unknown bytes.
[  534.371351][T24536] openvswitch: netlink: Message has 8 unknown bytes.
[  534.550223][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.559559][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.568011][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.576483][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.599112][T24548] sctp: [Deprecated]: syz.3.5095 (pid 24548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.599112][T24548] Use struct sctp_sack_info instead
[  534.616999][T24548] sctp: [Deprecated]: syz.3.5095 (pid 24548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.616999][T24548] Use struct sctp_sack_info instead
[  534.666038][T24551] sock: sock_set_timeout: `syz.4.5094' (pid 24551) tries to set negative timeout
[  534.677073][T24548] sctp: [Deprecated]: syz.3.5095 (pid 24548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.677073][T24548] Use struct sctp_sack_info instead
[  534.679298][  T759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  534.949631][T12094] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  535.146357][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5101'.
[  535.738062][T24606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5110'.
[  535.880180][  T759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  536.001920][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5115'.
[  536.025979][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5115'.
[  536.055937][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5115'.
[  536.724877][T24666] netlink: 'syz.4.5128': attribute type 1 has an invalid length.
[  536.799296][T24666] netlink: 'syz.4.5128': attribute type 2 has an invalid length.
[  536.831347][T24666] netlink: 'syz.4.5128': attribute type 1 has an invalid length.
[  536.999740][T24686] netlink: 'syz.2.5130': attribute type 10 has an invalid length.
[  537.014604][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  537.094646][T24688] syzkaller1: entered promiscuous mode
[  537.100343][T24688] syzkaller1: entered allmulticast mode
[  537.596642][T24728] netdevsim netdevsim2: Direct firmware load for r1 failed with error -2
[  537.622842][T24728] netdevsim netdevsim2: Falling back to sysfs fallback for: r1
[  537.960054][T24759] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004
[  538.138856][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  538.230149][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  538.296050][T24781] __nla_validate_parse: 10 callbacks suppressed
[  538.296070][T24781] netlink: 640 bytes leftover after parsing attributes in process `syz.3.5166'.
[  538.318004][T24781] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  538.386370][T24736] netdevsim netdevsim2: Direct firmware load for r1 failed with error -2
[  538.415188][T24736] netdevsim netdevsim2: Falling back to sysfs fallback for: r1
[  538.571088][T24795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.586694][T24797] netlink: 'syz.3.5171': attribute type 2 has an invalid length.
[  538.612699][T24797] vþ: entered promiscuous mode
[  538.724216][T24806] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5174'.
[  538.754035][T24810] nbd: couldn't find a device at index 0
[  538.993843][T24825] netlink: 'syz.1.5178': attribute type 4 has an invalid length.
[  539.010154][T24814] bond6: option fail_over_mac: invalid value (16)
[  539.032298][T24814] bond6 (unregistering): Released all slaves
[  539.187260][T24839] netlink: 'syz.4.5184': attribute type 2 has an invalid length.
[  539.209838][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'.
[  539.300084][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  539.882018][T24854] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5188'.
[  539.959416][T24870] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5193'.
[  540.003649][T24872] netlink: 'syz.3.5194': attribute type 1 has an invalid length.
[  540.309208][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.317789][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.326406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.334956][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.343586][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.352266][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.360807][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.418958][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  540.613570][T24899] veth0: Caught tx_queue_len zero misconfig
[  540.773645][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5203'.
[  540.855073][T24908] bond11: entered promiscuous mode
[  540.877882][T24915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5205'.
[  540.900376][T24908] 8021q: adding VLAN 0 to HW filter on device bond11
[  541.100338][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5207'.
[  541.146570][T24924] netlink: 'syz.2.5206': attribute type 1 has an invalid length.
[  541.429137][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.519051][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  541.751730][T24954] gtp0: entered promiscuous mode
[  541.778049][T24954] gtp0: entered allmulticast mode
[  541.820272][T24961] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  541.832711][T24954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5217'.
[  542.320869][T24991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5228'.
[  542.345456][T24990] syzkaller0: entered promiscuous mode
[  542.361701][T24990] syzkaller0: entered allmulticast mode
[  542.668897][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  542.820551][T25022] xt_l2tp: missing protocol rule (udp|l2tpip)
[  542.862770][T25028] lo speed is unknown, defaulting to 1000
[  543.360453][T25063] netlink: 'syz.2.5245': attribute type 1 has an invalid length.
[  543.376215][T25063] netlink: 'syz.2.5245': attribute type 7 has an invalid length.
[  543.384700][T25063] netlink: 'syz.2.5245': attribute type 8 has an invalid length.
[  543.403292][T25063] __nla_validate_parse: 5 callbacks suppressed
[  543.403310][T25063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5245'.
[  543.563203][T25069] lo: left promiscuous mode
[  543.592334][T25069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  543.699655][T25074] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5247'.
[  543.789515][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  543.927149][T25088] netlink: 'syz.3.5253': attribute type 5 has an invalid length.
[  543.950318][T25088] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5253'.
[  544.305185][T25113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5261'.
[  544.435098][T25124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5264'.
[  544.478839][T25124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5264'.
[  544.673016][T25143] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5268'.
[  544.717549][T25136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5266'.
[  544.889615][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  544.949985][T25161] syzkaller0: entered promiscuous mode
[  544.959149][T25161] syzkaller0: entered allmulticast mode
[  545.346689][T25195] batadv_slave_0: Caught tx_queue_len zero misconfig
[  545.407330][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5284'.
[  545.488165][T25204] netlink: 'syz.0.5286': attribute type 11 has an invalid length.
[  545.496623][T25204] netlink: 'syz.0.5286': attribute type 11 has an invalid length.
[  545.507432][T25204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5286'.
[  546.018935][   T86] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  546.857943][T25290] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  547.151337][T25305] netlink: 'syz.1.5314': attribute type 9 has an invalid length.
[  547.162331][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  547.305394][T25317] netlink: 'syz.0.5318': attribute type 1 has an invalid length.
[  547.363207][T25317] 8021q: adding VLAN 0 to HW filter on device bond6
[  547.696941][T25340] syzkaller0: entered promiscuous mode
[  547.702604][T25340] syzkaller0: entered allmulticast mode
[  547.783818][T25348] bond0: left promiscuous mode
[  547.789703][T25348] bond_slave_0: left promiscuous mode
[  547.795450][T25348] bond_slave_1: left promiscuous mode
[  547.801749][T25348] bridge_slave_1: left promiscuous mode
[  547.819083][T25348] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.842806][T25346] syzkaller1: entered promiscuous mode
[  547.848384][T25346] syzkaller1: entered allmulticast mode
[  548.279126][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  548.603229][T25402] netlink: 'syz.2.5345': attribute type 2 has an invalid length.
[  548.612009][T25402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  548.910674][T25421] netlink: 'syz.0.5349': attribute type 1 has an invalid length.
[  549.026464][T25427] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  549.113771][T25427] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  549.164300][T25427] bond7: (slave ip6gre2): making interface the new active one
[  549.206534][T25427] bond7: (slave ip6gre2): Enslaving as an active interface with an up link
[  549.275055][T25439] __nla_validate_parse: 10 callbacks suppressed
[  549.275078][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5353'.
[  549.306394][T25434] netlink: 'syz.3.5352': attribute type 2 has an invalid length.
[  549.409007][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  549.610602][T25456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5357'.
[  549.651453][T25456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5357'.
[  549.744416][T25456] xt_hashlimit: size too large, truncated to 1048576
[  549.919152][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.197951][T25478] netlink: 'syz.0.5364': attribute type 4 has an invalid length.
[  550.207477][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5365'.
[  550.231363][T25480] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5365'.
[  550.268103][T25480] netlink: 'syz.4.5365': attribute type 5 has an invalid length.
[  550.289801][T25487] netlink: 'syz.4.5365': attribute type 63 has an invalid length.
[  550.313264][T25483] netlink: 'syz.4.5365': attribute type 63 has an invalid length.
[  550.342196][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  550.438529][T25497] netlink: 'syz.3.5369': attribute type 12 has an invalid length.
[  550.488291][T25497] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5369'.
[  550.539532][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  550.549146][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.557674][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.566247][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.574780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.584005][T25497] netlink: 'syz.3.5369': attribute type 12 has an invalid length.
[  550.618011][T25497] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5369'.
[  550.918596][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'.
[  551.722419][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  552.147895][T25590] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5388'.
[  552.252082][T25598] netlink: 'syz.1.5390': attribute type 1 has an invalid length.
[  552.491857][T25615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  552.848846][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  553.989377][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  554.292501][T25717] validate_nla: 2 callbacks suppressed
[  554.292541][T25717] netlink: 'syz.1.5420': attribute type 4 has an invalid length.
[  554.342007][T25717] __nla_validate_parse: 7 callbacks suppressed
[  554.342027][T25717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5420'.
[  554.424089][T25721] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5421'.
[  555.098164][T25763] netlink: 'syz.4.5433': attribute type 29 has an invalid length.
[  555.108285][T25763] netlink: 'syz.4.5433': attribute type 29 has an invalid length.
[  555.129230][   T86] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  555.242034][T25769] netlink: 548 bytes leftover after parsing attributes in process `syz.4.5433'.
[  555.260899][T25763] netlink: 'syz.4.5433': attribute type 29 has an invalid length.
[  555.265734][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5434'.
[  555.446699][T25781] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003
[  555.600716][T25793] ip6t_srh: unknown srh match flags  5F28
[  555.687312][T25800] netlink: 'syz.4.5441': attribute type 1 has an invalid length.
[  555.698249][T25797] bond8: entered allmulticast mode
[  555.737350][T25800] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5441'.
[  555.838595][T25797] bridge10: entered promiscuous mode
[  555.879059][T25797] bridge10: entered allmulticast mode
[  555.898480][T25797] bond8: (slave bridge10): Enslaving as an active interface with an up link
[  555.965891][T25807] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  555.980350][T25807] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  556.068245][T25813] syzkaller0: entered promiscuous mode
[  556.074493][T25813] syzkaller0: entered allmulticast mode
[  556.269526][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  556.309663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.318316][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.326906][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.335466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.419011][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  557.639401][T25817] tipc: Resetting bearer <eth:xfrm0>
[  557.662599][T25819] tipc: Resetting bearer <eth:xfrm0>
[  557.687745][T25829] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  557.837749][T25833] vcan0: entered promiscuous mode
[  557.871688][T25833] vcan0: entered allmulticast mode
[  558.370240][T25876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5460'.
[  558.518865][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  558.655263][T25900] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5465'.
[  558.691924][T25900] netlink: 'syz.2.5465': attribute type 9 has an invalid length.
[  558.756859][T25906] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5467'.
[  558.889804][T25912] lo speed is unknown, defaulting to 1000
[  559.204081][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5473'.
[  559.217030][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5473'.
[  559.628956][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  560.279151][T26002] bond12 (unregistering): Released all slaves
[  560.375623][T26004] 8021q: VLANs not supported on wg1
[  560.538886][T26028] netlink: 'syz.2.5491': attribute type 1 has an invalid length.
[  560.554874][T26029] netlink: 'syz.2.5491': attribute type 1 has an invalid length.
[  560.639353][T26036] __nla_validate_parse: 2 callbacks suppressed
[  560.639374][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5491'.
[  560.749098][   T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  560.769639][T26028] 8021q: adding VLAN 0 to HW filter on device bond12
[  560.830377][T26036] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  560.911417][T26036] bond12: entered allmulticast mode
[  561.348996][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.357574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.366150][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.374827][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.410377][T26068] syzkaller0: entered promiscuous mode
[  561.415902][T26068] syzkaller0: entered allmulticast mode
[  561.451315][T26080] IPVS: ip_vs_edit_dest(): server weight less than zero
[  561.509054][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  561.629350][T26078] team0 (unregistering): Port device team_slave_0 removed
[  561.698407][T26078] team0 (unregistering): Port device team_slave_1 removed
[  561.898862][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  562.035299][T26113] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5508'.
[  562.307732][T26129] netlink: 'syz.1.5511': attribute type 62 has an invalid length.
[  562.712772][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5513'.
[  562.798155][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  562.807131][ T1296] lec:lec_start_xmit: lec0:No lecd attached
[  563.029567][   T86] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  563.133957][T26158] netlink: 'syz.2.5517': attribute type 2 has an invalid length.
[  563.191557][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'.
[  564.139340][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  564.958446][T26107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.199169][T26170] veth7: entered allmulticast mode
[  565.249818][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  565.287237][T26188] Unsupported ieee802154 address type: 0
[  565.325673][T26173] veth9: entered allmulticast mode
[  565.355786][T26191] bond6: option mode: unable to set because the bond device has slaves
[  565.465432][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5521'.
[  565.479539][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'.
[  565.493442][T26195] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  565.511825][T26197] bond0: entered promiscuous mode
[  565.517041][T26197] batadv0: entered promiscuous mode
[  565.522761][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'.
[  565.851448][T26212] x_tables: ip_tables: ah match: only valid for protocol 51
[  565.851472][T26215] x_tables: ip_tables: ah match: only valid for protocol 51
[  566.135232][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'.
[  566.160531][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'.
[  566.369657][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  566.478452][T26246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'.
[  566.549041][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.557230][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.565430][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.573572][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.581717][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.749343][T26264] netlink: 'syz.1.5551': attribute type 2 has an invalid length.
[  566.840076][T26272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5552'.
[  567.099144][T26293] block nbd6: Unsupported socket: should be TCP or UNIX.
[  567.255147][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5558'.
[  567.369400][T26304] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5559'.
[  567.448014][T26307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5558'.
[  567.481354][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  567.531669][T26323] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5561'.
[  567.556823][T26317] vlan3: entered allmulticast mode
[  567.569090][T26317] bond0: entered allmulticast mode
[  567.580284][T26317] bond_slave_0: entered allmulticast mode
[  567.598520][T26317] bond_slave_1: entered allmulticast mode
[  567.757984][T26323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.800931][T26323] bond_slave_0: left allmulticast mode
[  567.818719][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  567.826856][    C0] lec:lec_tx_timeout: lec0
[  567.851648][T26323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.871955][T26339] netlink: 'syz.0.5565': attribute type 1 has an invalid length.
[  567.889811][T26323] bond_slave_1: left allmulticast mode
[  567.906828][T26323] bond0 (unregistering): Released all slaves
[  568.006942][T26339] 8021q: adding VLAN 0 to HW filter on device bond8
[  568.150425][T26349] team0: Caught tx_queue_len zero misconfig
[  568.196013][T26353] x_tables: duplicate underflow at hook 2
[  568.441324][T26372] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  568.477221][T26377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5575'.
[  568.588584][T26383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  568.600543][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  568.646288][T26383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  568.699913][T26385] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  568.707194][T26385] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  568.780646][T26383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  568.803331][T26383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  568.872679][T26398] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5581'.
[  568.967551][T26383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  568.994257][T26383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  569.077585][T26383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  569.105504][T26383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  569.203355][  T150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  569.240367][  T150] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  569.279053][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  569.288008][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  569.331352][  T759] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  569.345302][  T759] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  569.400791][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  569.425716][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  569.546630][T26437] netlink: 'syz.0.5590': attribute type 2 has an invalid length.
[  569.742038][  T759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  570.012483][T26454] bond6: (slave lo): Releasing backup interface
[  570.035341][T26454] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  570.081805][T26458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  570.139936][T26454] team0: Port device team_slave_1 removed
[  570.153131][T26454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.160857][T26454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.171940][T26454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.180074][T26454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.191993][T26454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  570.752048][ T5842] block nbd6: Receive control failed (result -1)
[  570.879142][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  571.036947][T26516] syz.4.5611: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  571.052424][T26517] netlink: 'syz.2.5613': attribute type 1 has an invalid length.
[  571.070921][T26516] CPU: 1 UID: 0 PID: 26516 Comm: syz.4.5611 Not tainted syzkaller #0 PREEMPT(full) 
[  571.070951][T26516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  571.070973][T26516] Call Trace:
[  571.070981][T26516]  <TASK>
[  571.070990][T26516]  dump_stack_lvl+0xe8/0x150
[  571.071027][T26516]  warn_alloc+0x249/0x340
[  571.071055][T26516]  ? stack_trace_save+0xa9/0x100
[  571.071082][T26516]  ? __pfx_warn_alloc+0x10/0x10
[  571.071114][T26516]  ? kasan_save_track+0x4f/0x80
[  571.071137][T26516]  ? kasan_save_track+0x3e/0x80
[  571.071159][T26516]  ? __kasan_kmalloc+0x93/0xb0
[  571.071182][T26516]  ? __kmalloc_cache_noprof+0x31c/0x660
[  571.071205][T26516]  ? xskq_create+0x56/0x170
[  571.071230][T26516]  ? xsk_setsockopt+0x54c/0x990
[  571.071253][T26516]  ? do_sock_setsockopt+0x17c/0x1b0
[  571.071279][T26516]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  571.071305][T26516]  ? do_syscall_64+0x14d/0xf80
[  571.071339][T26516]  __vmalloc_node_range_noprof+0x132/0x1730
[  571.071399][T26516]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  571.071431][T26516]  ? __kasan_kmalloc+0x93/0xb0
[  571.071463][T26516]  vmalloc_user_noprof+0xad/0xe0
[  571.071487][T26516]  ? xskq_create+0xbf/0x170
[  571.071515][T26516]  xskq_create+0xbf/0x170
[  571.071545][T26516]  xsk_init_queue+0x8a/0xe0
[  571.071580][T26516]  xsk_setsockopt+0x54c/0x990
[  571.071609][T26516]  ? __pfx_xsk_setsockopt+0x10/0x10
[  571.071635][T26516]  ? __pfx_aa_sk_perm+0x10/0x10
[  571.071671][T26516]  ? aa_sock_opt_perm+0xff/0x1a0
[  571.071695][T26516]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  571.071720][T26516]  ? __pfx_xsk_setsockopt+0x10/0x10
[  571.071747][T26516]  do_sock_setsockopt+0x17c/0x1b0
[  571.071780][T26516]  __x64_sys_setsockopt+0x13d/0x1b0
[  571.071815][T26516]  do_syscall_64+0x14d/0xf80
[  571.071844][T26516]  ? trace_irq_disable+0x3b/0x150
[  571.071863][T26516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.071885][T26516]  ? clear_bhb_loop+0x40/0x90
[  571.071912][T26516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.071950][T26516] RIP: 0033:0x7f97dd79c819
[  571.071969][T26516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.071987][T26516] RSP: 002b:00007f97de680028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  571.072009][T26516] RAX: ffffffffffffffda RBX: 00007f97dda15fa0 RCX: 00007f97dd79c819
[  571.072023][T26516] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  571.072035][T26516] RBP: 00007f97dd832c91 R08: 0000000000000004 R09: 0000000000000000
[  571.072047][T26516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.072059][T26516] R13: 00007f97dda16038 R14: 00007f97dda15fa0 R15: 00007ffc4ec2d188
[  571.072092][T26516]  </TASK>
[  571.072105][T26516] Mem-Info:
[  571.368261][T26517] bond13: entered promiscuous mode
[  571.377618][T26517] 8021q: adding VLAN 0 to HW filter on device bond13
[  571.384770][T26529] netlink: 'syz.2.5613': attribute type 1 has an invalid length.
[  571.479484][T26516] active_anon:9027 inactive_anon:0 isolated_anon:0
[  571.479484][T26516]  active_file:2693 inactive_file:40525 isolated_file:0
[  571.479484][T26516]  unevictable:768 dirty:69 writeback:0
[  571.479484][T26516]  slab_reclaimable:13339 slab_unreclaimable:120221
[  571.479484][T26516]  mapped:31447 shmem:4619 pagetables:1382
[  571.479484][T26516]  sec_pagetables:0 bounce:0
[  571.479484][T26516]  kernel_misc_reclaimable:0
[  571.479484][T26516]  free:1279340 free_pcp:22453 free_cma:0
[  571.569042][T26516] Node 0 active_anon:38008kB inactive_anon:0kB active_file:10772kB inactive_file:161912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125788kB dirty:276kB writeback:0kB shmem:18840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15068kB pagetables:5260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  571.622170][T26516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  571.661991][T26516] Node 0 DMA free:15252kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:44kB free_cma:0kB
[  571.731453][T26516] lowmem_reserve[]: 0 2492 2493 2493 2493
[  571.737325][T26516] Node 0 DMA32 free:1221536kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37908kB inactive_anon:0kB active_file:10772kB inactive_file:161912kB unevictable:1536kB writepending:276kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:28652kB local_pcp:15464kB free_cma:0kB
[  571.762870][T26535] __nla_validate_parse: 5 callbacks suppressed
[  571.762921][T26535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5614'.
[  571.858367][T26516] lowmem_reserve[]: 0 0 0 0 0
[  571.891347][T26516] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  571.935454][T26516] lowmem_reserve[]: 0 0 0 0 0
[  571.940523][T26516] Node 1 Normal free:3880548kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60132kB local_pcp:27912kB free_cma:0kB
[  571.974093][T26516] lowmem_reserve[]: 0 0 0 0 0
[  571.979780][T26516] Node 0 DMA: 3*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 3*64kB (U) 3*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 15252kB
[  571.995987][T26516] Node 0 DMA32: 7886*4kB (U) 5757*8kB (UE) 3002*16kB (UME) 187*32kB (ME) 24*64kB (UME) 493*128kB (UME) 597*256kB (UM) 418*512kB (UME) 329*1024kB (UM) 157*2048kB (UM) 0*4096kB = 1221536kB
[  572.015710][T26516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  572.043680][T26547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5618'.
[  572.089926][T26547] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  572.097479][T26547] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  572.197863][T26516] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 11*16kB (UM) 10*32kB (UM) 9*64kB (UM) 8*128kB (UM) 6*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 944*4096kB (UM) = 3880548kB
[  572.221445][T26516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.233413][T26516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.243041][T26516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  572.263024][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  572.318829][T26516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  572.328444][T26516] 44606 total pagecache pages
[  572.346573][T26516] 0 pages in swap cache
[  572.357668][T26516] Free swap  = 124996kB
[  572.365170][T26516] Total swap = 124996kB
[  572.374007][T26516] 2097051 pages RAM
[  572.377848][T26516] 0 pages HighMem/MovableOnly
[  572.398838][T26516] 427077 pages reserved
[  572.403040][T26516] 0 pages cma reserved
[  572.509698][T26571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5627'.
[  572.581228][T26576] netlink: 'syz.0.5628': attribute type 2 has an invalid length.
[  572.599334][T26576] netlink: 'syz.0.5628': attribute type 2 has an invalid length.
[  572.721279][T26585] syzkaller0: entered promiscuous mode
[  572.737153][T26585] syzkaller0: entered allmulticast mode
[  572.980766][T26600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5636'.
[  573.022819][ T5842] block nbd7: Receive control failed (result -107)
[  573.048791][T26600] nbd7: detected capacity change from 0 to 127
[  573.076320][T25913] block nbd7: Dead connection, failed to find a fallback
[  573.086415][T25913] block nbd7: shutting down sockets
[  573.094113][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5629'.
[  573.103385][T25913] blk_print_req_error: 138 callbacks suppressed
[  573.103404][T25913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.119987][T25913] buffer_io_error: 138 callbacks suppressed
[  573.120004][T25913] Buffer I/O error on dev nbd7, logical block 0, async page read
[  573.134522][T25913] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.144744][T25913] Buffer I/O error on dev nbd7, logical block 1, async page read
[  573.165533][T25913] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.176230][T25913] Buffer I/O error on dev nbd7, logical block 2, async page read
[  573.184655][T25913] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.223884][T25913] Buffer I/O error on dev nbd7, logical block 3, async page read
[  573.234149][T25913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.279036][T25913] Buffer I/O error on dev nbd7, logical block 0, async page read
[  573.286903][T25913] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.316935][T25913] Buffer I/O error on dev nbd7, logical block 1, async page read
[  573.349004][T25913] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.370732][T26618] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5641'.
[  573.380448][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  573.391534][T25913] Buffer I/O error on dev nbd7, logical block 2, async page read
[  573.433190][T25913] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.455878][T25913] Buffer I/O error on dev nbd7, logical block 3, async page read
[  573.484344][T25913] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.519090][T25913] Buffer I/O error on dev nbd7, logical block 0, async page read
[  573.526941][T25913] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  573.558794][T25913] Buffer I/O error on dev nbd7, logical block 1, async page read
[  573.579744][T25913] ldm_validate_partition_table(): Disk read failed.
[  573.597257][T25913] Dev nbd7: unable to read RDB block 0
[  573.676877][T25913]  nbd7: unable to read partition table
[  573.704094][T26636] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5644'.
[  573.713153][T25913] ldm_validate_partition_table(): Disk read failed.
[  573.739299][T25913] Dev nbd7: unable to read RDB block 0
[  573.745425][T25913]  nbd7: unable to read partition table
[  573.968469][T26647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5650'.
[  574.353070][T26658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5652'.
[  574.385957][T26659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5652'.
[  574.490290][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  574.617309][T26677] netlink: 'syz.3.5657': attribute type 1 has an invalid length.
[  574.625302][T26677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.804421][T26687] netlink: 'syz.1.5661': attribute type 11 has an invalid length.
[  575.463527][T26730] bridge11: port 1(bond9) entered blocking state
[  575.470327][T26730] bridge11: port 1(bond9) entered disabled state
[  575.476868][T26730] bond9: entered allmulticast mode
[  575.484756][T26730] bond9: entered promiscuous mode
[  575.495282][T26729] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  575.610398][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  575.754319][T26752] lo speed is unknown, defaulting to 1000
[  575.871661][T26767] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20002
[  576.104464][T26772] syzkaller1: entered promiscuous mode
[  576.123059][T26772] syzkaller1: entered allmulticast mode
[  576.135735][T26776] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  576.359187][T26788] hsr_slave_1 (unregistering): left promiscuous mode
[  576.585859][T26816] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  576.739479][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  576.881520][T13427] lec:lec_start_xmit: lec0:No lecd attached
[  577.095881][T26840] __nla_validate_parse: 5 callbacks suppressed
[  577.095895][T26840] netlink: 294 bytes leftover after parsing attributes in process `syz.4.5701'.
[  577.111964][T26840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.243820][T26844] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5703'.
[  577.254970][T26844] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5703'.
[  577.859261][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  578.980003][   T86] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  579.415899][T26809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  579.731726][T26874] netlink: 'syz.2.5711': attribute type 10 has an invalid length.
[  579.756067][T26874] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  579.789072][T26874] batman_adv: batadv0: Adding interface: netdevsim0
[  579.798853][T26874] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  579.875382][T26874] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  579.951168][T26888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5715'.
[  579.994042][T26888] 
[  579.996434][T26888] ======================================================
[  580.003476][T26888] WARNING: possible circular locking dependency detected
[  580.010533][T26888] syzkaller #0 Not tainted
[  580.014969][T26888] ------------------------------------------------------
[  580.022019][T26888] syz.3.5715/26888 is trying to acquire lock:
[  580.028115][T26888] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  580.038005][T26888] 
[  580.038005][T26888] but task is already holding lock:
[  580.045395][T26888] ffff888068d42a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  580.055112][T26888] 
[  580.055112][T26888] which lock already depends on the new lock.
[  580.055112][T26888] 
[  580.065526][T26888] 
[  580.065526][T26888] the existing dependency chain (in reverse order) is:
[  580.074554][T26888] 
[  580.074554][T26888] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  580.082493][T26888]        lock_sock_nested+0x48/0x100
[  580.087814][T26888]        __inet6_bind+0x30c/0xf60
[  580.092884][T26888]        mptcp_bind+0x110/0x1d0
[  580.097773][T26888]        __sys_bind+0x2e3/0x410
[  580.102659][T26888]        __x64_sys_bind+0x7a/0x90
[  580.107715][T26888]        do_syscall_64+0x14d/0xf80
[  580.112867][T26888]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.119345][T26888] 
[  580.119345][T26888] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  580.127129][T26888]        lock_sock_nested+0x48/0x100
[  580.132442][T26888]        inet_shutdown+0x6a/0x390
[  580.137513][T26888]        nbd_mark_nsock_dead+0x2e9/0x560
[  580.143184][T26888]        recv_work+0x1c7f/0x1d90
[  580.148161][T26888]        process_scheduled_works+0xb6e/0x18c0
[  580.154268][T26888]        worker_thread+0xa53/0xfc0
[  580.159431][T26888]        kthread+0x388/0x470
[  580.164056][T26888]        ret_from_fork+0x51e/0xb90
[  580.169196][T26888]        ret_from_fork_asm+0x1a/0x30
[  580.174526][T26888] 
[  580.174526][T26888] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  580.182212][T26888]        __mutex_lock+0x19f/0x1300
[  580.187386][T26888]        nbd_queue_rq+0x37b/0x1100
[  580.192545][T26888]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  580.198658][T26888]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  580.205542][T26888]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  580.212079][T26888]        blk_mq_run_hw_queue+0x348/0x4f0
[  580.217812][T26888]        blk_mq_dispatch_list+0xd16/0xe10
[  580.223570][T26888]        blk_mq_flush_plug_list+0x48d/0x570
[  580.229501][T26888]        __blk_flush_plug+0x3ed/0x4d0
[  580.234912][T26888]        __submit_bio+0x28d/0x580
[  580.239990][T26888]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  580.246187][T26888]        block_read_full_folio+0x599/0x830
[  580.252044][T26888]        filemap_read_folio+0x137/0x3b0
[  580.257680][T26888]        do_read_cache_folio+0x358/0x590
[  580.263342][T26888]        read_part_sector+0xb6/0x2b0
[  580.268650][T26888]        adfspart_check_ICS+0xa5/0xa40
[  580.274170][T26888]        bdev_disk_changed+0x7ba/0x1550
[  580.279742][T26888]        blkdev_get_whole+0x380/0x510
[  580.285148][T26888]        bdev_open+0x31e/0xd30
[  580.289954][T26888]        blkdev_open+0x470/0x610
[  580.294916][T26888]        do_dentry_open+0x785/0x14e0
[  580.300231][T26888]        vfs_open+0x3b/0x340
[  580.304855][T26888]        path_openat+0x2e08/0x3860
[  580.309989][T26888]        do_file_open+0x23e/0x4a0
[  580.315028][T26888]        do_sys_openat2+0x113/0x200
[  580.320313][T26888]        __x64_sys_openat+0x138/0x170
[  580.325718][T26888]        do_syscall_64+0x14d/0xf80
[  580.330854][T26888]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.337291][T26888] 
[  580.337291][T26888] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  580.344531][T26888]        __mutex_lock+0x19f/0x1300
[  580.349669][T26888]        nbd_queue_rq+0xc6/0x1100
[  580.354720][T26888]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  580.360821][T26888]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  580.367699][T26888]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  580.374230][T26888]        blk_mq_run_hw_queue+0x348/0x4f0
[  580.379884][T26888]        blk_mq_dispatch_list+0xd16/0xe10
[  580.385630][T26888]        blk_mq_flush_plug_list+0x48d/0x570
[  580.391550][T26888]        __blk_flush_plug+0x3ed/0x4d0
[  580.396946][T26888]        __submit_bio+0x28d/0x580
[  580.401997][T26888]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  580.408874][T26888]        block_read_full_folio+0x599/0x830
[  580.414710][T26888]        filemap_read_folio+0x137/0x3b0
[  580.420278][T26888]        do_read_cache_folio+0x358/0x590
[  580.425933][T26888]        read_part_sector+0xb6/0x2b0
[  580.431239][T26888]        adfspart_check_ICS+0xa5/0xa40
[  580.436726][T26888]        bdev_disk_changed+0x7ba/0x1550
[  580.442297][T26888]        blkdev_get_whole+0x380/0x510
[  580.447697][T26888]        bdev_open+0x31e/0xd30
[  580.452483][T26888]        blkdev_open+0x470/0x610
[  580.457443][T26888]        do_dentry_open+0x785/0x14e0
[  580.462753][T26888]        vfs_open+0x3b/0x340
[  580.467377][T26888]        path_openat+0x2e08/0x3860
[  580.472510][T26888]        do_file_open+0x23e/0x4a0
[  580.477554][T26888]        do_sys_openat2+0x113/0x200
[  580.482782][T26888]        __x64_sys_openat+0x138/0x170
[  580.488178][T26888]        do_syscall_64+0x14d/0xf80
[  580.493313][T26888]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.499753][T26888] 
[  580.499753][T26888] -> #3 (set->srcu){.+.+}-{0:0}:
[  580.506905][T26888]        __synchronize_srcu+0xca/0x300
[  580.512390][T26888]        elevator_switch+0x1e8/0x7a0
[  580.517701][T26888]        elevator_change+0x2cc/0x450
[  580.523015][T26888]        elevator_set_default+0x36c/0x430
[  580.528763][T26888]        blk_register_queue+0x366/0x430
[  580.534354][T26888]        __add_disk+0x677/0xd50
[  580.539247][T26888]        add_disk_fwnode+0xfb/0x480
[  580.544477][T26888]        nbd_dev_add+0x72c/0xb50
[  580.549441][T26888]        nbd_init+0x168/0x1f0
[  580.554139][T26888]        do_one_initcall+0x250/0x8d0
[  580.559454][T26888]        do_initcall_level+0x104/0x190
[  580.564936][T26888]        do_initcalls+0x59/0xa0
[  580.569807][T26888]        kernel_init_freeable+0x2a6/0x3e0
[  580.575545][T26888]        kernel_init+0x1d/0x1d0
[  580.580426][T26888]        ret_from_fork+0x51e/0xb90
[  580.585576][T26888]        ret_from_fork_asm+0x1a/0x30
[  580.590890][T26888] 
[  580.590890][T26888] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  580.598737][T26888]        __mutex_lock+0x19f/0x1300
[  580.603883][T26888]        elevator_change+0x1b3/0x450
[  580.609221][T26888]        elevator_set_none+0xb5/0x140
[  580.614614][T26888]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  580.620974][T26888]        nbd_start_device+0x17f/0xb10
[  580.626367][T26888]        nbd_genl_connect+0x165b/0x1cf0
[  580.631937][T26888]        genl_family_rcv_msg_doit+0x22a/0x330
[  580.638028][T26888]        genl_rcv_msg+0x61c/0x7a0
[  580.643081][T26888]        netlink_rcv_skb+0x232/0x4b0
[  580.648389][T26888]        genl_rcv+0x28/0x40
[  580.652930][T26888]        netlink_unicast+0x80f/0x9b0
[  580.658238][T26888]        netlink_sendmsg+0x813/0xb40
[  580.663545][T26888]        ____sys_sendmsg+0x972/0x9f0
[  580.668851][T26888]        ___sys_sendmsg+0x2a5/0x360
[  580.674075][T26888]        __x64_sys_sendmsg+0x1bd/0x2a0
[  580.679560][T26888]        do_syscall_64+0x14d/0xf80
[  580.684698][T26888]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.691128][T26888] 
[  580.691128][T26888] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  580.699762][T26888]        blk_alloc_queue+0x546/0x680
[  580.705073][T26888]        __blk_mq_alloc_disk+0x197/0x390
[  580.710729][T26888]        nbd_dev_add+0x499/0xb50
[  580.715685][T26888]        nbd_init+0x168/0x1f0
[  580.720395][T26888]        do_one_initcall+0x250/0x8d0
[  580.725719][T26888]        do_initcall_level+0x104/0x190
[  580.731201][T26888]        do_initcalls+0x59/0xa0
[  580.736089][T26888]        kernel_init_freeable+0x2a6/0x3e0
[  580.741836][T26888]        kernel_init+0x1d/0x1d0
[  580.746712][T26888]        ret_from_fork+0x51e/0xb90
[  580.751849][T26888]        ret_from_fork_asm+0x1a/0x30
[  580.757166][T26888] 
[  580.757166][T26888] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  580.764397][T26888]        __lock_acquire+0x15a5/0x2cf0
[  580.769789][T26888]        lock_acquire+0xf0/0x2e0
[  580.774755][T26888]        fs_reclaim_acquire+0x71/0x100
[  580.780232][T26888]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  580.786576][T26888]        __alloc_skb+0x1d0/0x7d0
[  580.791531][T26888]        tcp_stream_alloc_skb+0x3f/0x580
[  580.797186][T26888]        tcp_connect+0x1527/0x5370
[  580.802325][T26888]        tcp_v4_connect+0x10f6/0x19b0
[  580.807738][T26888]        tcp_v6_connect+0xbbb/0x1b10
[  580.813038][T26888]        __inet_stream_connect+0x25a/0xdd0
[  580.818862][T26888]        inet_stream_connect+0x66/0xa0
[  580.824348][T26888]        __sys_connect+0x312/0x450
[  580.829478][T26888]        __x64_sys_connect+0x7a/0x90
[  580.834778][T26888]        do_syscall_64+0x14d/0xf80
[  580.839923][T26888]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.846360][T26888] 
[  580.846360][T26888] other info that might help us debug this:
[  580.846360][T26888] 
[  580.856597][T26888] Chain exists of:
[  580.856597][T26888]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  580.856597][T26888] 
[  580.869573][T26888]  Possible unsafe locking scenario:
[  580.869573][T26888] 
[  580.877035][T26888]        CPU0                    CPU1
[  580.882409][T26888]        ----                    ----
[  580.887781][T26888]   lock(k-sk_lock-AF_INET6);
[  580.892474][T26888]                                lock(sk_lock-AF_INET6);
[  580.899512][T26888]                                lock(k-sk_lock-AF_INET6);
[  580.906740][T26888]   lock(fs_reclaim);
[  580.910736][T26888] 
[  580.910736][T26888]  *** DEADLOCK ***
[  580.910736][T26888] 
[  580.918891][T26888] 1 lock held by syz.3.5715/26888:
[  580.924009][T26888]  #0: ffff888068d42a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  580.934143][T26888] 
[  580.934143][T26888] stack backtrace:
[  580.940049][T26888] CPU: 1 UID: 0 PID: 26888 Comm: syz.3.5715 Not tainted syzkaller #0 PREEMPT(full) 
[  580.940069][T26888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  580.940080][T26888] Call Trace:
[  580.940087][T26888]  <TASK>
[  580.940095][T26888]  dump_stack_lvl+0xe8/0x150
[  580.940122][T26888]  print_circular_bug+0x2e1/0x300
[  580.940153][T26888]  check_noncircular+0x12e/0x150
[  580.940183][T26888]  __lock_acquire+0x15a5/0x2cf0
[  580.940210][T26888]  ? inet_sk_rebuild_header+0x93/0x1da0
[  580.940239][T26888]  ? __lock_acquire+0x6b5/0x2cf0
[  580.940265][T26888]  lock_acquire+0xf0/0x2e0
[  580.940286][T26888]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  580.940307][T26888]  ? fib4_rule_action+0x8f/0x330
[  580.940331][T26888]  fs_reclaim_acquire+0x71/0x100
[  580.940366][T26888]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  580.940383][T26888]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  580.940403][T26888]  ? __alloc_skb+0x1d0/0x7d0
[  580.940434][T26888]  ? ipv4_default_advmss+0x20/0x340
[  580.940457][T26888]  __alloc_skb+0x1d0/0x7d0
[  580.940478][T26888]  tcp_stream_alloc_skb+0x3f/0x580
[  580.940501][T26888]  ? __asan_memset+0x22/0x50
[  580.940518][T26888]  tcp_connect+0x1527/0x5370
[  580.940541][T26888]  ? __lock_acquire+0x146e/0x2cf0
[  580.940572][T26888]  ? __pfx_tcp_connect+0x10/0x10
[  580.940618][T26888]  ? __asan_memset+0x22/0x50
[  580.940638][T26888]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  580.940656][T26888]  ? secure_tcp_seq_and_ts_off+0xf2/0x1d0
[  580.940681][T26888]  ? sk_setup_caps+0x9ef/0xc40
[  580.940704][T26888]  ? sk_setup_caps+0x29/0xc40
[  580.940727][T26888]  tcp_v4_connect+0x10f6/0x19b0
[  580.940764][T26888]  ? __pfx_tcp_v4_connect+0x10/0x10
[  580.940791][T26888]  ? aa_label_sk_perm+0x52b/0x6e0
[  580.940815][T26888]  ? tcp_v6_connect+0x62d/0x1b10
[  580.940851][T26888]  tcp_v6_connect+0xbbb/0x1b10
[  580.940869][T26888]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  580.940902][T26888]  ? __pfx_tcp_v6_connect+0x10/0x10
[  580.940925][T26888]  __inet_stream_connect+0x25a/0xdd0
[  580.940954][T26888]  ? do_raw_spin_lock+0x12b/0x2f0
[  580.940972][T26888]  ? __pfx___inet_stream_connect+0x10/0x10
[  580.940999][T26888]  ? inet_stream_connect+0x51/0xa0
[  580.941025][T26888]  ? __local_bh_enable_ip+0xd0/0x130
[  580.941051][T26888]  inet_stream_connect+0x66/0xa0
[  580.941077][T26888]  __sys_connect+0x312/0x450
[  580.941098][T26888]  ? __pfx___sys_connect+0x10/0x10
[  580.941124][T26888]  ? rcu_is_watching+0x15/0xb0
[  580.941153][T26888]  __x64_sys_connect+0x7a/0x90
[  580.941174][T26888]  do_syscall_64+0x14d/0xf80
[  580.941199][T26888]  ? trace_irq_disable+0x3b/0x150
[  580.941214][T26888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.941232][T26888]  ? clear_bhb_loop+0x40/0x90
[  580.941251][T26888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.941269][T26888] RIP: 0033:0x7f6b9db9c819
[  580.941285][T26888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  580.941301][T26888] RSP: 002b:00007f6b9e9fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  580.941319][T26888] RAX: ffffffffffffffda RBX: 00007f6b9de16090 RCX: 00007f6b9db9c819
[  580.941338][T26888] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000009
[  580.941349][T26888] RBP: 00007f6b9dc32c91 R08: 0000000000000000 R09: 0000000000000000
[  580.941360][T26888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  580.941371][T26888] R13: 00007f6b9de16128 R14: 00007f6b9de16090 R15: 00007ffe61a992e8
[  580.941392][T26888]  </TASK>
[  581.450097][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  581.888761][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  581.896900][    C0] lec:lec_tx_timeout: lec0
[  582.551369][   T86] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  583.273910][   T12] bond9: left allmulticast mode
[  583.279090][   T12] bridge0: port 1(bond9) entered disabled state
[  583.292649][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  583.469051][   T12] bond3 (unregistering): (slave bridge1): Releasing active interface
[  583.629306][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  583.659145][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  583.681005][   T12] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  583.689707][   T12] bridge5 (unregistering): left promiscuous mode
[  583.811284][   T12] bond0 (unregistering): Released all slaves
[  583.819818][   T12] bond1 (unregistering): Released all slaves
[  583.829496][   T12] bond2 (unregistering): Released all slaves
[  583.839746][   T12] bond3 (unregistering): Released all slaves
[  583.851244][   T12] bond4 (unregistering): Released all slaves
[  583.861529][   T12] bond5 (unregistering): Released all slaves
[  583.875364][   T12] bond6 (unregistering): Released all slaves
[  583.890449][   T12] bond7 (unregistering): Released all slaves
[  583.901133][   T12] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface
[  583.911354][   T12] bond8 (unregistering): Released all slaves
[  583.923314][   T12] bond9 (unregistering): Released all slaves
[  584.001046][   T12] : left promiscuous mode
[  584.040393][   T12] tipc: Disabling bearer <udp:syz2>
[  584.045761][   T12] tipc: Left network mode
[  584.445257][   T12] hsr_slave_0: left promiscuous mode
[  584.453044][   T12] veth1_vlan: left allmulticast mode
[  584.458578][   T12] veth0_macvtap: left allmulticast mode
[  584.464340][   T12] veth1_macvtap: left promiscuous mode
[  584.473301][   T12] veth0_macvtap: left promiscuous mode
[  584.479032][   T12] veth1_vlan: left promiscuous mode
[  584.770269][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  584.914603][   T12] IPVS: stop unused estimator thread 0...
[  585.869243][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  586.989194][   T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  588.089019][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  589.208953][  T150] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!